【填空题】
39.每年九月的___星期六为“全民国防教育日”。
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
第三个
解析
暂无解析
相关试题
【单选题】
What is an example of social engineering？___
A. gaining access to a computer by observing the user login credentials
B. gaining access to a build through an unguarded entrance
C. gaining access to a server by using a USB stick
D. gaining access to a server room by posing as local IT
【单选题】
Which type of Layer 2 attack enables the attacker to intercept traffic that is intended for one specific recipient？___
A. BPDU attack
B. DHCP starvation I LAB
C. MAC address spoofing
D. CAM table overflow
【单选题】
Which about nested policy maps in a zone-based firewall is true ?___
A. They are limited to two leve ls in a hierarchical policy
B. Parent policies are previously defined policies that are defined by using the service policy command
C. A child policy is a new policy that uses a pre-existing policy.
D. A child policy is a new that uses a pre-existing policy
【单选题】
In which configuration do you configure the ip ospf authentication key 1 command？___
A. routing process
B. interface
C. privileged
D. global
【单选题】
Which statement about command authorization and security contexts is true？___
A. If command authorization is configured， it must be enabled on all contexts.
B. The change to command invokes a new context session with the credentials of the currently
C. AAA settings are applied on a per-context basis
D. The enable. 15 user ang admins with chang to permission ha e dfferent command authorization levels pertontext
【单选题】
Which command do you enter to enable authentication for OSPF on an interface？___
A. router（config-if）#ip ospf message-digest-key 1 md5 CIS COPASS
B. router（config-if）#ip ospf authentication message-digest
C. router（config-if）#ip ospf authentication-key CISCOPASS
D. router（config-if）#area 0 authentication message-digest
【单选题】
What feature defines a campus area network？___
A. It has a single geographic location
B. It lacks external connectivity.
C. It has a limited number of segments.
D. It has limited or restricted Internet access
【单选题】
Which type of attack most commonly involves a direct attack on a network？___
A. :phishing
B. Trojan horse
C. denial of service
D. social engineering
【单选题】
What information does the key length provide in an encryption algorithm?___
A. the cipher block size
B. the hash bloc k size
C. the number of permutations
D. the packet size
【单选题】
How do you verify TaCACS+ connectivity to a device？___
A. You successfully log in to the device by using the local credentials
B. You connect via console port and receive the login prompt.
C. You connect to the device using SSH and receive the login prompt.
D. You successfully log in to the device by using ACS credentials
【单选题】
Which term best describes the concept of preventing the modification of data in transit and in storage？___
A. availability
B. confidentially
C. fidelity
D. integrity
【单选题】
Which loS command is used to define the authentication key for ntp？___
A. switch（config ）#ntp authentication-key 1 mds Clcs
B. switch（config ）#ntp authenticate
C. switch（config）#ntp trusted-key 1
D. switch（config）#ntp source 192.168.0.1
【单选题】
What is true about the cisco lOS Resilient Configuration feature ?___
A. The feature can be disabled through a remote session
B. There is additional space required to secure the primary cisco lOS image file.
C. The feature automatically detects image or configuration version mismatch.
D. Remote storage is used for securing files
【单选题】
When is the default deny all policy an exception in zone-based firewalls？___
A. when traffic terminates on the router via the self zone
B. when traffic traverses two interfaces in different zones
C. when traffic traverses two interfaces in the same zone
D. when traffic sources from the router via the self zone
【单选题】
.If an access port is assigned as an isolated port in a PVLAN， which network ports can it communicate with？___
A. promiscuous ports in the same PLVAN
B. isolated ports in the same PVLAN
C. all ports in the same PAVLAN at ILAR
D. all ports in the adjacent PVLAN
【单选题】
Which IPSEC mode is used to encypt traffic directly between a client and a server VPN endpoint？___
A. quick mode
B. transport mode
C. aggressive mode
D. tunnel mode
【单选题】
Which command do you enter to verify that a vpn connection is established between two endpoints and that the connection is passing traffic？ ___
A. Firewall#sh crypto session
B. Firewall#debug crypto isakmp
C. Firewall#tsh crypto ipsec sa
D. Firewall#sh crypto isakmp sa
【单选题】
which type of Pvlan port allows communication from all port types？___
A. isolated
B. in -line
C. community
D. promiscuous
【单选题】
Which command do you enter to configure your firewall to conceal internal addresses？___
A. no ip directed-broadcast
B. no ip logging facility
C. no proxy-arp
D. no ip inspect audit-trial
E. no ip inspect
F. route
【单选题】
Which feature defines a campus area network？ ___
A. It has a limited number of segments.
B. It has limited or restricted Internet access
C. It lacks ex1ternal connectivity.
D. It has a single geographic location
【单选题】
What technology can you use to provide data confidentiality data integrity and data origin authentication on your network？___
A. IPSec
B. Certificate Authority
C. IKE
D. Data
E. ncryption Standards
【单选题】
which standard is a hybrid protocol that uses oakley and skerne ke y exchanges is an ISAKMP framework？___
A. SHA
B. IPSec
C.
