【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true？___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS？ ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands， it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
推荐试题
【单选题】
判定系数r2=0.8，说明回归直线能解释被解释变量总变差的：___
A. 80%
B. 64%
C. 20%
D. 89%
【单选题】
决定系数 是指___
A. 剩余平方和占总离差平方和的比重
B. 总离差平方和占回归平方和的比重
C. 回归平方和占总离差平方和的比重
D. 回归平方和占剩余平方和的比重
【单选题】
在由 的一组样本估计的，包含3个解释变量和截距项的线性回归模型中，计算的多重决定系数为0.85，则调整后的多重决定系数为___
【单选题】
如果两个经变量 与 间的关系近似地表现为，当 发生一个绝对量变动 时， 有一个固定的相对量 变动，则适宜配合的模型是___
【单选题】
模型 中， 的实际含义是___
A. 关于 的弹性
B. 关于 的弹性
C. 关于 的边际倾向
D. 关于 的边际倾向
【单选题】
在多元线性回归中，判定系数R2随着解释变量数目的增加而___
A. 减少
B. 增加
C. 不变
D. 变化不定
【单选题】
对两个包含的解释变量个数不同的回归模型进行拟合优度比较时，应比较它们的：___
A. 判定系数
B. 调整后判定系数
C. 标准误差
D. 估计标准误差
【单选题】
已知某一直线回归方程的判定系数为0.64，则解释变量与被解释变量的线性相关系数为___
A. 0.64
B. 0.8
C. 0.4
D. 0.32
【单选题】
对两个随机变量Y与X之间样本相关系数r，以下结论中错误的是___
A. 越接近于1，Y与X之间线性相关程度可能越高，样本容量越大，可能性越大。
B. 越接近于0，Y与X之间线性相关程度可能越弱，样本容量越大，可能性越大。
C. -1≤r≤1
D. 若r=0,则X与Y独立（没有直线关系）
【单选题】
已知对符合古典假定的、含有截距项的三元线性回归模型，用OLS估计的残差平方和为800，估计用的样本容量为24，则随机误差项的方差的无偏估计量的观察值为___。
A. 33.33
B. 40
C. 38.09
D. 36.36
【单选题】
t检验是根据t分布理论所作的假设检验，下列哪项可作t检验?___
A. 单个回归系数的显著性检验
B. 线性关系的总体显著性检验
C. 一阶线性自相关的显著性检验
D. 多个预测值与实际值之间差异的显著性检验
【单选题】
又已知t_0.025 (8)=2.306 (即对自由度为8的t分布，有P(t>2.306)=0.025) ,t_0.025 (10)=2.228 ,t_0.05 (8)=1.860 ,t_0.05 (10)=1.812，则在0.05的显著性水平下 ___
A. 截距显著为0，斜率显著为0
B. 截距显著为0，斜率显著不为0
C. 截距显著不为0，斜率显著为0
D. 截距显著不为0，斜率显著不为0
【单选题】
某一特定的 水平上，总体 分布的离散度越大，即 越大，则在置信度相同时___
A. 预测区间越宽，精度越低
B. 预测区间越宽，预测误差越小
C. 预测区间越窄，精度越高 C、预测区间越窄，预测误差越大
【单选题】
在线性回归模型中，若解释变量X_1,X_2的观测值成比例，则表明___
A. 数据矩阵X存在完全多重共线性
B. 数据矩阵X存在不完全多重共线性
C. 数据矩阵X不存在多重共线性
D. 解释变量X_1,X_2存在完全多重共线性
【单选题】
在线性回归模型中，若〖(X^' X)〗^(-1)存在，但不是对角阵，则表明___
A. 数据矩阵X存在完全多重共线性
B. 数据矩阵X存在不完全多重共线性
C. 数据矩阵X不存在多重共线性
D. 解释变量存在不完全多重共线性
【单选题】
在线性回归模型中，若〖(X^' X)〗^(-1)是对角阵，则表明___
A. 数据矩阵X存在完全多重共线性
B. 数据矩阵X存在不完全多重共线性
C. 数据矩阵X不存在多重共线性
D. 解释变量不存在多重共线性
【单选题】
在有截距项的三元线性回归模型中，若辅助回归X_i3=α_0+α_1 X_i1+α_2 X_i2+v_i ,i=1,2,⋯,n，且其中常数α_0,α_1,α_2不全为0，v_i全为0，则表明___
A. 数据矩阵X的第四列与前三列存在完全多重共线性
B. 数据矩阵X的第四列与前三列存在不完全多重共线性
C. 数据矩阵X的第四列与前三列不存在多重共线性
D. 解释变量X_1,X_2,X_3之间存在完全多重共线性
【单选题】
在有截距项的三元线性回归模型中，若辅助回归X_i3=α_0+α_1 X_i1+α_2 X_i2+v_i ,i=1,2,⋯,n，且其中常数α_0,α_1,α_2不全为0，v_i不全为0，则表明___
A. 数据矩阵X的第四列与前三列存在完全多重共线性
B. 数据矩阵X的第四列与前三列存在不完全多重共线性
C. 数据矩阵X的第四列与前三列不存在多重共线性
D. 解释变量X_1,X_2,X_3之间存在不完全多重共线性
【单选题】
