A.It validates the fact that a packet is either a connection request or a data packet belonging to a connection
B.It evaluates network packets for valid data at the application layer before allowing connections
C.It analyzes network traffic at the network and transport protocol layers
D.It keeps track of the actual communication process through the use of a state table
您可能感興趣的試卷
你可能感興趣的試題
A.displays a screen with Fix-it check boxes to let you choose which potential security-related configuration changes to implement
B.has two modes of operationinteractive and non-interactive
C.automatically enables Cisco IOS firewall and Cisco IOS IPS to secure the router
D.uses interactive dialogs and prompts to implement role-based CLI
E.requires users to first identify which router interfaces connect to the inside network and which connectto the outside network
A.When the router goes into quiet mode， any host is permitted to access the router via Telnet，SSH， and HTTP，since the quiet-mode access list has not been configured.
B.The login block-for command is configured to block login hosts for 93 seconds.
C.All logins from any sources are blocked for another 193 seconds.
D.Three or more login requests have failed within the last 100 seconds.
A.multiple privilege levels
B.usernames and passwords
C.aaa new-model command
D.secret password for the root user
E.HTTP and/or HTTPS server
Please choose the correct description about Cisco Self-Defending Network characteristics.（）
A.INTEGRATED - P4S2，COLLABORATIVE - P4S1ADAPTIVE - P4S3
B.INTEGRATED - P4S1，COLLABORATIVE - P4S2ADAPTIVE - P4S3
C.INTEGRATED - P4S3，COLLABORATIVE - P4S2ADAPTIVE - P4S1
D.INTEGRATED - P4S2，COLLABORATIVE - P4S3ADAPTIVE - P4S1
A.Signature-based detection
B.Anomaly-based detection
C.Honey pot detection
D.Policy-based detection
A.aaa accounting connection start-stop tacacs+
B.aaa accounting exec start-stop tacacs+
C.aaa accounting system start-stop tacacs+
D.aaa accounting network start-stop tacacs+
Which statement is correct regarding the aaa configurations based on the exhibit provided？（）
A.The authentication method list used by the vty port is named test.
B.If the TACACS+ AAA server is not available， no users will be able to establish a Telnet session with the router.
C.If the TACACS+ AAA server is not available， console access to the router can be authenticated using the local database.
D.The authentication method list used by the console port is named test.
A.Create a parser view called "root view."
B.Log in to the router as the root user.
C.Enable the root view on the router.
D.Enable role-based CLI globally on the router using the privileged EXEC mode Cisco IOS command.
A.SPAP
B.CHAP
C.DHCHAP
D.ESP
A.Only symmetric algorithms have a key exchange technology built in
B.Asymmetric algorithms are used quite often as key exchange protocols for symmetricalgorithms
C.Only asymmetric algorithms have a key exchange technology built in
D.Asymmetric algorithms are based on more complex mathematical computations
最新試題
Which method is of gaining access to a system that bypasses normal security measures？（）
When configuring SSH， which is the Cisco minimum recommended modulus value？（）
As a network engineer at Certpaper.com， you are responsible for Certpaper network. Which will benecessarily taken into consideration when implementing Syslogging in your network？（）
If you click the Configure button along the top of Cisco SDM is graphical interface，which Tasks buttonpermits you to configure such features as SSH， NTP， SNMP， and syslog？（）
Which VoIP components can permit or deny a call attempt on the basis of a network’s available bandwidth？（）
In an IEEE 802.1x deployment，between which two devices EAPOL messages typically are sent？（）
A standard access control list has been configured on a router and applied to interface Serial 0 in anoutbound direction. No ACL is applied to Interface Serial 1 on the same router. What will happen whentraffic being filtered by the access list does not match the configured ACL statements for Serial 0？（）
What is a static packet-filtering firewall used for ？（）
Which option ensures that data is not modified in transit？（）
For the following items， which one acts as a VPN termination device and is located at a primary networklocation？（）