Can someone tell me the right Answer for this Qn?
I thought traffic should originate from high interface to low interface as
in the static command?? please explain?


Practice test for:
Cisco MCNS 2.0 Test #2
Incorrect. Your answer was: B D
The correct answer(s): B C
Which of the following statements is true
A.) nat and global take precedence over statics command
B.) Static and conduits must be configured to allow traffic to originate
from an interface with a lower security value specified with the nameif
command through the PIX firewall to an interface with a higher security
value                       . '
C.) Statics take precedence over nat and global command pairs
D.) Static and conduits must be configured to allow traffic to originate
from an interface with a higher security value specified with the nameif
command through the PIX firewall to an interface with a lower security value

Boson Explanation:
Statics take precedence over nat and global command pairs, which
means that nat 1 0 0 only grants outbound access to hosts not specified in
the static statement.
Static and conduits must be configured to allow traffic to originate
from an interface with a lower security value specified with the nameif
command through the PIX firewall to an interface with a higher security
value. For example, a static and conduit must be configured to allow
incoming sessions from the outside interface to the DMZ interface, or from
the outside interface to the inside interface.



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=46213&t=46213
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to