Cisco ASA Express Security (500-258) Free Practice Test

Question 1

Datagram Transport Layer Security (DTLS) was introduced to solve performance issues. Choose three characteristics of DTLS. (Choose three.)

A. It uses TLS for data packet retransmission.

B. It replaces underlying transport layer with UDP 443.

C. It uses TLS to provide low-latency video application tunneling.

D. It uses TLS to negotiate and establish DTLS connections.

E. It is disabled by default.

F. It uses DTLS to transmit datagrams.

Correct Answer: B,D,F

Question 2

Refer to the exhibit.

Which command enables the stateful failover option?

A. failover lan unit primary

B. failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10

C. failover lan interface MYFAILOVER GigabitEthernet0/2

D. primary

E. failover link MYFAILOVER GigabitEthernet0/2

F. failover group 1

G. preempt

Correct Answer: E

Question 3

Which statement about the on-box version of PRSM is true?

A. The on-box PRSM can support up to five NGFW modules.

B. Cisco ASA NGFW comes preinstalled with a version of PRSM.

C. The on-box PRSM license can be applied to the off-box version of PRSM.

D. Cisco ASA NGFW requires an ESXi license to run on-box PRSM.

Correct Answer: B

Question 4

Refer to the exhibit.

After a remote user established a Cisco AnyConnect session from a wireless card through the Cisco ASA appliance of a partner to a remote server, the user opened the Cisco AnyConnect VPN Client Statistics Details screen.
What are the two sources of the IP addresses that are marked A and B? (Choose two.)

A. IP address of the Cisco ASA virtual HTTP server of the partner

B. IP address of the default gateway router of the remote user

C. IP address of the Cisco ASA physical interface of the partner

D. IP address that is assigned to the remote user from the Cisco ASA address pool

E. IP address that is assigned to the wireless Ethernet adapter of the remote user

F. IP address of the default gateway router of the partner

Correct Answer: C,D

Question 5

A security administrator suspects that an internal system has been infected by malware and communicates with an external server.
Which Cisco ASA NGFW license must the administrator have to detect and monitor the unauthorized command and control network traffic?

A. WSE

B. Botnet traffic

C. AVC

D. CWS

Correct Answer: B

Question 6

Which three features does the Cisco Meraki Security Appliance offer? (Choose three.)

A. multisite cloud management

B. auto-VPN

C. content filtering

D. antivirus

E. web-aware firewall

Correct Answer: A,B,C

Welcome to TestSimulate

Cisco ASA Express Security (500-258) Free Practice Test