单项选择题Refer to Cisco IOS Zone-Based Policy Firewall, where will the inspection policy be applied?()

A.to the zone-pair
B.to the zone
C.to the interface
D.to the global service policy


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Which location will be recommended for extended or extended named ACLs?()

A.when using the established keyword,a location close to the destination point to ensure that return trafficis allowed
B.an intermediate location to filter as much traffic as possible ActualTests.com
C.a location as close to the source traffic as possible
D.a location as close to the destination traffic as possible

3.单项选择题What Cisco Security Agent Interceptor is in charge of intercepting all read/write requests to the rc files in UNIX?()

A.Configuration interceptor
B.Network interceptor
C.File system interceptor
D.Execution space interceptor

4.多项选择题Which three items are Cisco best-practice recommendations for securing a network?()

A.Routinely apply patches to operating systems and applications
B.Disable unneeded services and ports on hosts
C.Deploy HIPS software on all end-user workstations
D.Require strong passwords and enable password expiration

5.单项选择题Examine the following items, which one offers a variety of security solutions, including firewall, IPS, VPN,antispyware, antivirus, and antiphishing features?()

A.Cisco IOS router
B.Cisco PIX 500 series security appliance
C.Cisco 4200 series IPS appliance
D.Cisco ASA 5500 series security appliance

6.单项选择题Before a Diffie-Hellman exchange may begin, the two parties involved must agree on what?()

A.Two secret keys
B.Two nonsecret keys
C.Two secret numbers
D.Two nonsecret numbers

7.单项选择题

Based on the username global configuration mode command displayed in the exhibit. What does the optionsecret 5 indicate about the enable secret password?()

A.It is hashed using MD5
B.It is encrypted using a proprietary Cisco encryption algorithm
C.It is hashed using SHA
D.It is encrypted using DH group 5

9.单项选择题The enable secret password appears as an MD5 hash in a router’s configuration file, whereas the enablepassword is not hashed (or encrypted, if the password-encryption service is not enabled). What is thereason that Cisco still support the use of both enable secret and enable passwords in a router’sconfiguration?()

A.The enable password is present for backward compatibility.
B.Because the enable secret password is a hash, it cannot be decrypted. Therefore, the enable password is used to match the password that was entered, and the enable secret is used to verify that the enablepassword has not been modified since the hash was generated.
C.The enable password is considered to be a router’s public key, whereas the enable secret password is considered to be a router’s private key.
D.The enable password is used for IKE Phase I, whereas the enable secret password is used for IKE Phase II.

10.单项选择题

Which statement best describes the relationships between AAA function and TACACS+, RADIUS based onthe exhibit shown?()

A.TACACS+ - P4S1 and P4S4RADIUS - P4S2 and P4S3
B.TACACS+ - P4S2 and P4S4RADIUS - P4S1 and P4S3
C.TACACS+ - P4S1 and P4S3Actual RADIUS - P4S2 and P4S4
D.TACACS+ - P4S2 and P4S3RADIUS - P4S1 and P4S4

最新试题

Which VoIP components can permit or deny a call attempt on the basis of a network’s available bandwidth?()

题型:单项选择题

Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances?()

题型:单项选择题

Which type of MAC address is dynamically learned by a switch port and then added to the switch’s runningconfiguration?()

题型:单项选择题

Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image, theconfiguration files,or both have been properly backed up and secured?()

题型:单项选择题

When using the Cisco SDM Quick Setup Siteto-Site VPN wizard, which three parameters do you configure?()

题型:多项选择题

Refer to the exhibit. Which statement is correct based on the show login command output shown?()

题型:单项选择题

Which option ensures that data is not modified in transit?()

题型:单项选择题

Regarding constructing a good encryption algorithm, what does creating an avalanche effect indicate?()

题型:单项选择题

Please choose the correct description about Cisco Self-Defending Network characteristics.()

题型:单项选择题

Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown,whichaccess control list would prevent IP address spoofing of these internal networks?()

题型:单项选择题