多项选择题
Which three statements are true about Cisco IOS Firewall？（）
A.It can be configured to block Java traffic.
B.It can be configured to detect and prevent SYN-flooding denial-of-service （DoS） network attacks.
C.It can only examine network layer and transport layer information.
D.It can only examine transport layer and application layer information.
E.The inspection rules can be used to set timeout values for specified protocols.
F.The ip inspect cbac-name command must be configured in global configuration mode.
相关考题
-
多项选择题
WhichthreefeaturesarebenefitsofusingGREtunnelsinconjunctionwithIPsecforbuildingsite-to-siteVPNs？（）
A.allows dynamic routing over the tunnel
B.supports multi-protocol （non-IP） traffic over the tunnel
C.reduces IPsec headers overhead since tunnel mode is used
D.simplifies the ACL used in the crypto map
E.uses Virtual Tunnel Interface （VTI） to simplify the IPsec VPN configuration -
多项选择题
Whatarethreeobjectivesthatthenoipinspectcommandachieves？（）
A.removes the entire CBAC configuration
B.removes all associated static ACLs
C.turns off the automatic audit feature in SDM
D.denies HTTP and Java applets to the inside interface but permits this traffic to the DMZ
E.resets all global timeouts and thresholds to the defaults
F.deletes all existing sessions -
多项选择题
Refer to the exhibit. On the basis of the information that is provided, which two statements are true?（）
A.An IPS policy can be edited by choosing the Edit button.
B.Right-clicking on an interface will display a shortcut menu with options to edit an action or to set severity levels.
C.The Edit IPS window is currently in Global Settings view.
D.The Edit IPS window is currently in IPS Policies view.
E.The Edit IPS window is currently in Signatures view.
F.To enable an IPS policy on an interface， click on the interface and deselect Disable.
