350-701 · Question #437
Which Cisco ASA Platform mode disables the threat detection features except for Advanced Threat Statistics?
The correct answer is D. multiple context. Multiple context mode (D) disables most threat detection features on the Cisco ASA because each security context operates as a separate virtual firewall, and the system context managing resources cannot simultaneously run per-context threat detection - only Advanced Threat Statis
Question
Which Cisco ASA Platform mode disables the threat detection features except for Advanced Threat Statistics?
Options
- Acluster
- Btransparent
- Crouted
- Dmultiple context
How the community answered
(43 responses)- A2% (1)
- B2% (1)
- C7% (3)
- D88% (38)
Explanation
Multiple context mode (D) disables most threat detection features on the Cisco ASA because each security context operates as a separate virtual firewall, and the system context managing resources cannot simultaneously run per-context threat detection - only Advanced Threat Statistics remains available at the system level.
- Cluster (A) is wrong because clustering relates to grouping multiple ASA units for high availability and load balancing, not feature restriction in that way.
- Transparent (B) is wrong because transparent mode is a Layer 2 "bump in the wire" deployment that still supports threat detection features.
- Routed (C) is wrong because routed mode is the default Layer 3 deployment and has full threat detection capability.
Memory tip: Think "multiple contexts = multiple tenants sharing one box" - when resources are shared across contexts, the ASA can't afford the per-context processing overhead of full threat detection, so it strips it down to just statistics.
Topics
Community Discussion
No community discussion yet for this question.