【判断题】
140、华为提供专业WLAN 网规工具进行AP 自动高效规划，网规工具是免费的，到华为企业官网申请下载即可。
查看试卷，进入试卷练习
微信扫一扫，开始刷题
相关试题
【判断题】
142、Fit AP 支持三种工作模式，其中Normal 模式可以发现第三方设备
【判断题】
146、除了NE20E 可以支持NAT 外， V8 平台的NE 小盒子也支持， 比如NE08E-S6E,NE05E-SQ
【判断题】
149、我司Tolly 测试报告覆盖了主流所有款型，可以对友商进行有利打击，且可以提供中文版报告
【判断题】
151、刚刚发布的ENP 系列单板，包含X5L、XSS、XSE、XSH4 个系列商务上分别与FC、EA、EC、X1E 基本持平
【判断题】
152、随板BRAS 就是交换机的普通业务板卡具备专业BRAS 的精细化用户管理功能
【判断题】
156、S3700-28TP-EI-IC-AC 带2 个监控口
【判断题】
157、Smatx 降成本款型预计19 年6 月份上市，包含4 端口、8 端口市电版本及大阳能版本
【判断题】
172、路由器依靠硬件BFD 和FRR 技术实现高可靠性，FRR 有LDP FRR 和VPNFRR,LDP FRR 是隧道层面保护，VPN FRR 是业务层面保护
【判断题】
174、2018H1 数据中心交换机份器中国区第一
【判断题】
175、H3C 仅有S12500X-AF 才是与华为CE12800/CE12800E 对档产品
【判断题】
176、CE12800 单板最大可支持4M FIB
【判断题】
180、802 11AC 产品和AP4030DN-E 是2*2MIMO 软型设备，整机理论速率可达1167Gbps
【判断题】
181、华为机WLAN 产品可实现了AC 内三层漫游
【判断题】
182、WLAN 物理层传输机制CSMA/CA 方式为全双工模式
【判断题】
186、ARS09CG-Lc 的4GE 固定接口可以切换为WLAN 和LAN
【判断题】
189、NGFW 是具有IPS 等功能，购买防火墙产品送3 年license
【判断题】
190、沙箱需要使用虚拟机技术来模拟程序的运行环境，并通过对虚拟机环境的监控来捕获程序的运行行为。
【判断题】
216.正在使用的微波炉可能会对WLAN 信号产生干扰
【判断题】
217.AP8050TN-HD 是业界独家支持三射频小角度定向无线产品
【判断题】
223.华为NGFW/IPS 插卡前面板GE 接口可以作为交换机的业务接口使用
【判断题】
224.APT 威胁通常是利用0 Day 漏洞或者是目标用户环境的缺陷定制的恶意软件，在供给目标组织的过程中有针对性的使用恶意软件：劫持系统，创建转移，创立后门，盗取数据，销毁现场
【判断题】
227.SDN 解决方案的核心理念是基于路由的选路策略
【判断题】
229. 华为USG6000 下一代防火墙有桌面型，1U，2U，3U 形态
【判断题】
239.NIP 做IDS 使用时不能直接部署
【判断题】
240.FireHunter 有四种沙箱模板，分别是PE 启发式沙箱，WEB 沙箱，PDF 沙箱和重量级沙箱
【判断题】
241. FireHunter 有主要功能为检测文件中的未知威胁
【判断题】
246.ARS09CG-Lc 的4GE 固定接口可以切换为WAN 和LAN
【判断题】
247.新一代AR 路由器分为AR63XX,AR62XX,AR61XX,AR65XX 四大系列
【判断题】
253.AP4050DN-HD 内置60 度定向天线
【判断题】
255.MU-MIMO 是同时通过多个天线传输单用户数据，可以提升单用户速率
【判断题】
265、SI2700 敏捷交换机的全可编程架构优势在于其整机及板卡都是可编程的，所有板卡都内置ENP 芯片，包括主控和交换网也都是内置ENP 的，都具备全可编程能力。
【判断题】
266、目前100GE 光模块无短距（100 米）双纤多模模块
【判断题】
267、M-LAG，即跨框链路捆绑，相对堆叠技术而言，它拥有2 个控制面，更加可靠。
【判断题】
268、CE12800E、CE6880 是基于商用芯片的TOR 交换机
【判断题】
271、高端路由器分为NE40E 和NE60E 两个系列，分别对应SE 和BRAS 场景，NE40E不支持BRAS 功能。
【判断题】
273、路由器依靠硬件BFD 和FRR 技术实现高可靠性，FRR 有LDP FRR 和VPN RFF,LDP ERP 是隧道层面保护，VPN FRR 是业务层面保护
