【多选题】
Which two are characteristics of RADIUS？___
A. Uses UDP ports 1812 /1813
B. Uses TCP port 49
C. Uses UDP port 49
D.
E. ncrypts only the password between user and server
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【多选题】
When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___
A. pfs
B. nat
C. reverse route
D. peer
E. transform-set
【多选题】
When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___
A. Install from SFTP server
B. Usehttps
C. Install from a file
D. Use LDAP
E. Use SCEP
【多选题】
Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___
A. access control
B. the shared secret key
C. authentication
D. authorization
E. accounting
【多选题】
Which two statements about routed firewall mode are true ？___
A. The firewall acts as a routed hop in the network
B. This mode conceals the presence of the firewall
C. The firewall requires a unique iP address for each interface
D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug
【多选题】
Which two statements describe DHCP spoofing attacks？___
A. They are used to perform man-in- the-middle attacks
B. They can access most network devices
C. They can modify the flow of traffic in transit. LNGKAIG
D. They protect the identity of ti attacker by masking the DHCP address
E. They can physically modify the network gateway
【多选题】
Which two types of VLANs using PVLANs are valid？___
A. isolated
B. promiscuous
C. backup
D. secondary
E. community
【多选题】
What are two limitations of the self-zone policies on a zone-based firewall？___
A. They are unable to block Https traffic
B. They restrict SNMP traffic.
C. They are unable to support Https traffic
D. They are unable to implement application inspection
E. They are unable to perform rate limiting
【多选题】
Which two descriptions of TACACS+ are true？ ___
A. The TACACS+ header is unencrypted
B. It combines a uthentication and authorization
C. It uses TCP as its transport protocol
D. Only the password is encrypted.
E. It uses UDP as its transport protocol.
【多选题】
Which two actions does an IPS perform？ ___
A. it spans the traffic
B. it reflects the traffic back to the sender
C. it encrypts the traffic
D. it terminates the user session or connection of the attacker
E. it reconfigures a device to block the traffic
【多选题】
In which form of fraud does an attacker try to learn information such as login credenti account information by ma squerading as a reputable entity or person in email， IM or communication channels ?___
A. phishing
B. Smurfit
C. Hacking
D. Identity Spoofing
【多选题】
Which two ESA services are available for incoming and outgoing mails ？___
A. anti-DoS
B. reputation filter
C. antispam
D. content filter
E. DLP
【多选题】
What are two reasons to recommend SNMPv 3 over SNMPv2？___
A. SNMPv3 is secure because you can configure authe ntication and privacy
B. SNMPv3 is insecure because it send in formation in clear text
C. SNMPv2 is insecure because it send information in clear text
D. SNMPv3 is a Cisco proprietary protocol
E. SNMPv2 is secure because you can configure authentication and privacy
【多选题】
Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___
A. drop
B. inspect
C. queue
D. quarantine
【单选题】
Which security principle has been violated if data is altered in an unauthorized manner？___
A. accountability
B. confidentiality
C. availability
D. integrity
【单选题】
Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___
A. encryption
B. authentication
C. group
【单选题】
Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___
A. username Operator privilege 7 password cisco
B. username Operator privilege 1 password cisco
C. username Operator privilege 15 password cisco
D. username Operator password cisco privilege 15
【单选题】
Which EAP method authenticates a client against Active Directory without the use of client-side 802.1X certificates？___
A. EAP-TLS
B. EAP-MSCHAPv2
C. EAP-PEAP
D.
E. AP-GTC
【单选题】
What is a limitation of network-based IPS？___
A. It must be in dividually configured to support every operating system on the network.
B. It is most effective at the in dividual host level
C. It is unable to monitor attacks across the entire netw ork
D. Large installations require numerous sensors to fully protect the network
【单选题】
When would you configure the ip dhcp snooping trust command on a sw itch？___
A. when the switch is connected to a DHCP server
B. when the switch is working in an edge capacit
C. when the switch is connected to a client system
D. when the switch is serving as an aggregator
【单选题】
How does the 802. 1x supplicant communicate with the authentication server？___
A. The supplicant creates EAP packets and sends them to the authenticator, which encapsulates them into RADIUS and forwards them to the authentication server.
B. The supplicant creates RADIUS packets and sends them to the authe nticator, which encapsulates the m into EAP and forwards them to the a uthentication server.
C. The supplicant creates RADIUS packets and sends them to the authenticator, which translates them into eap and forwards them to the a ut hentication server
D. The supplicant creates
E. AP packets and sends them to the authe nticator, which translates them into radius and forwards them to the authentication server.
