Chapter 9

1. 1The ASA device can be configured using either the [blank_start]GUI[blank_end] or the command-line interface.

   1. AGUI
2. 2What must be configured on a Cisco ASA device to support local authentication?

   1. Athe IP address of the RADIUS or TACACS+ server
   2. BAAA
   3. Cencrypted passwords
   4. DRSA keys
3. 3What is needed to allow specific traffic that is sourced on the outside network of an ASA firewall to reach an internal network?

   1. AACL
   2. BNAT
   3. Cdynamic routing protocols
   4. Doutside security zone level 0
4. 4Which type of NAT would be used on an ASA where 10.0.1.0/24 inside addresses are to be translated only if traffic from these addresses is destined for the 198.133.219.0/24 network?

   1. Adynamic NAT
   2. Bstatic NAT
   3. Cdynamic PAT
   4. Dpolicy NAT
5. 5What is a difference between ASA IPv4 ACLs and IOS IPv4 ACLs?

   1. AASA ACLs are always named, whereas IOS ACLs are always numbered.
   2. BMultiple ASA ACLs can be applied on an interface in the ingress direction, whereas only one IOS ACL can be applied.
   3. CASA ACLs use the subnet mask in defining a network, whereas IOS ACLs use the wildcard mask.
   4. DASA ACLs do not have an implicit deny any at the end, whereas IOS ACLs do.
6. 6Which statement is true about ASA CLI and IOS CLI commands?

   1. AThe show ip interface brief command is valid for both CLIs
   2. BThe ASA CLI does not recognize the write erase command, but the IOS CLI does.
   3. CBoth CLIs recognize the Tab key to complete a partial command.
   4. DOnly the ASA CLI requires the use of Ctrl-C to interrupt show commands.
7. 7What is the purpose of configuring an IP address on an ASA device in transparent mode?

   1. Arouting
   2. Bmanagement
   3. CNAT
   4. DVPN connectivity
8. 8What is one of the drawbacks to using transparent mode operation on an ASA device?

   1. Ano support for QoS
   2. Bno support for IP addressing
   3. Cno support for management
   4. Dno support for using an ASA as a Layer 2 switch
9. 9What command defines a DHCP pool that uses the maximum number of DHCP client addresses available on an ASA 5505 that is using the Base license?

   1. Adhcpd address 192.168.1.20-192.168.1.50 inside
   2. Bdhcpd address 192.168.1.10-192.168.1.100 inside
   3. Cdhcpd address 192.168.1.25-192.168.1.56 inside
   4. Ddhcpd address 192.168.1.30-192.168.1.79 inside
10. 10A network administrator is working on the implementation of the Cisco Modular Policy Framework on an ASA device. The administrator issues a clear service-policy command. What is the effect after this command is entered?

    1. AAll class map configurations are removed.
    2. BAll service policy statistics data are removed.
    3. CAll service policies are removed.
    4. DAll policy map configurations are removed.

11. 11Which object or object group is required to implement NAT on an ASA 5505 device?

    1. Aservice object
    2. Bprotocol object group
    3. Cnetwork object group
    4. Dnetwork object
12. 12What function is performed by the class maps configuration object in the Cisco modular policy framework?

    1. Aidentifying interesting traffic
    2. Bapplying a policy to an interface
    3. Crestricting traffic through an interface
    4. Dapplying a policy to interesting traffic
13. 13Where is an IP address configured on an ASA 5505 device?

    1. Aphysical Layer 3 interface
    2. BSVI interface
    3. CVTY lines
    4. Dphysical Layer 2 interface
14. 14Which statement describes a difference between the Cisco ASA IOS CLI feature and the router IOS CLI feature?

    1. AASA uses the ? command whereas a router uses the help command to receive help on a brief description and the syntax of a command.
    2. BTo complete a partially typed command, ASA uses the Ctrl+Tab key combination whereas a router uses the Tab key.
    3. CTo use a show command in a general configuration mode, ASA can use the command directly whereas a router will need to enter the do command before issuing the show command.
    4. DTo indicate the CLI EXEC mode, ASA uses the % symbol whereas a router uses the # symbol.
15. 15What is the purpose of the webtype ACLs in an ASA?

    1. Ato filter traffic for clientless SSL VPN users
    2. Bto restrict traffic that is destined to an ASDM
    3. Cto monitor return traffic that is in response to web server requests that are initiated from the inside interface
    4. Dto inspect outbound traffic headed towards certain web sites
16. 16What is a characteristic of ASA security levels?

    1. AEach operational interface must have a name and be assigned a security level from 0 to 200.
    2. BAn ACL needs to be configured to explicitly permit traffic from an interface with a lower security level to an interface with a higher security level.
    3. CThe lower the security level on an interface, the more trusted the interface.
    4. DInbound traffic is identified as the traffic moving from an interface with a higher security level to an interface with a lower security level.

Descripción

ITELEC Test sobre Chapter 9, creado por K eations el 14/12/2018.

Autor

K eations

Idioma

English

Visitas

0

Etiquetas

itelec

Valoración

Aún sin valoraciones

Valora este test

Valora este test

Más sobre Cisco ASA Firewall Configuration