NEW QUESTION 1
When configuring a new context on a Cisco ASA device, which command creates a domain for the context?

• A. domain config name
• B. domain-name
• C. changeto/domain name change
• D. domain context 2

Answer: B

NEW QUESTION 2
A network engineer is troubleshooting and configures the ASA logging level to debugging. The
logging-buffer is dominated by %ASA-6-305009 log messages. Which command suppresses those syslog messages while maintaining ability to troubleshoot?

• A. no logging buffered 305009
• B. message 305009 disable
• C. no message 305009 logging
• D. no logging message 305009

Answer: D

NEW QUESTION 3
An administrator installed a Cisco ASA that runs version 9.1. You are asked to configure the firewall
through Cisco ASDM.
When you attempt to connect to a Cisco ASA with a default configuration, which username and password grants you full access?

• A. admin / admin
• B. asaAdmin / (no password)
• C. It is not possible to use Cisco ASDM until a username and password are created via the usernameusernamepassword password CLI command.
• D. enable_15 / (no password)
• E. cisco / cisco

Answer: D

NEW QUESTION 4
A network administrator is creating an ASA-CX administrative user account with the following parameters:
- The user will be responsible for configuring security policies on networkdevices.
- The user needs read-write access to policies.
- The account has no more rights than necessary for the job. What role will the administrator assign to the user?

• A. Administrator
• B. Security administrator
• C. System administrator
• D. Root Administrator
• E. Exec administrator

Answer: B

NEW QUESTION 5
You moved your servers from physical to virtual infrastructure, how to defend it ?

• A. Cisco V
• B. Cisco ASA 1000V
• C. VXLAN
• D. VSG

Answer: BD

Explanation: Cisco VSG and the ASA 1000V provide complementary functionalities. The VSG provides virtual machine
context-aware and zone-based security capabilities. The ASA 1000V provides tenant edge security and default gateway functionalities. Together, they provide a trusted and comprehensive virtual and cloud security Portfolio.
From: https://www.cisco.com/c/en/us/products/switches/virtual-security-gateway/index.html

NEW QUESTION 6

Answer:

Explanation: 1) Click on Service Policy Rules, then Edit the default inspection rule.
2) Click on Rule Actions, then enable HTTP as shown here:

3) Click on Configure, then add as shown here:

4) Create the new map in ASDM like shown:

5) Edit the policy as shown:

6) Hit OK

NEW QUESTION 7
An engineer is adding devices to Cisco Prime Infrastructure using Discovery. Which protocol must be used when RTDM is processed?

• A. LLDP
• B. ARP
• C. OSPF
• D. BGP

Answer: B

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-0/user/guide/pi_ug/gettingstarted.html

NEW QUESTION 8
An engineering team is working diligently to achieve the fastest possible throughput on a Cisco ASA deployment within the data center without sacrificing high availability or flexibility. Which type of architecture accomplishes this goal?

• A. multiple mode, transparent contexts
• B. single mode, transparent contexts
• C. multiple mode, routed contexts
• D. single mode, routed contexts

Answer: C

NEW QUESTION 9
Which configuration on a switch would be unsuccessful in preventing a DHCP starvation attack?

• A. DHCP snooping
• B. Port security
• C. Source Guard
• D. Rate Limiting

Answer: C

NEW QUESTION 10
Which two voice protocols can the Cisco ASA inspect? (Choose two.)

• A. MGCP
• B. IAX
• C. Skype
• D. CTIQBE

Answer: AD

NEW QUESTION 11
Where in the Cisco ASA appliance CLI are Active/Active Failover configuration parameters configured?

• A. admin context
• B. customer context
• C. system execution space
• D. within the system execution space and admin context
• E. within each customer context and admin context

Answer: C

NEW QUESTION 12
Which two options are two purposes of the packet-tracer command? (Choose two.)

• A. to filter and monitor ingress traffic to a switch
• B. to configure an interface-specific packet trace
• C. to inject virtual packets into the data path
• D. to debug packet drops in a production network
• E. to correct dropped packets in a production network

Answer: CD

NEW QUESTION 13
When a Cisco ASA is configured in multicontext mode, which command is used to change between
contexts?

• A. changeto config context
• B. changeto context
• C. changeto/config context change
• D. changeto/config context 2

Answer: B

NEW QUESTION 14
Which two web browsers are supported for the Cisco ISE GUI? (Choose two.)

• A. HTTPS-enabled Mozilla Firefox version 3.x
• B. Netscape Navigator version 9
• C. Microsoft Internet Explorer version 8 in Internet Explorer 8-only mode
• D. Microsoft Internet Explorer version 8 in all Internet Explorer modes
• E. Google Chrome (all versions)

Answer: AC

NEW QUESTION 15
Which three statements about transparent firewall are true? ( Choose three)

• A. Transparent firewall works at Layer 2
• B. Both interfaces must be configured with private IP Addresses
• C. It can have only a management IP address
• D. It does not support dynamic routing protocols
• E. It only support PAT

Answer: ACD

NEW QUESTION 16
A web server has been configured to operate on port 1521. The web server traffic is passing through an ASA with default application inspection configured. Which application inspection affects the web server traffic?

• A. HTTP
• B. MSCP
• C. HTTPS
• D. SQL *Net

Answer: D

NEW QUESTION 17
In which two modes is zone-based firewall high availability available? (Choose two.)

• A. IPv4 only
• B. IPv6 only
• C. IPv4 and IPv6
• D. routed mode only
• E. transparent mode only
• F. both transparent and routed modes

Answer: CD

NEW QUESTION 18
DRAG DROP
Drag and drop the Cisco Prime Security Manager available reports on the left onto the correct report examples on the right.

Answer:

Explanation:

NEW QUESTION 19



In your role as network security administrator, you have installed syslog server software on a server
whose IP address is 10.10.2.40. According to the exhibits, why isn't the syslog server receiving any syslog messages?

• A. Logging is not enabled globally on the Cisco ASA.
• B. The syslog server has failed.
• C. There have not been any events with a severity level of seven.
• D. The Cisco ASA is not configured to log messages to the syslog server at that IP address.

Answer: B

Explanation: By process of elimination, we know that the other answers choices are not correct so that only leaves us with the server must have failed. We can see from the following screen shots, that events are being generated with severity level of debugging and below, The 10.10.2.40 IP address has been configured as a syslog server, and that logging has been enabled globally: