Экономика

When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the purpose
of the crypto map command in interface configuration mode?
Select one:
to bind the interface to the ISAKMP policy
to identify the location of the peer
to create the ISAKMP policy
to create the crypto map
Which type of security policy includes defined rules and procedures for creating and maintaining
password security?
Select one:
end-user policy
acceptable use policy
technical policy
governing policy
What type of network security test can detect and report changes made to network systems?
Select one:
vulnerability scanning
integrity checking
penetration testing
network scanning
What component of a security policy explicitly defines the type of traffic allowed on a network and
what users are allowed and not allowed to do?
Select one:
identification and authentication policies
remote access policies
acceptable use policies
password policies
Which solution allows workers to telecommute effectively and securely?
Select one:
dial-up connection
DSL connection
remote-access VPN
site-to-site VPN
In the prosecution of an individual, what answers the question of why the individual committed an
illegal act?
Select one:
means
opportunity
motive
complexity
True or False?
Cisco AnyConnect Secure Mobility Client can be configured to automatically create a VPN
connection that remains up until the user logs out or the session timer expires.
Select one:
true
false
What is the purpose of configuring an IP address on an ASA device in transparent mode?
Select one:
management
routing
VPN connectivity
NAT
Select one:
integrity checking
penetration testing
network scanning
When testing the tunnel to verify a site-to-site VPN connection between an ISR and an ASA,
why does an initial ping fail, but subsequent pings succeed?
Select one:
The ASA and ISR must negotiate the tunnel parameters.
The ISR has an incorrect configuration.
The first ping is not considered interesting traffic.
The connection was not successful.
What is the most trustworthy security level that can be configured on an ASA device interface?
Select one:
100
50
255
What type of security test uses simulated attacks to determine possible consequences of a real
threat?
Select one:
penetration testing
network scanning
integrity checking
In the prosecution of an individual, what answers the question of why the individual committed
an illegal act?
Select one:
opportunity
complexity
motive
means
What step must be taken before investigators can determine if data tampering has occurred?
Select one:
Flush the system memory.
Reboot the machine.
Create a drive image of the original hard drive.
Photograph the equipment that is involved.
How is success measured in the implementation of a security awareness program throughout a

large organization?
Select one:
a reduction of unauthorized actions by insiders
a noticeable increase in attendance at educational programs
a reduction of logged attacks by outsiders
a noticeable increase in the access and use of procedure documents
Select one:
routing
NAT
VPN connectivity
management
Which three detailed documents are used by security staff for an organization to implement the
security policies? (Choose three.)
Select one or more:
standards
procedures
risk assessment
best practices
asset inventory
guidelines
By default, which type of certificate is used by an ASA 5505 for client authentication?
Select one:
third-party certificate
purchased certificate
No certificates are used by default. The type must be specified.
self-signed certificate
When ASDM is used to configure the ASA for a site-to-site VPN, which address is entered in the
Peer Device Identification window?
Select one:
the IP address of the peer
the MAC address of the outbound interface
the IP address of the outbound interface
the MAC address of the peer
Which network security tool can detect open TCP and UDP ports on most versions of Microsoft
Windows?
Select one:
SuperScan
Nmap
L0phtcrack
Zenmap
What type of security test uses simulated attacks to determine possible consequences of a real
threat?
Select one:
penetration testing
network scanning
integrity checking
Which ASDM wizard would allow a network administrator to configure an ASA for NAT/PAT?
Select one:
VPN wizards
ASDM Identify Certificate Wizard‹
High Availability and Scalability Wizard
Startup Wizard
Select one:
Which executive position is responsible for all IT and computer systems that support enterprise
goals?
Select one:
Chief Security Officer
Chief Executive Officer
Chief Information Officer
Chief Technology Officer
Select one:

Refer to the exhibit. A network administrator is configuring PAT on an ASA device to enable
internal workstations to access the Internet. Which configuration command should be used next?
Select one:
nat (inside,outside) dynamic NET1
nat (outside,inside) dynamic interface
nat (inside,outside) dynamic interface
nat (outside,inside) dynamic NET1
Windows?
Select one:
L0phtcrack
Nmap
SuperScan
Zenmap
Which object or object group is required to implement NAT on an ASA 5505 device?
Select one:
service object
protocol object group
network object
network object group
Which type of documents offer suggestions on how to do things more securely within an
organization and contain best practices?
Select one:
end user policies
procedures
standards
guidelines
Which three security features do ASA models 5505 and 5510 support by default? (Choose
three.)
Select one or more:
Zone-Based Policy Firewall
intrusion prevention system
VPN concentrator
Cisco Unified Communications (voice and video) security
stateful firewall
content security and control module
Select one or more:
procedures
best practices
risk assessment
asset inventory
standards
guidelines
password security?
Select one:
end-user policy
governing policy
technical policy
Select one:
Reboot the machine.

