A. nat
B. nonat-control
C. access-list
D. none of the above
您可能感興趣的試卷
你可能感興趣的試題
A. All traffic passing through theappliance
B. Traffic from internal networks on a per IP basis
C. Based on protocol only.
D. On a per-context basis only.
A. show asp drop
B. show counters drop
C. show security-policy
D. show policy-map
A. http-map， tcp-map， class-map
B. class-map， tcp-map， policy-map
C. class-map， policy-map， service-map
D. class-map， service-policy， policy-map
A. audit
B. secure
C. inspect
D.The fixup protocol commands did not change in
A. uses Netflow data for anomaly detections
B. builds baseline profilesof normal operating conditions， enablingrapid identification of unusual activity that indicates an attack
C. accept events inputs from different network devicesvia syslog， SDEE and SNMP
D. dynamic diversion redirects and cleans only traffic destined for targeted devices， allowing unaffectedtraffic toflow freely and ensuring business continuity
E. pushes ACLs to network devices to only block the malicious traffic
F. using topology and configuration awareness， events from different devices are correlatedand attacks mitgitations are performed at the optimal location
A. digital signatures
B. symmetric ciphering
C. hashalgoritms
D. asymmetric ciphering
E. digital certificates
A. uses symmetric crypto for keys distribution
B. uses symmetric crypto for proof of origin
C. uses symmetric crypto for fast encrypted/decryption
D. uses asymmetric crypto for message confidentiality
E. uses symmetric crypto to transmit the asymmetric keys that is thenused to encrypt a session
A. at the untrusted interfacein the inbound direction
B. atthe untrusted interface in theoutbounddirection
C. at thetrusted interface inthe inbound direction
D. at the trusted interface in the outbound direction
E. at the trusted and untrusted interfaces in the inbound direction
F. at the trusted and untrusted interfaces in the outbounddirection
A. Automatically pushing ACLs to layer 3 devices to block the attacker’s traffic
B. Automatically pushing commands to layer 2 switches to shutdown the attacker’s ports
C. Automatically resetting the attacker’sTCP connections
D. RecommendingACLs tobe manuallypushed tolayer 3 devices such as routers/firewalls
E. Operating as an inline appliance， it automaticallyblocks malicious traffic inline
F. Working inconjuction with CSM to block the attacker’s traffic inline
A. Client sends Hello to Server listing all of its supported cipher suites
B. Server sends Hello to Client listing all of its supported cipher suites
C. Client calculates and sends encryptedpre_master_secret
D. Client and Server calculate keys from pre_master_secret
E. Server sends Change Cipher Spec to indicate a shift to encrypted mode
最新試題
CSA protects your host by： （）
Which of the following is an example of a security technology that could be enabled by Netflow？（）
For a router to obtain a certificate from a CA， what is the first stepof the certificate enrollment process？（）
What group in Cisco IOS does 1536-bit Diffie-Hellman prime modulus equivalent too？（）
What Cisco Switch feature best protects against CAM table overflow attacks？（）
CS-MARS works with which IOS feature to accomplish anomaly detection？（）
Select the two correctstatements from the list below that describe DES and 3DES： （）
What is true about SYN cookies？（）
Of the threats discussed below， what is the main advantage of using Cisco Secure Desktop which is part of the Cisco ASA VPN solution？（）
Which of the following statements that describe Diffie Hellman Key exchange are correct？ （）