单项选择题What is the main reason for using the "ip ips deny-action ips-interface" IOS command?()

A. To selectively apply drop actions to specific interfaces
B. To enable IOS to droptraffic for signatures configured with the Drop action
C. To support load-balancing configurations in which traffic can arrive via multipleinterfaces 
D. This is nota valid IOS command


您可能感兴趣的试卷

你可能感兴趣的试题

1.多项选择题Which of the following is true about the Cisco IOS-IPS functionality? ()

A. The signatures available are built into the IOS code.
B. Toupdate signatures youneed to install a new IOS image
C. To activate new signatures you download a new Signature DefiitionFile (SDF) from Cisco’s web site
D. Loading and enabling selected IPS signatures is user configurable
E. Cisco IOS onlyprovides Intrusion Detection functionality
F. Cisco IOS-IPS requires a network module installed in your router running sensor software

2.单项选择题What is true about a Pre-Block ACLconfigured when setting up your sensor toperform IP Blocking?()

A. The Pre-Block ACL is overwritten when a blockingaction is initiatied by the sensor
B. The blocking ACL entries generated by the sensor override the Pre-Block ACL entries
C. The Pre-Block ACL entries override the blocking ACL entries generated by the sensor
D. The Pre-Block ACL is replaced by the Post-Block ACL when a blocking actionis initiated bythe sensor
E. You can not configure a Pre-Block ACL when configuring IP Blockingon your sensor

3.多项选择题Which two IP multicast addresses belong to the group represented by the MAC address of 0x01-00-5E-15-6A-2C? ()

A. 224.21.106.44
B. 224.25.106.44
C. 233.149.106.44
D. 236.25.106.44
E. 239.153.106.44

4.单项选择题A network administrator is using a LAN analyzer to troubleshoot OSPF router exchange messages sent to ALLOSPF ROUTERS. To what MAC address are these messages sent?()

A. 00-00-1C-EF-00-00
B. 01-00-5E-00-00-05
C. 01-00-5E-EF-00-00
D. EF-FF-FF-00-00-05
E. EF-00-00-FF-FF-FF
F. FF-FF-FF-FF-FF-FF

5.单项选择题According to RFC 3180, what is the correct GLOP address for AS456?()

A. 224.0.4.86
B. 224.4.86.0
C. 233.1.200.0
D. 239.2.213.0
E. 239.4.5.6

6.多项选择题What are two important guidelines to follow when implementing VTP?()

A. CDPmust be enabled on all switches in theVTP management domain.
B. All switches in the VTPdomain must run the same version of VTP.
C. When using secure mode VTP, only configure management domain passwords onVTP servers.
D. EnablingVTP pruning on a server willenable the feature for the entire management domain.
E. Use of theVTPmulti-domain feature should be restricted to migration and temporary implementation.

7.多项选择题What are two key characteristics of VTP? ()

A.VTP messages are sent out all switch-switch connections.
B.VTP L2 messages are communicated to neighbors using CDP.
C.VTP manages addition, deletion, and renaming of VLANs 1 to 4094.
D.VTP pruning restricts flooded traffic, increasing available bandwidth.
E.VTP V2 can only be used in a domain consisting of V2 capable switches.
F.VTP V2 performs consistency checks on all sources of VLAN information.

8.单项选择题How doTCP SYN attacks take advantage ofTCPto prevent new connections from being established to a host under attack?()

A.These attacks send multiple FIN segments forcing TCP connection release.
B.These attacks fill up a hosts’ listen queue by failing to ACK partially openedTCPconnections.
C.These attacks take advantage of the hosts transmit backoff algorithm by sending jam signals to the host.
D.These attacks increment the ISN of each segment by a random number causing constant TCP retransmissions.
E.These attacks send TCP RST segments in response toconnection SYN+ACK segments forcing SYN retransmissions.




最新试题

Which should be the key driver for a company security policy’s creation, implementation and enforcement?()

题型:单项选择题

Which one of the following is NOT a supported IKE attribute?()

题型:单项选择题

Which access methods can CS-MARS use toget configuration information from an Adaptive SecurityAppliance (ASA)? ()

题型:多项选择题

Since HTTP is one of the most common protocols used in the internet, what should be done at a firewall level to ensure thatthe protocol is being used correctly? ()

题型:单项选择题

Which of the following is true about RADIUSV end or Specific Attribute? ()

题型:多项选择题

Of the threats discussed below, what is the main advantage of using Cisco Secure Desktop which is part of the Cisco ASA VPN solution?()

题型:单项选择题

What are the header sizes for point-to-point and multi-point GRE(also known asmGRE) with tunnel key?()

题型:单项选择题

CS-MARS works with which IOS feature to accomplish anomaly detection?()

题型:单项选择题

What Cisco technology protects against Spanning-Tree Protocol manipulation?()

题型:单项选择题

In an L2TP voluntary tunneling scenario, the VPDN tunnel is terminated between:()

题型:单项选择题