Online Access Free 500-258 Practice Test

Which Cisco ASA NGFW license is needed to allow a high-school security administration to implement policy to allow student access to high-reputation sites only?

• A.IPS for NGFW
• B.Botnet Traffic Filtering
• C.WSE
• D.AnyConnect Premium
• E.AVC

Which option describes what client-based access control enables?

• A.access to otherwise high-reputation web sites while preventing advertisements or other material on the site hosted from external low-reputation sites
• B.access to specific applications or general types of applications
• C.access based on the user, regardless of their device or IP address
• D.access based on the HTTP user agent being used to initiate a traffic flow

When establishing a Cisco AnyConnect SSL VPN tunnel, a system administrator wants to restrict remote home office users to either print to their local printer or send the remaining traffic down the Cisco AnyConnect SSL VPN tunnel (with restricted Internet access).
Choose both a tunnel policy option and an ACL type to accomplish this design goal. (Choose two.)

• A.tunnel all networks
• B.standard ACL
• C.web ACL
• D.exclude network list from the tunnel
• E.extended ACL
• F.tunnel network list below

DRAG DROP

Correct Answer:

The "HTTPS decryption" feature is enabled with the default settings and decryption and IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an untrusted certificate?

• A.The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.
• B.The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.
• C.The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.
• D.The HTTPS traffic is forwarded to the client but is not decrypted or inspected.
• E.The HTTPS traffic is decrypted but not inspected by the IPS.