A packet is evaluated against three user-defined terms within a firewall filter and no match is found. What correctly describes the action the firewall filter will take for this packet?（）A、The filter will permit the packet and take no additional actionB、T

题目

A packet is evaluated against three user-defined terms within a firewall filter and no match is found. What correctly describes the action the firewall filter will take for this packet?（）

  • A、The filter will permit the packet and take no additional action
  • B、The filter will reject the packet and send an ICMP message back to the sender
  • C、The filter will discard the packet and take no additional action
  • D、The filter will permit the packet and write a log entry to the firewall log
相似考题

1.Click the Exhibit button.In the exhibit, you decided to change myHosts addresses.What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?（）A. New sessions will be evaluated. In-progress sessions will be re-evaluated.B. New sessions will be evaluated. All in-progress sessions will continue.C. New sessions will be evaluated. All in-progress sessions will be dropped.D. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated.

2.The SRX device receives a packet and determines that it does not match an existing session.After SCREEN options are evaluated, what is evaluated next?()A. source NATB. destination NATC. route lookupD. zone lookup

3.Referring to the exhibit, if the static route with prefix 10.1.1.0／24 is evaluated against the routing policy, which preference value will be set?()A. The preference will be 6.B. The preference will be 7.C. The preference will be 8.D. The preference will be the default for static routes.

4.Which two statements about the use of SCREEN options are correct? ()(Choose two.)A. SCREEN options offer protection against various attacksB. SCREEN options are deployed prior to route and policy processing in first path packet processingC. SCREEN options are deployed at the ingress and egress sides of a packet flowD. SCREEN options, you must take special care to protect OSPF

更多“A packet is evaluated against th”相关问题

  • 第1题：

    A packet is evaluated against three user-defined terms within a firewall filter and no match is found. What correctly describes the action the firewall filter will take for this packet?（）

    • A、The filter will permit the packet and take no additional action.
    • B、The filter will reject the packet and send an ICMP message back to the sender.
    • C、The filter will discard the packet and take no additional action.
    • D、The filter will permit the packet and write a log entry to the firewall log.

    正确答案:C

  • 第2题：

    How does an IPv6 router deal with a packet that is larger than the outgoing interface MTU？（）

    • A、It will fragment the packet at Layer 2.
    • B、It will fragment the packet at Layer 3.
    • C、It will drop the packet and send an ICMPv6 message "packet too big" back to the source.
    • D、It will drop the packet.

    正确答案:C

  • 第3题：

    Man-in-the-Middle类攻击可细分为（）。

    • A、Packet capturing
    • B、Packet alteration
    • C、Packet injection
    • D、Connection hijacking
    • E、Packet insert

    正确答案:A,B,C,D

  • 第4题：

    GPRS的英文全称为（）

    • A、Global Packet Radio Service
    • B、General Packet Radio System
    • C、General Packet Radio Service
    • D、Global Packet Radio System

    正确答案:C

  • 第5题：

    Which Cisco PIX and ASA feature provides reliable， comprehensive security against virus and worm propagation， as well as data theft？  （）

    • A、 WebVPN for SSL
    • B、 IPSec
    • C、 AIM
    • D、 Stateful packet inspection

    正确答案:A

  • 第6题：

    A router receives a packet on interface 172.16.45.66/26. The source IP of the packet is 172.16.45.127/26 and the destination is 172.16.46.191/26.How will the router handle the packet?（）

    • A、The destination is a host on another subnet, so the router will not forward the packet.
    • B、The destination is a host on the same subnet, so the router will forward the packet.
    • C、The destination is a broadcast address, so the router will not forward the packet.
    • D、The destination is a network address, so the router will forward the packet.

    正确答案:C

  • 第7题：

    单选题
    0ne function of a hulwark is to（）.
    A

    help keep the deck dry

    B

    prevent stress concentrations on the stringer plate

    C

    protect against twisting forces exerted on the frame of the vessel

    D

    reinfo ce th eside stringers


    正确答案： C
    解析： 暂无解析

  • 第8题：

    单选题
    Evaluate the following statement：   Which statement is true regarding the evaluation of rows returned by the subquery in the INSERT statement？（）
    A

     They are evaluated by all the three WHEN clauses regardless of the results of the evaluation of any other WHEN clause.

    B

     They are evaluated by the first WHEN clause. If the condition is true， then the row would be evaluated by the subsequent WHEN clauses.

    C

     They are evaluated by the first WHEN clause. If the condition is false， then the row would be evaluated by the subsequent WHEN clauses.

    D

     The INSERT statement would give an error because the ELSE clause is not present for support in case none of the WHEN clauses are true.


    正确答案： A
    解析： 暂无解析

  • 第9题：

    多选题
    Which three statements are true about DAI？（）
    A

    DAI intercept all ARP packets on untrusted ports

    B

    DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP Snooping database.

    C

    DAI is used to prevent against a DHCP Snooping attack.

    D

    DAI forwards all ARP packets received on a trusted interface without any checks.

    E

    DAI forwards all ARP packets on untrusted ports.

    F

    DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.


    正确答案： F,E
    解析： 暂无解析

  • 第10题：

    单选题
    Refer to the exhibit. A router has a 256 kbps Frame Relay circuit connected to interface serial 0/0. As a large FTP packet is being placed into the hardware transmit queue of interface serial 0/0， a voice packet is placed into the priority queue of that interface. How， and in what order， wi the packets be transmitted？（）
    A

    the voice packet will be transmitted first， followed by the FTP packet in its entirety

    B

    the voice packet will be transmitted first， followed by the fragmented FTP packet

    C

    the FTP packet will be fragmented and the voice packet will be interleaved

    D

    the FTP packet will be transmitted first in its entirety， follow by the voice packet


    正确答案： A
    解析： 暂无解析

  • 第11题：

    多选题
    Which two statements about the use of SCREEN options are correct？（）
    A

    SCREEN options are deployed at the ingress and egress sides of a packet flow.

