ExamQuestions.com

Register
Login
CCIE Security Written Exam (400-251) Exam Questions

Cisco

CCIE Security Written Exam (400-251)

471 / 530

Question 471:

Which statement about Cisco ASA operations using software versions 8.3 and later is true? 

Answer options:

A. The interface access list is matched first before the global access lists.
B. The interface and global access lists both can be applied in the input or output direction.
C. When creating an access list entry using the Cisco ASDM Add Access Rule window, choosing "global" as the interface applies the access list entry globally.
D. NAT control is enabled by default.
E. The static CLI command is used to configure static NAT translation rules.