【单选题】
Which information can you display by executing the show crypto ipsec sa command？___
A. ISAKMP SAs that are established between two peers
B. recent changes to the IP address of a peer router
C. proxy infor mation for the connection between two peers
D. IPsec SAs established between two peers
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
How can you prevent NAT rules from sending traffic to incorrect interfaces？___
A. Assign the output interface in the NAT statement
B. Add the no-proxy-arp command to the nat line.
C. Configure twice NAT instead o bject NAT. 5
D. Use packet-tracer rules to reroute misrouted NAT entries.
【单选题】
What term can be defined as the securing， control， and identification of digital data？___
A. cryptography
B. crypto key
C. cryptoanalysis
D. cryptology
【单选题】
Which feature in the dNS security module provide on and off network DNS protection？___
A. Data Loss Prevention
B. Umbrella
C. Real-time sandboxing
D. Layer-4 monitoring
【单选题】
Which a dverse consequence can occur on a network without BPDu guard ?___
A. The olde st switch can be elected as the root bridge
B. Unauthorized switches that are connected to the network can cause spanning-tree loops
C.
D. ouble tagging can cause the switches to experience CAM table overload.
【单选题】
What configuration is required for multitenancy ?___
A. shared infrastructure
B. multiple carriers
C. co-located resources
D. multiple separate zones
【单选题】
Why does ISE require its own certificate issued by a trusted CA？___
A. ISEs certificate allows guest devices to validate it as a trusted network device
B. It generates certificates for guest devices ba sed on its own certificate
C. It requests certificates for guest devices from the Ca server based on its own certificate.
D. ISE's certificate allows it to join the network security framework
【单选题】
which attack involves large numbers of ICMP packets with a spoofed source IP address？___
A. smurf attack
B. Teardrop attack
C. Nuke attack
D. SYN Flood attack
【单选题】
Which statement about interface and global access rules is true？___
A. Interface access rules are processed before global access rules.
B. Global access rules apply only to outbound traffic， but interface access rules can be applied in either direction
C. The implicit allow is proce ssed after both the global and interface access rules
D. If an interface access rule is applied， the global access rule is ignored
【单选题】
Which type of malicious software can create a back-door into a device or network？___
A. bot
B. worm
C. virus
D. Trojan
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset？___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns？___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
【单选题】
What is an advantage of split tunneling ？___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ？___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain？___
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true？___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS？ ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands， it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
推荐试题
【填空题】
60. ___是中华民族永续发展的千年大计。必须树立和践行___的理念。人与自然是生命共同体，人类必须___、___、___。
【填空题】
61.中国特色大国外交要推动___，___。
【填空题】
62. ___是实现民族振兴、赢得国际竞争主动的战略资源。
