【多选题】
Which two primary security concerns can you mitigate with a BYOD solution ？___
A. schedule for patching the device
B. securing access to a trusted corporate network
C. compliance with applicable policies
D. connections to public Wi-Fi networks
E. device tagging and invento
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
BC
解析
暂无解析
相关试题
【多选题】
choose five___
A. MD5————————inserure
B. DES————————insercure
C. SDES———————legacy
D. SHA-1———————legacy
E. HMAC-MD5—————legacy
【多选题】
Which two characteristics of symmetric encryption are true？___
A. It uses digital certificates
B. It requires more resources than asymmetric ancryption
C. It uses the same key to enctypt and decrupt traffic
D. It uses a public key and a pricate key to encrypt and decrypt traffic.
E. It is faster than asymmetric encryption
【多选题】
which two characteristics of PVLAN are true？___
A. Promiscuous porta can communicate with PVLAN ports.
B. Isolated ports cannot communicate with other ports on the same VLAN
C. Community ports have to be a part of the trunk.
D. They require VTP to be enabled in server mode
E. PVLAN ports can be configured as Ether Channel ports
【多选题】
What are two options for running Cisco SDM?___
A. Running SDM from a mobile device
B. Running SDM from within CiscoWorks
C. Running SDM from a router's flash
D. Running SDM from the Cisco web porta
E. Running SDM from a PC
【多选题】
Which two options are the primary deployment modeles for mobile device management？___
A. multisite
B. cloud-based
C. on premises
D. hybrid cloud basedo
E. single site
【多选题】
Drag the recommendation on the left to the Cryptographic algorithms on the right， Options will be used more than once.___
A. Avoid——————————————DES，MD5
B. Legacy——————————————SDES，SHA1，HMAC-MD5
【多选题】
Which two are valid types of vLans using PVLANS ?___
A. Community VLAN
B. Backup VLAN
C. Secondary VLAN
D. Isolated VLAN
E. Isolated VLAN
【多选题】
Which two commands are used to implement Resilient lOS Configuration ___
A. Secure boot-config
B. copy running-config tftp
C. copy flash:ios bin tftp
D. copy running-config startup-config
E. secure boot-image
【多选题】
Which two types of firewalls work at layer 4 and above ？___
A. Stateful inspection
B. Network Address Translation
C. Circuit-Level gateway
D. Static packet filter
E. Application Level firewall
【多选题】
Which two default settings for port security are true ？___
A. Violation is Protect
B. Violation is Restrict
C. Violation is Shutdown
D. Maximum number of MAC addresses is 2
E. Maximum number of MAC addresses is 1
【多选题】
Which two are characteristics of RADIUS？___
A. Uses UDP ports 1812 /1813
B. Uses TCP port 49
C. Uses UDP port 49
D.
E. ncrypts only the password between user and server
【多选题】
When setting up a site-to-site VPN with PSK authentication on a Cisco router， which two elements must be configured under crypto map？___
A. pfs
B. nat
C. reverse route
D. peer
E. transform-set
【多选题】
When using the Adaptive Security Device Manager（ASDM), which two options are available to add a new root certificate？___
A. Install from SFTP server
B. Usehttps
C. Install from a file
D. Use LDAP
E. Use SCEP
【多选题】
Which two SNMPv3 services support its capabilities as a secure networ k manage protocol？ ___
A. access control
B. the shared secret key
C. authentication
D. authorization
E. accounting
【多选题】
Which two statements about routed firewall mode are true ？___
A. The firewall acts as a routed hop in the network
B. This mode conceals the presence of the firewall
C. The firewall requires a unique iP address for each interface
D. This mode allows the firewall to be added to an existing networ k with minimal additional configuration By default， this mode permits most traffic to pass throug
【多选题】
Which two statements describe DHCP spoofing attacks？___
A. They are used to perform man-in- the-middle attacks
B. They can access most network devices
C. They can modify the flow of traffic in transit. LNGKAIG
D. They protect the identity of ti attacker by masking the DHCP address
E. They can physically modify the network gateway
【多选题】
Which two types of VLANs using PVLANs are valid？___
A. isolated
B. promiscuous
C. backup
D. secondary
E. community
【多选题】
What are two limitations of the self-zone policies on a zone-based firewall？___
A. They are unable to block Https traffic
B. They restrict SNMP traffic.
C. They are unable to support Https traffic
D. They are unable to implement application inspection
E. They are unable to perform rate limiting
【多选题】
Which two descriptions of TACACS+ are true？ ___
A. The TACACS+ header is unencrypted
B. It combines a uthentication and authorization
C. It uses TCP as its transport protocol
D. Only the password is encrypted.
E. It uses UDP as its transport protocol.
【多选题】
Which two actions does an IPS perform？ ___
A. it spans the traffic
B. it reflects the traffic back to the sender
C. it encrypts the traffic
D. it terminates the user session or connection of the attacker
E. it reconfigures a device to block the traffic
【多选题】
In which form of fraud does an attacker try to learn information such as login credenti account information by ma squerading as a reputable entity or person in email， IM or communication channels ?___
A. phishing
B. Smurfit
C. Hacking
D. Identity Spoofing
【多选题】
Which two ESA services are available for incoming and outgoing mails ？___
A. anti-DoS
B. reputation filter
C. antispam
D. content filter
E. DLP
【多选题】
What are two reasons to recommend SNMPv 3 over SNMPv2？___
A. SNMPv3 is secure because you can configure authe ntication and privacy
B. SNMPv3 is insecure because it send in formation in clear text
C. SNMPv2 is insecure because it send information in clear text
D. SNMPv3 is a Cisco proprietary protocol
E. SNMPv2 is secure because you can configure authentication and privacy
【多选题】
Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___
A. drop
B. inspect
C. queue
D. quarantine
【单选题】
Which security principle has been violated if data is altered in an unauthorized manner？___
A. accountability
B. confidentiality
C. availability
D. integrity
【单选题】
Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___
A. encryption
B. authentication
C. group
【单选题】
Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___
A. username Operator privilege 7 password cisco
B. username Operator privilege 1 password cisco
C. username Operator privilege 15 password cisco
D. username Operator password cisco privilege 15
【单选题】
Which EAP method authenticates a client against Active Directory without the use of client-side 802.1X certificates？___
A. EAP-TLS
B. EAP-MSCHAPv2
C. EAP-PEAP
D.
E. AP-GTC
【单选题】
What is a limitation of network-based IPS？___
A. It must be in dividually configured to support every operating system on the network.
B. It is most effective at the in dividual host level
C. It is unable to monitor attacks across the entire netw ork
D. Large installations require numerous sensors to fully protect the network
【单选题】
When would you configure the ip dhcp snooping trust command on a sw itch？___
A. when the switch is connected to a DHCP server
B. when the switch is working in an edge capacit
C. when the switch is connected to a client system
D. when the switch is serving as an aggregator
【单选题】
How does the 802. 1x supplicant communicate with the authentication server？___
A. The supplicant creates EAP packets and sends them to the authenticator, which encapsulates them into RADIUS and forwards them to the authentication server.
B. The supplicant creates RADIUS packets and sends them to the authe nticator, which encapsulates the m into EAP and forwards them to the a uthentication server.
C. The supplicant creates RADIUS packets and sends them to the authenticator, which translates them into eap and forwards them to the a ut hentication server
D. The supplicant creates
E. AP packets and sends them to the authe nticator, which translates them into radius and forwards them to the authentication server.
