相关试题
【单选题】
下列不属于自动检测漏洞的工具的是___
A. Nessus
B. X-Scan
C. RetinaSasser
D. 以上都是
【单选题】
下列属于制定安全管理的原则的是___
A. 可行性原则
B. 适用性原则
C. 简单性原则
D. 以上都是
【单选题】
物理环境的安全性包括___
A. 设备的运行环境
B. 不间断电源保障
C. 设备的备份
D. 以上都是
【单选题】
下列选项中，口令破解的最好方法是___
A. 组合破解
B. 暴力破解
C. 字典攻击
D. 生日攻击
【单选题】
常见的Windows NT系统口令破解软件，如Lopht Crack支持以下哪种破解方式___
A. 字典破解
B. 暴力破解
C. 混合破解
D. 以上都支持
【单选题】
下面哪一种攻击方式最常用于破解口令？___
A. 哄骗（spoofing）
B. 拒绝服务（DoS）
C. 字典攻击
D. WinNuk
【单选题】
下列三种口令攻击类型比较的说法。正确的是___
A. 组合攻击的攻击速度快
B. 强行攻击的攻击速度慢
C. 词典攻击的攻击速度慢
D. 强行攻击和组合攻击的攻击速度一样
【单选题】
强口令必须具备以下哪些特征___
A. 至少包含10个字符
B. 每45天换一次
C. 口令至少要用10天
D. 以上都对
【单选题】
Windows NT和Windows 2000系统能设置为在几次无效登录后锁定账号，这可以防止___
A. 暴力攻击
B. 木马
C. 缓存溢出攻击
D. IP欺骗
【单选题】
目前大多数的Unix系统中存放用户加密口令信息的配置文件是___，而且该文件只有root用户可读
A. /etc/shadow
B. /etc/password
C. /etc/passwd
D. /etc/group
【单选题】
John the Ripper软件提供什么类型的口令破解功能？___
A. Windows系统口令破解
B. 邮件账户口令破解
C. Unix系统口令破解
D. 数据库账户口令破解
【单选题】
下列关于John the Ripper软件的说法，错误的是___
A. John the Ripper在解密过程中不会自动定时存盘
B. John the Ripper运行速度快
C. John the Ripper可进行字典攻击和强行攻击
D. John the Ripper可以在Unix、Linux、DoS等多种系统平台上使用
【单选题】
假冒网络管理员，骗取用户信任，然后获取密码口令信息的攻击方式被称为___
A. 社会工程攻击
B. 密码猜解攻击
C. 缓冲区溢出攻击
D. 网络监听攻击
【单选题】
口令的作用是什么？___
A. 只有数字组成
B. 向系统提供多个标识个体的机制
C. 向系统提供唯一标识个体的机制
D. 无作用
【单选题】
口令破解的方法有哪些？___
A. 穷举法
B. 利用口令文件
C. 嗅探和木马等手段
D. 以上都是
【单选题】
自动破解的一般过程是什么？①找到可用的userID ②获取加密口令③创建可能的口令名单④对所有的userID观察是否匹配⑤对每个单词加密⑥找到可用的加密算法⑦重复以上过程___
A. ①⑥②③④⑤⑦
B. ①⑥③②⑤④⑦
C. ①⑥②③⑤④⑦
D. ①②⑥③⑤④⑦
【单选题】
关于词典攻击，下列说法正确的是___
A. 使用一个或多个词典文件，利用里面的单词列表进行口令猜测的过程
B. 多数用户都会根据自己的喜好或自己熟知的事务来设置口令
C. 口令在词典文件中的可能性很大
D. 以上都是
【单选题】
词典攻击，强行攻击，组合攻击相比，正确的说法是。___
A. 词典攻击比强行攻击要慢
B. 强行攻击可以找到所有口令
C. 组合攻击可以找到所有口令
D. 组合攻击的速度最快
【单选题】
下列选项中，哪项不属于口令破解方式中的其他攻击方式___
A. 管理工程
B. 社会工程学
C. 偷窥
D. 口令蠕虫
【单选题】
口令破解器通常由哪三个模块组成，以下不属于的是___
A. 口令破解模块
B. 候选口令产生器
C. 口令比较模块
D. 口令加密模块
【单选题】
Linux口令破解工具有多少字符作为口令的字符？___
【单选题】
口令破解的防御有哪些___
A. 强口令
B. 防止未授权泄露、修改和删除
C. 一次性口令技术
D. 以上都是
【单选题】
口令破解防御中，强口令的特征有是___
A. 每45天换一次
B. 至少包含7个字符
C. 只要有字母数字
D. 字母数字有规则的排列
【单选题】
以下哪个不是网络嗅探的优势，___
A. 能力范围大
B. 原理简单
C. 易于实现
D. 难以被察觉
【单选题】
以下哪个不是交换机的基本元素？___
A. 端口
