Which two types of firewalls work at layer 4 and above ？____答案

【多选题】

Which two types of firewalls work at layer 4 and above ？___

A. Stateful inspection

B. Network Address Translation

C. Circuit-Level gateway

D. Static packet filter

E. Application Level firewall

查看试卷，进入试卷练习

微信扫一扫，开始刷题

答案

解析

暂无解析

相关试题

【多选题】

Which two default settings for port security are true ？___

A. Violation is Protect

B. Violation is Restrict

C. Violation is Shutdown

D. Maximum number of MAC addresses is 2

E. Maximum number of MAC addresses is 1

查看答案解析

【多选题】

Which two are characteristics of RADIUS？___

A. Uses UDP ports 1812 /1813

B. Uses TCP port 49

C. Uses UDP port 49

E. ncrypts only the password between user and server

查看答案解析

【多选题】

When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___

A. pfs

B. nat

C. reverse route

D. peer

E. transform-set

查看答案解析

【多选题】

When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___

A. Install from SFTP server

B. Usehttps

C. Install from a file

D. Use LDAP

E. Use SCEP

查看答案解析

【多选题】

Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___

A. access control

B. the shared secret key

C. authentication

D. authorization

E. accounting

查看答案解析

【多选题】

Which two statements about routed firewall mode are true ？___

A. The firewall acts as a routed hop in the network

B. This mode conceals the presence of the firewall

C. The firewall requires a unique iP address for each interface

D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug

查看答案解析

【多选题】

Which two statements describe DHCP spoofing attacks？___

A. They are used to perform man-in- the-middle attacks

B. They can access most network devices

C. They can modify the flow of traffic in transit. LNGKAIG

D. They protect the identity of ti attacker by masking the DHCP address

E. They can physically modify the network gateway

查看答案解析

【多选题】

Which two types of VLANs using PVLANs are valid？___

A. isolated

B. promiscuous

C. backup

D. secondary

E. community

查看答案解析

【多选题】

What are two limitations of the self-zone policies on a zone-based firewall？___

A. They are unable to block Https traffic

B. They restrict SNMP traffic.

C. They are unable to support Https traffic

D. They are unable to implement application inspection

E. They are unable to perform rate limiting

查看答案解析

【多选题】

Which two descriptions of TACACS+ are true？ ___

A. The TACACS+ header is unencrypted

B. It combines a uthentication and authorization

C. It uses TCP as its transport protocol

D. Only the password is encrypted.

E. It uses UDP as its transport protocol.

查看答案解析

【多选题】

Which two actions does an IPS perform？ ___

A. it spans the traffic

B. it reflects the traffic back to the sender

C. it encrypts the traffic

D. it terminates the user session or connection of the attacker

E. it reconfigures a device to block the traffic

查看答案解析

【多选题】

In which form of fraud does an attacker try to learn information such as login credenti account information by ma squerading as a reputable entity or person in email， IM or communication channels ?___

A. phishing

B. Smurfit

C. Hacking

D. Identity Spoofing

查看答案解析

【多选题】

Which two ESA services are available for incoming and outgoing mails ？___

A. anti-DoS

B. reputation filter

C. antispam

D. content filter

E. DLP

查看答案解析

【多选题】

What are two reasons to recommend SNMPv 3 over SNMPv2？___

A. SNMPv3 is secure because you can configure authe ntication and privacy

B. SNMPv3 is insecure because it send in formation in clear text

C. SNMPv2 is insecure because it send information in clear text

D. SNMPv3 is a Cisco proprietary protocol

E. SNMPv2 is secure because you can configure authentication and privacy

查看答案解析

【多选题】

Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___

A. drop

B. inspect

C. queue

D. quarantine

查看答案解析

【单选题】

Which security principle has been violated if data is altered in an unauthorized manner？___

A. accountability

B. confidentiality

C. availability

D. integrity

查看答案解析

【单选题】

Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___

A. encryption

B. authentication

C. group

查看答案解析

【单选题】

Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___

A. username Operator privilege 7 password cisco

B. username Operator privilege 1 password cisco

C. username Operator privilege 15 password cisco

D. username Operator password cisco privilege 15

查看答案解析

【单选题】

Which EAP method authenticates a client against Active Directory without the use of client-side 802.1X certificates？___

