In which type of attack does an attacker overwrite an entry _答案

【单选题】

In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___

A. DHCP spoofing

B. ARP spoofing

C. CAM table overflow

D. MAC spoofing

查看试卷，进入试卷练习

微信扫一扫，开始刷题

答案

解析

暂无解析

相关试题

【多选题】

Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___

A. DDos

B. man-in-the-middle

C. worms

D. ARP spoofing

E. VLAN hopping

查看答案解析

【多选题】

choose four___

A. DHCP snooping ——————————blocks DHCP messages

B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports

C. IP sources guard ——————————provides layer 2 interface security with ports ACLs

D. Port security————————————mitigates MAC-address spoofing at the access interface

查看答案解析

【多选题】

choose four___

A. Step1————————run the system setup wizard

B. Step2————————add an authentication realm

C. Step3————————configure identity management

D. Step4————————configure directory group

查看答案解析

【多选题】

What are two advanced features of the Cisco AMp solution for endpoints ___

A. contemplation

B. foresight

C. sandboxing

D. reputation

E. reflection

查看答案解析

【多选题】

Which two characteristics of RADIUS are true？___

A. It encrypts only the password between user and server.

B. It uses TCP ports 1812/1813

C. It uses UDP ports 1812/1813.

D. It uses UDP port 49

E. It uses TCP port 49

查看答案解析

【多选题】

What are two challenges of using a network-based IPS？ ___

A. It is unable to determine whether a detected attack was successful

B. It requires additional storage and proce ssor capacity on syslog servers

C. As the network expands， it requires you to add more sensors.

D. It is unable to detect attacks across the entire network

E. It must support multiple operating systems.

查看答案解析

【多选题】

What are two default be haviors of the traffic on a zone-based firewall？___

A. Traffic within the self -zone uses an im plicit deny all.

B. All traffic between zones is implicitly blocked

C. Communication is allowed between interfadAss that are members of the same zone

D. Communication is blocked between interfaces that are members of the same zone

E. The CBAC rules that are configured on router interfaces apply to zone interfaces

查看答案解析

【多选题】

Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___

A. The on-premise model is easier and faster to de ploy than the cloud-based model

B. The on-premise model is more scalable than the cloud-based model

C. The on-premise model is generally less expensive than the cloud-based model

D. The on-premise model generally has less latency than the cloud- based model.

E. The on-premise model provides more control of the MDM solution than the cloud

查看答案解析

【多选题】

Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___

A. Activate Cisco ISE End point Protection Services to quarantine the device.

B. Add the mac address of the device to a list of blacklisted devices

C. Force the device to be locked with a PIN

D. Request revocation of the digital certificate of the device.

E. Reinstate a device that the user previously marked as lost or stolen

查看答案解析

【多选题】

Which two problems can arise when a proxy firewall serves as the gateway between networks？___

A. It can prevent content caching

B. It can limit application support

C. It is unable to prevent direct connections to other networks

D. It can cause reduced throughput.

E. It is unable to provide antivirus protection

查看答案解析

【多选题】

When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___

A. Use sCep

B. Install from SFTP server

C. Install from a file

D. Use Https

E. Use LDAP

查看答案解析

【多选题】

Which two are considered basic security principles？___

A. Accountability

B. Redundancy

C. High Availabilit

D. Integrity

E. Confidentiality

查看答案解析

【多选题】

Which two roles of the Cisco WSA are true？___

A. IPS

B. firewall

C. antispam

D. web proxy

E. URL filter

查看答案解析

【单选题】

Which next-generation encryption algorithm supports four variants？___

A. SHA-2

B. SHA-1

C. MD5

D. HMAC

查看答案解析

【单选题】

What aims to remove the abil ity to deny an action？___

A. Non-Repudiation

B. Accountability

C. Integrity

D. Deniability

查看答案解析

【单选题】

Which statements about the native VLAN is true ？___

A. It is susceptible to VLAN hopping attacks.

B. It is the Cisco recommended VLAN for switch-management traffic

C. It is most secure when it is a ssigned to vLAn 1.

D. It is the cisco-recomme nded vlan for user traffic

查看答案解析

【单选题】

There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___

A. 2

B. 3

C. 4

D. 5

查看答案解析

【单选题】

What does the dh group refer to？___

A. length of key for hashing C

B. length of key for encryption

C. tunnel lifetime key

D. length of key for key exchange

E. length of key for authentication

查看答案解析

【单选题】

Which path do you follow to enable aaa through the SDM ？___

A. Configure Tasks > AAA

B. Configure > Addition Authentication > AAA

C. Configure > AAA

D. Configure > Additional Tasks > AAA

E. Configure Authentication > AAA

查看答案解析

【单选题】

which technology cloud be used on top of an MPLS VPN to add confidentiality ？___

A. IPsec

B. 3DES

C. AES

D. SSL

查看答案解析

【单选题】

Which term is most closely aligned with the basic purpose of a SIEM solution? ___

