Drag each element of the Cisco IOS Firewall Feature Set from the above and drop onto itsdescription on the below.
您可能感興趣的試卷
你可能感興趣的試題
Study the exhibit carefully.
Routers A and B are customer routers. Routers 1， 2， 3 and 4 are provider routers. The routers areoperating with various IOS versions. Which frame mode MPLS configuration statement is true？（）
A.Before MPLS is enabled， the ip cef command is only requited on routers 1 and 4
B.After MPLS is enabled， the ip cef command is only required on routers 1 and 4
C.Before MPLS is enabled， the ip cef command is only required on the Ethernet 0 interfaces ofrouters 1 and 4
D.After MPLS is enabled， the ip cef command is only required on the Ethernet 0 interfaces ofrouters 1 and 4
E.Before MPLS is enabled， the ip cef command must be applied to all provider routers
A new router was configured with the following commands：
The configuration above was found on an Internet Service Provider’s （ISP） Multiprotocol LabelSwitching （MPLS） network. What is its purpose？（）
A.To prevent customers from running TDP with the ISP routers
B.To prevent customers from running LDP with the ISP routers
C.To prevent other ISPs from running LDP with the ISP routers
D.To prevent man-in-the-middle attacks
E.To use CBAC to shut down Distributed Denial of Service attacks
F.To use IPS to protect against session-replay attacks
G.None of the above
A.IKE keepalives are unidirectional and sent every ten seconds
B.IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
C.To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
D.IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
最新試題
cisco ios command to interface dialer 0
Drag and drop the xDSL type on the above to the appropriate xDSL description on the below.
Drag the IOS commands from the left that would be used to implement a GRE tunnel using the10.1.1.0.30 network on interface serial 0/0 to the correct target area on the right.
In computer security， AAA stands for authentication， authorization and accounting. Which optionabout the AAA authentication enable default group radius enable command is correct？（）
As a network engineer， study the exhibit carefully. Router Net is unable to establish an ADSLconnection with its provider. Which action would correct this problem？（）
Drag the DSL technologies on the left to their maximum（down/up） data rate values on the below.
IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）
Drag the correct statements about MPLS-based VPN on the left to the boxes on the right.（Not allstatements will be used）
Network Topology Exhibit：Configuration Exhibit：NET（config）# access-list 112 deny icmp any any echo logNET（config）# access-list 112 deny imp any any redirect logNET（config）# access-list 112 deny icmp any any mask-request logNET（config）# access-list 112 permit icmp any 10.1.1.0 0.0.0.255NET（config）# interface Fa0/1NET（config-if）# ip access-group 112 inYou work as a network administrator at networkTut.com， study the exhibit carefully. Theconfiguration has been applied to router NET to mitigate the threat of certain types of ICMPbasedattacks while allowing some ICMP traffic to the corporate LAN to work. However， the configurationis incorrect. On the basis of the information in the exhibit， which configuration option wouldcorrectly configure router NET？（）
Study the exhibit carefully. The Cisco IOS IPsec High Availability （IPsec HA） Enhancementsfeature provides an infrastructure for reliable and secure networks to provide transparent availability of the VPN gateways - that is， Cisco IOS Software-based routers. What are the twooptions that are used to provide High Availability IPsec？（）