CCNA CertificationNo.1 Resource for your Cisco Exams

You are the VPN-1/Firewall-1 administrator for a company WAN. 250-300 You want all users to communicate
across WAN securely. You must use an encryption scheme that does not change packet size, to allow
for better network performance. You must also be able to define the Certificate Authority from your
local VPN-1/Firewall-1 Management Module. 250-421 Which encryption scheme do you choose?

A. IKE
B. Triple DES.
C. Manual 250-422 IPSec.
D. FWZ
E. Rgindal

Answer: D

From what two windows can you use to block or terminate 70-624 any connection from or to a specific IP address
in Log Viewer NG? (Select two.)

A. Request window
B. Intruder 70-630 window
C. Block Intruder window
D. Block Request window
E. Block Request/Intruder 70-631 window
www.Certifyme.com

156-210.4
76
Answer: C, D.

How would you remedy a 70-529 conflict between Anti-Spoofing and NAT?

A. By adding the translated, external IP address to the Valid Addresses on the external interface
B. By removing die translated, 70-536 external I? address to the invalid Addresses on the internal interface
C. By adding the translated external IP address to the Valid Addresses on the internal interface
D. Reinstall NAT 70-552 rules
E. Do nothing
Answer: C.