【判断题】
经本单位批准允许单独巡视高压设备的然元巡视高压设备时，不准进行其他工作，不准移开或越过遮栏
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【判断题】
主控制室与六氟化硫配电装置室间要采取气密性隔离措施
【判断题】
变电站值班人员应熟悉电气设备，并由2人及以上人员进行值班
【判断题】
高压设备发生接地时，室内不准接近故障点4m以内，室外不准接近故障点8m以内，进入上述范围人员应穿绝缘靴，接触设备的外壳和构架时，应戴绝缘手套
【判断题】
每组接地线均应编号，并存放在固定地点。存放位置亦应编号，接地线号码与存放位置号码应一致
【判断题】
装、拆接地线均应使用绝缘棒和戴绝缘手套。人体不得碰触接地线或未接地的导线，以防止触电
【判断题】
在配电装置上，接地线应装在该装置导电部分的规定地点，这些地点的油漆应刮去，并划有黑色标记
【判断题】
装设接地线应先接接地端，后接导体端，接地线应接触良好，连接应可靠。拆接地线的顺序与此相反
【判断题】
检修部分若分为几个在电气上不相连接的部分，则各段应分别验电接地短路
【判断题】
对于可能送电至停电设备的各方面都应装设接地线或合上接地刀闸，所装接地线与带电部分应考虑接地线摆动时仍符合安全距离的规定
【判断题】
验电前，应先在有电设备上进行试验，确证验电器良好
【判断题】
所有配电装置的适当地点，均应设有与接地网相连的接地端，接地电阻应合格。接地线应采用三相短路式接地线
【判断题】
检修设备停电，应把各方面的电源完全断开（任何运用中的星形接线设备的中性点，应视为带电设备）
【判断题】
验电时，应使用相应电压等级、合格的接触式验电器，在装设接地线或和接地刀闸处对各相分别验电
【判断题】
不应在只经断路器断开电源的设备上工作。应拉开隔离开关，手车开关应拉至检修位置，应使各方面有一个明显的断开点，若无法观察到停电设备的断开点，应有能够反映设备运行状态的电气和机械等指示
【判断题】
在同一电气连接部分用同一工作票依次在几个工作地点转移工作时，全部安全措施由运行人员在开工前一次完成，不需要再办理转移手续
【判断题】
只有在同一停电系统的所有工作票都已终结，汇报调度并得到值班调度员许可指令后，方可合闸送电
【判断题】
专责监护人年离开工作现场，应由工作负责人变更专责监护人，履行变更手续，并告知全体被监护人员；原、现专责监护人应做好工作交接
【判断题】
工作负责人、专责监护人应始终在工作现场，对工作班成员进行监护，及时纠正不安全行为
【判断题】
与停电设备有关的变压器和电压互感器，应将设备各侧断开，防止向停电检修设备反送电
【判断题】
工作许可后，工作负责人、专责监护人应向工作班成员交待工作内容、人员分工、带电部位等危险点和现场安全措施，进行危险点告知，并履行确认手续后，工作班方可开始工作
【判断题】
工作票有破损不能继续使用时，应补填新的工作票，并重新履行签发许可手续
【判断题】
同一变电站内在几个电气连接部分上依次进行不停电的同一类型的工作，可以使用一张第二种工作票
【判断题】
工作负责人离开工作现场，应由工作票签发人变更工作负责人，履行变更手续，并告知工作班成员及工作许可人；原、现工作负责人应做好工作交接
【判断题】
电气工作人员应具备必要的电气知识和业务技能，且按工作性质，熟悉本部分，并经考试合格
【判断题】
电气工作人员应具备必要的安全生产知识和技能，从事电气作业的人员应掌握触电急救、创伤急救等紧急救护法
【判断题】
作业中应执行制定的风险削减措施，将风险控制在允许的范围内
【判断题】
在试验和推广新技术、新工艺、新设备、新材料时，应有相应的安全措施方可实施
【判断题】
工作票签发人或工作负责人认为有必要现场勘察的线路作业，作业单位应根据工作任务进行现场勘察，并填写现场勘察记录。现场勘察应由工作票签发人组织
【判断题】
作业结束后应总结分析作业经过，进行补充完善
【判断题】
现场勘察应查看现场设施情况、作业现场的条件、环境，应停电的设备、保留或邻近的带电部分及其危险点等
【判断题】
对危险性、复杂性和困难程度较大的作业项目，应制订组织措施、技术措施和安全措施
【判断题】
二次系统和照明等回路上的工作，需要将高压设备停电者或做安全措施者使用第一种工作票
【判断题】
二次系统和照明等回路上的工作，无需将高压设备停电者或做安全措施者使用第一种工作票
【判断题】
工作票一份应保存在工作地点，由工作负责人收执；另一份由工作许可人收执，按值移交
【判断题】
工作许可人应工作票的编号、工作任务、许可及终结时间记入登记薄
【判断题】
一张工作票中，工作票签发人、工作负责人和工作许可人三者不得互相兼任
【判断题】
工作票由工作负责人填写，也可以由工作票签发人填写。工作票应提前交给工作负责人
【判断题】
第一种工作票所列工作地点超过两个，或有两个及以上不同的工作单位（班组）在一起工作时，可采用小组工作票
【判断题】
小组工作票应一式两份，由工作负责人和小组工作负责人分别收执。小组工作票的许可和终结，由小组工作负责人与工作负责人办理
推荐试题
【单选题】
What is an advantage of split tunneling ？___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ？___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain？___
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true？___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS？ ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands， it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
