单项选择题

SinceHTTPisoneofthemostcommonprotocolsusedintheinternet，whatshouldbedoneatafirewallleveltoensurethattheprotocolisbeingused correctly？（）

A.EnsurethatastatefulfirewallallowsonlyHTTP
B.
C.EnsurethatafirewallhasSYNfloodandDDoSprotectionappliedspecificallyforvalidwebservers.
D.EnsurethatyourfirewallenforcesHTTPprotocolcompliancetoensurethatonlyvalidflowsareallowedinandoutofyournetwork.
E.EnsurethatHTTPisalwaysauthenticated.
F.EnsurethatyourwebserverisinadifferentzonethanyourbackendserverssuchasSQLandDNS.

你可能感兴趣的试题

问答题

共用题干题Whenthesystemuponwhichatransportentityisrunningfailsandsubsequentlyrestarts,the(21)informationofallactiveconnectionsislost.Theaffectedconnectionsbecomehalf-open,asthesidethatdidnotfaildoesnotyetrealizetheproblem.Thestillactivesideofahalf-openconnectionscanclosetheconnectionusinga(22)timer.Thistimermeasuresthetimethetransportmachinewillcontinuetoawaitan(23)ofatransmittedsegmentafterthesegmenthasbeenretransmittedthemaximumnumberoftimes.Whenthetimer(24),thetransportentityassumesthateithertheothertransportentityortheinterveningnetworkhasfailed.Asaresult,thetimerclosestheconnection,andsignalsanabnormalclosetotheTSuser.Intheeventthatatransportentityfailsandquicklyrestarts,half-openconnectionscanbeterminatedmorequicklybytheuseoftheRSTsegment,thefailedsidereturnsanRSTitoeverysegmentithatitreceives.WhentheRSTireachestheotherside,itmustbecheckedforvaliditybasedonthe(25)numberi,astheRSTcouldbeinresponsetoanoldsegment.Iftheresetisvalid,thetransportentityperformsanabnormaltermination.
空白处（21）应选择（）
A.data
B.state
C.signal
D.control

A.Theaffectedconnectionsbecomehalf-open,asthesidethatdidnotfaildoesnotyetrealizetheproblem.Thestillactivesideofahalf-openconnectionscanclosetheconnectionusinga(22)timer.Thistimermeasuresthetimethetransportmachinewillcontinuetoawaitan(23)ofatransmittedsegmentafterthesegmenthasbeenretransmittedthemaximumnumberoftimes.Whenthetimer(24),thetransportentityassumesthateithertheothertransportentityortheinterveningnetworkhasfailed.Asaresult,thetimerclosestheconnection,andsignalsanabnormalclosetotheTSuser.Intheeventthatatransportentityfailsandquicklyrestarts,half-openconnectionscanbeterminatedmorequicklybytheuseoftheRSTsegment,thefailedsidereturnsanRSTitoeverysegmentithatitreceives.WhentheRSTireachestheotherside,itmustbecheckedforvaliditybasedonthe(25)numberi,astheRSTcouldbeinresponsetoanoldsegment.Iftheresetisvalid,thetransportentityperformsanabnormaltermination.
空白处（21）应选择（）
A.data
B.state
C.signal
D.control

单项选择题

WhatCiscotechnologyprotectsagainstSpanning－TreeProtocolmanipulation？（）

A.Spanningtreeprotect
B.RootGuardandBPDUGuard
C.UnicastReversePathForwarding
D.MACspoofguard
E.PortSecurity