【单选题】
default how does a zone based firewall handle traffic to add from the self zone？___
A. It permits all traffic without inspection
B. It inspects all traffic to determine how it is handled
C. It permits all traffic after inspection
D. It frops all traffic
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which command should beused to ena ble AAA Authentication to determine if a user can access the privilege command level？___
A. aaa authentication enable local
B. aaa authentication enable level=
C. aaa authentication enable method de fault
D. aaa authentication enable defa ult local
【单选题】
On an ASA， the policy indicates that traffic should not be translated is often referred to as which of the following？___
A. NAT zero
B. NAT forward
C. NAT nul
D. NAT allow
【单选题】
Which protocol offers data Integrity encryption， authentication， and anti-replay functions for IPSec VPN？___
A. ESP protocol
B. IKEv3 Protocol
C. AH protoco
D. IKEv1 Protocol
【单选题】
Which component offers a variety of security Solution， including firwall， IF Antivirus and antiphishing features？___
A. Cisco loS router
B. Cisco ASA 5500 Ser ies security appliance
C. Cisco ASA 5500 X series Next Gen Security appliance
D. Cisco 4200 series IPS appliance
【单选题】
Refer to the exhibit， A Network Secur ity administrator check the ASa firewall NAT policy table rith show nat command， which statement is fails？___
A. There are only reverse translation matches for the REAL SERvER object
B. First policy in the Section 1 is a dynamic nat entry defined in the object configuration
C. NAT policy in section 2 is static entry de fined in the object configuration
D. Translation in Section 3 used when a connection does not matches any entries in first two sections
【单选题】
What is true of an aSa in transparent mode ?___
A. It supports OSPF
B. It requires an IP address for each interface
C. It requires a management IP address
D. It allows the use of dynamic NaT
【单选题】
What is the effect of the ip scp server enable command？___
A. It references an access list that allows specific SCP servers
B. It allows the router to initiate requests to an SCP server
C. It allows the router to become an SCP server
D. It adds SCP to the list of allowed copy functions
【单选题】
How can you mitigate attacks in which the attacker attaches more than one vLan tag to a packet？___
A. Assign an access VLAN to every active port on the switch
B. Disable Ether Channel on the switch
C. Explicitly identity each VLAN allowed across the trunk
D.
E. nable transparent VTP on the switch
【单选题】
Which technology can you implement to centrally mitigate potential threats when users on your network download files that might be malicious？___
A. Enable file-reputation services to inspect all files that traverse the company network and block files with low reputation scores
B. Verify that the compa ny IpS blocks all known malicious website
C. Verity that antivirus software is installed and up to date for all users on your network
D. Implement URL filtering on the perimeter firewall
【单选题】
What is the most common implementation of PaT in a standard networked environment？___
A. configuring multiple external hosts to join the self zo ne and to communicate with one another
B. configuring multiple internal hosts to communicate outside of the network using the outside interface IP address
C. configuring multiple internal hosts to communicate outside of the network by using the inside interface IP address
D. configuring an any any rule to enable external hosts to communicate inside the network
【单选题】
Which component of a bYod architecture provides aAa services for endpoint access ?___
A. Integrated Services Router
B. access point
C. ASA
D. Identity Services
E. ngine
【单选题】
You are configuring a NAT rule on a Cisco ASA ,Which description of a mapped interface is true?___
A. It is mandatory for all firewall modes
B. It is optional in routed mode
C. It is optional in transparent mode
D. It is mandatory for ide ntity NAT only
【单选题】
Which description of the use of a private key is true ？___
A. The sender signs a message using the receivers private key
B. The sender signs a message using their private key
C. The sender encrypts a message using the receivers private key
D. The receiver decrypts a n15ssage using the sender's private key
【单选题】
Which mechanism does the FireAMP Connector use to avoid conflicts with other security applications such as antivirus products ?___
A. Virtualization
B. Containers
C. Sandboxing
D.