Select one:
remote-access VPN
DSL connection
site-to-site VPN
dial-up connection
True or False?
If the end-user community does not adhere to security policies and procedures, any
implemented network security system can be defeated.
Select one:
false
true
What is one benefit of using ASDM to configure a Cisco ASA?
Select one:
It does not require a remote connection to a Cisco device.
It is easier to use.
It does not require any knowledge of networking.
It does not require software setup to begin configuration.
Select one:
What component of a security policy explicitly defines the type of traffic allowed on a network
and what users are allowed and not allowed to do?
Select one:
password policies
Select one:

Refer to the exhibit. Which ASDM Device Management item would be used to configure a banner
message on the ASA?
Select one:
System Image/Configuration
Licensing
Advanced
Management Access
True or False?
The effectiveness of an operations security solution can only be tested once a real threat occurs.
Select one:
true
false
True or False?
Select one:
true
false
Where is the Cisco AnyConnect client image found on the Cisco ASA?
Select one:
ROM
TFTP server
flash
RAM
Select one:
Reboot the machine.
three.)
Select one or more:
stateful firewall

VPN concentrator
Refer to the exhibit. A network administrator is verifying the security configuration of an ASA.
Which command produces the exhibited output?
Select one:
show switch vlan
show interface ip brief
show ip interface brief
show vlan
Which statement is true about ASA CLI and IOS CLI commands?
Select one:
The show ip interface brief command is valid for both CLIs.‹
The ASA CLI does not recognize the write erase command, but the IOS CLI does.
Only the ASA CLI requires the use of Ctrl-C to interrupt show commands.
Both CLIs recognize the Tab key to complete a partial command.
Select one:
RAM
flash
TFTP server
ROM

large organization?
Select one:
What component of a security policy explicitly defines the type of traffic allowed on a network
and what users are allowed and not allowed to do?
Select one:
password policies
True or False?
Select one:
true
false
Refer to the exhibit. What kind of NAT is configured on the ASA device?
Select one:
dynamic PAT
dynamic NAT
static NAT
Twice NAT
What network testing tool is used for password auditing and recovery?
Select one:
Metasploit
SuperScan
L0phtcrack
Nessus
Refer to the exhibit. Which Device Setup ASDM menu option would be used to configure the
ASA for the current date?
Select one:
Routing
System Time
Startup Wizard
Interfaces
Device Name/Password
Select one:
Refer to the exhibit. A network administrator is configuring PAT on an ASA device to enable
internal workstations to access the Internet. Which configuration command should be used next?
Select one:
nat (inside,outside) dynamic NET1
nat (outside,inside) dynamic NET1
nat (outside,inside) dynamic interface
nat (inside,outside) dynamic interface
The ASA device can be configured using either the asdm

or the command-line interface.
True or False?
If the end-user community does not adhere to security policies and procedures, any implemented
network security system can be defeated.
Select one:
false
true
three.)
Select one or more:
VPN concentrator
stateful firewall

What is the most trustworthy security level that can be configured on an ASA device interface?
Select one:
50
100
255
Select one:
VPN wizards
Startup Wizard
True or False?
Select one:
true
false
What are the two methods that can be used to start the Cisco ASDM? (Choose two.)
Select one or more:
Run Cisco ASDM as a local service.
Run Cisco ASDM as a local application.
Run Cisco ASDM as a flash application.
Run Cisco ASDM as a Java Web Start application.
Run Cisco ASDM as a local startup application.
In the prosecution of an individual, what answers the question of why the individual committed an
illegal act?
Select one:
motive
means
complexity
opportunity
Select one:
service object
network object
Select one or more:

risk assessment
guidelines
best practices
standards
procedures
asset inventory
Refer to the exhibit. What kind of NAT is configured on the ASA device?
Select one:
Twice NAT
static NAT
dynamic NAT
dynamic PAT
True or False?
Select one:
true
false
Refer to the exhibit. A network administrator is configuring AAA implementation on an ASA
device. What does the option link3 indicate?
Select one:
the network name where the AAA server resides
the sequence of servers in the AAA server group
the specific AAA server name
the interface name
Select one:
routing
NAT
management
VPN connectivity
large organization?
Select one:
Select one:
service object
network object
three.)
Select one or more:
stateful firewall
VPN concentrator
Select one:

