DCOM 211 Final Study Guide Question
and answers already passed
2025/2026
True - correct answer ✔A system execution space (customer context) does not have any Layer 2 or
Layer 3 interfaces or any network settings.
False - correct answer ✔An admin context is created after the System Execution Space and all
(customer contexts) have been created
True - correct answer ✔Any interface not defined as an admin context is a customer context
False - correct answer ✔Stealth firewalls do not provide a way to filter packets that traverse from one
host to another on the same LAN segment
True - correct answer ✔Traditional firewalls require a new network segment to be created when they
are inserted into a network
True - correct answer ✔The alias command is not supported in transparent firewall mode.
False - correct answer ✔Reverse Routing Injection (RRI) is supported when a Cisco ASA is configured as
a transparent firewall mode
False - correct answer ✔Network Address Translation Traversal (NAT-T) & Public Key Infrastructure
(PKI) are partially supported in transparent mode for the management tunnel
, False - correct answer ✔In a scenario where all security contexts in the Cisco ASA use unique physical
or logical subinterfaces, the packet classification becomes more difficult because the security appliance
labels the packets based upon the source interface
True - correct answer ✔In a scenario where an interface is shared between multiple security contexts,
then the interface may be assigned the same mac address across all virtual firewalls
Single-Mode Transparent Firewalls - correct answer ✔_____ ____ _____ _____ is when the security
appliance acts as a secured bridge that switches traffic from one interface to another.
Multimode Transparent Firewalls - correct answer ✔_____ _____ _____ does not support the sharing
of interfaces between multiple contexts
Transparent Firewalls - correct answer ✔_____ _____ can optionally inspect layer 2 traffic & filter
unwanted traffic
Routed Firewalls - correct answer ✔_____ _____ segregate protected networks from unprotected ones
by acting as an extra hop in the network design
Standalone Firewall or Virtual - correct answer ✔_____ _____ acts & behaves as an independent entity
with its own configuration
Port 22 or port 23 - correct answer ✔Remote management for Admin Context is conducted through:
Up to four physical interfaces or subinterfaces can be assigned to this bridge group. - correct answer
✔The Bridge Group Virtual Interface (BVI) Bridge group feature)
Location of context's startup configuration (Configlet)
and answers already passed
2025/2026
True - correct answer ✔A system execution space (customer context) does not have any Layer 2 or
Layer 3 interfaces or any network settings.
False - correct answer ✔An admin context is created after the System Execution Space and all
(customer contexts) have been created
True - correct answer ✔Any interface not defined as an admin context is a customer context
False - correct answer ✔Stealth firewalls do not provide a way to filter packets that traverse from one
host to another on the same LAN segment
True - correct answer ✔Traditional firewalls require a new network segment to be created when they
are inserted into a network
True - correct answer ✔The alias command is not supported in transparent firewall mode.
False - correct answer ✔Reverse Routing Injection (RRI) is supported when a Cisco ASA is configured as
a transparent firewall mode
False - correct answer ✔Network Address Translation Traversal (NAT-T) & Public Key Infrastructure
(PKI) are partially supported in transparent mode for the management tunnel
, False - correct answer ✔In a scenario where all security contexts in the Cisco ASA use unique physical
or logical subinterfaces, the packet classification becomes more difficult because the security appliance
labels the packets based upon the source interface
True - correct answer ✔In a scenario where an interface is shared between multiple security contexts,
then the interface may be assigned the same mac address across all virtual firewalls
Single-Mode Transparent Firewalls - correct answer ✔_____ ____ _____ _____ is when the security
appliance acts as a secured bridge that switches traffic from one interface to another.
Multimode Transparent Firewalls - correct answer ✔_____ _____ _____ does not support the sharing
of interfaces between multiple contexts
Transparent Firewalls - correct answer ✔_____ _____ can optionally inspect layer 2 traffic & filter
unwanted traffic
Routed Firewalls - correct answer ✔_____ _____ segregate protected networks from unprotected ones
by acting as an extra hop in the network design
Standalone Firewall or Virtual - correct answer ✔_____ _____ acts & behaves as an independent entity
with its own configuration
Port 22 or port 23 - correct answer ✔Remote management for Admin Context is conducted through:
Up to four physical interfaces or subinterfaces can be assigned to this bridge group. - correct answer
✔The Bridge Group Virtual Interface (BVI) Bridge group feature)
Location of context's startup configuration (Configlet)
