单选题Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）AThe traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.BThe traffic is permitted through the myTunnel IPSec tunnel dai

题目
单选题
Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）
A

The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.

B

The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.

C

The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.

D

The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.

相似考题

1.Click the Exhibit button.Assume the default-policy has not been configured.Given the configuration shown in the exhibit, which two statements about traffic from host_a in the HR zone to host_b in the trust zone are true? （）(Choose two.)A. DNS traffic is denied.B. HTTP traffic is denied.C. FTP traffic is permitted.D. SMTP traffic is permitted.

2.Which three advanced permit actions within security policies are valid?() (Choose three.)A. Mark permitted traffic for firewall user authentication.B. Mark permitted traffic for SCREEN options.C. Associate permitted traffic with an IPsec tunnel.D. Associate permitted traffic with a NAT rule.E. Mark permitted traffic for IDP processing.

3.Based on the configuration shown in the exhibit, what will happen to the traffic matching the securitypolicy?()A. The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.B. The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.C. The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.D. The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.

4.Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.

更多“单选题Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）A The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.B The traffic is permitted through the myTunnel IPSec tunnel”相关问题

  • 第1题：

    Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network.Which of the following answers best describes the router‘s logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）

    A. When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interface

    B. When routing the packet, matching a route whose outgoing interface is the GRE tunnel interface

    C. When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interface

    D. When permitted by an ACL that was referenced in the associated crypto map


    参考答案：B

  • 第2题：

    Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network. Which of the following answers best describes the router's logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）

    • A、When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interface
    • B、When routing the packet, matching a route whose outgoing interface is the GRE tunnel interface
    • C、When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interface
    • D、When permitted by an ACL that was referenced in the associated crypto map

    正确答案:B

  • 第3题：

    Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }

    • A、set policy tunnel-traffic then tunnel remote-vpn
    • B、set policy tunnel-traffic then permit tunnel remote-vpn
    • C、set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
    • D、set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

    正确答案:D

  • 第4题：

    Which configuration shows the correct application of a security policy scheduler?（）

    • A、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } scheduler-name now; } } }
    • B、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }
    • C、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn scheduler-name now; } } } }
    • D、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; scheduler-name now; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }myTunnel;

    正确答案:B

  • 第5题：

    Which three advanced permit actions within security policies are valid？（）

    • A、Mark permitted traffic for firewall user authentication.
    • B、Mark permitted traffic for SCREEN options.
    • C、Associate permitted traffic with an IPsec tunnel.
    • D、Associate permitted traffic with a NAT rule.
    • E、Mark permitted traffic for IDP processing.

    正确答案:A,C,E

  • 第6题：

    Based on the configuration shown in the exhibit， what are the actions of the security policy？（） [edit schedulers] user@host# show scheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thursday { start-time 07：00：00 stop-time 18：00：00； } } [edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts； destination-address ExtServers； application ExtApps；} then { permit { tunnel { ipsec-vpn myTunnel； } } } scheduler-name now；

    • A、The policy will always permit transit packets and use the IPsec VPN myTunnel.
    • B、The policy will permit transit packets only on Monday， and use the IPsec VPN Mytunnel.
    • C、The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.
    • D、The policy will always permit transit packets， but will only use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.

    正确答案:C

  • 第7题：

    单选题
    Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）
    A

    The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.

    B

    The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.

    C

    The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.

    D

    The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.


    正确答案： D
    解析： 暂无解析

  • 第8题：

    单选题
    Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
    A

    set policy tunnel-traffic then tunnel remote-vpn

    B

    set policy tunnel-traffic then permit tunnel remote-vpn

    C

    set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit

    D

    set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn


    正确答案： B
    解析： 暂无解析

  • 第9题：

    单选题
    Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
    A

    set policy tunnel-traffic then tunnel remote-vpn

    B

    set policy tunnel-traffic then permit tunnel remote-vpn

    C

    set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit

    D

    set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn


    正确答案： A
    解析： 暂无解析

  • 第10题：

    单选题
    Given the configuration shown in the exhibit, what will happen to traffic from source 10.10.10.25 destined to 200.200.200.1?（）
    A

    The traffic will be rejected

    B

    The traffic will be dropped

    C

    The traffic will be forwarded

    D

    The traffic will be policed


    正确答案： C
    解析： 暂无解析

  • 第11题：

    多选题
    Which two configuration elements are required for a route-based VPN？（）
    A

    secure tunnel interface

    B

    security policy to permit the IKE traffic

    C

    a route for the tunneled transit traffic

    D

    tunnel policy for transit traffic referencing the IPsec VPN


    正确答案： B,A
    解析： 暂无解析

  • 第12题：

    单选题
    Based on the configuration shown in the exhibit， what will happen to the traffic matching thesecurity policy？（） [edit schedulers] user@host# showscheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thursday { start-time 07：00：00 stop-time 18：00：00； } } [edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts； destination-address ExtServers； application ExtApps； } then { permit { tunnel { ipsec-vpn myTunnel； } } } scheduler-name now； }
    A

    The traffic is permitted through the myTunnel IPsec tunnel only on Tuesdays.

    B

    The traffic is permitted through the myTunnel IPsec tunnel daily， with the exception of Mondays.

    C

    The traffic is permitted through the myTunnel IPsec tunnel all day on Mondays and Wednesdays between 7：00 am and 6：00 pm， and Thursdays between 7：00 am and 6：00 pm.

