【单选题】
How does PEAP protect the EAP exchange ？___
A. It encrypts the exchange using the server certificate
B. It encrypts the exchange using the client certificate
C. It validates the server-supplied certificate,and then encrypts the exchange using the client certificate
D. It validates the client-supplied certificate,and then encrypts the excha nge using the server certificate
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which feature of the Cisco Email Security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attacks？___
A. contextual analysis
B. holistic understanding of threats
C. graymail management and filtering
D. signature-based IPS
【单选题】
Refer to the exhibit【nat (inside,outside)dunamic interface】 Which translation technique does this configuration result in？___
A. DynamIc PAT
B. Dynamic NAT
C. Twice NAT
D. Static NAT
【单选题】
Refer to the exhibit which are repre sents the data center？___
【单选题】
While trouble shooting site-to-site VPN， you issued the show crypto isakmp sa command. What does the given output show？___
A. IKE Phase 1 main mode was created on 10.1.1.5， but it failed to negotiate with 10.10 10.2
B. IKE Phase 1 main mode has successfully negotiated between 10.1.1.5 and 10.10..
C. IKE Phase 1 aggressive mode was created on 10.1.1.5， but it failed to negotiate with
【单选题】
Refer to the exhibit All ports on switch 1 have a primary vLan of 300 Which devices can host 1 reach？___
A. host 2
B. server
C. host 4
D. other devices within VLAN303
【单选题】
Which option is the cloud-based security service from Cisco the provides URL filtering， web browsing content security， and roaming user protection？___
A. Cloud Web service
B. Cloud Advanced Malware Protection
C. Cloud We b Security
D. Cloud Web Protection
【单选题】
How can you detect a false negative on an IPS？___
A. View the alert on the ips
B. Review the ips log
C. Review the is console
D. Use a third- party system to perform penetration testing.
E. Use a third- party to audit the next generation firewall rules
【单选题】
If a switch port goes directly into a blocked state only when a superior BPDU is received， what mechanism must be in use？___
A. STP BPDU guard
B. Loop guard
C. EtherChannel guard
D. STP Root guard
【单选题】
what improvement does EAP-FASTv2 provide over EAP-FAST？ ___
A. It allows multiple credentials to be passed in a single EAP exchange.
B. It supports more secure encryption protocols
C. It allows faster authentication by using fewer packets.
D. It addresses security vulnerabilities found in the original protocol
【单选题】
When users login to the Client less Ssl Vpn using https://209.165.201.2/test ,which group policy will be applied？___
A. test
B. clientless
C. sales
D. DfitGrp Policy
E. Default RAGroup
F. Default WEB VPN
G. roup
【单选题】
Which user authentication method is used when users login to the Clientless SSLVPN portal using https://209.165.201.2/test？___
A. AAA with LOCAL database
B. AAA with RADIUS server
C. Certificate
D. :Both Certificate and aaa with LoCAL database
E. Both Certificate and AAA with RADIUS server
【单选题】
What' s the technology that you can use to prevent non malicious program to runin the computer that is disconnected from the network？___
A. Firewall
B. Sofware Antivirus
C. Network IPS
D. Host IPS
【单选题】
Which statement about the communication between interfaces on the same security level is true？___
A. Interfaces on the same security level require additional configuration to permit interinterface communication
B. Configuring interfaces on the same security level can cause asymmetric routing
C. All traffic is allowed by default between interfaces on the same security level
D. You can configure only one interface on a n individual security level
【单选题】
Which product can be used to provide application layer protection for tcp port 25 traffic？___
A. ESA
B. CWS
C. WSA
D. ASA
【单选题】
which iPS mode is less secure than other options but allows optimal network through put ?___
A. inline mode
B. inline-bypass mode
C. transparent mode
D. Promiscuous mode
【单选题】
Which feature of the Cisco Email security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attack？___
A. reputation based filtering
B. signature based IPS
C. contextual analysis
D. graymail management and filtering
【单选题】
Which type of social-engineering attack uses normal tele phone service as the attack vector？___
A. smishing
B. dialing
C. phishing
D. vishing
【单选题】
Which quantifiable item should you consider when you organization adopts new technologies？___
A. exploits
B. vulnerability
C. threat
D. Risk
【单选题】
Referencing the ClA model， in which scenario is a hash- only function most appropriate ？___
A. securing data at rest
B. securing real-time traffic
C. securing data in files
D. securing wireless transmissions
【单选题】
Which ports must be open between a aaa server and a microsoft server to permit Active Directory authentications？___
A. 445 and 389
B. 888 and 3389
C. 636 and 4445
D. 363 and 983
【单选题】
Refer to the exhibit for which reason is the tunnel unable to pass traffic___
A. the tunnel is failing to receive traffic from the remote peer
B. the local peer is unable to encrypt the traffic
C. the ip address of the remote peer is incorrect
D. UDP port 500 is blocked
【单选题】
Which type of attack can exploit design flaws in the implementation of an application without___
A. DHCP starvation attacks
B. low-rate dos attacks
C. application DDos flood attacks
D. application DDoS flood attacks
E. volume-based DDoS attacks
【单选题】
How can you protect CDP from reconnaissance attacks？___
A. Enable dynamic ARP inspection on all untrusted ports.
B. Enable dot1x on all ports that are connected to other switches.
C.
