Which of the following are the characteristics of the virtual system? (Multiple choice)

• A.Management independence
• B.Flow isolation
• C.Entries independence
• D.Resource independence

Comment: *

Name: *

Email: *

Verification: *

Based on the following ISP routing configuration information on a firewall, which of the following options are correct? (Multiple choices)

• A.Configure a total of 2 csv files.
• B.The china-unicom.csv file has two outgoing interfaces bound to the firewall.
• C.The two outgoing interfaces of china-unicom.csv are all routed in the routing table.
• D.There are two files that have been issued by the ISP.

Comment: *

Name: *

Email: *

Verification: *

A company has three departments: research, marketing, and finance. The enterprise uses the local authentication of the firewall to perform user authentication for employees in each department. The authentication domain is default. Authenticated users can gain access to the company's internal network.Now companies want their employees to use the Webmail system to send and receive emails when they travel, and use ERP systems to work. How to deploy if using SSL VPN to access the network?

• A.Users can be divided into different user groups according to department attributes, and different SSL VPN services can be authorized for user groups.
• B.It is only necessary to allow external users to access the SSL VPN virtual gateway traffic on the firewall so that employees on business trips can use Webmail and ERP systems.
• C.If employees on business trips use Webmail to send files, they need to enable file sharing.
• D.Because both the Webmail system and the ERP system can be accessed using the Web interface, the Web proxy function of the SSL VPN needs to be configured in order to meet employees' needs for accessing the internal server.

Comment: *

Name: *

Email: *

Verification: *

An enterprise branch and headquarters need to be able to transmit multicast packets. As shown in the figure, FW_B is the branch gateway, and the FW_B is used to establish an IPSec VPN with the headquarters (pre-shared key authentication). Which parts in the following configuration on FW_B is required? (Multiple choices)

• A.Configure routes to set the next hop of the traffic that needs to be transmitted over the GRE over IPSec tunnel to the tunnel interface address.
• B.Configure the route and set the next hop of the traffic that needs to be transmitted over the GRE over IPSec tunnel to 12.1.1.1/24.
• C.Applying the IPSec Security Framework on the GRE Tunnel Interface
• D.Configure the security policy. The reference rule is permit:192.168.0.0/24->Internet data flow.

Comment: *

Name: *

Email: *

Verification: *

Limiting policies can limit which of the following objects? (Choose two answers)

• A.IM protocol data flow restrictions
• B.PZP protocol data flow restrictions
• C.IP connection limit
• D.IP bandwidth limit

Comment: *

Name: *

Email: *

Verification: *