【单选题】
How does a zone pair handle traffic if the policy de fination of the zone pair is missing?___
A. It inspects all traffic.
B. It drops all traffic.
C. It permits all traffic wihtout logging
D. It permits and logs all traffic
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
default how does a zone based firewall handle traffic to add from the self zone？___
A. It permits all traffic without inspection
B. It inspects all traffic to determine how it is handled
C. It permits all traffic after inspection
D. It frops all traffic
【单选题】
Which command should beused to ena ble AAA Authentication to determine if a user can access the privilege command level？___
A. aaa authentication enable local
B. aaa authentication enable level=
C. aaa authentication enable method de fault
D. aaa authentication enable defa ult local
【单选题】
On an ASA， the policy indicates that traffic should not be translated is often referred to as which of the following？___
A. NAT zero
B. NAT forward
C. NAT nul
D. NAT allow
【单选题】
Which protocol offers data Integrity encryption， authentication， and anti-replay functions for IPSec VPN？___
A. ESP protocol
B. IKEv3 Protocol
C. AH protoco
D. IKEv1 Protocol
【单选题】
Which component offers a variety of security Solution， including firwall， IF Antivirus and antiphishing features？___
A. Cisco loS router
B. Cisco ASA 5500 Ser ies security appliance
C. Cisco ASA 5500 X series Next Gen Security appliance
D. Cisco 4200 series IPS appliance
【单选题】
Refer to the exhibit， A Network Secur ity administrator check the ASa firewall NAT policy table rith show nat command， which statement is fails？___
A. There are only reverse translation matches for the REAL SERvER object
B. First policy in the Section 1 is a dynamic nat entry defined in the object configuration
C. NAT policy in section 2 is static entry de fined in the object configuration
D. Translation in Section 3 used when a connection does not matches any entries in first two sections
【单选题】
What is true of an aSa in transparent mode ?___
A. It supports OSPF
B. It requires an IP address for each interface
C. It requires a management IP address
D. It allows the use of dynamic NaT
【单选题】
What is the effect of the ip scp server enable command？___
A. It references an access list that allows specific SCP servers
B. It allows the router to initiate requests to an SCP server
C. It allows the router to become an SCP server
D. It adds SCP to the list of allowed copy functions
【单选题】
How can you mitigate attacks in which the attacker attaches more than one vLan tag to a packet？___
A. Assign an access VLAN to every active port on the switch
B. Disable Ether Channel on the switch
C. Explicitly identity each VLAN allowed across the trunk
D.
E. nable transparent VTP on the switch
【单选题】
Which technology can you implement to centrally mitigate potential threats when users on your network download files that might be malicious？___
A. Enable file-reputation services to inspect all files that traverse the company network and block files with low reputation scores
B. Verify that the compa ny IpS blocks all known malicious website
C. Verity that antivirus software is installed and up to date for all users on your network
D. Implement URL filtering on the perimeter firewall
【单选题】
What is the most common implementation of PaT in a standard networked environment？___
A. configuring multiple external hosts to join the self zo ne and to communicate with one another
B. configuring multiple internal hosts to communicate outside of the network using the outside interface IP address
C. configuring multiple internal hosts to communicate outside of the network by using the inside interface IP address
D. configuring an any any rule to enable external hosts to communicate inside the network
【单选题】
Which component of a bYod architecture provides aAa services for endpoint access ?___
A. Integrated Services Router
B. access point
C. ASA
D. Identity Services
E. ngine
【单选题】
You are configuring a NAT rule on a Cisco ASA ,Which description of a mapped interface is true?___
A. It is mandatory for all firewall modes
B. It is optional in routed mode
C. It is optional in transparent mode
D. It is mandatory for ide ntity NAT only
【单选题】
Which description of the use of a private key is true ？___
A. The sender signs a message using the receivers private key
B. The sender signs a message using their private key
C. The sender encrypts a message using the receivers private key
D. The receiver decrypts a n15ssage using the sender's private key
【单选题】
Which mechanism does the FireAMP Connector use to avoid conflicts with other security applications such as antivirus products ?___
A. Virtualization
B. Containers
C. Sandboxing
D.
