Cisco Certified Internetwork Expert (CCIE) Practice Test

In a Cisco ASA multiple-context mode of operation configuration, which three session types are resource-limited by default? (Choose three)

1. ASDM sessions

2. Telnet sessions

3. IPsec sessions

4. SSH sessions

The correct answer is: ASDM sessions

In a Cisco ASA configured for multiple-context mode, certain session types impose resource limitations, which management can control to ensure optimal performance and resource allocation across various contexts. Among these session types, ASDM sessions, Telnet sessions, and SSH sessions are indeed resource-limited by default. ASDM sessions are limited because they require significant resources for graphical user interface operations and can consume memory and CPU. By default, a maximum number of ASDM sessions are allowed to manage this resource usage effectively. Telnet sessions also have resource limitations as they are less secure and consume resources on processing connections and sessions, especially under heavy loads. Due to these considerations, limitations are imposed to maintain a balanced performance across different contexts. SSH sessions are similarly constrained by default in this operational mode since SSH is often used for secure command-line access to the device. Limiting the number of concurrent SSH sessions helps manage both security and resource utilization. Recognizing that these session types have inherent resource-intensive characteristics aids in understanding the necessity of imposing limits to maintain stability and performance on the Cisco ASA device operating in multiple-context mode.