AnIPSsensorwith3sniffinginterfacescanbeconfiguredas：（）……

多项选择题Giventhe topology ofaserver（withIP209.165.202.150）protectedbehindtheinsideinterfaceofanASA PIX，andtheInternetontheoutsideinterface.UsersontheInternetneedtoaccesstheserveratanytime，butthefirewalladministratordoesnotwanttoNATtheaddressoftheserver-sinceitiscurrentlyapublicaddress.Whichofthefollowingcommandscanbeusedtoaccomplishthis？（）

A. nat （inside） 0 209.165.202.150 255.255.255.255
B. access-list no-nat permit ip host209.165.202.150 anynat（inside） 0 access-list no-nat
C. static（inside，outside） 209.165.202.150 209.165.202.150 netmask 255.255.255.255
D. no nat-control
E. nat （inside） 1 209.165.202.150 255.255.255.255

单项选择题Whatcommandcanbeusedtogloballydisable the requirementthatatranslationrulemustexistbeforepacketscanpassthroughthefirewall？（）

A. nat  0
B. nonat-control
C. access-list
D. none of the above

单项选择题Selectthebestanswertothisqestion.ASA PIXActive Activefailovercanbeusedtoload-balance：（）

A. All traffic passing through theappliance
B. Traffic from internal networks on a per IP basis
C. Based on protocol only.
D. On a per-context basis only.

单项选择题Thenumberofpackets（orflows）droppedbecausetheydonotconformtotheASA PIXsecuritypolicycanbeviewedusingwhatcommand？（）

A. show asp drop
B. show counters drop
C. show security-policy
D. show policy-map

单项选择题ASA PIXversion7.0introducedModularPolicyFramework（MPF）asanextensiblewaytoclassifytraffic，andthenapplypolicies（oractions）tothattraffic.MPFataminimum requireswhichthreecommands？（）

A. http-map， tcp-map， class-map
B. class-map， tcp-map， policy-map
C. class-map， policy-map， service-map
D. class-map， service-policy， policy-map