思科认证考试
What is meant by the term "firewall sandwich"？（）A、multiple layers of firewallingB、a method of operating firewalls from multiple vendorsC、firewall connections in either an active or standby stateD、an architecture in which all traffic between firewalls goes
题目
What is meant by the term "firewall sandwich"？（）
- A、multiple layers of firewalling
- B、a method of operating firewalls from multiple vendors
- C、firewall connections in either an active or standby state
- D、an architecture in which all traffic between firewalls goes through application-specific servers
- E、an architecture in which all traffic between firewalls goes through application-specific gateways
相似问题和答案
第1题：
Basically, a(71)is a standalone process or a set of integrated processes that runs on a router or server to control the flow of(72)application traffic(73)through it. Typically, firewalls are(74)on the entry point to a public network such as the Internet. They could be considered traffic cops. The firewall' s(75)is to ensure that all communication between an organization's network and the Internet conform. to the organization's security policies.
A．router
B．client
C．firewall
D．switch
第2题：
A. Proper placement depends on the VLAN assignment.
B. Place it outside the firewall.
C. Place it inside the firewall to make design and management easier.
D. Place it inside the firewall with multiple context modes connecting to all configured contexts.
第3题：
Your company has computers in multiple locations that use IPv4 and IPv6. Each location is protected by a firewall that performs symmetric NAT. You need to allow peer-to-peer communication between all locations.What should you do？（）
A. Configure dynamic NAT on the firewall.
B. Configure the firewall to allow the use of Teredo.
C. Configure a link local IPv6 address for the internal interface of the firewall.
D. Configure a global IPv6 address for the external interface of the firewall.
第4题：
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008.You need to immediately disable all incoming connections to the server. What should you do？（）
- A、From the Services snap-in，disable the IP Helper.
- B、From the Services snap-in，disable the Netlogon service.
- C、From Windows Firewall，enable the Block all connections option on the Public Profile.
- D、From Windows Firewall enable the Block all connections option on the Domain Profile.
正确答案:D
第5题：
It’s a configuration that experts are calling a "firewall sandwich，" with the second firewall providinga second level of load balancing after traffic down. What is meant by the term "firewall sandwich"？（）
- A、 single layer of firewalling
- B、 multiple layers of firewalling
- C、 firewall connections in either an active or standby state
- D、 an architecture in which all traffic between firewalls goes through application-specific servers
正确答案:B
第6题：
A. Firewall filters are stateless.
B. Firewall filters are used to control routing information that is exchanged between devices.
C. Firewall filters are used to control traffic passing through the device.
D. Firewall filters can only be applied to traffic entering the device.
第7题：
Which unique characteristics of the Data Center Aggregation layer must be considered by an Enterprise Campus designer？（）
- A、 Layer 3 routing between the Access and Aggregation layers facilities the ability to span VLANsacross multiple access switches， which is a requirement for many server virtualization andclustering technologies.
- B、 “East-west” server-to-server traffic can travel between aggregation modules by way of the core，but backup and replication traffic typically remains within an aggregation module.
- C、 Load balancing， firewall service， and other network service are commonly integrated by the useof service modules that are inserted in the aggregation switched.
- D、 Virtualization tools allow a cost effective approach for redundancy in the network design byusing two or four VDCs from the same physical switch.
正确答案:D
第8题：
Basically, a firewall is a(145)process or a set of integrated processes that runs on a router or(146)to control the flow of networked application traffic(147)through it. Typically, firewalls are placed on the entry point to a(148)network such as the Internet. They could be considered traffic cops. The firewall's(149)is to ensure that all communication between an organization's network and the Internet conform. to the organization's policies.
A．dependent
B．isolated
C．related
D．standalone
第9题：
Which two statements are true about firewall filter configurations?（）
- A、Multiple action modifiers can be included in the same term.
- B、Only a single action modifier can be included in the same term.
- C、The default term within a firewall filter uses the discard action.
- D、The default term within a firewall filter uses the reject action.
正确答案:A,C
第10题：
What is a virtual firewall？（）
- A、another name for a firewall deployed in routed mode
- B、another name for a firewall deployed in transparent mode
- C、a separation of multiple firewall security contexts on a single firewall
- D、a firewall that， when deployed in routed mode， can support up to 1000 VLANs per context
- E、a firewall that has multiple contexts， all of which share the same policies （such as NAT and ACLs）
正确答案:C