A. A DH key exchange is an algorithm that utilizes asymmetric cryptographic keys.
B. The DH key exchange is used to establish a shared secret over an insecure medium during an IPSec phase 1 exchange.
C. The DH exchange is susceptible to man-in-the-middle attacks.
D. The DH exchange is used to authenticate the peer device duringan IPSec phase 1 exchange.
E.A DH exchange provides Perfect Forward Secrecy （PFS）.
您可能感兴趣的试卷
你可能感兴趣的试题
A. 3DES is muchmore secure than DES.
B. Both DES and 3DES are stream ciphers.
C. DES uses 64 bitkeys， although the effective key lengthis only 56bits.
D. The decryption operation for both DES and 3DES is the same as the encryption operation.
E. DES can only be used for encryption， whereas 3DES can also be used for authentication.
A. The RADIUSVendor Specific Attribute type is decimal 26.
B. A radius server that does not understandthevendor-specific information sent by a clientmust reject the authentication request.
C. A vendor can freely choose theVendor-ID it wants to use when implementing Vendor Specific Attributes as long as the same Vendor-ID is used on all of its products.
D. Vendor Specific AttributeMUST include the Length field.
E. In Cisco’s Vendor Specific Attribute implementation， vendor-ID of 1 is commonly referred to as Cisco AV（Attribute Value） pairs.
F. Vendor Specific Attributes use a RADIUS attribute type between 127 and 255.
A. Access-reject
B. Access-response
C. Access-challenge
D. Access-reply
E. Access-accept
A.Prevents DoS from legimate， non-hostile end systems
B.Prevents disruption of "special services"， such as Mobile IP
C.Defeats DoS Attacks which employ IPSource Address Spoofing
D.Restricts directed broadcasts at the ingress router
E.Allows DHCP or BOOTP packets to reach the relay agents asappropriate
A. Multicastis supported
B. Dynamic routing protocols are supported
C. VPN configurations are supported
D. Static routes are supported
A.Any matching state condition will result with the state being triggered
B. Once a state condition ismet， the system ceases searching further conditions and will cause the state condition to trigger
C. All specified state conditions are used as part of the requirements tobe met to for the state to trigger
D. Once the state conditions are met， they become persistent and can only be removed using the Reset feature
A. SignatureFidelity Rating
B. Alert Severity Rating
C. Exploit Probability Rating
D. Target Value Rating
E. Attack Relevancy Rating
A. 3 promiscuous sensors
B. 3 inline sensors
C. 1 inline sensor， 1 promiscuous sensor
D. 2 inline sensors， 1 promiscuous sensors
A. nat （inside） 0 209.165.202.150 255.255.255.255
B. access-list no-nat permit ip host209.165.202.150 anynat（inside） 0 access-list no-nat
C. static（inside，outside） 209.165.202.150 209.165.202.150 netmask 255.255.255.255
D. no nat-control
E. nat （inside） 1 209.165.202.150 255.255.255.255
A. nat
B. nonat-control
C. access-list
D. none of the above
最新试题
In an L2TP voluntary tunneling scenario， the VPDN tunnel is terminated between：（）
With PGP， which of the following entity signs a users’s public key？（）
Which of the following statements that describe Diffie Hellman Key exchange are correct？ （）
Which statements are true concerning NAT？ （）
Of the threats discussed below， what is the main advantage of using Cisco Secure Desktop which is part of the Cisco ASA VPN solution？（）
TACACS+ authentication uses whichthree packet types？ （）
What Cisco technology protects against Spanning-Tree Protocol manipulation？（）
When implementing internet standards you are required to follow RFC’s processes and procedures based onwhat RFC？（）
Choose the most correct statements about SMTP/ESMTP. （）
Which SSL protocol takes anapplication message tobe transmitted， fragments the datainto manageable blocks， optionally compresses the data， applies a MAC， encrypts， adds a header， and transmits the resulting unit ina TCPsegment？（）