You are about to configure PPP n the interface of a Cisco router. Which authentication methods could you use?()A.SSLB.SLIPC.PAPD.LAPBE.CHAPF.VNP

第1题：

You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）

• A、The crypto ACL number
• B、The IPSEC mode （tunnel or transport）
• C、The GRE tunnel interface IP address
• D、The GRE tunnel source interface or IP address， and tunnel destination IP address
• E、The MTU size of the GRE tunnel interface

第2题：

Which two statements about configuration an unconnected Catalyst Express 500 switch from setup mode using a PC are true？（）

• A、You may use Cisco Network Assistant to set up the initial configuration
• B、You must use CLI for initial configuration
• C、You may use either CLI or CAN for configuration
• D、You may make a direct connection to the PC from any point on the switch
• E、You may only make a direct connection from the port with the flashing green LED to the PC

第3题：

Which statement is true about interface-based source NAT？（）

• A、PAT is a requirement.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the egress interface.

第4题：

All WAN links inside the ABC University network use PPP with CHAP for authentication security. Which command will display the CHAP authentication process as it occur between two routers in the network?（）

• A、show chap authentication
• B、show interface serial0
• C、debug ppp authentication
• D、debug chap authentication
• E、show ppp authentication chap

第5题：

You are an administrator of a network that uses PPP for CHAP authentication over ever WAN link. What command would you enter to display the CHAP authentication as it occurs in real time?（）

• A、show ppp authentication
• B、debug PAP authentication
• C、debug PPP authentication
• D、show interface serial0
• E、show CHAP authentication

第6题：

If you click the Configure button along the top of Cisco SDM is graphical interface，which Tasks buttonpermits you to configure such features as SSH， NTP， SNMP， and syslog？（）

• A、Interfaces and Connections
• B、Intrusion Prevention
• C、Security Audit
• D、Additional Tasks

第7题：

You are about to configure PPP n the interface of a Cisco router. Which authentication methods could you use?（）

• A、SSL
• B、SLIP
• C、PAP
• D、LAPB
• E、CHAP
• F、VNP

第8题：

Your network contains one Active Directory domain. You have a member server named Server1 that runs Windows Server 2008 R2. The server has the Routing and Remote Access Services role service installed.You implement Network Access Protection (NAP) for the domain.You need to configure the Point-to-Point Protocol (PPP) authentication method on Server1. Which authentication method should you use？（）

• A、Challenge Handshake Authentication Protocol (CHAP)
• B、Extensible Authentication Protocol (EAP)
• C、Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2)
• D、Password Authentication Protocol (PAP)

第9题：

第10题：

第11题：

第12题：

第13题：

When using the Cisco SDM Quick Setup Siteto-Site VPN wizard， which three parameters do you configure？（）

• A、Source interface where encrypted traffic originates
• B、IP address for the remote peer
• C、Transform set for the IPsec tunnel
• D、Interface for the VPN connection

第14题：

Which statement is correct about defining an Infranet Enforcer for use as a RADIUS Client? （）

• A、You do not need to configure a RADIUS client policy.
• B、You must know the exact model number of the Infranet Enforcer.
• C、You must specify the NACN password of the device in the RADIUS client policy.
• D、You do not need to designate a location group to which the Infranet Enforcer will belong.

第15题：

You are a systems administrator responsible for configuring a Windows Server 2008 SMTP server. Yourorganization is currently using the default SMTP virtual server for sending order notifications from a single Web application called ContosoOrderManagement. Recently， you have noticed that a largenumber of messages have been sent to the SMTP virtual server from other computers and users. Which two methods can you use to prevent unauthorized access to the SMTP server？（）

• A、Enable Basic Authentication.
• B、Configure a smart host for use by the SMTP virtual server.
• C、Add Connection Control entries to limit which IP addresses can use the SMTP server.
• D、Modify settings on the Security tab of the properties of the SMTP virtual server.

第16题：

Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices?（）

• A、enable cdp
• B、cdp enable
• C、cdp run
• D、run cdp

第17题：

Which of the following is an easy-to-use tool that allows you to easily configure and monitor Cisco Integrated Services Routers?（）

• A、Cisco NAC Appliance
• B、Cisco SDM
• C、Cisco MWAM
• D、Cisco Unified Communications Manager Express

第18题：

Which tools on Cisco.com could you use to plan for correct Cisco lOS images to support a customer’s security design and requirements？ （Choose two.）（）

• A、 Cisco lOS Matrix Navigator
• B、 Cisco Feature Navigator
• C、 Cisco lOS Package Planner
• D、 Cisco lOS Security Planner
• E、 Cisco Dynamic Configuration Tool

第19题：

You are the administrator of your company’s network. The dial-up server on your network is configured to support certificate authentication.   A user named Tom wants to use smart card authentication on his Windows 2000 Professional portable computer. You that Tom’s computer has a PC Card smart card reader and the appropriate drivers installed. You give Tom a smart card to use.   What else should you do to enable smart card authentication on Tom’s computer? （）

• A、Configure a dial-up connection to use EAP.  Select the smart card device for authentication. 
• B、Configure a dial-up connection to use SPAP.  Select the smart card device for authentication.
• C、Configure a dial-up connection to use certificate authentication.  Enable the usercredentials for authentication.
• D、Configure a dial-up connection to connect to a private network through the Internet.  Enable L2TP be create a virtual private network （VPN） tunnel.

第20题：

第21题：

第22题：

第23题：