ccna 4 practice final exam v6

ccna 4 practice final exam v6.Step 6 After selecting a class mapping, define the behavior that the policy mapping should take when traffic matches that class mapping. From the Action area, select Pass, Drop, or Inspect, depending on the needs of the class mapping. click OK.Step 7 To add another class map to the policy, click Addo To modify the action of an existing class map, select the class map from the ClassMap list and click Edito To delete a class map, select the class map from the Class Map list and click Deleteo Use the Move Up and Move Down buttons to change the order in which the class maps are evaluated.Step 8 Click OK. click OK in the CommandDelivery Status window.4.3.4.9 Defining a Zone PairA zone pair (zonepair) specifies a single directional firewall policy between two security zones. Traffic is determined by specifying the source and destination security zones4.3 Zone Policy Based Firewall 119 direction. The same zone cannot be defined as a source and a destination. If it is desired that traffic flow in both directions between two zones, then create Zone Pairs (Zone Pairs) in each direction o If it is desired that traffic flow freely between all interfaces, then each interface must be configured in one zone. There are several steps to configure a new zone pair with CCP as follows. Step 1 Select Configure > Security > Firewall > FirewallComponents > Zone Pairs o Step 2 In the Zone Pairs panel, click Add, and the AddaZone Pair window appears. Step 3 In the ZonePair field, enter the name of the zone pair. Select the source zone from which the traffic originates and the destination zone to which the traffic is to be sent, as well as a policy for determining which traffic can be sent across zones. The Source zone and Destinationzone lists include the zones configured on the router and its own zone. When configuring a zone pair, the own zone can be used for traffic that originates on the router itself or for traffic that is destined for the router, for example, to configure a zone pair for SNMP traffic. The Policy list includes the name of each policy map configured on the router. Step 4 Click OK in the AddaZone Pair window,and click OK in the CommandDelivery Status window.Step 5 To edit a zone pair, select the zone pair you want to edit in the Zone Pairs panel and click OK.When you edit a zone pair, you can also change the policy mapping, but the names of the source and destination zones cannot be changed.4.3.4.10 Editing the Firewall Policy ViewAfter creating the ZBF, select the Configure>Security>Firewall>Firewall menu in CCP and you can view it under the EditFirewall Policy tab, which will display a graphical view of the firewall. The firewall configuration can also be modified in this window.The CLIZPF command generated by a two-interface firewall using the default detection parameters is not long. Typically, the protocols to check in this scenario are HTTP, SMTP, and FTP. policy mapping provides state detection for protocols in the class mapping list. Two zones are established, such as private and Internet The internal interface is the private zone: domain member. The WAN interface is an Internet zone member. Finally, create a zone pair, such as a priv-to-intemeto zone pair with private as the source zone and Internet as the destination zone, and apply the policy mapping.4.3.4.11 Monitoring Firewall Behavior