A. Non-Repudiation

B. Accountability

C. Causality

D. Repudiation

查看答案解析

【单选题】

You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___

A. A SNMP View containing the SNMP managers

B. Routing Filter with the SNMP managers in it applied outbound

C. A standard ACL containing the SNMP managers applied to the SNMP configuration

D. A SNMP Group containing the SNMP managers

查看答案解析

【单选题】

Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___

A. BPDU filte

B. DHCP snooping

C. BPDU guard

D. Port Fast

查看答案解析

【单选题】

Which command enables port security to use sticky MAC addresses on a switch？___

A. switchport port-security violation restrict

B. switchport port-security mac-address sticky

C. switchport port-security violation protect

D. switchport port-security

查看答案解析

【单选题】

When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___

A. The change applies to the parent signature and the entire family of subsignatures

B. The change applies to the parent signature and the subsignature that you edit

C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit

D. Other signatures are unaffected， the change applies only to the subsignature that you dit

查看答案解析

【单选题】

Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___

A. antivirus scanning

B. policy-based

C. reputation-based

D. signature-based

查看答案解析

【单选题】

What action must you take on the ise to blacklist a wired device？___

A. Locate the switch through which the device is connected and push an a cl restricting all access by the device

B. Issue a CoA request for the de vice's mac address to each access switch in the network

C. Revoke the device's certificate so it is unable to authenticate to the network

D. Add the device's MAc address to a list of black listed devices

查看答案解析

【单选题】

Which type of firewall can perform deep packet inspection？___

A. packet-filtering firewall

B. stateless firewall

C. application firewall

D. personal firewall

查看答案解析

【单选题】

What is the main purpose of Control Plane Policing？___

A. to prevent exhaustion of route-proce ssor resources

B. to organize the egress packet queues

C. to define traffic classes

D. to maintain the policy map

查看答案解析

【单选题】

Which attack can be prevented by OSPF authentication？___

A. smurf attack

B. IP spoofing attack

C. denial of service attack

D. buffer overflow attack

查看答案解析

【单选题】

What is the best definition of hairpinning？___

A. ingress traffic that traverses the outbound interface on a device

B. traffic that enters one interface on a device and that exits through another interface

C. traffic that enters and exits a device through the same interface

D. traffic that tunnels through a device interface

查看答案解析

【单选题】

Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___

A. authPriv

B. authNo Priv

C. noAuthNoPriv

D. NoauthPriv

查看答案解析

【单选题】

You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___

A. Create a whitelist and manually add the approved addresses.

B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others

