Refer to the exhibit.
Which two statements about the effects of the given Cisco IOS configuration are true?
(Choose two.)
A.
The maximum number of half-open sessions is 400.
B.
The maximum number of half-open sessions is 600
C.
The idle timeout for UDP connections is 20 minutes.
D.
The half-open session timeout is 20 minutes
E.
The software will delete half-open sessions if more than 600 new sessions are
established per minute.
Explanation:
ip inspect max-incomplete high: To define the number of existing half-open sessions
that will cause the software to start deleting half-open sessions, use the ip inspect maxincomplete highcommand in global configuration mode. To reset the threshold to the
default of 500 half-open sessions, use the no form of this command.
ip inspect one-minute high: To define the rate of new unestablished sessions that will
cause the software to start deleting half-open sessions, use the ip inspect one-minutehighcommand in global configuration mode. To reset the threshold to the default of 500
half-open sessions, use the no form of this command.
ip inspect tcp idle-time: To specify the TCP idle timeout (the length of time a TCP session
will still be managed while there is no activity), use the ip inspect tcp idle-timecommand
in global configuration mode. To reset the timeout to the default of 3600 seconds (1
hour), use the no form of this command.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-cri2.html#wp9025888050