1.3 Security Features on Cisco IOS/IOS XE CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which command displays the statistics of a zone-based firewall policy, including packet counts for each class?

   • Ashow policy-map type inspect zone-pair
   • Bshow zone security
   • Cshow running-config
   • Dshow firewall
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary difference between static NAT and dynamic NAT?

   • AStatic NAT is used for outbound traffic; dynamic NAT is for inbound traffic.
   • BStatic NAT uses a pool; dynamic NAT uses a fixed mapping.
   • CStatic NAT translates ports; dynamic NAT translates IP addresses only.
   • DStatic NAT maps a specific inside address to a specific outside address; dynamic NAT maps inside addresses to a pool of outside addresses.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which NAT type allows multiple inside devices to share a single public IP address using unique port numbers?

   • APAT
   • BDestination NAT
   • CDynamic NAT
   • DStatic NAT
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which command is used to define an inside source NAT translation using a pool of addresses?

   • Aip nat pool NAT_POOL 200.1.1.1 200.1.1.10 netmask 255.255.255.0
   • Bip nat outside source list 1 pool NAT_POOL
   • Cip nat inside source static 10.0.0.1 200.1.1.1
   • Dip nat inside source list 1 pool NAT_POOL
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which command is used to configure PAT (NAT overload) on a router?

   • Aip nat outside source list 1 interface GigabitEthernet0/0 overload
   • Bip nat inside source static 10.0.0.1 200.1.1.1
   • Cip nat pool NAT_POOL 200.1.1.1 200.1.1.10 netmask 255.255.255.0
   • Dip nat inside source list 1 interface GigabitEthernet0/0 overload
   Reveal Solution Discussion Select an answer first