The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now.
The ten-question quiz, derived from the major sections in the "Foundation Topics" portion of the chapter, helps you determine how to spend your limited study time.
By default, how long will an embryonic connection remain open?
2 minutes
3600 seconds
1800 seconds
Unlimited
30 minutes
You have configured two additional DMZ interfaces on your PIX Firewall. How do you prevent nodes on DMZ1 from accessing nodes on DMZ2 without adding rules to the security policy?
Route all traffic for DMZ2 out the outside interface.
Dynamically NAT all DMZ2 nodes to a multicast address.
Assign a higher security level to DMZ2.
All of the above
Which of the following is not a method of address translation supported by the PIX Firewall?
Network Address Translation
Socket Address Translation
Port Address Translation
Static Address Translation
What happens if you configure two interfaces with the same security level?
Traffic will pass freely between those connected networks.
Traffic will not pass between those interfaces.
Specific ACLs must allow traffic between those interfaces.
The two interfaces will not apply the nat or global commands.
When should you run the command clear xlate ?
When updating a conduit on the firewall
When editing the NAT for the inside segment
When adding addresses to the global pool
All of the above
How do you define the global addresses used when configuring NAT?
Define a subnet.
Define an address range.
Define individual IP addresses.
You can define only /24 address segments for global addresses.
None of the above
How many external IP addresses are required to configure PAT?
A single address
A /24 subnet
A defined address range
Any of the above
None of the above
What command shows all active TCP connections on the PIX Firewall?
show conn
show xlate
show connection status
show tcp active
None of the above
Why is it difficult to penetrate the PIX Firewall over UDP port 53?
The PIX Firewall allows multiple outbound queries but randomizes the UDP sequence numbers.
The PIX Firewall allows queries to go out to multiple DNS servers but drops all but the first response.
The PIX Firewall allows responses only to outbound DNS queries.
All of the above
How many connections can you hide behind a single global address?
65,536
255
17,200
An unlimited number
None of the above
The answers to the "Do I Know This Already?" quiz are found in Appendix A, "Answers to the ''''''''''''''''Do I Know This Already?'''''''''''''''' Quizzes and Q&A Sections." The suggested choices for your next step are as follows:
Foundation Topics," "Foundation Summary," and "Q&A" sections.
Foundation Summary" section and then go to the "Q&A" section. Otherwise, move to the next chapter.