單項選擇題Which kind of table will be used by most firewalls today to keep track of the connections through thefirewall?()

A.reflexive ACL
B.dynamic ACL
C.queuing
D.netflow
E.state


您可能感興趣的試卷

你可能感興趣的試題

1.單項選擇題The enable secret password appears as an MD5 hash in a router’s configuration file, whereas the enablepassword is not hashed (or encrypted, if the password-encryption service is not enabled). What is thereason that Cisco still support the use of both enable secret and enable passwords in a router’sconfiguration?()

A.The enable password is present for backward compatibility.
B.Because the enable secret password is a hash, it cannot be decrypted. Therefore, the enable password is used to match the password that was entered, and the enable secret is used to verify that the enablepassword has not been modified since the hash was generated.
C.The enable password is considered to be a router’s public key, whereas the enable secret password is considered to be a router’s private key.
D.The enable password is used for IKE Phase I, whereas the enable secret password is used for IKE Phase II.

2.單項選擇題

Which statement best describes the relationships between AAA function and TACACS+, RADIUS based onthe exhibit shown?()

A.TACACS+ - P4S1 and P4S4RADIUS - P4S2 and P4S3
B.TACACS+ - P4S2 and P4S4RADIUS - P4S1 and P4S3
C.TACACS+ - P4S1 and P4S3Actual RADIUS - P4S2 and P4S4
D.TACACS+ - P4S2 and P4S3RADIUS - P4S1 and P4S4

3.單項選擇題What will be enabled by the scanning technology-The Dynamic Vector Streaming (DVS)?()

A.Firmware-level virus detection
B.Signature-based virus filtering
C.Layer 4 virus detection
D.Signature-based spyware filtering

4.多項選擇題

Given the exhibit below. You are a network manager of your company. You are reading your Syslog serverreports. On the basis of the Syslog message shown, which two descriptions are correct?()

A.This is a normal system-generated information message and does not require further investigation.
B.Service timestamps have been globally enabled.
C.This message is unimportant and can be ignored.
D.This message is a level 5 notification message.

5.單項選擇題If a switch is working in the fail-open mode, what will happen when the switch’s CAM table fills to capacityand a new frame arrives?()

A.A copy of the frame is forwarded out all switch ports other than the port the frame was received on.
B.The frame is transmitted on the native VLAN.
C.The switch sends a NACK segment to the frame’s source MAC address.
D.The frame is dropped.

最新試題

Which key method is used to detect and prevent attacks by use of IDS and/or IPS technologies?()

題型:單項選擇題

Which type of MAC address is dynamically learned by a switch port and then added to the switch’s runningconfiguration?()

題型:單項選擇題

In an IEEE 802.1x deployment,between which two devices EAPOL messages typically are sent?()

題型:單項選擇題

Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances?()

題型:單項選擇題

What is the objective of Diffie-Hellman?()

題型:單項選擇題

For the following items, which one acts as a VPN termination device and is located at a primary networklocation?()

題型:單項選擇題

Refer to the exhibit. Which statement is correct based on the show login command output shown?()

題型:單項選擇題

Which method is of gaining access to a system that bypasses normal security measures?()

題型:單項選擇題

Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown,whichaccess control list would prevent IP address spoofing of these internal networks?()

題型:單項選擇題

Which statement is true about a Smurf attack?()

題型:單項選擇題