Cisco 500-258 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 500-258
Exam Name/Title: Cisco ASA Express Security
Certification Provider: Cisco
Corresponding Certification: Cisco Specialist

Exam Questions: 55
Updated On: May 26, 2026

Question #13

On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

A. parameters

B. sysopt connection

C. set connection advanced-options

D. tcp-options

E. inspect

Discussion 0

Correct Answer: C Vote an answer

Question #14

DRAG DROP

Discussion 0

Correct Answer:

Question #15

Which three statements about the FirePOWER appliance are true? (Choose three.)

A. supports NGIPS with contextual aware

B. scales up to 100 Gb/s IPS throughputs

C. supports application control/URL filtering

D. has three platforms: 6000 Series, 7000 Series, and 8000 Series

E. supports advanced malware protection

Discussion 0

Correct Answer: A,C,E Vote an answer

Question #16

The "HTTPS decryption" feature is enabled with the default settings and decryption and IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an untrusted certificate?

A. The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.

B. The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.

C. The HTTPS traffic is forwarded to the client but is not decrypted or inspected.

D. The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.

E. The HTTPS traffic is decrypted but not inspected by the IPS.

Discussion 0

Correct Answer: B Vote an answer

Question #17

Which four unicast or multicast routing protocols are supported by the Cisco ASA appliance? (Choose four.)

A. MOSPF

B. Bidirectional PIM

C. BGP

D. EIGRP

E. ISIS

F. OSPF

G. PIM dense mode

H. RIP (v1 and v2)

Discussion 0

Correct Answer: B,D,F,H Vote an answer

Question #18

Refer to the exhibit.

Which Cisco ASA CLI commands configure these static routes in the Cisco ASA routing table?

A. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 1 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 1

B. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 2

C. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 2

D. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 1 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 1

E. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11

F. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11

Discussion 0

Correct Answer: B Vote an answer

Download Free Cisco 500-258 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 500-258 exam.