CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide, Second Edition [Electronic resources]

Greg Bastien; Earl Carter; Christian Degu

نسخه متنی -صفحه : 191/ 32
نمايش فراداده

  • "Do I Know This Already?" Quiz

    The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now.

    The ten-question quiz, derived from the major sections in the "Foundation Topics" portion of the chapter, helps you determine how to spend your limited study time.

    1.

    True or false: You do not need a license for any Cisco PIX Firewall. If you own the appliance, you can do anything you want with it.

    2.

    How many physical interfaces does the PIX 525 support?

    1. Eight 10/100 interfaces or three Gigabit interfaces

    2. Eight 10/100 interfaces and three Gigabit interfaces

    3. Six 10/100 interfaces or three Gigabit interfaces

    4. Six 10/100 interfaces and three Gigabit interfaces

    5. None of the above

    3.

    What are the three firewall technologies?

    1. Packet filtering, proxy, connection dropping

    2. Stateful inspection, packet filtering, proxy

    3. Stateful proxy, stateful filtering, packet inspection

    4. Cut-through proxy, ASA, proxy

    4.

    How are optional component cards installed in the PIX Firewall?

    1. ISA slot

    2. USB port

    3. Serial connection

    4. PCI slot

    5. PCMCIA slot

    5.

    What is the maximum clear-text throughput of the PIX 535?

    1. 1.0 Gbps

    2. 1.7 Gbps

    3. 100 Mbps

    4. 565 Mbps

    6.

    How many physical interfaces does a PIX 501 have, and how many network segments does it support?

    1. Six interfaces, two network segments

    2. Six interface, six network segments

    3. Five interfaces, four network segments

    4. Two interfaces, two network segments

    5. None of the above

    7.

    What happens to a reply that does not have the correct TCP sequence number?

    1. It generates an alert.

    2. The connection is dropped.

    3. The connection information is added to the state table.

    4. The session object is modified.

    5. None of the above

    8.

    Which of the following is the best way to remove the ASA from a PIX Firewall?

    1. Use the ASA removal tool, downloaded from 9.

      Which of the following four authentication methods is not supported by the PIX Firewall for performing cut-through proxy?

      1. Local Database

      2. TACACS+

      3. RADIUS

      4. Active Directory

      5. All of the above

      10.

      What encryption algorithms does the PIX Firewall not support?

      1. Data Encryption Standard

      2. Triple Data Encryption Standard

      3. Diffie-Hellman

      4. Advanced Encryption Standard 128

      5. Advanced Encryption Standard 256

      6. Answers c, d, and e

      The answers to the "Do I Know This Already?" quiz are found in Appendix A, "Answers to the ''''''''Do I Know This Already?'''''''' Quizzes and Q&A Sections." The suggested choices for your next step are as follows: