Which of the following represents the behavior of the CBAC aggressive mode in a Cisco IOS
firewall?

You are in charge of Securing Networks Cisco Routers and Switches in your company Given that
the faO/1 interface is the trusted interface, what could be a reason for users on the trusted inside
networks not to be able to successfully establish outbound HTTP connections based on the
following configuration?

The Dynamic Multipoint VPN (DMVPN) feature allows users to better scale large and small IP
Security (IPsec) Virtual Private Networks (VPNs) by combining generic routing encapsulation
(GRE) tunnels, IPsec encryption, and Next Hop Resolution Protocol (NHRP).Referring to a
DMVPN hub router tunnel interface configuration, what will fail if the ip nhrp map multicast
dynamic command is missing on the tunnel interface?

What is the objective of the Cisco SDM IPS migration tool?

What OSI layers can CBAC filter on? Select all that apply.

Which description is true about the Cisco IOS IPS configuration output shown in the following
exhibit?

Router CK1 has been upgraded with the Cisco firewall IOS. Which of the following cannot be
configured on a router unless the IOS Firewall feature set is installed?
(Select all that apply)

For the following Cisco IOS Firewall features, which one allows the firewall to function as a Layer 2
bridge on the network?

While logged into a Company router, which of the following commands specifies that the IOS
Firewall IDS engine drops packets and resets TCP connections for information signatures?

Which statement best describes Cisco IOS Firewall URL-filtering services on Cisco IOS Release
12,4(15)T and later?