C. Edit the dynamic blacklist to remove the approved addresses

D. Disable the dynamic blacklist and create a static blacklist in its place

查看答案解析

【单选题】

When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___

A. dynamic source NAT that uses an IP ad dress as a mapped source

B. static destination NAT that uses a subnet as a real de stination

C. dynamic source NAT that uses a range as a mapped source

D. static destination NAT that uses a subnet as a real source

查看答案解析

【单选题】

Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___

A. dynamic NAT

B. source identity NAT

C. dynamic PAT

D. identity twice NAT

查看答案解析

【单选题】

Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___

A. CTA

B. DCA

C. AMP

D. DLP

查看答案解析

【单选题】

Refer to the exhibit. What is the effect of the given configuration？___

A. It establishes the preshared key for the switch

B. It establishes the preshared key for the firewall.

C. It establishes the preshared key for the Cisco ISE appliance

D. It establishes the preshared key for the router.

查看答案解析

【多选题】

What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___

A. the type of analysis the iS will perform

B. the amount of bandwidth available

C. whether RX and TX signals will use separate ports

D. the way in which media errors will be handled

E. the way in which dropped packets will be handled

查看答案解析

【多选题】

What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___

A. third-party proxies

B. Cisco Catalyst platforms

C. Cisco NAC Agent

D. hosted PAC files

E. CiSco ISE

查看答案解析

【多选题】

Which three descriptions of RADIUS are true？ ___

A. It uses TCP as its transport protocol.

B. Only the password is encrypted

C. It supports multiple transport protocols

D. It uses UDP as its transport protocol

E. It combines authentication and authorization

F. It separates authentication，authorization，and accounting

查看答案解析

推荐试题

【单选题】

账簿按___的不同，可分为序时账簿、分类账簿、备查账簿。

A. 用途

B. 外表形式

C. 格式

D. 启用时间

查看答案解析

【单选题】

在一定期间内连续记录若干项同类经济业务的会计凭证是___

A. 原始凭证

B. 累计凭证

C. 记账凭证

D. 一次凭证

查看答案解析

【单选题】

费用(成本)类账户的借方登记___

A. 增加发生额

B. 减少发生额

C. 增加或减少发生额

D. 本期结转数

查看答案解析

【单选题】

“预付账款”账户的期末余额等于___

A. 期初余额+贷方发生额—借方发生额

B. 期初余额+借方发生额—贷方发生额

C. 期初余额+贷方发生额+借方发生额

D. 期初余额—贷方发生额—借方发生额

查看答案解析

【单选题】

会计科目按其所反映的经济内容的详细程度分类，可以分为___

A. 二级科目和三级科目

B. 资产类、负债类、所有者权益类、成本类、损益类

C. 一级科目和二级科目

D. 一级科目和明细科目

查看答案解析

【单选题】

___是对会计要素的具体内容进行分类核算的项目

A. 会计对象

B. 会计科目

C. 会计账户

D. 明细分类账

查看答案解析

【单选题】

2关于会计账户的设置，下列哪个说法正确?___

A. 账户设置以会计科目为依据，并要服从会计报表对会计信息的要求

B. 账户设置以会计报表为依据，并要服从会计报表对总账和明细账的要求

C. 账户设置以会计主体为依据，并要服从会计主体对会计信息的要求

D. 账户设置以会计假设为依据，并要服从会计核算对货币计量的要求

查看答案解析

【单选题】

3企业在一定时期内实现的经营成果最终要归属于所有者权益，所以将___归类到所有者权益账户

A. 投资收益

B. 本年利润

C. 营业外收入

D. 主营业务收入

查看答案解析

【单选题】

4当年形成的会计档案，可有会计机构保管___

A. 半年

B. 一年

C. 两年

D. 五年

查看答案解析

【单选题】

5单位内部人员查阅会计档案时应由___批准后，办理查阅手续

A. 会计档案管理人员

B. 单位内部审计人员

C. 会计主管或单位负责人

D. 会计主管及单位负责人

查看答案解析

【单选题】

6一般企事业单位，由___共同派员监销

A. 单位档案机构

B. 会计机构

C. 单位审计机构

D. 单位档案机构会计机构

查看答案解析

【单选题】

7账簿按___的不同可分为序时分类账、分类账簿和备查账簿

A. 用途

B. 外形

C. 格式

