【多选题】
Which two ESA services are available for incoming and outgoing mails ？___
A. anti-DoS
B. reputation filter
C. antispam
D. content filter
E. DLP
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【多选题】
What are two reasons to recommend SNMPv 3 over SNMPv2？___
A. SNMPv3 is secure because you can configure authe ntication and privacy
B. SNMPv3 is insecure because it send in formation in clear text
C. SNMPv2 is insecure because it send information in clear text
D. SNMPv3 is a Cisco proprietary protocol
E. SNMPv2 is secure because you can configure authentication and privacy
【多选题】
Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___
A. drop
B. inspect
C. queue
D. quarantine
【单选题】
Which security principle has been violated if data is altered in an unauthorized manner？___
A. accountability
B. confidentiality
C. availability
D. integrity
【单选题】
Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___
A. encryption
B. authentication
C. group
【单选题】
Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___
A. username Operator privilege 7 password cisco
B. username Operator privilege 1 password cisco
C. username Operator privilege 15 password cisco
D. username Operator password cisco privilege 15
【单选题】
Which EAP method authenticates a client against Active Directory without the use of client-side 802.1X certificates？___
A. EAP-TLS
B. EAP-MSCHAPv2
C. EAP-PEAP
D.
E. AP-GTC
【单选题】
What is a limitation of network-based IPS？___
A. It must be in dividually configured to support every operating system on the network.
B. It is most effective at the in dividual host level
C. It is unable to monitor attacks across the entire netw ork
D. Large installations require numerous sensors to fully protect the network
【单选题】
When would you configure the ip dhcp snooping trust command on a sw itch？___
A. when the switch is connected to a DHCP server
B. when the switch is working in an edge capacit
C. when the switch is connected to a client system
D. when the switch is serving as an aggregator
【单选题】
How does the 802. 1x supplicant communicate with the authentication server？___
A. The supplicant creates EAP packets and sends them to the authenticator, which encapsulates them into RADIUS and forwards them to the authentication server.
B. The supplicant creates RADIUS packets and sends them to the authe nticator, which encapsulates the m into EAP and forwards them to the a uthentication server.
C. The supplicant creates RADIUS packets and sends them to the authenticator, which translates them into eap and forwards them to the a ut hentication server
D. The supplicant creates
E. AP packets and sends them to the authe nticator, which translates them into radius and forwards them to the authentication server.
【单选题】
Which command do you enter to verify the phase I status of a VPN connection？___
A. sh crypto se ssion
B. debug crypto isakmp
C. sh crypto isakmp sa
D. sh crypto ipsec sa
【单选题】
Refer to the exhibit. what is the e ffect of the given configuration？___
A. It enables authentication，
B. It prevents keychain authentication.
C. The two routers receive normal updates from one another.
D. The two device s are able to pass the message digest to one another.
【单选题】
Which command can you enter to configure OSPF to use hashing to authenticate routing updates？___
A. ip ospf aut hentication message-digest
B. neighbor 192 168.0 112 cost md5
C. ip ospf priority 1
D. ip ospf aut hentication-key
【单选题】
Which command can you enter to verify the status of Cisco lOS Resilient Configuration on a Cisco router?___
A. show secure bootset
B. secure boot-image
C. show binary file
D. ure boot-config
【单选题】
A user on your network inadvertently activates a botnet program that was received as an emai attachment. Which type of mechanism does Cisco Firepower use to detect and block only the botnet attack？___
A. network-based access control rule
B. reputation-based
C. user-ba sed access control rule
D. botnet traffic filter
【单选题】
What does the policy map do in CoPP？___
A. defines service parameters
B. defines packet selection parameters
C. defines the packet filter
D. define s the action to be performed
【单选题】
How is management traffic isolated on a Cisco ASR 1002？___
A. Traffic isolation is done on the vlan level
B. There is no management traffic isolation on a Cisco ASR 1002
C. Traffic is isolated based upon how you configure routing on the device
D. The management interface is configured in a special vRF that provides traffic isolation from the default routing table
【单选题】
Which statement about NaT table evaluation in the asa is true？___
A. After-auto NAT polices are appl d first
B. Manual NAT policies are applied first
C. the asa uses the most specific match
D. Auto NAT policies are applied first
【单选题】
Which information can you display by executing the show crypto ipsec sa command？___
