An inbound access list has been configured on a serial interface to deny packet entry for TCP and UDP ports21, 23 and 25. What types of packets will be permitted by this ACL? (Choose three.)（）A、FTPB、TelnetC、SMTPD、DNSE、HTTPF、POP3

第1题：

第2题：

An inbound access list has been configured on a serial interface to deny packet entry for TCP and UDP ports 21, 23 and 25. What types of packets will be permitted by this ACL (Choose three.)（）。

• A、FTP
• B、Telnet
• C、SMTP
• D、DNS
• E、HTTP
• F、POP3

第3题：

第4题：

On the serial interface of a router, an inbound access list is configured to deny all traffic from UDP and TCP ports 21, 23, and 25. All other traffic is permitted. Based on this information, which types of traffic will be allowed through this interface?（）

• A、SMTP
• B、DNS
• C、FTP
• D、Telnet
• E、HTTP
• F、POP3

第5题：

You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter. How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第6题：

第7题：

What is a Host Enforcer policy?（）

• A、A policy that is defined on the endpoint that permits or denies inbound or outbound traffic.
• B、A policy that is sent to the endpoint that permits or denies inbound or outbound traffic.
• C、A policy that is sent to the protected resource that permits or denies inbound or outbound traffic.
• D、A policy that is defined on the protected resource that permits or denies inbound or outbound traffic.

第8题：

第9题：

Your ERX Edge Router is using an inbound route-map for an EBGP peer to only accept routes in the range of 192.168.32.0 through 192.168.95.255. The route-map references an access list named test . What accurately accomplishes the goal of the route-map?（）

• A、access-list test 192.168.32.0 0.0.63.255
• B、access-list test permit 192.168.32.0 0.0.64.255
• C、access-list test permit 192.168.32.0 0.0.63.255
• D、access-list test permit 192.168.32.0 255.255.63.0

第10题：

Which three statements accurately describe IOS Firewall configurations？（）

• A、The IP inspection rule can be applied in the inbound direction on the secured interface
• B、The IP inspection rule can be applied in the outbound direction on the unsecured interface
• C、The ACL applied in the inbound direction on the unsecured interface should be an extendedACL.
• D、For temporary openings to be created dynamically by Cisco IOS Firewall， the access-list for thereturning traffic must be a standard ACL