單項(xiàng)選擇題What is the recommended practice when considering VPN termination and firewall placement?()

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall, with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall, with the VPN terminating outside the firewall


您可能感興趣的試卷

你可能感興趣的試題

2.單項(xiàng)選擇題In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?()

A. Layer 2
B. Layer 3
C. in-band
D. out-of-band
E. edge
F. central

3.單項(xiàng)選擇題Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?()

A. NAC can authenticate using 802.1X and IBNS cannot
B. NAC can ensure only compliant machines connect and IBNS cannot
C. NAC can ensure access to the correct network resources and IBNS cannot
D. NAC can manage user mobility and reduce overhead costs and IBNS cannot

4.多項(xiàng)選擇題Which three of these are important when determining NAS Server scaling? ()

A. interface bandwidth
B. rescan timer interval
C. total number of network devices
D. number of new user authentications per second
E. which operating system is loaded on the client
F. number of checks performed in a posture assessment.

5.單項(xiàng)選擇題Which of these is true of a Layer 3 out-of-band NAS deployment?()

A. The NAS acts as a gateway for all Layer 3 traffic.
B. Only the MAC address is used to identify the client device.
C. User traffic remains on the same VLAN for the duration of the connection.
D. After authentication and posture assessment, client traffic no longer passes through the NAS.

7.單項(xiàng)選擇題One of your customers has deployed a Layer 3 gateway in the untrusted network. Which gateway mode is appropriate for this customer?()

A.Virtual Gateway
B.Real-IP Gateway
C.NAT Gateway
D.Central Gateway

9.多項(xiàng)選擇題The Cisco NAC Appliance is able to check which three items before allowing network access?()

A.client antivirus software state
B.personal firewall settings
C.wireless cell bandwidth availability
D.IOS versions for routers and switches
E.appropriate client patch management level
F.appropriate QoS settings for client application Answer:

最新試題

Cisco Express Forwarding (CEF) is mainly used to increase packet switching speed, reducing the overhead and delays introduced by other routing techniques, increasing overall performance.Which of the following concerning CEF is recommended by Cisco?()

題型:?jiǎn)雾?xiàng)選擇題

Please match the Cisco STP enahancement term to its definition.()(1) BPDU guard(2) PortFast(3) BackboneFast(4) Loop guard(5) Root guard(a) shuts down a port that receives a BPDU when enabled(b) cuts convergence time by mas-age for indirect failure(c) prevents the aliernate or root port from being designated in absence of BPDUs(d )causes Layer 2 LAN interface access port to immediately enter the forwarding state(e) helps prevent bridging loops due to jni-directional link failures on point-to-point links

題型:?jiǎn)雾?xiàng)選擇題

During consultation, you find that a customer has only a single asset closet and is looking for a solution that is easy to deploy. Which NAS physical deployment model would you suggest to this customer?()

題型:?jiǎn)雾?xiàng)選擇題

Which technology allows centralized storage services to be shared across different VSANs?()

題型:?jiǎn)雾?xiàng)選擇題

Refer to the exhibit. Which two statements about the topologies shown are correct?()

題型:多項(xiàng)選擇題

Client traffic is being bridged through LAN interfaces on two WLCs. Which roaming option will keep them on the same IP subnet?()

題型:?jiǎn)雾?xiàng)選擇題

You are the Cisco Network Designer . Which is not major scaling, sizing, and performance consideration for an IPsec design?()

題型:?jiǎn)雾?xiàng)選擇題

During consultation, you find that a customer has multiple asset closets and will be adding more in the future. Which NAS physical deployment model would you suggest to this customer?()

題型:?jiǎn)雾?xiàng)選擇題

What amount of cell overlap ensures smooth roaming for wireless endpoints?()

題型:?jiǎn)雾?xiàng)選擇題

What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?()

題型:?jiǎn)雾?xiàng)選擇題