E. xclusions
【单选题】
Which network to pology de scribes multiple LANS in a gec? ___
A. SOHO
B. MAN
C. pan
D. CAN
【单选题】
Which statement represents a difference between an access list on an aSa versus an access list on a router？___
A. The asa does not support number access lists
B. The aSa does not support standard access list
C. The asa does not ever use a wildcard mask
D. The asa does not support extended access lists
【单选题】
Which command do you enter to verify the status and settings of an iKE Phase 1 tunnel？___
A. show crypto ipsec as output
B. show crypto isakmp
C. show crypto isakmp policy
D. show crypto ipsec transform
【单选题】
Which feature can help a router or switch maintain packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch？___
A. service Policy
B. Control Plane Policing
C. Policy Map
D. Cisco
E. xpress
F. orwarding
【单选题】
Which STP feature can prevent an attacker from becoming the root bridge by immediately shutting down the interface when it receives a BPDU？___
A. root guard
B. Port Fast
C. BPDU guard
D. BPDU filtering
【单选题】
Which technology can best protect data at rest on a user system？___
A. full-disk encryption
B. IPsec tunnel
C. router ACL
D. network IPS
【多选题】
Which two primary security concerns can you mitigate with a BYOD solution ？___
A. schedule for patching the device
B. securing access to a trusted corporate network
C. compliance with applicable policies
D. connections to public Wi-Fi networks
E. device tagging and invento
【多选题】
choose five___
A. MD5————————inserure
B. DES————————insercure
C. SDES———————legacy
D. SHA-1———————legacy
E. HMAC-MD5—————legacy
【多选题】
Which two characteristics of symmetric encryption are true？___
A. It uses digital certificates
B. It requires more resources than asymmetric ancryption
C. It uses the same key to enctypt and decrupt traffic
D. It uses a public key and a pricate key to encrypt and decrypt traffic.
E. It is faster than asymmetric encryption
【多选题】
which two characteristics of PVLAN are true？___
A. Promiscuous porta can communicate with PVLAN ports.
B. Isolated ports cannot communicate with other ports on the same VLAN
C. Community ports have to be a part of the trunk.
D. They require VTP to be enabled in server mode
E. PVLAN ports can be configured as Ether Channel ports
【多选题】
What are two options for running Cisco SDM?___
A. Running SDM from a mobile device
B. Running SDM from within CiscoWorks
C. Running SDM from a router's flash
D. Running SDM from the Cisco web porta
E. Running SDM from a PC
【多选题】
Which two options are the primary deployment modeles for mobile device management？___
A. multisite
B. cloud-based
C. on premises
D. hybrid cloud basedo
E. single site
【多选题】
Drag the recommendation on the left to the Cryptographic algorithms on the right， Options will be used more than once.___
A. Avoid——————————————DES，MD5
B. Legacy——————————————SDES，SHA1，HMAC-MD5
【多选题】
Which two are valid types of vLans using PVLANS ?___
A. Community VLAN
B. Backup VLAN
C. Secondary VLAN
D. Isolated VLAN
E. Isolated VLAN
【多选题】
Which two commands are used to implement Resilient lOS Configuration ___
A. Secure boot-config
B. copy running-config tftp
C. copy flash:ios bin tftp
D. copy running-config startup-config
E. secure boot-image
【多选题】
Which two types of firewalls work at layer 4 and above ？___
A. Stateful inspection
B. Network Address Translation
C. Circuit-Level gateway
D. Static packet filter
E. Application Level firewall
【多选题】
Which two default settings for port security are true ？___
A. Violation is Protect
B. Violation is Restrict
C. Violation is Shutdown
D. Maximum number of MAC addresses is 2
E. Maximum number of MAC addresses is 1
【多选题】
Which two are characteristics of RADIUS？___
A. Uses UDP ports 1812 /1813
B. Uses TCP port 49
C. Uses UDP port 49
D.