B. 缓冲区
C. 集线器
D. 信息帧的转发机构
【单选题】
以下哪种是网卡的工作模式___
A. 广播模式
B. 组播模式
C. 直接模式
D. 以上都是
【单选题】
根据传输层和网络层中的特性过滤，如选择TCP数据而非UDP数据或选择某一特定IP层协议数据，这个是什么过滤___
A. 协议过滤
B. 站过滤
C. 服务过滤
D. 通过过滤
【单选题】
许多操作系统都提供了“中间人机制”，及分组捕获过滤机制。在UNIX类型的操作系统中，哪个过滤机制不属于它。___
A. BSD系统中的BPF
B. NPF过滤机制
C. SVR4中的DLPI
D. Linux中的SOCK_PACKET类型套接字
【单选题】
在共享式网络下，可以通过检测网络通信丢包率和网络带宽异常来检测网络中可能存在的嗅探，如果网络结构正常，而又有___数据包丢失以致数据包无法顺畅地到达目的地就有可能存在嗅探
A. 20%~30%
B. 10%~20%
C. 15%~25%
D. 25%~35%
【单选题】
系统管理人员常常通过在本地网络中加入交换设备，来预防嗅探的侵入。传统的交换被称为___交换
A. 第一层
B. 第二层
C. 第三层
D. 第四层
【单选题】
交换网络下防范监听的措施有什么___
A. 不要把网络安全信任关系建立在单一的IP或MAC基础上，理想的关系应该建立在IP-MAC对应关系的基础上
B. 使用静态的ARP或者IP-MAC对应表代替动态的ARP或者IP-MAC对应表，禁止自动更新，使用手动更新
C. 定期检查ARP请求，使用ARP监视工具，例如ARPWatch等监视并探测ARP欺骗
D. 以上都是
【单选题】
负责以太网上IP地址与MAC地址之间的转换的是，___
A. ARP协议
B. ARP欺骗
C. ARP过载
D. ARP监视
【单选题】
目前的网络嗅探防范技术不包括哪个。___
A. 采用安全的网络拓扑结构
B. 破坏日志
C. 会话加密技术
D. 防止ARP欺骗
【单选题】
下面不可以对数据包进行过滤的是？___
A. 站过滤
B. 服务过滤
C. 传输过滤
D. 通用过滤
【单选题】
对于libpcap函数库的分组，___是不正确的
A. 在线实时监听部分
B. 优化，调试过滤规则表达部分
C. 本地网络设置检测部分
D. 打开，读取设备，设置过滤器部分
【单选题】
以下哪一项不属于网卡的工作模式？___
A. 广播模式
B. 组播模式
C. 间接模式
D. 混杂模式
【单选题】
交换机的基本元素是___
A. 端口
B. 背板体系结构
C. 缓冲区
D. 以上都对
【单选题】
判断IP地址是否合理应在哪一层？___
A. 用户层
B. 链路层
C. 网络层
D. 物理层
【单选题】
UNIX系统的典型代表BSD下的监听程序结构为___
A. 网卡驱动程序
B. BPF捕获机制
C. libpcap
D. 以上都对
【单选题】
以下哪一项不属于数据通道加密方式?___
A. SSH
B. SSL
C. SLS
D. VPN
推荐试题
【多选题】
Which three connection types are available when configuring a vSwitch in the vSphere Web Client? (Choose three.)___
A. VMkernel Network Adapter
B. Physical Network Adapter
C. Virtual Machine Port Group for a Standard Switch
D. vMotion Network Adapter
E. vSAN Network Adapter
【多选题】
Which three features can be enabled for a new host cluster? (Choose three.)___
A. Storage Distributed Resource Scheduling
B. High Availability
C. Fault Tolerance
D. Distributed Resource Scheduling
E. Virtual SAN
【多选题】
An administrator receives a report that no real time statistics are available for a virtual machine in the vCenter Server inventory. Which two statements indicate likely causes of the problem? (Choose two.)___
