Certbie
Question 1 of 30
Following the successful deployment of a new Cisco ASA firewall protecting a critical corporate network, an immediate and severe zero-day exploit is detected. The exploit targets a previously unknown vulnerability within the ASA\'s traffic processing engine, leading to unauthorized command execution. The security operations team has no immediate signature or patch available. Considering the urgency and the nature of the threat, what is the most appropriate immediate action to contain the breach and minimize further compromise on the Cisco ASA?
Implement granular access control lists (ACLs) and disable potentially exploited application inspection features to restrict anomalous traffic patterns.
Immediately revert the Cisco ASA to its previous stable configuration from before the deployment.
Initiate a comprehensive forensic analysis of the ASA's logs to identify the exact exploit vector before any configuration changes.
Deploy a generic Intrusion Prevention System (IPS) signature that broadly targets known exploit techniques, irrespective of the specific zero-day.

Preparing for Cisco ASA Express Security (SAEXS)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free