单选题Which statement describes exception traffic?（）A Exception traffic must be sent to the PFE for processing.B Exception traffic enters one ingress port and is sent out multiple egress ports.C Exception traffic is rate-limited on the internal link to preve

第1题：

Which statement best describes Cisco IOS Zone-Based Policy Firewall？（）

• A、A router interface can belong to multiple zones.
• B、Policy maps are used to classify traffic into different traffic classes， and class maps are used to assignaction to the traffic classes.
• C、The pass action works in only one direction
• D、A zone-pair is bidirectional because it specifies traffic flowing among the interfaces within the zone-pair in both directions.

第2题：

Which statement best describes the application of link fragmentation and interleaving （LFI）？（）

• A、It compresses the Layer 2 payload and marks the packet as a high priority to be transmitted first
• B、It fragments larger packets and allows VoIP packets to be transmitted in between them.
• C、It stops the transmission of large packets when priority packets arrive.
• D、It sends high priority packets in between normal traffic packets.

第3题：

Which statement describes the PFE?（）

• A、The PFE controls the RE by providing Layer 2 and Layer 3 forwarding tables
• B、The PFE implements advanced services such as policing, stateless firewall filtering, and class of service
• C、The PFE sends traffic to the RE for systematic packet forwarding
• D、The PFE receives hardware and environmental status messages from the RE

第4题：

Which statement is true about the internal link between the Routing Engine and the Packet-Forwarding Engine?（）

• A、It is only used for exception traffic.
• B、It is an FE link called fxp2.
• C、It is rate-limited to avoid DDOS attacks.
• D、It is only used to send the forwarding-table from the Routing Engine to the Packet-Forwarding Engine.

第5题：

Which statement describes the behavior of a security policy？（）

• A、The implicit default security policy permits all traffic.
• B、Traffic destined to the device itself always requires a security policy.
• C、Traffic destined to the device’s incoming interface does not require a security policy.
• D、The factory-default configuration permits all traffic from all interfaces.

第6题：

Which statement about HTTPS decryption on the WSA is true？（） 

• A、if enabled， all HTTPS traffic must be decrypted
• B、if WBRS is enabled， it can be used to determine whether the HTTPS traffic is to be decrypted
• C、decrypted HTTPS traffic is sent unencrypted across the enterprise intranet
• D、object size can be used to determine whether the HTTPS traffic is to be decrypted

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Which statement describes VRRP object tracking?（）

• A、It monitors traffic flow and link utilization.
• B、It ensures the best VRRP router is the virtual router master for the group.
• C、It causes traffic to dynamically move to higher bandwidth links
• D、It thwarts man-in-the-middle attacks.

第14题：

Which the statement is true？（）

• A、 The Error class is a Runtime Exception.
• B、 No exceptions are subclasses of Error.
• C、 Any statement that may throw an Error must be enclosed in a try block.
• D、 any statement that may throw an Exception must be enclosed in a try block.
• E、 Any statement that may throw an Runtime Exception must be enclosed in a try block.

第15题：

Which statement is correct regarding exception traffic processing?（）

• A、Exception traffic is only handled by the PFE
• B、Exception traffic is rate-limited across the internal link to protect the RE
• C、Exception traffic is not prioritized during times of congestion
• D、Exception traffic is forwarded based on forwarding table entries

第16题：

Which statement describes transit traffic?（）

• A、Traffic addressed to the chassis that requires some form of special handling by the RE before it can be forwarded out an egress port.
• B、Traffic that enters an ingress port, is compared against the forwarding table, and is forwarded out an egress port.
• C、Any traffic that requires the generation of an ICMP message.
• D、Traffic that requires some form of special attention and does not pass through the device.

第17题：

Which statement describes the Authentication Proxy feature？（）

• A、All traffic is permitted from the inbound to the outbound interface upon successful authentication of the user.
• B、A specific access profile is retrieved from a TACACS+ or RADIUS server and applied to an IOS Firewall based on user provided credentials.
• C、Prior to responding to a proxy ARP，the router will prompt the user for a login and password which are authenticated based on the configured AAA policy.
• D、The proxy server capabilities of the IOS Firewall are enabled upon successful authentication of the user.

第18题：

Which four types of object can be thrown using the throw statement？（）

• A、 Error
• B、 Event
• C、 Object
• D、 Exception
• E、 Throwable
• F、 Runtime Exception

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：