單項(xiàng)選擇題BCP (Best Common Practices) 38/RFC 2827 Ingress and Egress Packet Filtering would help mitigate whatclassification of attack?()

A.Sniffing attack
B.Denial of service attack
C.Port Scan attack
D.Reconnaisance attack
E.Spoofing attack


您可能感興趣的試卷

你可能感興趣的試題

1.單項(xiàng)選擇題Based on the following output in R1, which statement is true?()

A.If a labeled packet arrives with the top most label of 17, it will be replaced with label 19 and sent out on Ethernet 0/0 interface.
B.If a labeled packet arrives with the top most label of 19, it will be replaced with label 17 and sent out on Ethernet 0/0 interface.
C.If a labeled packet arrives with the top most label of 17, all the labels will be removed and a clear IP Packet is sent to Next Hop 192.168.0.14 on Ethernet 0/0.
D.None of the above.

2.單項(xiàng)選擇題The Outer.1Q tag represents customer VLAN ID and inner.1Q tag represents Provider VLAN?()

A.The Outer.1Q tag represents customer VLAN ID and inner.1Q tag represents Provider VLAN (PVLAN )
B.It is an effective way to achieve VLAN transparency between Provider and enterprise customer bytunneling one ser of VLAN tags inside a second VLAN tag
C.The Outer.1Q tag represents Service VLAN (PVLAN) and inner.1Q tag represents customer VLAN
D.QinQ is a way to hide native VLAN which can conflict with Provider native VLAN

3.單項(xiàng)選擇題As described in rfc 3270,short-pipe mode operstion, the PE to CE egress polices are based upon:()

A.topmost label exp value
B.customer marking
C.Innerrnost label exp value
D.Qos groups/discard class
E.remarked IP tos value
F.MDRR quantam

4.多項(xiàng)選擇題Which two options best describe the purpose of session ID and cookie field in a L2TPv3 packet?()

A.The session ID is a 32-bit locally significant field used to identify the call on the destination or egresstunnel endport. The session ID will be negotiated by the control connection or statically defined if usingthe L2TP v3 data plane only
B.The cookie is a variable length(with a maximum of eight bytes),word-aligned optional field. The controlconnection can negotiate this as an additional level of guarantee beyond the regular session ID lookupto make sure that a data message has been directed to the correct session or that any recently reusedsession ID will not be misdirected
C.The cookie is a 32-bit locally significant field used to identify the call on the destination or egress tunnelendpoint. The cookie will be negotiated by the control connection or statically defined if using theL2TPv3 data plane only
D.The session ID is a variable length(with a maximum of eight bytes),word-aligned optional field the control connection can negotiate this as an additional level of guarantee beyond the regular cookielookup to make sure that a data message has been directed to the correct session or that any recentlyreused cookie will not be misdirected.

5.多項(xiàng)選擇題Select 3 AVPs (Attribute-Value Pair) which MUST be present in the ICRQ:()

A.Message Type
B.Calling Number
C.Assigned Session ID
D.Called Number
E.Call Serial Number

6.多項(xiàng)選擇題What ISIS TLVs are used to support MPLS-traffic Engineering?()

A.Extended IS neighbor TLV # 22
B.Extended IS name TLV #137
C.Extended IS resource TLV #138
D.Extended IS reachability TLV #135
E.Router ID TLV # 134

7.多項(xiàng)選擇題Which 4 statements regarding MPLS Label Stack Encoding is true?()

A.A value of 4 represents the "Implicit NULL Label."
B.A value of 0 represents the "IPv4 Explicit NULL Label."
C.A value of 1 represents the "Router Alert Label". The use of this label is analogous to the use of the"Router Alert Option" in IP packets (for example, ping with record route option)
D.A value of 2 represents the "IPv6 Explicit NULL Label"
E.A value of 1 represents the "IPv1 Explicit NULL Label"
F.A value of 3 represents the "Implicit NULL Label"

8.多項(xiàng)選擇題RIPv2 differs from RIPv1 in that:()

A.it uses multicast address 224.0.0.10,instead of broadcast
B.it uses multicast address 224.0.0.9,instead of broadcast
C.it can use either multicast or broadcast addresses,instead of just broadcast
D.it sends incremental updates,instead of periodic updates
E.it is classless,instead of classful
F.it supports authentication,and RIPv1 does not

9.單項(xiàng)選擇題What is the requirement of Remote Triggered Black Hole (RTBH ) filtering?()

A.IBGP updates exchange between trigger router and black hole router
B.EBGP updates exchange between trigger router and black hole router
C.OSPF updates exchange between trigger router and black hole router
D.ISIS updates exchange between trigger router and black hole router

10.多項(xiàng)選擇題Which of the following statements about MD5 Routing Updates authentication is valid? ()

A.The MD5 algorithm inputs the routing updates of arbitrary length and outputs a 128-bit hash
B.The MD5 algorithm inputs the routing updates of every 64bit length and outputs an 8-bit hash
C.Multiple keys are supported
D.Routing updates packets are delivered in encrypted messages
E.Shared secret keys are delivered in encrypted messages