complex threat detection

scanning threat detection

basic threat detection

advanced threat detection

It will permit or deny traffic based on the access-list criteria.

It will permit or deny all traffic on a specified interface.

An access group must be configured before the access list will take effect for traffic control.

It will allow all traffic.

NAT control has been deprecated on Cisco ASA Software Version 8.3.

It will prevent traffic from traversing from one enclave to the next without proper access configuration.

It will allow traffic to traverse from one enclave to the next without proper access configuration.

It will deny all traffic.

limiting access to infrastructure with access control lists

enabling service password recovery

using SSH whenever possible

encrypting the service password

using Telnet whenever possible

enabling DHCP snooping

switch(config-if)# spanning-tree bpdufilter enable

switch(config)# ip dhcp snooping

switch(config)# errdisable recovery interval 900

switch(config-if)# spanning-tree guard root

switch(config-if)# spanning-tree bpduguard disable

switch(config-if)# no cdp enable