E. ncrypts only the password between user and server
【多选题】
When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___
A. pfs
B. nat
C. reverse route
D. peer
E. transform-set
【多选题】
When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___
A. Install from SFTP server
B. Usehttps
C. Install from a file
D. Use LDAP
E. Use SCEP
【多选题】
Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___
A. access control
B. the shared secret key
C. authentication
D. authorization
E. accounting
【多选题】
Which two statements about routed firewall mode are true ？___
A. The firewall acts as a routed hop in the network
B. This mode conceals the presence of the firewall
C. The firewall requires a unique iP address for each interface
D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug
【多选题】
Which two statements describe DHCP spoofing attacks？___
A. They are used to perform man-in- the-middle attacks
B. They can access most network devices
C. They can modify the flow of traffic in transit. LNGKAIG
D. They protect the identity of ti attacker by masking the DHCP address
E. They can physically modify the network gateway
【多选题】
Which two types of VLANs using PVLANs are valid？___
A. isolated
B. promiscuous
C. backup
D. secondary
E. community
【多选题】
What are two limitations of the self-zone policies on a zone-based firewall？___
A. They are unable to block Https traffic
B. They restrict SNMP traffic.
C. They are unable to support Https traffic
D. They are unable to implement application inspection
E. They are unable to perform rate limiting
推荐试题
【单选题】
下列不属于间接融资的行为有___。
A. 文小姐向银行借款10 万元专门用于其房屋装修
B. A 公司购入B 公司20%的股权，价值80 万元
C. 赵小姐春节期间通过信用卡透支了2 万元购买年货
D. 郑先生通过银行贷款购买了一辆车
【单选题】
调查的基本要求：熟知客户和客户的业务，取得必要的客户信息资料和信贷业务信息资料，并核实资料的___。
A. 真实性
B. 完成性
C. 可操作性
D. 全面性
【单选题】
商业银行在信贷过程中保持贷款种类和期限的多样化是为了保持信贷的___。
A. 效益性
B. 流动性
C. 安全性
D. 自主性
【单选题】
企业向银行借款属于____，发行债券、股票属于____。___
A. 直接融资；间接融资
B. 间接投资；直接投资
C. 间接融资；直接融资
D. 直接投资；间接投资
【单选题】
关于商业银行“安全性、流动性和效益性原则”的说法，不正确的是___。
A. 为了保证贷款的安全性，商业银行需要合理安排贷款的种类和期限
B. 在信贷资金总量一定的情况下，资金的周转速度加快，效益性相应较差
C. 在贷款规模一定的情况下，一般贷款期限越长，收益越大
D. 贷款期限越长，安全性越高
【单选题】
按贷款用途划分，公司信贷的种类不包括___
A. 基本建设贷款
B. 技术改造贷款
C. 流动资金贷款
D. 自营贷款
【单选题】
___是指特定产品要素组合下的信贷服务方式，主要包括贷款、担保、承兑、信用支持、保函、信用证和承诺等。
A. 交易对象
B. 信贷产品
C. 信贷金额
D. 信贷期限
【单选题】
银行市场细分是根据___差异对市场进行的划分。
A. 信贷产品
B. 卖方银行
C. 买方客户
D. 信贷市场
【单选题】
贷放分控是指银行业金融机构将___作为两个独立的业务环节。
A. 贷前申请与贷款审批
B. 贷款审批与贷款发放
C. 贷款发放与贷款清偿
D. 贷款申请与贷款清偿
【单选题】
除贷款外，商业银行的资金一般主要用于___。
