A.It holds security policies for particular hosts.B.It ……

单项选择题YouwanttocreateasecuritypolicyallowingtrafficfromanyhostintheTrustzonetohostb.example.com（172.19.1.1）intheUntrustzone.Howdoyoucreatethispolicy？（）

A.Specify the IP address （172.19.1.1/32） as the destination address in the policy.
B.Specify the DNS entry （hostb.example.com.） as the destination address in the policy.
C.Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.
D.Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry in the policy

多项选择题Whichtwosecuritypolicyactionsarevalid？（）

A.deny
B.discard
C.reject
D.close

多项选择题Whichthreeadvancedpermitactionswithinsecuritypoliciesarevalid？（）

A.Mark permitted traffic for firewall user authentication.
B.Mark permitted traffic for SCREEN options.
C.Associate permitted traffic with an IPsec tunnel.
D.Associate permitted traffic with a NAT rule.
E.Mark permitted traffic for IDP processing.

单项选择题A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in azone called UNTRUST to the address book entry Server in a zone called TRUST.However， the administrator does not want the server to be able to initiate any type of traffic from the TRUSTzone to the UNTRUST zone. Which configuration would correctly accomplish this task？（）

A.A
B.B
C.C
D.D

单项选择题Whichstatementdescribesthebehaviorofasecuritypolicy？（）

A.The implicit default security policy permits all traffic.
B.Traffic destined to the device itself always requires a security policy.
C.Traffic destined to the device’s incoming interface does not require a security policy.
D.The factory-default configuration permits all traffic from all interfaces.