Based on the username global configuration mode command displayed in the exhibit. What does the optionsecret 5 indicate about the enable secret password？（）
A.It is hashed using MD5
B.It is encrypted using a proprietary Cisco encryption algorithm
C.It is hashed using SHA
D.It is encrypted using DH group 5
您可能感興趣的試卷
你可能感興趣的試題
A.reflexive ACL
B.dynamic ACL
C.queuing
D.netflow
E.state
A.The enable password is present for backward compatibility.
B.Because the enable secret password is a hash， it cannot be decrypted. Therefore， the enable password is used to match the password that was entered， and the enable secret is used to verify that the enablepassword has not been modified since the hash was generated.
C.The enable password is considered to be a router’s public key， whereas the enable secret password is considered to be a router’s private key.
D.The enable password is used for IKE Phase I， whereas the enable secret password is used for IKE Phase II.
Which statement best describes the relationships between AAA function and TACACS+， RADIUS based onthe exhibit shown？（）
A.TACACS+ - P4S1 and P4S4RADIUS - P4S2 and P4S3
B.TACACS+ - P4S2 and P4S4RADIUS - P4S1 and P4S3
C.TACACS+ - P4S1 and P4S3Actual RADIUS - P4S2 and P4S4
D.TACACS+ - P4S2 and P4S3RADIUS - P4S1 and P4S4
A.Firmware-level virus detection
B.Signature-based virus filtering
C.Layer 4 virus detection
D.Signature-based spyware filtering
Given the exhibit below. You are a network manager of your company. You are reading your Syslog serverreports. On the basis of the Syslog message shown， which two descriptions are correct？（）
A.This is a normal system-generated information message and does not require further investigation.
B.Service timestamps have been globally enabled.
C.This message is unimportant and can be ignored.
D.This message is a level 5 notification message.
A.A copy of the frame is forwarded out all switch ports other than the port the frame was received on.
B.The frame is transmitted on the native VLAN.
C.The switch sends a NACK segment to the frame’s source MAC address.
D.The frame is dropped.
Which description is true about the show login command output displayed in the exhibit？（）
A.Three or more login requests have failed within the last 100 seconds.
B.When the router goes into quiet mode， any host is permitted to access the router via Telnet，actual SSH， and HTTP， since the quiet-mode access list has not been configured.
C.The login block-for command is configured to block login hosts for 93 seconds.
D.All logins from any sources are blocked for another 193 seconds.
A.Loopback interface
B.Command and control interface
C.Monitoring interface
D.Management interface
A.The period of time in which virtual login attempts are blocked， following repeated failed login attempts
B.The period of time in which virtual logins are blocked as security services fully initialize
C.A period of time when no one is attempting tolog in
D.The period of time between successive login attempts
A.aaa configuration commands and the SDM Basic Firewall wizard
B.setup exec command and the SDM Security Audit wizard
C.auto secure exec command and the SDM One-Step Lockdown wizard
D.Cisco Common Classification Policy Language configuration commands and the SDM Site-to- Site VPN
最新試題
Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown，whichaccess control list would prevent IP address spoofing of these internal networks？（）
Which key method is used to detect and prevent attacks by use of IDS and/or IPS technologies？（）
Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image， theconfiguration files，or both have been properly backed up and secured？（）
On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy？（）
What is the objective of Diffie-Hellman？（）
A standard access control list has been configured on a router and applied to interface Serial 0 in anoutbound direction. No ACL is applied to Interface Serial 1 on the same router. What will happen whentraffic being filtered by the access list does not match the configured ACL statements for Serial 0？（）
Which option ensures that data is not modified in transit？（）
Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances？（）
Which VoIP components can permit or deny a call attempt on the basis of a network’s available bandwidth？（）
When configuring role-based CLI on a Cisco router，which action will be taken first ？（）