【多选题】
What are two default be haviors of the traffic on a zone-based firewall？___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
【单选题】
1．三相刀开关的图形符号与交流接触器的主触点符号是___。
A. 一样的
B. 可以互换
C. 有区别的
D. 没有区别
推荐试题
【单选题】
2017 年新党章通过的日期是___。
A. 10 月 18 日
B. 10 月 20 日
C. 10 月 24 日
D. 10 月 27 日
【单选题】
盾，必须进行具有许多新的历史特点的___。
A. 伟大工程
B. 伟大斗争
C. 伟大实践
D. 伟大事业
【单选题】
___的历史使命。
A. 实现中华民族伟大复兴
B. 全面建成小康社会
C. 建设社会主义现代化强国
D. 实现社会主义现代化
【单选题】
决定性作用的是___。
A. 中国特色社会主义伟大事业
B. 党的建设新的伟大工程
C. 具有许多新的历史特点的伟大斗争
D. 中华民族伟大复兴的伟大梦想
【单选题】
激励中国共产党人不断前进的根本动力。正确答案为___
A. 谋幸福 谋未来
B. 谋生活 谋复兴
C. 谋幸福 谋复兴
D. 谋生活 谋未来
【单选题】
___是关系党的事业兴衰成败第一位的问题。
A. 制度问题
B. 方法问题
C. 道路问题
D. 法制问题
【单选题】
办好中国的事，关键在___。
A. 青年
B. 人民军队
C. 党
D. 动员和组织群众
【单选题】
只有从严管党治党，才能确保党在发展中国特色社会主义历史进程中始终成为___。
A. 执政的党
B. 坚强领导核心
C. 中流砥柱
D. 具有无产阶级先进性的党
【单选题】
毛泽东同志在总结中国革命胜利的经验时，把党的建设作为___提了出来。
A. 三大作风之一
B. 一条基本经验
C. 一条重要原则
D. 三大法宝之一
【单选题】
当前，我们正在进行___的伟大斗争，党肩负着历史重任，经受着时代考验。
A. 以反对和惩治腐败为中心
B. 以打赢局部战争为目标
C. 具有许多新的历史特点
D. 以反帝防修为中心
【单选题】
从严管党治党，首先就要坚定党员干部的___。
A. 组织观念
B. 理想信念
C. 纪律观念
D. 价值追求
【单选题】
员、干部出这样那样的问题，说到底是___。
A. 生活腐化、道德滑坡
B. 思想蜕化、私欲膨胀
C. 拜金主义、贪图享乐
D. 信仰迷茫、精神迷失
【单选题】
党要管党，首先是管好干部；从严治党，关键是___。
A. 从严治官
B. 从严执纪
C. 从严治吏
D. 从严问责
【单选题】
好干部要做到信念坚定、为民服务、___、敢于担当、清正廉洁。
A. 求真务实
B. 真抓实干
C. 勤政务实
D. 爱岗敬业
【单选题】
严明党的纪律，首要的是严明___纪律。
【单选题】
大兴___之风，坚持学习、学习、再学习，坚持实践、实践、再实践。
A. 调查研究
B. 学习
C. 实事求是
D. 解放思想
【单选题】
做县委书记就要做焦裕禄式的县委书记，始终做到心中有党、心中有民、心中有责、___。
A. 心中有律
B. 心中有法
C. 心中有戒
D. 心中有爱
【单选题】
《中国共产党问责条例》规定，对党的领导干部实行___。
A. 一次性问责
B. 阶段性问责
C. 任期问责
D. 终身问责
【多选题】
___著作中，是毛泽东思想的丰富和发展。
A. 《在中国共产党第七届中央委员会第二次全体会议上的报告》
B. 《论人民民主专政》
C. 《论十大关系》
D. 《关于正确处理人民内部矛盾的问题》
【多选题】
毛泽东思想是___，是党必须长期坚持的指导思想。
A. 马克思主义中国化的第一个重大理论成果
B. 马克思列宁主主义在中国的运用和发展
C. 被实践证明了的关于中国革命和建设的正确的理论原则和经验总结
