Cisco Security Chapter 10

Device Setup

Which ASDM configuration option is used to configure the ASA enable secret password?

System Time

Refer to the exhibit. Which Device Setup ASDM menu option would be used to configure the ASA for an NTP server?

true

True or False?

The ASA can be configured through ASDM as a DHCP server.

inside

Which ASDM interface option would be used to configure an ASA as a DHCP server for local corporate devices?

IKE and ISAKMP

When ASDM is used to configure an ASA site-to-site VPN, what can be customized to secure traffic?

clientless SSL

Which VPN solution allows the use of a web browser to establish a secure, remote-access VPN tunnel to the ASA?

web server access

What must be configured on an ASA before it can be accessed by ASDM?

Enter the name "outside" in the Interface Name text box

How is an ASA interface configured as an outside interface when using ASDM?

Management Access

Refer to the exhibit. Which Device Management menu item would be used to access the ASA command line from within Cisco ASDM?

clientless SSL VPN

Which remote-access VPN connection allows the user to connect by using a web browser?

master passphrase

Which ASDM configuration option re-encrypts all shared keys and passwords on an ASA?

AES

Which type of encryption is applied to shared keys and passwords when the master passphrase option is enabled through ASDM for an ASA?

The administrator can connect to and manage a single ASA

Which statement describes the function provided to a network administrator who uses the Cisco Adaptive Security Device Manager (ASDM) GUI that runs as a Java Web Start application?

It hides the complexity of security commands

What is one benefit of using ASDM compared to using the CLI to configure the Cisco ASA?

SSL

Which type of security is required for initial access to the Cisco ASDM by using the local application option?

a dedicated Layer 3 management interface

Which minimum configuration is required on most ASAs before ASDM can be used?

- the peer

- a valid access list

When the CLI is used to configure an ISR for a site-to-site VPN connection, which two items must be specified to enable a crypto map policy? (Choose two.)

to define interesting traffic

What is the purpose of the ACL in the configuration of an ISR site-to-site VPN connection?

IPsec (IKEv2) VPN

Which remote-access VPN connection allows the user to connect using Cisco AnyConnect?

The ASA 5505 can use either a AAA server or a local database

Which statement describes available user authentication methods when using an ASA 5505 device?

clientless SSL VPN

Which remote-access VPN connection needs a bookmark list?

The user no longer has access to the VPN

What occurs when a user logs out of the web portal on a clientless SSL VPN connection?

The host initiates a clientless VPN connection using a compliant web browser to download the client

If an outside host does not have the Cisco AnyConnect client preinstalled, how would the host gain access to the client image?

posture assessment

What is an optional feature that is performed during the Cisco AnyConnect Secure Mobility Client VPN establishment phase?

both SSL and IPsec

Which item describes secure protocol support provided by Cisco AnyConnect?

to assign IP addresses to clients when they connect

What is the purpose of configuring an IP address pool to be used for client-based SSL VPN connections?