D. isable CDP on ports connected to endpoints.
【单选题】
Which type of attack can exploit design flaws in the implementation of an application without ？___
A. DHCP starvation attacks
B. low-rate dos attacks
C. application DDos flood attacks
D. application DDoS flood attacks
E. volume-based DDoS attacks
【单选题】
Which option is a key security compone nt of and MDM deployment ？___
A. using network-specific installer packages
B. using an application tunnel by default
C. using self-signed certificates to validate the server
D. using MS-CHAPv2 as the primary
E. AP method
【单选题】
Which Firepower Management Center feature detects and block exploits and hack attempts？___
A. Content blocker
B. file control
C. intrusion prevention
D. advanced malware protection
【单选题】
hich description of the nonsecret numbers that are used to start a Diffie- Hellman exchange is ture？___
A. They are preconfigured prime integers.
B. They are large pseudorandom numbers.
C. They are very small numbers chosen from a table of known valuses
D. They are numeric values extracted from ha shed system hostnames
【多选题】
Which two characteristics of an application layer firewall are true？___
A. provides stateful firewal functionality
B. has low processor usage
C. provides protection for multiple applications
D. provides rever se proxy services
E. is immune to URL manipulation
【多选题】
Which two devices are components of the BYOD architectural framework？___
A. Nexus 7010 switch
B. Cisco 3945 Router
C. Identify Services Engine
D. Wireless Access oints
E. Prime Infrastructure
【多选题】
Which two actions can a zone based firewall take when looking at traffic？ ___
A. forward
B. inspect
C. drop
D. broadcast
E. filter
【多选题】
n which two situations should you use in-band management？___
A. when management applications need concurrent access to the device
B. when you require administrator access from multiple locations
C. when a network device fails to forward packets
D. when you require ROMMON access
E. when the control plane fails to respond
【多选题】
What are two ways to prevent eavesdropping when you perform device management tasks？___
A. Use an SSH connection.
B. Use SNMPv3
C. Use out-of-band management
D. Use SNMP
E. Use in-band management
【多选题】
Which two features are commonly used CoPP and CPPr to protect the control plane？ ___
A. QoS
B. traffic classification
C. access lists
D. policy maps
E. class maps
F. Cisco Express Forwarding
【多选题】
Which four tunne ling prot ocols are enabled in the Dfit GrpPolicy group policy ？___
A. Clientless SSL VPN
B. SSL VPN Client
C. PPTP
D. L2TP/IPsec
E. IPsec IKEv1
F. IPsec IKEv2
【多选题】
Which two statements regarding the aSA VPN configurations are correct？___
A. The asa has a certificate issued by an external certificate authority associated to the ASDM TrustPoint1
B. The Default WEBVPNGroup Connection Profile is using the aaa with RADIUS server method
C. The Inside-srvbook mark references the https://192.168.1.2url
D. Only Clientless SSL VPN access is allowed with the Sales group policy
E. Any Connect， IPSec IKEv1， and IPSec IKEv2 VPN access is enabled on the outside interface
F. The Inside -SRV bookmark has not been applied to the Sales group policy
【多选题】
Which three ESP fields can be encrypted during transmission？___
A. Security Parameter Index
B. Sequence Number
C. MAC Address
D. Padding
E. Pad length
F. Next Header
【多选题】
.Which three statements de scribe DHCP spoofing attacks？___
A. They can modify traffic in transit.
B. They are used to perform man- in-the-middle attacks
C. They use ARP poisoning
D. They can access most network devices
E. They protect the ide ntity of the attacker by masking the DHCP address.
F. They are can physically modify the network gateway.
【多选题】
Which statement about the communication between interfaces on the same security level is true？___
A. Interfaces on the same security level require additional configuration to permit interinterface communication
B. Configuring interfaces on the same security level can cause asymmetric routing
C. All traffic is allowed by default between interfaces on the same security level
D. You can configure only one interface on a n individual security level
【多选题】
In which two situations should you use in band management？ ___
A. when the control plane fails to respond
B. when you require administrator access from multiple locations
C. when you require ROMMON access.
D. where a network device fails to forward packets
E. when multiple ma nagement applications need concument access to the device.
【多选题】
Which two features are supported in a VRF-aware softwar infrastructure before VRF-lite?___
A. multicast
B. fair queuing
C. WCCP
D.
