What are two monitoring tools that capture network traffic and forward it to network monitoring devices? (Choose two.)

Last Updated on April 30, 2021 by Admin What are two monitoring tools that capture network traffic and forward it to network monitoring devices? (Choose two.) SIEM Wireshark SNMP SPAN network tap Answers Explanation & Hints: A network tap is used to capture traffic for monitoring the network. The tap is typically a passive splitting […]
Continue reading…

 

When a Cisco IOS Zone-Based Policy Firewall is being configured, which two actions can be applied to a traffic class? (Choose two.)

Last Updated on April 30, 2021 by Admin When a Cisco IOS Zone-Based Policy Firewall is being configured, which two actions can be applied to a traffic class? (Choose two.) log hold drop inspect copy forward Answers Explanation & Hints: The three actions that can be applied are inspect, drop,and pass.​ Inspect – This action […]
Continue reading…

 

When a Cisco IOS Zone-Based Policy Firewall is being configured via CLI, which step must be taken after zones have been created?

Last Updated on April 30, 2021 by Admin When a Cisco IOS Zone-Based Policy Firewall is being configured via CLI, which step must be taken after zones have been created? Design the physical infrastructure. Establish policies between zones. Identify subsets within zones. Assign interfaces to zones. Answers Explanation & Hints: The steps for configuring zones […]
Continue reading…

 

What are two benefits offered by a zone-based policy firewall on a Cisco router? (Choose two.)

Last Updated on April 30, 2021 by Admin What are two benefits offered by a zone-based policy firewall on a Cisco router? (Choose two.) Policies are defined exclusively with ACLs. Policies are applied to unidirectional traffic between zones. Policies provide scalability because they are easy to read and troubleshoot. Any interface can be configured with […]
Continue reading…

 

A company is deploying a new network design in which the border router has three interfaces. Interface Serial0/0/0 connects to the ISP, GigabitEthernet0/0 connects to the DMZ, and GigabitEthernet/01 connects to the internal private network. Which type of traffic would receive the least amount of inspection (have the most freedom of travel)?

Last Updated on April 30, 2021 by Admin A company is deploying a new network design in which the border router has three interfaces. Interface Serial0/0/0 connects to the ISP, GigabitEthernet0/0 connects to the DMZ, and GigabitEthernet/01 connects to the internal private network. Which type of traffic would receive the least amount of inspection (have […]
Continue reading…

 

Which type of firewall is commonly part of a router firewall and allows or blocks traffic based on Layer 3 and Layer 4 information?

Last Updated on April 30, 2021 by Admin Which type of firewall is commonly part of a router firewall and allows or blocks traffic based on Layer 3 and Layer 4 information? stateless firewall stateful firewall proxy firewall application gateway firewall Answers Explanation & Hints: A stateless firewall uses a simple policy table look-up that […]
Continue reading…

 

Which statement describes the characteristics of packet-filtering and stateful firewalls as they relate to the OSI model?

Last Updated on April 30, 2021 by Admin Which statement describes the characteristics of packet-filtering and stateful firewalls as they relate to the OSI model? Both stateful and packet-filtering firewalls can filter at the application layer. A stateful firewall can filter application layer information, whereas a packet-filtering firewall cannot filter beyond the network layer. A […]
Continue reading…