D. ES
【单选题】
What is the effect of the asa command crypto isakmp nat-traversal？___
A. It opens port 500 only on the out side interface
B. It opens port 500 only on the inside interface
C. It opens port 4500 on all interfaces that are IPSec enabled
D. It opens port 4500 only on the out side interfac
【单选题】
Which Fire POWER preproce ssor engine is used to prevent SYN attacks？___
A. Inline normalization
B. IP Defragmentation
C. Ports can
D. etection
【单选题】
Which NAT type allows objects or groups to reference an IP address ？___
A. identity NAt
B. static NAT
C. dynamic
D. dynamic NAT
【单选题】
Which Auto NAT policies are processed first？___
A. Dynamic NAT with longest prefix
B. Dynamic NAT with shortest prefix
C. static NAT with longest prefix
D. static NAT with shortest prefix
【单选题】
Which feature allows a dynamic Pat pool to se lect the next address in the pat pool instead of the next port of an existing address？___
A. next IP
B. round robin
C. dynamic rotation
D. NAT address rotation
【单选题】
Which IPS detection method can you use to detect attacks that are based on the attackers IP address？___
A. anomally-based
B. policy-based
C. signature-based
D. reputation-based
推荐试题
【多选题】
下列有关酸性气采样的注意事项正确的是___
A. 要佩带好空气呼吸器
B. 要站在上风向；
C. 要两个人以上，一人作业，一人监护
D. 开阀时要慢慢开，防止大量酸性气泄出。
【多选题】
下列关于安全标志含义的叙述，正确的是___。
A. 禁止标志，含义是不准或制止人们某种行为
B. 警告标志，含义是警告人们当心、小心、注意
C. 指令标志，含义是必须遵守
D. 提示标志，含义是提示人们不能去做
【多选题】
下列描述正确的是：___
A. 可燃液体的闪点越低，火灾危险越小。
B. 可燃物质的自燃点越高，则火灾危险性越大。
C. 可燃液体的闪点越低，火灾危险越大。
D. 可燃物质的自燃点越高，则火灾危险性越小。
【多选题】
下列哪些灭火方法是不正确的？ ___
A. 扑救液化气体火灾时，应先扑灭火焰，然后采取堵漏措施；
B. 扑救爆炸物品火灾，需用沙土盖压；
C. 对于遇湿易燃物品火灾，应使用泡沫、酸碱等灭火剂扑救；
D. 扑救毒害品，腐蚀品的火灾时，应尽量使用低压水流或雾状水；
【多选题】
发生人身触电事故，在进行救护时，首先应采取措施中，错误的是？___
A. 立即检查触电者是否还有心跳呼吸，如没有立即进行心肺复苏；
B. 立即断开电源使触电者与带电部份脱离；
C. 立即拨打120呼叫救护车；
D. 联系调度通知电工停电。
【多选题】
根据《中国石化生产安全事故管理规定》对事故分为四个等级，下列属于重大事故的是___
A. 事故造成15人死亡，重伤6人，直接经济损失3000万元。
B. 事故造成8人死亡，重伤60人，直接经济损失2000万元。
C. 事故造成3人死亡，重伤2人，直接经济损失6000万元。
D. 事故造成5人死亡，重伤30人，直接经济损失2500万元。
【多选题】
下列关于盲板抽堵作业叙述中正确的是___
A. 盲板应有一个或二个手柄，便于加拆、辨识及挂牌。
B. 盲板应加在有物料来源阀门的另一侧，盲板两侧都要安装合格的垫片，所有螺栓必须紧固到位。
C. 作业人员应在上风向作业，不要正对法兰缝隙；在拆除螺栓时，应按顺序进行拆除。
D. 同一管道一次只允许进行两点的盲板抽堵作业。
【多选题】
下列关于起重作业叙述中正确的是___
A. 吊装过程中出现故障，起重操作人员向指挥者报告后。可以离开岗位。
B. 起重操作人员对紧急停车信号，不论何人发出，均应立即执行。
C. 当起重臂、吊钩或吊物下面有人或吊物上有人、浮置物时不得进行起重操作。
D. 停工或休息时，不得将吊物、吊笼、吊具和吊索悬吊在空中。
