CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

The functionality of the ISP module can be incorporated into which component of the small network design?

1. PIX Firewall

2. IDS sensor

3. Cisco IOS Firewall router

4. Layer 3 switch

5. Public server

The primary role of the ISP router is to provide which of the following?

1. VPN connectivity

2. WAN connectivity

3. Firewall filtering

4. IP spoofing mitigation

5. DDoS mitigation

Rate-limit filtering for DDoS mitigation affects all traffic.

1. True

2. False

Which of the following is provided by the Cisco IOS Firewall router?

1. IDS services

2. WAN connectivity

3. Switching

4. Filtering

5. RAS services

6. Firewall

Cisco IOS Firewall inspection can occur only on traffic that is transiting the public (Internet) interface.

1. True

2. False

IDS inspection services are enabled on the Cisco IOS Firewall router using which command?

1. ip inspect

2. ip audit

3. ip access-group

4. ip ids

5. ip service

Which of the following services are commonly available on the public services segment?

1. NTP

2. FTP

3. SMTP

4. SSL

5. WWW

6. TFTP

7. DNS

The PIX Firewall provides IDS services.

1. True

2. False

Filtering is applied to an interface in a PIX Firewall using which command?

1. access-class

2. access-list

3. access-group

4. access-rule

5. ip access-group

When the small network model is used as a branch, which of the following is true?

1. It is normal not to have a public services segment

2. It is normal to terminate remote VPN users

3. Branch LANs are normally routable across the WAN

4. It is normal not to have a firewall

5. None of the above