D. 中国共产党集体智慧的结晶
【多选题】
新民主主义革命经历了___。
A. 大革命时期
B. 土地革命时期
C. 抗日战争时期
D. 解放战争时期
【多选题】
毛泽东思想科学体系的包括以下哪些内容有___。
A. 新民主主义革命理论
B. 社会主义革命和社会主义建设理论
C. 革命军队建设和军事战略的理论
D. 政策和策略的理论
【多选题】
毛泽东思想的活的灵魂___。
A. 实事求是
B. 群众路线
C. 独立自主
D. 统一战线
【多选题】
坚持实事求是，就要___。
A. 深入实际了解事物的本来面貌，把握事物内在的必然联系，按照客观规律办事
B. 清醒认识和正确把握我国基本国情
C. 不断推进实践基础上的理论创新
D. 坚持实事求是思想路线
【多选题】
群众路线，就是___，把党的正确主张变为群众的自觉行动。
A. 一切为了群众，一切依靠群众
B. 坚持以人民为中心的发展思想
C. 从群众中来，到群众中去
D. 毛泽东思想的活的灵魂
【多选题】
坚持群众路线，就要___。
A. 坚持人民是推动历史发展的根本力量
B. 坚持全心全意为人民服务的根本宗旨
C. 保持党同人民群众的血肉联系
D. 坚持以人民为中心的发展思想
【多选题】
如何科学认识毛泽东思想的历史地位___
A. 毛泽东思想是马克思主义中国化的第一个重大理论成果
B. 毛泽东思想是中国革命和建设的科学指南
C. 毛泽东思想是中国共产党和中国人民宝贵的精神财富
D. 毛泽东思想主要体现在他的著作中
【多选题】
配地位的重要矛盾是___。
A. 统治阶级和革命者的矛盾
B. 帝国主义和革命者的矛盾
C. 帝国主义和中华民族的矛盾
D. 封建主义和人民大众的矛盾
【多选题】
近代中国革命的根本任务是推翻___的统治。
A. 帝国主义
B. 封建主义
C. 官僚资本主义
D. 资本主义
【多选题】
___呼唤着新民主主义革命理论的诞生。
A. 旧民主主义革命的失败
B. 近代中国革命形势的发展
C. 世界形势的新变化
D. 中国共产党的成立
【多选题】
近代中国社会的性质和主要矛盾，决定过了中国革命的主要敌人是___。
A. 帝国主义
B. 封建主义
C. 官僚资本主义
D. 资本主义
【多选题】
官僚资本主义是___而发展起来的买办的封建的国家垄断资本主义。
A. 依靠帝国主义
B. 勾结封建势力
C. 利用国家政权力量
D. 勾结帝国主义
【多选题】
新民主主义革命的动力包括___。
A. 无产阶级
B. 农民阶级
C. 城市小资产阶级
D. 民族资产阶级
【多选题】
城市小资产阶级，包括广大的___。
A. 知识分子
B. 小商人
C. 手工业者
D. 自由职业者
【多选题】
新民主主义革命的性质是资产阶级民主主义革命，是因为___
A. 现阶段的革命是为了终结半殖民地半封建社会形态
B. 中国革命的对象主要是帝国主义和封建主义势力
C. 这个革命有资产阶级参加
D. 革命的经济政策是保护私有财产
【多选题】
新民主主义革命与旧民主主义革命相比有新的内容和特点，集中表现在___。
A. 中国革命是世界无产阶级社会主义革命的一部分
B. 革命的领导力量中国无产阶级及其先锋队中国共产党
C. 革命的指导思想是马克思列宁主义
D. 革命的前途是社会主义
【多选题】
新民主主义的政治纲领是：___的新民主主义的共和国。
A. 推翻帝国主义和封建主义的统治
B. 无产阶级领导的
C. 以工农联盟为基础的
D. 各革命阶级联合专政
【多选题】
新民主主义的经济纲领是：___。
A. 没收封建地主阶级的土地归农民所有
B. 没收官僚资产阶级的垄断资本归新民主主义国家所有
C. 保护民族工商业
D. 没收官僚资产阶级的垄断资本归社会主义国家所有
【多选题】
新民主主义革命时期，中国共产党领导的统一战线，先后经历了___等几个时期。
A. 国共合作的统一战线
B. 工农民主统一战线
C. 抗日民族统一战线
D. 人民民主统一战线
