ccna 4 chapter 3 exam answers 2019

ccna 4 chapter 3 exam answers 2019.R1(config)# interface Fa0/0 R1(config-if)# ip inspect MYSITEinThe inspect list automatically generates temporary ACL statements for TCP and UDP connections in the inbound ACL applied to the external interface to allow TCP and UDP traffic in response to internal network requests.4.2.4 Firewalls in Network Design4.2.4.1 DMZIn network security, a term is often mentioned: demilitarized zone (DMZ).The DMZ refers to the portion of the network defined by a firewall or group of firewalls.4.2 Firewall Technology 109The term derives from military terminology and refers to the area where conflict between two military forces is not allowed. The DMZ defines the trusted and untrusted portions of the network. Firewall designs are based primarily on source, destination, and traffic type to determine whether a device interface will allow or deny traffic through. Some designs are very simple: two interfaces are identified on the firewall, thus designating the external network and the internal network. The public (or external) network is untrusted and the private (or internal) network is trusted. Typically, a firewall with two interfaces is configured as follows.Traffic originating from the private network is detected as it goes to the public network and is allowed to be sent with no or little restriction; traffic originating from the privatetraffic associated with traffic originating on the private network and returning from the public network is allowed in after detection. Traffic originating from the public network and destined for the private network is typically blocked from entry altogether.A more complex design would involve three or more interfaces on the firewall. In this case, there is typically one internal interface connected to the private network, one external interface connected to the public network, and another DMZ interface. In this configuration, a typical firewall will be implemented based on the flow direction of traffic.