单选题A traditional router is better suited than a firewall device for which function? （）A VPN establishmentB packet-based forwardingC stateful packet processingD network address translation

题目
单选题
A traditional router is better suited than a firewall device for which function? （）
A

VPN establishment

B

packet-based forwarding

C

stateful packet processing

D

network address translation

相似考题

1.阅读下面的短文，回答问题 [When an IP packet arrives at a router, generally the router looks at the destination address of the packet, and forwards the packet to one of its network interfaces. The forwarding decision is usually done by looking up the destination address from another data structure called a forwarding table. The forwarding table is created by the router using the routing table and possible routing policies existing in the router. The router then creates a table where it lists which networks are accessible through which of the router’s network interfaces. An IP router looks at every IP packet individually and does the forwarding decision on a packet-by-packet basis. If something changes in the router’s routing table, a packet can take a different route from a preceding packet even if it has the same destination.] From the paragraph above，we can see that the router （ ） a forwarding table according to the routing table and possible routing policies existing in the router. When an IP packet arrives at a router, the （ ） part of packet is normally checked by the router. An IP router checks every IP Packet individually and makes the forwarding decision based on （ ）.A．is generating B．generate C．is generated D．generates A．forwarding table B．network interfaces C．routing policies D．destination address A．the destination address and network interfaces B．forwarding table and network interfaces C．the destination address and forward table D．routing policies and routing table

2.A traditional router is better suited than a firewall device for which function? ()A. VPN establishmentB. packet-based forwardingC. stateful packet processingD. network address translation

3.Which two features protect the ERX Edge Router from denial－of－service attacks? ()(Choose two.)A. rate limiting of ICMPB. RADIUS authorizationsC. source address validationD. stateful firewall on the router

4.Which three functions are provided by the Junos OS for security platforms?()(Choose three.)A. VPN establishmentB. stateful ARP lookupsC. Dynamic ARP inspectionD. Network Address TranslationE. inspection of packets at higher levels (Layer 4 and above)

更多“单选题A traditional router is better suited than a firewall device for which function? （）A VPN establishmentB packet-based forwardingC stateful packet processingD network address translation”相关问题

  • 第1题：

    Which two of these are advantages of placing the VPN device in the DMZ on the firewall?()

    A. fewer devices to manage

    B. moderate-to-high scalability

    C. stateful inspection of decrypted VPN traffic

    D. increased bandwidth with additional interfaces

    E. decreased complexity as traffic is filtered from the firewall


    参考答案：B, C

  • 第2题：

    Traditional IP packet forwarding analyzes the（ ）IP address contained in the network layer header of each packet as the packet travels from its source to its final destination.A router analyzes the destination IP address independently at each hop in the network.Dynamic（ ）protocols or static configuration builds the database needed to analyze the destination IP address（the routing table）.The process of implementing traditional IP routing also is called hop-by-hop destination-based（ ）routing.Although successful，and obviously widely deployed，certain restrictions，which have been realized for some time，exist for this method of packet forwarding that diminish is（请作答此空）.New techniques are therefore required to address and expand the functionality of an IP-based network infrastructure.This first chapter concentrates on identifying these restrictions and presents a new archiecture，known as multiprotocol（ ）switching，that provides solutions some of these restrictions.

    A.reliability
    B.flexibility
    C.stability
    D.capability

    答案：B
    解析：
    传统的IP数据包转发分析目的IP地址,该地址包含在每个从源到最终目的地的网络层数据包的头部。一个路由器的分析目的IP地址，该地址独立在网络中的每跳。动态路由协议或静态配置构建数据库，该数据数据库需要分析目的IP地址（路由表）。实施传统的IP路由的过程也叫作基于目的地的逐条单播路由。虽然成功而且明显得广泛部署,并实现了一段时间，但是必然有某些限制,这种数据包转发方法的存在是减少了灵活性。新技术是因此需要地址和扩展一个基于ip的网络基础设施的功能。第一章集中在识别一种新的架构的限制条件和反馈,该架构众所周知是多协议标签交换,它为其中的一些限制条件提供解决方案。

  • 第3题：

    Which three functions are provided by JUNOS Software for security platforms？（）

    • A、VPN establishment
    • B、stateful ARP lookups
    • C、Dynamic ARP inspection
    • D、Network Address Translation
    • E、inspection of packets at higher levels （Layer 4 and above）

