Cisco Automating Cisco Security Solutions SAUTO Set 2

Which of the following statements is true regarding the aaa new-modelcommand? (Select the best answer.)

You have configured the password management feature for a tunnel group on an ASA. The ASA is using a Cisco Secure ACS RADIUS server for AAA authentication.
Which of the following actions will occur after a remote user with an expired password attempts to establish a VPN connection? (Select the best answer.)

You manage your company's Cisco devices by using Telnet. Your supervisor is concerned about eavesdropping over inband device management and has asked you to recommend a solution that would allow you to disable the Telnet servers on each device.
Which of the following are you most likely to recommend as a replacement? (Select the best answer.)

Which of the following is a reason to use the roundrobin assignment feature of dynamic PAT addresses? (Select the best answer.)

You are configuring manual NAT on a Cisco Firepower device.
Which of the following best describes the order in which the NAT rules will be processed? (Select the best answer.)

Which of the following is least likely to be considered a form of malware? (Select the best answer.)

Which of the following occurs when an IDS or IPS does not identify malicious traffic that enters the network? (Select the best answer.)

Which of the following private VLAN port types communicate only with promiscuous ports? (Select the best answer.)

Which of the following is the man-in-the-middle attack that is most likely to be used to cause a workstation to send traffic to a false gateway IP address? (Select the best answer.)

Which of the following is the best reason to enforce blacklisting by security zone on a Cisco device that uses the Security Intelligence IP Address Reputation feature? (Select the best answer.)