【判断题】
284、S3700-28TP-EI-MC-AC 帮2 个控口
【判断题】
285、S2700SI 是标准型二层百兆交换机，不支持ACL、QinQ，适合于二层VLAN接入组网
【判断题】
286，当前S12700 敏捷交换机支持四个款型，即S12712/S12708/S12710/S12703
【判断题】
293、目前100G 光模块无短距(100 米)双纤多模模块
推荐试题
【单选题】
Which type of attack most commonly involves a direct attack on a network？___
A. :phishing
B. Trojan horse
C. denial of service
D. social engineering
【单选题】
What information does the key length provide in an encryption algorithm?___
A. the cipher block size
B. the hash bloc k size
C. the number of permutations
D. the packet size
【单选题】
How do you verify TaCACS+ connectivity to a device？___
A. You successfully log in to the device by using the local credentials
B. You connect via console port and receive the login prompt.
C. You connect to the device using SSH and receive the login prompt.
D. You successfully log in to the device by using ACS credentials
【单选题】
Which term best describes the concept of preventing the modification of data in transit and in storage？___
A. availability
B. confidentially
C. fidelity
D. integrity
【单选题】
Which loS command is used to define the authentication key for ntp？___
A. switch（config ）#ntp authentication-key 1 mds Clcs
B. switch（config ）#ntp authenticate
C. switch（config）#ntp trusted-key 1
D. switch（config）#ntp source 192.168.0.1
【单选题】
What is true about the cisco lOS Resilient Configuration feature ?___
A. The feature can be disabled through a remote session
B. There is additional space required to secure the primary cisco lOS image file.
C. The feature automatically detects image or configuration version mismatch.
D. Remote storage is used for securing files
【单选题】
When is the default deny all policy an exception in zone-based firewalls？___
A. when traffic terminates on the router via the self zone
B. when traffic traverses two interfaces in different zones
C. when traffic traverses two interfaces in the same zone
D. when traffic sources from the router via the self zone
【单选题】
.If an access port is assigned as an isolated port in a PVLAN， which network ports can it communicate with？___
A. promiscuous ports in the same PLVAN
B. isolated ports in the same PVLAN
C. all ports in the same PAVLAN at ILAR
D. all ports in the adjacent PVLAN
【单选题】
Which IPSEC mode is used to encypt traffic directly between a client and a server VPN endpoint？___
A. quick mode
B. transport mode
C. aggressive mode
D. tunnel mode
【单选题】
Which command do you enter to verify that a vpn connection is established between two endpoints and that the connection is passing traffic？ ___
A. Firewall#sh crypto session
B. Firewall#debug crypto isakmp
C. Firewall#tsh crypto ipsec sa
D. Firewall#sh crypto isakmp sa
【单选题】
which type of Pvlan port allows communication from all port types？___
A. isolated
B. in -line
C. community
D. promiscuous
【单选题】
Which command do you enter to configure your firewall to conceal internal addresses？___
