【判断题】
12：系统未提取到，按照规定应上报而未上报的大额交易，本行各营业机构应在交易发生后的10个工作日内通过手工方式增加大额交易
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【判断题】
13：对既属于大额交易又属于可疑交易的交易，本行应当分别提交大额交易报告和可疑交易报告
【判断题】
14：客户身份资料，自业务关系结束当年或者一次性交易记账当年计起至少保存10年
【判断题】
15：同一介质上存有不同保存期限客户身份资料或者交易记录的，应当按最长期限保存
【判断题】
16：客户要求变更姓名或者名称、身份证件或者身份证明文件种类、身份证件号码、注册资本、经营范围、法定代表人或者负责人的，本行各营业机构应当重新识别客户
【判断题】
17：对代理多人开立账户或经常使用他人账户进行交易的，应当进行客户身份尽职调查，并考虑提交大额交易报告
【判断题】
18：发现已经开立的账户有假名情形的，应终止业务关系，并提交可疑交易报告
【判断题】
19：本行为外国政要客户提供开立账户服务时，应当报本行行长批准后方可开立
【判断题】
20：自然人客户的“身份基本信息”中，客户的住所地与经常居住地不一致的，登记客户的住所地
【判断题】
21：支行各营业网点反洗钱工作人员由营业网点负责人担任
【判断题】
22：反洗钱内部审计以风险导向审计理念为基础，只能采用现场审计方式开展反洗钱内部审计工作
【判断题】
23：属于艺术品、珠宝古董批发和零售行业的客户，可评定为低风险客户
【判断题】
24：对于成年人代理未成年人或者老年人开户预留本人联系电话等合理情形的，由相关当事人出具说明后，联系电话可以保持不变
【判断题】
25：本行发现恐怖活动组织及恐怖活动人员拥有或者控制的资产，应当立即采取冻结措施
【判断题】
26：当自然人客户由他人代理办理人民币单笔5万元（含）以上或者外币等值1万元美元（含）以上的现金存款业务时，如果存款人因合理理由无法提供被代理人有效身份证件或者身份证明文件，各营业机构可参照有关一次性金融服务时履行客户身份识别的要求，只对代理人开展相关客户身份识别工作
【判断题】
27：按照账户分类管理有关要求,目前本行Ⅲ类户任一时点余额为1000元, Ⅲ类户非绑定账户转入、转出、消费和缴费日累计限额为5000元，年累计限额为10万元
【判断题】
28：目前本行由前台柜面人员内部操作对已核准或已备案的单位账户进行启用，启用后即可入金，无需客户再到柜面办理
【判断题】
29：一般户在柜面综合前端用1058交易码启用时，若0天启用，提供柜员通过人行账户管理系统打印的开户信息即可
【判断题】
30：单位结算账户启用前账户状态为不收不付，启用后为只收不付状态，3个自然日后方可对外付款
【判断题】
31：基本户在柜面综合前端用1058交易码启用时，授权提交柜员通过人行账户管理系统打印的开户信息即可
【判断题】
32：银行在办理开户业务时，发现个人冒用他人身份开立账户的，应当及时向公安机关报案并将被冒用的身份证件移交公安机关
【判断题】
33：对于被全国企业信用信息公示系统列入“严重违法失信企业名单”，以及经银行核实单位注册地址不存在或者虚构经营场所的单位，银行和支付机构不得为其开户
【判断题】
34：银行应当至少每半年排查企业是否属于严重违法企业，情况属实的，应当在3个月内暂停其业务，逐步清理
【判断题】
35：对存在法定代表人或者负责人对单位经营规模及业务背景等情况不清楚、注册地和经营地均在异地等异常情况的单位，银行应当加强对单位开户意愿的核查。银行应当对法定代表人或者负责人面签并留存视频、音频资料等，开户初期原则上可以开通非柜面业务
【判断题】
36：企业预开户操作，预约码仅在预约网点有效，跨网点无法识别预约码
【判断题】
37：账户生效日是指银行为客户正式开立对公账户3个工作日后的日期，自该日期后账户可收可付
【判断题】
38：账户激活日是指银行为客户正式开立对公账户的日期（即人民银行账户核准日），在激活日至生效日之间，存款人的银行结算账户不收不付
【判断题】
39：小微企业开户“3个工作日办结”，即从客户在网点提交完整的开户资料到我行领回人行核发的开户许可证最多不超过3个工作日
【判断题】
40：我行要求各网点账户专管员每天不少于1次登陆人行账户系统查看账户审批核准进度，保证开户各个环节无缝衔接
【判断题】
41：小微企业开户3个工作日办结要求中，3个工作日开始时点是指柜面收到客户预约开户申请信息之时起，结束时点是指人民银行从账户系统中打印出开户许可证之时止
【判断题】
42：本行各营业机构为自然人客户办理人民币单笔5万元(含)以上或者外币等值1万元美元(含)以上的现金存取及转账业务时，应核对客户的有效身份证件或其他身份证明文件,无需摘录身份证号码(或在综合前端系统内录入身份证号码)
【判断题】
43：【1207质押扣划】交易只能在质押社(行)办理
【判断题】
44：扣划时，系统忽略起存金额和账户最低留存金额的限制，账户余额可扣至为0，但不得为负
【判断题】
45：质押扣划不结计利息，待客户持存款凭证到柜台销户时再结计利息
【判断题】
46: 【1200法定机关冻结】、【1203法定机关冻结维护】、【1204账户控制及维护】等冻结、控制类交易的授权模式为“仅本地”
【判断题】
47：因行政区域代码变更造成身份证号码不一致(第3至6位不一致，其他一致)的，在办理挂失以外的业务时，需在身份证复印件上注明：“因行政区代码变更造成新老身份证号码不一致，经核查：身份证号码XX与身份证号码XX为同一人，核对人：XX。”同时加盖业务章，无需再填制特殊业务申请省中心授权通过表
【判断题】
48：以折换卡业务仅支持存折换Ⅰ类介质卡，可以代办
【判断题】
49：我行与初中、高中合作发行的校园卡的持卡人为未成年人时，这部分客户办理挂失等业务时，可由学校出具证明，指定代理人代为办理(可代理多笔)，同时提供代理人证件及学生身份证件
【判断题】
50：因办理正常质押贷款，进行质押止付/撤销质押止付时，对公客户可代理，个人客户不允许代理
【判断题】
51：1204账户控制及维护等用于控制、扣划不良贷款客户存款账户资金的交易，应参照《特殊业务远程集中授权规范操作对照表》的要求，由贷款行两名工作人员持经审批的借款人(保证人)存款内部止付、解除止付、扣划申请表和身份证件办理业务，这三类业务的审批人是相同的
【判断题】
52：双挂时，挂失约定天数填写时，应勾选“是7天”
推荐试题
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
【单选题】
1．三相刀开关的图形符号与交流接触器的主触点符号是___。
A. 一样的
B. 可以互换
C. 有区别的
D. 没有区别
【单选题】
5．熔断器的作用是___。
A. 短路保护
B. 过载保护
C. 失压保护
D. 零压保护
【单选题】
6．热继电器的作用是___。
A. 短路保护
B. 过载保护
C. 失压保护
D. 零压保护
