How would you verify the current deployment mode on a Cisco ASA?

Use the 'show context' command.

Use the 'show version' command.

Use the 'show running-config' command.

Which statement is true about interfaces in routed mode on a Cisco ASA?

Each interface is associated with a different IP subnet.

Interfaces do not require IP addresses.

All interfaces must be in the same IP subnet.

Interfaces are used only for management, not for data traffic.

How does a Cisco ASA in transparent mode handle traffic?

It bridges traffic at Layer 2, forwarding frames based on MAC addresses while applying security policies.

It drops all traffic that is not destined to the firewall itself.

It routes traffic between different subnets.

It performs NAT on all traffic by default.

What is a key characteristic of transparent mode on an ASA/FTD?

The firewall is a default gateway for connected hosts.

The firewall must be the only Layer 2 device in the path.

The firewall can be inserted into an existing network without changing the IP addressing scheme.

The firewall does not require IP addresses on its interfaces.

CCIE Security

Domain 1Objective 1

1.1 Deployment Modes on Cisco ASA and Cisco FTD CCIE-SECURITY Practice Questions (Page 2)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

7concepts

20%of the exam

Questions 6–10

6foundation · easy
How would you verify the current deployment mode on a Cisco ASA?
Select an answer first
7foundation · easy
Which statement is true about interfaces in routed mode on a Cisco ASA?
Select an answer first
8foundation · easy
How does a Cisco ASA in transparent mode handle traffic?
Select an answer first
9foundation · easy
What is a key characteristic of transparent mode on an ASA/FTD?
Select an answer first
10foundation · easy
What is the default context mode for a Cisco ASA or FTD?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.