500-260 by Cisco Valid Free Exam Practice Test

Question 1

Which access policy action should be applied if traffic is to pass without applying any additional inspection?

A. monitor B. allow C. trust D. permit

Correct Answer: C

Question 2

Refer to the exhibit.

When the user "contractor" Cisco AnyConnect tunnel is established, what type of Cisco ASA user restrictions are applied to the tunnel?

A. full restrictions (CLI show commands and Cisco ASDM monitoring permissions only) B. full access with no restrictions C. full restrictions (no read, no write, no execute permissions) D. full restrictions (no Cisco ASDM, no CLI, no console access)

Correct Answer: B

Question 3

On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

A. set connection advanced-options B. tcp-options C. inspect D. sysopt connection E. parameters

Correct Answer: A

Question 4

Refer to the exhibit.

Which statement describes the effect of the configuration?

A. The SFR is configured to passively inspect traffic on all adaptive security appliance interfaces. B. If the SFR fails, all traffic from the outside will be dropped. C. The SFR is configured as an inline inspector of traffic on all adaptive security appliance interfaces. D. If the SFR fails, redirected traffic that matches the service policy from the outside will be dropped.

Correct Answer: D

Question 5

Which three options are assignable file dispositions? (Choose three.)

A. unassigned B. user-defined C. malware D. custom detection E. permit F. unknown

Correct Answer: C,D,F

Cisco ASA Express Security (SAEXS) - 500-260 Exam Practice Test