A. route outside 0 0 10.10.10.1
B. route add default 0 10.10.10.1
C. route management 10.10.10.0 0.0.0.255 10.10.10.1.1
D. route 0 0 10.10.10.1.1
Answer: A

Which of the following statements about adaptive security appliance failover is true?

A. The PIX adaptive security appliance only supports LAN-based failover
B. The PIX adaptive security appliance supports LAN-based and cable-based failover
C. The Cisco ASA security appliance only supports cable-based failover
D. The Cisco ASA and PIX security appliance support LAN-based and cable-based failover
Answer: B

Which three of these are encryption algorithms used by Cisco ASA security appliances? (Choose three.)

A. RC4
B. DES
C. Diffie-Hellman Group 5
D. AES
E. Blowfish
F. 3DES
Answer: B,D,F

Which command configures the adaptive security appliance interface as a DHCP client and sets the default route to be the default gateway parameter returned from the DHCP server?

A. ip address dhcp
B. ip address dhcp default route
C. ip address dhcp setroute
D. dhcp setroute
Answer: C

Which commands are necessary in order to add a port for DNS inspection?

A. class-map, match, policy-map, class, inspect
B. class-map, fixup, policy-map
C. fixup
D. class-map,match,fixup, policy-map, inspect
Answer: A

On a Cisco ASA adaptive security appliance, the administrator enters the boot config disk0:/startup.txt command. What will this command do when the system is rebooted?

A. It will copy the current config file to the startup.txt file on disk 0.
B. It will configure the Cisco ASA to boot using the startup.txt config file stored in flash memory.
C. It will do nothing until the file extension is changed to .cfg, at which time it will boot the startup.cfg config file
D. It will configure the ASA to skip the hardware diagnostics and perform a warm boot of the startup.txt config file
Answer: B

The administrator needs to know the command to enable command authorization. What is this command?
A. aaa authorization command LOCAL
B. aaa authorization permit any LOCAL
C. level-priv
D. passwd
E. None of the above
Answer: A

Which of the following statements regarding SSH and the PIX Firewall are valid? (Choose three)
A. You must generate an RSA key-pair for the PIX Firewall before SSH clients can connect to the PIX Firewall console.
B. You can use either an SSH version 1 or 2 client because the two versions are essentially the same and are entirely compatible.
C. The PIX Firewall supports the SSH remote functionality as provided in SSH version.1.
D. You must upgrade you DES activation key to 3DES.
E. The PIX Firewall allows up to 5 SSH clients to simultaneously access its console.
F. The PIX Firewall does not support SSH remote functionality as provided in SSH version 1.
Answer: A, C, E

Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. syslog community string
B. message.text
C. triggering packet copy
D. logging device ip
E. default ASA gateway
F. logging level
Answer: B,D,F

An Administrator wants to protect a DMZ web server from SYN Flood attacks. Which three of these commands, used individually would allow the administrator to place limits on the number of embryonic connections? (choose three.)
A. http redirect
B. nat
C. http-proxy
D. static
E. set connection
F. access-list
Answer: B,D,E

Which of these commands displays the status of the CSC SSM on the Cisco ASA?
A. show module 1 CSC details
B. show hw 1 details
C. show module 1 details
D. show interface GigabitEthernet 1/0
Answer: C

The Cisco VPN Client supports which three of these tunneling protocols and methods? (Choose three.)
A. AH
B. LZS
C. IPSec over TCP
D. IPSec over UDP
E. SCEP
F. ESP
Answer: C,D,F

What does the nat 0 command do?
A. The nat 0 command, followed by an access list, specifies the addresses that are not to be translated
B. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to be translated using network address translations
C. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to be translated when used for IPSec
D. The nat 0 command, followed by an access list, specifies the addresses that are to be used in translations only once
Answer: A

What does the activation-key command in the Cisco ASA do?
A. Applies the activation key to the Cisco ASDM so the Cisco ASA can be managed using a web interface
B. Applies the activation key to the Cisco ASA operating system, so that the Cisco ASA is licensed and all features are available
C. Activates the SSM module in the Cisco ASA, providing intrusion protection and content filtering
D. Automatically activates the Cisco ASA, allowing it to be configured right out of the box
Answer: B