单项选择题What is true about SYN cookies?()

A. All TCPoptions are supported, such as largewindows.
B. The server can have more than8 unique MSS values.
C. SYN cookies are not implemented as a method of defending against SYN floods.
D. SYN cookies are implemented as a method of defending against SYN floods.


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题Of the threats discussed below, what is the main advantage of using Cisco Secure Desktop which is part of the Cisco ASA VPN solution?()

A. Secure desktop will create a completely separate computing environment thatwill be deleted when you are done.This ensures that no confidential data has been left on the shared/public computer.
B. Secure desktop is used to protect access to your registry and systemfiles when browsing to SSL/VPN protectedpages.
C. Secure Desktop ensures that an SSLprotected password cannotbe exploitedby a man in the middle attackusing a spoofed certificate.
D. Secure desktop hardens the operating system of the machines you are using at the time secure desktop islaunched.

2.多项选择题Which statements are true concerning NAT? ()

A. NAT provides 1 to manyaddress mapping.
B. NAT provides 1 to 1 address mapping.
C. NAT is only useful forTCP/UDP and ICMP traffic.
D. NAT can be used for all IP traffic.

3.多项选择题What technologies are included inAnti-X? ()

A. Content and URL filtering
B. Intrusion Prevention
C. VPN
D. Virus and Phishing protection
E. Content Caching

4.单项选择题CSA protects your host by: ()

A. Preventing browsers from opening network sockets inlistening state.
B. Preventingbuffer overflows.
C. Preventingusers from entering unencrypted passwords
D. Preventing browsers from acting as client to webservers.

5.多项选择题Choose the most correct statements about SMTP/ESMTP. ()

A. Open mail relays are often used for spamming.
B. ESMTP does NOT provide more security features than SMTP
C. SMTPdoes provide authenticated email sending."
D. Worms often spread via SMTP.

6.单项选择题Cisco Clean Access ensures that computers connecting to your network have which of the following?()

A. No vulnerable applications or operating systems
B. No viruses or worms
C. Appropriate security applications and patch levels
D. Current IPS signatures
E. Cisco Security Agent

7.单项选择题Which of these is the best way to provide sender non-repudiation?()

A. pre-sharedkey
B. secure hash
C. SSL
D. RSA signature

8.单项选择题What group in Cisco IOS does 1536-bit Diffie-Hellman prime modulus equivalent too?()

A. group 3
B. group 1
C. group 5
D. group 7

9.单项选择题What are the header sizes for point-to-point and multi-point GRE(also known asmGRE) with tunnel key?()

A. 4 bytes for both
B. 4 bytes, and 8 bytes respectively
C. 8 bytes for both
D. 24 bytes for both

10.单项选择题Which ones are the two type of ciphers?()

A. Blocking cipher andnon-blocking cipher
B. CBC cipher and EBC cipher
C. Block cipher and Stream cipher
D. Blocker cipher and Streamer cipher
E. 3DES cipher and AES cipher