A. no ip directed-broadcast
B. no ip logging facility
C. no proxy-arp
D. no ip inspect audit-trial
E. no ip inspect
F. route
【单选题】
Which feature defines a campus area network？ ___
A. It has a limited number of segments.
B. It has limited or restricted Internet access
C. It lacks ex1ternal connectivity.
D. It has a single geographic location
【单选题】
What technology can you use to provide data confidentiality data integrity and data origin authentication on your network？___
A. IPSec
B. Certificate Authority
C. IKE
D. Data
E. ncryption Standards
【单选题】
which standard is a hybrid protocol that uses oakley and skerne ke y exchanges is an ISAKMP framework？___
【单选题】
What is the actual los privilege level of User Exec mode？___
【单选题】
What is the effect of the asa command crypto isakmp nat-traversal？___
A. It opens port 500 only on the out side interface
B. It opens port 500 only on the inside interface
C. It opens port 4500 on all interfaces that are IPSec enabled
D. It opens port 4500 only on the out side interfac
【单选题】
Which Fire POWER preproce ssor engine is used to prevent SYN attacks？___
A. Inline normalization
B. IP Defragmentation
C. Ports can
D. etection
【单选题】
Which NAT type allows objects or groups to reference an IP address ？___
A. identity NAt
B. static NAT
C. dynamic
D. dynamic NAT
【单选题】
Which Auto NAT policies are processed first？___
A. Dynamic NAT with longest prefix
B. Dynamic NAT with shortest prefix
C. static NAT with longest prefix
D. static NAT with shortest prefix
【单选题】
Which feature allows a dynamic Pat pool to se lect the next address in the pat pool instead of the next port of an existing address？___
A. next IP
B. round robin
C. dynamic rotation
D. NAT address rotation
【单选题】
Which IPS detection method can you use to detect attacks that are based on the attackers IP address？___
A. anomally-based
B. policy-based
C. signature-based
D. reputation-based
【单选题】
Which type of encryption technology has the broadest platform support？___
A. software
B. middleware
C. file-level
D. hardware
【单选题】
Which type of address translation supports the initiation of comm unications bidirectionally ？___
A. multi-session PAT
B. dynamic NAT
C. dynamic PAT
D. static NAT
【单选题】
Which label is given to a person who uses existing computer scripts to hack into computers while lacking the expertise to write the own？___
A. script kiddy
B. white hat hacker
C. hacktivist
D. phreaker
【单选题】
What is the primary purpose of a defined rule in an IPS？___
A. to configure an event action that takes place when a signature is triggered
B. to define a set of actions that occur when a specific user logs in to the system
C. to configure an event action that is pre-defined by the system administrator
D. to detect internal attacks
【单选题】
Which option is the default valuce for the Diffie- Hell man group when configuring a site-to-site VPn on an asa device ？___
A. Group 1
B. Group 2
C. Group 5
D. Group 7
【单选题】
Which feature filters CoPP packets?___
A. access control lists
B. class maps
C. policy maps
D. route maps
【单选题】
Which command is used in global configuration mode to enable AAA？___
A. configure-model aaa
B. configure aaa-modelA
C. aaa new-model
D. aaa
E. XEC
【单选题】
Which statement about the given configuration is true？___
A. The single-connection command causes the device to establish one connection for all TACACS
B. The single-connection command causes the device to process one TacAcs request and then move to the next server
C. The timeout com mand causes the device to move to the next server after 20 seconds of TACACS inactive
【多选题】
What are two well-known security terms？___
A. phishing//网络钓鱼
B. ransomware //勒索软件
C. BPDU guard
D. LACP
E. hair-pinning
【多选题】
Which two commands must you enter to securely archive the primary bootset of a device___
A. router（config ）#secure boot-config
B. router（config）#auto secure
C. router（config）#secure boot-image
D. router（config）#service passw ord-encryption
【多选题】
Which two functions can SIEM provide ？___
A. correlation between logs and events from multiple systems
B. event aggregation that allows for reduced log storage requirements
C. proactive malware analysis to block malicious traffic
D. dual-factor authentication
E. centralized firewall management
【多选题】
Which two features of Cisco Web Reputation tracking can mitigate web-based threats？___
A. buffer overflow filterin dhsuowip
B. Bayesian filters
C. web reputation filters
D. outbreak filtering
E. exploit filtering
【多选题】
What are two challenges when deploying host- level IPS？ ___
A. The deployment must support multiple operating systems.
B. It is unable to provide a complete networ k picture of an attack.
C. It is unable to determine the outcome of e very attack that it detects
D. It does not provide protection for offsite computers
E. It is unable to detect fragmentation attacks
【多选题】
Which technology can be used to rate data fidelity and to provide an authenticated hash for data?___
A. file reputation
B. file analysis
C. signature updates
D. network blocking
【多选题】
Which two statements about host-based iPS solutions are true？___
A. It uses only signature-based polices
B. It can be deployed at the perimeter.
C. It can be have more restrictive policies than network-based IPS
D. it works with deployed firewall
E. It can generate alerts based on be havior at the de sto
【多选题】
When two events would cause the state table of a stateful firewall to be updated？ ___
A. when a packet is evaluated against the outbound access list and is denied
B. when a con nection is created
C. when rate-limiting is applied
D. when a connection s timer has expired within the state table.
E. when an outbound packet is forwarded to the outbound interface
【多选题】
Which two characteristics apply to an intrusion Prevention System（IPS）？___
A. Cannot drop the packet on its own
B. Cabled directly inline with the flow of the network traffic
C. Runs in promiscuous mode wat
D. Does not add delay to the original traffic
E. Can drop traffic based on a set of rules
【多选题】
crypto ipsec trans form-set myset esp-md5-hmac esp-aes-256，What are two effects of the given command？___
A. It configures authentication use AES 256.
B. It configures authentication to use MD5 HMAC
C. It configures authentication use AES 256.
D. It configures encryption to ase MD5 HMAC.
E. It configures encryption to use AES 256
