CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide, Second Edition [Electronic resources]

Greg Bastien; Earl Carter; Christian Degu

نسخه متنی -صفحه : 191/ 105
نمايش فراداده

"Do I Know This Already?" Quiz

The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now.

The ten-question quiz, derived from the major sections in the "Foundation Topics" portion of the chapter, helps you determine how to spend your limited study time.

1.

How does the PIX Firewall filter Java applets and ActiveX objects?

  1. By commenting out the <OBJECT> </OBJECT> tags or the <APPLET> </ APPLET> tags in th171 page.

  2. By deleting the <OBJECT CLASSID> </OBJECT> tags or the <APPLET> </ APPLET> tags in th171 page.

  3. It notifies the content-filtering server, which in turn disables the ActiveX objects and Java applets.

  4. The PIX Firewall does not filter ActiveX objects or Java applets.

2.

What is the command to designate or identify the URL-filtering server?

  1. filter url-server

  2. url-server

  3. filtering server

  4. server url

3.

What is the longest URL length supported by Cisco PIX Firewall Version 6.2 with Websense Enterprise URL-filtering software?

  1. 12 KB

  2. 15 KB

  3. 4 KB

  4. 6 KB

4.

What is the command to filter URLs?

  1. filter url

  2. url-filter

  3. url-server

  4. filter web page

5.

What happens when the only URL-filtering server is unavailable?

  1. If the allow option is set, the PIX Firewall forwards HTTP traffic without filtering.

  2. SMTP traffic is dropped because the URL-filtering server is unavailable.

  3. HTTP requests are queued until the URL-filtering server is available.

  4. The PIX Firewall reverts to the onboard URL-filtering engine to filter HTTP traffic.

6.

What is the default port used by the N2H2 server to communicate with the Cisco PIX Firewall?

  1. TCP/UDP 1272

  2. TCP 5004 only

  3. TCP/UDP 4005

  4. UDP 5004 only

7.

What command identifies N2H2 servers on a Cisco PIX Firewall?

  1. websense url filter server-ip

  2. filter url server-ip vendor n2h2

  3. url-server ( if-name) vendor n2h2 host local-ip

  4. All of the above

8.

How many URL servers can be configured on a single Cisco PIX Firewall?

  1. 5

  2. 12

  3. 3

  4. 16

9.

What command disables URL caching on the Cisco PIX Firewall?

  1. no url-cache

  2. caching-url

  3. disable url-cache

  4. None of the above

10.

Which of the following URL-filtering servers supports FTP and HTTPS filtering?

  1. N2H2

  2. Cisco Works

  3. Websense

  4. CSACS

The answers to the "Do I Know This Already?" quiz are found in Appendix A, "Answers to the ''''Do I Know This Already?'''' Quizzes and Q&A Sections." The suggested choices for your next step are as follows: