【单选题】
Which product can be used to provide application layer protection for tcp port 25 traffic？___
A. ESA
B. CWS
C. WSA
D. ASA
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
A
解析
暂无解析
相关试题
【单选题】
which iPS mode is less secure than other options but allows optimal network through put ?___
A. inline mode
B. inline-bypass mode
C. transparent mode
D. Promiscuous mode
【单选题】
Which feature of the Cisco Email security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attack？___
A. reputation based filtering
B. signature based IPS
C. contextual analysis
D. graymail management and filtering
【单选题】
Which type of social-engineering attack uses normal tele phone service as the attack vector？___
A. smishing
B. dialing
C. phishing
D. vishing
【单选题】
Which quantifiable item should you consider when you organization adopts new technologies？___
A. exploits
B. vulnerability
C. threat
D. Risk
【单选题】
Referencing the ClA model， in which scenario is a hash- only function most appropriate ？___
A. securing data at rest
B. securing real-time traffic
C. securing data in files
D. securing wireless transmissions
【单选题】
Which ports must be open between a aaa server and a microsoft server to permit Active Directory authentications？___
A. 445 and 389
B. 888 and 3389
C. 636 and 4445
D. 363 and 983
【单选题】
Refer to the exhibit for which reason is the tunnel unable to pass traffic___
A. the tunnel is failing to receive traffic from the remote peer
B. the local peer is unable to encrypt the traffic
C. the ip address of the remote peer is incorrect
D. UDP port 500 is blocked
【单选题】
Which type of attack can exploit design flaws in the implementation of an application without___
A. DHCP starvation attacks
B. low-rate dos attacks
C. application DDos flood attacks
D. application DDoS flood attacks
E. volume-based DDoS attacks
【单选题】
How can you protect CDP from reconnaissance attacks？___
A. Enable dynamic ARP inspection on all untrusted ports.
B. Enable dot1x on all ports that are connected to other switches.
C.
D. isable CDP on ports connected to endpoints.
【单选题】
Which type of attack can exploit design flaws in the implementation of an application without ？___
A. DHCP starvation attacks
B. low-rate dos attacks
C. application DDos flood attacks
D. application DDoS flood attacks
E. volume-based DDoS attacks
【单选题】
Which option is a key security compone nt of and MDM deployment ？___
A. using network-specific installer packages
B. using an application tunnel by default
C. using self-signed certificates to validate the server
D. using MS-CHAPv2 as the primary
E. AP method
【单选题】
Which Firepower Management Center feature detects and block exploits and hack attempts？___
A. Content blocker
B. file control
C. intrusion prevention
D. advanced malware protection
【单选题】
hich description of the nonsecret numbers that are used to start a Diffie- Hellman exchange is ture？___
A. They are preconfigured prime integers.
B. They are large pseudorandom numbers.
C. They are very small numbers chosen from a table of known valuses
D. They are numeric values extracted from ha shed system hostnames
【多选题】
Which two characteristics of an application layer firewall are true？___
A. provides stateful firewal functionality
B. has low processor usage
C. provides protection for multiple applications
D. provides rever se proxy services
E. is immune to URL manipulation
【多选题】
Which two devices are components of the BYOD architectural framework？___
A. Nexus 7010 switch
B. Cisco 3945 Router
C. Identify Services Engine
D. Wireless Access oints
E. Prime Infrastructure
【多选题】
Which two actions can a zone based firewall take when looking at traffic？ ___
A. forward
B. inspect
C. drop
D. broadcast
E. filter
【多选题】
n which two situations should you use in-band management？___
A. when management applications need concurrent access to the device
B. when you require administrator access from multiple locations
C. when a network device fails to forward packets
D. when you require ROMMON access
E. when the control plane fails to respond
【多选题】
What are two ways to prevent eavesdropping when you perform device management tasks？___
A. Use an SSH connection.
B. Use SNMPv3
C. Use out-of-band management
D. Use SNMP
E. Use in-band management
【多选题】
Which two features are commonly used CoPP and CPPr to protect the control plane？ ___
A. QoS
B. traffic classification
C. access lists
D. policy maps
E. class maps
F. Cisco Express Forwarding
【多选题】
Which four tunne ling prot ocols are enabled in the Dfit GrpPolicy group policy ？___
A. Clientless SSL VPN
B. SSL VPN Client
C. PPTP
D. L2TP/IPsec
E. IPsec IKEv1
F. IPsec IKEv2
【多选题】
Which two statements regarding the aSA VPN configurations are correct？___
A. The asa has a certificate issued by an external certificate authority associated to the ASDM TrustPoint1
B. The Default WEBVPNGroup Connection Profile is using the aaa with RADIUS server method
C. The Inside-srvbook mark references the https://192.168.1.2url
D. Only Clientless SSL VPN access is allowed with the Sales group policy
E. Any Connect， IPSec IKEv1， and IPSec IKEv2 VPN access is enabled on the outside interface
F. The Inside -SRV bookmark has not been applied to the Sales group policy
【多选题】
Which three ESP fields can be encrypted during transmission？___
A. Security Parameter Index
B. Sequence Number
C. MAC Address
D. Padding
E. Pad length
F. Next Header
【多选题】
.Which three statements de scribe DHCP spoofing attacks？___
A. They can modify traffic in transit.
B. They are used to perform man- in-the-middle attacks
C. They use ARP poisoning
D. They can access most network devices
E. They protect the ide ntity of the attacker by masking the DHCP address.
F. They are can physically modify the network gateway.
【多选题】
Which statement about the communication between interfaces on the same security level is true？___
A. Interfaces on the same security level require additional configuration to permit interinterface communication
B. Configuring interfaces on the same security level can cause asymmetric routing
C. All traffic is allowed by default between interfaces on the same security level
D. You can configure only one interface on a n individual security level
【多选题】
In which two situations should you use in band management？ ___
A. when the control plane fails to respond
B. when you require administrator access from multiple locations
C. when you require ROMMON access.
D. where a network device fails to forward packets
E. when multiple ma nagement applications need concument access to the device.
【多选题】
Which two features are supported in a VRF-aware softwar infrastructure before VRF-lite?___
A. multicast
B. fair queuing
C. WCCP
D.
E. IGRP
【多选题】
.Which loS command do you enter to test authentication again a AAA server？___
A. dialer aaa suffix <suffix> password <password>
B. ppp authentication chap pap test
C. test aaa-server authentication dialer group user name <user> password <password>
D. aaa authentication enable default test group tacases
【多选题】
Which two statements about the self zone on a cisco Xone based policy firewall are true？___
A. Multiple interfaces can be assigned to the self zone
B. it supports stateful inspections for multicast traffic
C. zone pairs that include the self zone apply to traffic transiting the device.
D. it can be either the source zone or the destination zone
E. traffic entering the self zone must match a rule
【多选题】
Which type of attack can exploit design flaws in the implementation of an application without ？___
A. DHCP starvation attacks
B. low-rate dos attacks
C. application DDos flood attacks
D. application DDoS flood attacks
E. volume-based DDoS attacks
【单选题】
Which type of firewall can server as the interme diary between a client and a server ?___
A. Stateless firewall
B. application firewall
C. proxy firewall
D. personal firewall
【单选题】
What is the highest security level that can be configured for an interface on an ASA？___
A. 0
B. 50
C. 10
D. 200
【单选题】
Which term refers to the electromagnetic interference that can radiate from network cables？___
A. Gaussian distributions
B. Doppler waves
C. emanations
D. multimode distortion
【单选题】
How does a zone pair handle traffic if the policy de fination of the zone pair is missing?___
A. It inspects all traffic.
B. It drops all traffic.
C. It permits all traffic wihtout logging
D. It permits and logs all traffic
【单选题】
default how does a zone based firewall handle traffic to add from the self zone？___
A. It permits all traffic without inspection
B. It inspects all traffic to determine how it is handled
C. It permits all traffic after inspection
D. It frops all traffic
【单选题】
Which command should beused to ena ble AAA Authentication to determine if a user can access the privilege command level？___
A. aaa authentication enable local
B. aaa authentication enable level=
C. aaa authentication enable method de fault
D. aaa authentication enable defa ult local
【单选题】
On an ASA， the policy indicates that traffic should not be translated is often referred to as which of the following？___
A. NAT zero
B. NAT forward
C. NAT nul
D. NAT allow
【单选题】
Which protocol offers data Integrity encryption， authentication， and anti-replay functions for IPSec VPN？___
A. ESP protocol
B. IKEv3 Protocol
C. AH protoco
D. IKEv1 Protocol
【单选题】
Which component offers a variety of security Solution， including firwall， IF Antivirus and antiphishing features？___
A. Cisco loS router
B. Cisco ASA 5500 Ser ies security appliance
C. Cisco ASA 5500 X series Next Gen Security appliance
D. Cisco 4200 series IPS appliance
【单选题】
Refer to the exhibit， A Network Secur ity administrator check the ASa firewall NAT policy table rith show nat command， which statement is fails？___
A. There are only reverse translation matches for the REAL SERvER object
B. First policy in the Section 1 is a dynamic nat entry defined in the object configuration
C. NAT policy in section 2 is static entry de fined in the object configuration
D. Translation in Section 3 used when a connection does not matches any entries in first two sections
【单选题】
What is true of an aSa in transparent mode ?___
A. It supports OSPF
B. It requires an IP address for each interface
C. It requires a management IP address
D. It allows the use of dynamic NaT
推荐试题
【单选题】
国家信息化体系包括信息技术应用，信息资源等六要素，其中___是国家信息化成功之本，对其他各要素的发展速度和质量有着决定性的影响，是信息化建设的关键。
A. 信息资源
B. 信息化的法规和标准规范
C. 信息化人才
D. 信息化技术和产业
【单选题】
《国务院关于积极推进“互联网+”行动的知道意见》中提出的推动互联网与制造业融合，加强产业链协作，即基于互联网的协同制造新模式，提升制造业数字化、网络化和___水平，是发展“互联网+”的重点活动之一
A. 3D化
B. 重型化
C. 定制化
D. 智能化
【单选题】
___不利于推动电子商务基础设施建设。
A. 制定并实施(“宽带中国”战略及实施方案)
B. 充分利用现有物流资源，完善全国物流体系建设
C. 取消电子商务税收优惠政策
D. 大力发展智慧货运，提升物流运输效率
【单选题】
安全电子交易协议(SET:SecureElectronicTransaction)标准是一种应用于因特网环境下，以信用卡为基础的链电子交付协议，它给出了一套店子交易过程规范，其支付系统主要由持卡人(CardHolder)商家(Merchant)、发卡行(IssuingBank)、收单行(AcquiringBank)、支付网关(PaymentGateway)和___等六个部分组成
A. 安全中心
B. 认证中心
C. 支付中心
D. 信用中心
【单选题】
某大型企业已建有CRM、ERP和OA等信息系统，为将现有系统的数据转化为知识，帮助管理层进行决策，可通过___解决方案来实现。