E. xclusions
【单选题】
Which network to pology de scribes multiple LANS in a gec? ___
A. SOHO
B. MAN
C. pan
D. CAN
【单选题】
Which statement represents a difference between an access list on an aSa versus an access list on a router？___
A. The asa does not support number access lists
B. The aSa does not support standard access list
C. The asa does not ever use a wildcard mask
D. The asa does not support extended access lists
【单选题】
Which command do you enter to verify the status and settings of an iKE Phase 1 tunnel？___
A. show crypto ipsec as output
B. show crypto isakmp
C. show crypto isakmp policy
D. show crypto ipsec transform
【单选题】
Which feature can help a router or switch maintain packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch？___
A. service Policy
B. Control Plane Policing
C. Policy Map
D. Cisco
E. xpress
F. orwarding
【单选题】
Which STP feature can prevent an attacker from becoming the root bridge by immediately shutting down the interface when it receives a BPDU？___
A. root guard
B. Port Fast
C. BPDU guard
D. BPDU filtering
【单选题】
Which technology can best protect data at rest on a user system？___
A. full-disk encryption
B. IPsec tunnel
C. router ACL
D. network IPS
【多选题】
Which two primary security concerns can you mitigate with a BYOD solution ？___
A. schedule for patching the device
B. securing access to a trusted corporate network
C. compliance with applicable policies
D. connections to public Wi-Fi networks
E. device tagging and invento
【多选题】
choose five___
A. MD5————————inserure
B. DES————————insercure
C. SDES———————legacy
D. SHA-1———————legacy
E. HMAC-MD5—————legacy
【多选题】
Which two characteristics of symmetric encryption are true？___
A. It uses digital certificates
B. It requires more resources than asymmetric ancryption
C. It uses the same key to enctypt and decrupt traffic
D. It uses a public key and a pricate key to encrypt and decrypt traffic.
E. It is faster than asymmetric encryption
【多选题】
which two characteristics of PVLAN are true？___
A. Promiscuous porta can communicate with PVLAN ports.
B. Isolated ports cannot communicate with other ports on the same VLAN
C. Community ports have to be a part of the trunk.
D. They require VTP to be enabled in server mode
E. PVLAN ports can be configured as Ether Channel ports
【多选题】
What are two options for running Cisco SDM?___
A. Running SDM from a mobile device
B. Running SDM from within CiscoWorks
C. Running SDM from a router's flash
D. Running SDM from the Cisco web porta
E. Running SDM from a PC
【多选题】
Which two options are the primary deployment modeles for mobile device management？___
A. multisite
B. cloud-based
C. on premises
D. hybrid cloud basedo
E. single site
【多选题】
Drag the recommendation on the left to the Cryptographic algorithms on the right， Options will be used more than once.___
A. Avoid——————————————DES，MD5
B. Legacy——————————————SDES，SHA1，HMAC-MD5
【多选题】
Which two are valid types of vLans using PVLANS ?___
A. Community VLAN
B. Backup VLAN
C. Secondary VLAN
D. Isolated VLAN
E. Isolated VLAN
【多选题】
Which two commands are used to implement Resilient lOS Configuration ___
A. Secure boot-config
B. copy running-config tftp
C. copy flash:ios bin tftp
D. copy running-config startup-config
E. secure boot-image
【多选题】
Which two types of firewalls work at layer 4 and above ？___
A. Stateful inspection
B. Network Address Translation
C. Circuit-Level gateway
D. Static packet filter
E. Application Level firewall
【多选题】
Which two default settings for port security are true ？___
A. Violation is Protect
B. Violation is Restrict
C. Violation is Shutdown
D. Maximum number of MAC addresses is 2
E. Maximum number of MAC addresses is 1
【多选题】
Which two are characteristics of RADIUS？___
A. Uses UDP ports 1812 /1813
B. Uses TCP port 49
C. Uses UDP port 49
D.
