1.2 Firewall Features on Cisco ASA and FTD CCIE-SECURITY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which method of traffic redirection to a service module on Cisco ASA/FTD uses a policy-based approach, matching traffic with an ACL?

   • AInterface-based redirection
   • BPolicy-based redirection (PBR)
   • CNAT redirection
   • DStatic route redirection
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Cisco ASA/FTD configuration, which command is used to define a dynamic NAT rule that translates internal source addresses to an interface's IP address?

   • Anat (inside,outside) identity
   • Bnat (inside,outside) dynamic interface
   • Cnat (inside,outside) pool PAT
   • Dnat (inside,outside) static interface
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which command is used to verify that traffic is being redirected to a service module on Cisco ASA/FTD?

   • Ashow interface
   • Bshow route-map
   • Cshow service-policy
   • Dshow access-list
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the core concept of identity firewall on Cisco ASA/FTD?

   • AUsing user and group information to enforce access control
   • BUsing application signatures for access control
   • CUsing IP addresses only for access control
   • DUsing MAC addresses for access control
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a benefit of identity firewall over traditional IP-based firewall?

   • AIt increases throughput
   • BPolicies follow the user regardless of IP address
   • CIt eliminates the need for NAT
   • DIt simplifies ACL configuration by using MAC addresses
   Reveal Solution Discussion Select an answer first