【单选题】
How can you mitigate attacks in which the attacker attaches more than one vLan tag to a packet？___
A. Assign an access VLAN to every active port on the switch
B. Disable Ether Channel on the switch
C. Explicitly identity each VLAN allowed across the trunk
D.
E. nable transparent VTP on the switch
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which technology can you implement to centrally mitigate potential threats when users on your network download files that might be malicious？___
A. Enable file-reputation services to inspect all files that traverse the company network and block files with low reputation scores
B. Verify that the compa ny IpS blocks all known malicious website
C. Verity that antivirus software is installed and up to date for all users on your network
D. Implement URL filtering on the perimeter firewall
【单选题】
What is the most common implementation of PaT in a standard networked environment？___
A. configuring multiple external hosts to join the self zo ne and to communicate with one another
B. configuring multiple internal hosts to communicate outside of the network using the outside interface IP address
C. configuring multiple internal hosts to communicate outside of the network by using the inside interface IP address
D. configuring an any any rule to enable external hosts to communicate inside the network
【单选题】
Which component of a bYod architecture provides aAa services for endpoint access ?___
A. Integrated Services Router
B. access point
C. ASA
D. Identity Services
E. ngine
【单选题】
You are configuring a NAT rule on a Cisco ASA ,Which description of a mapped interface is true?___
A. It is mandatory for all firewall modes
B. It is optional in routed mode
C. It is optional in transparent mode
D. It is mandatory for ide ntity NAT only
【单选题】
Which description of the use of a private key is true ？___
A. The sender signs a message using the receivers private key
B. The sender signs a message using their private key
C. The sender encrypts a message using the receivers private key
D. The receiver decrypts a n15ssage using the sender's private key
【单选题】
Which mechanism does the FireAMP Connector use to avoid conflicts with other security applications such as antivirus products ?___
A. Virtualization
B. Containers
C. Sandboxing
D.
E. xclusions
【单选题】
Which network to pology de scribes multiple LANS in a gec? ___
A. SOHO
B. MAN
C. pan
D. CAN
【单选题】
Which statement represents a difference between an access list on an aSa versus an access list on a router？___
A. The asa does not support number access lists
B. The aSa does not support standard access list
C. The asa does not ever use a wildcard mask
D. The asa does not support extended access lists
【单选题】
Which command do you enter to verify the status and settings of an iKE Phase 1 tunnel？___
A. show crypto ipsec as output
B. show crypto isakmp
C. show crypto isakmp policy
D. show crypto ipsec transform
【单选题】
Which feature can help a router or switch maintain packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch？___
A. service Policy
B. Control Plane Policing
C. Policy Map
D. Cisco
E. xpress
F. orwarding
【单选题】
Which STP feature can prevent an attacker from becoming the root bridge by immediately shutting down the interface when it receives a BPDU？___
