多項(xiàng)選擇題Which two statements about Cisco Security Management Suite are correct?()

A. It should be implemented in a management VLAN.
B. Its connection to managed devices should be over a data VLAN.
C. It is made up of Cisco Security MARS and Clean Access software.
D. It should be deployed as close to the edge of the network as possible.
E. It delivers policy administration and enforcement for the Cisco Self-Defending Network.


您可能感興趣的試卷

你可能感興趣的試題

1.多項(xiàng)選擇題Which three mechanisms are used to secure management traffic from outside IPS sensors?()

A. secure tunnels
B. a separate management VLAN
C. secure VLANs to isolate sensors
D. an out-of-band path around the firewall
E. asymmetric traffic flows to isolate sensors
F. private VLANs to put all sensors on isolated ports

2.多項(xiàng)選擇題In which two locations in an enterprise network can an IPS sensor be placed?()

A. bridging VLANs on two switches
B. bridging two VLANs on one switch
C. between two Layer 2 devices withtrunking
D. between two Layer 2 devices withouttrunking
E. between a Layer 2 device and a Layer 3 device withtrunking

3.多項(xiàng)選擇題Which two of these correctly describe asymmetric routing and firewalls?()

A. only operational in routed mode
B. only operational in transparent mode
C. only eight interfaces can belong to an asymmetric routing group
D. operational in both failover and non-failover configurations
E. only operational when the firewall has been configured for failover

4.多項(xiàng)選擇題Which two statements about an interface configured with the asr-group command are correct?()

A. The FWSM supports up to 16 asymmetric routing groups.
B. If a matching packet is not found, the packet is dropped.
C. Asymetric routing of return traffic is enabled.
D. If a matching packet is found, the Layer 3 header is rewritten.
E. If a matching packet is found, the Layer 3 header is rewritten and the packet is forwarded to the default gateway.

5.多項(xiàng)選擇題Which three of the following descriptions are true about the firewall modes? ()

A. Transparent mode is layer 2.
B. Routed mode is layer 3.
C. Routed mode has 1 IP address.
D. Transparent mode has 1 IP address.

最新試題

Which of the following is the primary consideration to scale VPNs?()

題型:?jiǎn)雾?xiàng)選擇題

Please match the Cisco STP enahancement term to its definition.()(1) BPDU guard(2) PortFast(3) BackboneFast(4) Loop guard(5) Root guard(a) shuts down a port that receives a BPDU when enabled(b) cuts convergence time by mas-age for indirect failure(c) prevents the aliernate or root port from being designated in absence of BPDUs(d )causes Layer 2 LAN interface access port to immediately enter the forwarding state(e) helps prevent bridging loops due to jni-directional link failures on point-to-point links

題型:?jiǎn)雾?xiàng)選擇題

Which two of these are advantages of placing the VPN device parallel to the firewall?()

題型:多項(xiàng)選擇題

Which of these is true of a Layer 3 out-of-band NAS deployment?()

題型:?jiǎn)雾?xiàng)選擇題

As an experienced technician, you are responsible for Technical Support. One of the trainees is asking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend?()

題型:?jiǎn)雾?xiàng)選擇題

As an experienced technician, you are responsible for infrastructure design and global configuration changes. You are asked to deploy a Voice over Wireless LAN for your company. If the cells have the same channel, the separation between them should be:()

題型:?jiǎn)雾?xiàng)選擇題

Refer to the exhibit. Which two statements about the topologies shown are correct?()

題型:多項(xiàng)選擇題

You are the Cisco Network Designer. Which of these is least important when determining how many users a NAS can support?()

題型:?jiǎn)雾?xiàng)選擇題

What is the recommended practice when considering VPN termination and firewall placement?()

題型:?jiǎn)雾?xiàng)選擇題

Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?()

題型:?jiǎn)雾?xiàng)選擇題