PrepAway - Latest Free Exam Questions & Answers

Which two statements about Cisco ASA failover troubleshooting are true?

Which two statements about Cisco ASA failover troubleshooting are true? (Choose two.)

PrepAway - Latest Free Exam Questions & Answers

A.
With active/active failover, failover link troubleshooting should be done in the system execution
space.

B.
With active/active failover, ASR groups must be enabled.

C.
With active/active failover, user data passing interfaces troubleshooting should be done within
the context execution space.

D.
The failed interface threshold is set to 1. Using the show monitor-interface command, if one of
the monitored interfaces on both the primary and secondary Cisco ASA appliances is in the
unknown state, a failover should occur.

E.
Syslog level 1 messages will be generated on the standby unit only if the logging standby
command is used.

Explanation:
System Configuration
The system administrator adds and manages contexts by configuring each context configuration
location, allocated interfaces, and other context operating parameters in the system configuration,
which, like a single mode configuration, is the startup configuration. The system configuration
identifies basic settings for the security appliance. The system configuration does not include any
network interfaces or network settings for itself; rather, when the system needs to access network
resources (such as downloading the contexts from the server), it uses one of the contexts that is
designated as the admin context. The system configuration does include a specialized failover
interface for failover traffic only.
Context Configurations
The security appliance includes a configuration for each context that identifies the security policy,
interfaces, and almost all the options you can configure on a standalone device. You can store
context configurations on the internal Flash memory or the external Flash memory card, or you
can download them from a TFTP, FTP, or HTTP(S) server.


Leave a Reply