CCNA Security - Chapter 4

What are two characteristics of ACLs? (Choose two.)

To facilitate the troubleshooting process, which inbound ICMP message should be permitted on an outside interface?

When a Cisco IOS zone-based policy firewall is being configured, which two actions can be applied to a traffic class? (Choose two.)

Which command is used to activate an IPv6 ACL named ENG_ACL on an interface so that the router filters traffic prior to accessing the routing table?

Which two are characteristics of ACLs? (Choose two.)

For a stateful firewall, which information is stored in the stateful session flow table?

permit icmp any any nd-na
permit icmp any any nd-ns
deny ipv6 any any

Refer to the exhibit. Which statement describes the function of the ACEs?

When configuring a Cisco IOS zone-based policy firewall, which two actions can be applied to a traffic class? (Choose two.)

Which type of packet is unable to be filtered by an outbound ACL?

What is a limitation of using object groups within an access control entry?

Which three statements describe zone-based policy firewall rules that govern interface behavior and the traffic moving between zone member interfaces? (Choose three.)

Which statement correctly describes how an ACL can be used with the access-class command to filter vty access to a router?

Class maps identify traffic and traffic parameters for policy application based on which three criteria? (Choose three.)

When logging is enabled for an ACL entry, how does the router switch packets filtered by the ACL?

Which two parameters are tracked by CBAC for TCP traffic but not for UDP traffic? (Choose two.)

Refer to the exhibit. Which statement is true about the effect of this Cisco IOS zone-based policy firewall configuration?

Which zone-based policy firewall zone is system-defined and applies to traffic destined for the router or originating from the router?

Refer to the exhibit. Which Cisco IOS security feature is implemented on router FW?

A router has been configured as a classic firewall and an inbound ACL applied to the external interface.
Which action does the router take after inbound-to-outbound traffic is inspected and a new entry is created in the state table.

In addition to the criteria used by extended ACLs, what conditions are used by a classic firewall to filter traffic?

Which statement describes a typical security policy for a DMZ firewall configuration?

When an inbound Internet-traffic ACL is being implemented, what should be included to prevent the spoofing of internal networks?

Refer to the exhibit. What is represented by the area marked as “A”?

Which statement describes the characteristics of packet-filtering and stateful firewalls as they relate to the OSI model?

Refer to the exhibit. The ACL statement is the only one explicitly configured on the router. Based on this information, which two conclusions can be drawn regarding remote access network connections? (Choose two.)

What is the first step in configuring a Cisco IOS zone-based policy firewall using the CLI?

When implementing an inbound Internet traffic ACL, what should be included to prevent the spoofing of internal networks?

Which statement describes one of the rules governing interface behavior in the context of implementing a zone-based policy firewall configuration?

When using CCP to apply an ACL, the administrator received an informational message indicating that a rule was already associated with the designated interface in the designated direction. The administrator continued with the association by selecting the merge option. Which statement describes the effect of the option that was selected?

Refer to the exhibit. If a hacker on the outside network sends an IP packet with source address 172.30.1.50, destination address 10.0.0.3, source port 23, and destination port 2447, what does the Cisco IOS firewall do with the packet?