【单选题】
What is the maximum num ber of methods that a single method list can contain？___
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true？___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS？ ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands， it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
推荐试题
【单选题】
JZ-7型空气制动机单独制动阀在运转位时，单独制动阀供气阀关闭，排气阀（ ）。(1.0分)
A. 开启
B. 关闭
C. 半关闭
D. 半开启
【单选题】
制动距离指的是( )。(1.0分)
A. 越大 不变 两者无关
B. 最大减压量时的制动距离
C. 最小减压时的制动距离
D. 紧急制动时的距离
【单选题】
GK型三通阀紧急部是在紧急制动时产生相应的动作，实现（ ）变速充气。
A. 制动缸
B. 制动管
C. 副风缸
D. 制动机
【单选题】
下列哪项不是JZ-7型空气制动机单独制动阀试验项目（ ）。
A. 性能试验
B. 通路试验
C. 漏泄试验
D. 都不是
【单选题】
120-1型控制阀紧急活塞杆稳定限制孔为( )。(1.0分)
A. Ф1.0 mm
B. Ф1.2 mm
C. Ф1.8 mm
D. Ф2.5 mm
【单选题】
DK-1型制动机中109型分配阀的安定性是指常用制动时（ ）的压力空气不会逆流到列车管中去。(1.0分)
A. 总风缸
B. 工作风缸
C. 容积室
D. 列车管
【单选题】
CCB-Ⅱ型制动机在本机模式下，16号管增加的压力最大不超过（ ）。(1.0分)
A. 250±15kPa
B. 300±15kPa
C. 350±15kPa
D. 450±15kPa
【单选题】
120型控制阀加速缓解阀由( )、加速缓解膜板、活塞杆、橡胶密封圈、夹心阀、加速缓解阀弹簧、止回阀、止回阀簧、顶杆、加速缓解阀套等组成。(1.0分)
A. 主活塞
B. 加速缓解阀活塞
C. 递动杆
D. 稳定杆
【单选题】
JZ-7型空气制动机过充管内原有压力空气由（ ）缓慢排出。
A. 工作风缸
B. 均衡风缸
C. 过充风缸本身小孔
D. 紧急风缸
【单选题】
120型控制254 mm制动管充气限制缩堵孔为( )。(1.0分)
A. Φ1.2 mm
B. Φ1.5 mm
C. Φ1.8 mm
D. Φ1.9 mm
【单选题】
铁路贯彻实施《劳动法》，实行( )。(1.0分)
A. 集中管理
B. 行业管理
C. 行业分级管理
D. 行政管理
【单选题】
DK-1型制动机增加紧急放风阀加快了列车管在（ ）时的排风速度。
A. 常用制动
B. 初制动位
C. 缓解位
D. 紧急制动
【单选题】
润滑油中的水分和水溶性酸、碱含量高于规定值时，会对摩擦副产生（ ）作用。(1.0分)
【单选题】
JZ-7型空气制动机自动制动阀手柄置于（ ）时，重联柱塞阀凸轮得到一个降程。
A. 手柄取出位
B. 最大制动位
C. 运转位
D. 过量减压位
【单选题】
平面精刮刀的楔角一般为( )。(1.0分)
A. 90°～92.5°
B. 95°左右
C. 97.5°左右
D. 85°～90°
【单选题】
DK-1型制动机中继阀的主鞲鞴左侧为中均室与均衡风缸联通，右侧与（ ）相通。(1.0分)
A. 列车管
B. 作用管
C. 工作风缸
D. 制动钢管
【单选题】
GK型三通阀减速部是由减速活塞、（ ）、减速弹簧等配件组成。
