We're so confident of our products that we provide no hassle product exchange.
Cisco 642-617 Exam Overview:
| Certification Vendor: | Cisco |
|---|---|
| Exam Name: | Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0) |
| Exam Number: | 642-617 |
| Exam Duration: | 90 minutes |
| Available Languages: | English |
| Related Certifications: | CCNP Security CCSP (legacy) |
| Passing Score: | Cisco does not publicly disclose passing scores |
| Certificate Validity Period: | Retired (no longer active certification exam) |
| Exam Format: | Multiple response, Troubleshooting scenarios, Simulations (simlets), Multiple choice |
| Exam Price: | $250 USD (historical; no longer actively sold) |
| Real Exam Qty: | Approximately 55–65 (varies) |
| Recommended Training: | Cisco ASA Firewall Training (Legacy Cisco Learning Network) |
| Exam Registration: | Cisco Certification Exam Registration |
| Sample Questions: | Cisco 642-617 Sample Questions |
| Exam Way: | Proctored exam at Pearson VUE testing centers or online proctoring (when available for Cisco exams historically) |
| Pre Condition: | No formal prerequisites; CCNA-level networking knowledge recommended. This exam is part of legacy CCNP Security certification track. |
| Official Syllabus URL: | https://www.cisco.com/c/en/us/training-events/training-certifications/exams.html |
Cisco 642-617 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| VPN Configuration | - Remote access VPN concepts - IKEv1/IKEv2 fundamentals - IPsec site-to-site VPN |
| Firewall Policy and Traffic Control | - Object groups and policy management - Access Control Lists (ACLs) - Security levels and interface configuration |
| Advanced Firewall Features | - High availability (failover) - Application inspection and policy maps - Threat detection and logging |
| Management and Troubleshooting | - ASDM and CLI management - Packet tracing and debugging tools - System monitoring and logging |
| Cisco ASA Firewall Fundamentals | - ASA architecture and operating modes - Initial device setup and basic configuration |
| Network Address Translation (NAT) | - NAT rule processing order - PAT (Port Address Translation) - Static NAT and Dynamic NAT |
Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0) Sample Questions:
Refer to the exhibits. Which five options should be entered into the five fields in the Cisco
ASDM Add Static Policy NAT Rule screen? (Choose five.)
access-list POLICY_NAT_ACL extended permit ip host 172.16.0.10 10.0.1.0
255.255.255.0 static (dmz,outside) 192.168.2.10 access-list POLICY_NAT_ACL
- A. 172.16.0.10 = Original Source
- B. outside = Original Interface
- C. 192.168.2.10 = Original Source
- D. 192.168.2.10 = Translated Use IP Address
- E. outside = Translated Interface
- F. 192.168.2.10 = Original Destination
- G. 10.0.1.0/24 = Original Destination
- H. 172.16.0.10 = Translated Use IP Address
- I. dmz = Translated Interface
- J. dmz = Original Interface
Correct Answer: A,D,E,G,J 🗳️
Which Cisco ASA feature enables the ASA to do these two things?
1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request.
2) When the Cisco ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.
- A. botnet traffic filter
- B. TCP normalize
- C. TCP intercept
- D. TCP state bypass
- E. basic threat detection
- F. advanced threat detection
Correct Answer: C 🗳️
Refer to the exhibit.
Which two statements about the class maps are true? (Choose two.)
- A. These class maps are all type inspect http class maps.
- B. These class maps are referenced within the global policy by default for HTTP inspection.
- C. These class maps are Layer 3/4 class maps.
- D. These class maps classify traffic using regular expressions.
- E. These class maps are used within the inspection_default class map for matching the default inspection traffic.
Correct Answer: A,E 🗳️
A Cisco ASA requires an additional feature license to enable which feature?
- A. botnet traffic filtering
- B. TCP normalizer
- C. transparent firewall
- D. cut-thru proxy
- E. threat detection
Correct Answer: A 🗳️
By default, how does the Cisco ASA authenticate itself to the Cisco ASDM users?
- A. The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticate itself to the administrator
- B. The Cisco ASA authenticates itself to the administrator using a one-time password.
- C. The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco AS
- D. The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself to the administrator.
- E. The Cisco ASA and the administrator use a mutual password to authenticate each other.
Correct Answer: D 🗳️
By Marlon
