单项选择题As an experienced technician, you are responsible for Technical Support. One of the trainees is asking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend?()

A. inline with a firewall
B. in a DMZ outside the firewall
C. parallel with a firewall
D. in a DMZ behind the firewall


您可能感兴趣的试卷

你可能感兴趣的试题

1.单项选择题You are the Cisco Network Designer. Which of these is least important when determining how many users a NAS can support?()

A. bandwidth
B. number of plug-ins per scan
C. total number of network devices
D. number of checks in each posture assessment

2.单项选择题

Please match the Cisco STP enahancement term to its definition.()
(1) BPDU guard
(2) PortFast
(3) BackboneFast
(4) Loop guard
(5) Root guard
(a) shuts down a port that receives a BPDU when enabled
(b) cuts convergence time by mas-age for indirect failure
(c) prevents the aliernate or root port from being designated in absence of BPDUs
(d )causes Layer 2 LAN interface access port to immediately enter the forwarding state
(e) helps prevent bridging loops due to jni-directional link failures on point-to-point links

A.(a)-(1);(b)-(2);(c)-(4);(d)-(5);(e)-(3)
B.(a)-(4);(b)-(3);(c)-(2);(d)-(5);(e)-(1)
C.(a)-(3);(b)-(2);(c)-(4);(d)-(5);(e)-(1)
D.(a)-(1);(b)-(3);(c)-(4);(d)-(2);(e)-(4)

3.单项选择题You are the Cisco Network Designer . Which is not major scaling, sizing, and performance consideration for an IPsec design?()

A. connection speed
B. number of remote sites
C. features to be supported
D. types of devices at the remote site


5.单项选择题

Please match the Cisco NAC appliance component to its description.()
(1)Cisco NAS
(2)Cisco NAA
(3)Rule-set Lpdates
(4)Cisco NAM
(a) a centralized management point
(b) an in-band cr out-of-band device for network access control
(c) a Windows-based client which allows network access based on the tasks running
(d) a status crecker for operating systems,antivirus,antispyware,etc.

A.(a)-(4);(b)-(1);(c)-(2);(d)-(3)
B.(a)-(3);(b)-(2);(c)-(4);(d)-(1)
C.(a)-(4);(b)-(3);(c)-(1);(d)-(2)
D.(a)-(2);(b)-(4);(c)-(3);(d)-(1)


6.多项选择题

Refer to the exhibit. Which two statements about the topologies shown are correct?()

A. Design 1 is a looped triangle design.
B. Design 2 is a looped triangle design.
C. Design 2 achieves quick convergence using RSTP.
D. Both designs supportstateful services at the aggregation layer.
E. Design 2 is the most widely deployed in enterprise data centers.


9.单项选择题Which of these statements is true of routing protocols in a hub-and-spoke IPsec VPN topology?()

A. EIGRP can summarize per interface.
B. OSPF router databases remain independent.
C. When they are configured with stubs, EIGRP regularly floods the topology.
D. OSPF topology decisions are made independent of hierarchy or area.

10.单项选择题Which of the following is the primary consideration to scale VPNs?()

A. packets per second
B. number of remote sites
C. throughput bandwidth
D. number of tunnels

最新试题

As an experienced technician, you are responsible for Technical Support. A customer calls to ask the best signal level and noise level for cell phone. How to respond?()

题型:单项选择题

The Cisco NAC Appliance is able to check which three items before allowing network access?()

题型:多项选择题

During consultation, you find that a customer has multiple asset closets and will be adding more in the future. Which NAS physical deployment model would you suggest to this customer?()

题型:单项选择题

In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?()

题型:单项选择题

What amount of cell overlap ensures smooth roaming for wireless endpoints?()

题型:单项选择题

Cisco Express Forwarding (CEF) is mainly used to increase packet switching speed, reducing the overhead and delays introduced by other routing techniques, increasing overall performance.Which of the following concerning CEF is recommended by Cisco?()

题型:单项选择题

Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?()

题型:单项选择题

What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?()

题型:单项选择题

Which signal and noise values will result in the best phone communication with an access point?()

题型:单项选择题

You are the Cisco Network Designer . Which is not major scaling, sizing, and performance consideration for an IPsec design?()

题型:单项选择题