About stateful inspection firewall and packet filtering firewall description is correct.

A. Packet filtering firewall is not required for each packet entering the firewall rule matching;

B. Because the UDP protocol is connectionless -oriented protocol,so stateful inspection firewall UDP packetscannotmatch state table;

C. When stateful inspection firewall to inspect packets,packets of the same before and after the connection is not relevant.

D. Stateful inspection firewall only needs to connect to the first packet to match the access rule,which is connected directly to the subsequent packets matching(to TCP applications,for example) in the state table

For stateful inspection firewall, if not the first TCP packet package will not be interzone packet filtering checks.

A. True

B. False

Following the agreement, the work at the network layer have? (Choose two)

A. ICMP

B. IGMP

C. FTP

D. TELNET

VPDN tunneling protocols include: (Choose three)

A. L2TP

B. GRE

C. PPTP

D. L2F

The following fragment cache function on the firewall, saying right there? (Choose two)

A. Configure fragmented packets directly after forwarding,firewall does not fragment packets cache

B. Configure fragmented packets directly after forwarding the packet is not the first piece fragmented packets,the firewall will be forwarded in accordance with inter -domain packet filtering policy.

C. Fragmented packets will create the session table will look when forwarding the session table

D. Fragmented packets of non-first fragment packets, because there is no port number, so fragmented packets forwarding function generallycannotbe used directly in a NAT environment

SVN3000 default virtual gateway supports only a few, in order to increase the number of virtual gateways need to purchase License.

A. True

B. False

When you configure NAT through the web, you need to configure the trust and untrust regional inbound direction, you need to select the security domain trust area in front, untrust area on the back.

A. True

B. False

SVN3000 business functions include? (Choose three)

A. Web Proxy

B. Network expansion

C. Port Sharing

D. File Sharing

SVN3000 web proxy server resources can only be accessed by clicking on the web SVN list.

A. True

B. False

Which of the following IKE exchange mode does not provide identity protection?

A. Master Mode

B. Aggressive Mode

C. Fast mode

D. Passive mode