A. ISAKMP SAs that are established between two peers
B. recent changes to the IP address of a peer router
C. proxy infor mation for the connection between two peers
D. IPsec SAs established between two peers
【单选题】
How can you prevent NAT rules from sending traffic to incorrect interfaces？___
A. Assign the output interface in the NAT statement
B. Add the no-proxy-arp command to the nat line.
C. Configure twice NAT instead o bject NAT. 5
D. Use packet-tracer rules to reroute misrouted NAT entries.
【单选题】
What term can be defined as the securing， control， and identification of digital data？___
A. cryptography
B. crypto key
C. cryptoanalysis
D. cryptology
【单选题】
Which feature in the dNS security module provide on and off network DNS protection？___
A. Data Loss Prevention
B. Umbrella
C. Real-time sandboxing
D. Layer-4 monitoring
【单选题】
Which a dverse consequence can occur on a network without BPDu guard ?___
A. The olde st switch can be elected as the root bridge
B. Unauthorized switches that are connected to the network can cause spanning-tree loops
C.
D. ouble tagging can cause the switches to experience CAM table overload.
【单选题】
What configuration is required for multitenancy ?___
A. shared infrastructure
B. multiple carriers
C. co-located resources
D. multiple separate zones
【单选题】
Why does ISE require its own certificate issued by a trusted CA？___
A. ISEs certificate allows guest devices to validate it as a trusted network device
B. It generates certificates for guest devices ba sed on its own certificate
C. It requests certificates for guest devices from the Ca server based on its own certificate.
D. ISE's certificate allows it to join the network security framework
【单选题】
which attack involves large numbers of ICMP packets with a spoofed source IP address？___
A. smurf attack
B. Teardrop attack
C. Nuke attack
D. SYN Flood attack
【单选题】
Which statement about interface and global access rules is true？___
A. Interface access rules are processed before global access rules.
B. Global access rules apply only to outbound traffic， but interface access rules can be applied in either direction
C. The implicit allow is proce ssed after both the global and interface access rules
