Ccna certification Practice Tests

B.  All firewall policies should be documented.

C.  Firewall logs should be regularly monitored.

D.  Firewalls should allow traffic by default and deny traffic explicitly.

 18.  What is the reason firewalls are considered stateful?

A.  Firewalls keep track of the zone states.

B.  Firewalls keep accounting on the state of packets.

C.  Firewalls track the state of a TCP conversation.

D.  Firewalls transition between defense states.

 19.  You have an Adaptive Security Appliance (ASA) and two separate Internet connections via 

different providers. How could you apply the same policies to both connections?

A.  Place both connections into the same zone.

B.  Place each connection into an ISP zone.

C.  Apply the same ACL to both of the interfaces.