Part 1 CCNA

Which statement describes a difference between the Cisco ASA IOS CLI feature and the router IOS CLI feature?

• ASA uses the ? command whereas a router uses the help command to receive help on a brief description and the syntax of a command.

• To use a show command in a general configuration mode, ASA can use the command directly whereas a router will need to enter the do command before issuing the show command.

• To complete a partially typed command, ASA uses the Ctrl+Tab key combination whereas a router uses the Tab key.

• To indicate the CLI EXEC mode, ASA uses the % symbol whereas a router uses the # symbol.the # symbol.

Refer to the exhibit. A network administrator is configuring AAA implementation on an ASA device. What does the option link3 indicate?

• the network name where the AAA server resides

• the specific AAA server name

• the sequence of servers in the AAA server group

• the interface name

What provides both secure segmentation and threat defense in a Secure Data Center solution?

• Cisco Security Manager software

• AAA server

• Adaptive Security Appliance

• intrusion prevention system

What are the three core components of the Cisco Secure Data Center solution? (Choose three.)

• mesh network

• secure segmentation

• visibility

• threat defense

• servers

What are three characteristics of ASA transparent mode? (Choose three.)

• • It is the traditional firewall deployment mode.

• • NAT can be implemented between connected networks.

• This mode does not support VPNs, QoS, or DHCP Relay.

• This mode is referred to as a “bump in the wire.”

• In this mode the ASA is invisible to an attacker.

What is needed to allow specific traffic that is sourced on the outside network of an ASA firewall to reach an internal network?

• • NAT

• • dynamic routing protocols

• • outside security zone level 0

• ACL

What will be the result of failed login attempts if the following command is entered into a router?

"login block-for 150 attempts 4 within 90"

• • All login attempts will be blocked for 90 seconds if there are 4 failed attempts within 150 seconds.

• • All login attempts will be blocked for 1.5 hours if there are 4 failed attempts within 150 seconds.

• • All login attempts will be blocked for 4 hours if there are 90 failed attempts within 150 seconds.

• All login attempts will be blocked for 150 seconds if there are 4 failed attempts within 90 seconds

Which two tasks are associated with router hardening? (Choose two.)

• placing the router in a secure room

• disabling unused ports and interfaces

• installing the maximum amount of memory possible

• securing administrative access

• using uninterruptible power supplies

Which threat protection capability is provided by Cisco ESA

• Layer 4 traffic monitoring

• spam protection

• cloud access security

• web filtering

What are two security measures used to protect endpoints in the borderless network? (Choose two.)

• denylisting

• Snort IPS

• DLP

• DMZ

• rootkit