A. root guard
B. Port Fast
C. BPDU guard
D. BPDU filtering
【单选题】
Which technology can best protect data at rest on a user system？___
A. full-disk encryption
B. IPsec tunnel
C. router ACL
D. network IPS
【多选题】
Which two primary security concerns can you mitigate with a BYOD solution ？___
A. schedule for patching the device
B. securing access to a trusted corporate network
C. compliance with applicable policies
D. connections to public Wi-Fi networks
E. device tagging and invento
【多选题】
choose five___
A. MD5————————inserure
B. DES————————insercure
C. SDES———————legacy
D. SHA-1———————legacy
E. HMAC-MD5—————legacy
【多选题】
Which two characteristics of symmetric encryption are true？___
A. It uses digital certificates
B. It requires more resources than asymmetric ancryption
C. It uses the same key to enctypt and decrupt traffic
D. It uses a public key and a pricate key to encrypt and decrypt traffic.
E. It is faster than asymmetric encryption
【多选题】
which two characteristics of PVLAN are true？___
A. Promiscuous porta can communicate with PVLAN ports.
B. Isolated ports cannot communicate with other ports on the same VLAN
C. Community ports have to be a part of the trunk.
D. They require VTP to be enabled in server mode
E. PVLAN ports can be configured as Ether Channel ports
【多选题】
What are two options for running Cisco SDM?___
A. Running SDM from a mobile device
B. Running SDM from within CiscoWorks
C. Running SDM from a router's flash
D. Running SDM from the Cisco web porta
E. Running SDM from a PC
【多选题】
Which two options are the primary deployment modeles for mobile device management？___
A. multisite
B. cloud-based
C. on premises
D. hybrid cloud basedo
E. single site
【多选题】
Drag the recommendation on the left to the Cryptographic algorithms on the right， Options will be used more than once.___
A. Avoid——————————————DES，MD5
B. Legacy——————————————SDES，SHA1，HMAC-MD5
【多选题】
Which two are valid types of vLans using PVLANS ?___
A. Community VLAN
B. Backup VLAN
C. Secondary VLAN
D. Isolated VLAN
E. Isolated VLAN
【多选题】
Which two commands are used to implement Resilient lOS Configuration ___
A. Secure boot-config
B. copy running-config tftp
C. copy flash:ios bin tftp
D. copy running-config startup-config
E. secure boot-image
【多选题】
Which two types of firewalls work at layer 4 and above ？___
A. Stateful inspection
B. Network Address Translation
C. Circuit-Level gateway
D. Static packet filter
E. Application Level firewall
【多选题】
Which two default settings for port security are true ？___
A. Violation is Protect
B. Violation is Restrict
C. Violation is Shutdown
D. Maximum number of MAC addresses is 2
E. Maximum number of MAC addresses is 1
【多选题】
Which two are characteristics of RADIUS？___
A. Uses UDP ports 1812 /1813
B. Uses TCP port 49
C. Uses UDP port 49
D.
E. ncrypts only the password between user and server
【多选题】
When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___
A. pfs
B. nat
C. reverse route
D. peer
E. transform-set
【多选题】
When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___
A. Install from SFTP server
B. Usehttps
C. Install from a file
D. Use LDAP
E. Use SCEP
【多选题】
Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___
A. access control
B. the shared secret key
C. authentication
D. authorization
E. accounting
【多选题】
Which two statements about routed firewall mode are true ？___
A. The firewall acts as a routed hop in the network
B. This mode conceals the presence of the firewall
C. The firewall requires a unique iP address for each interface
D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug
【多选题】
Which two statements describe DHCP spoofing attacks？___
A. They are used to perform man-in- the-middle attacks
B. They can access most network devices
C. They can modify the flow of traffic in transit. LNGKAIG
D. They protect the identity of ti attacker by masking the DHCP address
E. They can physically modify the network gateway
【多选题】
Which two types of VLANs using PVLANs are valid？___
A. isolated
B. promiscuous
C. backup
D. secondary
E. community
【多选题】
What are two limitations of the self-zone policies on a zone-based firewall？___
A. They are unable to block Https traffic
B. They restrict SNMP traffic.
C. They are unable to support Https traffic
D. They are unable to implement application inspection
E. They are unable to perform rate limiting
【多选题】
Which two descriptions of TACACS+ are true？ ___
A. The TACACS+ header is unencrypted
B. It combines a uthentication and authorization
C. It uses TCP as its transport protocol
D. Only the password is encrypted.
E. It uses UDP as its transport protocol.
【多选题】
Which two actions does an IPS perform？ ___
A. it spans the traffic
B. it reflects the traffic back to the sender
C. it encrypts the traffic
D. it terminates the user session or connection of the attacker
E. it reconfigures a device to block the traffic
【多选题】
In which form of fraud does an attacker try to learn information such as login credenti account information by ma squerading as a reputable entity or person in email， IM or communication channels ?___
A. phishing
B. Smurfit
C. Hacking
D. Identity Spoofing
【多选题】
Which two ESA services are available for incoming and outgoing mails ？___
A. anti-DoS
B. reputation filter
C. antispam
D. content filter
E. DLP
【多选题】
What are two reasons to recommend SNMPv 3 over SNMPv2？___
A. SNMPv3 is secure because you can configure authe ntication and privacy
B. SNMPv3 is insecure because it send in formation in clear text
C. SNMPv2 is insecure because it send information in clear text
D. SNMPv3 is a Cisco proprietary protocol
E. SNMPv2 is secure because you can configure authentication and privacy
【多选题】
Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___
A. drop
B. inspect
C. queue
D. quarantine
【单选题】
Which security principle has been violated if data is altered in an unauthorized manner？___
A. accountability
B. confidentiality
C. availability
D. integrity
【单选题】
Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___
A. encryption
B. authentication
C. group
【单选题】
Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___
A. username Operator privilege 7 password cisco
B. username Operator privilege 1 password cisco
C. username Operator privilege 15 password cisco
D. username Operator password cisco privilege 15
推荐试题
【单选题】
正线的轨距变化率不大于___。
A. 1/1000
B. 1/500
C. 1/250
D. 1/200
【单选题】
其他线路的轨距变化率不大于___。
A. 2/1000
B. 1/300
C. 1/250
D. 1/200
【单选题】
全面捣鼓时，尖轨尖端及前后各___根枕轨枕，适当增加捣鼓力。
【单选题】
正线起道时，要求水平不超限，正线的误差不超过___mm.
