A.It validates the fact that a packet is either a connection request or a data packet belonging to a connection
B.It evaluates network packets for valid data at the application layer before allowing connections
C.It analyzes network traffic at the network and transport protocol layers
D.It keeps track of the actual communication process through the use of a state table
您可能感兴趣的试卷
你可能感兴趣的试题
A.displays a screen with Fix-it check boxes to let you choose which potential security-related configuration changes to implement
B.has two modes of operationinteractive and non-interactive
C.automatically enables Cisco IOS firewall and Cisco IOS IPS to secure the router
D.uses interactive dialogs and prompts to implement role-based CLI
E.requires users to first identify which router interfaces connect to the inside network and which connectto the outside network
A.When the router goes into quiet mode， any host is permitted to access the router via Telnet，SSH， and HTTP，since the quiet-mode access list has not been configured.
B.The login block-for command is configured to block login hosts for 93 seconds.
C.All logins from any sources are blocked for another 193 seconds.
D.Three or more login requests have failed within the last 100 seconds.
A.multiple privilege levels
B.usernames and passwords
C.aaa new-model command
D.secret password for the root user
E.HTTP and/or HTTPS server
Please choose the correct description about Cisco Self-Defending Network characteristics.（）
A.INTEGRATED - P4S2，COLLABORATIVE - P4S1ADAPTIVE - P4S3
B.INTEGRATED - P4S1，COLLABORATIVE - P4S2ADAPTIVE - P4S3
C.INTEGRATED - P4S3，COLLABORATIVE - P4S2ADAPTIVE - P4S1
D.INTEGRATED - P4S2，COLLABORATIVE - P4S3ADAPTIVE - P4S1
A.Signature-based detection
B.Anomaly-based detection
C.Honey pot detection
D.Policy-based detection
A.aaa accounting connection start-stop tacacs+
B.aaa accounting exec start-stop tacacs+
C.aaa accounting system start-stop tacacs+
D.aaa accounting network start-stop tacacs+
Which statement is correct regarding the aaa configurations based on the exhibit provided？（）
A.The authentication method list used by the vty port is named test.
B.If the TACACS+ AAA server is not available， no users will be able to establish a Telnet session with the router.
C.If the TACACS+ AAA server is not available， console access to the router can be authenticated using the local database.
D.The authentication method list used by the console port is named test.
A.Create a parser view called "root view."
B.Log in to the router as the root user.
C.Enable the root view on the router.
D.Enable role-based CLI globally on the router using the privileged EXEC mode Cisco IOS command.
A.SPAP
B.CHAP
C.DHCHAP
D.ESP
A.Only symmetric algorithms have a key exchange technology built in
B.Asymmetric algorithms are used quite often as key exchange protocols for symmetricalgorithms
C.Only asymmetric algorithms have a key exchange technology built in
D.Asymmetric algorithms are based on more complex mathematical computations
最新试题
Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown，whichaccess control list would prevent IP address spoofing of these internal networks？（）
Which option ensures that data is not modified in transit？（）
When configuring role-based CLI on a Cisco router，which action will be taken first ？（）
Which two actions can be configured to allow traffic to traverse an interface when zone-based security isbeing employed？（）
During role-based CLI configuration， what must be enabled before any user views can be created？（）
Which name is of the e-mail traffic monitoring service that underlies that architecture of IronPort？（）
Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image， theconfiguration files，or both have been properly backed up and secured？（）
Which statement is correct regarding the aaa configurations based on the exhibit provided？（）
When configuring SSH， which is the Cisco minimum recommended modulus value？（）
Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances？（）