A.when all access to the Internet is through the IPSec tunnel
B.when there is direct Internet access via split-tunneling
C.when there is no Internet access configured through the Teleworker router
D.whenever you have IOS-Firewall (CBAC) configured
您可能感興趣的試卷
你可能感興趣的試題
A.QoS pre-classify permits making QoS decisions based on elements from the unencrypted IP packet.
B.QoS pre-classify is required when encrypting voice.
C.QoS pre-classify is an advantage to Service Providers transporting encrypted packets.
D.QoS pre-classify is not designed for IPSec/GRE configurations.
A.when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through
B.when the Teleworker router itself is doing NAT/pNAT
C.always
D.never
Refer to the exhibit. A customer indicates their teleworkers plan to use IP phones in their home offices. The IT department has surveyed the planned teleworkers, resulting in the user groupings shown in the exhibit. To provide the highest voice quality, the best recommendations to this customer are（）.
A.Deploy all three groups with a QoS service policy, choosing the parameters for Traffic Shaping based on the average uplink speed across the three groups.
B.Teleworkers in Groups A and B should inquire with their DSL providers for subscriptions with higher uplink bandwidths.
C.Teleworkers in Group C should change their subscriptions to DSL for deployment consistency.
D.Teleworkers in Group A should upgrade their subscription to obtain static IP addresses
E.Teleworkers in Group A should inquire with their DSL providers for subscriptions with higher downlink bandwidths.
A.Teleworker devices must be accessed from the central site (server, printers).
B.IP addressing is simplified.
C.The Teleworker LAN is a transit networking for routing.
D.An Enterprise application does not function with Network Address Translation.
E.The Teleworker router is an MPLS PE node.
Refer to the exhibit. Given this deployment model and the Enterprise applications, the Teleworker Router provides which functions?（）
A.Broadband access termination
B.IPSec tunnel termination
C.H323 Signaling termination
D.Traffic Shaping
E.Compressed RTP（cRTP）for bandwidth optimization
A.QoS and IPSec should never be used together.
B.IKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped.
C.Source IKE/ISAKMP packets off the loop-back address.
D.Classify IKE/ISAKMP packets so they are appropriately prioritized.
Refer to the exhibit. Assume Router A is configured for split tunneling. If the Internet Service provider was asked by the customer to provide a guarantee of at least 60 percent of the WAN link between Router A and Router C for encrypted traffic, what would be the best means of identifying this traffic to their QoS Service Policy?（）
A.permit esp any permit udp any eq 500 any eq 500
B.permit udp any eq isakmp any eq isakmp
C.permit ip 10.81.7.0 0.0.0.7 any
D.tcp any any eq 22
A.GRE can use transport mode and save up to twenty bytes per packet.
B.The corporate network includes many discontinuous blocks of IP networks and requires split tunneling.
C.The corporation's primary application is based on IP multicast.
D.Without GRE, there is no means to detect a head-end failure.
E.GRE would enable path MTU discovery.
A.Stateful Inspection Firewall
B.Intrusion Detection System
C.Spam Filtering
D.802.1-based Authentication
E.Proxy Authentication
F.URL Filtering
Refer to the exhibit. Which of the following statements is a reason the DHCP server is enabled on the Teleworker home router?（）
A.allows for workstations to have network values hard-coded
B.IP network settings cannot be assigned if the VPN tunnel is down
C.provides IP network settings to be dynamically assigned
D.requires HTTP access to initiate assignment
最新試題
Refer to the exhibit. Given the interface configuration on a DSL connection with PPPoE, select the true statement.（）
Refer to the exhibit. Given this DSL router's sub-interface configuration, select the two true statements. Assume the interface is UP/UP.（）
A corporation is not concerned about wireless use by Teleworkers. Authentication for any application first requires access via a web browser to a protected site. Given these requirements, choose the appropriate security feature to use to enforce the security policy.（）
Refer to the exhibit. With an IPSec tunnel established between remote Router A and head-end router B, how can the Service Provider Edge Router identify Voice over IP packets flowing through the IPSec tunnel from a Cisco 7960 IP phone?（）
Refer to the exhibit. An enterprise's security policy disallows the use of wireless on a Teleworker PC. Choose the most appropriate 830 security feature to use to enforce the security policy.（）
Refer to the exhibit. Which statement is true regarding the topology?（）
An Enterprise customer is concerned about the effort involved in allocating remote network addressing at the Teleworker location. What should you recommend to the customer?（）
Which is not a reason that Internet Service Providers prefer to use PPP over Ethernet (PPoE)?（）
When is an IPSec SA built on the Teleworker Router?（）
In a Teleworker deployment with a single IP phone connected to a Cisco 831 router, select the true statement regarding Call Admission Control.（）