单选题Which of these is mandatory when configuring Cisco IOS Firewall？ （）A Cisco IOS IPS enabled on the untrusted interfaceB NBAR enabled to perform protocol discovery and deep packet inspectionC a route map to define the trusted outgoing trafficD a route ma

题目
单选题
Which of these is mandatory when configuring Cisco IOS Firewall？ （）
A

Cisco IOS IPS enabled on the untrusted interface

B

NBAR enabled to perform protocol discovery and deep packet inspection

C

a route map to define the trusted outgoing traffic

D

a route map to define the application inspection rules

E

an inbound extended ACL applied to the untrusted interface

相似考题

1.Which three of the following steps are mandatory when configuring MPLS on Cisco IOS? ()(Choose three.)A. start LDPB. enable CEF switchingC. configure the MPLS IDD. disable IP TTL propagationE. configure conditional label advertisingF. enable label switching on frame mode interfaces

2.Which IOS security feature is configured by the ip inspect inspection-name {in | out} command？（）A、IPsec site-to-site VPNB、Cisco AutoSecureC、Cisco IOS FirewallD、IPS

3.Which three products reside on the UC500 platform?（）A、Cisco Unified Communications ManagerExpressB、Cisco IOS FirewallC、Cisco UnifiedContact CenterD、Cisco IOSE、Cisco Unity ExpressF、Cisco UnifiedCallConnector

4.Which result is of securing the Cisco IOS image by use of the Cisco IOS image resilience feature？（）A、The Cisco IOS image file will not be visible in the output from the show flash command.B、The show version command will not show the Cisco IOS image file location.C、When the router boots up， the Cisco IOS image will be loaded from a secured FTP location.D、The running Cisco IOS image will be encrypted and then automatically backed up to a TFTP server.

更多“Which of these is mandatory when configuring Cisco IOS Firew”相关问题

  • 第1题：

    When configuring Cisco IOS login enhancements for virtual connections， what is the "quiet period"？（）

    • A、The period of time in which virtual login attempts are blocked， following repeated failed login attempts
    • B、The period of time in which virtual logins are blocked as security services fully initialize
    • C、A period of time when no one is attempting tolog in
    • D、The period of time between successive login attempts

    正确答案:A

  • 第2题：

    Which three of the following steps are mandatory when configuring MPLS on Cisco IOS? （）(Choose three.)

    • A、start LDP
    • B、enable CEF switching
    • C、configure the MPLS ID
    • D、disable IP TTL propagation
    • E、configure conditional label advertising
    • F、enable label switching on frame mode interfaces

    正确答案:A,B,F

  • 第3题：

    Which of these is mandatory when configuring Cisco IOS Firewall？ （）

    • A、Cisco IOS IPS enabled on the untrusted interface
    • B、NBAR enabled to perform protocol discovery and deep packet inspection
    • C、a route map to define the trusted outgoing traffic
    • D、a route map to define the application inspection rules
    • E、an inbound extended ACL applied to the untrusted interface

    正确答案:E

  • 第4题：

    When configuring Cisco Secure ACS to support wireless EAP authentication， which device must be configured as a AAA client？（）

    • A、Wireless Control System
    • B、wireless clients
    • C、wireless controllers
    • D、controller-based access points
    • E、Location Appliance

    正确答案:C

  • 第5题：

    When configuring IOS firewall （CBAC） operations on Cisco routers， the "inspection rule" could be applied at which two locations？ （）

    • A、 at the untrusted interfacein the inbound direction
    • B、 atthe untrusted interface in theoutbounddirection
    • C、 at thetrusted interface inthe inbound direction
    • D、 at the trusted interface in the outbound direction
    • E、 at the trusted and untrusted interfaces in the inbound direction
    • F、 at the trusted and untrusted interfaces in the outbounddirection

    正确答案:B,C

  • 第6题：

    单选题
    Which item is correct regarding Cisco IOS IPS on Cisco IOS Release 12.4（11）T and later ？（）
    A

    requires the Basic or Advanced Signature Definition File

    B

    uses the built-in signatures that come with the Cisco IOS image as backup

    C

    supports SDEE，SYSLOG，and SNMP for sending Cisco IPS alerts

    D

    uses Cisco IPS 5.x signature format


    正确答案： D
    解析： 暂无解析

  • 第7题：

    多选题
    When configuring IOS firewall （CBAC） operations on Cisco routers， the "inspection rule" could be applied at which two locations？ （）
    A

    at the untrusted interfacein the inbound direction

    B

    atthe untrusted interface in theoutbounddirection

    C

    at thetrusted interface inthe inbound direction

    D

    at the trusted interface in the outbound direction

    E

    at the trusted and untrusted interfaces in the inbound direction

    F

    at the trusted and untrusted interfaces in the outbounddirection


    正确答案： E,B
    解析： 暂无解析

  • 第8题：

    单选题
    What does Cisco recommend when you are enabling Cisco IOS IPS？（）
    A

    Do not enable all the signatures at the same time.

    B

    Do not enable the ICMP signature.

    C

    Disable the Zone-Based Policy Firewall because it is not compatible with Cisco IOS IPS.

    D

    Disable CEF because it is not compatible with Cisco IOS IPS. .


    正确答案： B
    解析： 暂无解析

  • 第9题：

    单选题
    Which result is of securing the Cisco IOS image by use of the Cisco IOS image resilience feature？（）
    A

    The Cisco IOS image file will not be visible in the output from the show flash command.

    B

    The show version command will not show the Cisco IOS image file location.

    C

    When the router boots up， the Cisco IOS image will be loaded from a secured FTP location.

    D

    The running Cisco IOS image will be encrypted and then automatically backed up to a TFTP server.


