In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations?
(Choose three).

A.
When matching ACL entries are configured

B.
When the firewall requires strict HTTP inspection

C.
When matching NAT entries are configured

D.
When the firewall recieves a FIN packet

E.
When the firewall requires HTTP inspection

F.
When the firewall already has a TCP connection

Explanation:
Brad
Answer- A, C and F
Confidence level: 100%
Note: The dumps say the correct answers are A, C, E. This is incorrect. See the following links:
https://supportforums.cisco.com/discussion/11809846/asa-5505-using-nat-allowing-incoming-traffic-https
https://supportforums.cisco.com/discussion/12473551/asa-what-allowing-return-http-traffic
Also, there is a modified version of this question where answers D and F are replaced with “When the firewall
receives a SYN packet” and “When the firewall receives a SYN-ACK packet”. The a SYN-ACK packet coming
back from the web server establishes the TCP connection and allows requests to come through, so this is a
correct answer.