D. If an interface access rule is applied， the global access rule is ignored
【单选题】
Which type of malicious software can create a back-door into a device or network？___
A. bot
B. worm
C. virus
D. Trojan
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset？___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns？___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
【单选题】
What is an advantage of split tunneling ？___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ？___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain？___
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
推荐试题
【单选题】
疝修补术后切口部位放置沙袋的主要作用是___
A. 减轻切口疼痛
B. 减少切口张力
C. 固定伤口敷料
D. 防止伤口出血
E. 防止切口裂开
【单选题】
轻度胸腰椎压缩性骨折的治疗除哪一项都是对的___
A. 卧硬板床
B. 功能锻炼
C. 石膏固定
D. 手术减压
E. 牵引
【单选题】
女性，24岁，患有慢性肛裂，在进行肛门检查时很可能同时看到___
A. 混合痔
B. 前哨痔
C. 直肠息肉
D. 直肠脱垂
E. 肛门周围红肿
【单选题】
关于术后肠内营养的优点，错误的是___
A. 符合营养吸收的解剖生理特点
B. 并发症少
C. 相对安全
D. 价格低廉
E. 起效快
【单选题】
病人小张，男性25岁，汽车司机，因继发性腹膜炎急诊手术，术后胃肠减压，请问出现下列哪种情况应停止胃肠减压___
A. 减压液为食物残渣
B. 减压液为淡黄色
C. 减压液为棕褐色
D. 减压液为鲜红色血液
E. 减压液为鲜绿色
【单选题】
肠梗阻术后正确的健康指导为___
A. 饮食无任何禁忌
B. 鼓励餐后运动以促进消化
C. 早期尽量卧床休息，不宜下床活动
D. 多食富含维生素食物
E. 低脂低盐饮食
【单选题】
胆道T管引流的患者胆道远端通畅的表现是___
A. 腹痛和黄疸减轻，引流量增多
B. 体温正常，引流量增多
C. 上腹胀痛，引流量骤减
D. 食欲好转，黄疸消退，引流量减少
E. 黄疸消退，引流量增多，食欲无变化
【单选题】
胃十二指肠病人出现大量、顽固、定时呕吐提示病人可能发生___
A. 急性穿孔
B. 幽门梗阻
C. 溃疡出血
D. 肠壁破裂
E. 癌变
【单选题】
遇到开放性气胸的患者应立即___
A. 封闭伤口
B. 清创处理后包扎
C. 在伤侧第二肋间穿刺放气
D. 止痛
E. 氧气吸入
【单选题】
患者，28岁，女性，产后第26天，主诉畏寒发热伴右乳疼痛3天，查右乳局部皮肤红肿痛，局部皮肤表面有脱屑，腋窝淋巴结肿大，压痛，问患者可能的诊断是___
A. 右乳急性化脓性乳腺炎
B. 右乳结核性炎
C. 右乳炎性癌
D. 右乳囊性增生囊内出血
E. 右乳纤维腺瘤伴腺瘤内出血
【单选题】
预防气性坏疽关键是___
A. 尽快彻底清创
B. 注射多价气性坏疽抗毒素
C. 全身使用大剂量抗生素
D. 增加机体抵抗能力
E. 应用类毒素
【单选题】
陈女士，左前臂骨折经治疗后准备出院，护士对她作出院前功能锻炼指导，下面那项内容应除外___
A. 活动范围由小到大
B. 活动次数始终二样，要固定，并坚持完成
C. 活动强度由弱至强
D. 活动时间由短至长
E. 被动活动与主动活动相结合
【单选题】
陈女士，左前臂骨折经治疗后准备出院，护士对她作出院前功能锻炼指导，下面那项内容应除外___
A. 关节僵硬
B. 患肢水肿
C. 血管痉挛
D. 肌肉萎缩
E. 深静脉血栓
【单选题】
患者，男性，40岁，左下肢肿胀伴疼痛四天，B超示左股静脉血栓形成，在家属扶助下步行入院，其最严重的并发症为___
A. 下肢溃疡
B. 下肢严重水肿，坏死
C. 丧失劳动能力
D. 肺动脉栓塞
E. 下肢静脉曲张
【单选题】
孟小姐，37岁，肛门手术后行肛门坐浴，水温应是___
A. 35℃
B. 37℃
C. 40～43℃
D. 50～55℃
E. 56～60℃
【单选题】
肾损伤患者在进行非手术治疗时，最重要的动态观察指标是___
A. 疼痛
B. 体温
C. 呼吸
D. 血尿颜色
E. 白细胞计数
【单选题】
有泌尿系结石的病人，饮食应注意___
A. 多吃土豆坚果
B. 尿酸盐结石者多吃动物肝肾
C. 磷酸盐结石者口服氯化铵
D. 饮水
E. 进半流食
【单选题】
甲亢患者术前准备，下列不符合手术指标的是___
