【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
【单选题】
1．三相刀开关的图形符号与交流接触器的主触点符号是___。
A. 一样的
B. 可以互换
C. 有区别的
D. 没有区别
【单选题】
5．熔断器的作用是___。
A. 短路保护
B. 过载保护
C. 失压保护
D. 零压保护
【单选题】
6．热继电器的作用是___。
A. 短路保护
B. 过载保护
C. 失压保护
D. 零压保护
【单选题】
7．交流接触器的作用是可以___接通和断开负载。
【单选题】
8．三相异步电动机的启停控制线路由电源开关、熔断器、___、热继电器、按钮等组成。
A. 时间继电器
B. 速度继电器
C. 交流接触器
D. 漏电保护器
【单选题】
9．三相异步电动机的启停控制线路中需要有___、过载保护和失压保护功能。
A. 短路保护
B. 超速保护
C. 失磁保护
D. 零速保护
【单选题】
10维修电工以___、安装接线图和平面布置图最为重要。
A. 电气原理图
B. 电气设备图
C. 电气安装图
D. 电气组装图
推荐试题
【判断题】
补充协议的起草、评审、签订、交底、执行的管理程序同主合同。
【判断题】
项目安质部制定危险源分级控制方案或措施，特别是重大危险源，除制定控制目标和方案措施外，还应制定应急预案和应急演练方案，报上一级主管部门审核或审批。
【判断题】
一照”、进场人员花名册、劳动合同原件等。
【判断题】
项目部对分包企业每年考核一次。考核结果应在项目部进行公示并确认后，及时报子分公司、反馈分包企业。
【判断题】
项目印章应由项目综合办公室专人负责管理，建立“印章使用台账”，严禁在空白纸张上用印。
【判断题】
项目车辆要严格实行登记制度，认真填写机动车辆管理簿，一车一簿。
【填空题】
1.集团公司将 “___类高风险项目”设定为投标“底线”项目。
【填空题】
2.对拟实施的境内基础设施投资项目，应及时开展可行性研究分析，编制___。
【填空题】
3.投资项目《可行性研究报告》须反映投资项目全周期、全过程的技术可行性、经济可行性和___。
【填空题】
4.做好投资项目标前营销，应积极与政府部门、行业主管部门、___、___、___等单位进行全方位对接，及时掌握项目主要边界条件。
【填空题】
5.投资项目条件满足投资决策要求后组织___评审，完成决策流程后方可参与投标。
【填空题】
6.投标后及时召开___会，对前期营销、标书制作、投标报价、竞争对手策略等进行全面总结，掌握各地区投标的办法和规律，指导今后的投标工作。
【填空题】
7.在投资项目施工总承包合同签订后，集团公司与子分公司签订投资项目管理目标责任书，明确子分公司在项目___期和___期责任目标、奖惩机制等内容。
【填空题】
8.集团公司全资或控股的投资项目，由投资事业部牵头组建项目公司，___负责具体实施。
【填空题】
9.项目融资包括资本金融资和债务性融资两部分：资本金融资由集团公司___部负责组织实施，子分公司、项目公司配合；债务性融资由集团公司___部组织实施，子分公司组织项目公司负责具体对接。
【填空题】
10.分包企业选用坚持“严格标准、公开公正、择优录用、___”原则。
【填空题】
11.分包企业进场施工前办理进场手续，签订分包合同前应缴纳或提供保函___。
【填空题】
12.集团公司___开展一次分包企业资信等级分类审定工作。
【填空题】
13.项目部原则上从集团公司发布的___或各单位战略合作伙伴名录内选择分包企业。
【填空题】
14.新引进的分包企业，在签订分包合同前必须履行集团公司准入手续，办理___。
【填空题】
16.参加单个投标包件的分包企业不得少于___家，否则该次招标无效。
【填空题】
17.项目部通过“系统V3.0”___对劳务人员实行实名制动态管理。
【填空题】
18.项目前期策划工作包括施工调查、管理策划和___。
【填空题】
19.项目前期策划组织工作采取分层、分级、方式进行___。
【填空题】
20.铁路项目、合同额___亿元及以上项目、以及集团公司根据项目情况认为有必要的工程项目如___，其前期策划工作由集团公司统一组织。
【填空题】
21.项目前期策划的开展时间不少于一周，必须___进行现场调查讨论研究初步确定策划方案。
【填空题】
22.集团公司项管会作为集团公司级工程项目管理组织机构，负责对集团公司全部工程项目管理重大事项的___；负责对项目管理中出现的重大问题进行调查、研究、处置和问责。
【填空题】
23.项目总体进度计划均需报子分公司工程管理部审批，集团公司重点监管项目施工总体计划需向集团公司___报备。
【填空题】
24.对进度已经滞后且无明显改观的项目，集团公司、子分公司工程管理部视情况和原因，下达进度滞后，接到后___，项目部必须第一时间做出反应，查准原因，采取措施，调整现场组织或解决现场存在的问题，保障既定工期目标按期实现。
【填空题】
25.集团公司、子分公司办公室___电话为投诉受理电话。
【填空题】
26.收尾项目的界定：工程已实质完工，并通过建设单位组织的___。
【填空题】
27.项目完工后，项目经理组织相关部门对照全面回顾项目管理过程，查找项目管理行为的得与失，对出现的问题提出预防性措施，总结经验与教训，认真评价和总结，形成___后评价报告。
【填空题】
28.投诉类别包括___、抄告书、投诉电话等，项目无论是在施工过程中，还是收尾阶段各级单位均应高度重视投诉处置工作。
【填空题】
29.集团公司每月通报在建重要项目关键工期节点完成情况，对于未完成的工期节点，各子分公司将在___上进行原因分析和责任追究。
【填空题】
31.项目技术管理制度分为基本技术管理制度和___两大类。
【填空题】
32.___制度是每个项目必须建立的，具有通用性的特点。
【填空题】
33.设计文件审核工作由___组织，工程部和相关部门参与。
【填空题】
34.图纸审核记录表经项目总工程师签字后上报给监理、___、建设单位。
