210-260 Question #75: Real Exam Question with Answer & Explanation

The correct answer is A: when a matching TCP connection is found. See the following links: https://supportforums.cisco.com/discussion/11809846/asa-5505-using-nat-allowing-incoming- https://supportforums.cisco.com/discussion/12473551/asa-what-allowing-return-http-traffic Also, there is a modified version of this question where answers D and F ar

Question

In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three).

Options

Awhen a matching TCP connection is found
Bwhen the firewall requires strict HTTP inspection
Cwhen the firewall receives a FIN packet
Dwhen matching ACL entries are configured
Ewhen the firewall requires HTTP inspection
Fwhen matching NAT entries are configured

Explanation

See the following links: https://supportforums.cisco.com/discussion/11809846/asa-5505-using-nat-allowing-incoming- https://supportforums.cisco.com/discussion/12473551/asa-what-allowing-return-http-traffic Also, there is a modified version of this question where answers D and F are replaced with "When the firewall receives a SYN packet" and "When the firewall receives a SYN-ACK packet". The a SYN-ACK packet coming back from the web server establishes the TCP connection and allows requests to come through, so this is a correct answer.

Community Discussion

No community discussion yet for this question.

Full 210-260 Practice