Cisco ASA Express Security Sample Questions:
1. Which three methods are the most effective for an NGFW administrator to determine the URL category of a website? (Choose three.)
A) Open a TAC case at http://cisco.com/tac.
B) Submit the URL to https://securityhub.cisco.com.
C) Select the site from the Web Destinations dashboard.
D) Search for the site on the components objects screen.
E) Google it.
F) Enter the URL into the NGFW search field.
G) Select an event with the website as the destination in the event viewer.
2. Datagram Transport Layer Security (DTLS) was introduced to solve performance issues. Choose three characteristics of DTLS. (Choose three.)
A) It uses TLS for data packet retransmission.
B) It uses DTLS to transmit datagrams.
C) It is disabled by default.
D) It uses TLS to provide low-latency video application tunneling.
E) It replaces underlying transport layer with UDP 443.
F) It uses TLS to negotiate and establish DTLS connections.
3. Refer to the exhibit.
A NOC engineer needs to tune some postlogin parameters on an SSL VPN tunnel.
From the information shown, where should the engineer navigate to, in order to find all the postlogin session parameters?
A) "engineering" Group Policy
B) DefaultWEBVPNGroup Group Policy
C) "engineer1" AAA/Local Users
D) DefaultRAGroup Group Policy
E) "contractor" Connection Profile
4. Which Cisco ASA CLI command is used to enable HTTPS (Cisco ASDM) access from any inside host on the 10.1.16.0/20 subnet?
A) http 10.1.16.0 0.0.15.255 inside
B) http 10.1.16.0 0.0.0.0 inside
C) http 10.1.16.0 255.255.255.255
D) http 10.1.16.0 255.255.240.0 inside
5. DRAG DROP
Solutions:
| Question # 1 Answer: B,C,G | Question # 2 Answer: B,E,F | Question # 3 Answer: A | Question # 4 Answer: D | Question # 5 Answer: Only visible for members |

We're so confident of our products that we provide no hassle product exchange.


By Maggie