【单选题】
停车场起道时，要求水平不超限，误差不超过___mm。
【单选题】
正线道岔起道后，要用___M弦线检查高低。
【单选题】
停车场道岔起道后，要用___M弦线检查高低。
【单选题】
线整改道岔前，一定要与___进行联系。
A. 工程师
B. OCC
C. DCC
D. 不用
【单选题】
车辆段整改道岔前，一定要与___进行联系。
A. 工程师
B. OCC
C. DCC
D. 不用
【单选题】
车辆段道岔中的尖轨开口标准值为___。
A. 150
B. 152
C. 155
D. 160
【单选题】
位于弦___的点的矢距叫做正矢
A. 起始处
B. 1/4处
C. 1/2处
D. 终点处
【单选题】
弦长___的矢距称为外矢距。
A. 起始处
B. 1/4处
C. 1/2处
D. 终点处
【单选题】
测量现场正矢时如果曲线方向很差，应先粗拨___，但应在新拨动部分经
【单选题】
为平衡离心力的作用，在曲线轨道上设置___超高。
【单选题】
超高与地铁列车速度的平方成___。
A. 正比
B. 反比
C. 不成比例
D. 倒数
【单选题】
高低是指钢轨顶面沿钢轨方向的___凹凸不平顺。
【单选题】
轨向是指钢轨头部内侧面沿钢轨方向的___凹凸不平顺。
【单选题】
车站站台段线路一般设在直线上，困难条件下可设在半径不小于___的曲线上。
A. 600m
B. 700m
C. 800m
D. 900m
【单选题】
破底清筛后，枕下清碎厚度不少于___。
A. 250mm
B. 300mm
C. 350mm
D. 400mm
【单选题】
清筛时，枕心处低于枕底___，枕头处低于枕底150mm，枕头土垅应筛至路基面。
A. 250mm
B. 200mm
C. 150mm
D. 100mm
【单选题】
清筛时，枕心处低于枕底100mm，枕头处低于枕底___，枕头土垅应筛至路基面。
A. 100mm
B. 150mm
C. 200mm
D. 250mm
【单选题】
车站站台计算长度内和道岔范围内___竖曲线。
A. 不得设置
B. 可设置一条
C. 可设置两条
D. 可设置三条
【单选题】
竖曲线离开道岔端部的距离不应小于___。
【单选题】
凡相邻坡段的坡度代数差大于___时，须设置竖曲线。
【单选题】
每20m竖曲线长度的变坡率，凸形应不大于___。
【单选题】
每20m竖曲线长度的变坡率，凹形应不大于___。
A. 0.5‰
B. 1‰
C. 1.5‰
D. 2‰
【单选题】
竖曲线半径应根据运营条件采用2000-10000m；困难条件下不小于___m。
A. 4000
B. 5000
C. 6000
D. 7000
【单选题】
线路设备状态评定时，是以___为单位。
【单选题】
每段无缝线路应设位移观测桩不少于___对
【单选题】
观察列车从第一个公里标到第二个公里标所用时间为1min，则行车速度是___km/h。
【单选题】
曲线某点的拨道量为6mm，其前后两点正矢的影响量为___。
A. 前后两点和为6mm
B. 前后两点各为-6mm
C. 前后两点和为3mm
D. 前后两点各为-3mm
【单选题】
铺设无缝线路，___需要单独布置轨条。
A. 桥梁
B. 隧道
C. 道口
D. 小半径曲线
【单选题】
长轨条的焊缝部位工作边用直尺测量，矢度不得大于___。
A. 0.3mm
B. 0.5mm
C. 1mm
D. 2mm
【单选题】
车站必须设在曲线时，半径应不小于___。
A. 500m
B. 600m
C. 800m
D. 1000m
【单选题】
线路综合维修周期依据___确定。
A. 通过总重
B. 年通过总重
C. 机车轴重
D. 车辆轴重
【单选题】
调高垫板应垫在大胶垫之间，一般情况下，每处调高垫板总厚度不超过___。
A. 8mm
B. 10mm
C. 15mm
D. 20mm
【单选题】
下列___不是DTⅥ2－1型扣件调整轨距垫
A. 6号
B. 10号
C. 12号
D. 2号
【单选题】
查照间隔及护背距离在心轨轨头宽___mm断面丈量。
A. 20～30
B. 10～30
C. 20～40
D. 30～50
