Refer to the exhibit. Which two CLI commands will result? (Choose two. )

• A. aaa authorization network default authentication-server LOCAL
• B. aaa authorization network LOCAL
• C. aaa authorization exec authentication-server LOCAL
• D. aaa authorization exec authentication-server
• E. aaa authorization command LOCAL
• F. aaa authorization exec LOCAL

In which type of environment is the Cisco ASA MPF set connection advanced-options tcp- state-bypass option the most useful?

• A. WCCP
• B. SIP proxy
• C. BGP peering through the Cisco ASA
• D. transparent firewall
• E. asymmetric traffic flow

A customer is ordering a number of Cisco ASAs for their network. For the remote or home office, they are purchasing the Cisco ASA 5505. When ordering the licenses for their Cisco
ASAs, which two licenses must they order that are "platform specific" to the Cisco ASA
5505? (Choose two.)

• A. internal user licenses
• B. Security Plus license
• C. AnyConnect Essentials license
• D. per-user Premium SSL VPN license
• E. VPN shared license

CORRECT TEXT
Instructions
This item contains a simulation task. Refer to the scenario and topology before you start.
When you are ready, open the Topology window and click the required device to open the
GUI window on a virtual terminal. Scroll to view all parts of the Cisco ASDM screens.
Scenario
Click the PC icon to launch Cisco ASDM. You have access to a Cisco ASA 5505 via Cisco
ASDM. Use Cisco ASDM to edit the Cisco ASA 5505 configurations to enable Advanced
HTTP Application inspection by completing the following tasks:
1. Enable HTTP inspection globally on the Cisco ASA
2. Create a new HTTP inspect Map named: http-inspect-map to:
a. Enable the dropping of any HTTP connections that encounter HTTP protocol violations b. Enable the dropping and logging of any HTTP connections when the content type in the
HTTP response does not match one of the MIME types in the accept filed of the HTTP request
Note: In the simulation, you will not be able to test the HTTP inspection policy after you complete your configuration. Not all Cisco ASDM screens are fully functional.

On the Cisco ASA, what is the default access rule if no user-defined access lists are defined on the interfaces?

• A. All IP traffic is denied.
• B. All IP traffic between interfaces with the same security level are permitted.
• C. All inbound connections from the lower-security interfaces to the higher-security interfaces are permitted.
• D. All outbound connections from the higher-security interfaces to the lower-security interfaces are permitted
• E. All IP traffic in and out of the same interface is permitted.