單項選擇題Which of these statements is true of routing protocols in a hub-and-spoke IPsec VPN topology?（）

A. EIGRP can summarize per interface.
B. OSPF router databases remain independent.
C. When they are configured with stubs, EIGRP regularly floods the topology.
D. OSPF topology decisions are made independent of hierarchy or area.


您可能感興趣的試卷

你可能感興趣的試題

1.單項選擇題Which of the following is the primary consideration to scale VPNs?（）

A. packets per second
B. number of remote sites
C. throughput bandwidth
D. number of tunnels

2.單項選擇題In which tunnel-less VPN topology do group members register with a key server in order to receive the security association necessary to communicate with the group?（）

A. Easy VPN
B. GRE tunneling
C. Virtual Tunnel Interfaces
D. DynamicMultipoint VPN
E. Group Encrypted Transport VPN

3.多項選擇題Which two of these are advantages of placing the VPN device in the DMZ on the firewall?（）

A. fewer devices to manage
B. moderate-to-high scalability
C. stateful inspection of decrypted VPN traffic
D. increased bandwidth with additional interfaces
E. decreased complexity as traffic is filtered from the firewall

4.多項選擇題Which two of these are advantages of placing the VPN device parallel to the firewall?（）

A. high scalability
B. the design supports a layered security model
C. firewall addressing does not need to change
D. IPsec decrypted traffic is inspected by the firewall
E. there is a centralized point for logging and content inspection

5.單項選擇題What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?（）

A. RADIUS or LDAP
B. an internal router running EIGRP
C. Reverse Route Injection and OSPF or RIPv2
D. the VPN appliance to be deployed in line with the firewall

6.單項選擇題What is the recommended practice when considering VPN termination and firewall placement?（）

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall, with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall, with the VPN terminating outside the firewall

8.單項選擇題In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?（）

A. Layer 2
B. Layer 3
C. in-band
D. out-of-band
E. edge
F. central

9.單項選擇題Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?（）

A. NAC can authenticate using 802.1X and IBNS cannot
B. NAC can ensure only compliant machines connect and IBNS cannot
C. NAC can ensure access to the correct network resources and IBNS cannot
D. NAC can manage user mobility and reduce overhead costs and IBNS cannot

10.多項選擇題Which three of these are important when determining NAS Server scaling? （）

A. interface bandwidth
B. rescan timer interval
C. total number of network devices
D. number of new user authentications per second
E. which operating system is loaded on the client
F. number of checks performed in a posture assessment.