【填空题】
63.“一带一路”是指：___。要着力把“一带一路”建成___、___、 ___、___、___。以“一带一路”建设为重点，坚持___和___并重，遵循___、___、___，加强创新能力开放合作，形成___、___的开放格局。
【单选题】
现金柜柜员现金上缴及预约时间为每日___以前。
A. 15:00
B. 15:30
C. 16:00
D. 16:30
【单选题】
柜员在核心系统中办理业务时，使用指纹与密码登录系统，密码为六位数字，应坚持不定期更换，最长时间不得超过___天。
【单选题】
柜员在核心系统中办理业务时，使用什么登录系统。___
A. 指纹
B. 密码
C. 指纹和密码
D. 指纹或密码
【单选题】
柜员密码过期，由（ ）重置, ( ) 授权。 ___
A. 会计主管 分支行管理员
B. 分支行管理员 分支行管理主管
C. 分支行管理主管 分管行长
D. 会计主管分管行长
【单选题】
会计主管每月至少对会计重要物品及机具的保管使用情况检查___次
【单选题】
发现以前年度错账应采用___调整的方法，不得更改决算报表。
A. 同方向红字
B. 反方向红字
C. 同方向蓝字
D. 反方向蓝字
【单选题】
资产类科目用以核算现金、贵金属、存放款项、___、投资、固定资产、无形资产、各项应收款项及其他资产等业务。
A. 所有者权益
B. 发行债券
C. 各类贷款
D. 营业费用
【单选题】
会计科目分为表内科目和表外科目，属于___的核算内容使用表内科目，属于或有事项和备查登记业务的核算内容使用表外科目。
A. 会计要素
B. 会计项目
C. 会计档案
D. 会计资料
【单选题】
___科目用以核算现金、贵金属、存放款项、各类贷款、投资、固定资产、无形资产、各项应收款项及其他资产等业务。
A. 资产类
B. 负债类
C. 所有者权益类
D. 资产负债共同类
【单选题】
可以满足对外公开披露会计信息的需要的会计科目是___
A. 一级科目
B. 二级科目
C. 三级科目
D. 核算代码组成。
【单选题】
表外科目划分为___、备查登记类二大类。
A. 开出信用证
B. 保函、
C. 开出提货担保等
D. 或有事项
【单选题】
以下不属于资产类科目的是___
A. ATM机现金
B. 存放在中央银行的备付金
C. 知识产权
D. 借款
【单选题】
以下不属于所有者权益类科目的是：___
A. 实收资本
B. 资本公积
C. 税金及汇兑损益
D. 本年利润及利润分配
【单选题】
表内科目划分为资产类、负债类、所有者权益类、___和损益五大类。
A. 资产负债共同类
B. 备查登记类
C. 税金及汇兑损益
D. 或有事项
【单选题】
依背书连续性的要求，票据第一次背书的背书人应当是___
A. 付款人
B. 出票人
C. 承兑人
D. 收款人
【单选题】
下列各项中，不符合票据和结算凭证填写要求的是___
A. 中文大写金额数字到“角”为止，在“角”后没有写“整”字
B. 票据的出票日期使用阿拉伯数字填写
C. 阿拉伯小写金额数字前填写了人民币符号
D. “3月3日”出票的票据，出票日期填写为“零叁月零叁日”
【单选题】
会计凭证按___分可分为原始凭证和记账凭证。
A. 填制程序和用途
B. 格式和使用范围
C. 形式
D. 管理方式
【单选题】
传票整理的情况以下正确的有___
A. 整理传票时，每张凭证要求提头或文字朝上，下沿对齐，不要折叠，并用大夹子固定，平摊放入塑封袋。
B. 有粘单的支票将粘单展开，有三张粘单以上的支票竖放；
C. 银行承兑汇票竖着放置，一份银承一个编号（包括粘单），粘单在两份以上的对折后用透明胶粘牢；存折要求打码在有账号户名号码的一面（首页）并摊开正放。
D. 作为附件的身份证复印件，其纸张大小要求为二分之一A4纸大小，客户自行提供的除外。
【单选题】
每个柜员的一个凭证包最多放置___张，若当天某个柜员业务凭证大于上述张数，应分册。
A. 450-500
B. 400-450
C. 350-400
D. 300-350
【单选题】
空白重要凭证是无面额经银行或单位填写金额并签章后，即具有支付款项功能的空白凭证。以下不属于重要空白凭证的是___
【单选题】
提交银行的各种结算凭证的大、小写金额、日期、___一律不准更改，其他内容更改时应由原制证人签章证明。
A. 付款人名称
B. 收款人名称
C. 用途
D. 付款地点
【单选题】
分册要求:两册凭证编号连续，封面只做___放在第一册上，同时在封面备注栏上写明第一册凭证编号1号—几号，第二册凭证编号几号—几号，以次类推。
【单选题】
凭证摆放顺序依次为___
A. 柜员现金重空轧扎账、柜员轧账单、有表内表外业务流水的凭证
B. 有表内表外业务流水的凭证、柜员轧账单、柜员现金重空轧扎账
C. 柜员轧账单、有表内表外业务流水的凭证、柜员现金重空轧扎账
D. 柜员轧账单、柜员现金重空轧扎账、有表内表外业务流水的凭证
【单选题】
会计凭证编制方式不同可分为___
A. 机打凭证和手工填写的凭证
B. 单位客户凭证和个人客户凭证
C. 自用凭证和外售凭证
【单选题】
凭证整理中有粘单的支票将粘单展开，有( )张粘单以上的支票竖放；银行承兑汇票竖着放置，一份银承一个编号（包括粘单），粘单在( )份以上的对折后用透明胶粘___
A. 两、三
B. 两、两
C. 三、三
D. 三、两
【单选题】
会计凭证按照其格式和使用范围可分为基本凭证和特定凭证。其中特定凭证的种类包括：___
A. 收款凭证、付款凭证和转账凭证
B. 一次凭证、累计凭证和汇总凭证
C. 贷款凭证、收费凭证和银行汇票
【单选题】
网点会计主管___至少一次对会计印章使用保管情况进行定期或不定期检查，并在会计检查系统中及时登记。
【单选题】
会计专用印章换人使用时必须办理交接手续，交接时（）在系统中通过1502重要物品移交交易，由（）授权通过完成交接手续。___
A. 移出柜员 会计主管
B. 移出柜员 接收柜员
C. 接收柜员 会计主管
D. 接收柜员 移出柜员
【单选题】
___用于签发银行本票
A. 本票专用章
B. 汇票专用章
C. 三省一市汇票专用章
D. 结算专用章
【单选题】
汇票专用章、华东三省一市汇票专用章、本票专用章、结算专用章、同城票据交换章需由___监交。
A. 会计主管
B. 其他柜员
C. 网点负责人
D. 不需要
【单选题】
___用于对外办理查询查复、委托收款、托收承付，及在查询查复书、我行贴现的承兑汇票委托收款背书、委托收款凭证或托收承付凭证上的盖章。
A. 业务公章
B. 业务清讫章
C. 结算专用章
D. 业务受理章
【单选题】
社区银行、外派点柜员若外带印章和凭证的，也需要列入审批范围，该审批至少___次，其间若有柜员代班或调换的需重新审批。
A. 每月一次
B. 每季一次
C. 每月二次
D. 每季二次
【单选题】
会计主管___至少对会计重要物品及机具的保管使用情况检查一次。
【单选题】
我行临柜人员领用未发行有价单证和重要空白凭证，应逐份复点，如发现重号、错号、跳号、多张或缺张等情况，___。
A. 应保留原捆、原把或原本，由经办员和支行负责人当场签章证明，并报告上级行
B. 可使用，但向支行会计科长报告
C. 可使用，但应将有关情况进行登计
D. 不得使用，入库保管
【单选题】
严格执行___制度，使用和管理印章人员不得同时使用或保管相关的单证。
A. 专人保管
B. 印证分离
C. 入库保管
D. 定期轮岗
【单选题】
重要物品管理必须坚持“___”的原则，各类重要物品均应封包入库保管。
A. 本人保管、共同负责
B. 专人保管、专人负责
C. 共同保管、共同负责
D. 共同保管、专人负责
