Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Pobierz pdf (Strona 120)

642-531

B. Use the static and access-list commands.

C. Set the Eth1/0 interface to auto.

D. Use the nat and global commands.

Answer: B

Explanation:

Two things are required for traffic to flow from a lower security to a higher security interface: a static

translation and a conduit or an access list to permit the desired traffic.

Reference:Cisco Secure PIX Firewall (Ciscopress) page 55

QUESTION 271

Which common command are you going to use to clear the contents of the translation slots when needed?

A. clear xlate

B. remove session

C. show logon

D. end session

E. kill

F. whois

Answer: A

The xlate command allows you to show or clear the contents of the translation (xlate) slots.

show xlate, clear xlate

Reference:Cisco Secure PIX Firewall (Ciscopress) page 77

QUESTION 272

If you wanted to view the conduit command statements in the configuration and the number of times (hit count)

an element has been matched during a conduit command search, what command would you type on the PIX

Firewall?

A. show con -all

B. show config

C. show conduit

D. conduit /all

Answer: C

Explanation:

To look at the configured conduits, use the show conduit command.

Reference:Cisco Secure PIX Firewall (Ciscopress) page 89

QUESTION 273

In PIX Terminology, what exactly is a Conduit?

A. It routes data from one interface to another.

1 2 ... 115 116 117 118 119 120 121 122 123

Brak uwag

Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Arkusz Danych Strona 120