A. The virtual machine is powered off.
B. The host containing the virtual machine is disconnected from vCenter Server.
C. There is insufficient real time data to display the information.
D. The vCenter Server service is not running.
【多选题】
Your manager has given you a bash script that retrieves data for ESXi 6.x host configurations. This data needs to be collected right after the installation of a host and must be run directly on the host. Which two actions can be used to run this script on an ESXi host? (Choose two.)___
A. Connect to the host with Ruby vSphere Console and run the script from there.
B. Enable SSH access from the Direct Console User Interface.
C. Enable the ESXi Shell from the
D. irect Console User Interface.
【多选题】
Which two are true about the Risk badge in vRealize Operations? (Choose two.)___
A. The Risk badge indicates potential future problems that may degrade the performance of the system.
B. Risks may require attention in the near future.
C. The Risk badge indicates problems that are degrading performance of the system.
D. Risks require attention now to correct system performance problems.
【多选题】
vSphere Update Manager allows which two virtual machine attributes to be upgraded? (Choose two.)___
A. Virtual machine firewall policies for NSX.
B. Software Packages in the virtual machine.
C. Virtual machine Hardware Version.
D. VMware Tools Upgrade.
【多选题】
What are two benefits of using NFS 4.1 with vSphere 6.x as compared to NFS 3? (Choose two.)___
A. NFS 4.1 supports Kerberos Authentication
B. NFS 4.1 supports multipathing
C. NFS 4.1 supports IPv6
D. NFS 4.1 supports hardware acceleration
【多选题】
Which three statements are true regarding Fault Tolerance? (Choose three.)___
A. Applications need to be continuously available to users.
B. Applications without native clustering capabilities can be protected.
C. Custom clustering solutions are complicated to configure and maintain.
D. Applications that have 16 vCPUs are supported.
E. Prevents application crashes by analyzing the workload and correcting problems.
【多选题】
Which two statements are true regarding VMware vSphere Flash Read Cache (vFRC)? (Choose two.)___
A. Cache fills and cache evictions happen in the granularity of a cache block size.
B. vFRC caches data from both read and write I/Os, but write I/Os are always serviced by the underlying storage.
C. vFRC caches data from both read and write I/Os, but write I/Os are always serviced by the underlying cache data.
D. Cache fills and cache evictions happen in the granularity of the disk block size.
【多选题】
What are two possible causes of Storage Distributed Resource Scheduler (SDRS) being disabled on one or more virtual machine disks in a datastore cluster? (Choose two.)___
A. The virtual machine has vSphere Fault Tolerance disabled.
B. The virtual machine is a template.
C. The virtual machine swap file is on a shared datastore.
D. The disk is a CD-ROM/ISO file.
【多选题】
An administrator attempts to install vCenter Single Sign-On Server. The installer returns an error message indicating that the installation failed. Prior to the installation, all setup prerequisites were met. The administrator has generated a vCenter Server Single Sign-On support bundle. Which two files should the administrator analyze to determine the cause of the failure? (Choose two.)___
A. Server\utils\logs\imsTrace.log
B. Server\utils\logs\install.txt
C. %TEMP%\utils\logs\vminst.log
D. %TEMP%\vminst.log
【多选题】
An administrator is unable to remove an ESXi 6.x host from a vSphere Distributed Switch. What are two likely reasons for this issue? (Choose two.)___
A. Vmkernel interfaces on the switch are still in use.
B. VM Network port group adapters are connected to different switch.
C. Physical NICs are migrated to different switch.
D. VM Network adapters are connected to this switch.
【多选题】
Which two Identity Sources are available to add for vCenter Single Sign-On authentication? (Choose two.)___
A. LocalOS
B. OpenLDAP
C. NIS as an LDAP Server
D. VCMSDS
【多选题】
What are three goals of resource management within a cluster? (Choose three.)___
A. To prevent virtual machines from monopolizing resources and to guarantee predictable service rates.
B. To exploit undercommitted resources and overcommit with graceful degradation.
C. To provide solutions to potential problems that you might encounter when using vCenter Server.
D. To control the relative importance of virtual machines and provide flexible dynamic partitioning.
E. To provide additional network administration capabilities.
【多选题】
Which three actions can be taken as a result of executing the vSphere Update Manager 6.x scan and remediation wizards? (Choose three.)___
A. Install and upgrade software in virtual machines.
B. Upgrade the firmware on ESXi host devices.
C. Upgrade and Patch ESXi hosts.
D. Install and update third-party software on hosts.
E. Upgrade virtual machine hardware.
【多选题】
Which two statements are true about deploying and using vSphere Replication? (Choose two.)___
A. ESXi hosts managed by a single vCenter Server instance require a connection between the two vSphere Replication appliances.
B. Sites managed by different vCenter Server instances require a connection between the two vSphere Replication appliances.
