Q1. Which set of commands creates a message list that includes all severity 2 (critical) messages on a Cisco security device? 

A. logging list critical_messages level 2 

console logging critical_messages 

B. logging list critical_messages level 2 

logging console critical_messages 

C. logging list critical_messages level 2 

logging console enable critical_messages 

D. logging list enable critical_messages level 2 

console logging critical_messages 

View Answer

Q2. Which set of commands enables logging and displays the log buffer on a Cisco ASA? 

A. enable logging 

show logging 

B. logging enable 

show logging 

C. enable logging int e0/1 

view logging 

D. logging enable 

logging view config 

View Answer

Q3. If you encounter problems logging in to the Cisco Security Manager 4.4 web server or client or backing up its databases, which account has most likely been improperly modified? 

A. admin (the default administrator account) 

B. casuser (the default service account) 

C. guest (the default guest account) 

D. user (the default user account) 

View Answer

Q4. When you configure a Cisco firewall in multiple context mode, where do you allocate interfaces? 

A. in the system execution space 

B. in the admin context 

C. in a user-defined context 

D. in the global configuration 

View Answer

Q5. If the Cisco ASA 1000V has too few licenses, what is its behavior? 

A. It drops all traffic. 

B. It drops all outside-to-inside packets. 

C. It drops all inside-to-outside packets. 

D. It passes the first outside-to-inside packet and drops all remaining packets. 

View Answer

Q6. Which command sets the source IP address of the NetFlow exports of a device? 

A. ip source flow-export 

B. ip source netflow-export 

C. ip flow-export source 

D. ip netflow-export source 

View Answer

Q7. Which statement describes the correct steps to enable Botnet Traffic Filtering on a Cisco ASA version 9.0 transparent-mode firewall with an active Botnet Traffic Filtering license? 

A. Enable DNS snooping, traffic classification, and actions. 

B. Botnet Traffic Filtering is not supported in transparent mode. 

C. Enable the use of the dynamic database, enable DNS snooping, traffic classification, and actions. 

D. Enable the use of dynamic database, enable traffic classification and actions. 

View Answer

Q8. Which Cisco Security Manager form factor is recommended for deployments with fewer than 25 devices? 

A. only Cisco Security Manager Standard 

B. only Cisco Security Manager Professional 

C. only Cisco Security Manager UCS Server Bundle 

D. both Cisco Security Manager Standard and Cisco Security Manager Professional 

View Answer

Q9. A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be configured to prevent the printer from causing network issues? 

A. Remove the ip helper-address 

B. Configure a Port-ACL to block outbound TCP port 68 

C. Configure DHCP snooping 

D. Configure port-security 

View Answer

Q10. Which action is considered a best practice for the Cisco ASA firewall? 

A. Use threat detection to determine attacks 

B. Disable the enable password 

C. Disable console logging D. Enable ICMP permit to monitor the Cisco ASA interfaces 

E. Enable logging debug-trace to send debugs to the syslog server 

View Answer