最新的Cisco 500-258免費考試真題

問題1

Refer to the exhibit.

Which statement describes the effect of the access policy?

A. Traffic that matches the access policy is logged in the PRMS event viewer.

B. SSH traffic is blocked on any port.

C. SSH traffic is blocked only on TCP port 22.

D. SSH traffic is captured automatically.

正確答案: B

問題2

To which two policy types can an administrator apply a web reputation profile to implement reputation-based processing? (Choose two.)

A. packet capture policies that perform global capture of dropped packets

B. universal access policies

C. access policies that deny traffic

D. decryption policies that decrypt potentially malicious traffic

E. access policies that permit traffic

F. NAT policies for ASAs that operate in multiple device mode

正確答案: D,E

問題3

Which two Cisco ASA licensing features are correct with Cisco ASA Software Version 8.3 and later? (Choose two.)

A. Time-based licenses are stackable in duration but not in capacity.

B. Cisco ASA appliances configured as failover pairs disregard the time-based activation keys.

C. A time-based license completely overrides the permanent license, ignoring all permanently licensed features until the time-based license is uninstalled.

D. Identical licenses are not required on the primary and secondary Cisco ASA appliance.

正確答案: A,D

問題4

Which Cisco ASA NGFW license is needed to allow a high-school security administration to implement policy to allow student access to high-reputation sites only?

A. Botnet Traffic Filtering

B. IPS for NGFW

C. AVC

D. AnyConnect Premium

E. WSE

正確答案: E

問題5

DRAG DROP

正確答案:

問題6

On Cisco ASA Software Version 8.3 and later, which two statements correctly describe the NAT table or NAT operations? (Choose two.)

A. Auto NAT also is referred to as Object NAT.

B. Twice NAT is required for hosts on the inside to be accessible from the outside.

C. The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.

D. The NAT table has four sections.

E. Auto NAT configurations are found only in the first (top) section of the NAT table.

F. Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.

正確答案: A,F

最新的Cisco ASA Express Security - 500-258免費考試真題

聯系我們

站內鏈接

最新更新