Beruflich Dokumente
Kultur Dokumente
4.
5.
Refer to the exhibit. If a hacker on the outside network sends an IP packet with
source address 172.30.1.50, destination address 10.0.0.3, source port 23, and
destination port 2447, what
what does the Cisco IOS firewall do with the packet?
The packet is forwarded, and an alert is generated.
The packet is forwarded, and no alert is generated.
The initial packet is dropped, but subsequent packets are forwarded.
The packet is dropped.
8. Which zone-based
based policy firewall zone is system-defined
system defined and applies to traffic
destined for the router or originating from the router?
self zone
system zone
local zone
inside zone
outside zone
10. In addition to the criteria used by extended ACLs, what conditions are used by
CBAC to filter traffic?
TCP/IP protocol numbers
IP source and destination addresses
application layer protocol session information
TCP/UDP source and destination port numbers
num
12.
14. A router has CBAC configured and an inbound ACL applied to the external
interface. Which action does the router take after inbound-to-outbound
inbound outbound traffic is
inspected and a new entry is created in the state table?
A dynamic ACL entry is added to the external
external interface in the inbound
direction.
The internal interface ACL is reconfigured to allow the host IP address access
to the Internet.
The entry remains in the state table after the session is terminated so that it
can be reused by the host.
h
When traffic returns from its destination, it is reinspected, and a new entry is
added to the state table.
15. For a stateful firewall, which information is stored in the stateful session flow table?
TCP control header and trailer information associated with a particular session
TCP SYN packets and the associated return ACK packets
inside private IP address and the translated inside global IP address
outbound and inbound access rules (ACL entries)
source and destination IP addresses, and port numbers and sequencing
information associated with a particular session
16
.
Refer to the exhibit. The ACL statement is the only one explicitly configured on the
router. Based on this information, which two conclusions can be drawn regarding
remote access network connections? (Choose two.)
SSH connections from the 192.168.1.0/24 network to the 192.168.2.0/24 network
are allowed.
Telnet connections from the 192.168.1.0/24 network to the 192.168.2.0/24
192.168.2.
network are allowed.
SSH connections from the 192.168.2.0/24 network to the 192.168.1.0/24 network
are allowed.
Telnet connections from the 192.168.1.0/24 network to the 192.168.2.0/24
network are blocked.
ctions from the 192.168.1.0/24 network to the 192.168.2.0/24 network
SSH connections
are blocked.
Telnet connections from the 192.168.2.0/24 network to the 192.168.1.0/24
network are allowed.
17. When configuring a Cisco IOS zone-based
zone based policy firewall, which three actions can
be applied to a traffic class? (Choose three.)
drop
inspect
pass
reroute
queue
shape
18.
19. Which two parameters are tracked by CBAC for TCP traffic but not for UDP
traffic? (Choose two.)
source port
protocol ID
sequence number
destination port
SYN and ACK flags
22. Which type of packets exiting the network of an organization should be blocked by
an ACL?
packets that are not encrypted
packets that are not translated with NAT
packets with source IP addresses outside of the organization's network address
space
packets with destination IP addresses outside of the organization's network
ne
address space
23. When logging is enabled for an ACL entry, how does the router switch packets
filtered by the ACL?
topology-based
based switching
autonomous switching
process switching
optimum switching
hing