Which of the following description are correct about the security policy action and security configuration file? (Multiple Choice)

• A.The security configuration file must be applied to the security policy that is allowed to take effect.
• B.If the security policy action is "Allow", the traffic will not match the security configuration file.
• C.If the action of the security policy is "prohibited", the device will discard this traffic and will not perform content security check later.
• D.The security configuration file can be applied without being applied to the security policy allowed by the action.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statement about the NAT configuration is wrong?

• A.When there is VoIP service in the network, you do not need to configure NAT ALG
• B.The IP address in the address pool can overlap with the public IP address of the NAT server
• C.Configure source NAT in -.transparent mode, the firewall does not support easy-ip mode
• D.The firewall does not support NAPT conversion for ESP and AH packets.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are correct about the differences between pre-accident prevention strategies and post-accident recovery strategies? (Multiple Choice)

• A.The prevention strategy focuses on minimizing the likelihood of an accident before the story occurs. The recovery strategy focuses on minimizing the impact and loss on the company after the accident
• B.The role of pre-disaster prevention strategies does not include minimizing economic, reputational, and other losses caused by accidents.
• C.Recovery strategy is used to improve business high availability
• D.Recovery strategy is part of the business continuity plan

Comment: *

Name: *

Email: *

Verification: *

How to view the matching number of security policy?

• A.display startup saved-configuration
• B.display device
• C.display current-configuration
• D.display policy all

Comment: *

Name: *

Email: *

Verification: *

Which of the following statement about the NAT is wrong?

• A.Some application layer protocols carry IP address information in the data, but also modify the IP address information in the data of the upper layer when they are as NAT
• B.Address Translation can follow the needs of users, providing FTP, WWW, Telnet and other services outside the LAN
• C.NAT technology can effectively hide the hosts of the LAN, it is an effective network security protection technology
• D.For some non-TCP, UDP protocols (such as ICMP, PPTP), unable to do the NAT translation

Comment: *

Name: *

Email: *

Verification: *