单项选择题

On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy？（）

A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy（applied to traffic sourced from the less secured zone destined to the moresecured zone）
C.This is an outbound policy（applied to traffic sourced from the more secured zone destined to the lesssecured zone）
D.All packets will be dropped since the class-default traffic class is matching all traffic

点击查看答案

上一题目录下一题

相关考题

多项选择题

When using the Cisco SDM Quick Setup Siteto-Site VPN wizard， which three parameters do you configure？（）

A.Source interface where encrypted traffic originates
B.IP address for the remote peer
C.Transform set for the IPsec tunnel
D.Interface for the VPN connection

单项选择题

Which statement is true about a Smurf attack？（）

A.It sends ping requests in segments of an invalid size
B.It intercepts the third step in a TCP three-way handshake to hijack a session
C.It sends ping requests to a subnet， requesting that devices on that subnet send ping replies to a targetsystem
D.It uses Trojan horse applications to create a distributed collection of "zombie" computers， which can beused to launch a coordinated DDoS attack

单项选择题

What will be disabled as a result of the no service password-recovery command？（）

A.password encryption service
B.changes to the config-register setting
C.the xmodem privilege EXEC mode command to recover the Cisco IOS image
D.ROMMON