单选题Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing asecurity policy change？（）A policy-rematchB policy-evaluateC rematch-policyD evaluate-policy

第1题：

Which statement best describes ACL configuration using configuration session mode on Cisco Nexus switches？（）

• A、 The verify command will validate commands entered for syntax errors.
• B、 The save command will save the commands entered to the startup configuration.
• C、 The network administrator can perform a dry-run ACL configuration by verifying the configuration against the hardware and software resources available before applying it.
• D、 Configuration sessions can be saved and resumed at any time， even after upgrading NX-OS Software on the switch with ISSU.
• E、 Configuration sessions are global for all VDCs on the Nexus 7000.

第2题：

In the exhibit， you decided to change myHosts addresses. [edit security policies] user@host# show from-zone Private to-zone External { policy MyTraffic { match { source-address myHosts； destination-address  ExtServers；application  [ junos-ftp junos-bgp ]； } then { permit { tunnel { ipsec-vpn vpnTunnel； } } } } } policy-rematch； What will happen to the new sessions matching the policy and in-progress sessions that hadalready matched the policy？（）

• A、New sessions will be evaluated. In-progress sessions will be re-evaluated.
• B、New sessions will be evaluated. All in-progress sessions will continue.
• C、New sessions will be evaluated. All in-progress sessions will be dropped.
• D、New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

第3题：

SDM creates a low latency queuing （LLQ） service policy with its associated classes. What are the two types of low latency queuing available using the SDM QoS wizard？（）

• A、 FIFO queuing， which provides a means to hold packets while they are waiting to exit an interface
• B、 Priority queuing， which ensures a fixed amount of bandwidth
• C、 Custom queuing （CQ）， which provides a queuing tool that services all queues， even during times of congestion
• D、 Bandwidth queuing， which ensures a minimum amount of bandwidth
• E、 Weighted fair queuing （WFQ）， which classifies packets based on flows

第4题：

Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing asecurity policy change？（）

• A、policy-rematch
• B、policy-evaluate
• C、rematch-policy
• D、evaluate-policy

第5题：

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?（）

• A、The new sessions matching the policy are denied. The existing sessions are dropped.
• B、The new sessions matching the policy are denied. The existingsessions, not being allowed tocarry any traffic, simply timeout.
• C、The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
• D、The new sessions matching the policy are denied. The existing sessions continue until they are completed or their time.

第6题：

A redaction policy was added to the SAL column of the SCOTT.EMP table: All users have their default set of system privileges. For which three situations will data not be redacted?（）

• A、SYS sessions, regardless of the roles that are set in the session
• B、SYSTEM sessions, regardless of the roles that are set in the session
• C、SCOTT sessions, only if the MGR role is set in the session
• D、SCOTT sessions, only if the MGR role is granted to SCOTT
• E、SCOTT sessions, because he is the owner of the table
• F、SYSTEM session, only if the MGR role is set in the session

第7题：

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change?（）

• A、policy-rematch
• B、policy-evaluate
• C、rematch-policy
• D、evaluate-policy

第14题：

Which statement describes the behavior of a security policy？（）

• A、The implicit default security policy permits all traffic.
• B、Traffic destined to the device itself always requires a security policy.
• C、Traffic destined to the device’s incoming interface does not require a security policy.
• D、The factory-default configuration permits all traffic from all interfaces.

第15题：

It is a company’s policy to shut down all workstations at the end of the day. However, the majority of employees are leaving disks in their workstations and upon start up the next morning they are receiving a ‘NTLDR is missing’ error. Which of the following is a possible solution?（）

• A、Make a daily announcement to remove all disks before departing for the day.
• B、Change the Boot order in the BIOS.
• C、Make it a part of the evening checks to ensure all disks are removed.
• D、Make a company policy that states that it is unlawful to leave disks in the machines.

第16题：

In the configuration shown in the exhibit， you decided to eliminate the junos-ftp applicationfrom the match condition of the policy MyTraffic. [edit security policies] user@hostl# show from-zone Private to-zone External { policy MyTraffic { match { source-address myHosts； destination-address ExtServers； application [ junos-ftp junos-bgp ]； } then { permit { tunnel { ipsec-vpn vpnTunnel； } } } } } policy-rematch； What will happen to the existing FTP and BGP sessions？（）

• A、The existing FTP and BGP sessions will continue.
• B、The existing FTP and BGP sessions will be re-evaluated and only FTP sessions will be dropped.
• C、The existing FTP and BGP sessions will be re-evaluated and all sessions will be dropped.
• D、The existing FTP sessions will continue and only the existing BGP sessions will be dropped.

第17题：

Which two statements are true with regard to policy ordering? （）(Choose two.)

• A、The last policy is the default policy, which allows all traffic.
• B、The order of policies is not important.
• C、New policies are placed at the end of the policy list.
• D、The insert command can be used to change the order.

第18题：

第19题：

第20题：

第21题：

第22题：

第23题：

第24题：