Which two statements correctly describe ASA resource management in multiple context mode? (Choose two.)
Click on the arrows to vote for the correct answer
A. B. C. D. E.AD.
ASA (Adaptive Security Appliance) in multiple context mode is used to divide a single physical ASA device into multiple virtual firewalls, known as contexts. Each context has its own security policies, interfaces, and configurations, and is treated as a separate entity. Resource management in multiple context mode is used to allocate resources such as CPU, memory, and connection limits among the various contexts on a shared ASA platform.
The correct statements regarding ASA resource management in multiple context mode are:
A. The class sets the resource maximum limit for a context to which it belongs. In multiple context mode, the administrator can define resource classes to allocate resources to the various contexts based on their requirements. Each context is associated with a resource class, which sets the maximum limits for CPU, memory, and connection usage for that context. By assigning the context to the appropriate class, the administrator can ensure that the context receives the required resources.
D. Context belongs to a default class if not assigned to any other class. If a context is not assigned to a specific resource class, it belongs to the default class. The default class provides a predefined set of resource limits for the context, and the context will share resources with other contexts that are also in the default class.
Explanation for the incorrect statements:
B. A resource cannot be oversubscribed or set to be unlimited in the class. In multiple context mode, the resource class can be set to unlimited, allowing the context to use all available resources. Also, oversubscription of resources is possible, which allows multiple contexts to share resources beyond their allocated limits as long as the total resource usage does not exceed the physical capacity of the device.
C. The resource limit can only be set as a percentage in the class and not as an absolute value. The resource limit can be set as a percentage or an absolute value in the class. The percentage value represents the maximum percentage of the total available resources that a context can use, while the absolute value represents the maximum amount of resources that can be used by the context.
E. The default class provides unlimited access for all the resources. The default class provides predefined resource limits for a context that belongs to it, and these limits can be set as a percentage or an absolute value. The default class does not provide unlimited access to resources for all contexts that belong to it.
In summary, ASA resource management in multiple context mode provides a way to allocate resources among the various contexts on a shared ASA platform. Resource classes can be defined to set the maximum limits for CPU, memory, and connection usage for each context, and a context that is not assigned to a specific resource class belongs to the default class. The resource limit can be set as a percentage or an absolute value, and oversubscription of resources and setting resources to unlimited are also possible.