A.the inside private IP address and the translated inside global IP address
B.the source and destination IP addresses， port numbers，TCP sequencing information， and additional flags for each TCP or UDP connection associated with a particular session
C.the outbound and inbound access rules （ACL entries）
D.all TCP and UDP header information only
您可能感興趣的試卷
你可能感興趣的試題
A.MCU
B.Application server
C.Gateway
D.Gatekeeper
A.used to verify the identity of the peer
B.used between the initiator and the responder to establish a basic security policy
C.used to establish a symmetric shared key via a public key exchange process
D.used for asymmetric public key encryption
A.Static secure MAC address
B.Dynamic secure MAC address
C.Pervasive secure MAC address
D.Sticky secure MAC address
A.Enable the highest level of Syslogging available to ensure you log all possible event messages
B.Use SSH to access your Syslog information
C.Log all messages to the system buffer so that they can be displayed when accessing the router
D.Syncronize clocks on the network with a protocol such as Network Time Protocol
Refer to the exhibit. Based on the VPN connection shown， which statement is true？（）
A.Traffic that matches access list 103 will be protected
B.This VPN configuration will not work because the tunnel IP and peer IP are the same
C.The tunnel is down because the transform set needs to include the Authentication Header parameter
D.The tunnel is down as result of being a static rule. It should be configured as a Dynamic IPsec policy
A.Broadband service
B.Headend VPN device
C.VPN access device
D.Tunnel
Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown，whichaccess control list would prevent IP address spoofing of these internal networks？（）
A.SDM_Default_197
B.SDM_Default_199
C.SDM_Default_196
D.SDM_Default_198
A.With the method aaa command
B.With the method command
C.With a method list
D.With a method statement
A.SenderBase
B.TrafMon
C.IronPort M-Series
D.E-Base
On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy？（）
A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy（applied to traffic sourced from the less secured zone destined to the moresecured zone）
C.This is an outbound policy（applied to traffic sourced from the more secured zone destined to the lesssecured zone）
D.All packets will be dropped since the class-default traffic class is matching all traffic
最新試題
Which statement is true about a Smurf attack？（）
During role-based CLI configuration， what must be enabled before any user views can be created？（）
Which option ensures that data is not modified in transit？（）
Which type of intrusion prevention technology will be primarily used by the Cisco IPS security appliances？（）
Which name is of the e-mail traffic monitoring service that underlies that architecture of IronPort？（）
Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image， theconfiguration files，or both have been properly backed up and secured？（）
What will be disabled as a result of the no service password-recovery command？（）
How do you define the authentication method that will be used with AAA？（）
When configuring SSH， which is the Cisco minimum recommended modulus value？（）
Please choose the correct description about Cisco Self-Defending Network characteristics.（）