Cisco 500-258 - Cisco ASA Express Security Exam
Page: 3 / 11
Total 55 questions
Question #11 (Topic: )
Which three statements about the FirePOWER appliance are true? (Choose three.)
A. has three platforms: 6000 Series, 7000 Series, and 8000 Series
B. supports NGIPS with contextual aware
C. scales up to 100 Gb/s IPS throughputs
D. supports advanced malware protection
E. supports application control/URL filtering
Answer: B,D,E
Question #12 (Topic: )
On Cisco ASA Software Version 8.3 and later, which two statements correctly describe the
NAT table or NAT operations? (Choose two.)
NAT table or NAT operations? (Choose two.)
A. The NAT table has four sections.
B. Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.
C. Auto NAT also is referred to as Object NAT.
D. Auto NAT configurations are found only in the first (top) section of the NAT table.
E. The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.
F. Twice NAT is required for hosts on the inside to be accessible from the outside.
Answer: B,C
Question #13 (Topic: )
The "HTTPS decryption" feature is enabled with the default settings and decryption and
IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an
untrusted certificate?
IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an
untrusted certificate?
A. The HTTPS traffic is decrypted but not inspected by the IPS.
B. The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.
C. The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.
D. The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.
E. The HTTPS traffic is forwarded to the client but is not decrypted or inspected.
Answer: B
Question #14 (Topic: )
[Cisco-500-258-6.0/Cisco-500-258-8_2.png]
Answer: [Cisco-500-258-6.0/Cisco-500-258-8_3.png]
Question #15 (Topic: )
Which three options are predefined policy objects for the Cisco ASA NGFW? (Choose
three.)
three.)
A. URL
B. application
C. useragent
D. access
E. elements
F. system
Answer: A,B,C
