A. SignatureFidelity Rating B. Alert Severity Rating C. Exploit Probability Rating D. Target Value Rating E. Attack Relevancy Rating
多项选择题AnIPSsensorwith3sniffinginterfacescanbeconfiguredas:()
A. 3 promiscuous sensors B. 3 inline sensors C. 1 inline sensor, 1 promiscuous sensor D. 2 inline sensors, 1 promiscuous sensors
多项选择题Giventhe topology ofaserver(withIP209.165.202.150)protectedbehindtheinsideinterfaceofanASA PIX,andtheInternetontheoutsideinterface.UsersontheInternetneedtoaccesstheserveratanytime,butthefirewalladministratordoesnotwanttoNATtheaddressoftheserver-sinceitiscurrentlyapublicaddress.Whichofthefollowingcommandscanbeusedtoaccomplishthis?()
A. nat (inside) 0 209.165.202.150 255.255.255.255 B. access-list no-nat permit ip host209.165.202.150 anynat(inside) 0 access-list no-nat C. static(inside,outside) 209.165.202.150 209.165.202.150 netmask 255.255.255.255 D. no nat-control E. nat (inside) 1 209.165.202.150 255.255.255.255
单项选择题Whatcommandcanbeusedtogloballydisable the requirementthatatranslationrulemustexistbeforepacketscanpassthroughthefirewall?()
A. nat 0 B. nonat-control C. access-list D. none of the above
单项选择题Selectthebestanswertothisqestion.ASA PIXActive Activefailovercanbeusedtoload-balance:()
A. All traffic passing through theappliance B. Traffic from internal networks on a per IP basis C. Based on protocol only. D. On a per-context basis only.
单项选择题Thenumberofpackets(orflows)droppedbecausetheydonotconformtotheASA PIXsecuritypolicycanbeviewedusingwhatcommand?()
A. show asp drop B. show counters drop C. show security-policy D. show policy-map