E. IGRP
推荐试题
【单选题】
术后并发甲状腺危象的主要原因是___
A. 术后未服碘剂
B. 术中出血过多
C. 甲状腺切除过少
D. 术前准备不充分
E. 精神过度紧张
【单选题】
预防甲状腺大部切除术后出现甲状腺危象最重要的措施是___
A. 及时补钙
B. 术中充分止血
C. 术中避免损伤甲状旁腺
D. 保留足够的残留甲状腺
E. 做好术前准备
【单选题】
硬膜外麻醉最严重的并发症是___
A. 全脊髓麻醉
B. 血管扩张
C. 尿潴留
D. 呼吸变慢
E. 血压下降
【单选题】
导致风湿性二尖瓣狭窄患者死亡的最常见并发症是___
A. 脑血栓
B. 心房纤颤
C. 充血性心力衰竭
D. 亚急性感染性心内膜炎
E. 急性肺水肿
【单选题】
采用肾上腺皮质激素降低颅内压的作用原理是___
A. 渗透脱水作用
B. 利尿脱水作用
C. 抗炎性反应作用
D. 改善毛细血管通透性
E. 抑制脑脊液分泌作用
【单选题】
肾、输尿管结石血尿是___
A. 肉眼全血尿
B. 肉眼终末尿
C. 镜下全血尿
D. 镜下初血尿
E. 肉眼初血尿
【单选题】
最常见的腹外疝是___
A. 切口疝
B. 脐疝
C. 股疝
D. 腹股沟直疝
E. 腹股沟斜疝
【单选题】
下列哪项措施对溃疡病大出血的治疗不利___
A. 禁食
B. 补液和输血
C. 止血剂
D. 手术治疗
E. 阿托品等解痉剂
【单选题】
下列哪一项不是左半结肠癌的临床症状___
A. 左半结肠肠腔大，不易出现梗阻
B. 易致肠腔狭窄，常伴有便秘
C. 贫血常不明显
D. 肿块多呈浸润型
E. 左半结肠癌容易出现梗阻
【单选题】
不符合体外循环后低心排血量综合征的表现是___
A. 血压下降
B. 脉压小
C. 中心静脉压降低
D. 心率快
E. 中枢性高热
【单选题】
Colles骨折患者的典型表现是___
A. 方肩畸形
B. 垂腕畸形
C. 爪形手畸形
D. "枪刺刀"畸形
E. 搭肩试验阳性
【单选题】
胃癌最常见的发生部位___
A. 胃小弯
B. 贲门部
C. 胃体部
D. 胃窦部
E. 胃底部
【单选题】
肘关节脱位的特点是___
A. 肘部伸直位固定
B. 肘部屈曲位固定
C. 肘部半伸位弹性固定，肘后三点关系正常
D. 肘部半伸位弹性固定，肘后三点关系异常
E. 以上都不对
【单选题】
下列哪一种是闭合性损伤___
A. 擦伤
B. 刺伤
C. 挫伤
D. 切割伤
E. 裂伤
【单选题】
入院第4天，患者突然出现剧烈腹痛。查：腹肌紧张，明显压痛、反跳痛。考虑最可能的原因是___
A. 肠出血
B. 急性阑尾炎
C. 肠痉挛
D. 脾脏破裂
E. 肠穿孔
【单选题】
护士小王是某手术的器械护士，手术前进行外科手消毒，下列做法正确的是___
A. 手消毒后，双手保持高过肘部，以背开门进入手术室
B. 用灭菌刷蘸取0.5%碘伏溶液，先刷前臂，再刷手部
C. 用同一灭菌刷按照上一步骤再刷手一次
D. 以无菌巾擦干双手，先擦前臂，再擦手部
E. 甲沟炎处涂0.5%碘伏溶液，再进行洗手和手消毒
【单选题】
防止急性胃穿孔内容物外漏的主要措施是___
A. 持续胃肠减压
B. 输液
C. 半卧位
D. 用抗生素
E. 以上都不是
【单选题】
没有转移的恶性骨肿瘤的治疗为___
A. 局部切除
B. 局部刮除并植骨
C. 高位截肢加化疗
D. 化疗
E. 放疗
【单选题】
以下哪项对确定肿瘤的诊断价值最大___
A. 体检所见
B. 化验检查
C. 病理检查
D. X线、超声波检查
E. 手术探查所见
【单选题】
颅内动静脉畸形最常见的首发症状是___
A. 视力障碍
B. 癫痫
C. 头痛
D. 运动障碍
E. 出血
【单选题】
