网络测试题
电动势公式QUESTION 1
Which three curity features were introduced with the SNMPv3 protocol? (Choo three.)
A. Message integrity, which ensures that a packet has not been tampered with in-transit
B. DoS prevention, which ensures that the device cannot be impacted by SNMP buffer overflow
C. Authentication, which ensures that the message is from a valid source
D. Authorization, which allows access to certain data ctions for certain authorized urs
E. Digital certificates, which ensure nonrepudiation of authentications
F. Encryption of the packet to prevent it from being en by an unauthorized source
QUESTION 2
Which four techniques can you u for IP management plane curity? (Choo four.)
A. Management Plane Protection
B. uRPF
C. strong passwords
D. RBAC
E. SNMP curity measures
F. MD5 authentication
QUESTION 3
Which three statements are true about PIM-SM operations? (Choo three.)
A. PIM-SM supports RP configuration using static RP, Auto-RP, or BSR.
B. PIM-SM us a shared tree that is rooted at the multicast source.
C. Different RPs can be configured for different multicast groups to increa RP scalability.
D. Candidate RPs and RP mapping agents are configured to enable Auto-RP.
E. PIM-SM us the implicit join model.
QUESTION 4
Which three options are curity measures that are defined for Mobile IPv6? (Choo three.)
A. IPc SAs are ud for binding updates and acknowledgements.面包机好用吗
B. The u of IKEv1 or IKEv2 is mandatory for connections between the home agent and mobile node.
C. Mobile nodes and the home agents must support ESP in transport mode with non-NULL payload authentication.
坦克绘画
D. Mobile IPv6 control messages are protected by SHA-2.
E. IPc SAs are ud to protect dynamic home agent address discovery.
F. IPc SAs can be ud to protect mobile prefix solicitations and advertiments.
QUESTION 5
Which three statements are true about DES? (Choo three.)
A. A 56-bit key is ud to encrypt 56-bit blocks of plaintext.
B. A 56-bit key is ud to encrypt 64-bit blocks of plaintext.
C. Each block of plaintext is procesd through 16 rounds of identical operations.
D. Each block of plaintext is procesd through 64 rounds of identical operations.水稳基层
E. ECB, CBC, and CBF are modes of DES.
F. Each Block of plaintext is procesd through 8 rounds of identical operations.
G. CTR, CBC, and OFB are modes of DES.
QUESTION 6
Comparing and contrasting IKEv1 and IKEv2, which three statements are true? (Choo three.)
A. IKEv2 adds EAP as a method of authentication for clients; IKEv1 does not u EAP.
B. IKEv1 and IKEv2 endpoints indicate support for NAT-T via the vendor_ID payload.
C. IKEv2 and IKEv1 always ensure protection of the identities of the peers during the negotiation process.
D. IKEv2 provides ur authentication via the IKE_AUTH exchange; IKEv1 us the XAUTH exchange.
E. IKEv1 and IKEv2 both u INITIAL_CONTACT to synchronize SAs.
F. IKEv1 supports config mode via the SET/ACK and REQUEST/RESPONSE methods; IKEv2 supports only REQUEST/RESPONSE.
QUESTION 7
Which three nonproprietary EAP methods do not require the u of a client-side certificate for mutual authentication? (Choo three.)
A. LEAP
B. EAP-TLS
C. PEAP
D. EAP-TTLS
E. EAP-FAST
QUESTION 8
When you compare WEP to WPA (not WPA2), which three protections are gained? (Choo three.)
A. a message integrity check
B. AES-bad encryption
螳螂捕蝉黄雀在后是什么意思C. avoidance of weak Initialization vectors
D. longer RC4 keys
E. a rekeying mechanism
QUESTION 9
学画小动物
Which three configuration tasks are required for VPN clustering of AnyConnect clients that are connecting to an FQDN on the Cisco ASA? (Choo three.)
童年无忌>沈阳采暖费
A. The redirect-fqdn command must be entered under the vpn load-balancing
sub-configuration.
B. Each ASA in the VPN cluster must be able to resolve the IP of all DNS hostnames that are ud in the cluster.
C. The identification and CA certificates for the master FQDN hostname must be imported into each VPN cluster-member device.
D. The remote-access IP pools must be configured the same on each VPN cluster-member interface.
QUESTION 10
Which three statements are true about objects and object groups on a Cisco ASA appliance that is running Software Version 8.4 or later? (Choo three.)
