多选题What are three features of the Cisco IOS Firewall feature set？（）Anetwork-based application recognition （NBAR）Bauthentication proxyCstateful packet filteringDAAA servicesEproxy serverFIPS

题目
多选题
What are three features of the Cisco IOS Firewall feature set？（）
A

network-based application recognition （NBAR）

B

authentication proxy

C

stateful packet filtering

D

AAA services

E

proxy server

F

IPS

相似考题

1.What Cisco IOS feature can be enabled to pinpoint an application that is causing slow network performance?()A.SNMPB.NetflowC.WCCPD.IP SLA

2.What is a requirement to enable Cisco IOS IPS with 5.x signature？（）A、disable Zone-Based Firewall as the two features are not compatibleB、disable Cisco Express Forwarding as the two features are not compatibleC、generate a certificate and export on Cisco.com to receive a signature updateD、import the public RSA key from the Cisco IPS team that allows the router to verify that a signatureupdate （which was signed by this key） comes from Cisco

3.What are two security features of the Cisco Secure Router 500 Series？ （）A、Cisco Intrusion Prevention SystemB、Cisco IOS Software FirewallC、Cisco IOS Easy VPND、Cisco Unified Wireless NetworkingE、Cisco ASA Hardware Firewall

4.Which three statements are true when configuring Cisco IOS Firewall features using the SDM？ （）A、A custom application security policy can be configured in the Advanced Firewall Security Configuration dialog box.B、An optional DMZ interface can be specified in the Advanced Firewall Interface Configuration dialog box.C、Custom application policies for e-mail， instant messaging， HTTP， and peer-to-peer services can be created using the Intermediate Firewall wizard.D、Only the outside （untrusted） interface is specified in the Basic Firewall Interface Configuration dialog box.E、The outside interface that SDM can be launched from is configured in the Configuring Firewall for Remote Access dialog box.F、The SDM provides a basic， intermediate， and advanced firewall wizard.

更多“多选题What are three features of the Cisco IOS Firewall feature set？（）Anetwork-based application recognition （NBAR）Bauthentication proxyCstateful packet filteringDAAA servicesEproxy serverFIPS”相关问题

  • 第1题：

    What tasks can only be performed in the default or admin VDC？（）

    • A、 EPLD upgrade， IOS ISSU， FCoE feature enablement， CoPP configuration， and rolling back a checkpoint
    • B、 EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration， and ACL capture enablement
    • C、 EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration and SNMP configuration
    • D、 EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration， and write erase

    正确答案:B

  • 第2题：

    What are three features of the Cisco IOS Firewall feature set？（）

    • A、network-based application recognition （NBAR）
    • B、authentication proxy
    • C、stateful packet filtering
    • D、AAA services
    • E、proxy server
    • F、IPS

    正确答案:B,C,F

  • 第3题：

    What Cisco IOS feature examines packets received to make sure that the source address and interfaceare in the routing table and matck the interface that the packet was received on？（）

    • A、MPLS Traffic Engineering
    • B、Dynamic access-lists
    • C、Authentication
    • D、Receive ACL
    • E、Unicast RPF

    正确答案:E

  • 第4题：

    Which two types of QoS functionality will be provided by Network-Based Application Recognition？（）

    • A、NBAR provides the ability to configure MCQ； it is a mandatory MCQ component.
    • B、NBAR provides deep packet inspection and is used for advanced packet classification.
    • C、NBAR provides per-protocol packet and byte accounting functionality； it is used to track bandwidth utilization for all protocols described in the loaded PDLMs.
    • D、NBAR provides scheduling in an MQC policy map using an advanced algorithm.

    正确答案:B,C

  • 第5题：

    Which of these is mandatory when configuring Cisco IOS Firewall？ （）

    • A、Cisco IOS IPS enabled on the untrusted interface
    • B、NBAR enabled to perform protocol discovery and deep packet inspection
    • C、a route map to define the trusted outgoing traffic
    • D、a route map to define the application inspection rules
    • E、an inbound extended ACL applied to the untrusted interface

    正确答案:E

  • 第6题：

    The Cisco NAC Appliance is able to check which three items before allowing network access?（）

    • A、client antivirus software state
    • B、personal firewall settings
    • C、wireless cell bandwidth availability
    • D、IOS versions for routers and switches
    • E、appropriate client patch management level
    • F、appropriate QoS settings for client application Answer:

    正确答案:A,B,E

  • 第7题：

    单选题
    What is a new feature of the Cisco ISR router? （）
    A

    advanced integration module

    B

    FICON ports

    C

    Cisco CallManager 5.0 support

    D

    warm Cisco IOS upgrade feature


    正确答案： B
    解析： 暂无解析

  • 第8题：

    单选题
    What tasks can only be performed in the default or admin VDC？（）
    A

     EPLD upgrade， IOS ISSU， FCoE feature enablement， CoPP configuration， and rolling back a checkpoint

    B

     EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration， and ACL capture enablement

    C

     EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration and SNMP configuration

    D

     EPLD upgrade， Cisco IOS ISSU， FCoE feature enablement， CoPP configuration， and write erase