D. 启用时间

查看答案解析

【单选题】

4当年形成的会计档案，可有会计机构保管___

A. 半年

B. 一年

C. 两年

D. 五年

查看答案解析

【单选题】

5单位内部人员查阅会计档案时应由___批准后，办理查阅手续

A. 会计档案管理人员

B. 单位内部审计人员

C. 会计主管或单位负责人

D. 会计主管及单位负责人

查看答案解析

【单选题】

6一般企事业单位，由___共同派员监销

A. 单位档案机构

B. 会计机构

C. 单位审计机构

D. 单位档案机构会计机构

查看答案解析

【单选题】

7账簿按___的不同可分为序时分类账、分类账簿和备查账簿

A. 用途

B. 外形

C. 格式

D. 启用时间

查看答案解析

【单选题】

8现金日记账应___发生额和余额，并与库存现金核对

A. 每月

B. 每十五天

C. 每三至五日

D. 每日

查看答案解析

【单选题】

9能提供某一类经济业务增减变化总括会计信息的账簿时___

A. 明细分类账

B. 总分类账

C. 日记账

D. 备查账

查看答案解析

【单选题】

10对账即核对账目，其主要内容包括___个方面

A. 账实核对账表核对账账核对

B. 账账核对账证核对账表核对

C. 账账核对账证核对表表核对

D. 账证核对账账核对账实核对

查看答案解析

【单选题】

9能提供某一类经济业务增减变化总括会计信息的账簿时___

A. 明细分类账

B. 总分类账

C. 日记账

D. 备查账

查看答案解析

【单选题】

10对账即核对账目，其主要内容包括___个方面

A. 账实核对账表核对账账核对

B. 账账核对账证核对账表核对

C. 账账核对账证核对表表核对

D. 账证核对账账核对账实核对

查看答案解析

【单选题】

11汇总记账凭证账务处理程序的特点是根据___登记总账

A. 记账凭证

B. 汇总记账凭证

C. 科目汇总表

D. 多栏式日记账

查看答案解析

【单选题】

12___不能反映各科目的对应关系，不便于分析和检查经济业务的来龙去脉，不便于插队账目

A. 记账程序账务处理程序

B. 汇总记账账务处理程序

C. 日记账账务处理程序

D. 科目汇总表账务处理程序

查看答案解析

【单选题】

13利得是与___无关的，会引起所有者权益增加的经济利益的流入

A. 所有者利润分配

B. 所有者投入资本

C. 经济利益流入

D. 所有者经济活动

查看答案解析

【单选题】

14下列不属于企业经济利益流入的是___

A. 销售收入

B. 租金收入

C. 为第三方代收的款项

D. 投资收入

查看答案解析

【单选题】

15下列属于财务成果的计算和处理的是___

A. 利润的计算

B. 债权债务的结算

C. 所得税的计算和缴纳

D. 亏损弥补

查看答案解析

【单选题】

资产按照预计从其持续使用和最终处置中所产生的未来净现金流入量的折现金额计量的会计计量属性是___

A. 重置成本

B. 公允价值

C. C.可变现净值

D. D.现值

查看答案解析

【单选题】

莫公司2009年10月31日的银行核对中发现，银行存款日记账账面余额为217300元，银行对账单余额254690元，经逐笔核查，发现有如下未达账项(1)企业未收，银行已收42100元，(2)企业已收，银行未收21600元(3)企业未付，银行已付5000元，(4)企业已付，银行未付21890元，调整后银行存款的余额应是___

A. 217300元

B. 254690元

C. 254400元

D. 276290元

查看答案解析

【单选题】

下列物资中，用抽样盘点发进行财产清查的是___

A. 成套设备

B. 低值易耗品

C. C.矿砂

D. D.汽车

查看答案解析

【单选题】

莫企业在财产清查中，盘亏材料10000元，经查实，属非常损失，报经批准后该项损失应计入___

A. 营业外支出

B. 其他应收款

C. 管理费用

D. 冲减营业外收入

查看答案解析

【单选题】

年度财务会计报告，应于年度终了后___内对外报送。

A. 6日

B. 15日

C. 60日

D. 4个月

查看答案解析

【单选题】

账户财务资产负债表分为左右两方，其中左为___

A. 资产项，按资产的流动性自大到小顺序排列

B. 资产项，按资产的流动性自小到大顺序排列

C. 负债及所有者权益项，一般按求偿权先后顺序排列

D. 负债及所有者权益项，一般按短期负债，长期负债，所有者权益顺序排

查看答案解析

【单选题】

甲企业将应收乙企业的50000元货款，改为对乙企业的股权投资，则该项经济业务将引起甲企业___

A. 资产与债权此增彼减

B. 资产与所有者权益此增彼减

C. 资产内部此增彼减总额不变

查看答案解析

【单选题】

下列各项能够引起企业所有者权益增加的是___

A. 提取盈余公积

B. 用盈余公积转增资本

C. 用盈余公积补亏

D. D.全年实现盈利

查看答案解析

【单选题】

“应收账款”账户的期初借方余额为8000元，本期贷方发生额为6000元，本期借方发生额为10000元，则期末余额为___

A. 借方4000元

B. 借方12000元

C. 贷方4000元

D. 贷方12000元

查看答案解析

【单选题】

25账户期末余额试算等式正确的是___

A. 期末借方余额=期初借方余额-期初贷方余额+期末贷方余额

B. 期末借方余额=期初借方余额-期初贷方余额-期末贷方余额

C. 期末借方余额=期初借方余额+期初贷方余额-期末贷方余额

D. 期末借方余额=期末贷方余额

查看答案解析

【单选题】

账户财务资产负债表分为左右两方，其中左为___

A. 资产项，按资产的流动性自大到小顺序排列

B. 资产项，按资产的流动性自小到大顺序排列

C. 负债及所有者权益项，一般按求偿权先后顺序排列

D. 负债及所有者权益项，一般按短期负债，长期负债，所有者权益顺序排

查看答案解析

【单选题】

甲企业将应收乙企业的50000元货款，改为对乙企业的股权投资，则该项经济业务将引起甲企业___

A. 资产与债权此增彼减

B. 资产与所有者权益此增彼减

C. 资产内部此增彼减总额不变

D. 负债，所有者权益内部此增彼减，总额不变

查看答案解析

【单选题】

“应收账款”账户的期初借方余额为8000元，本期贷方发生额为6000元，本期借方发生额为10000元，则期末余额为___

A. 借方4000元

B. 借方12000元

C. 贷方4000元

D. 贷方12000元

查看答案解析

【单选题】

25账户期末余额试算等式正确的是___

A. 期末借方余额=期初借方余额-期初贷方余额+期末贷方余额

B. 期末借方余额=期初借方余额-期初贷方余额-期末贷方余额

C. 期末借方余额=期初借方余额+期初贷方余额-期末贷方余额

D. 期末借方余额=期末贷方余额

查看答案解析