Refer to the exhibit. What type of security solution will be provided for the inside network？（）
A.The TCP connection that matches the defined ACL will be reset by the router if the connection does not complete the three-way handshake within the defined time period.
B.The router will reply to the TCP connection requests. If the three-way handshake completes successfully， the router will establish a TCP connection between itself and the server.
C.The TCP traffic that matches the ACL will be allowed to pass through the router and create a TCP connection with the server.
D.The router will intercept the traceroute messages. It will validate the connection requests before forwarding the packets to the inside network.
您可能感兴趣的试卷
你可能感兴趣的试题
Refer to the exhibit.
What are the two options that are used to provide High Availability IPsec？（）
A.RRI
B.IPsec Backup Peerings
C.Dynamic Crypto Ma
D.HSRP
E.IPsec Stateful Switchover （SSO）
F.Dual Router Mode （DRM） IPsec
A.Cisco Express Forwarding （CEF） must be enabled as a prerequisite to running MPLS on a Cisco router.
B.Frame-mode MPLS inserts a 32-bit label between the Layer 3 and Layer 4 headers.
C.MPLS is designed for use with frame-based Layer 2 encapsulation protocols such as Frame Relay， but is not supported by ATM because of ATM fixed-length cells.
D.OSPF， EIGRP， IS-IS， RIP， and BGP can be used in the control plane.
E.The control plane is responsible for forwarding packets.
F.The two major components of MPLS include the control plane and the data plane.
Refer to the exhibit， which shows a PPPoA diagram and partial SOHO77 configuration.
Which command needs to be applied to the SOHO77 to complete the configuration？（）
A.encapsulation aal5snap applied to the PVC
B.encapsulation aal5ciscoppp applied to the PVC
C.encapsulation aal5ciscoppp applied to the ATM0 interface
D.encapsulation aal5mux ppp dialer applied to the ATM0 interface
E.encapsulation aal5mux ppp dialer applied to the PVC
A.Inoculate systems by applying update patches.
B.Limit traffic rate.
C.Apply authentication.
D.Quarantine infected machines.
E.Enable anti-spoof measures.
A.Transparent tunneling must be enabled.
B.A valid root certificate must be installed.
C.A group pre-shared secret must be properly configured.
D.The option to "Allow Local LAN Access" must be selected.
A.mode configuration
B.the VPN client establishment of an ISAKMP SA
C.IPsec quick mode completion of the connection
D.VPN client initiation of the IKE phase 1 process
A.DDoS signatures
B.strong signatures
C.exploit signatures
D.numeric signatures
E.spoofing signatures
F.connection signatures
A.The IPS is in the traffic path.
B.Only one active interface is required.
C.Full benefit of an IPS will not be realized unless deployed in conjunction with an IDS.
D.When malicious traffic is detected，the IPS will only send an alert to a management station.
A.The IDS is in the traffic path.
B.The IDS can send TCP resets to the source device.
C.The IDS can send TCP resets to the destination device.
D.The IDS listens promiscuously to all traffic on the network.
E.Default operation is for the IDS to discard malicious traffic.
A.All traffic is permitted from the inbound to the outbound interface upon successful authentication of the user.
B.A specific access profile is retrieved from a TACACS+ or RADIUS server and applied to an IOS Firewall based on user provided credentials.
C.Prior to responding to a proxy ARP，the router will prompt the user for a login and password which are authenticated based on the configured AAA policy.
D.The proxy server capabilities of the IOS Firewall are enabled upon successful authentication of the user.
最新试题
Which three statements are true when configuring Cisco IOS Firewall features using the SDM？ （）
Which statement describes the Authentication Proxy feature？（）
Which three statements about IOS Firewall configurations are true？（）
When configuring the Cisco VPN Client，what action is required prior to installing Mutual Group Authentication？（）
Which statement is true when ICMP echo and echo-reply are disabled on edge devices？（）
Which statement is true about a worm attack？（）
Refer to the exhibit， which shows a PPPoA diagram and partial SOHO77 configuration.Which command needs to be applied to the SOHO77 to complete the configuration？（）
Which three categories of signatures can a Cisco IPS microengine identify？（）
Which three statements about the Cisco Easy VPN feature are true？（）
Which two statements are true about broadband cable （HFC） systems？（）