单项选择题For the following items, which one acts as a VPN termination device and is located at a primary networklocation?()

A.Broadband service
B.Headend VPN device
C.VPN access device
D.Tunnel


您可能感兴趣的试卷

你可能感兴趣的试题

2.单项选择题How do you define the authentication method that will be used with AAA?()

A.With the method aaa command
B.With the method command
C.With a method list
D.With a method statement

4.单项选择题

On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy?()




A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy(applied to traffic sourced from the less secured zone destined to the moresecured zone)
C.This is an outbound policy(applied to traffic sourced from the more secured zone destined to the lesssecured zone)
D.All packets will be dropped since the class-default traffic class is matching all traffic

5.多项选择题When using the Cisco SDM Quick Setup Siteto-Site VPN wizard, which three parameters do you configure?()

A.Source interface where encrypted traffic originates
B.IP address for the remote peer
C.Transform set for the IPsec tunnel
D.Interface for the VPN connection

6.单项选择题Which statement is true about a Smurf attack?()

A.It sends ping requests in segments of an invalid size
B.It intercepts the third step in a TCP three-way handshake to hijack a session
C.It sends ping requests to a subnet, requesting that devices on that subnet send ping replies to a targetsystem
D.It uses Trojan horse applications to create a distributed collection of "zombie" computers, which can beused to launch a coordinated DDoS attack

7.单项选择题What will be disabled as a result of the no service password-recovery command?()

A.password encryption service
B.changes to the config-register setting
C.the xmodem privilege EXEC mode command to recover the Cisco IOS image
D.ROMMON

8.单项选择题A standard access control list has been configured on a router and applied to interface Serial 0 in anoutbound direction. No ACL is applied to Interface Serial 1 on the same router. What will happen whentraffic being filtered by the access list does not match the configured ACL statements for Serial 0?()

A.The traffic is dropped
B.The resulting action is determined by the destination IP address
C.The source IP address is checked,and,if a match is not found, traffic is routed out interface Serial 1
D.The resulting action is determined by the destination IP address and port number

9.单项选择题Regarding constructing a good encryption algorithm, what does creating an avalanche effect indicate?()

A.Altering the key length causes the ciphertext to be completely different
B.Changing only a few bits of a ciphertext message causes the plain text to be completely different
C.Altering the key length causes the plain text to be completely different
D.Changing only a few bits of a plain-text message causes the ciphertext to be completely different

10.单项选择题Which item is correct regarding Cisco IOS IPS on Cisco IOS Release 12.4(11)T and later ?()

A.requires the Basic or Advanced Signature Definition File
B.uses the built-in signatures that come with the Cisco IOS image as backup
C.supports SDEE,SYSLOG,and SNMP for sending Cisco IPS alerts
D.uses Cisco IPS 5.x signature format

最新试题

Which key method is used to detect and prevent attacks by use of IDS and/or IPS technologies?()

题型:单项选择题

Which option ensures that data is not modified in transit?()

题型:单项选择题

Regarding constructing a good encryption algorithm, what does creating an avalanche effect indicate?()

题型:单项选择题

If you click the Configure button along the top of Cisco SDM is graphical interface,which Tasks buttonpermits you to configure such features as SSH, NTP, SNMP, and syslog?()

题型:单项选择题

Which name is of the e-mail traffic monitoring service that underlies that architecture of IronPort?()

题型:单项选择题

Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image, theconfiguration files,or both have been properly backed up and secured?()

题型:单项选择题

How do you define the authentication method that will be used with AAA?()

题型:单项选择题

Refer to the exhibit. Which statement is correct based on the show login command output shown?()

题型:单项选择题

On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy?()

题型:单项选择题

Which method is of gaining access to a system that bypasses normal security measures?()

题型:单项选择题