A. EAP-TLS

B. EAP-MSCHAPv2

C. EAP-PEAP

E. AP-GTC

查看答案解析

【单选题】

What is a limitation of network-based IPS？___

A. It must be in dividually configured to support every operating system on the network.

B. It is most effective at the in dividual host level

C. It is unable to monitor attacks across the entire netw ork

D. Large installations require numerous sensors to fully protect the network

查看答案解析

【单选题】

When would you configure the ip dhcp snooping trust command on a sw itch？___

A. when the switch is connected to a DHCP server

B. when the switch is working in an edge capacit

C. when the switch is connected to a client system

D. when the switch is serving as an aggregator

查看答案解析

【单选题】

How does the 802. 1x supplicant communicate with the authentication server？___

A. The supplicant creates EAP packets and sends them to the authenticator, which encapsulates them into RADIUS and forwards them to the authentication server.

B. The supplicant creates RADIUS packets and sends them to the authe nticator, which encapsulates the m into EAP and forwards them to the a uthentication server.

C. The supplicant creates RADIUS packets and sends them to the authenticator, which translates them into eap and forwards them to the a ut hentication server

D. The supplicant creates

E. AP packets and sends them to the authe nticator, which translates them into radius and forwards them to the authentication server.

查看答案解析

【单选题】

Which command do you enter to verify the phase I status of a VPN connection？___

A. sh crypto se ssion

B. debug crypto isakmp

C. sh crypto isakmp sa

D. sh crypto ipsec sa

查看答案解析

【单选题】

Refer to the exhibit. what is the e ffect of the given configuration？___

A. It enables authentication，

B. It prevents keychain authentication.

C. The two routers receive normal updates from one another.

D. The two device s are able to pass the message digest to one another.

查看答案解析

【单选题】

Which command can you enter to configure OSPF to use hashing to authenticate routing updates？___

A. ip ospf aut hentication message-digest

B. neighbor 192 168.0 112 cost md5

C. ip ospf priority 1

D. ip ospf aut hentication-key

查看答案解析

【单选题】

Which command can you enter to verify the status of Cisco lOS Resilient Configuration on a Cisco router?___

A. show secure bootset

B. secure boot-image

C. show binary file

D. ure boot-config

查看答案解析

【单选题】

A user on your network inadvertently activates a botnet program that was received as an emai attachment. Which type of mechanism does Cisco Firepower use to detect and block only the botnet attack？___

A. network-based access control rule

B. reputation-based

C. user-ba sed access control rule

D. botnet traffic filter

查看答案解析

【单选题】

What does the policy map do in CoPP？___

A. defines service parameters

B. defines packet selection parameters

C. defines the packet filter

D. define s the action to be performed

查看答案解析

【单选题】

How is management traffic isolated on a Cisco ASR 1002？___

A. Traffic isolation is done on the vlan level

B. There is no management traffic isolation on a Cisco ASR 1002

C. Traffic is isolated based upon how you configure routing on the device

D. The management interface is configured in a special vRF that provides traffic isolation from the default routing table

查看答案解析

【单选题】

Which statement about NaT table evaluation in the asa is true？___

A. After-auto NAT polices are appl d first

B. Manual NAT policies are applied first

C. the asa uses the most specific match

D. Auto NAT policies are applied first

查看答案解析

【单选题】

Which information can you display by executing the show crypto ipsec sa command？___

A. ISAKMP SAs that are established between two peers

B. recent changes to the IP address of a peer router

C. proxy infor mation for the connection between two peers

D. IPsec SAs established between two peers

查看答案解析

【单选题】

How can you prevent NAT rules from sending traffic to incorrect interfaces？___

A. Assign the output interface in the NAT statement

B. Add the no-proxy-arp command to the nat line.

C. Configure twice NAT instead o bject NAT. 5

D. Use packet-tracer rules to reroute misrouted NAT entries.

查看答案解析

【单选题】

What term can be defined as the securing， control， and identification of digital data？___

A. cryptography

B. crypto key

C. cryptoanalysis

D. cryptology

查看答案解析

【单选题】

Which feature in the dNS security module provide on and off network DNS protection？___

