单选题You've configured an interface with an IP address and commited the change. You then commited a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do

第1题：

You configured an interface with an IP address and committed the change. You then committed a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）

• A、rollback 2
• B、rollback 1
• C、rollback 0
• D、rollback 3

第2题：

You have a firewall filter applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. Which action should be configured to accomplish your goal?（）

• A、then reject
• B、then discard
• C、then next filter
• D、then silent-drop

第3题：

You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）

• A、as an outbound filter on interface fxp0
• B、as an outbound filter on interface lo0
• C、as an inbound filter on interface fxp0
• D、as an inbound filter on interface lo0

第4题：

You are designing a strategy to allow users to gain VPN access to the internal network.  What should you do？（）

• A、 Allow all inbound VPN traffic to pass through the internal firewall and the perimeter firewall.
• B、 Allow all inbound VPN traffic to pass through the perimeter firewall only.
• C、 Allow all VPN traffic from the source IP address of 131.107.1.14 to pass through the internal firewall.
• D、 Allow all VPN traffic from the source IP address of 191.168.1.0/24 to pass through the perimeter firewall.

第5题：

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. You create a new inbound rule by using Windows Firewall with Advanced Security. You need to configure the rule to allow Server1 to accept unsolicited inbound packets that are received through a network address translation （NAT） device on the network. Which setting in the rule should you configure？（）

• A、Edge traversal
• B、Authorized computers
• C、Interface types
• D、Remote IP address

第6题：

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

You've configured an interface with an IP address and commited the change. You then commited a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）

• A、rollback 2
• B、rollback 1
• C、rollback 0
• D、rollback 3

第14题：

You have a firewall filter containing two terms applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. What match criterion should be used in the first term of the filter？（）

• A、Source TCP port
• B、Source IP address
• C、Destination TCP port
• D、Destination IP address

第15题：

You configured an interface with an IP address and committed the change. You then committed a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）

• A、rollback 2
• B、rollback 1
• C、rollback 0
• D、rollback 3

第16题：

You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a network address translation (NAT) router. The server has two network adapters and provides Internet access for the network.You need to prevent traffic on port 21 from being sent to the Internet. All other outbound traffic must be allowed.What should you do?（） 

• A、On the network adapter that is connected to the LAN, enable TCP/IP filtering. 
• B、On the network adapter that is connected to the Internet, enable TCP/IP filtering. 
• C、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the Services and Ports tab, and define a new service. 
• D、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the NAT/Basic Firewall tab, and define a new static packet filter.

第17题：

You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 25 Windows Server 2003 computers and 6，000 Windows XP Professional computers.The written company security policy states that network traffic to Web servers must be audited on a regular basis. A server named Server1 is configured as a Web server on the company’s intranet. You install Network Monitor Tools from a Windows Server 2003 product CD-ROM on Server1.You run Network Monitor on Server1 for three hours. When you stop the network capture， you see that Network Monitor captured over 40，000 frames. As you look at the captured frames， you notice that an extremely large number of TCP connection requests have all come from the 131.107.0.1 IP address.In Network Monitor， you need to view only the frames for network traffic that are captured between Server1 and the 131.107.0.1 IP address.  What should you do？（）

• A、Create an Address Capture filter for all network traffic between Server1 and the 131.107.0.1 IP address.
• B、Create a Find Frame Expression filter for network traffic captured between Server1 and the 131.107.0.1 IP address.
• C、Create an Address Display filter for all network traffic captured between Server1 and the 131.107.0.1 IP address.
• D、Create a Pattern Match capture trigger for the 131.107.0.1 IP address.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：