單項(xiàng)選擇題Examine the following options ，when editing global IPS settings， which one determines if the IOS- basedIPS feature will drop or permit traffic for a particular IPS signature engine while a new signature for thatengine is being compiled？（）

A.Enable Signature Default
B.Enable Engine Fail Closed
C.Enable Default IOS Signature ActualTests.com
D.Enable Fail Opened


您可能感興趣的試卷

你可能感興趣的試題

1.單項(xiàng)選擇題As a candidate for CCNA examination， when you are familiar with the basic commands， if you input thecommand "enable secret level 5 password" in the global mode ， what does it indicate？（）

A.Set the enable secret command to privilege level 5
B.The enable secret password is hashed using MD5
C.The enable secret password is for accessing exec privilege level 5
D.The enable secret password is hashed using SHA
E.The enable secret password is encrypted using Cisco proprietary level 5 encryption

4.單項(xiàng)選擇題Which description about asymmetric encryption algorithms is correct？（）

A.They use the same key for encryption and decryption of data.
B.They use different keys for decryption but the same key for encryption of data.
C.They use different keys for encryption and decryption of data.
D.They use the same key for decryption but different keys for encryption of data.

5.單項(xiàng)選擇題For the following items ，which one can be used to authenticate the IPsec peers during IKE Phase 1？（）

A.pre-shared key
B.integrity check value
C.XAUTH
D.Diffie-Hellman Nonce

6.單項(xiàng)選擇題

Which description is correct based on the exhibit and partial configuration？（）

A.All traffic destined for network 172.16.150.0 will be denied due to the implicit denyall.
B.All traffic from network 10.0.0.0 will be permitted.
C.Access-list 101 will prevent address spoofing from interface E0.
D.This ACL will prevent any host on the Internet from spoofing the inside network address as the sourceaddress for packets coming into the router from the Internet.

7.單項(xiàng)選擇題In a brute-force attack， what percentage of the keyspace must an attacker generally search through until heor she finds the key that decrypts the data？（）

A.Roughly 50 percent
B.Roughly 66 percent  ActualTests.com
C.Roughly 75 percent
D.Roughly 10 percent

最新試題

Which two actions can be configured to allow traffic to traverse an interface when zone-based security isbeing employed？（）

題型：多項(xiàng)選擇題

Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image， theconfiguration files，or both have been properly backed up and secured？（）

題型：?jiǎn)雾?xiàng)選擇題

Which statement is true about a Smurf attack？（）

題型：?jiǎn)雾?xiàng)選擇題

During role-based CLI configuration， what must be enabled before any user views can be created？（）

題型：?jiǎn)雾?xiàng)選擇題

Refer to the exhibit. Based on the VPN connection shown， which statement is true？（）

題型：?jiǎn)雾?xiàng)選擇題

Which one of the aaa accounting commands can be used to enable logging of both the start and stoprecords for user terminal sessions on the router？（）

題型：?jiǎn)雾?xiàng)選擇題

Which statement is correct regarding the aaa configurations based on the exhibit provided？（）

題型：?jiǎn)雾?xiàng)選擇題

What will be disabled as a result of the no service password-recovery command？（）

題型：?jiǎn)雾?xiàng)選擇題

How do you define the authentication method that will be used with AAA？（）

題型：?jiǎn)雾?xiàng)選擇題

What are two characteristics of the SDM Security Audit wizard？（）

題型：多項(xiàng)選擇題