What is the goal of network penetration testing? determining the feasibility and the potential consequences of a successful attack detecting potential weaknesses in systems detecting weak passwords detecting configuration changes…
What is the function of a policy map configuration when an ASA firewall is being configured? binding class maps with actions binding a service policy to an interface identifying interesting…
Refer to the exhibit. What kind of NAT is configured on the ASA device? static NAT dynamic PAT dynamic NAT Twice NAT Answers Explanation & Hints: From the configuration, the…
Refer to the exhibit. A network administrator is configuring the security level for the ASA. Which statement describes the default result if the administrator tries to assign the Inside interface…
What interface configuration command is used on an ASA to request an IP address from an upstream DSL device? ip address ip-address netmask ip address pppoe ip address dhcp setroute…
Refer to the exhibit. A network administrator is verifying the security configuration of an ASA. Which command produces the exhibited output? show switch vlan show interface ip brief show vlan…
When configuring interfaces on an ASA, which two pieces of information must be included? (Choose two.) group association FirePower version name security level access list service level Answers Explanation &…
What mechanism is used by an ASA device to allow inspected outbound traffic to return to the originating sender who is on an inside network? stateful packet inspection security zones…
Refer to the exhibit. Based on the security levels of the interfaces on the ASA, what statement correctly describes the flow of traffic allowed on the interfaces? Traffic that is…
In which two instances will traffic be denied as it crosses the ASA 5506-X device? (Choose two.) traffic originating from the inside network going to the outside network traffic originating…
What can be configured as part of a network object? IP address and mask source and destination MAC address upper layer protocol interface type Answers Explanation & Hints: There are…
Which license provides up to 50 IPsec VPN users on an ASA 5506-X device? the most commonly pre-installed Base license a purchased Base license a purchased Security Plus upgrade license…
What is the purpose of configuring an IP address on an ASA device in transparent mode? routing management NAT VPN connectivity Answers Explanation & Hints: An ASA device configured in…
What are three characteristics of the ASA routed mode? (Choose three.) This mode does not support VPNs, QoS, or DHCP Relay. The interfaces of the ASA separate Layer 3 networks…
Refer to the exhibit. What show command displays whether the securityk9 software is installed on the router and whether the EULA license has been activated? show running-config show version show…
When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the purpose of the crypto map command in interface configuration mode? to bind the…
What is needed to define interesting traffic in the creation of an IPsec tunnel? access list security associations transform set hashing algorithm Answers Explanation & Hints: In order to bring…
Consider the following configuration on a Cisco ASA: crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac What is the purpose of this command? to define only the allowed encryption algorithms to define…
Router R1 has configured ISAKMP policies numbered 1, 5, 9, and 203. Router R2 only has default policies. How will R1 attempt to negotiate the IKE Phase 1 ISAKMP tunnel…
Refer to the exhibit. A VPN tunnel is configured on the WAN between R1 and R2. On which R1 interface(s) would a crypto map be applied in order to create…