Reboot the machine.
Select one:
site-to-site VPN
DSL connection
remote-access VPN
dial-up connection
Select one:
integrity checking
Refer to the exhibit. Which three sets of configuration commands were entered on the ASA
5505? (Choose three.)
interface vlan 2
nameif outside
security-level 0
ip address 209.165.200.226 255.255.255.248
route outside 0.0.0.0 0.0.0.0 209.165.200.225
interface e0/0
switchport access vlan 2
no shut
exit

Select one:
the interface name

Select one:
network scanning
penetration testing
integrity checking
Select one:
Startup Wizard
VPN wizards
Select one:
Select one:
Select one:
Refer to the exhibit. A network administrator is verifying the security configuration of an ASA.
Which command produces the exhibited output?
Select one:
show vlan
show switch vlan
message on the ASA?
Select one:
Advanced
Management Access
Licensing
message on the ASA?
Select one:
Licensing
Advanced
Management Access
Select one:
Select one:
True or False?
Cisco AnyConnect Secure Mobility Client can be configured to automatically create a

VPN connection that remains up until the user logs out or the session timer expires.
Select one:
false
true
What two features must match between ASA devices to implement a failover configuration?
(Choose two.)
Select one or more:
amount of RAM
software configuration
source IP address
next-hop destination
device model
Select one:
Select one:
Windows?
Select one:
Nmap
The ASA device can be configured using either the ASDM or the command-line interface.
Select one:
the interface name
password security?
Select one:
governing policy
end-user policy
technical policy
If an AAA authentication server is not available, then the local database is used for
authentication.
Select one:
L0phtcrack
Nessus
SuperScan
Metasploit
Select one:

ciscoasa(config)# access-list OUT-TO-IN extended permit protocol 198.133.219.32
255.255.255.224 host 209.165.200.242
What two options can be used for the keyword protocol? (Choose two.)
Select one or more:

ICMP
protocol object-group
Select one:
remote-access VPN
Where is an IP address configured on an ASA 5505 device?
Select one:
VTY lines
physical Layer2 interface
SVI interface
physical Layer 3 interface
True or False?
Select one:
true
false
What is the most trustworthy security level that can be configured on an ASA device
interface?
Select one:
50
255
100
Refer to the exhibit. Which Device Setup ASDM menu option would be used to configure
the ASA for the current date?
Select one:
Device Name/Password
Interfaces
System Time
Routing
Startup Wizard
three.)
Select one or more:
VPN concentrator
stateful firewall
When ASDM is used to configure the ASA for a site-to-site VPN, which address is entered
in the Peer Device Identification window?
Select one:

Refer to the exhibit. A network administrator is configuring AAA implementation on an
ASA device. What does the option link3 indicate?
Select one:
the interface name
What type of security test uses simulated attacks to determine possible consequences of
a real threat?
Select one:
integrity checking
penetration testing
network scanning
What is the most trustworthy security level that can be configured on an ASA device
interface?
Select one:
255
50
100
Refer to the exhibit. A network administrator is verifying the security configuration of an

ASA. Which command produces the exhibited output?
Select one:
show vlan
show switch vlan

Fill in the blank.
The Device Management ASDM configuration option can be used to configure
management access, users and AAA access, DHCP, and a master: passphrase
The ASA device can be configured using either the ASDM or the command-line interface.
Select one:
network object
service object
True or False?
Select one:
true
false
Which type of security policy includes defined rules and procedures for creating and
maintaining password security?
Select one:
end-user policy
governing policy
technical policy
True or False?
Select one:
true
false
Which ASDM wizard would allow a network administrator to configure an ASA for
NAT/PAT?
Select one:
Startup Wizard
ASDM Identify Certificate Wizard
VPN wizards
What is the default group policy name on an ASA 5505 device?
Select one:
DfltGrpPolicy
Dflt Grp Policy
Dflt.Grp.Policy
Dflt-Grp-Policy
When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the
purpose of the crypto map command in interface configuration mode?
Select one:
Which network security tool can detect open TCP and UDP ports on most versions of
Microsoft Windows?
Select one:
Nmap
SuperScan
Zenmap
L0phtcrack
What are the two methods that can be used to start the Cisco ASDM? (Choose two.)
Select one or more:
Run Cisco ASDM as a local application.
Run Cisco ASDM as a local service.
Run Cisco ASDM as a flash application.
Run Cisco ASDM as a Java Web Start application.
Run Cisco ASDM as a local startup application.
True or False?
The effectiveness of an operations security solution can only be tested once a real threat
occurs.
Select one:
true
false
Refer to the exhibit. A network administrator is verifying the security configuration of an

