Referring to the partial IOS configuration shown in the exhibit, which statements are true? (Choose three.)
A.
Ethernet0 needs an outbound access-list to make the configuration work
B.
ACL 101 needs to have at least one permit statement in it or it will not work properly
C.
Ethernet0 needs an inbound access-list to make the configuration work
D.
CBAC will create dynamic entries in ACL 101 to permit the return traffic
E.
Ethernet0 is the trusted interface and Ethernet1 is the untrusted interface
F.
All outbound ICMP traffic will be inspected by the IOS Firewall
Only answer B makes sense. There is nothing in the configuration that states CBAC is configured, either Interface is trusted or untrusted, although no inbound Eth1 traffic is allowed, nor is there any inspection statements suggesting ICMP will be inspected at all.
Well actually the command picture is not complete.
Go here:-
http://www.aiotestking.com/cisco/which-two-statements-are-true-25/
You will get the complete commands pic and hence your answer.