500-258 by Cisco Valid Free Exam Practice Test

Question 1

Which four unicast or multicast routing protocols are supported by the Cisco ASA appliance? (Choose four.)

A. RIP (v1 and v2) B. EIGRP C. ISIS D. MOSPF E. Bidirectional PIM F. BGP G. OSPF H. PIM dense mode

Correct Answer: A,B,E,G

Question 2

Which two options are identity policy types? (Choose two.)

A. passive B. active C. black-list D. white-list E. known F. unknown

Correct Answer: A,B

Question 3

Which three elements can an administrator use to control access to network resources through context-aware access policies? (Choose three.)

A. geo-location data B. time of day C. HTTP client type D. certificate fields E. VPN client F. 5-tuple characteristics G. application

Correct Answer: C,F,G

Question 4

Your IT department needs to run a custom-built TCP application within the clientless SSL VPN tunnel. The network administrator suggests running the smart tunnel application. Which three statements concerning smart tunnel applications are true? (Choose three.)

A. They require the enabling of port forwarding. B. They support active FTP and other RTSP-based applications. C. They are supported on Windows and MAC OS X platforms. D. They require the modification of the Host file on the end-user PC. E. They support native client applications over SSL VPN. F. They do not require administrator privileges on the remote system.

Correct Answer: C,E,F

Question 5

Which NGFW component collects user details so that access policies can match traffic based on this information?

A. identity policies B. directory realms C. authentication settings D. CDA or Active Directory agent

Correct Answer: A

Question 6

Which license is required on the Cisco ASA NGFW for an administrator to manage it securely from a remote laptop?

A. Cisco Secure Desktop B. AnyConnect Endpoint Assessment C. AnyConnect Premium D. AnyConnect for Cisco VPN phone E. AnyConnect for Mobile

Correct Answer: C

Cisco ASA Express Security - 500-258 Exam Practice Test