CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

"Do I Know This Already?" Quiz

The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now.

The ten-question quiz, derived from the major sections in the "Foundation Topics" portion of the chapter, helps you determine how to spend your limited study time.

1.

Which of the following are constraints when configuring policy NAT?

1. A global address can be used concurrently for NAT and PAT.

2. An access list must be used only twice with the nat command.

3. Access lists for policy NAT cannot contain deny statements.

4. An access list must be used only once with the nat command.

2.

What is the maximum number of access list entries in one access list that TurboACL supports?

1. 19

2. 2000

3. 16,000

4. 10

3.

What is the minimum number of access list entries needed in an access list for TurboACL to compile?

1. 4

2. 19

3. 16,000

4. No minimum is required.

4.

Which of the following is not one of four options for object types when you create an object group?

1. Network

2. Protocol

3. Application

4. Services

5.

Which command lets you create a network object group?

1. object-group network group-id

2. enable object-group network group-id

3. create network object-group

4. network object-group enable

6.

Which command enables TurboACL globally on the PIX Firewall?

1. turboacl global

2. access-list compiled

3. access-list turboacl

4. You cannot enable TurboACL globally.

7.

What is the minimum memory requirement for TurboACL to work?

1. 8 MB

2. 100 KB

3. 2.1 MB

4. 4 MB

8.

How many SMTP commands are made by the PIX application inspection function?

1. 3

2. 2

3. 7

4. 5

9.

What will be the results if you disable FTP fixups?

1. Nothing

2. All inbound FTP is disabled.

3. All outbound FTP is disabled.

4. FTP traffic will be disabled in both directions.

10.

Which of the following is the correct syntax for mapping an internal web server with an IP address of 10.10.10.15 to an outside IP address of 192.168.100.15 for HTTP traffic?

1. static (inside, outside) 192.168.100.15 80 10.10.10.15 netmask 255.255.255.255 eq www

2. static (inside, outside) 192.168.100.15 80 10.10.10.15 netmask 255.255.255.255

3. static (inside, outside) tcp 192.168.100.15 80 10.10.10.15 www netmask 255.255.255.255

4. static (inside, outside) 192.168.100.15 80 10.10.10.15 netmask 255.255.255.255

The answers to the "Do I Know This Already?" quiz are found in Appendix A, "Answers to the ''''Do I Know This Already?'''' Quizzes and Q&A Sections." The suggested choices for your next step are as follows:

• Foundation Topics," "Foundation Summary," and "Q&A" sections.

• Foundation Summary" section and then go to the "Q&A" section. Otherwise, move to the next chapter.