Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) Set 1

inspect ✘ sysopt connection ✘ tcp-options ✘ parameters ✔ set connection advanced-options ✔

ARP ✘ BPDU ✘ CDP ✘ OSPF multicasts ✔ DHCP ✔

debugging ✘ informational ✘ alerts ✘ emergencies ✔ errors ✔

The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco ASA. ✘ The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticateitself to the administrator. ✘ The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself tothe administrator.

  ✘ The Cisco ASA and the administrator use a mutual password to authenticate each other. ✔ The Cisco ASA authenticates itself to the administrator using a one-time password. ✔

The Cisco ASA generates system message 106023 for each denied packet when a deny ACE is configured. ✘ The Cisco ASA generates system message 106023 for each packet that matched an ACE. ✘ The Cisco ASA generates system message 106100 only for the first packet that matched an ACE. ✘ The Cisco ASA generates system message 106100 for each packet that matched an ACE. ✔ No ACL logging is enabled by default. ✔

uRPF ✘ TCP intercept ✘ botnet traffic filter ✘ scanning threat detection ✔ IPS (IP audit) ✔

1 ✘ 2 ✘ 1 failover group per configured security context ✘ 2 failover groups per configured security context ✔

Create a new class map. ✘ Create a new policy map and apply actions to the traffic classes. ✘ Create a new service policy rule. ✘ Create the ACLs to be referenced by any of the new class maps. ✔ Disable the default global inspection policy. ✔

security contexts ✘ stateless active/standby failover ✘ transparent firewall ✘ threat detection ✔ traffic shaping ✔

interface ✘ all ✘ auto ✘ global ✔ any ✔