Ccna Security Chapater 9

Front 1

Which three security features do ASA models 5505 and 5510 support by default? (Choose three.)

Back 1

stateful firewall

intrusion prevention system
VPN concentrator

Front 2

Refer to the exhibit. Two types of VLAN interfaces were configured on an ASA 5505 with a Base license. The administrator wants to configure a third VLAN interface with limited functionality. Which action should be taken by the administrator to configure the third interface?

Back 2

the administrator must enter the no forward interface vlan command before the nameif command on the third interface.

Front 3

When the ASA recognizes that the incoming packets are part of an already established connection, which three fast path tasks are executed? (Choose three.)

Back 3

performing TCP sequence number checks
adjusting layer 3 and layer 4 headers

performing IP checksum verification

Front 4

Refer to the exhibit. What will be displayed in the output of the show running-config objectcommand after the exhibited configuration commands are entered on an ASA 5505?

Back 4

range 192.168.1.10 192.168.1.20

The show running-config object command is used to display or verify the IP address/mask pair within the object. There can only be one statement in the network object. Entering a second IP address/mask pair will replace the existing configuration.

Front 5

Refer to the exhibit. An administrator has entered the indicated commands on an ASA 5505. Based on the information presented, what type of remote access VPN has the administrator configured?

Back 5

a clientless SSL VPN via a web browser

Front 6

Which three wizards are included in Cisco ASDM 6.4? (Choose three.)

Back 6

VPN wizard
High Availability and Scalability wizard

Startup wizard

Front 7

A network engineer is using a Cisco ASA as a proxy device to provide remote secure access to a company web server. What technology is being used?

Back 7

Cisco AnyConnect Secure Mobility Client with SSL

Front 8

Refer to the exhibit. Which three sets of configuration commands were entered on the ASA 5505? (Choose three.)

Back 8

interface vlan 2 nameif outside

security-level 0

ip address 209.165.200.226 255.255.255.248

route outside 0.0.0.0 0.0.0.0 209.165.200.225

interface e0/0switchport access vlan 2no shutexit

Front 9

Which statement describes the function provided to a network administrator who uses the Cisco Adaptive Security Device Manager (ASDM) GUI that runs as a Java Web Start application?

Back 9

The administrator can connect to and manage a single ASA device

Front 10

Refer to the exhibit. A network administrator is configuring an object group on an ASA device. Which configuration keyword should be used after the object group nameSERVICE1?

Back 10

TCP
Because this is a service object group, the keyword should indicate which protocol is used. The options are tcp, udp, tcp-udp, icmp, and icmpv6. The subsequent commands indicate that the services in the group are WWW, FTP, and SMTP. Because all of these protocols use TCP, the keyword in the service object group should be tcp.

Front 11

Refer to the exhibit. An administrator has configured an ASA 5505 as indicated but is still unable to ping the inside interface from an inside host. What is the cause of this problem?

Back 11

The no shutdown command should be entered on interface Ethernet 0/1.

Front 12

What command defines a DHCP pool that uses the maximum number of DHCP client addresses available on an ASA 5505 that is using the Base license?

Back 12

CCNAS-ASA(config)# dhcpd address 192.168.1.25-192.168.1.56 inside

Front 13

Refer to the exhibit. According to the command output, which three statements are true about the DHCP options entered on the ASA 5505? (Choose three.)

Back 13

..........

Front 14

Sales representatives of an organization use computers in hotel business centers to occasionally access corporate e-mail and the inventory database. What would be the best VPN solution to implement on an ASA to support these users?

Back 14

clientless SSL VPN using a web browser

Front 15

What is a characteristic of ASA security levels?​

Back 15

An ACL needs to be configured to explicitly permit traffic from an interface with a lower security level to an interface with a higher security level.

Front 16

Refer to the exhibit. A network administrator is configuring PAT on an ASA device to enable internal workstations to access the Internet. Which configuration command should be used next?

Back 16

nat (inside,outside) dynamic interface

Front 17

Refer to the exhibit. A network administrator has configured NAT on an ASA device. What type of NAT is used?

Back 17

inside NAT

NAT can be deployed on an ASA using one of these methods:inside NAT - when a host from a higher-security interface has traffic destined for a lower-security interface and the ASA translates the internal host address to a global addressoutside NAT - when traffic from a lower-security interface destined for a host on the higher-security interface is translatedbidirectional NAT – when both inside NAT and outside NAT are used together

Front 18

Which three types of remote access VPNs are supported on ASA devices? (Choose three.)

Back 18

IPsec (IKEv1) VPN using the Cisco VPN Client

Clientless SSL VPN using a web browser

SSL or IPsec (IKEv2) VPN using the Cisco AnyConnect Client

Front 19

Which two statements are true about ASA standard ACLs? (Choose two.)​

Back 19

They are typically only used for OSPF routes.
They identify only the destination IP address.

Front 20

What is the purpose of the webtype ACLs in an ASA?

Back 20

to filter traffic for clientless SSL VPN users

Front 21

Which option lists the four steps to configure the Modular Policy Framework on an ASA?

Back 21

1) Configure extended ACLs to identify specific granular traffic. This step may be optional.

2) Configure the class map to define interesting traffic.

3) Configure a policy map to apply actions to the identified traffic.

4) Configure a service policy to identify which interface should be activated for the service.

Front 22

Which Cisco VPN solution provides limited access to internal network resources by utilizing a Cisco ASA and provides browser-based access only?

Back 22

clientless SSL VPN

Front 23

Refer to the exhibit. The indicated window has appeared in the web browser of a remote user. What is the cause of this message?

Back 23

The user has logged out of a clientless SSL VPN session.

Front 24

Which option lists the ASA adaptive security algorithm session management tasks in the correct order?

Back 24

1) performing the access list checks

2) performing route lookups

3) allocating NAT translations (xlates)

4) establishing sessions in the "fast path"

Front 25

Which three components must be configured when implementing a clientless SSL VPN on an ASA 5505 device? (Choose three.)

Back 25

connection profile name
bookmark lists
group policy

Front 26

Steps to configure a clientless SSL VPN include the following:

Back 26

Configure the SSL VPN interface.Configure a connection profile name for the connection and identify the interface to which outside users will connect.If the default certificate is not going to be used, select the third-party certificate to connect clients.Configure user authentication.Create a group policy.Configure a bookmark list of URLs to be used in the clientless SSL VPN web portal.