QUESTION 131
The ASA can be configured to drop IPv6 headers with routing-type 0 using the MPF. Choose the correct configuration.

A.    policy-map type inspect ipv6 IPv6_PMAP
match header routing-type eq 0
drop log
B.    policy-map type inspect icmpv6 ICMPv6_PMAP
match header routing-type eq 0
drop log
C.    policy-map type inspect ipv6-header HEADER_PMAP
match header routing-type eq 0
drop log
D.    policy-map type inspect http HEADER_PMAP
match routing-header 0
drop log
E.    policy-map type inspect ipv6 IPv6_PMAP
match header type 0
drop log
F.    policy-map type inspect ipv6-header HEADER_PMAP
match header type 0
drop log

Continue reading →

QUESTION 111
Management Frame Protection is available in two deployment modes, Infrastructure and Client. Which three statements describe the differences between these modes? (Choose three.)

A.    Infrastructure mode appends a MIC to management frames.
B.    Client mode encrypts management frames.
C.    Infrastructure mode can detect and prevent common DoS attacks.
D.    Client mode can detect and prevent common DoS attacks.
E.    Infrastructure mode requires Cisco Compatible Extensions version 5 support on clients.

Continue reading →