单选题You need to control SSH. HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）A as an outbound filter on interface fxp0B as an outbound filter on interfa

第1题：

第2题：

You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter. How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第3题：

You need to control SSH. HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第4题：

You have a firewall filter applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. Which action should be configured to accomplish your goal?（）

• A、then reject
• B、then discard
• C、then next filter
• D、then silent-drop

第5题：

You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第6题：

A firewall filter is applied as an input filter on a transit interface. What three types of traffic will this affect? （）

• A、inbound traffic transiting the router
• B、outbound traffic transiting the router
• C、traffic destined to the Routing Engine
• D、traffic destined to the interface address on which the filter is applied

第7题：

You are the network administrator for your company. All servers run Windows Server 2003.  You configure a server named Server2 as a Network Address Translation （NAT） server. Server2 has a single network adapter and a modem. Server2 connects to the Internet through a demand-dial connection. Users report that when they attempt to connect to Internet Web sites， they intermittently receive the following error message： "Page not found." After waiting for several minutes， they can connect to the Web sites. These errors occur throughout the day.  You need to configure Server2 to allow users to always connect to Internet Web sites.   What should you do？（）

• A、Set the demand-dial connection to Persistent.
• B、Set the dial-out hours on the demand-dial connection to any day and any time.
• C、Set a demand-dial filter. Configure the filter for Only allow the following traffic. Specify a new filter for outbound port 80.
• D、Configure the demand-dial interface as the private interface.

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

You have a firewall filter containing two terms applied in an inbound direction on a customer interface.You would like this filter to protect your network from a spoofed denial of service attack. Which match criterion should be configured ito identify unwanted packets?（）

• A、from source-port
• B、from source-address
• C、from destination-address
• D、from destination-port

第14题：

You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter.How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第15题：

You've configured an interface with an IP address and commited the change. You then commited a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）

• A、rollback 2
• B、rollback 1
• C、rollback 0
• D、rollback 3

第16题：

You have a firewall filter containing two terms applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. What match criterion should be used in the first term of the filter？（）

• A、Source TCP port
• B、Source IP address
• C、Destination TCP port
• D、Destination IP address

第17题：

You configured an interface with an IP address and committed the change. You then committed a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）

• A、rollback 2
• B、rollback 1
• C、rollback 0
• D、rollback 3

第18题：

You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a network address translation (NAT) router. The server has two network adapters and provides Internet access for the network.You need to prevent traffic on port 21 from being sent to the Internet. All other outbound traffic must be allowed.What should you do?（） 

• A、On the network adapter that is connected to the LAN, enable TCP/IP filtering. 
• B、On the network adapter that is connected to the Internet, enable TCP/IP filtering. 
• C、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the Services and Ports tab, and define a new service. 
• D、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the NAT/Basic Firewall tab, and define a new static packet filter.

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：