單項選擇題What is true about a Pre-Block ACLconfigured when setting up your sensor toperform IP Blocking?()

A. The Pre-Block ACL is overwritten when a blockingaction is initiatied by the sensor
B. The blocking ACL entries generated by the sensor override the Pre-Block ACL entries
C. The Pre-Block ACL entries override the blocking ACL entries generated by the sensor
D. The Pre-Block ACL is replaced by the Post-Block ACL when a blocking actionis initiated bythe sensor
E. You can not configure a Pre-Block ACL when configuring IP Blockingon your sensor


您可能感興趣的試卷

你可能感興趣的試題

1.多項選擇題Which two IP multicast addresses belong to the group represented by the MAC address of 0x01-00-5E-15-6A-2C? ()

A. 224.21.106.44
B. 224.25.106.44
C. 233.149.106.44
D. 236.25.106.44
E. 239.153.106.44

2.單項選擇題A network administrator is using a LAN analyzer to troubleshoot OSPF router exchange messages sent to ALLOSPF ROUTERS. To what MAC address are these messages sent?()

A. 00-00-1C-EF-00-00
B. 01-00-5E-00-00-05
C. 01-00-5E-EF-00-00
D. EF-FF-FF-00-00-05
E. EF-00-00-FF-FF-FF
F. FF-FF-FF-FF-FF-FF

3.單項選擇題According to RFC 3180, what is the correct GLOP address for AS456?()

A. 224.0.4.86
B. 224.4.86.0
C. 233.1.200.0
D. 239.2.213.0
E. 239.4.5.6

4.多項選擇題What are two important guidelines to follow when implementing VTP?()

A. CDPmust be enabled on all switches in theVTP management domain.
B. All switches in the VTPdomain must run the same version of VTP.
C. When using secure mode VTP, only configure management domain passwords onVTP servers.
D. EnablingVTP pruning on a server willenable the feature for the entire management domain.
E. Use of theVTPmulti-domain feature should be restricted to migration and temporary implementation.

5.多項選擇題What are two key characteristics of VTP? ()

A.VTP messages are sent out all switch-switch connections.
B.VTP L2 messages are communicated to neighbors using CDP.
C.VTP manages addition, deletion, and renaming of VLANs 1 to 4094.
D.VTP pruning restricts flooded traffic, increasing available bandwidth.
E.VTP V2 can only be used in a domain consisting of V2 capable switches.
F.VTP V2 performs consistency checks on all sources of VLAN information.

6.單項選擇題How doTCP SYN attacks take advantage ofTCPto prevent new connections from being established to a host under attack?()

A.These attacks send multiple FIN segments forcing TCP connection release.
B.These attacks fill up a hosts’ listen queue by failing to ACK partially openedTCPconnections.
C.These attacks take advantage of the hosts transmit backoff algorithm by sending jam signals to the host.
D.These attacks increment the ISN of each segment by a random number causing constant TCP retransmissions.
E.These attacks send TCP RST segments in response toconnection SYN+ACK segments forcing SYN retransmissions.




最新試題

Which SSL protocol takes anapplication message tobe transmitted, fragments the datainto manageable blocks, optionally compresses the data, applies a MAC, encrypts, adds a header, and transmits the resulting unit ina TCPsegment?()

題型:單項選擇題

Which ones are the two type of ciphers?()

題型:單項選擇題

Which statements are true concerning NAT? ()

題型:多項選擇題

Of the threats discussed below, what is the main advantage of using Cisco Secure Desktop which is part of the Cisco ASA VPN solution?()

題型:單項選擇題

Select the two correctstatements from the list below that describe DES and 3DES: ()

題型:多項選擇題

With PGP, which of the following entity signs a users’s public key?()

題型:單項選擇題

When configuring a multipoint GRE (mGRE) tunnel interface, which one of the following is NOT a valid configuration option:()

題型:單項選擇題

Which of these is the best way to provide sender non-repudiation?()

題型:單項選擇題

CS-MARS works with which IOS feature to accomplish anomaly detection?()

題型:單項選擇題

Which should be the key driver for a company security policy’s creation, implementation and enforcement?()

題型:單項選擇題