ASA. Which command produces the exhibited output?
Select one:
show switch vlan
show vlan
When testing the tunnel to verify a site-to-site VPN connection between an ISR and an
ASA, why does an initial ping fail, but subsequent pings succeed?
Select one:

What type of security test uses simulated attacks to determine possible consequences of
a real threat?
Select one:
integrity checking
penetration testing
network scanning
Select one:
Which three detailed documents are used by security staff for an organization to
implement the security policies? (Choose three.)
Select one or more:
risk assessment
best practices
asset inventory
standards
procedures
guidelines
Where is an IP address configured on an ASA 5505 device?
Select one:
VTY lines
physical Layer 3 interface

SVI interface
physical Layer2 interface
How is success measured in the implementation of a security awareness program

throughout a large organization?
Select one:
True or False?
The effectiveness of an operations security solution can only be tested once a real threat occurs.
Select one:
false
True or False?
true
Which statement is true about ASA CLI and IOS CLI commands?
Both CLIs recognize the Tab key to complete a partial command.

large organization?
Select one:

Select one:
integrity checking
Select one:
network object
Select one:
RAM
TFTP server
flash
ROM
When testing the tunnel to verify a site-to-site VPN connection between an ISR and an
ASA, why does an initial ping fail, but subsequent pings succeed?
Select one:

Which network security tool can detect open TCP and UDP ports on most versions of
Microsoft Windows?
Select one:
Zenmap
L0phtcrack
SuperScan
Nmap
Select one:
Metasploit
L0phtcrack
Nessus
SuperScan
True or False?
Select one:
true
false
Refer to the exhibit. A network administrator is configuring AAA implementation on an
ASA device. What does the option link3 indicate?
Select one:
the interface name
How is success measured in the implementation of a security awareness program

throughout a large organization?
Select one:
In the prosecution of an individual, what answers the question of why the individual
committed an illegal act?
Select one:
complexity
motive
opportunity
means
True or False?

Select one:
true
false
True or False?
The effectiveness of an operations security solution can only be tested once a real threat
occurs.
Select one:
true
false
Which executive position is responsible for all IT and computer systems that support
enterprise goals?
Select one:
Chief Technology Officer
Chief Security Officer
Chief Executive Officer
Chief Information Officer
When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the
purpose of the crypto map command in interface configuration mode?
Select one:

What two features must match between ASA devices to implement a failover configuration?
(Choose two.)
Select one or more:
software configuration
amount of RAM
device model
source IP address
next-hop destination
Select one:
flash
In the prosecution of an individual, what answers the question of why the individual committed
an illegal act?
Select one:
motive
Select one

Экономика

Uploaded by

Copyright:

Available Formats

You might also like

Экономика

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Экономика

Uploaded by

Copyright:

Available Formats

When the CLI is used to configure an ISR for a site-to-site VPN connection, what is the purpose

of the crypto map command in interface configuration mode?

to bind the interface to the ISAKMP policy

to identify the location of the peer

to create the ISAKMP policy

to create the crypto map

acceptable use policy

identification and authentication policies

remote access policies

acceptable use policies

What is the purpose of configuring an IP address on an ASA device in transparent mode?

The ASA and ISR must negotiate the tunnel parameters.

The ISR has an incorrect configuration.

The first ping is not considered interesting traffic.

The connection was not successful.

Flush the system memory.

Reboot the machine.

Create a drive image of the original hard drive.

Photograph the equipment that is involved.

How is success measured in the implementation of a security awareness program throughout a

a reduction of unauthorized actions by insiders

a noticeable increase in attendance at educational programs

a reduction of logged attacks by outsiders

a noticeable increase in the access and use of procedure documents

What is the purpose of configuring an IP address on an ASA device in transparent mode?

Select one or more:

No certificates are used by default. The type must be specified.

the IP address of the peer

the MAC address of the outbound interface

the IP address of the outbound interface

the MAC address of the peer

ASDM Identify Certificate Wizard‹

High Availability and Scalability Wizard

to create the crypto map

to bind the interface to the ISAKMP policy

to identify the location of the peer

to create the ISAKMP policy

Chief Security Officer

Chief Executive Officer

Chief Information Officer

Chief Technology Officer

The first ping is not considered interesting traffic.

The connection was not successful.

The ISR has an incorrect configuration.

The ASA and ISR must negotiate the tunnel parameters.

nat (inside,outside) dynamic NET1

nat (outside,inside) dynamic interface

nat (inside,outside) dynamic interface

nat (outside,inside) dynamic NET1

protocol object group

network object group

end user policies

Select one or more:

Zone-Based Policy Firewall

intrusion prevention system

Cisco Unified Communications (voice and video) security

content security and control module