A new router was configured with the following commands：
The configuration above was found on an Internet Service Provider’s （ISP） Multiprotocol LabelSwitching （MPLS） network. What is its purpose？（）
A.To prevent customers from running TDP with the ISP routers
B.To prevent customers from running LDP with the ISP routers
C.To prevent other ISPs from running LDP with the ISP routers
D.To prevent man-in-the-middle attacks
E.To use CBAC to shut down Distributed Denial of Service attacks
F.To use IPS to protect against session-replay attacks
G.None of the above
您可能感興趣的試卷
你可能感興趣的試題
A.IKE keepalives are unidirectional and sent every ten seconds
B.IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
C.To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
D.IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
Study the exhibit carefully. The Cisco IOS IPsec High Availability （IPsec HA） Enhancementsfeature provides an infrastructure for reliable and secure networks to provide transparent availability of the VPN gateways - that is， Cisco IOS Software-based routers. What are the twooptions that are used to provide High Availability IPsec？（）
A.HSRP
B.Dual Router Mode （DRM） IPsec
C.IPsec Backup Peerings
D.RRI
IPSec VPN is a widely-acknowledged solution for enterprise network. What are the four steps tosetup an IPsec VPN？（）
A.A
B.B
C.C
D.D
A.The cypto isakmp keepalive command is used to configure the Stateful Switchover （SSO）protocol
B.Reverse Route Injection （RRI） is configured on at the remote site to inject the central sitenetworks
C.Each Hot Standby Routing Protocol （HSRP） standby group has two well-known MACaddresses and a virtual IP address
D.The cypto isakmp keepalive command is used to configure stateless failover
A.The crypto ACL number
B.The IPSEC mode （tunnel or transport）
C.The GRE tunnel interface IP address
D.The GRE tunnel source interface or IP address， and tunnel destination IP address
E.The MTU size of the GRE tunnel interface
最新試題
Identify the recommended steps for worm attack mitigation by dragging and dropping them into thetarget area in the correct order.
This item contains several questions that you must answer. You can view these questions byclicking on the Questions button to the left. Changing questions can be accomplished by clickingthe numbers to the left of each question. In order to complete the questions， you will need to referto the SDM and the topology， neither of which is currently visible. To gain access to either thetopology or the SDK click on the button to left side of the screen that corresponds to the sectionyou wish to access. When you have finished viewing the topology the SDK you can return to yourquestions by clicking on the Questions button to the left.Which IPSec rule is used for the Olympia branch and what does it define？（）
Authentication is the process of determining if a user or identity is who they claim to be. Refer tothe exhibit. Which statement about the authentication process is correct？（）
Drag the correct statements about MPLS-based VPN on the left to the boxes on the right.（Not allstatements will be used）
Which statement correctly describes IPsec VPN backup technology？（）
Network Topology Exhibit：Configuration Exhibit：NET（config）# access-list 112 deny icmp any any echo logNET（config）# access-list 112 deny imp any any redirect logNET（config）# access-list 112 deny icmp any any mask-request logNET（config）# access-list 112 permit icmp any 10.1.1.0 0.0.0.255NET（config）# interface Fa0/1NET（config-if）# ip access-group 112 inYou work as a network administrator at networkTut.com， study the exhibit carefully. Theconfiguration has been applied to router NET to mitigate the threat of certain types of ICMPbasedattacks while allowing some ICMP traffic to the corporate LAN to work. However， the configurationis incorrect. On the basis of the information in the exhibit， which configuration option wouldcorrectly configure router NET？（）
Drag the IOS commands from the left that would be used to implement a GRE tunnel using the10.1.1.0.30 network on interface serial 0/0 to the correct target area on the right.
In computer security， AAA stands for authentication， authorization and accounting. Which optionabout the AAA authentication enable default group radius enable command is correct？（）
Study this exhibit carefully. What information can be derived from the SDM firewall configurationdisplayed？（）
Refer to the exhibit. Which two statements about the AAA configuration are true？（）