Cisco Implementing Cisco Edge Network Security Solutions Set 2

changeto config context ✘ changeto context ✘ changeto/config context change ✘ changeto/config context 2 ✔

It provides NAT policies to existing clients that connect from a new switch port. ✘ It can update shared policies even when the NAT server is offline. ✘ It enables NAT policy discovery as it updates shared polices. ✘ It enables NAT policy rediscovery while leaving existing shared polices unchanged. ✔

It is replaced by the Cisco AIP-SSM home page. ✘ It must reconnect to the NAT policies database. ✘ The administrator can manually update the page. ✘ It displays a new Intrusion Prevention panel. ✔

Cisco ASDM ✘ Cisco CP Express ✘ Cisco ASA 5500 ✘ Cisco CP ✔

It provides basic device management for large-scale deployments. ✘ It provides a GUI for configuring IPS sensors and security modules. ✘ It enables communication with Cisco ASA devices that have no administrative access. ✘ It provides greater security than simple ACLs. ✔

By enabling ARP inspection; however, it cannot be controlled by an ACL ✘ By enabling ARP inspection or by configuring ACLs ✘ By configuring ACLs; however, ARP inspection is not supported ✘ By configuring NAT and ARP inspection ✔

mitigating man-in-the-middle attacks ✘ using multipacket inspection across all protocols to identify vulnerability-based attacks and to thwart attacks that hide within a data stream ✘ detecting and preventing MAC address spoofing in switched environments ✘ identifying Layer 2 ARP attacks ✔

1024 bytes ✘ 1518 bytes ✘ 2156 bytes ✘ 9216 bytes ✔

All input traffic on the inside interface is denied by the global ACL. ✘ All input and output traffic on the outside interface is denied by the global ACL. ✘ ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside. ✘ HTTP inspection is enabled in the global policy. ✔ Traffic between two hosts connected to the same interface is permitted. ✔

match any ✘ match default-inspection-traffic ✘ match access-list ✘ match port ✔ match class-default ✔