多項選擇題Which three mechanisms are used to secure management traffic from outside IPS sensors?()

A. secure tunnels
B. a separate management VLAN
C. secure VLANs to isolate sensors
D. an out-of-band path around the firewall
E. asymmetric traffic flows to isolate sensors
F. private VLANs to put all sensors on isolated ports


您可能感興趣的試卷

你可能感興趣的試題

1.多項選擇題In which two locations in an enterprise network can an IPS sensor be placed? ()

A. bridging VLANs on two switches
B. bridging two VLANs on one switch
C. between two Layer 2 devices with trunking
D. between two Layer 2 devices without trunking
E. between a Layer 2 device and a Layer 3 device with trunking

2.多項選擇題Which two of these correctly describe asymmetric routing and firewalls? ()

A. only operational in routed mode
B. only operational in transparent mode
C. only eight interfaces can belong to an asymmetric routing group
D. operational in both failover and non-failover configurations
E. only operational when the firewall has been configured for failover

3.多項選擇題Which two statements about an interface configured with the asr-group command are correct? ()

A. The FWSM supports up to 16 asymmetric routing groups.
B. If a matching packet is not found, the packet is dropped.
C. Asymetric routing of return traffic is enabled.
D. If a matching packet is found, the Layer 3 header is rewritten.
E. If a matching packet is found, the Layer 3 header is rewritten and the packet is forwarded to thedefault gateway.

4.多項選擇題Which three of the following descriptions are true about the firewall modes? ()

A. Transparent mode is layer 2.
B. Routed mode is layer 3.
C. Routed mode has 1 IP address.
D. Transparent mode has 1 IP address.

5.單項選擇題What is the traditional mode for a firewall?()

A. routed mode
B. context mode
C. bridged mode
D. transparent mode
E. full security mode

6.多項選擇題What are two characteristics of GSS? ()

A. It helps verify end-to-end path availability.
B. It provides traffic rerouting in case of disaster.
C. HSRP, GLBP, and VRRP can be clients of GSS.
D. BGP must be the routing protocol between the distributed data centers.
E. DNS responsiveness is improved by providing centralized domain management.

7.多項選擇題What are two characteristics of OER? ()

A. It can take on HSRP, VRRP, and GLBP as clients.
B. It provides automatic inbound route optimization.
C. Path selection may be based on delay, loss, or jitter.
D. The border router makes decisions about which outbound path to use.
E. Automatic load distribution is provided for multiple connections.

8.多項選擇題What are two characteristics of the SLB One-arm mode? ()

A. It is not as common as bridge mode
B. The MSFC is not directly connected to the CSM
C. Outbound traffic from servers may need to be directed by PBR or CSNAT to the CSM
D. The SLB is moved to a position where selected inbound and outbound server traffic goesthrough the SLB
E. The CSM statically routes inbound server traffic to the aggregation switch FWSM, then to the connected server subnet

10.多項選擇題

Refer to the exhibit. Which two of these are characteristics of a firewall running in transparent mode?()

 

A. FWSM routes traffic between the VLANs.
B. FWSM switches traffic between the VLANs.
C. Transparent mode is often called bump-in-the-wire mode.
D. Transparent mode firewall deployments are used most often in current designs.
E. Traffic routed between VLANs is subject to state tracking and other firewall configurable options.

最新試題

At a certain customer’s site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses. In which access mode has this NAS been configured to operate?()

題型:單項選擇題

One of your customers has deployed a Layer 3 gateway in the untrusted network. Which gateway mode is appropriate for this customer?()

題型:單項選擇題

Which two design recommendations are most appropriate when OSPF is the data center core routing protocol? ()

題型:多項選擇題

Which path selection protocol is used by Fibre Channel fabrics?()

題型:單項選擇題

Which three of the following descriptions are true about the firewall modes? ()

題型:多項選擇題

Which statement about data center access layer design modes is correct?()

題型:單項選擇題

During consultation, you find that a customer has multiple asset closets and will be adding more inthe future. Which NAS physical deployment model would you suggest to this customer?()

題型:單項選擇題

Which two statements about Cisco Security Management Suite are correct? ()

題型:多項選擇題

Which two of these correctly describe Fibre Channel?()

題型:多項選擇題

In a VoWLAN deployment, what is the recommended separation between cells with the same channel?()

題型:單項選擇題