    正确答案:A,D,E

  • 第4题：

    When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）

    • A、when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through 
    • B、when the Teleworker router itself is doing NAT/pNAT
    • C、always
    • D、never

    正确答案:A

  • 第5题：

    A traditional router is better suited than a firewall device for which function？（）

    • A、VPN establishment
    • B、packet-based forwarding
    • C、stateful packet processing
    • D、Network Address Translation

    正确答案:B

  • 第6题：

    Which network management solution performs configuration， monitoring， and management of Cisco Firewall， VPN router， and IPS devices as well as maintains network device inventory and software distribution features？（）

    • A、 CiscoWorks Security Device Management Center （SD/MC）
    • B、 Security Device Manager （SDM）
    • C、 Adaptive Security Device Manager （ASDM）
    • D、 CiscoWorks VMS/Management Center （VMS/MC）

    正确答案:D

  • 第7题：

    给了两段documentation里的描述，问这个时候发哪种类型的ICMP包。 The interface on which the packet comes into the router is the same interface on which the packet gets routed out. The subnet or network of the source IP address is on the same subnet or network of the next-hop IP address of the routed packet.


    正确答案:ICMP类型5重定向消息。

  • 第8题：

    Which two features protect the ERX Edge Router from denial-of-service attacks? （）(Choose two.)

    • A、rate limiting of ICMP
    • B、RADIUS authorizations
    • C、source address validation
    • D、stateful firewall on the router

    正确答案:A,C

  • 第9题：

    单选题
    A traditional router is better suited than a firewall device for which function? （）
    A

    VPN establishment

    B

    packet-based forwarding

    C

    stateful packet processing

    D

    network address translation


    正确答案： A
    解析： 暂无解析

  • 第10题：

    单选题
    What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode？（）
    A

     RADIUS or LDAP

    B

     an internal router running EIGRP

    C

     Reverse Route Injection and OSPF or RIPv2

    D

     the VPN appliance to be deployed in line with the firewall


    正确答案： A
    解析： 暂无解析

  • 第11题：

    单选题
    What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?（）
    A

    RADIUS or LDAP

    B

    an internal router running EIGRP

    C

    Reverse Route Injection and OSPF or RIPv2

    D

    the VPN appliance to be deployed in line with the firewall


    正确答案： D
    解析： 暂无解析

  • 第12题：

    单选题
    A Stateful firewall is MOST useful in protecting against which of the following network scans?（）
    A

    PING

    B

    UDP

    C

    Xmas

    D

    ACK


    正确答案： C
    解析： 暂无解析

  • 第13题：

    We have already covered the topic of network addresses. The first（71） in a block (in classes A,B,and C) defines the network address. In classes A,B,and C,if the hostid is all ls, the address is called a direct broadcast address. It is used by a.（） to send a packet to all hosts in a specific network. All hosts will accept a packet having this type of destination address. Note that this address can be used only as a （73）address in an lP packet. Note also that this special address also reduces the number of available hostid for each netid in classes A,B,and C.
    In classes A,B,and C,an address with all Is for the netid and hostid (32 bits) defines a（74） address in the current network.A host that wants to send a message to every other host can use this address as a destination address in an IP packet. However,a router will block a packet having this type ofaddress to confine the broadcasting to the （75） network. Note that this address belongs to class E.

    A.router
    B.switch
    C.huB.
    D.firewall

    答案：A
    解析：

  • 第14题：

    Traditional IP packet forwarding analyzes the（ ）IP address contained in the network layer header of each packet as the packet travels from its source to its final destination.A router analyzes the destination IP address independently at each hop in the network.Dynamic（请作答此空）protocols or static configuration builds the database needed to analyze the destination IP address（the routing table）.The process of implementing traditional IP routing also is called hop-by-hop destination-based（ ）routing.Although successful，and obviously widely deployed，certain restrictions，which have been realized for some time，exist for this method of packet forwarding that diminish is（ ）.New techniques are therefore required to address and expand the functionality of an IP-based network infrastructure.This first chapter concentrates on identifying these restrictions and presents a new archiecture，known as multiprotocol（ ）switching，that provides solutions some of these restrictions.

