单项选择题

Youwanttocreateasecuritypolicyallowingtrafficfromanyhos……

You want to create a security policy allowing traffic from any host in the Trust zone to hostb.example.com（172.19.1.1） in the Untrust zone. How do you create this policy？（）

A.Specify the IP address （172.19.1.1/32） as the destination address in the policy.
B.Specify the DNS entry （hostb.example.com.） as the destination address in the policy.
C.Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.
D.Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry in the policy

<上一题目录下一题>

热门试题

多项选择题Whichtwosecuritypolicyactionsarevalid？（）

A.deny
B.discard
C.reject
D.close

多项选择题Whichthreeadvancedpermitactionswithinsecuritypoliciesarevalid？（）

A.Mark permitted traffic for firewall user authentication.
B.Mark permitted traffic for SCREEN options.
C.Associate permitted traffic with an IPsec tunnel.
D.Associate permitted traffic with a NAT rule.
E.Mark permitted traffic for IDP processing.

单项选择题A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in azone called UNTRUST to the address book entry Server in a zone called TRUST.However， the administrator does not want the server to be able to initiate any type of traffic from the TRUSTzone to the UNTRUST zone. Which configuration would correctly accomplish this task？（）

A.A
B.B
C.C
D.D

单项选择题Whichstatementdescribesthebehaviorofasecuritypolicy？（）

A.The implicit default security policy permits all traffic.
B.Traffic destined to the device itself always requires a security policy.
C.Traffic destined to the device’s incoming interface does not require a security policy.
D.The factory-default configuration permits all traffic from all interfaces.

多项选择题Whichtwostatementsdescribethepurposeofasecuritypolicy？（）

A.It enables traffic counting and logging.
B.It enforces a set of rules for transit traffic.
C.It controls host inbound services on a zone.
D.It controls administrator rights to access the device.