642-825 Implementing Secure Converged Wide Area Networks Exam Questions

Cisco ™

642-825 Implementing Secure Converged Wide Area Networks

Note 1: 642-825 Exhibit and all related diagrams are not shown in demo questions.
Note 2: 642-825 Answers are not shown in demo questions.
Exhibits and Answers are only provided in the Full Version.

Demo Question 9.

Router EliteCertify 2 connects to the Internet as shown below: Router EliteCertify 2 is also configured as shown below: The EliteCertify network administrator wishes to mitigate network threats. Given that purpose, which two statements about the IOS firewall configuration shown above are true?

A. The command ip access-group FIREWALL_ACL in must be applied on interface FastEthernet 0/1.
B. The command ip inspect FIREWALL_ACL out must be applied on interface FastEthernet 0/0.
C. The configuration excerpt is an example of a reflexive ACL.
D. The command ip access-group FIREWALL_ACL in must be applied on interface FastEthernet 0/0.
E. The command ip inspect FIREWALL_ACL out must be applied on interface FastEthernet 0/1.
F. The configuration excerpt is an example of a CBAC list.

Display Answer

Purchase Full Version:

642-825 Printable PDF Prep Guide $49.95 BUY NOW!

642-825 Test Simulation Engine $69.95 BUY NOW!

642-825 PDF & Test Simulation Engine $99.95 BUY NOW!

Answer: E, F

Explanation: The inspection rule consists of a series of statements, each listing a protocol and specifying the same inspection rule name. Inspection rules include options for controlling alert and audit trail messages, and for checking IP packet fragmentation ipinspect name inspection-name protocol [alert {on | off}] [audit-trail {on | off}] [ timeout seconds] After creating inspect rules you need to apply on the interface. Router(Config-if)#ip inspect inspect_rule { in | out}