A. 数据仓库
B. 数据挖掘
C. 商业智能
D. 数据振表
【单选题】
信息技术服务业态有：技术咨询服务、设计开发服务、信息系服务、数据处理和运维服务等，其管理核心可用4个要素来描述。按照ITSS定义，信息技术服务的4个核心要素是___
A. 人员、过程、工具、技术
B. 人员、资源、技术、过程
C. 供应商、工具、过程、技术
D. 供应商、服务人员、流程、工具
【单选题】
所有以满足企业和机构业务发展而产生的信息化需求为目的，基于___的专业信息技术咨询服务、系统集成服务、技术支持服务等工作，都属于信息系统服务的范畴。
A. 互联网与信息技术
B. 互联网与信息理念
C. 信息技术与信息化理念
D. 工业化和信息化
【单选题】
将路由器、交换机、网关、集线器、终端接入设备、有关系统软件等实施集成服务称为___
A. 网络集成实施服务
B. 主机集成实施服务
C. 智能建筑系统集成服务
D. 应用系统集成服务
【单选题】
___不属于瀑布式开发模型的特点
A. 严格区分工作阶段，每个阶段有明确的任务和取得的成果
B. 强调系统开发过程的整体性和全局性
C. 基于客户需求的演进，快速送代开发
D. 系统开发过程工程化，文档资料标准化
【单选题】
项目经理在需求调研的过程中，应尽可能的多了解客户的需求进行分析，并对需求进行分析，其做需求分析的目的一般不包括___
A. 检测和解决需求之间的冲突
B. 定义潜在的风险
C. 发现软件的边界，以及软件与其环境如何交互
D. 详细描述需求分析，以导出软件需求
【单选题】
某软件开发企业在软件交付给用户使用后，定期指派工程师小张去用户单位进行维护，以保持本企业软件产品能在变化后或变化中的环境中可以继续使用。小张以上的维护过程属于___
A. 适应性维护
B. 更正性维护
C. 预防性维护
D. 完善性维护
【单选题】
数据仓库是一个面向主题的、集成的、相对稳定的、反映历史变化得得数据集合，用于支持管理决策，其系统结构如下图所示：图中①应为___
A. 中心数据服务器
B. OLTP服务器
C. OLAP服务器
D. 决策应用服务器
【单选题】
以下关于云计算的叙述中，___是不正确的。
A. 云计算通过互联网来提供动态易扩展且经常是虚拟化资源的计算模式
B. 云计算可以脱离网络提供服务
C. 云计算比本地计算具备更好的扩展性
D. 云计算使得计算能力成为一种在互联网上流通的资源
【单选题】
以下关于高速以太网的叙述中，___是正确的。
A. 高速以太网是指效率达到或超过1000MB/S的以太网
B. 千兆以太网与10/100M以太网具有相同的帧格式
C. 对于物理层与双绞线的千兆以太网，采用的编码为8B/10B
D. 千兆以太网采用的标准为TEEE802.3U
【单选题】
移动互联网技术体系主要涵盖六大技术产业领域：关键应用服务平台、网络平台技术、移动智能终端软件平台技术、移动智能终端硬件平台技术、移动智能终端原材料元器件技术和___
A. 移动云计算技术
B. 综合业务技术
C. 安全控制技术
D. 综合系统技术
【单选题】
访问控制是信息安全管理的重要内容之一，以下关于访问控制规则的叙述中，___是不正确的
A. 应确保授权用户对信息系统的正常访问
B. 防止对操作系统的未授权访问
C. 防止对外部网络未经授权进行访问，对内部网络的访问则没有限制
D. 访问对应用系统中的信息未经授权进行访问
【单选题】
为了保护计算机机房及其设备的安全，___做法是不合适的。
A. 机房地板的阻止应控制在不易产生静电的范围
B. 机房隔壁为卫生间或水房，一旦发生火灾便于取水灭火
C. 机房的供电系统应将计算机系统供电与其他供电分开
D. 机房设备应具有明显的且无法去除的标记，以防更换和便于追查
【单选题】
对于信息系统项目来说，确定信息系统必须完成的总目标，确定工程的可行性，导出实现工程目标应该采取的策略及系统必须完成的功能，估计完成该项目工程的资源和成本，并且制定工程大致进度表的过程属于项目的___阶段，
A. 系统分析
B. 系统设计
C. 需求分析
D. 可行性研究
【单选题】
信息系统集成项目的技术性很强，是智力密集，劳动密集型项目，必须在人才激励和团队管理的问题上给与足够的重视。___不是造成信息系统项目必须注重团队管理的主要原因
A. 项目成员的机构对系统集成项目的质量有重要的影响
B. 信息系统集成项目通常包括软硬件集成
C. 项目成员的责任心和稳定性对系统集成项目是否成功有决定性的影响。
D. 团队成员专业分工合理
【单选题】
在编写项目可行性研究报告时，风险因素及对策主要是对项目的市场风险___法律风险，经济及社会风险等因素进行评价，制定规避风险的对策，为项目的全过程的管理提供依据。
A. 计算风险，财务防线，环境风险
B. 技术风险，财务风险，组织风险
C. 技术风险，组织风险，环境风险
D. 财务风险，组织风险，环境风险
【单选题】
承建方的立项管理一般经过___等四个阶段
A. 项目识别，项目论证，投标，签订合同
B. 项目论证，投标，合同谈判，签订合同
C. 项目识别，技术可行性分析，合同谈判，合同签订
D. 项目论证，项目识别，合同谈判，签订合同
【单选题】
某招标文件要求投标方应具有计算机信息集成系统集成资质和ISO9000质量认证证书，投标人在投标文件中提供了母公司的计算机信息系统资质和ISO9000质量认证证书，则该投标人提供的投标文件___
A. 符合招标要求
B. 不符合招标要求
C. 基本符合招标要求
D. 完招标要求
【单选题】
小张是软件研发和项目经理，负责的某项目已进入实验阶段，此时用户提出要增加一项新的功能，小张应该___
A. 拒绝该变更
B. 通过变更控制流程进行处理
C. 立即实现该变更
D. 要求客户应先去与公司领导协商
【单选题】
制定准确，详细的项目范围说明书是保证项目成功实施的关键，___一般不属于项目范围说明书的主要内容。
A. 项目资源需求
B. 项目目标
C. 项目目的
D. 项目交付成果清单
【单选题】
某项目经理在生成WBS时，按照___将项目分解为“项目管理，需求分析，方案设计，集成准备，集成实施，测试和验收”等几个过程
A. 项目章程
B. 项目范围说明
C. 生命周期的阶段
D. 验收准则
