Refer to the exhibit. A network administrator is verifying the security configuration of an ASA. Which command produces the exhibited output? show switch vlan show interface ip brief show vlan…
When configuring interfaces on an ASA, which two pieces of information must be included? (Choose two.) group association FirePower version name security level access list service level Answers Explanation &…
What mechanism is used by an ASA device to allow inspected outbound traffic to return to the originating sender who is on an inside network? stateful packet inspection security zones…
Refer to the exhibit. Based on the security levels of the interfaces on the ASA, what statement correctly describes the flow of traffic allowed on the interfaces? Traffic that is…
In which two instances will traffic be denied as it crosses the ASA 5506-X device? (Choose two.) traffic originating from the inside network going to the outside network traffic originating…
What can be configured as part of a network object? IP address and mask source and destination MAC address upper layer protocol interface type Answers Explanation & Hints: There are…
Which license provides up to 50 IPsec VPN users on an ASA 5506-X device? the most commonly pre-installed Base license a purchased Base license a purchased Security Plus upgrade license…
What is the purpose of configuring an IP address on an ASA device in transparent mode? routing management NAT VPN connectivity Answers Explanation & Hints: An ASA device configured in…
What are three characteristics of the ASA routed mode? (Choose three.) This mode does not support VPNs, QoS, or DHCP Relay. The interfaces of the ASA separate Layer 3 networks…
Refer to the exhibit. What show command displays whether the securityk9 software is installed on the router and whether the EULA license has been activated? show running-config show version show…
When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the purpose of the crypto map command in interface configuration mode? to bind the…
What is needed to define interesting traffic in the creation of an IPsec tunnel? access list security associations transform set hashing algorithm Answers Explanation & Hints: In order to bring…
Consider the following configuration on a Cisco ASA: crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac What is the purpose of this command? to define only the allowed encryption algorithms to define…
Router R1 has configured ISAKMP policies numbered 1, 5, 9, and 203. Router R2 only has default policies. How will R1 attempt to negotiate the IKE Phase 1 ISAKMP tunnel…
Refer to the exhibit. A VPN tunnel is configured on the WAN between R1 and R2. On which R1 interface(s) would a crypto map be applied in order to create…
Refer to the exhibit. What HMAC algorithm is being used to provide data integrity? SHA MD5 DH AES Answers Explanation & Hints: Two popular algorithms that are used to ensure…
What type of traffic is supported by IPsec? IPsec supports all traffic permitted through an ACL. IPsec only supports unicast traffic. IPsec supports all IPv4 traffic. IPsec supports layer 2…
A site-to-site IPsec VPN is to be configured. Place the configuration steps in order.
What is a function of the GRE protocol? to configure the set of encryption and hashing algorithms that will be used to transform the data sent through the IPsec tunnel…
What takes place during IKE Phase 2 when establishing an IPsec VPN? IPsec security associations are exchanged. Traffic is exchanged between IPsec peers. ISAKMP security associations are exchanged. Interesting traffic…