C. Sites managed by different vCenter Server instances require the use of Site Recovery Manager and a connection between the two vSphere Replication appliances.
D. ESXi hosts managed by a single vCenter Server instance require a single vSphere Replication appliance.
【多选题】
An administrator is attempting to power on a virtual machine, but the task is hanging at 95%. What three scenarios best explain why this problem is happening? (Choose three.)___
A. A virtual machine question is currently being posed to the administrator.
B. Another task for the virtual machine or other component is already in progress.
C. The VMware High Availability cluster has insufficient resources to guarantee failover.
D. The host has lost access to the storage device containing the virtual machine files.
E. The host is under resource contention and unable to power on the virtual machine.
【多选题】
Which three features are not supported when using Fault Tolerance in vSphere 6.x? (Choose three.)___
A. Virtual Volumes (VVOLS)
B. Storage vMotion
C. Virtual Machine Component Protection
D. vMotion
E. vSphere Distributed Switches
【多选题】
Which two storage controller configurations can be used with Virtual SAN? (Choose two.)___
A. SAS controllers in Passthrough mode
B. SAS controllers in RAID0 mode
C. SAS controllers in RAID1 mode
D. SAS controllers in RAID10 mode
【多选题】
Which three are requirements when using vMotion to move a virtual machine across vCenter Server systems? (Choose three.)___
A. Both vCenter Servers must be using Enhanced Linked Mode.
B. Both vCenter Servers must be in the same Single Sign-On Domain.
C. Time must be synchronized.
D. Duplicate VM MAC addresses must be configured.
E. Both vCenter Servers must have High Availability enabled on source and destination clusters.
【多选题】
Which two components can be used when configuring Enhanced Linked Mode? (Choose two.)___
A. vCenter Server Appliance
B. vRealize Operations Manager
C. vSphere Management Appliance
D. vCenter Server for Windows
【多选题】
An organization has a number of virtual machines that would benefit from Fault Tolerance. These include: <A single vCPU Apache Server> < A dual vCPU vCenter Server> < A quad vCPU SQL Server> <An eight vCPU Hadoop Server>. Which two virtual machines can be configured to use VMware Fault Tolerance? (Choose two.)___
A. Apache Server
B. vCenter Server
C. SQL Server
D. Hadoop Server
【多选题】
Which two badges are major badges in vRealize Operations? (Choose two.)___
A. Risk
B. Efficency
C. Workload
D. Faults
【多选题】
An administrator is deploying multiple Windows 2003 Virtual Machines from the same template. What two steps should be taken to avoid network conflicts? (Choose two.)___
A. Customize the guest operating system.
B. Install VMware Tools into the new virtual machines.
C. Copy the Microsoft Sysprep tools onto the vCenter Server system.
D. Ensure the e1000 vmnic is selected for each new virtual machine.
【多选题】
Which three conditions would prevent Storage I/O Control from being enabled on a group of datastores? (Choose three.)___
A. The datastores planned for the solution are used by different vSphere clusters.
B. A datastore planned for the solution is configured as a Raw Device Mapping file.
C. A datastore planned for the solution has three extents.
D. A datastore planned for the solution is configured as NFS.
E. The organization has an Enterprise license.
【多选题】
Which two actions are prerequisites to adding ESXi 6.x hosts to a vSphere Distributed Switch? (Choose two.)___
A. Verify that there is at least one Distributed Port Group on the Distributed Switch.
B. Verify that the Distributed Port Group have active uplinks configured in its teaming and failover policy.
C. Verify that the
D. istributed Switch has been configured with a Network Profile.
【多选题】
An organization has configured Distributed Power Management (DPM) on a vSphere 6 cluster. The organization wants to be alerted when an ESXi host has been powered down by DPM. Which two options represent the type and name of the alarm that would accomplish this? (Choose two.)___
A. DrsEnteringStandbyModeEvent
B. DrsEnteredStandbyModeEvent
C. Event-based
D. Condition-based
【多选题】
Which two allow for the disabling of Network Rollback operations? (Choose two.)___
A. Modifying the vpxd advanded configuration options and adding the config.vpxd.network.rollback key
B. Modifying the C:\ProgramData\VMware\CIS\cfg\vmware-vpx\vpxd.cfg file and adjusting the<rollback> xml tag
C. Modifying the C:\ProgramData\VMware\CIS\cfg\vmware-vpx\vpxd.cfg file and adjusting the <networkrollback> xml tag
D. Modifying the C:\ProgramData\VMware\CIS\cfg\vmware-vpx\firstboot\vpxd-service- spec.prop file and adjusting the <rollback> xml tag
【多选题】
An administrator is tasked with performing a vMotion migration of a virtual machine. The virtual machine is configured as follows: <vSphere Flash Read Cache (vFRC) enabled> <Is part of a Distributed Resource Cluster (DRS) Cluster> Which two statements are true? (Choose two.)___
A. Each ESXi host in the cluster supports multiple virtual flash resources.
B. Each ESXi host in the cluster supports one virtual flash resource.
C. DRS treats powered-on virtual machines with Flash Read Cache as having a preferred affinity to their current host and moves them only for mandatory reasons.
