PrepAway - Latest Free Exam Questions & Answers

Which two statements about the effects of the given Cisco IOS configuration are true?

Refer to the exhibit.

Which two statements about the effects of the given Cisco IOS configuration are true?
(Choose two.)

PrepAway - Latest Free Exam Questions & Answers

A.
The maximum number of half-open sessions is 400.

B.
The maximum number of half-open sessions is 600

C.
The idle timeout for UDP connections is 20 minutes.

D.
The half-open session timeout is 20 minutes

E.
The software will delete half-open sessions if more than 600 new sessions are
established per minute.

Explanation:
ip inspect max-incomplete high: To define the number of existing half-open sessions
that will cause the software to start deleting half-open sessions, use the ip inspect maxincomplete highcommand in global configuration mode. To reset the threshold to the
default of 500 half-open sessions, use the no form of this command.
ip inspect one-minute high: To define the rate of new unestablished sessions that will
cause the software to start deleting half-open sessions, use the ip inspect one-minutehighcommand in global configuration mode. To reset the threshold to the default of 500
half-open sessions, use the no form of this command.
ip inspect tcp idle-time: To specify the TCP idle timeout (the length of time a TCP session
will still be managed while there is no activity), use the ip inspect tcp idle-timecommand
in global configuration mode. To reset the timeout to the default of 3600 seconds (1
hour), use the no form of this command.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cri2.html#wp9025888050


Leave a Reply