E. ncrypts only the password between user and server
【多选题】
When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___
A. pfs
B. nat
C. reverse route
D. peer
E. transform-set
【多选题】
When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___
A. Install from SFTP server
B. Usehttps
C. Install from a file
D. Use LDAP
E. Use SCEP
【多选题】
Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___
A. access control
B. the shared secret key
C. authentication
D. authorization
E. accounting
【多选题】
Which two statements about routed firewall mode are true ？___
A. The firewall acts as a routed hop in the network
B. This mode conceals the presence of the firewall
C. The firewall requires a unique iP address for each interface
D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug
【多选题】
Which two statements describe DHCP spoofing attacks？___
A. They are used to perform man-in- the-middle attacks
B. They can access most network devices
C. They can modify the flow of traffic in transit. LNGKAIG
D. They protect the identity of ti attacker by masking the DHCP address
E. They can physically modify the network gateway
【多选题】
Which two types of VLANs using PVLANs are valid？___
A. isolated
B. promiscuous
C. backup
D. secondary
E. community
【多选题】
What are two limitations of the self-zone policies on a zone-based firewall？___
A. They are unable to block Https traffic
B. They restrict SNMP traffic.
C. They are unable to support Https traffic
D. They are unable to implement application inspection
E. They are unable to perform rate limiting
【多选题】
Which two descriptions of TACACS+ are true？ ___
A. The TACACS+ header is unencrypted
B. It combines a uthentication and authorization
C. It uses TCP as its transport protocol
D. Only the password is encrypted.
E. It uses UDP as its transport protocol.
推荐试题
【判断题】
用户在激活请求中不带APN，也可以激活。
【判断题】
用网络工兵寻找网线Y端时候，蜂鸣器会根据和Y端网线的距离变化声音大小。
【判断题】
用一个光功率计在ODF的接收连接器上测量接收光功率，Y端发送功率值减去这个接收功率值就是这条光纤线路的衰减值。
【判断题】
用仪表进行误码测试时，可以在线测试和离线测试。
【判断题】
由于SDH设备的可维护性增强，相应的频带利用率比PDH要低。
【判断题】
由于多模光纤可传输多种模式信号使传输容量倍增，所以该光纤在长途传输中得到广泛应用。（）
【判断题】
有一条4M的ADSL宽带，通过仪表测试线路上的远端信噪比大小为 5.4dB，下行带宽可以达到4096kbps。
【判断题】
遇到联系不到或关机停机的用户，维护人员将直接上门，如用户不在家，以留纸条和发短信的形式联系用户
【判断题】
在ADM设备中，可利用软件一次从高速信号中分插出2Mb/s支路信号。
【判断题】
在DWDM系统中，我们希望设备的色散代价越大越好。
【判断题】
在Gb接口上，GPRS信令和用户数据在同一个传输平台上发送，不要求为信令分配专用的物理资源。
【判断题】
在ISO的OSI模型中，表示层能实现数据压缩功能。
【判断题】
在MA5610上使用的单板ASPB和ASRB，可以在MA5616上使用
【判断题】
在OSPF协议中规定骨干区域不能配置成STUB 区域，虚连接不能穿过STUB 区域
【判断题】
在PDH中，允许各支路信号之间不完全同步。
【判断题】
在SDH网中传送定时时，在SDH网元之间采用STM-N接口。
【判断题】
在SDH网中传送定时时，在SSU和SDH网元之间采用2048kb/s或2048kHz接口，首选2048kb/s接口。（）
【判断题】
在SDH系统中，专门有用于公务通信的字节。
【判断题】
在TCP/IP网络中，属于同一个子网络的主机的网络号相同
【判断题】
在WDM系统中，由于各信号是通过不同光波长携带的，所以彼此之间不会混淆。
【判断题】
在Windows中，PING命令的-n选项表示PING包的个数。
【判断题】
在WLAN之上采用VPN技术，可以进一步增强关键数据的安全性。
【判断题】
在半双工网络中，如果出现流量过大、网络拥塞时，使用发送PAUSE帧的方法来降低流量；而在全双工网络中则使用后退压力方法。
【判断题】
在处理网络故障时，如果因条件限制无法恢复全部业务，应遵循“语音业务优先，实时业务优先”的原则进行处理。
【判断题】
在创建BFD会话两端设备时，本地标识符和远端标识符需要分别Y应，即，本端的本地标识符与Y端的远端标识符相同，否则会话无法Y建立
【判断题】
在防静电工作区内，静电敏感器件应严格按防静电操作规范进行，为了提高生产效率，非静电敏感器件则不必按防静电操作规范进行。
【判断题】
在服务工作中不论遇到何种情况都不准顶撞、责备用户，不得Y用户流露出不满或不耐烦情绪，不得使用服务忌语；应忍耐克制，不与用户争辩。如发生服务现场不能解决的问题，应及时向主管负责人汇报，及时妥善处理
【判断题】
在各种类型的网络中以环形网可靠性最高，也因此环形网得到广泛应用。
【判断题】
在工作中不准接受客户的任何招待，不准利用工作之便索要或接受客户馈赠、报酬、回扣及各种名目的好处费。
【判断题】
在光纤通信系统中可以采用光的频分复用的方法来提高系统的传输容量。
【判断题】
在规模较大网络中，路由引入易引起路由环路问题，因此需要通过路由策略来实现路由环路避免。
【判断题】
在将低速支路信号复用成STM-N信号时经过2个步骤：映射、 复用。
【判断题】
在接入网中，如果全部由无源器件组成，不包括任何有源节点，则这种光接入网就是PON
【判断题】
在进行PON网络测试时，利用光纤识别器可以发现光纤故障所在。
【判断题】
在进行性能监视设置时，性能监视起始时间应设为与网元当前时间一致。
【判断题】
在两纤双向复用段环中，最多可包括16个能参与复用段倒换的网元。
【判断题】
在配置任何防火墙功能之前，都必须配置安全区域，才能针Y安全区域或者安全域间配置防火墙功能
【判断题】
在设备接收端如果检测到J1字节失配，业务肯定会中断。
