Refer to the exhibit. Based on the VPN connection shown， which statement is true？（）
A.Traffic that matches access list 103 will be protected
B.This VPN configuration will not work because the tunnel IP and peer IP are the same
C.The tunnel is down because the transform set needs to include the Authentication Header parameter
D.The tunnel is down as result of being a static rule. It should be configured as a Dynamic IPsec policy
您可能感興趣的試卷
你可能感興趣的試題
A.Broadband service
B.Headend VPN device
C.VPN access device
D.Tunnel
Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown，whichaccess control list would prevent IP address spoofing of these internal networks？（）
A.SDM_Default_197
B.SDM_Default_199
C.SDM_Default_196
D.SDM_Default_198
A.With the method aaa command
B.With the method command
C.With a method list
D.With a method statement
A.SenderBase
B.TrafMon
C.IronPort M-Series
D.E-Base
On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy？（）
A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy（applied to traffic sourced from the less secured zone destined to the moresecured zone）
C.This is an outbound policy（applied to traffic sourced from the more secured zone destined to the lesssecured zone）
D.All packets will be dropped since the class-default traffic class is matching all traffic
A.Source interface where encrypted traffic originates
B.IP address for the remote peer
C.Transform set for the IPsec tunnel
D.Interface for the VPN connection
A.It sends ping requests in segments of an invalid size
B.It intercepts the third step in a TCP three-way handshake to hijack a session
C.It sends ping requests to a subnet， requesting that devices on that subnet send ping replies to a targetsystem
D.It uses Trojan horse applications to create a distributed collection of "zombie" computers， which can beused to launch a coordinated DDoS attack
A.password encryption service
B.changes to the config-register setting
C.the xmodem privilege EXEC mode command to recover the Cisco IOS image
D.ROMMON
A.The traffic is dropped
B.The resulting action is determined by the destination IP address
C.The source IP address is checked，and，if a match is not found， traffic is routed out interface Serial 1
D.The resulting action is determined by the destination IP address and port number
A.Altering the key length causes the ciphertext to be completely different
B.Changing only a few bits of a ciphertext message causes the plain text to be completely different
C.Altering the key length causes the plain text to be completely different
D.Changing only a few bits of a plain-text message causes the ciphertext to be completely different
最新試題
What will be disabled as a result of the no service password-recovery command？（）
When configuring role-based CLI on a Cisco router，which action will be taken first ？（）
For the following options， which feature is the foundation of Cisco Self-Defending Network technology？（）
In an IEEE 802.1x deployment，between which two devices EAPOL messages typically are sent？（）
Which VoIP components can permit or deny a call attempt on the basis of a network’s available bandwidth？（）
If you click the Configure button along the top of Cisco SDM is graphical interface，which Tasks buttonpermits you to configure such features as SSH， NTP， SNMP， and syslog？（）
Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances？（）
Which one of the aaa accounting commands can be used to enable logging of both the start and stoprecords for user terminal sessions on the router？（）
What are two characteristics of the SDM Security Audit wizard？（）
Which key method is used to detect and prevent attacks by use of IDS and/or IPS technologies？（）