    A.routing
    B.forwarding
    C.transmission
    D.management

    答案：A
    解析：
    传统的IP数据包转发分析目的IP地址,该地址包含在每个从源到最终目的地的网络层数据包的头部。一个路由器的分析目的IP地址，该地址独立在网络中的每跳。动态路由协议或静态配置构建数据库，该数据数据库需要分析目的IP地址（路由表）。实施传统的IP路由的过程也叫作基于目的地的逐条单播路由。虽然成功而且明显得广泛部署,并实现了一段时间，但是必然有某些限制,这种数据包转发方法的存在是减少了灵活性。新技术是因此需要地址和扩展一个基于ip的网络基础设施的功能。第一章集中在识别一种新的架构的限制条件和反馈,该架构众所周知是多协议标签交换,它为其中的一些限制条件提供解决方案。

  • 第15题：

    What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode？（）

    • A、 RADIUS or LDAP
    • B、 an internal router running EIGRP
    • C、 Reverse Route Injection and OSPF or RIPv2
    • D、 the VPN appliance to be deployed in line with the firewall

    正确答案:C

  • 第16题：

    Which type of firewall is needed to open appropriate UDP ports required for RTP streams？（）

    • A、Stateful firewall
    • B、Proxy firewall
    • C、Packet filtering firewall
    • D、Stateless firewall

    正确答案:A

  • 第17题：

    Which two statements describe the difference between JUNOS Software for securityplatforms and a traditional router？（）

    • A、JUNOS Software for security platforms supports NAT and PAT； a traditional router does not support NAT or PAT.
    • B、JUNOS Software for security platforms does not forward traffic by default； a traditional router forwards traffic by default.
    • C、JUNOS Software for security platforms uses session-based forwarding； a traditional router uses packet-based forwarding.
    • D、JUNOS Software for security platforms performs route lookup for every packet； a traditional router performs route lookup only for the first packet.

    正确答案:B,C

  • 第18题：

    Which two of these are advantages of placing the VPN device in the DMZ on the firewall?（）

    • A、fewer devices to manage
    • B、moderate-to-high scalability
    • C、stateful inspection of decrypted VPN traffic
    • D、increased bandwidth with additional interfaces
    • E、decreased complexity as traffic is filtered from the firewall

    正确答案:B,C

  • 第19题：

    Which three functions are provided by the Junos OS for security platforms?（）(Choose three.)

    • A、VPN establishment
    • B、stateful ARP lookups
    • C、Dynamic ARP inspection
    • D、Network Address Translation
    • E、inspection of packets at higher levels (Layer 4 and above)

    正确答案:A,D,E

  • 第20题：

    You are designing the IP address assignment strategy for the VPN users. Which two actions should you perform.（）

    • A、 Configure VPN1 as a DHCP Relay Agent.
    • B、 Configure VPN1 to assign IP Address by using DHCP server.
    • C、 Configure VPN1 to have a static pool of IP Address from the network address of 131.107.1.0/24.
    • D、 Configure VPN1 to have a static pool of IP Address from the network address of 192.168.1.0/24.
    • E、 Configure the perimeter firewall to allow inbound DHCP traffic to be passed to VPN1.
    • F、 Configure the interval firewall to allow DHCP broadcasts to be forwarded from the external network to the internal network.

    正确答案:A,B

  • 第21题：

    单选题
    When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）
    A

    when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through 

    B

    when the Teleworker router itself is doing NAT/pNAT

    C

    always

    D

    never


    正确答案： A
    解析： 暂无解析

  • 第22题：

    问答题
    给了两段documentation里的描述，问这个时候发哪种类型的ICMP包。 The interface on which the packet comes into the router is the same interface on which the packet gets routed out. The subnet or network of the source IP address is on the same subnet or network of the next-hop IP address of the routed packet.

    正确答案： ICMP类型5重定向消息。
    解析： 暂无解析

  • 第23题：

    单选题
    Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.You create a new inbound rule by using Windows Firewall with Advanced Security.You need to configure the rule to allow Server1 to accept unsolicited inbound packets that are received through a network address translation （NAT） device on the network. Which setting in the rule should you configure？（）
    A

    Edge traversal

    B

    Authorized computers

    C

    Interface types

    D

    Remote IP address


    正确答案： B
    解析： 暂无解析

  • 第24题：

    单选题
    Which network management solution performs configuration， monitoring， and management of Cisco Firewall， VPN router， and IPS devices as well as maintains network device inventory and software distribution features？（）
    A

     CiscoWorks Security Device Management Center （SD/MC）

    B

     Security Device Manager （SDM）

    C

     Adaptive Security Device Manager （ASDM）

    D

     CiscoWorks VMS/Management Center （VMS/MC）


    正确答案： C
    解析： 暂无解析

相关内容