Refer to the exhibit. Given the CPE deployment model, the Enterprise applications shown, and the functions being provided as designated, the appropriate product choice is _____.（）
A.Cisco PIX 501 Firewall
B.Cisco 831 router
C.Cisco 837 router
D.Cisco VPN3002 Hardware Client
E.Cisco SW VPN Client
您可能感興趣的試卷
你可能感興趣的試題
A.Issue a show policy-map interface command.
B.Assuming Netflow is enabled, issue a show ip cache verbose flow command.
C.Issue a show crypto ipsec session command.
D.Issue a debug qos set command and a terminal monitor command.
A.IP phone extensions for teleworkers must be chosen carefully so not to duplicate campus phone extensions.
B.More security exposure exists due to lack of support for Intrusion Detection System and URL filtering for teleworker originated traffic.
C.Compressed RTP and IPSec are not compatible and result in no bandwidth savings.
D.Broadband modems must support Quality of Service for adequate voice quality.
Refer to the exhibit. The Linksys router in the diagram is performing pNAT (port network address translation). What hash algorithm should you choose and why?（）
A.Use hash MD5 to ensure that IKE works through NAT.
B.Use ah-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.
C.Use 3DES, as it will encrypt the IPSec header IP addresses and bypass addressing issues.
D.Use esp-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.
Refer to the exhibit. A Teleworker router is deployed behind a broadband Cable service. If the Teleworker router has the configuration shown, what will be the DNS server selected for DHCP clients on the LAN-side interface?（）
A.DHCP clients will automatically default to the DNS root servers for all DNS requests in the IP stacks locally.
B.DHCP clients will use the IP set in the option 150 command.
C.DHCP clients will use the DNS entry assigned by the ISP.
D.DHCP clients will have no DNS server set in the IP stack.
A.requires access lists to identify the voice traffic
B.can allow traffic from a device without 802.1X authentication, by MAC address
C.can allow traffic from Cisco IP phones by listening to their CDP advertisements
D.allows all packets marked with a ToS of 5 to bypass authentication
E.allows all IP voice packets to bypass authentication via stateful inspection
最新試題
A corporation is not concerned about wireless use by Teleworkers. Authentication for any application first requires access via a web browser to a protected site. Given these requirements, choose the appropriate security feature to use to enforce the security policy.（）
Refer to the exhibit. Given the configuration on a Teleworker router, and knowing it was in the process of being booted, what statement would best describe the order in which the head-end peers would be selected?（）
Refer to the exhibit. An enterprise's security policy disallows the use of wireless on a Teleworker PC. Choose the most appropriate 830 security feature to use to enforce the security policy.（）
A customer wants to TFTP a new image from the corporate network to Flash on the Teleworker router through the IPSec tunnel. How should you configure the Teleworker router?（）
Context-Based Access Control (CBAC) is the algorithm of the Cisco IOS firewall feature. How does CBAC improve Teleworker security?（）
What are the DSL-specific factors that require additional bandwidth when supporting Voice-over-IP over an IPSec VPN?（）
For Ethernet-to-Ethernet routers, such as the Cisco 831 behind a cable modem or DSL bridge, a traffic shaper is configured. This is required since the output 10-Mbps interface will not be congested. Which two statements are true?（）
What characteristics make ADSL the likely choice among DSL technologies for Teleworker?（）
Which statement regarding 802.1X is true?（）
When is an IPSec SA built on the Teleworker Router?（）