【单选题】
Which type of malicious software can create a back-door into a device or network？___
A. bot
B. worm
C. virus
D. Trojan
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset？___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns？___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
【单选题】
What is an advantage of split tunneling ？___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ？___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain？___
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true？___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS？ ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands， it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
推荐试题
【单选题】
4＃滤毒罐的防护对象是___。
A. 有机气体
B. 三苯
C. 二氧化碳
D. 硫化氢和氨
【单选题】
蒸汽灭火时站立位置正确操作是___。
A. 下风向
B. 上风向
C. 火源中心
D. 四周走动
【单选题】
如果在一定的范围内有毒气体浓度大于___%，滤毒罐是不可以使用的。
【单选题】
当气密过程中有泄漏，正确的做法是___。
A. 直接紧固
B. 继续升压
C. 降到安全压力紧固
D. 边升压边紧固
【单选题】
公用工程系统分别用___按最高操作压力进行气密试漏。
A. 蒸汽
B. 氮气
C. 本系统介质
D. 动力风
【单选题】
装置引蒸汽时防止“水击”的方法___。
A. 迅速开启蒸汽阀
B. 先开放空阀放尽冷凝水；再缓慢开启蒸汽阀
C. 开蒸汽阀时关闭放空阀
D. 先开蒸汽阀再打开末端放空阀
【单选题】
在蒸汽管道投用时首先要进行___操作。
A. 加热
B. 冷却
C. 小流量暖管
D. 大流量暖管
【单选题】
装置引蒸汽时，在蒸汽管线未端和低点处___放空阀（ ）蒸汽阀。
A. 先开、后开
B. 先关、再开
C. 先开、再关
D. 后开、先开
【单选题】
引蒸汽的时候，由于高温蒸汽与管道中的冷凝水接触，冷凝水升温，发生___，体积迅速膨胀，出现“汽锤”，使管道猛烈抖动，称为“水击”。
A. 化学反应
B. 相变
C. 爆炸
D. 冷凝
【单选题】
下列不是系统引氮气时所应注意的点是___。
A. 引氮气时注意安全，防止窒息
B. 氮气进装置后，凡需进入容器内必须要进行氧含量分析
C. 与氮气管线相连的其他工艺介质管线、容器用盲板或双阀隔离，双阀之间的放空打开
D. 引氮气前系统需进行干燥
【单选题】
下列关于低压系统吹扫的说法不正确的是___。
A. 管线的吹扫原则上要顺流程走向，先副线，后主线，顺管线向下或水平吹扫，避免向上吹扫
B. 先对各塔、容器吹扫，再向外吹附属设备及管线
C. 从外往塔、容器内吹扫，则必须先对入塔、容器管线吹扫干净，并在入塔、容器处拆开法兰排污，吹扫干净后再将法兰复位
D. 吹扫流程中的调节阀、孔板及流量计等元件应拆除
【单选题】
吹扫控制阀时，应___。
A. 先扫正线，后扫副线
B. 先扫副线，后扫正线
C. 正、副线同时扫
D. 没有特别原则
【单选题】
新装置开车水冲洗使用___。
A. 新鲜水
B. 循环水
C. 除盐水
D. 除氧水
【单选题】
塔的吹扫结束的标志正确的是___。
A. 塔顶放空无物料气出来
B. 塔底液面计上放空无物料气出来
C. 塔底放空无物料气出来
D. 塔底液面计下放空无物料气出来
【单选题】
引循环水时将冷换设备的操作不正确得是___。
A. 冷换设备出口前的放空阀打开将管道和冷换设备内的空气赶走
B. 引循环越慢越好
C. 先引介质再引循环水
D. 先将循环水冷换设备中垃圾吹扫掉
【单选题】
循环水进装置温度一般不会低于___。
A. 40℃
B. 30℃
C. 生活用水温度
D. 气温
【单选题】
循环水由于循环水冷却器的___要求，比新鲜水要求高。
A. 冷却
B. 防腐防垢
C. 流速
D. 回用
【单选题】
吹扫换热器时，应___。
A. 先扫正线，后扫副线
B. 先扫副线，后扫正线
C. 正、副线同时扫
D. 没有特别原则
【单选题】
酸性气带水对硫磺装置的影响，以下哪项不正确___。
A. 造成炉膛熄火
B. 系统压力升高
C. 增加设备腐蚀
D. 提高催化剂水解反应效果
【单选题】
蒸汽再沸器在投用时，为了防止出现“水锤”，___进行预热。
A. 略微开启进口阀门
B. 开足进口阀门
C. 略微开启排凝阀门
D. 开足排凝阀门
【单选题】
进入反应炉的酸性气主要成分是___。
A. 硫化氢、氨、烃
B. 硫化氢、二氧化硫、烃
C. 硫化氢、二氧化碳、氨
D. 硫化氢、烃
【单选题】
在开车过程中，蒸汽重沸器在投用时，引物料的速度___比较好。
A. 越快越好
B. 先快后慢
C. 越慢越好
D. 先慢后快
【单选题】
现场玻璃板液面与仪表显示液位一致是因为仪表液位与现场液位___。
A. 手阀位置相同
B. 同一根引出管
C. 材质相同
D. 介质密度相同
【单选题】
调节阀是通过改变___来改变阀的阻力系数，达到调节流量的目的。
A. 阀芯行程
B. 信号压力的大小
C. 电信号的大小
D. 以上全部
【单选题】
调节阀在输送粘性很大的介质时，可能造成阀___。
A. 可调比变小
B. 无信号
C. 单方向动作时迟钝
D. 往复动作时迟钝
【单选题】
溶剂发泡时，会有___现象。
A. 溶剂变成透明色
B. 吸收塔液位突然上升
C. 吸收塔压降增加
D. 再生塔塔底温度降低
【单选题】
停工过程中不得随地任意排放油品、瓦斯，排水沟地漏要疏通，___要封死盖严。
A. 放水管线
B. 下水井
C. 放火炬管线
D. 塔裙座
【单选题】
停工时必须要有___与工作票才可以拆装盲板。
A. 领导同意签字
B. 用火票
C. 进罐入塔票
D. 盲板清单
【单选题】
吹扫酸性气管道的时间要连续___小时以上。
【单选题】
玻璃板液面计是依据___原理工作的。
A. 连通器
B. 压力传递
C. 流体压差
D. 流体能量方程
【单选题】
快速切断阀是为了安全生产所装，因此当装置失风时阀应___，保证生产安全。
A. 全开
B. 全关
C. 开1/4
D. 开1/2
【单选题】
快速切断阀改手动时候，应有___现象。
A. 阀自动全开
B. 阀自动全关
C. 发出气缸泄压声音
D. 阀体剧烈抖动
【单选题】
___不是瓦斯带水的工艺现象。
A. 炉膛内压力下降
B. 炉膛内会产生回火
C. 炉膛内温度下降
D. 炉膛压力上升
【单选题】
下面不是燃料气停的现象是___。
A. 瓦斯压力下降
B. 瓦斯流量下降
C. 焚烧炉各部分温度下降
D. 燃料气控制阀全开
【单选题】
硫磺的自燃点为___℃。
A. 123
B. 207
C. 220
D. 248
【单选题】
硫磺着火最好采用___。
A. 隔离法
B. 窒息法
C. 冷却法
D. 保护法
【单选题】
仪表风中断后，风开阀现场如何进行操作___。
A. 改由上游阀控制
B. 由下游阀控制
C. 由副线阀控制
D. 按经验进行操作
