The Cisco ASA software image has been erased from flash memory. Which two statements about the process to recover the Cisco ASA software image are true?
(Choose two.)
A.
Access to the ROM monitor mode is required.
B.
The Cisco ASA appliance must have connectivity to the TFTP server where the Cisco ASA image is stored through the Management 0/0 interface.
C.
The copy tftp flash command is necessary to start the TFTP file transfer.
D.
The server command is necessary to set the TFTP server IP address.
E.
Cisco ASA password recovery must be enabled.
Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/admin_trouble.html
Using the ROM Monitor to Load a Software Image
To load a software image to an ASA from the ROM monitor mode using TFTP, perform the following steps:
Step 1 Connect to the ASA console port according to the instructions in the “Accessing the Appliance Command-Line Interface” section.
Step 2 Power off the ASA, then power it on.
Step 3 During startup, press the Escape key when you are prompted to enter ROMMON mode.
Step 4 In ROMMOM mode, define the interface settings to the ASA, including the IP address, TFTP server
address, gateway address, software image file, and port, as follows:
rommon #1> ADDRESS=10.132.44.177
rommon #2> SERVER=10.129.0.30
rommon #3> GATEWAY=10.132.44.1
rommon #4> IMAGE=f1/asa840-232-k8.bin
rommon #5> PORT=Ethernet0/0
Ethernet0/0
Link is UP
MAC Address: 0012.d949.15b8
Note Be sure that the connection to the network already exists.
Step 5 To validate your settings, enter the set command.
rommon #6> set
ROMMON Variable Settings:
ADDRESS=10.132.44.177
SERVER=10.129.0.30
GATEWAY=10.132.44.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=f1/asa840-232-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20
Step 6 Ping the TFTP server by entering the ping server command.rommon #7> ping server
Sending 20, 100-byte ICMP Echoes to server 10.129.0.30, timeout is 4 seconds:
Success rate is 100 percent (20/20)
Step 7 Load the software image by entering the tftp command.
rommon #8> tftp
ROMMON Variable Settings:
ADDRESS=10.132.44.177
SERVER=10.129.0.30
GATEWAY=10.132.44.1
PORT=Ethernet0/0
VLAN=untagged
IMAGE=f1/asa840-232-k8.bin
CONFIG=
LINKTIMEOUT=20
PKTTIMEOUT=4
RETRY=20
tftp f1/[email protected] via 10.132.44.1 Received 14450688 bytes
Launching TFTP Image…
Cisco ASA Security Appliance admin loader (3.0) #0: Mon Mar 5 16:00:07 MST 2011 Loading…
After the software image is successfully loaded, the ASA automatically exits ROMMON mode.
Step 8 To verify that the correct software image has been loaded into the ASA, check the version by entering the following command:
hostname# show version