髋关节后脱位的畸形是___
A. 短缩，屈曲，外展，内旋
B. 短缩，屈曲，外展，外旋
C. 短缩，屈曲，内收，内旋
D. 短缩，屈曲，内收，外旋
E. 短缩，伸屈，内收，内旋
【单选题】
全身麻醉患者清醒前最危险的意外及并发症是___
A. 引流管脱落
B. 体温过低
C. 坠床
D. 呕吐物窒息
E. 意外损伤
【单选题】
下肢静脉曲张的主要原因是___
A. 心脏功能不全
B. 皮下脂肪减少
C. 静脉瓣膜破坏
D. 下肢肌肉收缩减退
E. 胸腔负压作用减低
【单选题】
关于损伤的炎症期为___
A. 1～2天
B. 6～7天
C. 3～5天
D. 10天左右
E. 14天左右
【单选题】
高渗性脱水的常见原因___
A. 急性肠梗阻
B. 感染性休克
C. 慢性十二指肠瘘
D. 肺炎高热
E. 挤压综合征
【单选题】
患者，男性，49岁，进食后出现胸骨后针刺样疼痛和停滞感3个月，饮水后可缓解，锁骨上未触及淋巴结。食管吞钡X线造影可见食管下段约3cm黏膜皱襞紊乱，充盈缺损。考虑诊断为___
A. 早期食管癌
B. 晚期食管癌
C. 食管息肉
D. 贲门失弛缓症
E. 食管憩室
【单选题】
肘关节脱位最常见的类型是___
A. 前脱位
B. 后脱位
C. 内侧脱位
D. 外侧脱位
E. 中心型脱位
【单选题】
腰椎管狭窄症最有意义的检查是___
A. 腰椎平片
B. 腰椎穿刺
C. 腰椎管造影
D. 腰椎CT
E. 腰椎MRI
【单选题】
甲亢患者术前准备不宜使用阿托品的目的是___
A. 避免甲状腺肿大
B. 避免心动过速
C. 降低基础代谢率
D. 避免呼吸道干燥
E. 预防甲状腺危象
【单选题】
患者，男性，34岁，车祸后下肢骨折，长腿石膏管型固定，1天后发现石膏上有少量血迹，正确的处理方法是___
A. 给予止血药物
B. 立即更换石膏
C. 打开石膏伤口换药
D. 在石膏上划出血迹边界并注明日期
E. 用湿毛巾蘸肥皂将石膏上的血迹擦洗干净
【单选题】
急性胰腺炎患者不可使用的止痛药是___
A. 吗啡
B. 东莨菪碱
C. 山莨菪碱
D. 阿托品
E. 哌替啶
【单选题】
胸腔闭式引流水封瓶长玻璃管没入水中长度为___
A. 1～2cm
B. 2～3cm
C. 3～4cm
D. 4～6cm
E. 6～8cm
【单选题】
预防结核杆菌感染的最有效措施是___
A. 化学药物
B. 定期X线检查
C. 治愈结核患者
D. 卡介苗接种
E. 应用抗结核药物
【单选题】
麻醉前给患者注射哌替啶的目的是___
A. 抑制呼吸
B. 松弛肌肉
C. 提高痛阈
D. 抑制呼吸道分泌物
E. 预防迷走神经兴奋
【单选题】
胃迷走神经切断术主要用于治疗___
A. 胃溃疡
B. 幽门梗阻
C. 胃溃疡并发穿孔
D. 十二指肠溃疡
E. 胃黏膜癌
【单选题】
急性血源性骨髓炎最常见的细菌是___
A. 金黄色葡萄球菌
B. 溶血性链球菌
C. 大肠杆菌
D. 肺炎链球菌
E. 铜绿假单胞菌
【单选题】
张力性气胸行胸腔闭式引流，其穿刺部位是___
A. 腋前线第8肋间
B. 腋中线第6肋间
C. 腋后线第4肋间
D. 肩胛下角线第3肋间
E. 锁骨中线第2肋间
【单选题】
严重低渗性脱水的治疗可先输入___
A. 5%葡萄糖盐水
B. 10%葡萄糖液
C. 低分子右旋糖酐液
D. 11.2%乳酸钠液
E. 3%～5%氯化钠液
【单选题】
术后切口裂开，其处理下列哪项不妥___
A. 安慰患者
B. 送手术室缝合
C. 立即用灭菌盐水纱布覆盖
D. 用腹带包扎
E. 立即在病床上将内脏还纳
【单选题】
腹股沟直疝多见于___
A. 年老体弱者
B. 儿童
C. 青壮年
D. 女性
E. 各年龄、性别无区别