A. 结算业务
B. 代理业务
C. 存款业务
D. 资金业务
【单选题】
___是银行在商业汇票上签章承诺按出票人指示到期付款的行为。
A. 承兑
B. 担保
C. 贷款
D. 公司信贷
【单选题】
在银行流动资金贷前调查报告中，借款人财务状况不包括___。
A. 流动资金数额和周转速度
B. 主要客户、供应商和分销渠道
C. 资产负债比率
D. 存货净值和周转速度
【单选题】
公司信贷的借款人指___
A. 经工商行政管理机关(或主管机关)核准登记的自然人
B. 经行政机关核准登记的企(事)业法人
C. 经行政机关核准登记的自然人
D. 经工商行政管理机关(或主管机关)核准登记的企(事)业法人
【单选题】
贷前调查中最常用、最重要的方法，同时也是在一般情况下必须采用的方法是___。
A. 现场调研
B. 搜寻调查
C. 委托调查
D. 突击检查
【单选题】
影响行业的外部因素不包括___
A. 国民经济
B. 外部经济
C. 国家政策
D. 企业自身规模效益
【单选题】
银行在对客户进行借款需求分析时，不需要关注的是___。
A. 企业的借款需求原因，即所借款项的用途
B. 企业的还款来源
C. 企业还款的可靠程度
D. 公司的治理结构
【单选题】
以下导致企业流动资产增加的因素不包括___。
A. 季节性销售增长
B. 长期销售增长
C. 资产效率下降
D. 债务重构
【单选题】
主营业务指标通常指主营业务收入占___的比重。
A. 营业额
B. 总资本
C. 全部利润
D. 销售收入总额
【单选题】
以下关于流动比率和企业资产的变现能力关系的说法中，正确的是___
A. 流动比率越高，说明企业资产的变现能力越强
B. 流动比率越高，说明企业资产的变现能力越弱
C. 流动比率越低，说明企业资产的变现能力越强
D. 流动比率与企业资产的变现能力没有关系
【单选题】
以下各项中不能反映应收账款的营运能力的是___。
A. 应收账款周转率
B. 应收账款回收期
C. 应收账款账龄
D. 应收账款余额
【单选题】
以下不属于所有者权益项目的是___
A. 未分配利润
B. 资本公积
C. 盈余公积
D. 流动资产
【单选题】
法人贷款业务，申请信贷业务的客户应当是经___核准登记的企业（事业）法人其他经济组织。
A. 工商行政管理机关（或主管机关）
B. 国税局
C. 人民银行
D. 农村信用社
【单选题】
下列因素与借款人的偿债能力无关的是___。
A. 盈利能力
B. 营运能力
C. 资本结构
D. 产品竞争力
【单选题】
下列关于资产负债率的论述中，错误的是___
A. 资产负债率=负债合计÷资产合计×100%
B. 资产负债率=资产合计÷负债合计×100%
C. 资产负债率反映项目各年负债水平、财务风险及偿债能力
D. 银行从债权安全的角度考虑，总希望借款人的负债水平低一点
【单选题】
下列公式中，不能反映存货周转速度的是___
A. 销货成本/平均存货余额×100%
B. 存货平均余额×计算期天数/销货成本
C. 计算期天数/存货周转次数
D. (期初存货余额+期末存货余额)/2
【单选题】
下列不属于资产负债表的基本内容的是___
A. 资产
B. 负债
C. 资本结构
D. 所有者权益
【单选题】
下列不属于企业财务状况风险的是___
A. 借款人在银行的存款有较大幅度下降
B. 应收账款异常增加
C. 流动资产占总资产比重下降
D. 短期负债增加适当，长期负债大量增加
【单选题】
所有者权益代表投资者对企业___所有权。
A. 全部资产
B. 全部负债
C. 净资产
D. 流动资产
【单选题】
商业银行对借款人最关心的就是其现在和未来的___。
A. 技术水平
B. 销售业绩
C. 偿债能力
D. 信息披露
【单选题】
一般企业贷款操作流程：___
A. 建立正式客户-评级-授信-申请贷款-发放贷款
B. 建立正式客户-授信-评级-申请贷款-发放贷款
C. 建立正式客户-申请贷款-评级-授信-发放贷款
D. 建立正式客户-申请贷款-授信-评级-发放贷款
【单选题】
借款人盈利能力的比率通过___反映。
A. 效率比率
B. 杠杆比率
C. 流动比率
D. 营业利润率
【单选题】
借款人还款能力的主要标志就是___。
A. 借款人的现金流量是否充足
B. 借款人的资产负债比率是否足够低
C. 借款人的管理水平是否很高
D. 借款人的销售收入和利润是否足够高
【单选题】
到的比率。___
A. 平均存货余额，销货收入
B. 销货收入，平均存货余额
C. 销货成本，平均存货余额
D. 平均存货余额，销货成本
【单选题】
反映客户长期偿债能力的比率是___
A. 流动比率
B. 资产负债率
C. 净利润率
D. 速动比率
【单选题】
___对客户盈利能力的持续增长和偿债能力的不断提高有着决定性的影响。
A. 现金比率
B. 借款人的资本结构
C. 营运能力
D. 借款人的经营业绩
【单选题】
以下关于现金类资产表述不正确的是___。
A. 速动资产扣除应收账款后的余额
B. 只包括货币资金
C. 最能反映客户直接偿付流动负债的能力
D. 现金比率越高，表明客户直接支付能力越强
【单选题】
___是指企业长期使用但没有实物形态的资产，包括土地使用权、专利权、商标权、商誉等。
A. 递延资产
B. 流动资产
C. 固定资产
D. 无形资产
【单选题】
在抵押期间，不论抵押物所生的是天然孳息还是法定孳息，由___来收取。
A. 抵押人
B. 质权人
C. 银行
D. 抵押权人
【单选题】
在贷款质押业务的风险中，最主要的风险因素是___。
A. 虚假质押风险
B. 司法风险
C. 汇率风险
D. 操作风险