A. Data Loss Prevention

B. Umbrella

C. Real-time sandboxing

D. Layer-4 monitoring

查看答案解析

【单选题】

Which a dverse consequence can occur on a network without BPDu guard ?___

A. The olde st switch can be elected as the root bridge

B. Unauthorized switches that are connected to the network can cause spanning-tree loops

D. ouble tagging can cause the switches to experience CAM table overload.

查看答案解析

【单选题】

What configuration is required for multitenancy ?___

A. shared infrastructure

B. multiple carriers

C. co-located resources

D. multiple separate zones

查看答案解析

【单选题】

Why does ISE require its own certificate issued by a trusted CA？___

A. ISEs certificate allows guest devices to validate it as a trusted network device

B. It generates certificates for guest devices ba sed on its own certificate

C. It requests certificates for guest devices from the Ca server based on its own certificate.

D. ISE's certificate allows it to join the network security framework

查看答案解析

【单选题】

which attack involves large numbers of ICMP packets with a spoofed source IP address？___

A. smurf attack

B. Teardrop attack

C. Nuke attack

D. SYN Flood attack

查看答案解析

【单选题】

Which statement about interface and global access rules is true？___

A. Interface access rules are processed before global access rules.

B. Global access rules apply only to outbound traffic， but interface access rules can be applied in either direction

C. The implicit allow is proce ssed after both the global and interface access rules

D. If an interface access rule is applied， the global access rule is ignored

查看答案解析

【单选题】

Which type of malicious software can create a back-door into a device or network？___

