1.
You are the administrator of a Cisco ASA 9.0 firewall and have been tasked with ensuring that the Firewall Admins Active Directory group has full access to the ASA configuration. The Firewall Operators Active Directory group should have a more limited level of access. Which statement describes how to set these access levels?
2.
A router is being enabled for SSH command line access. The following steps have been taken:
- The vty ports have been configured with transport input SSH and login local.
- Local user accounts have been created.
- The enable password has been configured.
What additional step must be taken if users receive a 'connection refused' error when attempting to access the router via SSH?
3.
An administrator installed a Cisco ASA that runs version 9.1. You are asked to configure the firewall through Cisco ASDM. When you attempt to connect to a Cisco ASA with a default configuration, which username and password grants you full access?
4.
Your company is replacing a high-availability pair of Cisco ASA 5550 firewalls with the newer Cisco ASA 5555-X models. Due to budget constraints, one Cisco ASA 5550 will be replaced at a time. Which statement about the minimum requirements to set up stateful failover between these two firewalls is true?
5.
You are the administrator of a multicontext transparent-mode Cisco ASA that uses a shared interface that belongs to more than one context. Because the same interface will be used within all three contexts, which statement describes how you will ensure that return traffic will reach the correct context?
6.
You have installed a web server on a private network. Which type of NAT must you implement to enable access to the web server for public Internet users?
7.
Which type of object group will allow configuration for both TCP 80 and TCP 443?
8.
When you configure a Cisco firewall in multiple context mode, where do you allocate interfaces?
9.
At which layer does Dynamic ARP Inspection validate packets?
10.
Which feature can suppress packet flooding in a network?