Refer to the exhibit. The Linksys router in the diagram is performing pNAT (port network address translation). What hash algorithm should you choose and why?（）
A.Use hash MD5 to ensure that IKE works through NAT.
B.Use ah-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.
C.Use 3DES, as it will encrypt the IPSec header IP addresses and bypass addressing issues.
D.Use esp-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.
您可能感興趣的試卷
你可能感興趣的試題
Refer to the exhibit. A Teleworker router is deployed behind a broadband Cable service. If the Teleworker router has the configuration shown, what will be the DNS server selected for DHCP clients on the LAN-side interface?（）
A.DHCP clients will automatically default to the DNS root servers for all DNS requests in the IP stacks locally.
B.DHCP clients will use the IP set in the option 150 command.
C.DHCP clients will use the DNS entry assigned by the ISP.
D.DHCP clients will have no DNS server set in the IP stack.
A.requires access lists to identify the voice traffic
B.can allow traffic from a device without 802.1X authentication, by MAC address
C.can allow traffic from Cisco IP phones by listening to their CDP advertisements
D.allows all packets marked with a ToS of 5 to bypass authentication
E.allows all IP voice packets to bypass authentication via stateful inspection
A.Upgrade your residential broadband service to at least 768kbps uplink.
B.Switch your home router to use PPP encapsulation.
C.Use the ip tcp adjust-mss interface command.
D.Employ QoS techniques to drop large data packets.
E.Use traffic shaping to interrupt large data packets.
Refer to the exhibit. Given the CPE deployment model, the Enterprise applications shown, and the functions being provided as designated, the appropriate product choice is（）.
A.Cisco PIX 501 Firewall
B.Cisco 831 router
C.Cisco 837 router
D.Cisco VPN3002 Hardware Client
E.Cisco ubr925 cable modem
F.Cisco SW VPN Client
A.TCP packet sizes can be optimized by the router so there is no IPSec or AAL5 padding.
B.The local loop is a dedicated connection for a single subscriber to the DSLAM.
C.Access to the WAN media uses a poll/response mechanism so no two subscribers transmit at the same time.
D.There are no distance requirements from the Central Office (CO).
Refer to the exhibit. Asymmetric broadband service with significantly greater downstream bandwidth is recommended for Teleworker deployment. Which reason is the most accurate?（）
A.Most ISPs do not provide QoS for residential broadband. Asymmetric bandwidth reduces the chance of downstream congestion when traffic from Internet sites competes for bandwidth with IP voice traffic.
B.Additional downstream bandwidth compensates for insufficient upstream bandwidth. The aggregate bandwidth provides the same result.
C.The additional bandwidth is needed to access more than one site. Most HTTP traffic is downstream.
D.The additional downstream bandwidth allows the Enterprise VPN device to send the IP voice packets much faster, allowing them to reach the Teleworker network with less latency.
A.when all access to the Internet is through the IPSec tunnel
B.when there is direct Internet access via split-tunneling
C.when there is no Internet access configured through the Teleworker router
D.whenever you have IOS-Firewall (CBAC) configured
A.QoS pre-classify permits making QoS decisions based on elements from the unencrypted IP packet.
B.QoS pre-classify is required when encrypting voice.
C.QoS pre-classify is an advantage to Service Providers transporting encrypted packets.
D.QoS pre-classify is not designed for IPSec/GRE configurations.
A.when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through
B.when the Teleworker router itself is doing NAT/pNAT
C.always
D.never
Refer to the exhibit. A customer indicates their teleworkers plan to use IP phones in their home offices. The IT department has surveyed the planned teleworkers, resulting in the user groupings shown in the exhibit. To provide the highest voice quality, the best recommendations to this customer are（）.
A.Deploy all three groups with a QoS service policy, choosing the parameters for Traffic Shaping based on the average uplink speed across the three groups.
B.Teleworkers in Groups A and B should inquire with their DSL providers for subscriptions with higher uplink bandwidths.
C.Teleworkers in Group C should change their subscriptions to DSL for deployment consistency.
D.Teleworkers in Group A should upgrade their subscription to obtain static IP addresses
E.Teleworkers in Group A should inquire with their DSL providers for subscriptions with higher downlink bandwidths.
最新試題
Refer to the exhibit. With an IPSec tunnel established between remote Router A and head-end router B, with Compressed Real-Time Protocol (cRTP) configured on the serial interface of Router A, what impact will the cRTP configuration have on the Voice over IP packets flowing through the IPSec tunnel from a Cisco 7960 IP phone?（）
What is a key characteristic of the Cisco Business Ready Teleworker solution which is different from traditional software-client based Teleworker solutions?（）
Which statement regarding 802.1X is true?（）
In a Teleworker deployment with a single IP phone connected to a Cisco 831 router, select the true statement regarding Call Admission Control.（）
Refer to the exhibit. Which statement is true regarding the topology?（）
What characteristics make ADSL the likely choice among DSL technologies for Teleworker?（）
What is not a difference between VPN tunnel authentication and per-user authentication?（）
What are the DSL-specific factors that require additional bandwidth when supporting Voice-over-IP over an IPSec VPN?（）
Refer to the exhibit. Given this deployment model, what capability must the Broadband Router provide for the Enterprise applications to function properly?（）
Context-Based Access Control (CBAC) is the algorithm of the Cisco IOS firewall feature. How does CBAC improve Teleworker security?（）