D. DRS treats powered-on virtual machines with Flash Read Cache as having a required affinity to their current host and does not move them.
【多选题】
An administrator is using the Host Failures to Tolerate Admission Control Policy for a vSphere High Availability ___ cluster. When configuring this setting on the cluster, the administrator sees this error message: <Insufficient resources to satisfy HA failover level on cluster > What are two likely causes for the error? (Choose two.)(AB)
A. The hosts in the cluster are disconnected.
B. A host in the cluster is displaying an HA error.
C.
D. istributed Resource Scheduler has not been configured on the cluster.
【多选题】
What are two ways to identify TCP/IP stack information? (Choose two.)___
A. Using the vSphere Web Client
B. Using esxcli network ip netstack
C. Using esxcfg-netstack
D. Using the vSphere Client
【多选题】
Which two actions are required when enabling vFlash Read Cache for a virtual machine's virtual disk? (Choose two.)___
A. A value in the Virtual Flash Read Cache text box must be entered.
B. A Flash Resource Pool for Cache size reservation must be entered.
C. The Device backing and the block size must be configured.
D. The
E. nable virtual flash host swap cache check box must be selected.
【多选题】
What two IT infrastructure components are virtualized by vSphere Essentials? (Choose two.)___
A. Networks
B. Applications
C. Storage
D. Management
【多选题】
When attempting to access a virtual machine, an administrator is unable to login using the vSphere credentials. What two options are probable causes of the authentication failure? (Choose two.)___
A. The vSphere credentials have not been granted permissions.
B. The vSphere credentials are granted read-only permissions.
C. The vSphere credentials are granted no-access permissions.
D. The vSphere credentials are not a member of the local administrator group.
【多选题】
An administrator is performing a scripted installation of ESXi 6.x. In which three locations does the script need to be? (Choose three.)___
A. PXE Server
B. HTTPS
C. FTP
D. NFS
E. VVOLs Datastore
【多选题】
In order for a company to meet regulatory requirements, all ESXi 6.x Hosts must be configured to direct logs to a syslog server. What are two ways ESXi hosts can configured for this action? (Choose two)___
A. Use the esxcli system syslog command.
B. Edit them in the ESXi host Advanced System Settings.
C. From the Syslog collector user interface of the Web Client.
D. Syslog logging is not available for
E. SXi Hosts.
【多选题】
Which three actions can be executed when an alarm is triggered? (Choose three.)___
A. Send an email.
B. Send an SNMP trap.
C. Run a script or command.
D. Run an Orchestrator workflow.
E. Send a trigger to syslog.
【多选题】
An administrator is attempting to power on a virtual machine, but is unable to do so. Which two reasons are probable causes of the failure? (Choose two.)___
A. Storage access to the virtual machine swap file has been lost.
B. One of the virtual machine VMDK files is locked.
C. Virtual machine is running CentOS 7.0 64-bit.
D. Virtual machine has Hyper-Threading enabled.
【多选题】
An administrator has configured a host profile so that ESXi 6.x hosts will point to the corporate NTP server for time synchronization. The NTP server is located at 10.0.30.213, but time has not been synchronized properly across the ESXi hosts. The administrator reviews Host Profile settings as shown in the Exhibit. Which two steps are required to resolve the issue? (Choose two.)___
A. Correct the NTP server IP address.
B. Check the host for host profile compliance.
C. Remediate the host based on the updated host profile.
D. Change the NTP server to the FQDN as IP Addresses are not supported.
【多选题】
An administrator is attempting to migrate a large Hadoop virtual machine using vMotion. The administrator notices a delay when the machine is quiesced. The Hadoop virtual machine is processing many transactions a second to an in-memory database. Which two actions would help reduce the amount of time needed to perform a vMotion on this virtual machine? (Choose two.)___
A. Use multiple NICs for the vMotion vmkernel port.
B. Use a 10Gbps Network card for the vMotion vmkernel port.
C. Add an additional management network to help transmit the data quicker.
D. Disable Fault Tolerance before performing the vMotion.