【单选题】
Which command do you enter to verify the phase I status of a VPN connection？___
A. sh crypto se ssion
B. debug crypto isakmp
C. sh crypto isakmp sa
D. sh crypto ipsec sa
【单选题】
Refer to the exhibit. what is the e ffect of the given configuration？___
A. It enables authentication，
B. It prevents keychain authentication.
C. The two routers receive normal updates from one another.
D. The two device s are able to pass the message digest to one another.
【单选题】
Which command can you enter to configure OSPF to use hashing to authenticate routing updates？___
A. ip ospf aut hentication message-digest
B. neighbor 192 168.0 112 cost md5
C. ip ospf priority 1
D. ip ospf aut hentication-key
【单选题】
Which command can you enter to verify the status of Cisco lOS Resilient Configuration on a Cisco router?___
A. show secure bootset
B. secure boot-image
C. show binary file
D. ure boot-config
【单选题】
A user on your network inadvertently activates a botnet program that was received as an emai attachment. Which type of mechanism does Cisco Firepower use to detect and block only the botnet attack？___
A. network-based access control rule
B. reputation-based
C. user-ba sed access control rule
D. botnet traffic filter
【单选题】
What does the policy map do in CoPP？___
A. defines service parameters
B. defines packet selection parameters
C. defines the packet filter
D. define s the action to be performed
【单选题】
How is management traffic isolated on a Cisco ASR 1002？___
A. Traffic isolation is done on the vlan level
B. There is no management traffic isolation on a Cisco ASR 1002
C. Traffic is isolated based upon how you configure routing on the device
D. The management interface is configured in a special vRF that provides traffic isolation from the default routing table
【单选题】
Which statement about NaT table evaluation in the asa is true？___
A. After-auto NAT polices are appl d first
B. Manual NAT policies are applied first
C. the asa uses the most specific match
D. Auto NAT policies are applied first
【单选题】
Which information can you display by executing the show crypto ipsec sa command？___
A. ISAKMP SAs that are established between two peers
B. recent changes to the IP address of a peer router
C. proxy infor mation for the connection between two peers
D. IPsec SAs established between two peers
推荐试题
【单选题】
根据《贷款通则》，将借款债务全部或部分转让给第三人的，（）。___