在有截距项的三元线性回归模型中，若辅助回归X_i3=α_0+α_1 X_i1+α_2 X_i2+v_i ,i=1,2,⋯,n，且其中常数α_0,α_1,α_2全为0，则表明___
A. 数据矩阵X的第四列与前三列存在完全多重共线性
B. 数据矩阵X的第四列与前三列存在不完全多重共线性
C. 数据矩阵X的第四列与前三列不存在多重共线性
D. 解释变量X_1,X_2,X_3之间存在完全多重共线性
【单选题】
则表明___
A. 数据矩阵X的第四列与前三列不存在严重不完全多重共线性
B. 数据矩阵X的第三列与其它三列存在严重不完全多重共线性
C. 数据矩阵X的第四列与前三列之间的不完全多重共线性比X的第三列与其它三列之间的不完全多重共线性更严重
D. 解释变量X_1,X_2,X_3之间存在不完全多重共线性
【单选题】
在有截距项的三元线性回归模型中，若辅助回归X_i3=α_0+α_1 X_i1+α_2 X_i2+v_i ,i=1,2,⋯,n，且其中常数α_0,α_1,α_2不全为0，v_i全为0，则表明___
A. 模型参数的OLS估计不存在
B. β_3 的OLS估计不存在
C. β_3 的OLS估计有无穷多
D. Var(β ̂_3)趋于无穷大
【单选题】
则___
A. β_3 的OLS估计不存在
B. Var(β ̂_3)一定很大
C. β_3的t检验一定显著为0
D. 在显著性水平0.05下，如果β_3的t检验显著不为0，则〖P(β〗_3=0)≤0.05
【单选题】
与前三列正交时，参数的OLS估计记为γ ̂_0，γ ̂_1，γ ̂_2，γ ̂_3，则___
A. β_3 的OLS估计不存在
B. Var(β ̂_3)一定很大
C. Var(β ̂_3 )=20Var(γ ̂_3 )
【单选题】
线性模型Yi=β0+β1X1i+β2X2i+μi不满足哪一假定称为异方差现象?___
A. Cov(μi,μj)=0
B. Var(μi)=σ2
C. Cov(Xi,μi)=0
D. Cov(X1i,X2i)=0
【单选题】
加权最小二乘法克服异方差的主要原理是通过赋予不同误差的观测点以不同的权数，以提高估计精度，即：___
A. 重视大误差的作用，轻视小误差的作用
B. 重视小误差的作用，轻视大误差的作用
C. 重视小误差的作用，更重视大误差的作用
D. 轻视大误差的作用，更轻视小误差的作用
【单选题】
异方差性条件下普通最小二乘估计量是___
A. 无偏估计量
B. 有偏估计量
C. 有效估计量
D. 最佳无偏估计量
【单选题】
如果戈德菲尔德—匡特检验显著，则认为什么问题是严重的___
A. 异方差问题
B. 异常值
C. 变量关系非线性
D. 规律性扰动
【单选题】
经验认为，某个解释变量与其它解释变量间多重共线性严重的情况是这个解释变量的 ___
A. 大于1
B. 小于1
C. 大于10
D. 小于5
【单选题】
如果戈里瑟检验表明，普通最小二乘估计结果的残差 与 显著有关系|e_i |=2x_i+v_i，其中（ 满足线性模型的全部经典假设），则用加权最小二乘法估计模型参数时，∑▒〖w_i e_i^2 〗中的权数w_i应取为___
【单选题】
DW的取值范围是：___
A. -1≤DW≤0
B. -1≤DW≤1
C. -2≤DW≤2
D. 0≤DW≤4
【单选题】
根据20个观测值估计的结果，一元线性回归模型的DW=2.6,在α=0.05的显著性水平下查得样本容量n=20，解释变量k=1个时，dL=1.20,dU=1.41，则可以判断：___
A. 不存在一阶自相关
B. 存在正的一阶自相关
C. 存在负的一阶自相关
D. 无法确定
【单选题】
根据样本资料建立某消费函数如下： =100.50+0.45Xt+55.35D，其中C为消费，X为收入，虚拟变量D= ，所有参数均检查显著，则城市的消费函数为：___
A. =155.85+0.45Xt
B. =100.50+0.45Xt
C. =100.50+55.35D
D. =100.95+55.35D
【单选题】
根据样本资料建立的消费函数为 ，其中为消费，为收入，虚拟变量 ，所有参数均检验显著，则城镇家庭消费函数估计式为___
【单选题】
设消费函数为 ，其中虚拟变量 ，当统计检验表明下列哪项成立时，表示城镇家庭与农村家庭有一样的消费行为___
【单选题】
使用多项式方法估计有限分布滞后模型时，多项式 i=α0+α1i+α2i2…αnim的阶数m的确定方法为___
A. 事先给定
B. 通过逐步计算确定
C. 由模型自动生成
D. 随意定
【单选题】
对于模型：Yt=α+β0Xt+β1Xt-1+β2Xt-2+…+βiXt-i+μt，如果有βi=β0λi,0<λ<1，则称原模型为：___
A. 变参数模型
B. 有限分布滞后模型
C. 有限多项式滞后模型
D. 考伊克模型
【单选题】
在估计分布滞后模型参数时，一般是对分布滞后模型施加约束条件，以便减少模型中的参数。以下约束条件中，错误的是___
A. 系数值βi先增加后下降
B. 系数值βi先下降后增加再下降
C. 系数值βi按几何级数增加
D. 系数值βi按几何级数衰减
【单选题】
下面关于内生变量的表述，错误的是___
A. 内生变量都是随机变量
B. 内生变量受模型中其它内生变量的影响，同时又影响其它内生变量
C. 在结构式方程中，解释变量可以是前定变量，也可以是内生变量
D. 滞后内生变量与内生变量具有相同性质
