Refer to the diagram and partial configuration. Based on the partial configuration, which of the following FTP application answers is correct?
A.
If the FTP client is configured for active FTP, the ASA partial configuration will enable the remote user to “get” and “put” FTP files.
B.
If the FTP client is configured for passive FTP, ASA FTP protocol inspection is required before FTP data traffic can be returned through the ASA to the FTP client.
C.
If the FTP client is configured for passive FTP, the ASA partial configuration will enable remote user to “get” but not “put” FTP files.
D.
If the FTP client is configured for active FTP, only the outside access-list and FTP server static statement are required before FTP data and control traffic can be passed through the ASA.
C should be the correct answer, as put is denied by the request-cmd statement
0
0
I think i actually agree with Jan here
C could be the correct answer
see here :- http://www.ccexpert.us/snpa/servicepolicy-applies-policy-to-an-interface-or-globally.html
That stament request-cmd is to filter as in is used to write the ftp commands which you want to deny.
If there is anything more please let me know.
0
0