Online Access Free 640-554 Exam Questions

Which element must you configure to allow traffic to flow from one security zone to another?

• A.a site-to-site VPN
• B.a zone-based policy
• C.a zone list
• D.a zone pair

Which two types of access lists can be used for sequencing? (Choose two.)

• A.reflexive
• B.extended
• C.dynamic
• D.standard

Which actions can a promiscuous IPS take to mitigate an attack? (Choose three.)

• A.requesting host blocking
• B.requesting connection blocking
• C.resetting the TCP connection
• D.modifying packets
• E.denying frames
• F.denying packets

Which statement about Control Plane Policing is true?

• A.Control Plane Policing allows ACL-based filtering to protect the control plane against DoS attacks.
• B.Control Plane Policing classifies traffic into three categories to intercept malicious traffic.
• C.Control Plane Policing allows QoS filtering to protect the control plane against DoS attacks.
• D.Control Plane Policing intercepts and classifies all traffic.

If the native VLAN on a trunk is different on each end of the link, what is a potential consequence?

• A.The interface with the lower native VLAN may shut down.
• B.The switch with the higher native VLAN may shut down.
• C.The interface on both switches may shut down.
• D.STP loops may occur.