Which three statements about IOS Firewall configurations are

题目
多选题
Which three statements about IOS Firewall configurations are true?()
A

The IP inspection rule can be applied in the inbound direction on the secured interface.

B

The IP inspection rule can be applied in the outbound direction on the unsecured interface.

C

The ACL applied in the outbound direction on the unsecured interface should be an extended ACL.

D

The ACL applied in the inbound direction on the unsecured interface should be an extended ACL.

E

For temporary openings to be created dynamically by Cisco IOS Firewall,the access-list for thereturning traffic must be a standard ACL.

F

For temporary openings to be created dynamically by Cisco IOS Firewall,the IP inspection rule must be applied to the secured interface.

如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

CS-MARS works with which IOS feature to accomplish anomaly detection?()

  • A、 IOS IPS
  • B、 Autosecure
  • C、 CSA
  • D、 Netflow
  • E、 IOS Network Foundation Protection (NFP)
  • F、 IOS Firewall

正确答案:D

第2题:

Which two statements are true about firewall filter configurations?()

  • A、Multiple action modifiers can be included in the same term.
  • B、Only a single action modifier can be included in the same term.
  • C、The default term within a firewall filter uses the discard action.
  • D、The default term within a firewall filter uses the reject action.

正确答案:A,C

第3题:

Which three statements are correct about Rate Limiters? ()(Choose three.)

A. one-rate rate limiters

B. two-rate rate limiters

C. two-rate rate limiters is the default

D. one-rate rate limiters is the default

E. there is no default it must be configured


参考答案:A, B, C

第4题:

Which three statements accurately describe IOS Firewall configurations?()

  • A、The IP inspection rule can be applied in the inbound direction on the secured interface
  • B、The IP inspection rule can be applied in the outbound direction on the unsecured interface
  • C、The ACL applied in the inbound direction on the unsecured interface should be an extendedACL.
  • D、For temporary openings to be created dynamically by Cisco IOS Firewall, the access-list for thereturning traffic must be a standard ACL

正确答案:A,B,C

第5题:

Which three statements are true about terms in a policy?()

  • A、The order of the terms in a policy is irrelevant
  • B、The action is specified in a then statement
  • C、Ters are optional in a policy
  • D、The match condition can be identified with a from statement
  • E、Every policy must contain at least one term

正确答案:B,D,E

第6题:

Which three statements about firewall modes are correct? ()

  • A、 A firewall in routed mode has one IP address
  • B、 A firewall in transparent mode has one IP address
  • C、 In routed mode, the firewall is considered to be a Layer 2 dew
  • D、 In routed mode, the firewall is considered to be a Layer 3 device
  • E、 In transparent mode, the firewall is considered to be a Layer 2 device
  • F、 In transparent mode, the firewall is considered to be a Layer 3 device

正确答案:A,D,E

第7题:

Which two statements are correct about firewall filters in the Junos OS?()

  • A、Firewall filters are stateless.
  • B、Firewall filters are used to control routing information that is exchanged between devices.
  • C、Firewall filters are used to control traffic passing through the device.
  • D、Firewall filters can only be applied to traffic entering the device.

正确答案:A,C

第8题:

Which two statements are true about firewall filter configurations?()

A. Multiple action modifiers can be included in the same term.

B. Only a single action modifier can be included in the same term.

C. If an action modifier exists without a terminating action, matching packets will be accepted.

D. If an action modifier exists without a terminating action, matching packets will be discarded.


参考答案:A, C

第9题:

Which three statements about IOS Firewall configurations are true?()

  • A、The IP inspection rule can be applied in the inbound direction on the secured interface.
  • B、The IP inspection rule can be applied in the outbound direction on the unsecured interface.
  • C、The ACL applied in the outbound direction on the unsecured interface should be an extended ACL.
  • D、The ACL applied in the inbound direction on the unsecured interface should be an extended ACL.
  • E、For temporary openings to be created dynamically by Cisco IOS Firewall,the access-list for thereturning traffic must be a standard ACL.
  • F、For temporary openings to be created dynamically by Cisco IOS Firewall,the IP inspection rule must be applied to the secured interface.

正确答案:A,B,D

第10题:

XYZ LTD is concerned about the security in the perimeter of the network. Which three Cisco products can you offer to XYZ LTD?()

  • A、Integrated Services Routers
  • B、Firewall Appliances
  • C、Cisco Unified CallManager
  • D、Multilayer switch with enhanced image
  • E、Cisco Unity
  • F、VPN Concentrators

正确答案:A,B,F

更多相关问题