1.ABC agency installed a brand new ASA. The ASA

configuration is currently at factory-default, single

mode. From Host A, your task is to add two security

contexts, allocate the appropriate interfaces to each

context, and identify the location from which the system

downloads the context configuration. The security

appliance contexts are named dminand tx2 The dmincontext

will support interfaces GigabitEthernet0/0 and

GigabitEthernet0/1. The dmincontext configuration should

be stored in the ASA flash file admin.cfg. The

tx2context will support interfaces GigabitEthernet0/2

and GigabitEthernet0/3. The tx2context configuration

should be stored in the ASA flash file ctx2.cfg. You are

finished with the task after the contexts are created,

interfaces allocated and context configuration file

locations are configured in the ASA system context.
Please Input correct Answer
 
Please Input correct Answer here:
Correct Answers:  (conf) # mode multiple
after giving that command firewall will reboot then give

following commands
#context admin
#config-url flash:/admin.cfg
#allocate interfaces GigabitEthernet 0/0
#allocate interfaces GigabitEthernet 0/1

again create another context

(conf) #context ctx2
config-url flash:/ctx2.cfg
#allocate interfaces GigabitEthernet 0/2
#allocate interfaces GigabitEthernet 0/3
copy run start...    70-291 70-284 70-454

2.LAB
ABC agency has installed a Cisco Adaptive Security

Appliance (ASA) and wants basic outbound access

configured on the outside interface for all hosts on the

inside network of 10.0.3.0/255.255.255.0. The real IP

addresses of the inside hosts should be hidden from the

outside network. Company policy requires that packets

traversing from a higher security interface to a lower

security interface for all other inside networks must

match a NAT rule, or else processing for the packet must

stop. Use the topology provided and the parameters below

to complete this exercise. When you complete the

exercise you should be able to open a Web session from

the Corporate PC at 10.0.3.11 to the Web server located

at 172.26.26.50. You should not be able to open a Web

Session from Corporate PC at 10.0.4.11. to the Web

server located at 172.26.26.50.
Please Input correct Answer
 
Please Input correct Answer here:
Correct Answers:  (conf t) # nat-control
 #nat (inside ) 1 10.0.3.0 255.255.255.0
 #global (oustside ) 1 192.168.1.20-192.168.1.254
 #copy run start

3.Which feature prevents ARP spoofing?

A: MAC fixup
B: ARP inspection
C: MAC inspection
D: ARP fixup
Correct Answers:  B   1Y0-A08 70-290 BI0-132

4.The Hypertext Transfer Protocol (HTTP) is an

application-level protocol for distributed,

collaborative, hypermedia information systems. An

internet customer is sending HTTP traffic to a DMZ

server with the external address of 192.168.1.4. Which

command would redirect HTTP traffic bound for the DMZ

web server to its real IP address of 10.10.11.4?

A: static (dmz,inside) udp 192.168.1.4 www 10.10.11.4

www
B: static (outside,dmz) tcp 192.168.1.4 www 10.10.11.4

www
C: static (dmz,outside) tcp 192.168.1.4 www 10.10.11.4

www
D: static (dmz,outside) tcp 10.10.11.4 www 192.168.1.4

www
Correct Answers:  C

5.For the following commands, which one enables the DHCP

server on the DMZ interface of the Cisco ASA with an

address pool of 10.0.1.100-10.0.1.108 and a DNS server

of 192.168.1.2?

A: dhcpd address 10.0.1.100-10.0.1.108 DMZ
dhcpd dns 192.168.1.2 dhcpd enable DMZ
B: dhcpd address range 10.0.1.100-10.0.1.108
dhcpd dns server 192.168.1.2 dhcpd enable DMZ
C: dhcpd range 10.0.1.100-10.0.1.108 DMZ
dhcpd dns server 192.168.1.2 dhcpd DMZ
D: dhcpd address range 10.0.1.100-10.0.1.108
dhcpd dns 192.168.1.2 dhcpd enable
Correct Answers:  A  1y0-a06 1y0-a09 310-202

6.Alex works as a network administrator for P4S Ltd.

Study the exhibit carefully. Alex has decided to

authenticate HTTP cut-through proxy traffic via a local

database on the Cisco ASA. In order to accomplish this

objective, which set of command strings will Alex enter?
 
A: P4S-asa1(config)# static (dmz,outside) 192.168.16.6

172.16.16.6
P4S-asa1(config)# access-list 150 permit tcp any host

172.16.16.6 eq www
P4S-asa1(config)# aaa authentication match 150 outside

asa1
B: P4S-asa1(config)# static (dmz,outside) 192.168.16.6

172.16.16.6
P4S-asa1(config)# access-list 150 permit tcp any host

172.16.16.6 eq www
P4S-asa1(config)# aaa authentication match 150 outside

LOCAL
C: P4S-asa1(config)# static (dmz,outside) 192.168.16.6

172.16.16.6
P4S-asa1(config)# access-list 150 permit tcp any host

192.168.16.6 eq www
P4S-asa1(config)# aaa authentication match 150 outside

asa1
D: P4S-asa1(config)# static (dmz,outside) 192.168.16.6

172.16.16.6
P4S-asa1(config)# access-list 150 permit tcp any host

192.168.16.6 eq www
P4S-asa1(config)# aaa authentication match 150 outside

LOCAL
Correct Answers:  D

7.In order to add a port for DNS inspection, which

command will be used?

A: class-map, match, policy-map, class, inspect
B: class-map, fixup, policy-map
C: class-map, match, fixup, policy-map, inspect
D: fixup
Correct Answers:  A

8.Which three options belong to Cisco ASA syslog message

fields? (Choose three.)

A:logging level
B:logging device IP
C:message text
D:triggering packet copy
Correct Answers:  A, B, C

9.An administrator wants to protect a DMZ web server

from SYN flood attacks. Which three of these commands,

used individually, would allow the administrator to

place limits on the number of embryonic connections?

(Choose three.)

A:nat
B:access-list
C:static
D:set connection
Correct Answers:  A, C, D

10.What is the purpose of the same-security-traffic

permit inter-interface command?

A: It permits communication in and out of the same

interface when the traffic is IPSec protected.
B: It allows communication between different interfaces

that have the same security level.
C: It enables Dynamic Multipoint VPN.
D: It allows all of the VPN spokes in a hub-and-spoke

configuration to be terminated on a single interface.
Correct Answers:  B