【单选题】
Which command do you enter to verify the phase I status of a VPN connection？___
A. sh crypto se ssion
B. debug crypto isakmp
C. sh crypto isakmp sa
D. sh crypto ipsec sa
【单选题】
Refer to the exhibit. what is the e ffect of the given configuration？___
A. It enables authentication，
B. It prevents keychain authentication.
C. The two routers receive normal updates from one another.
D. The two device s are able to pass the message digest to one another.
【单选题】
Which command can you enter to configure OSPF to use hashing to authenticate routing updates？___
A. ip ospf aut hentication message-digest
B. neighbor 192 168.0 112 cost md5
C. ip ospf priority 1
D. ip ospf aut hentication-key
【单选题】
Which command can you enter to verify the status of Cisco lOS Resilient Configuration on a Cisco router?___
A. show secure bootset
B. secure boot-image
C. show binary file
D. ure boot-config
【单选题】
A user on your network inadvertently activates a botnet program that was received as an emai attachment. Which type of mechanism does Cisco Firepower use to detect and block only the botnet attack？___
A. network-based access control rule
B. reputation-based
C. user-ba sed access control rule
D. botnet traffic filter
【单选题】
What does the policy map do in CoPP？___
A. defines service parameters
B. defines packet selection parameters
C. defines the packet filter
D. define s the action to be performed
【单选题】
How is management traffic isolated on a Cisco ASR 1002？___
A. Traffic isolation is done on the vlan level
B. There is no management traffic isolation on a Cisco ASR 1002
C. Traffic is isolated based upon how you configure routing on the device
D. The management interface is configured in a special vRF that provides traffic isolation from the default routing table
【单选题】
Which statement about NaT table evaluation in the asa is true？___
A. After-auto NAT polices are appl d first
B. Manual NAT policies are applied first
C. the asa uses the most specific match
D. Auto NAT policies are applied first
【单选题】
Which information can you display by executing the show crypto ipsec sa command？___
A. ISAKMP SAs that are established between two peers
B. recent changes to the IP address of a peer router
C. proxy infor mation for the connection between two peers
D. IPsec SAs established between two peers
【单选题】
How can you prevent NAT rules from sending traffic to incorrect interfaces？___
A. Assign the output interface in the NAT statement
B. Add the no-proxy-arp command to the nat line.
C. Configure twice NAT instead o bject NAT. 5
D. Use packet-tracer rules to reroute misrouted NAT entries.
【单选题】
What term can be defined as the securing， control， and identification of digital data？___
A. cryptography
B. crypto key
C. cryptoanalysis
D. cryptology
【单选题】
Which feature in the dNS security module provide on and off network DNS protection？___
A. Data Loss Prevention
B. Umbrella
C. Real-time sandboxing
D. Layer-4 monitoring
【单选题】
Which a dverse consequence can occur on a network without BPDu guard ?___
A. The olde st switch can be elected as the root bridge
B. Unauthorized switches that are connected to the network can cause spanning-tree loops
C.
D. ouble tagging can cause the switches to experience CAM table overload.
【单选题】
What configuration is required for multitenancy ?___
A. shared infrastructure
B. multiple carriers
C. co-located resources
D. multiple separate zones
【单选题】
Why does ISE require its own certificate issued by a trusted CA？___
A. ISEs certificate allows guest devices to validate it as a trusted network device
B. It generates certificates for guest devices ba sed on its own certificate
C. It requests certificates for guest devices from the Ca server based on its own certificate.
D. ISE's certificate allows it to join the network security framework
【单选题】
which attack involves large numbers of ICMP packets with a spoofed source IP address？___