A. bot

B. worm

C. virus

D. Trojan

查看答案解析

推荐试题

【多选题】

用户最终分配的RB数由以下哪些因素决定？（）

A. 历史流量

B. PDSCH SINR

C. UE等级

D. 业务保障速率

查看答案解析

【多选题】

VoLTE中语音业务承载组合：SRB1+SRB2+2xAM DRB+1xUM DRB,其中UM DRB为( )的承载

A. QCI=2

B. QCI=8

C. QCI=9

D. QCI=1

E. QCI=5

查看答案解析

【多选题】

对于VOIP而言，系统在20ms中可以调度的用户数是多少个？（）

A. 80

B. 40

C. 320

D. 300

查看答案解析

【多选题】

目前LTE室外站点之间的切换事件是哪一种？（）

A. A2

B. A1

C. A4

D. A3

查看答案解析

【多选题】

NB-IoT中NSSS在偶数无线帧的第几个子帧上发送?（）

A. 5

B. 0

C. 9

D. 7

查看答案解析

【多选题】

NB-IOT支持DCI模式有（）。

A. Format N1

B. Format N0

C. Format N3

D. Format N2

查看答案解析

【多选题】

NB-IoT系统核心网主要包括（）网元？

A. SGW

B. MME

C. SCEF

D. PGW

查看答案解析

【多选题】

基于“开发者自行开发的服务端应用”的描述，指的是（）。

A. 北向应用

B. 智能应用

C. SoftRadio应用

D. 开发应用

查看答案解析

【多选题】

NB-IoT中下列说法错误的是（）。

A. 覆盖增强20dB

B. Inband部署是指NB-IoT载波部署在LTE工作带宽内

C. 下行采用15KHz OFDMA技术，每个信道15KHz，共12个子信道

D. 对时延要求敏感

查看答案解析

【多选题】

NB-IoT系统中存在以下哪些下行物理信道？（）

A. NPCFlCH

B. NPDSCH

C. NPHICH

D. NPDCCH

查看答案解析

【多选题】

5G 空中接口RLC子层的功能包括（）。

A. HARQ纠错

B. 分割．重分割

C. ARQ纠错

D. 重组RLC SDU

查看答案解析

【多选题】

中国厂商提出的非正交多址技术有哪些？（）

A. MUSA

B. SCMA

C. PDMA

D. NOMA

查看答案解析

【多选题】

以下场景适用于非竞争随机接入的有（）。

A. UE重建

B. UE初始接入

C. 切换

D. UE有上行数据发送，但上行失步

查看答案解析

【多选题】

当信道带宽中使用不同的numerology时，最小guardband的选择原则是（）。

A. 选择不同的numerology中最小的guardband

B. 选择不同的numerology中最大的guardband

C. 根据临近的numerology确定

D. 取不同numerology对应的guardband的平均值

查看答案解析

【多选题】

5G正在研发中，理论速度可达到:（）

A. 100Mbps

B. 50Mbps

C. 1Gbps

D. 500Mbps

查看答案解析

【多选题】

下列哪种PUCCH在频域上占用的资源大于1个PRB？（）

A. PUCCH format1

B. PUCCH format0

C. PUCCH format4

D. PUCCH format2D

查看答案解析

【多选题】

影响RSSI的主要是（）。

A. 跳线/馈线

B. 天线

C. TRM

D. 工艺

查看答案解析

【多选题】

更软切换和软切换的区别在于（）。

A. 更软切换发生在同一BSC里，分支信号在BSC做最大增益比合并

B. 更软切换发生在同一BTS里，分支信号在BTS做最大增益比合并

C. 更软切换发生在同一BSC里，分支信号在BSC做选择合并

D. 更软切换发生在同一BTS里，分支信号在BTS做选择合并

查看答案解析

【多选题】

CDMA中采用了三种分集技术，分别是：（）

A. 频率分集

B. 时间分集

C. 极化分集

D. 空间分集

查看答案解析

【多选题】

扩频通信的技术特点包括：（）。

A. 可进行多址通信

B. 抗干扰能力强

C. 抗多径干扰

D. 保密性好

查看答案解析

【多选题】

CDMA技术中，前向信道采用（）码扩频，该码具有正交特性。

A. 长码

B. PN码

C. 卷积码

D. Walsh码

查看答案解析

【多选题】

CDMA蜂窝系统将前向物理信道划分为多个逻辑信道，其中最多会有63个前向业务信道。（）

A. 错误

B. 正确

查看答案解析

【多选题】

一般（）效应和多径效应会引起快衰落。

A. 多普勒效应

B. 远近效应

C. 阴影效应

D. 呼吸效应

查看答案解析

【多选题】

SDN的核心是：（）

A. 自动化

B. 控制与转发分离

C. 可编程性

D. 开发性

查看答案解析

【多选题】

衰减器的主要用途是（）。

A. 调整电路中信号的大小

B. 改变相位

C. 改善阻抗匹配

D. 吸收射频功率

查看答案解析

【多选题】

影响基站上行覆盖的因素有（）

A. 天线分集增益

B. 基站静态接收灵敏度与多径接收灵敏度

C. 移动台接收灵敏度

D. 天线增益和挂高。

查看答案解析

【多选题】

声码器位于（）设备中。

A. 基站

B. 手机

C. 基站控制器

D. 交换机

查看答案解析

【多选题】

以下哪些器件是宽带直放站的内部器件？（）。

A. 载波选频模块

B. 低噪放

C. 电调衰减器

D. 双工滤波器

查看答案解析

【多选题】

LTE有( )个天线端口。

A. 4

B. 3

C. 5

D. 6

查看答案解析

【多选题】

下面哪些不属于组网拓扑切换？（）

A. 基于覆盖的切换

B. 频内切换

C. 频间切换

D. 基站内切换

查看答案解析

【多选题】

在X2handover中，由哪个网元负责通知SGW修改承载？( )

A. MME

B. eNodeB

C. PGW

D. HSS

查看答案解析

【多选题】

MIB消息由（）信道承载。

A. PUSCH

B. PDSCH

C. BCH

D. PDCCH

查看答案解析

【多选题】

S6a接口上的信令流程包括（）

A. 用户数据处理流程

B. 位置管理流程

C. 鉴权流程

D. 周期TA更新流程

查看答案解析

【多选题】

RRC连接建立失败一般包含如下哪几类原因？（）

A. 小区重选参数问题

B. 上行 RACH 的问题

C. 上行初始功控问题

D. 设备异常问题等

查看答案解析

【多选题】

NB-IoT技术优势中的低功耗可支持用户设备电池寿命平均保持多少年？（）

A. 5年

B. 2年

C. 8年

D. 10年

查看答案解析

【多选题】

NB-IoT技术优势中的大连接数每小区可连接多少用户?（）

A. 5万

B. 1万

C. 3万

D. 10万

查看答案解析

【多选题】

NB-IoT小区的覆盖等级参数可设置为（）。

A. 1

B. 0

C. 2

D. 3

查看答案解析

【多选题】

以下属于NB-IoT的系统消息SIB-NB的是（）。

A. SIB2-NB

B. SIB1-NB

C. SIB5-NB

D. SIB16-NB

查看答案解析

【多选题】

UE 通过读取（）获取NB-IoT窄带位置。

A. SIB2-NB

B. SIB1-NB

C. MIB-NB

D. SIB3-NB

查看答案解析

【多选题】

CE Level分为几个等级？（）

A. 2

B. 1

C. 3

D. 4

查看答案解析