    正确答案： A
    解析： 暂无解析

  • 第10题：

    单选题
    When configuring Cisco Secure ACS to support wireless EAP authentication，which device mustbeconfigured as a AAA client？（）
    A

    Location Appliance

    B

    controller-based access points

    C

    wireless clients

    D

    Wireless Control System

    E

    wireless controllers


    正确答案： D
    解析： 暂无解析

  • 第11题：

    单选题
    Cisco IOS XR has implemented a nonstop routing feature so that when RP failover occurs， the routinginformation can be recovered locally. Which protocol does not support the NSR feature？（）
    A

    OSPF

    B

    LDP

    C

    BGP

    D

    IS-IS

    E

    RSVP


    正确答案： E
    解析： 暂无解析

  • 第12题：

    多选题
    Cisco AutoQoS takes the interface type and bandwidth into consideration when configuring which three QoS features？（）
    A

    voice compression methodology

    B

    LLQ

    C

    CRTP

    D

    routing protocol

    E

    LFI

    F

    trust boundary


    正确答案： A,D
    解析： 暂无解析

  • 第13题：

    Cisco AutoQoS takes the interface type and bandwidth into consideration when configuring which three QoS features？（）

    • A、voice compression methodology
    • B、LLQ
    • C、CRTP
    • D、routing protocol
    • E、LFI
    • F、trust boundary

    正确答案:B,C,E

  • 第14题：

    When configuring SSH， which is the Cisco minimum recommended modulus value？（）

    • A、2048 bits
    • B、1024 bits
    • C、256 bits
    • D、512 bits

    正确答案:B

  • 第15题：

    When configuring a Cisco Adaptive Security Appliance in multiple context mode， which of the follow capabilities are supported？（）

    • A、 Multicastis supported
    • B、 Dynamic routing protocols are supported
    • C、 VPN configurations are supported
    • D、 Static routes are supported

    正确答案:D

  • 第16题：

    Which two items best describe a Cisco IOS IP SLA responder？（）

    • A、required at the destination to implement Cisco IOS IP SLA services
    • B、improves measurement accuracy
    • C、required for VoIP jitter measurements
    • D、provides security on Cisco IOS IP SLA messages via LEAP or EAP-FAST authentication
    • E、responds to one Cisco IOS IP SLA operation per port
    • F、stores the resulting test statistics

    正确答案:B,C

  • 第17题：

    单选题
    When configuring SSH， which is the Cisco minimum recommended modulus value？（）
    A

    2048 bits

    B

    1024 bits

    C

    256 bits

    D

    512 bits


    正确答案： A
    解析： 暂无解析

  • 第18题：

    单选题
    After making some network changes you power off and then power on your Cisco router. What sequence of events occurs when a router is powered up?（）
    A

    Perform POST, locate configuration statements, apply configuration statements, locate Cisco IOS software, and load Cisco IOS software.

    B

    Locate Cisco IOS software, load Cisco IOS software, locate configuration statements, apply configuration statements, and perform POST.

    C

    Test software routines, POST, load configuration files, load Cisco IOS software, test Cisco IOS software.

    D

    POST, locate Cisco IOS software, load the Cisco IOS software, locate configuration statements, and apply configuration statements.

    E

    Load and test IOS, load configuration files, test software routines, POST.


    正确答案： A
    解析： 暂无解析

  • 第19题：

    多选题
    Which two items best describe a Cisco IOS IP SLA responder？（）
    A

    required at the destination to implement Cisco IOS IP SLA services

    B

    improves measurement accuracy

    C

    required for VoIP jitter measurements

    D

    provides security on Cisco IOS IP SLA messages via LEAP or EAP-FAST authentication

    E

    responds to one Cisco IOS IP SLA operation per port

    F

    stores the resulting test statistics


    正确答案： D,C
    解析： 暂无解析

  • 第20题：

    单选题
    When configuring Cisco IOS login enhancements for virtual connections， what is the "quiet period"？（）
    A

    The period of time in which virtual login attempts are blocked， following repeated failed login attempts

    B

    The period of time in which virtual logins are blocked as security services fully initialize

    C

    A period of time when no one is attempting tolog in

    D

    The period of time between successive login attempts


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    When configuring role-based CLI on a Cisco router，which action will be taken first ？（）
    A

    Create a parser view called root view.

    B

    Log in to the router as the root user.

    C

    Enable the root view on the router.

    D

    Enable role-based CLI globally on the router using the privileged EXEC mode Cisco IOS command.


    正确答案： B
    解析： 暂无解析

  • 第22题：

    单选题
    When configuring a Cisco Adaptive Security Appliance in multiple context mode， which of the follow capabilities are supported？（）
    A

     Multicastis supported

    B

     Dynamic routing protocols are supported

    C

     VPN configurations are supported

    D

     Static routes are supported


    正确答案： A
    解析： 暂无解析

  • 第23题：

    单选题
    Which of these is mandatory when configuring Cisco IOS Firewall？ （）
    A

    Cisco IOS IPS enabled on the untrusted interface

    B

    NBAR enabled to perform protocol discovery and deep packet inspection

    C

    a route map to define the trusted outgoing traffic

    D

    a route map to define the application inspection rules

    E

    an inbound extended ACL applied to the untrusted interface


    正确答案： B
    解析： 暂无解析

  • 第24题：

    多选题
    Which three of the following steps are mandatory when configuring MPLS on Cisco IOS?（）(Choose three.)
    A

    start LDP

    B

    enable CEF switching

    C

    configure the MPLS ID

    D

    disable IP TTL propagation

    E

    configure conditional label advertising

    F

    enable label switching on frame mode interfaces


    正确答案： A,F
    解析： 暂无解析

相关内容