單項選擇題The number of packets (or flows) dropped because they do not conform to the ASA/PIX security policy can be viewed using what command? ()

A. show asp drop
B. show counters drop
C. show security-policy
D. show policy-map


您可能感興趣的試卷

你可能感興趣的試題

1.單項選擇題ASA/PIXversion 7.0 introduced ModularPolicyFramework (MPF) as anextensible wayto classify traffic,and then apply policies (or actions) to that traffic. MPF at aminimum requires which three commands?()

A. http-map, tcp-map, class-map
B. class-map, tcp-map, policy-map
C. class-map, policy-map, service-map
D. class-map, service-policy, policy-map

3.多項選擇題Which two are correct functions of the Cisco Anomaly Guard and Detector for preventing DDOS attacks? ()

A. uses Netflow data for anomaly detections
B. builds baseline profilesof normal operating conditions, enablingrapid identification of unusual activity that indicates an attack
C. accept events inputs from different network devicesvia syslog, SDEE and SNMP
D. dynamic diversion redirects and cleans only traffic destined for targeted devices, allowing unaffectedtraffic toflow freely and ensuring business continuity
E. pushes ACLs to network devices to only block the malicious traffic
F. using topology and configuration awareness, events from different devices are correlatedand attacks mitgitations are performed at the optimal location

4.單項選擇題Birthday attacks are used against which of the following?()

A. digital signatures
B. symmetric ciphering
C. hashalgoritms
D. asymmetric ciphering
E. digital certificates

5.單項選擇題Which of the following statements is correct regarding a hybridcrypto system?()

A. uses symmetric crypto for keys distribution
B. uses symmetric crypto for proof of origin
C. uses symmetric crypto for fast encrypted/decryption
D. uses asymmetric crypto for message confidentiality
E. uses symmetric crypto to transmit the asymmetric keys that is thenused to encrypt a session

6.多項選擇題When configuring IOS firewall (CBAC) operations on Cisco routers, the "inspection rule" could be applied at which two locations? ()

A. at the untrusted interfacein the inbound direction
B. atthe untrusted interface in theoutbounddirection
C. at thetrusted interface inthe inbound direction
D. at the trusted interface in the outbound direction
E. at the trusted and untrusted interfaces in the inbound direction
F. at the trusted and untrusted interfaces in the outbounddirection

7.多項選擇題The CS-MARS appliance offers attackmitigatons using which twomethods?  ()

A. Automatically pushing ACLs to layer 3 devices to block the attacker’s traffic
B. Automatically pushing commands to layer 2 switches to shutdown the attacker’s ports
C. Automatically resetting the attacker’sTCP connections
D. RecommendingACLs tobe manuallypushed tolayer 3 devices such as routers/firewalls
E. Operating as an inline appliance, it automaticallyblocks malicious traffic inline
F. Working inconjuction with CSM to block the attacker’s traffic inline

8.單項選擇題Which of the following are not steps in setting up aTLS session? ()

A. Client sends Hello to Server listing all of its supported cipher suites
B. Server sends Hello to Client listing all of its supported cipher suites
C. Client calculates and sends encryptedpre_master_secret
D. Client and Server calculate keys from pre_master_secret
E. Server sends Change Cipher Spec to indicate a shift to encrypted mode

9.單項選擇題PEAP provides authentication for theEAP exchange using: ()

A. RC4
B. TLS
C. SSH
D. AES
E. 3DES

10.單項選擇題To enable TCP Port Forwarding applications using IOS WebVPN, what needs tobe downloaded to the client?()

A. Cisco SecurityAgent (CSA)
B. CiscoTrustAgent (CTA)
C. Cisco Secure Desktop (CSD)
D. A small Java Applet
E. SSLVPN Client (SVC)
F. SSLVPN Client (SVC) and Cisco Secure Desktop (CSD)

最新試題

Choose the most correct statements about SMTP/ESMTP. ()

題型:多項選擇題

With PGP, which of the following entity signs a users’s public key?()

題型:單項選擇題

Which of the following statements that describe Diffie Hellman Key exchange are correct? ()

題型:多項選擇題

When configuring a multipoint GRE (mGRE) tunnel interface, which one of the following is NOT a valid configuration option:()

題型:單項選擇題

Which IOS QoS mechanism is used strictly to rate limit traffic destinedto the router itself?()

題型:單項選擇題

For a router to obtain a certificate from a CA, what is the first stepof the certificate enrollment process?()

題型:單項選擇題

When implementing internet standards you are required to follow RFC’s processes and procedures based onwhat RFC?()

題型:單項選擇題

Select the two correctstatements from the list below that describe DES and 3DES: ()

題型:多項選擇題

Which SSL protocol takes anapplication message tobe transmitted, fragments the datainto manageable blocks, optionally compresses the data, applies a MAC, encrypts, adds a header, and transmits the resulting unit ina TCPsegment?()

題型:單項選擇題

Which ones are the two type of ciphers?()

題型:單項選擇題