Free Cisco 500-260 Exam Dumps Questions & Answers

On Cisco ASA Software Version 8.3 and later, which two statements correctly describe the NAT table or NAT operations? (Choose two.)

• A.  The NAT table has four sections.
• B.  Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.
• C.  Twice NAT is required for hosts on the inside to be accessible from the outside.
• D.  Auto NAT also is referred to as Object NAT.
• E.  The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.
• F.  Auto NAT configurations are found only in the first (top) section of the NAT table.

Which access policy action should be applied if traffic is to pass without applying any additional inspection?

• A.  monitor
• B.  allow
• C.  trust
• D.  permit

Refer to the exhibit.

Which command enables the stateful failover option?

• A.  failover lan unit primary
• B.  failover group 1
• C.  primary
• D.  preempt
• E.  failover link MYFAILOVER GigabitEthernet0/2
• F.  failover lan interface MYFAILOVER GigabitEthernet0/2
• G.  failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10

Which option is correct for configuring the SRF for passive, out-of-band traffic evaluation?

• A.  sfr passive-mode
• B.  sfr monitor-only
• C.  sfr fail-close oob
• D.  sfr fail-open monitor-only

Refer to the exhibit.

When the user "contractor" Cisco AnyConnect tunnel is established, what type of Cisco ASA user restrictions are applied to the tunnel?

• A.  full restrictions (CLI show commands and Cisco ASDM monitoring permissions only)
• B.  full restrictions (no Cisco ASDM, no CLI, no console access)
• C.  full restrictions (no read, no write, no execute permissions)
• D.  full access with no restrictions