¡GoConqr estrena diseño! Cuéntanos qué te parece.

Regístrate gratis

Test

CCNA Security HW 3 & 4 (also exam review)

Anthony Schulmeister 16 preguntas 2.373 visitas

Hacer el test

Preguntas del test (16)

  1. 1Which statement describes a stateful firewall?
    1. AIt can only filter packets based on limited Layer 3 and 4 information.
    2. BIt can filter packets based on information at Layers 3, 4, 5 and 7 of the OSI reference model.
    3. CIt can expand the number of IP addresses available and can hide network addressing design.
    4. DIt can determine if the connection is in the initiation, data transfer, or termination phase.
  2. 2What are two characteristics of ACLs? (Choose two.)
    1. AExtended ACLs can filter on destination TCP and UDP ports.
    2. BStandard ACLs can filter on source TCP and UDP ports.
    3. CExtended ACLs can filter on source and destination IP addresses.
    4. DStandard ACLs can filter on source and destination IP addresses.
    5. EStandard ACLs can filter on source and destination TCP and UDP ports.
  3. 3In general which ICMP message type should be stopped inbound?
    1. Aecho
    2. Becho-reply
    3. Cunreachable
    4. Dsource quench
  4. 4Which two types of addresses should be denied inbound on a router interface that attaches to the Internet? (Choose two.)
    1. Aprivate IP addresses
    2. Bpublic IP addresses
    3. CNAT translated IP addresses
    4. Dany IP address that starts with the number 127
    5. Eany IP address that starts with the number 1
  5. 5Where is the firewall policy applied when using Classic Firewall?
    1. Asecurity zones
    2. Bself zone
    3. Cmultiple zones
    4. Dinterfaces
  6. 6Consider the following access list command applied outbound on a router serial interface:
    access-list 100 deny icmp 192.168.10.0 0.0.0.255 any echo reply
    What is the effect of applying this access list command?
    1. AThe only traffic denied is ICMP-based traffic. All other traffic is allowed.
    2. BThe only traffic denied is echo-replies sourced from the 192.168.10.0/24 network. All other traffic is allowed.
    3. CUsers on the 192.168.10.0/24 network are not allowed to transmit traffic to any other destination.
    4. DNo traffic will be allowed outbound on the serial interface.
  7. 7What is the result in the self zone if a router is the source or destination of traffic?
    1. ANo traffic is permitted.
    2. BAll traffic is permitted.
    3. COnly traffic that originates in the router is permitted.
    4. DOnly traffic that is destined for the router is permitted.
  8. 8Consider the configured access list.
    R1# show access-lists
    extended IP access list 100
    deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet
    deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet
    permit ip any any (15 matches)
    What are two characteristics of this access list? (Choose two.)
    1. AThe access list has been applied to an interface.
    2. BA network administrator would not be able to tell if the access list has been applied to an interface or not.
    3. CThe 10.1.2.1 device is not allowed to telnet to the 10.1.2.2 device.
    4. DAny device on the 10.1.1.0/24 network (except the 10.1.1.2 device) can telnet to the router that has the IP address 10.1.1.1 assigned.
    5. EOnly the 10.1.1.2 device can telnet to the router that has the 10.1.1.1 IP address assigned.
    6. FAny device can telnet to the 10.1.2.1 device.
  9. 9Refer to the exhibit. If a hacker on the outside network sends an IP packet with source address 172.30.1.50, destination address 10.0.0.3, source port 23, and destination port 2447, what does the Cisco IOS firewall do with the packet?Imagen de la pregunta 9
    1. AThe packet is forwarded, and an alert is generated.
    2. BThe packet is forwarded, and no alert is generated.
    3. CThe initial packet is dropped, but subsequent packets are forwarded.
    4. DThe packet is dropped.
  10. 10Which command is used to activate an IPv6 ACL named ENG_ACL on an interface so that the router filters traffic prior to accessing the routing table?
    1. Aipv6 access-class ENG_ACL in
    2. Bipv6 access-class ENG_ACL out
    3. Cipv6 traffic-filter ENG_ACL in
    4. Dipv6 traffic-filter ENG_ACL out

Información

Descripción
CCNA Security HW 3 & 4 (also exam review) Professor Shirong Du University of Akron
Idioma
English
Visitas
2.373
Valoración
Aún sin valoraciones
Valora este test
Valora este test

Escríbenos

¿Sobre qué es tu mensaje?

¿Qué te parece el nuevo diseño?

¿Te gusta?