CCNA Security Chapter 10

1.

1 point

Which type of encryption is applied to shared keys and passwords when the master passphrase option is enabled through ASDM for an ASA?

3DES

AES

public/private key

128-bit

2.

1 point

Which item describes secure protocol support provided by Cisco AnyConnect?

IPsec only

both SSL and IPsec

neither SSL nor IPsec

SSL only

3.

1 point

When the CLI is used to configure an ISR for a site-to-site VPN connection, which two items must be specified to enable a crypto map policy? (Choose two.)

encryption

the ISAKMP policy

IP addresses on all active interfaces

a valid access list

the hash

the peer

4.

1 point

What is one benefit of using ASDM compared to using the CLI to configure the Cisco ASA?

It does not require a remote connection to a Cisco device.

It hides the complexity of security commands.

ASDM provides increased configuration security.

It does not require any initial device configuration.

5.

1 point

Refer to the exhibit. Which Device Setup ASDM menu option would be used to configure the ASA for an NTP server?

Startup Wizard

System Time

Interfaces

Device Name/Password

Routing

6.

1 point

Which VPN solution allows the use of a web browser to establish a secure, remote-access VPN tunnel to the ASA?

clientless SSL

site-to-site using a preshared key

site-to-site using an ACL

client-based SSL

7.

1 point

When ASDM is used to configure an ASA site-to-site VPN, what can be customized to secure traffic?

IKE and ISAKMP

ISAKMP

IKE

preshared key

8.

1 point

What is the purpose of configuring an IP address pool to be used for client-based SSL VPN connections?

to assign addresses to the interfaces on the ASA

to identify which clients are allowed to connect

to assign IP addresses to clients when they connect

to identify which users are allowed to download the client image

9.

1 point

True or False?

The ASA can be configured through ASDM as a DHCP server.

True

False

10.

1 point

Which statement describes available user authentication methods when using an ASA 5505 device?

The ASA 5505 only uses a AAA server for authentication.

The ASA 5505 can use either a AAA server or a local database.

The ASA 5505 must use both a AAA server and a local database.

The ASA 5505 only uses a local database for authentication.

11.

1 point

Which ASDM configuration option re-encrypts all shared keys and passwords on an ASA?

security master

device protection

super encryption

master passphrase

12.

1 point

Which remote-access VPN connection allows the user to connect by using a web browser?

IPsec (IKEv1) VPN

IPsec (IKEv2) VPN

site-to-site VPN

clientless SSL VPN

13.

1 point

Which minimum configuration is required on most ASAs before ASDM can be used?

a logical VLAN interface and an Ethernet port other than 0/0

Ethernet 0/0

SSH

a dedicated Layer 3 management interface

14.

1 point

What occurs when a user logs out of the web portal on a clientless SSL VPN connection?

The user no longer has access to the VPN.

The web portal times out.

The browser cache is cleared.

Downloaded files are deleted.

15.

1 point

Which type of security is required for initial access to the Cisco ASDM by using the local application option?

biometric

WPA2 corporate

SSL

AES

16.

1 point

What must be configured on an ASA before it can be accessed by ASDM?

Ethernet 0/0 IP address

Telnet or SSH

web server access

an Ethernet port other than 0/0

17.

1 point

Which remote-access VPN connection needs a bookmark list?

site-to-site VPN

IPsec (IKEv1) VPN

clientless SSL VPN

IPsec (IKEv2) VPN

18.

1 point

If an outside host does not have the Cisco AnyConnect client preinstalled, how would the host gain access to the client image?

The host initiates a clientless VPN connection using a compliant web browser to download the client.

The host initiates a clientless connection to a TFTP server to download the client.

The host initiates a clientless connection to an FTP server to download the client.

The Cisco AnyConnect client is installed by default on most major operating systems.

19.

1 point

Which ASDM interface option would be used to configure an ASA as a DHCP server for local corporate devices?

inside

DMZ

local

outside

20.

1 point

Which ASDM configuration option is used to configure the ASA enable secret password?

Monitoring

Device Setup

Interfaces

Device Management

21.

1 point

How is an ASA interface configured as an outside interface when using ASDM?

Select a check box from the Interface Type option that shows inside, outside, and DMZ.

Enter the name “outside” in the Interface Name text box.

Select outside from the Interface Type drop-down menu.

Drag the interface to the port labeled “outside” in the ASA drawing.

22.

1 point

Refer to the exhibit. Which Device Management menu item would be used to access the ASA command line from within Cisco ASDM?

Management Access

Advanced

Licensing

System Image/Configuration

23.

1 point

Which remote-access VPN connection allows the user to connect using Cisco AnyConnect?

site-to-site VPN

clientless SSL VPN

IPsec (IKEv1) VPN

IPsec (IKEv2) VPN

24.

1 point

What is an optional feature that is performed during the Cisco AnyConnect Secure Mobility Client VPN establishment phase?

posture assessment

host-based ACL installation

quality of service security

security optimization

25.

1 point

Which statement describes the function provided to a network administrator who uses the Cisco Adaptive Security Device Manager (ASDM) GUI that runs as a Java Web Start application?

The administrator can connect to and manage multiple ASA devices and Cisco routers.

The administrator can connect to and manage a single ASA.

The administrator can connect to and manage multiple ASA devices.

The administrator can connect to and manage multiple ASA devices, Cisco routers, and Cisco switches.

26.

1 point

What is the purpose of the ACL in the configuration of an ISR site-to-site VPN connection?

to permit only secure protocols

to log denied traffic

to identify the peer

to define interesting traffic