A. 减速膜板
B. 减速螺栓
C. 减速涨圈
D. 减速器
【单选题】
齿轮在轴上固定，当要求配合过盈量很大时，应采用( )(1.0分)
A. 敲击法
B. 压入法
C. 液压套合法
D. 冲击法
【单选题】
三通阀作用部（ ）堵塞是导致制动机不发生缓解作用的主要原因。(1.0分)
A. 缓解孔
B. 制动孔
C. 滴泪孔
D. 连通孔
【单选题】
货车集尘器的常见故障有集尘盒（ ），胶垫老化及螺栓松动等故障。(1.0分)
【单选题】
DK-1型电空制动控制器利用控制电路来间接控制（ ）的开放和关闭，使风路导通或切断。(1.0分)
A. 中继阀
B. 电空阀
C. 主阀
D. 紧急阀
【单选题】
（ ）是人们对荣誉和耻辱的根本看法和态度。(1.0分)
A. 人生观
B. 价值观
C. 世界观
D. 荣辱观
【单选题】
CCB-Ⅱ型制动机中均衡风缸的体积为（ ）立方英寸(1.0分)
【单选题】
DK-1型制动机中继阀充气性能试验时，列车管压力应快速上升至定压480kPa，其时间不大于（）S。
【单选题】
CCB-Ⅱ型制动机由微处理器IPM直接控制，产生紧急作用的阀为（ ）。(1.0分)
A. EMV紧急电磁阀
B. MVEM紧急电磁阀
C. PVEM紧急放风阀
D. MV16电磁阀
【单选题】
DK-1型空气制动阀的转换柱塞在空气位时，切断作用管通路，而开通（ ）的通路。
A. 工作风缸
B. 列车管
C. 均衡风缸管
D. 调压阀管
【单选题】
整体式向心滑动轴承的装配步骤一般分( )。(1.0分)
【单选题】
显示工作簿文件名，（ ）是中文电子表格启动时为新文件自动建立的文件名。(1.0分)
A. Delete
B. Excel
C. Book1
D. Enter
【单选题】
下列属于计算机输出设备的是（ ）。(1.0分)
A. 光盘驱动器
B. 键盘
C. 显示器
D. 鼠标
【单选题】
DK-1型制动机设有两个转换阀，一个用于电-空转换代号153，另一个用于客-货转换代号为（）。
A. 152
B. 155
C. 154
D. 151
【单选题】
弹簧中径与钢丝直径的比值C 称为弹簧系数，C 值越小，弹力越大，即弹簧越( )。(1.0分)
【单选题】
DK-1型制动机中继阀有三个作用位置，即：缓解位、制动位、（ ）。(1.0分)
A. 紧急制动位
B. 保压位
C. 中立位
D. 初制位
【单选题】
内径千分尺可测量最小孔径为( )。(1.0分)
A. 5mm
B. 50mm
C. 75mm
D. 100mm
【单选题】
在Windows XP默认环境中，中英文输入切换键是[（ ）+空格]。
A. Alt
B. Ctrl
C. Shift
D. Enter
【单选题】
120-1型控制阀紧急活塞杆上紧急室排气限制孔为( )。(1.0分)
A. Ф1.1 mm
B. Ф1.2 mm
C. Ф1.6 mm
D. Ф1.8 mm
【单选题】
轴瓦与轴承座、盖的装配和轴瓦孔的配刮是( )滑动轴承的装配要点。(1.0分)
A. 整体式
B. 部分式
C. 液体磨擦
D. 非液体磨擦
【单选题】
DK-1型制动机的紧急阀在紧急制动时，紧急阀参与（ ）排风，从而加快了列车管的排风速度。(1.0分)
A. 中继阀
B. 电动放风阀
C. 主阀
D. 紧急阀
【单选题】
剖分式滑动轴承装配时为达到配合紧密，保证有合适的过盈量，薄壁轴瓦的部分面应比轴承座的部分面略( )。
A. 低一些
B. 高一些
C. 平齐
D. 错开些
【单选题】
DK-1型电空制动控制器手柄由紧急位回运转位，列车管压力由0升至480kPa的时间（ ）S以内。(1.0分)
【单选题】
整体式向心滑动轴承是用( )装配的(1.0分)
A. 热胀法
B. 冷配法
C. 压入法
D. 爆炸法
