單項(xiàng)選擇題Which is a benefit of implementing RFC 2827?()

A.Prevents DoS from legimate, non-hostile end systems
B.Prevents disruption of "special services", such as Mobile IP
C.Defeats DoS Attacks which employ IPSource Address Spoofing
D.Restricts directed broadcasts at the ingress router
E.Allows DHCP or BOOTP packets to reach the relay agents asappropriate


您可能感興趣的試卷

你可能感興趣的試題

1.單項(xiàng)選擇題When configuring a Cisco Adaptive Security Appliance in multiple context mode, which of the follow capabilities are supported?()

A. Multicastis supported
B. Dynamic routing protocols are supported
C. VPN configurations are supported
D. Static routes are supported

2.單項(xiàng)選擇題When configuring system state conditions with the Cisco SecurityAgent, what is the resulting action when configuring more than one system state condition? ()

A.Any matching state condition will result with the state being triggered
B. Once a state condition ismet, the system ceases searching further conditions and will cause the state condition to trigger
C. All specified state conditions are used as part of the requirements tobe met to for the state to trigger
D. Once the state conditions are met, they become persistent and can only be removed using the Reset feature

3.多項(xiàng)選擇題The RiskRating for an IPS signatureis calculatedusing four primary components. Select the four components below.   ()

A. SignatureFidelity Rating
B. Alert Severity Rating
C. Exploit Probability Rating
D. Target Value Rating
E. Attack Relevancy Rating

4.多項(xiàng)選擇題An IPS sensor with3 sniffing interfaces can be configuredas:  ()

A. 3 promiscuous sensors
B. 3 inline sensors
C. 1 inline sensor, 1 promiscuous sensor
D. 2 inline sensors, 1 promiscuous sensors

5.多項(xiàng)選擇題Given the topology of a server (with IP 209.165.202.150) protected behind the inside interface of an ASA/PIX,and the Internet on the outside interface. Users on the Internet need to access the server at any time, but the firewall administrator does not want to NAT the address of the server - since itis currentlya public address. Which of the following commands can be used to accomplish this? ()

A. nat (inside) 0 209.165.202.150 255.255.255.255
B. access-list no-nat permit ip host209.165.202.150 anynat(inside) 0 access-list no-nat
C. static(inside,outside) 209.165.202.150 209.165.202.150 netmask 255.255.255.255
D. no nat-control
E. nat (inside) 1 209.165.202.150 255.255.255.255

最新試題

When configuring a multipoint GRE (mGRE) tunnel interface, which one of the following is NOT a valid configuration option:()

題型:單項(xiàng)選擇題

TACACS+ authentication uses whichthree packet types? ()

題型:多項(xiàng)選擇題

Which access methods can CS-MARS use toget configuration information from an Adaptive SecurityAppliance (ASA)? ()

題型:多項(xiàng)選擇題

Which should be the key driver for a company security policy’s creation, implementation and enforcement?()

題型:單項(xiàng)選擇題

Which Cisco security software product mitigates Day Zero attacks on desktops and servers - stopping known and unknown attacks without requiring reconfigurations or updates on the endpoints?()

題型:單項(xiàng)選擇題

Which statements are true concerning NAT? ()

題型:多項(xiàng)選擇題

In an L2TP voluntary tunneling scenario, the VPDN tunnel is terminated between:()

題型:單項(xiàng)選擇題

CS-MARS works with which IOS feature to accomplish anomaly detection?()

題型:單項(xiàng)選擇題

Which of the following is an example of a security technology that could be enabled by Netflow?()

題型:單項(xiàng)選擇題

Which two statements are correct about the aaa authentication login default grouptacacs+ localglobal configuration command? ()

題型:多項(xiàng)選擇題