Cisco's ASA "Command Line Configuration Guide" says that you can enter up to four boot system commands, to specify different images to boot from in order. The ASA will search for the images in order and it will boot the first image it finds.
However, I'm not sure what will the behavior be if the ASA finds one image, boots it, but it fails to boot. Will it try to boot the next image? or will it stop?