A. smurf attack
B. Teardrop attack
C. Nuke attack
D. SYN Flood attack
【单选题】
Which statement about interface and global access rules is true？___
A. Interface access rules are processed before global access rules.
B. Global access rules apply only to outbound traffic， but interface access rules can be applied in either direction
C. The implicit allow is proce ssed after both the global and interface access rules
D. If an interface access rule is applied， the global access rule is ignored
【单选题】
Which type of malicious software can create a back-door into a device or network？___
A. bot
B. worm
C. virus
D. Trojan
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset？___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns？___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
推荐试题
【多选题】
金兰保单笔起存金额为___元。
A. 5000
B. 1万
C. 2万
D. 无限制
【多选题】
目前的金兰保期限是___年，可提前支取。
【多选题】
金兰保存满一年后提前支取，每年支付利息日至销户日部分未满___个月的，按存入日挂牌活期利率支付。
【多选题】
金兰保是以___的整数倍递增。
A. 1000
B. 5000
C. 10000
D. 50000
【多选题】
王先生于2015年5月1日在我行存了5万元的金兰保产品，2016年2月1日前来销户，那么应如何计息___
A. 存入日活期利率
B. 销户日获取利率
C. 三个月
D. 六个月
【多选题】
“金兰保”单笔起存点为___万元，按照（）整数倍数递增。
A. 10000 1000
B. 20000 1000
C. 10000 10000
D. 20000 1000
【多选题】
客户要更改金兰保的入账需填写___
A. 个人客户综合开户申请表
B. 个人客户综合变更申请表
C. “金兰保”产品协议
D. “金兰保”产品协议
【多选题】
“金兰保”产品的申购期为___
A. 办理后1天
B. 办理后3天
C. 办理后7天
D. 无申购期
【多选题】
下列产品，不支持部分提前支取的是___
A. 金兰保
B. 金利保
C. 卡内约定转存的定期
D. 普通定期6个月
E. 金兰花保本理财产品
【多选题】
以下金额中，哪些可存我行的金兰保储蓄存款___
A. 1万
B. 2万
C. 2.5万
D. 5万
【多选题】
可以作为“金兰保”入账账户的有___
A. 兰花磁条卡
B. 兰花IC卡
C. 绍兴银行存折
D. 他行IC卡
【多选题】
关于金兰保利息入账账号维护，以下说法正确的有___
A. 客户必须提供有效身份证件，可以代理
B. 柜员需审核客户提供的“金兰保”定期存单信息，是否真实、完整
C. 客户需提供新绑定账户的相关凭证
D. 客户需填写《个人客户综合变更申请表》
【多选题】
代理人来办理金兰保后，柜员传票附件包括___
A. “金兰保”业务协议书
B. 金兰保存单
C. “金兰保”产品说明
D. 本人和代理人身份证复印件
【多选题】
关于金兰保业务描述正确的是___
A. 利息入账账号可维护，但客户必须提供有效身份证件，不可代理，仅本人可办理
B. 客户需提供新绑定账户的相关凭证（磁条卡、IC卡、存折），且只能绑定本人名下的账户
C. 若客户为转账销户，需提供入账账户凭证（卡、存折），且户名一致
D. 金兰保密码当日累计输错五次密码将锁定，必须做密码挂失
【多选题】
关于金兰保说法正确的有___
A. “金兰保”是个人定期储蓄存款
B. 每年付息、靠档计息，支取灵活，存款利息相对较高
C. 金兰保支持部分提前支取，靠档计息
D. 金兰保到期不自动转存
【多选题】
我行存在客户号的客户客户只开立金兰保存单不需要填写以下哪些表格___
A. 开户申请表
B. 金兰保产品说明书
C. 金兰保业务协议书
D. 变更申请书
【多选题】
以下储蓄创新产品中，可以由代理人办理的品种是___。
A. 金兰保
B. 金利保
C. 定存冠
D. 定利多
【多选题】
以下关于“金兰保”产品说法正确的有___
A. 如有需要，客户本人可以到开户网点凭本人身份证修改密码
B. 申请人办理“金兰保”产品时，需绑定在我行开立的个人结算账户用于每年利息入账
