500-258 試験問題を無料オンラインアクセス

Refer to the exhibit.

A new NOC engineer, while viewing a real-time log from an SSL VPN tunnel, has a question about a line in the log.
The IP address 172.26.26.30 is attached to which interface in the network?

• A.the physical interface of the end user
• B.the Cisco ASA physical interface
• C.the SSL VPN tunnel interface of the end user
• D.the Cisco ASA SSL VPN tunnel interface

Which option is the typical web reputation range for sites that tend to be well managed, responsible content syndication networks, and user-generated content sites?

• A.-10 to -6
• B.0 to 5
• C.5 to 10
• D.-6 to -3
• E.-3 to 3

Refer to the exhibit.

Which traffic is permitted on the inside interface without any interface ACLs configured?

• A.No output traffic is permitted on the inside interface.
• B.any IP traffic input to the inside interface destined to any lower security level interfaces
• C.any IP traffic input to the inside interface
• D.only HTTP traffic input to the inside interface
• E.only HTTP traffic output from the inside interface
• F.No input traffic is permitted on the inside interface.

The "HTTPS decryption" feature is enabled with the default settings and decryption and IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an untrusted certificate?

• A.The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.
• B.The HTTPS traffic is decrypted but not inspected by the IPS.
• C.The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.
• D.The HTTPS traffic is forwarded to the client but is not decrypted or inspected.
• E.The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.

Which three statements about the FirePOWER appliance are true? (Choose three.)

• A.has three platforms: 6000 Series, 7000 Series, and 8000 Series
• B.supports advanced malware protection
• C.supports application control/URL filtering
• D.supports NGIPS with contextual aware
• E.scales up to 100 Gb/s IPS throughputs