    B

    Although SCREEN options are very useful， their use can result in more session creation.

    C

    SCREEN options offer protection against various attacks at the ingress zone of a packet flow.

    D

    SCREEN options examine traffic prior to policy processing， thereby resulting in fewer resouces used formalicious packet processing.


    正确答案： C,D
    解析： 暂无解析

  • 第12题：

    多选题
    Which two statements about the use of SCREEN options are correct? （）(Choose two.)
    A

    SCREEN options offer protection against various attacks

    B

    SCREEN options are deployed prior to route and policy processing in first path packet processing

    C

    SCREEN options are deployed at the ingress and egress sides of a packet flow

    D

    SCREEN options, you must take special care to protect OSPF


    正确答案： D,A
    解析： 暂无解析

  • 第13题：

    GPRS的英文全称为（）

    • A、Global.Packet.Radio.Service
    • B、General.Packet.Radio.System
    • C、General.Packet.Radio.Service
    • D、Global.Packet.Radio.System

    正确答案:C

  • 第14题：

    Refer to the exhibit. A router has a 256 kbps Frame Relay circuit connected to interface serial 0/0. As a large FTP packet is being placed into the hardware transmit queue of interface serial 0/0， a voice packet is placed into the priority queue of that interface. How， and in what order， wi the packets be transmitted？（）

    • A、the voice packet will be transmitted first， followed by the FTP packet in its entirety
    • B、the voice packet will be transmitted first， followed by the fragmented FTP packet
    • C、the FTP packet will be fragmented and the voice packet will be interleaved
    • D、the FTP packet will be transmitted first in its entirety， follow by the voice packet

    正确答案:D

  • 第15题：

    In the exhibit， you decided to change myHosts addresses. [edit security policies] user@host# show from-zone Private to-zone External { policy MyTraffic { match { source-address myHosts； destination-address  ExtServers；application  [ junos-ftp junos-bgp ]； } then { permit { tunnel { ipsec-vpn vpnTunnel； } } } } } policy-rematch； What will happen to the new sessions matching the policy and in-progress sessions that hadalready matched the policy？（）

    • A、New sessions will be evaluated. In-progress sessions will be re-evaluated.
    • B、New sessions will be evaluated. All in-progress sessions will continue.
    • C、New sessions will be evaluated. All in-progress sessions will be dropped.
    • D、New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

    正确答案:A

  • 第16题：

    GPRS正确的的英文全称描述：（）

    • A、Global Packet Radio Service
    • B、General Packet Radio Service
    • C、General Packet Radio System
    • D、Global Packet Radio System

    正确答案:B

  • 第17题：

    Which three statements are true about DAI？（）

    • A、DAI intercept all ARP packets on untrusted ports
    • B、DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP Snooping database.
    • C、DAI is used to prevent against a DHCP Snooping attack.
    • D、DAI forwards all ARP packets received on a trusted interface without any checks.
    • E、DAI forwards all ARP packets on untrusted ports.
    • F、DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.

    正确答案:A,B,D

  • 第18题：

    Which two statements are true regarding routing policy processing?（）

    • A、The Junos OS verifies the match criteria of each policy in order and performs the associated action when a match occurs.
    • B、Policies are evaluated from right to left as displayed in the Junos OS configuration file.
    • C、Polices are evaluated based on the order in which they are applied to a routing protocol.
    • D、Policy processing stops once the last statement in the policy is evaluated.

    正确答案:A,C

  • 第19题：

    多选题
    What are two possible actions an IOS IPS can take if a packet in a session matches a signature？（）
    A

    reset the connection

    B

    forward the packet

    C

    check the packet against an ACL

    D

    drop the packet


    正确答案： A,B
    解析： 暂无解析

  • 第20题：

    单选题
    Which Cisco PIX and ASA feature provides reliable， comprehensive security against virus and worm propagation， as well as data theft？  （）
    A

     WebVPN for SSL

    B

     IPSec

    C

     AIM

    D

     Stateful packet inspection


    正确答案： D
    解析： 暂无解析

  • 第21题：

    单选题
    The SRX device receives a packet and determines that it does not match an existing session.After SCREEN options are evaluated, what is evaluated next?（）
    A

    source NAT

    B

    destination NAT

    C

    route lookup

    D

    zone lookup


    正确答案： C
    解析： 暂无解析

  • 第22题：

    单选题
    A packet is evaluated against three user-defined terms within a firewall filter and no match is found. What correctly describes the action the firewall filter will take for this packet?（）
    A

    The filter will permit the packet and take no additional action

    B

    The filter will reject the packet and send an ICMP message back to the sender

    C

    The filter will discard the packet and take no additional action

    D

    The filter will permit the packet and write a log entry to the firewall log


    正确答案： B
    解析： 暂无解析

  • 第23题：

    单选题
    A packet is evaluated against three user-defined terms within a firewall filter and no match is found. What correctly describes the action the firewall filter will take for this packet?（）
    A

    The filter will permit the packet and take no additional action.

    B

    The filter will reject the packet and send an ICMP message back to the sender.

    C

    The filter will discard the packet and take no additional action.

    D

    The filter will permit the packet and write a log entry to the firewall log.


    正确答案： C
    解析： 暂无解析

相关内容