More Testimonials >
Visit my blog for free daily Cisco CCNA and CCNP certification questions, my latest free articles and tutorials, and more!


 

 

CCNP Practice Exam For ISCW Study:

Firewalls And Other Cisco Security Features

 

Vital Reading And Watching For All Cisco Certification Candidates:

The July 2010 CCNP Changes (And How To Beat Them!)

 

To help you beat the July 31, 2010 deadline for the ISCW exam, here are seven practice exam questions on Cisco router and switch security features.

The answers can be found at the bottom of the page, and when you're done with this exam, head to our CCNP Practice Exam page for more free practice questions!

Join our Twitter conversation on the left side of this page for immediate notification on the posting of new answers and questions, additions to our YouTube Cisco Certification Channel, and more!

Be sure to check out our CCNP Guaranteed Pass offer!

 

Enjoy the questions!

Chris Bryant

CCIE #12999

"The Computer Certification Bulldog"

chris@thebryantadvantage.com

 

CCNP ISCW Study PackageCCNP Certification Exam Study Bundle

 

Question 1:

Which of the following is/are not typically found in a DMZ?

A. FTP server

B. email server

C. end user PC

D. e-commerce server

 

Question 2:

Which of the following commands is required to run SDM in a secure fashion?

A. ip http authentication local

B. ip http proxy

C. ip http server

D. ip http secure-server

 

Question 3:

What are the options for the ACL applied to inbound traffic on the untrusted interface?

A. Extended ACL only

B. Either a named, extended, or standard ACL

C. Standard ACL only

D. Named ACL only

 

Question 4:

Which of the following is true of TCP and UDP as they related to the IOS Firewall Set?

A. TCP applications can be protected on a per-application basis.

B. TCP generic inspection can be applied.

C. UDP applications can be protected on a per-application basis.

D. UDP generic inspection can be applied.

 

Question 5:

Which of the following accurately describes the Basic Firewall Wizard?

A. can be used to configure a DMZ

B. no capability to configure a DMZ

C. can configure multiple outside interfaces

D. no capability to configure multiple outside interfaces

 

Question 6:

Which of the following can the Basic Firewall Wizard configure?

A. multiple inside interfaces

B. multiple outside interfaces

C. DMZ

D. custom application rules

 

Question 7:

When a specific user profile is retrieved from a RADIUS or TACACS+ server and is applied to that user only, what IOS Firewall feature is in effect?

A. SDM

B. Offline Authentication

C. Authentication Proxy

D. Fail Closed

 

The answers are posted at the bottom of the page!

 

Earn Your CCNP With The Personal Guarantee Of Chris Bryant, CCIE #12933:

“I GUARANTEE You'll Pass The Current CCNP Exams - BSCI, ONT, ISCW, and BCMSN - Before The July 31, 2010 Cutoff Date With My CCNP Study Packages ...

... And If You Don't Pass FOR ANY REASON Before That Time, I'll Give You a 100% Free CCNP Study Package Download For The New Exam Track!"

You Also Get A FREE CCNA Security Study Package, Valued at $67, With The Purchase Of Any CCNP Study Package!

 

CCNP ISCW Study PackageCCNP Certification Exam Study Bundle

 

Answers:

 

1. C. You'll find many different server types in a DMZ, but not end user PCs.

 

2. A, C, D. Additionally, the local user must have privilege level 15 to log in to SDM.

 

3. A. The ACL applied to inbound traffic on the untrusted interface must be an extended ACL.

 

4. A, B, C, D. Generic inspection and per-application inspection can be configured for both TCP- and UDP-based applications.

 

5. B, D. That's why we call it "Basic"! (You can configure multiple inside interfaces, though.)

 

6. A. The Basic wizard can't configure custom app rules, either.

 

7. C. That's the Authentication Proxy (AP).

 

For more free ISCW practice exams, head to our CCNP Practice Exams page!

CCNP ISCW Study PackageCCNP Certification Exam Study Bundle

The Ultimate CCNA Study Package | The Ultimate CCNA Study Guide

Binary Math And Subnetting Mastery

Cisco Rack Rentals

CCNP BSCI Exam Study Package

CCNP BCMSN Exam Study Package

CCNP BCRAN Exam Study Package

CCNP CIT Exam Study Package | CCNP BSCI Exam Study Guide

CCNA CBT Video Boot Camp | CCNP BSCI Video Boot Camp

Cisco Training Tutorials And Cisco Certification Articles

CCNP CBT BCMSN Video Boot Camp | CCNP CBT BCRAN Video Boot Camp

CompTIA Network+ Exam Study Package

CompTIA Security+ Exam Study Package

CompTIA A + Certification Exam Study Package

CCNA Training Store | CCNP Certification Training Store

CompTIA Certification Training Store

Cisco Lab Router And Switch Home Lab Help

Site Map | Home Page | Testimonials

Microsoft Windows Vista Certification Updates And News

The Bryant Advantage Blog | About Chris Bryant, CCIE #12933