Which option can cause the interactive setup script not to work on a Cisco ASA 5520 appliance
running software version 8.4.1?
A.
The clock has not been set on the Cisco ASA appliance using the clock set command.
B.
The HTTP server has not been enabled using the http server enable command.
C.
The domain name has not been configured using the domain-name command.
D.
The inside interface IP address has not been configured using the ip address command.
E.
The management 0/0 interface has not been configured as management-only and assigned a
name using the nameif command.
Explanation:
http://www.checkthenetwork.com/networksecurityCiscoASA1.aspshows need for nameif and
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html
shows manaagement only The ASA 5510 and higher adaptive security appliance also includes the
following type:
•management The management interface is a Fast Ethernet interface designed for management
traffic only, and is specified as management0/0. You can, however, use it for through traffic if
desired (see the management-only command). In transparent firewall mode, you can use the
management interface in addition to the two interfaces allowed for through traffic. You can also
add subinterfaces to the management interface to provide management in each security context
for multiple context mode.
Append the subinterface ID to the physical interface ID separated by a period (.).
In multiple context mode, enter the mapped name if one was assigned using the allocate-interface
command.
For example, enter the following command:
hostname(config)# interface gigabitethernet0/1.1
Step 2 To name the interface, enter the following command:
hostname(config-if)# nameif name
The name is a text string up to 48 characters, and is not case-sensitive. You can change the name
by reentering this command with a new value. Do not enter the no form, because that command
causes all commands that refer to that name to be deleted.
Step 3 To set the security level, enter the following command:
hostname(config-if)# security-level number Where number is an integer between 0 (lowest) and
100 (highest).
Step 4 (Optional) To set an interface to management-only mode, enter the following command:
hostname(config-if)# management-only The ASA 5510 and higher adaptive security appliance
includes a dedicated management interface called Management 0/0, which is meant to support
traffic to the security appliance. However, you can configure any interface to be a managementonly interface using the management-only command. Also, for Management 0/0, you can disable
management-only mode so the interface can pass through traffic just like any other interface.