MCSE ISA Server 2000- P13: These books include a large amount and different kinds of information. The many different elements are designed to help you identify information by its purpose and importance to the exam and also to provide you with varied ways to learn the material. | Chapter 10 FIREWALL CONFIGURATION 333 Apply Your Knowledge 2. Information Systems Auditing has asked that a report be made for the next month that includes information on all packets that touch the firewall. What step s do you need to take A. Nothing ISA Server is already recording information on every packet that touches it. B. Configure the IP packet filter property Log packet from allow. The ISA Server normally doesn t log these packets but using this option makes it do so. C. Make the Registry key entry listed in the help under logging packets. D. Be sure disk capacity supports the increased log size necessary to record these events. 3. You want to configure FTP download only access for some SecureNAT clients. Select the best two. A. Create packet filters that allow outbound access to ports 21 and 20. B. Only allow access to known sites which restrict access to download. C. Enable the FTP application filter. D. Create a protocol rule that allows the FTP client read only protocol for SecureNAT clients by client address set . 4. Carrie has configured the firewall client on her system in preparation for doing some testing of the ISA Server. She does not set her browser to retrieve requests from the ISA Server. She has an account in the domain to which the ISA Server computer belongs. She writes rules that deny access to certain sites. However when she attempts to visit these sites she finds she can. What is happening Select the best two. A. She must be logged on using the wrong user account. B. The ISA Server does allow unauthenticated access. C. Because the HTTP filter is redirecting the firewall client but not passing authentication information the net effect is that there is no way to check which user is making the request. D. This is a known bug in HTTP access using the firewall client. 5. John has run the Security Configuration Wizard and now many clients that could access resources through the ISA Server cannot. What should he do A. Reinstall the wizard is .
