多选题Which three statements about IOS Firewall configurations are true？（）AThe IP inspection rule can be applied in the inbound direction on the secured interface.BThe IP inspection rule can be applied in the outbound direction on the unsecured interface.CTh

第1题：

With which three tasks does the IPS Policies Wizard help you？ （）

• A、Selecting the interface to which the IPS rule will be applied
• B、Selecting the Signature Definition File （SDF） that the router will use
• C、Selecting the direction of traffic that will be inspected
• D、Selecting the inspection policy that will be applied to the interface

第2题：

Which statement about access lists that are applied to an interface is true?（）

• A、you can apply multiple access lists with the same protocol or in different…
• B、you can config one access list,per direction,per layer 3 protocol
• C、you can placeasmanyaccess lists as you want on any interface
• D、you can apply ony one access list on any interface

第3题：

第4题：

Which of these is true regarding the configuration and application of port access control lists？ （）

• A、PACLs can be applied in the inbound or outbound direction of a Layer 2 physical interface. 
• B、At Layer 2， a MAC address PACL will take precedence over any existing Layer 3 PACL.
• C、When you apply a port ACL to a trunk port， the ACL filters traffic on all VLANs present on the trunk port.
• D、PACLs are not supported on EtherChannel interfaces.

第5题：

Which statement best describes configuring access control lists to control Telnet traffic destined to therouter itself？（）

• A、The ACL applied to the vty lines has no in or out option like ACL being applied to an interface.
• B、The ACL is applied to the Telnet port with the ip access-group command.
• C、The ACL must be applied to each vty line individually.
• D、The ACL should be applied to all vty lines in the in direction to prevent an unwanted user from connecting to an unsecured port.

第6题：

Which statement about access lists that are applied to an interface is true?（）

• A、you can apply multiple access lists with the same protocol or in different direction.
• B、you can config one access list,per direction,per layer 3 protocol
• C、you can place as many access lists as you want on any interface
• D、you can apply only one access list on any interface

第7题：

By default, which two statements are true about export routing policies?（）

• A、Export policies can evaluate only active routes
• B、Export policies can evaluate all routes
• C、Export policies can be applied to the forwarding table
• D、Export policies can be applied directly to interfaces

第8题：

第9题：

Which three statements about IOS Firewall configurations are true？（）

• A、The IP inspection rule can be applied in the inbound direction on the secured interface.
• B、The IP inspection rule can be applied in the outbound direction on the unsecured interface.
• C、The ACL applied in the outbound direction on the unsecured interface should be an extended ACL.
• D、The ACL applied in the inbound direction on the unsecured interface should be an extended ACL.
• E、For temporary openings to be created dynamically by Cisco IOS Firewall，the access-list for thereturning traffic must be a standard ACL.
• F、For temporary openings to be created dynamically by Cisco IOS Firewall，the IP inspection rule must be applied to the secured interface.

第10题：

Which three statements accurately describe IOS Firewall configurations？（）

• A、The IP inspection rule can be applied in the inbound direction on the secured interface
• B、The IP inspection rule can be applied in the outbound direction on the unsecured interface
• C、The ACL applied in the inbound direction on the unsecured interface should be an extendedACL.
• D、For temporary openings to be created dynamically by Cisco IOS Firewall， the access-list for thereturning traffic must be a standard ACL