CCIE Security
Domain 1Objective 2
1.2 Firewall Features on Cisco ASA and FTD CCIE-SECURITY Practice Questions (Page 4)
Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)
44questions here
9free pages
12concepts
20%of the exam
Questions 16–20
- 16
Which directory service is commonly integrated with Cisco ASA/FTD for identity firewall?
Select an answer first - 17
On Cisco ASA/FTD, which command is used to configure LDAP authentication for identity firewall?
Select an answer first - 18
On Cisco ASA/FTD, which type of NAT modifies both the source and destination IP addresses in a single translation rule?
Select an answer first - 19
In the order of operations on Cisco ASA/FTD, which of the following is processed BEFORE NAT translation?
Select an answer first - 20
Which application inspection engine on Cisco ASA/FTD is used to enforce protocol compliance for FTP traffic, including validating commands and responses?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.