1.2 Firewall Features on Cisco ASA and FTD CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of NAT on Cisco ASA/FTD translates the source IP address of traffic from an inside network to a single public IP address, using different source ports to differentiate multiple internal hosts?

   • AIdentity NAT
   • BTwice NAT
   • CStatic NAT
   • DDynamic PAT
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which command is used to create a traffic zone on Cisco ASA/FTD?

   • Atraffic-zone name
   • Binterface zone
   • Czone-pair name
   • Dzone security name
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In zone-based policy enforcement on Cisco ASA/FTD, what is a zone pair used for?

   • ATo create a new zone
   • BTo define the traffic flow between two zones and apply policies
   • CTo configure NAT between zones
   • DTo assign interfaces to zones
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which command is used to apply a policy map to a zone pair on Cisco ASA/FTD?

   • Azone-pair security
   • Bclass-map type inspect
   • Cservice-policy type inspect
   • Dpolicy-map type inspect
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of policy-based routing (PBR) on Cisco ASA/FTD?

   • ATo perform NAT on traffic
   • BTo filter traffic based on ACLs
   • CTo inspect traffic for malware
   • DTo route traffic based on criteria other than destination IP, such as source or application
   Reveal Solution Discussion Select an answer first