642-825 Implementing Secure Converged Wide Area Networks Online Class

Demo Question 10.

A EliteCertify router was configured as show below: Based on the information shown above, what does this configuration accomplish?

A. For the specified protocols, the configuration results in a timeout value of 3600 seconds for authentication of encrypted traffic.
B. The configuration creates temporary openings in the access lists of the firewall. These openings have an absolute timeout value.
C. The configuration permits ICMP outbound traffic, denies ICMP inbound traffic, and permits traffic that has been initiated from inside a router that has been synched with an NTP server.
D. The configuration uses NTP synchronization to implement time-based ACLs.
E. The configuration permits ICMP inbound traffic, denies ICMP outbound traffic, and permits traffic that has been initiated from inside a router that has been synched with an NTP server.
F. The configuration creates temporary openings in the access lists of the firewall. These openings time out after the specified period of inactivity.
G. None of the above.


Display Answer

Answer: F

Explanation: You must define inspection rules to specify which IP traffic (that is, which application layer protocols) will be inspected by Cisco IOS Firewall at an interface. The inspection rule consists of a series of statements, each listing a protocol and specifying the same inspection rule name. Inspection rules include options for controlling alert and audit trail messages, and for checking IP packet fragmentation ipinspect name inspection-name protocol [alert {on | off}] [audit-trail {on | off}] [ timeout seconds]