Cisco 500-258 Online Practice Questions and Exam Preparation

Cisco 500-258 Online Questions & Answers

• Question 1:

  A security administrator suspects that an internal system has been infected by malware and communicates with an external server. Which Cisco ASA NGFW license must the administrator have to detect and monitor the unauthorized command and control network traffic?

  A. AVC
  B. WSE
  C. CWS
  D. Botnet traffic
  D. Botnet traffic

• Question 2:

  Refer to the exhibit.

  

  A new NOC engineer, while viewing a real-time log from an SSL VPN tunnel, has a question about a line in the log. The IP address 172.26.26.30 is attached to which interface in the network?

  A. the Cisco ASA physical interface
  B. the physical interface of the end user
  C. the Cisco ASA SSL VPN tunnel interface
  D. the SSL VPN tunnel interface of the end user
  B. the physical interface of the end user

• Question 3:

  Refer to the exhibit.

  

  Which traffic is permitted on the inside interface without any interface ACLs configured?

  A. any IP traffic input to the inside interface
  B. any IP traffic input to the inside interface destined to any lower security level interfaces
  C. only HTTP traffic input to the inside interface
  D. only HTTP traffic output from the inside interface
  E. No input traffic is permitted on the inside interface.
  F. No output traffic is permitted on the inside interface.
  C. only HTTP traffic input to the inside interface

• Question 4:

  Which NGFW component collects user details so that access policies can match traffic based on this information?

  A. directory realms
  B. identity policies
  C. authentication settings
  D. CDA or Active Directory agent
  B. identity policies

• Question 5:

  Which three elements can an administrator use to control access to network resources through context- aware access policies? (Choose three.)

  A. 5-tuple characteristics
  B. time of day
  C. certificate fields
  D. HTTP client type
  E. application
  F. geo-location data
  G. VPN client
  A. 5-tuple characteristics
  D. HTTP client type
  E. application

• Question 6:

  Datagram Transport Layer Security (DTLS) was introduced to solve performance issues. Choose three characteristics of DTLS. (Choose three.)

  A. It uses TLS to negotiate and establish DTLS connections.
  B. It uses DTLS to transmit datagrams.
  C. It is disabled by default.
  D. It uses TLS for data packet retransmission.
  E. It replaces underlying transport layer with UDP 443.
  F. It uses TLS to provide low-latency video application tunneling.
  A. It uses TLS to negotiate and establish DTLS connections.
  B. It uses DTLS to transmit datagrams.
  E. It replaces underlying transport layer with UDP 443.

• Question 7:

  When the Cisco ASA appliance is processing packets, which action is performed first?

  A. Check if the packet is permitted or denied by the inbound interface ACL.
  B. Check if the packet is permitted or denied by the outbound interface ACL.
  C. Check if the packet is permitted or denied by the global ACL.
  D. Check if the packet matches an existing connection in the connection table.
  E. Check if the packet matches an inspection policy.
  F. Check if the packet matches a NAT rule.
  D. Check if the packet matches an existing connection in the connection table.

• Question 8:

  Which three statements about the FirePOWER appliance are true? (Choose three.)

  A. has three platforms: 6000 Series, 7000 Series, and 8000 Series
  B. supports NGIPS with contextual aware
  C. scales up to 100 Gb/s IPS throughputs
  D. supports advanced malware protection
  E. supports application control/URL filtering
  B. supports NGIPS with contextual aware
  D. supports advanced malware protection
  E. supports application control/URL filtering

• Question 9:

  Which component determines the number of required PRMS licenses?

  A. AVC seats
  B. WSE seats
  C. IPS for NGFW modules
  D. ASAs
  D. ASAs

• Question 10:

  Which three methods are the most effective for an NGFW administrator to determine the URL category of a website? (Choose three.)

  A. Select the site from the Web Destinations dashboard.
  B. Google it.
  C. Enter the URL into the NGFW search field.
  D. Select an event with the website as the destination in the event viewer.
  E. Submit the URL to https://securityhub.cisco.com.
  F. Open a TAC case at http://cisco.com/tac.
  G. Search for the site on the components objects screen.
  A. Select the site from the Web Destinations dashboard.
  D. Select an event with the website as the destination in the event viewer.
  E. Submit the URL to https://securityhub.cisco.com.