    D

    The traffic is permitted through the myTunnel IPsec tunnel all day on Mondays and Wednesdays between 6：01 pm and 6：59 am， and Thursdays between 6：01 pm and 6：59 am


    正确答案： A
    解析： 暂无解析

  • 第13题：

    To securely transport EIGRP traffic, a network administrator will build VPNs between sites. What is the best method to accomplish the transport of EIGRP traffic?()

    A. IPSec in tunnel mode

    B. IPSec in transport mode

    C. GRE with IPSec in transport mode

    D. GRE with IPSec in tunnel mode


    参考答案：C

  • 第14题：

    Based on the configuration shown in the exhibit， what will happen to the traffic matching thesecurity policy？（） [edit schedulers] user@host# showscheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thursday { start-time 07：00：00 stop-time 18：00：00； } } [edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts； destination-address ExtServers； application ExtApps； } then { permit { tunnel { ipsec-vpn myTunnel； } } } scheduler-name now； }

    • A、The traffic is permitted through the myTunnel IPsec tunnel only on Tuesdays.
    • B、The traffic is permitted through the myTunnel IPsec tunnel daily， with the exception of Mondays.
    • C、The traffic is permitted through the myTunnel IPsec tunnel all day on Mondays and Wednesdays between 7：00 am and 6：00 pm， and Thursdays between 7：00 am and 6：00 pm.
    • D、The traffic is permitted through the myTunnel IPsec tunnel all day on Mondays and Wednesdays between 6：01 pm and 6：59 am， and Thursdays between 6：01 pm and 6：59 am

    正确答案:C

  • 第15题：

    To securely transport EIGRP traffic, a network administrator will build VPNs between sites. What is the best method to accomplish the transport of EIGRP traffic?（）

    • A、IPSec in tunnel mode
    • B、IPSec in transport mode
    • C、GRE with IPSec in transport mode
    • D、GRE with IPSec in tunnel mode

    正确答案:C

  • 第16题：

    Which three advanced permit actions within security policies are valid?（） (Choose three.)

    • A、Mark permitted traffic for firewall user authentication.
    • B、Mark permitted traffic for SCREEN options.
    • C、Associate permitted traffic with an IPsec tunnel.
    • D、Associate permitted traffic with a NAT rule.
    • E、Mark permitted traffic for IDP processing.

    正确答案:A,C,E

  • 第17题：

    Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)

    • A、Traffic is permitted from the trust zone to the untrust zone.
    • B、Intrazone traffic in the trust zone is permitted.
    • C、All traffic through the device is denied.
    • D、The policy is matched only when no other matching policies are found.

    正确答案:C,D

  • 第18题：

    Which two configuration elements are required for a route-based VPN？（）

    • A、secure tunnel interface
    • B、security policy to permit the IKE traffic
    • C、a route for the tunneled transit traffic
    • D、tunnel policy for transit traffic referencing the IPsec VPN

    正确答案:A,C

  • 第19题：

    多选题
    Which three advanced permit actions within security policies are valid？（）
    A

    Mark permitted traffic for firewall user authentication.

    B

    Mark permitted traffic for SCREEN options.

    C

    Associate permitted traffic with an IPsec tunnel.

    D

    Associate permitted traffic with a NAT rule.

    E

    Mark permitted traffic for IDP processing.


    正确答案： C,E
    解析： 暂无解析

  • 第20题：

    单选题
    Which configuration shows the correct application of a security policy scheduler?（）
    A

    [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } scheduler-name now; } } }

    B

    [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }

    C

    [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn scheduler-name now; } } } }

    D

    [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; scheduler-name now; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }myTunnel;


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    To securely transport EIGRP traffic, a network administrator will build VPNs between sites. What is the best method to accomplish the transport of EIGRP traffic?（）
    A

    IPSec in tunnel mode

    B

    IPSec in transport mode

    C

    GRE with IPSec in transport mode

    D

    GRE with IPSec in tunnel mode


    正确答案： A
    解析： 暂无解析

  • 第22题：

    单选题
    Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network. Which of the following answers best describes the router's logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）
    A

    When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interface

    B

    When routing the packet, matching a route whose outgoing interface is the GRE tunnel interface

    C

    When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interface

    D

    When permitted by an ACL that was referenced in the associated crypto map


    正确答案： D
    解析： 暂无解析

  • 第23题：

    单选题
    Based on the configuration shown in the exhibit， what are the actions of the security policy？（） [edit schedulers] user@host# show scheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thursday { start-time 07：00：00 stop-time 18：00：00； } } [edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts； destination-address ExtServers； application ExtApps；} then { permit { tunnel { ipsec-vpn myTunnel； } } } scheduler-name now；
    A

    The policy will always permit transit packets and use the IPsec VPN myTunnel.

    B

    The policy will permit transit packets only on Monday， and use the IPsec VPN Mytunnel.

    C

    The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.

    D

    The policy will always permit transit packets， but will only use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.


    正确答案： A
    解析： 暂无解析

  • 第24题：

    多选题
    Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)
    A

    Traffic is permitted from the trust zone to the untrust zone.

    B

    Intrazone traffic in the trust zone is permitted.

    C

    All traffic through the device is denied.

    D

    The policy is matched only when no other matching policies are found.


    正确答案： C,A
    解析： 暂无解析

相关内容