PrepAway - Latest Free Exam Questions & Answers

Which option can cause the interactive setup script not…

Which option can cause the interactive setup script not to work on a Cisco ASA 5520 appliance running software version 8.4.1?

PrepAway - Latest Free Exam Questions & Answers

A.
The clock has not been set on the Cisco ASA appliance using the clock set command.

B.
The HTTP server has not been enabled using the http server enable command.

C.
The domain name has not been configured using the domain-name command.

D.
The inside interface IP address has not been configured using the ip address command.

E.
The management 0/0 interface has not been configured as management-only and assigned a name using the nameif command.

Explanation:
http://www.checkthenetwork.com/networksecurityCiscoASA1.asp
shows need for nameif and
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html shows manaagement only The ASA 5510 and higher adaptive security
appliance also includes the following type:
·management The management interface is a Fast Ethernet interface designed for management traffic only, and is specified as management0/0. You can,
however, use it for through traffic if desired (see the management-only command). In transparent firewall mode, you can use the management interface in addition
to the two interfaces allowed for through traffic. You can also add subinterfaces to the management interface to provide management in each security context for
multiple context mode.
Append the subinterface ID to the physical interface ID separated by a period (.). In multiple context mode, enter the mapped name if one was assigned using the
allocate- interface command.
For example, enter the following command:
hostname(config)# interface gigabitethernet0/1.1
Step 2 To name the interface, enter the following command:
hostname(config-if)# nameif name
The name is a text string up to 48 characters, and is not case-sensitive. You can change the name by reentering this command with a new value. Do not enter the
no form, because that command causes all commands that refer to that name to be deleted.
Step 3 To set the security level, enter the following command:
hostname(config-if)# security-level number Where number is an integer between 0 (lowest) and 100 (highest).
Step 4 (Optional) To set an interface to management-only mode, enter the following command:
hostname(config-if)# management-only The ASA 5510 and higher adaptive security appliance includes a dedicated management interface called Management 0/0,
which is meant to support traffic to the security appliance. However, you can configure any interface to be a management- only interface using the managementonly command. Also, for Management 0/0, you can disable management-only mode so the interface can pass through traffic just like any other interface.


Leave a Reply