A.Action Management
B.Fault Management
C.Configuration Management
D.Protocol Management
E.Security Management
您可能感興趣的試卷
你可能感興趣的試題
Network Topology Exhibit：
Configuration Exhibit：
NET（config）# access-list 112 deny icmp any any echo log
NET（config）# access-list 112 deny imp any any redirect log
NET（config）# access-list 112 deny icmp any any mask-request log
NET（config）# access-list 112 permit icmp any 10.1.1.0 0.0.0.255
NET（config）# interface Fa0/1
NET（config-if）# ip access-group 112 in
You work as a network administrator at networkTut.com， study the exhibit carefully. The
configuration has been applied to router NET to mitigate the threat of certain types of ICMPbasedattacks while allowing some ICMP traffic to the corporate LAN to work. However， the configurationis incorrect. On the basis of the information in the exhibit， which configuration option wouldcorrectly configure router NET？（）
A.The first three statements of ACL 112 should have permitted the ICMP traffic and the laststatement should deny the identified traffic
B.The last statement of ACL 112 should have been "access-list 112deny icmp any 10.2.1.00.0.0.255"
C.The last statement of ACL 112 should have been "access-list 112permit icmp any 10.2.1.00.0.0.255"
D.ACL 112 should have been applied to interface Fa0/0 in an inbound direction
E.The last statement of ACL 112 should have been "access-list 112deny icmp any 10.1.1.00.0.0.255"
F.ACL 112 should have been applied to interface Fa0/1 in an outbound direction
G.None of the above
A.Disable post scan
B.Use SSH or SSL
C.Enable trust levels
D.Deny echo replies on all edge routers
Drag and drop each management protocol on the above to the correct category on the below.
Drag the DSL technologies on the left to their maximum（down/up） data rate values on the below.
A.IKE keepalives are unidirectional and sent every ten seconds
B.IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
C.To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
D.IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
Refer to the exhibit. Which two statements about the AAA configuration are true？（）
A.A good security practice is to havethe none parameter configured as the final method used toensure that no other authentication method will be used
B.If a TACACS+ server is not available， then a user connecting via the console port would not beable to gain access since no other authentication method has been defined
C.If a TACACS+ server is not available， then the user Bob could be able to enter privileged modeas long as the proper enable password is entered
D.Theaaa new-model command forces the router to override every other authentication methodpreviously configured for the router lines
E.To increase security， group radius should be used instead of group tacacs+
F.Two authentication options are prescribed by the displayedaaa authentication command
最新試題
Drag each element of the Cisco IOS Firewall Feature Set from the above and drop onto itsdescription on the below.
Study this exhibit carefully. What information can be derived from the SDM firewall configurationdisplayed？（）
Which statement correctly describes IPsec VPN backup technology？（）
A new router was configured with the following commands：The configuration above was found on an Internet Service Provider’s （ISP） Multiprotocol LabelSwitching （MPLS） network. What is its purpose？（）
In computer security， AAA stands for authentication， authorization and accounting. Which optionabout the AAA authentication enable default group radius enable command is correct？（）
Which statement about PPPoA configuration is correct？（）
Drag and drop the xDSL type on the above to the appropriate xDSL description on the below.
Which two encapsulation methods require that an 827 ADSL router be configured with a PPPusername and CHAP password？（）
Which three statements accurately describe IOS Firewall configurations？（）
As a network technician， do you know what is a recommended practice for secure configurationmanagement？（）