PrepAway - Latest Free Exam Questions & Answers

Author: seenagape

Which configuration will resolve this problem?

[edit policy-options]
user@router# show
policy-statement block-routes {
term 1 {

from {
route-filter 172.27.0.0/24 longer;
}
then reject;
}
term 2 {
then accept;
}
}

You are asked to ensure that your device does not accept any prefixes within the 172.27.0.0/24
network. You have applied the policy shown in the exhibit, but the 172.27.0.0/24 route is still
present on your device.
Which configuration will resolve this problem?

What will happen when it is processed by the firewall filter shown in the exhibit?

firewall {
filter select-telnet {
term 1 {
from {
source-address {
10.0.0.0/8;

}
}
then log;
}
term 2 {
from {
protocoltcp;
port telnet;
}
then {
syslog;
reject;
}
}
term 3 {
from {
source-address {
10.1.1.1/32;
}
protocoltcp;
port telnet;
}
then {
sample;
accept;
}
}

}
}

A Telnet session is initiated from host 10.1.1.1.
What will happen when it is processed by the firewall filter shown in the exhibit?

What are two reasons why users would be able to ping between these zones?

Following a recent security audit, you find that users are able to ping between the untrust
zone and the trust zone, which is contrary to your organization’s current security policy. On
examination of the current security policies, you find no policies that would allow these
connections.
What are two reasons why users would be able to ping between these zones? (Choose two.)


Page 608 of 1,293« First...102030...606607608609610...620630640...Last »