Free Cisco 500-260 Practice Test & Real Exam Questions

Exam Code/Number: 500-260
Exam Name/Title: Cisco ASA Express Security (SAEXS)
Certification Provider: Cisco
Corresponding Certification: Next-Generation Firewall Express Security Engineer

Exam Questions: 50
Updated On: May 31, 2026

Question #1

You are configuring bookmarks for the clientless SSL VPN portal without the use of plug-ins. Which three bookmark types are supported? (Choose three.)

A. Telnet

B. RDP

C. CIFS

D. SSH

E. HTTP

F. FTP

Discussion 0

Correct Answer: C,E,F Vote an answer

Question #2

When the Cisco ASA appliance is processing packets, which action is performed first?

A. Check if the packet matches an existing connection in the connection table.

B. Check if the packet is permitted or denied by the global ACL.

C. Check if the packet matches an inspection policy.

D. Check if the packet matches a NAT rule.

E. Check if the packet is permitted or denied by the inbound interface ACL.

F. Check if the packet is permitted or denied by the outbound interface ACL.

Discussion 0

Correct Answer: A Vote an answer

Question #3

Which two Cisco ASA licensing features are correct with Cisco ASA Software Version 8.3 and later? (Choose two.)

A. Time-based licenses are stackable in duration but not in capacity.

B. Cisco ASA appliances configured as failover pairs disregard the time-based activation keys.

C. Identical licenses are not required on the primary and secondary Cisco ASA appliance.

D. A time-based license completely overrides the permanent license, ignoring all permanently licensed features until the time-based license is uninstalled.

Discussion 0

Correct Answer: A,C Vote an answer

Question #4

Which threat score rating is the default value that identifies malware?

A. greater than or equal to 76

B. greater than or equal to 80

C. greater than or equal to 85

D. greater than or equal to 75

Discussion 0

Correct Answer: A Vote an answer

Question #5

Refer to the exhibit.

Which traffic is permitted on the inside interface without any interface ACLs configured?

A. No input traffic is permitted on the inside interface

B. any IP traffic input to the inside interface

C. any IP traffic input to the inside interface destined to any lower security level interfaces

D. No output traffic is permitted on the inside interface

E. only HTTP traffic output from the inside interface

F. only HTTP traffic input to the inside interface

Discussion 0

Correct Answer: F Vote an answer

Download Free Cisco 500-260 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 500-260 exam.