A. 情绪稳定、睡眠好转
B. 体重增加
C. 脉搏100次／分
D. 甲状腺变硬缩小
E. BMR<+20%
【单选题】
以下补液原则不正确的是___
A. 先盐后糖
B. 先慢后快
C. 先晶后胶
D. 尿畅补钾
E. 液种交替
【单选题】
食管癌术后呼吸道护理正确的是___
A. 密切观察呼吸状态、频率、节律
B. 听诊双肺呼吸音是否对称
C. 气管插管拔管前，每3小时吸痰一次
D. 术后第3天鼓励患者深呼吸、吹气球
E. 痰多、咳嗽无力的患者出现痰阻塞现象时，应立即给予辅助护理
【单选题】
1岁男孩，阵发性哭闹，进乳后呕吐，排果酱样粪便，右中上腹扪及6cm×5cm×4cm腊肠样肿块，首先考虑___
A. 肠扭转
B. 肠道畸形
C. 蛔虫性肠梗阻
D. 肠套叠
E. 盲肠肿瘤
【单选题】
肿瘤放疗局部的皮肤有水疱时可局部使用___
A. 2%甲紫
B. 羊毛脂
C. 硼酸软膏
D. 氢化可的松霜
E. 0.2%薄荷淀粉
【单选题】
孟先生，52岁，毕Ⅱ式胃大部切除术后6日，右上腹突然剧痛，并出现腹膜刺激征，应考虑___
A. 胃出血
B. 十二指肠残端破裂
C. 吻合口梗阻
D. 吻合口近侧空肠段梗阻
E. 吻合口远侧空肠段梗阻
【单选题】
T管引流的作用不包括___
A. 促进炎症消退
B. 防止胆汁性腹膜炎
C. 减轻胆总管缝合处张力
D. 改善消化功能
E. 防止胆管狭窄、梗阻
【单选题】
颅内压增高患者每日液体的入量不宜超过___
A. 1000ml
B. 1500ml
C. 2000ml
D. 2500ml
E. 3000ml
【单选题】
抗休克纠正组织低灌注和缺氧的关键是___
A. 积极治疗原发病
B. 纠正酸中毒
C. 补充血容量
D. 应用血管扩张剂改善微循环
E. 抗凝治疗解除微细血栓
【单选题】
全肺切除术后护理注意事项中正确的是___
A. 嘱患者患侧卧位
B. 24小时输液量不超过3000ml，输液滴速20～30滴／分为宜
C. 一般不限制吗啡用量
D. 胸腔引流管一般呈钳闭状态
E. 可酌情放出适量的气体和液体，每次放液量不超过200ml
【单选题】
腰椎间盘突出症中发病率最高的节段是___
A. 腰1～2和腰2～3
B. 腰2～3和腰3～4
C. 腰3～4和腰4～5
D. 腰4～5和腰5骶1
E. 腰5骶1和骶1～2
【单选题】
甲亢病人一旦发生甲状腺危象，应及时处理，下列哪项措施是错误的___
A. 给氧
B. 建立静脉通路
C. 物理降温
D. 禁食含磷过高的食物
E. 口服或静脉滴注碘剂
【单选题】
胃溃疡合并幽门梗阻患者的术前准备中可减轻胃黏膜水肿的是___
A. 术前数日每晚用温等渗盐水洗胃
B. 纠正脱水
C. 纠正碱中毒
D. 术前给予流质饮食
E. 术前晚灌肠
【单选题】
患者，男性，41岁，左下肢肿胀伴疼痛四天，B超示左股静脉血栓形成，在家属扶助下步行入院，其最严重的并发症为___
A. 下肢溃疡
B. 下肢严重水肿，坏死
C. 丧失劳动能力
D. 肺动脉栓塞
E. 下肢静脉曲张
【单选题】
患者女性，68岁。转移性右下腹疼痛16小时，无恶心、呕吐。查体：体温38．5℃，无腹肌紧张，右下腹压痛、反跳痛不明显，结肠充气试验(+)，血常规：白细胞8．7×10／L，中性粒细胞84％，尿常规正常，该患者首选的治疗方法是___
A. 局部理疗
B. 禁食、置胃管
C. 手术
D. 应用抗生素
E. 中药治疗
【单选题】
化疗患者合并口腔真菌感染时，可使用___
A. 炉甘石溶液
B. 锡类散
C. 苏打水
D. 1%甘草水
E. 硼酸溶液
【单选题】
张小姐，20岁，恶心、呕吐，上腹部疼痛数小时后转为右下腹痛，体温38℃，右下腹有固定压痛点，有腹肌紧张及反跳痛，WBC15×10／L，首先考虑诊断是___
A. 急性阑尾
B. 急性胆囊炎
C. 胃、十二指肠穿孔
D. 急性化脓性胆管炎
E. 弥漫性腹膜炎
【单选题】
术后尿潴留的处理首选是___
A. 在无菌技术下导尿
B. 鼓励或诱导病人自行排尿
C. 耻骨上区热敷
D. 服用止疼药物
E. 针刺疗法
【单选题】
预防牵引针眼感染的措施正确的是___
A. 针眼处的分泌物不必处理
B. 针眼处每日滴生理盐水2次
C. 骨牵引针两端套上木塞或小瓶
D. 发现牵引针偏移时应立即矫正
E. 感染者应引流后，保持钢针原位牵引
【单选题】
原发性肝癌患者行肝叶切除术前用酸性液灌肠的目的是___
A. 减轻患者局部刺激
B. 避免血氨升高
C. 减少灌肠液用量
D. 提高清洁效果
E. 预防术后碱中毒
【单选题】
门静脉高压症分流术后下床活动时间通常为术后___
A. 8小时
B. 3天
C. 1周
D. 10天
E. 2周
【单选题】
女性，31岁，咳嗽、咳白色泡沫样痰1年，胸痛20天。胸片显示右肺下叶背段有一直径3cm分叶状阴影，密度不均匀并见钙化。最可能的诊断是___
A. 肺癌
B. 转移癌
C. 肺脓肿
D. 肺结核球
E. 肺良性肿瘤
【单选题】
门脉高压最危急的并发症是___
A. 食管、胃底静脉曲张破裂
B. 肝性脑病
C. 脾功能亢进
D. 严重顽固性腹水
E. 肝功能障碍