C. 金兰保”产品需本人带身份证到绍兴银行任一网点办理，不得代办
D. “金兰保”产品期满后逾期部分按照支取日挂牌公告的活期储蓄存款利率计息
【多选题】
金利保产品，单笔起步点为___元，按照（）元整数倍递增，存期()年。
A. 10000,10000,1
B. 1000,1000,1
C. 10000,1000,1
D. 1000,10000,6
【多选题】
金利保密码当日累计输错 5次，密码锁定，次日自动解锁，总计达___必须密码挂失。
A. 15次
B. 10次
C. 8次
D. 以上都错
【多选题】
“金利保”是一款___年期的人民币个人定期存款产品。
【多选题】
金利保到期当日销户金额小于5万，___提供户主身份证，若为代理人，（）提供代理人身份证。
A. 必需、无需
B. 无需、无需
C. 无需、必需
D. 必需、必需
【多选题】
金利保___存期适用于利率按支取日基准利率上浮40% 。
A. 一年
B. 3个月≤T<6个月
C. 6个月≤T<1年
D. T < 3个月
【多选题】
金利保如何靠档计息？(T表示天数)___
A. 1天≤T＜7天,1天通知存款,支取日基准利率上浮25%
B. 7天≤T＜3个月,7天通知存款,支取日基准利率上浮25%
C. 3个月≤T＜6个月,3个月整存整取,支取日基准利率上浮40%
D. 6个月≤T＜1年,6个月整存整取,支取日基准利率上浮40%
E. T=1年,1年整存整取,支取日基准利率上浮40%
F. T＞1年,1年整存整取,1年的部分按开户日基准利率上浮40%，超过1年的部分按支取日挂牌公告的活期储蓄存款利率
【多选题】
柜员为客户办理销户业务，下列哪项说法是正确的___
A. 客户必须提供有效身份证件
B. 柜员需审核存单关键信息是否完整、存单是否真实有效
C. 存款日期大于1天且小于7天，通知日期为销户当日的前一天
D. 存款日期大于等于七天且小于3个月，则通知日期为销户当日的七天前
【多选题】
以下可以代理办理的业务是___
A. 金利保
B. 短信开通
C. 手机银行
D. 定存冠
E. 金兰保
【多选题】
“金利保”的适用利率档级有___
A. 1天通知存款
B. 7天通知存款
C. 3个月整存整取
D. 6个月整存整取
【多选题】
关于金利保说法正确的有___
A. “金利保”是一款1年期的人民币个人定期存款产品
B. “金利保”单笔起存点为1万元，按照1万整数倍数递增
C. 金兰保支持全额提前支取，不支持部分提前支取，靠档计息；到期不自动转存
D. 某客户从2016年7月1日存入金利保，于2016年7月5日销户，该执行利为支取日当天的央行一天通知存款利率上浮25%
【多选题】
以下产品的开立哪个无需事先拥有我行个人活期账户（存折或银行卡）___
A. 金利保
B. 定存冠
C. 金兰保
D. 活期冠
【多选题】
T、目前定存冠的存期为___
A. 360天
B. 365天
C. 380天
D. 780天
【多选题】
定存冠提前支取的计息方法为___
A. 应付利息=持有存单本金×起息日（含）至提前支取日（含）实际天数×靠档利率÷360
B. 应付利息=持有存单本金×起息日（含）至提前支取日（含）实际天数×靠档利率÷365
C. 应付利息=持有存单本金×起息日（含）至提前支取日（不含）实际天数×靠档利率÷360
D. 应付利息=持有存单本金×起息日（含）至提前支取日（不含）实际天数×靠档利率÷365
【多选题】
定存冠存单挂失业务___书面挂失、书面解挂、挂失新开；（ ）口头挂失、电话挂失。
A. 不支持；不支持
B. 支持；支持
C. 支持；不支持
D. 不支持；支持
【多选题】
定存冠8号、9号、10号、11号产品的认购金额起点分别为___
A. 1万、1万、5万、10万
B. 1万、1万、5万、5万
C. 5万、5万、10万、10万
D. 2万、2万、5万、10万
【多选题】
“定存冠”产品，___,到期后 （ ）。如逾期支取，逾期天数按支取日我行对外挂牌公告的活期利率计息。
A. 支持部分提前支取, 自动转存
B. 不支持部分提前支取,不自动转存
C. 支持部分提前支取，不自动转存
D. 不支持部分提前支取，自动转存
【多选题】
AN.定存冠挂失办理网点为___
A. 任一网点
B. 定存冠办理网点
C. 借记卡办理网点
D. 以上说法都不正确
【多选题】
“定存冠”客户开户或销户申请都可委托代理人办理，代理人办理时须提供___，并按照我行相关业务管理规定执行。
A. 代理人有效身份证件
B. 被代理人有效身份证件
C. 代理人、被代理人有效身份证件
D. 被代理人有效身份证件、书面授权书
【多选题】
定存冠的最低认购起点金额是___万元。
【多选题】
对“定存冠"的描述正确的为___
A. 开户交易完成后，系统自动从申请人账户内扣除申请金额
B. 销户交易完成后其本金与利息会自动划转到原开户时存款转出的银行账户内
C. “定存冠”产品支持部分提前支取，到期后不自动转存
D. “定存冠”存单可以办理质押，根据我行相关定期存单质押的有关规定办理，质押期限不得大于存单到期日
【多选题】
办理以下定期存款业务需要出示本行银行卡或存折的为___
A. 金利保
B. 金兰保
C. 核心版“定存冠"
D. 整存整取
