What is the primary role of Cisco ASA and Cisco FTD in a perimeter security architecture?

To provide wireless access for remote users

To enforce security policies and control traffic between trusted and untrusted networks

To replace the need for a router in the network

To provide Layer 2 switching between internal hosts

When configuring an ACL on a Cisco ASA or FTD, what is the default action if no matching ACE (access control entry) is found?

Redirect the traffic to the DMZ

What is the purpose of configuring Active/Standby failover on a pair of Cisco ASA or FTD devices?

To combine the processing power of two devices

To provide high availability by having one device actively process traffic while the other is ready to take over on failure

To load-balance traffic between two devices

To provide a backup internet connection

What is a key requirement for setting up high availability (failover) between two Cisco ASA or FTD devices?

Both devices must be the same model and have similar hardware/software versions

Both devices must be connected to different ISPs

Both devices must have different configurations

Both devices must be in different geographic locations

What is the purpose of a site-to-site VPN on a Cisco ASA or FTD?

To provide wireless connectivity for guests

To allow individual remote users to access the internal network

To securely connect two or more remote networks over a public network like the internet

To load-balance traffic between two sites

CCIE Security

Domain 1Objective 11

1.11 Network Connectivity Through Cisco ASA and Cisco FTD CCIE-SECURITY Practice Questions (Page 1)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

8concepts

20%of the exam

Questions 1–5

1foundation · easy
What is the primary role of Cisco ASA and Cisco FTD in a perimeter security architecture?
Select an answer first
2foundation · easy
When configuring an ACL on a Cisco ASA or FTD, what is the default action if no matching ACE (access control entry) is found?
Select an answer first
3foundation · easy
What is the purpose of configuring Active/Standby failover on a pair of Cisco ASA or FTD devices?
Select an answer first
4foundation · easy
What is a key requirement for setting up high availability (failover) between two Cisco ASA or FTD devices?
Select an answer first
5foundation · easy
What is the purpose of a site-to-site VPN on a Cisco ASA or FTD?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.