    正确答案： D
    解析： 暂无解析

  • 第9题：

    问答题
    NBAR is a Cisco IOS feature that can be used to perform three tasks？

    正确答案： （1）Protocol discovery
    （2）Traffic statistics collection
    （3）Traffic classification
    解析： 暂无解析

  • 第10题：

    单选题
    Which of these is mandatory when configuring Cisco IOS Firewall？ （）
    A

    Cisco IOS IPS enabled on the untrusted interface

    B

    NBAR enabled to perform protocol discovery and deep packet inspection

    C

    a route map to define the trusted outgoing traffic

    D

    a route map to define the application inspection rules

    E

    an inbound extended ACL applied to the untrusted interface


    正确答案： B
    解析： 暂无解析

  • 第11题：

    单选题
    Which command can you use to determine the cisco ios feature set on a cisco router？（）
    A

    show version

    B

    dir flash：include ios

    C

    show environment

    D

    show diag

    E

    show inventory


    正确答案： A
    解析： 暂无解析

  • 第12题：

    多选题
    What are two security features of the Cisco Secure Router 500 Series？ （）
    A

    Cisco Intrusion Prevention System

    B

    Cisco IOS Software Firewall

    C

    Cisco IOS Easy VPN

    D

    Cisco Unified Wireless Networking

    E

    Cisco ASA Hardware Firewall


    正确答案： E,C
    解析： 暂无解析

  • 第13题：

    NBAR is a Cisco IOS feature that can be used to perform three tasks？


    正确答案: （1）Protocol discovery
    （2）Traffic statistics collection
    （3）Traffic classification

  • 第14题：

    What Cisco IOS feature can be enabled to pinpoint an application that is causing slow network performance?（）

    • A、SNMP
    • B、Netflow
    • C、WCCP
    • D、IP SLA

    正确答案:B

  • 第15题：

    What Cisco Switch feature best protects against CAM table overflow attacks？（）

    • A、 Storm Control
    • B、 Port security
    • C、 CAM table size definition
    • D、 IP spoof prevention
    • E、 Network Based Application Recognition

    正确答案:B

  • 第16题：

    Which command can you use to determine the cisco ios feature set on a cisco router？（）

    • A、show version
    • B、dir flash：include ios
    • C、show environment
    • D、show diag
    • E、show inventory

    正确答案:A

  • 第17题：

    What is a new feature of the Cisco ISR router? （）

    • A、advanced integration module
    • B、FICON ports
    • C、Cisco CallManager 5.0 support
    • D、warm Cisco IOS upgrade feature

    正确答案:D

  • 第18题：

    The Cisco NAC Appliance is able to check which three items before allowing network access？（）

    • A、 client antivirus software state
    • B、 personal firewall settings
    • C、 wireless cell bandwidth availability
    • D、 IOS versions for routers and switches
    • E、 appropriate client patch management level
    • F、 appropriate QoS settings for client application

    正确答案:A,B,E

  • 第19题：

    多选题
    What are three features of the Cisco IOS Firewall feature set？（）
    A

    network-based application recognition （NBAR）

    B

    authentication proxy

    C

    stateful packet filtering

    D

    AAA services

    E

    proxy server

    F

    IPS


    正确答案： F,C
    解析： 暂无解析

  • 第20题：

    多选题
    What are three features of voice traffic on a network？（）
    A

    bursty

    B

    constant

    C

    bandwidth intensive

    D

    small packet sizes

    E

    time-sensitive

    F

    retransmittable


    正确答案： B,F
    解析： 暂无解析

  • 第21题：

    单选题
    What Cisco Switch feature best protects against CAM table overflow attacks？（）
    A

     Storm Control

    B

     Port security

    C

     CAM table size definition

    D

     IP spoof prevention

    E

     Network Based Application Recognition


    正确答案： E
    解析： 暂无解析

  • 第22题：

    多选题
    Which three statements are true when configuring Cisco IOS Firewall features using the SDM？ （）
    A

    A custom application security policy can be configured in the Advanced Firewall Security Configuration dialog box.

    B

    An optional DMZ interface can be specified in the Advanced Firewall Interface Configuration dialog box.

    C

    Custom application policies for e-mail， instant messaging， HTTP， and peer-to-peer services can be created using the Intermediate Firewall wizard.

    D

    Only the outside （untrusted） interface is specified in the Basic Firewall Interface Configuration dialog box.

    E

    The outside interface that SDM can be launched from is configured in the Configuring Firewall for Remote Access dialog box.

    F

    The SDM provides a basic， intermediate， and advanced firewall wizard.


    正确答案： E,B
    解析： 暂无解析

  • 第23题：

    单选题
    What Cisco IOS feature examines packets received to make sure that the source address and interfaceare in the routing table and matck the interface that the packet was received on？（）
    A

    MPLS Traffic Engineering

    B

    Dynamic access-lists

    C

    Authentication

    D

    Receive ACL

    E

    Unicast RPF


    正确答案： D
    解析： 暂无解析

  • 第24题：

    多选题
    For delay sensitive traffic， what are the three best ways that are used to prevent packet loss？ （）
    A

    Compress payload.

    B

    Use header compression.

    C

    Increase link capacity.

    D

    Use random early detection.

    E

    Guarantee bandwidth to fragile flows.

    F

    Implement network-based application recognition.


    正确答案： E,D
    解析： 暂无解析

相关内容