When learning accept mode is set to auto, and the action is set to rotate, when is the KB created and used? A. It is created every 24 hours and used for 24 hours. B. It is created every 24…
After adding a remote-access IPsec tunnel via the VPN wizard, an administrator needs to tune the IPsec policy parameters. Where is the correct place to tune the IPsec policy parameters in Cisco ASDM? A. IPsec user profile B. Crypto Map…
Upon receiving a digital certificate, what are three steps that a Cisco ASA will perform to authenticate the digital certificate? (Choose three.) A. The identity certificate validity period is verified against the system clock of the Cisco ASA. B. Identity…
To enable the Cisco ASA Host Scan with remediation capabilities, an administrator must have which two Cisco ASA licenses enabled on its security appliance? (Choose two.) A. Cisco AnyConnect Premium license B. Cisco AnyConnect Essentials license C. Cisco AnyConnect Mobile…
What is the default CX Management 0/0 IP address on a Cisco ASA 5512-X appliance? A. 192.168.1.1 B. 192.168.1.2 C. 192.168.1.3 D. 192.168.1.4 E. 192.168.1.5 F. 192.168.8.8
An ASA with an IPS module must be configured to drop traffic matching IPS signatures and block all traffic if the module fails. Which describes the correct configuration? A. Inline Mode, Permit Traffic B. Inline Mode, Close Traffic C. Promiscuous…
A new Cisco IPS device has been placed on the network without prior analysis. Which CLI command shows the most fired signature? A. Show statistics virtual-sensor B. Show event alert C. Show alert D. Show version
What CLI command configures IP-based access to restrict GUI and CLI access to a Cisco Email Security appliance’s administrative interface? A. adminaccessconfig B. sshconfig C. sslconfig D. ipaccessconfig
When attempting to tunnel FTP traffic through a stateful firewall that may be performing NAT or PAT, which type of VPN tunneling should be used to allow the VPN traffic through the stateful firewall? A. clientless SSL VPN B. IPsec…
Which command establishes a virtual console session to a CX module within a Cisco Adaptive Security Appliance? A. session 1 ip address B. session 2 ip address C. session 1 D. session ips console E. session cxsc console