Which action is considered a best practice for the Cisco ASA firewall?
A. Use threat detection to determine attacks
B. Disable the enable password
C. Disable console logging
D. Enable ICMP permit to monitor the Cisco ASA interfaces
E. Enable logging debug-trace to send debugs to the syslog server
Answer C
https://tools.cisco.com/security/center/resources/firewall_best_practices#81
Vadim is correct, Cisco website has specified best practice is to disable console logging so the answer should be C
Correct answer is C.
Best practice: Ensure console logging is disabled or set to critical. Although useful for troubleshooting from the console port, it is possible that excessive log messages on the console could make it impossible to manage the device, even from the console.
Command:
no logging console
– or –
logging console critical