In single context mode, how many security policies can be configured on the device?

Up to two, one for inbound and one for outbound

Unlimited, but they must be identical

What is a characteristic of multi-context mode on a Cisco ASA?

Only one context can be active at a time.

Contexts are used only for management traffic.

Each context runs its own independent operating system image.

Multiple virtual firewalls share the same hardware, each with its own configuration and policies.

In multi-context mode, what is the role of the 'admin context'?

It is the first context created and has special privileges for managing the device.

It is used only for management and is not able to pass data traffic.

It is the context that contains the global configuration for all contexts.

It is the context that handles all routing for other contexts.

What is multi-instance mode on Cisco FTD?

A single firewall instance with multiple security contexts.

Multiple hardware devices working as a cluster.

Multiple independent firewall instances running on a single hardware platform, each with its own management and resources.

Multiple virtual firewalls (contexts) sharing one OS instance.

CCIE Security

Domain 1Objective 1

1.1 Deployment Modes on Cisco ASA and Cisco FTD CCIE-SECURITY Practice Questions (Page 3)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

7concepts

20%of the exam

Questions 11–15

11foundation · easy
In single context mode, how many security policies can be configured on the device?
Select an answer first
12foundation · easy
What is a characteristic of multi-context mode on a Cisco ASA?
Select an answer first
13foundation · easy
In multi-context mode, what is the role of the 'admin context'?
Select an answer first
14foundation · easy
What is multi-instance mode on Cisco FTD?
Select an answer first
15application · easy
A company is deploying a new ASA firewall at the edge of its network. The firewall must connect to the ISP router on one interface and to the internal core switch on another interface, with each interface in a different IP subnet. The security team needs to perform NAT for internal users accessing the internet. Which deployment mode should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.