多项选择题基于上下文的访问控制CBAC有那些局限性()

A.导致网络性能下降
B.接口间的流量控制策略复杂
C.策略不能绑定到主机组或子网,通过一个接口的所有流量经过同样的检查
D.处理过于依赖ACL


您可能感兴趣的试卷

你可能感兴趣的试题

1.多项选择题基于上下文的访问控制CBAC提供哪些功能()

A.流量过滤
B.流量检测
C.入侵检测
D.主动防御

2.单项选择题Wich command can you use to manually assign a static IPV6 address to a router interface?()

A.ipv6 address PREFIX_1::1/64
B.ipv6 autoconfig 2001:db8:2222:7272::72/64
C.ipv6 autoconfig
D.ipv6 address 2001:db8:2222:7272::72/64

3.多项选择题Which two privileged mode cisco ios commands can be used to determine a cisco router chassis serialnumber?()

A.show inventory
B.show flash:filesys
C.dir flash:include chassis
D.show diag
E.show controllers

5.单项选择题Why will a switch never learn a broadcast address?()

A.Broadcast frames are never sent to swiches.
B.Broadcast addresses use an incorrect format for the switching table.
C.A broadcast address will never be the source address of a frame.
D.Broadcasts only use network layer addressing.
E.A broadcast frame is never forwarded by a switch.

6.多项选择题防火墙有哪些类型()

A.边际防火墙
B.状态防火墙
C.软件防火墙
D.应用网关防火墙

8.多项选择题下列哪些是防火墙的局限性()

A.配置不当,防火墙会引起严重问题
B.很多应用不能安全通过防火墙
C.用户可能会积极寻找绕过防火期接收被阻信息的方法,使网络遭受潜在攻击的危险
D.未授权的流量可能经隧道或隐藏在合法的流量中通过防火墙

10.单项选择题VLAN 3 is not yet configured on your switch.What happens if you set the switchport access vlan 3 commmand interface configuration mode?()

A.The command is accepted and the respective VLAN is added to vlan dat.
B.The command is rejected.
C.The command is accepted and you must configure the VLAN manually.
D.The port turns amber.