A. 应当取得贷款人的同意
B. 应当通知贷款人
C. 如果全部转让，应当取得贷款人的同意。如果部分转让，应当通知贷款人
D. 如果部分转让，应当取得贷款人的同意。如果全部转让，应当通知贷款人
【单选题】
以上市公司的股份出质的，质押合同自（）起生效。___
A. 质押合同成立之日
B. 股份出质记载于股东名册之日
C. 股份出质向证券登记机构办理出质登记之日
D. 股份出质转入质权人名下之日
【单选题】
根据《中华人民共和国公司法》的规定，公司为公司股东或者实际控制人提供担保的（）。___
A. 必须经董事会或股东大会决议
B. 必须经监事会或股东大会决议
C. 必须经股东会或股东大会决议
D. 一律无效
【单选题】
根据《中华人民共和国民事诉讼法》的规定，因不动产纠纷提起的诉讼，由（）管辖。___
A. 不动产所在地人民法院
B. 被告住所地人民法院
C. 原告住所地人民法院
D. 中级人民法院
【单选题】
根据《中华人民共和国票据法》的规定，票据金额以中文大写与数码同时记载，两者不一致的，（）。___
A. 票据无效
B. 以中文大写为准
C. 以数码为准
D. 以金额较小的为准
【单选题】
根据《中华人民共和国票据法》的规定，票据记载事项中（）均不得更改，更改的票据无效。___
A. 付款人名称
B. 票据用途
C. 票据金额、付款人名称、收款人名称
D. 票据金额、日期、收款人名称
【单选题】
根据《中华人民共和国票据法》的规定，以背书转让的汇票，（）应当对其（）背书的真实性负责。___
A. 后手，所有前手
B. 所有前手，后手
C. 后手，直接前手
D. 直接前手，后手
【单选题】
根据《中华人民共和国合同法》，有以下（）情形的，当事人一方有权请求人民法院或者仲裁机构变更或者撤销合同。___
A. 一方以欺诈、胁迫的手段订立合同，损害国家利益
B. 合同损害社会公共利益
C. 在订立合同时显失公平的
D. 合同违反法律、行政法规的强制性规定
【单选题】
中国特色社会主义进入新时代，这意味着___。
A. 中国放弃了原有的治国理政思维
B. 中国已经强大起来
C. 中国方案对发展中国家仍不具有借鉴意义
D. 仍将坚持中国特色社会主义道路
【单选题】
五年来，我们统筹推进“___”总体布局、协调推进“（ ）”战略布局，“十二五”规划胜利完成，“十三五”规划顺利实施，党和国家事业全面开创新局面。
A. 五位一体 四个全面
B. 四位一体 五个全面
C. 五个全面 四位一体
D. 四个全面 五位一体
【单选题】
必须认识到，我国社会主要矛盾的变化，没有改变我们对我国社会主义所处历史阶段的判断，我国仍处于并将长期处于___的基本国情没有变，我国是世界最大发展中国家的国际地位没有变。
A. 社会主义初级阶段
B. 社会主义
C. 中国特色社会主义
D. 社会主义高级阶段
【单选题】
推进国家治理体系和治理能力现代化是___。
A. 全面深化改革总目标之一
B. 中国特色社会主义事业总体布局之一
C. 构建人类命运共同体的主要途径
D. 中国特色社会主义的最本质特征
【单选题】
以人民为中心的发展思想是___。
A. 改变以经济建设为中心的思想，重构绿水青山
B. 要放弃出口为导向的发展思维，以解决国内需求为主
C. 以精准扶贫为主，遏制富人和富裕地区的发展
D. 解决新时代我国社会主要矛盾所必须坚持的指导思想
【单选题】
下列哪项表述是正确的___。
A. 以经济建设为中心是中国特色社会主义制度的最大优势
B. 党领导一切说明党的活动要超越宪法和法律的限制
C. 党的各项工作都要从实际出发，坚持实事求是
D. 建设中国特色社会主义是党的伟大工程
【单选题】
中国特色社会主义进入新时代，我国社会主要矛盾发生变化，这意味着___。
A. 经济发展问题已经不是中心问题
B. 中国可以领导世界发展
C. 对我国社会主义所处历史阶段的判断是清醒的
D. 我国已经进入发达国家行列
【单选题】
全党同志要为实现推进现代化建设、完成祖国统一、维护世界和平与促进共同发展这三大历史任务，实现___而奋斗。
A. “两个一百年”奋斗目标、实现中华民族伟大复兴的中国梦
B. 中华民族伟大复兴的中国梦
C. “两个一百年”奋斗目标
D. “一百年”奋斗目标、实现中华民族伟大复兴的梦想
【单选题】
中国特色社会主义是历史和人民的选择，建设中国特色社会主义，总依据是___。
A. 我国处于并将长期处于社会主义初级阶段
B. 社会主义基本经济制度
C. 人民民主专政
D. 我国是世界最大的发展中国家
【单选题】
中国共产党第十九次全国代表大会，是在全面建成小康社会决胜阶段、中国特色社会主义进入___的关键时期召开的一次十分重要的大会。
A. 新时期
B. 新阶段
C. 新征程
D. 新时代
【单选题】
牢牢掌握___领导权，不断巩固马克思主义在意识形态领域的指导地位，巩固全党全国人民团结奋斗的共同思想基础。
A. 意识形态工作
B. 政治形态工作
C. 思想文化工作
D. 革命政治工作
【单选题】
加强___，依法坚决打击各种危害国家安全和利益、危害社会稳定和经济发展的犯罪活动和犯罪分子，保持社会长期稳定。
A. 社会治理
B. 社会安全治理
C. 创新治理
D. 社会治安综合治理
【单选题】
要坚持党管干部原则，___，把好干部标准落到实处。
A. 坚持立场坚定、素质过硬
B. 坚持德才兼备、以德为先
C. 坚持五湖四海、任人唯贤，坚持立场坚定、素质过硬
D. 坚持德才兼备、以德为先，坚持五湖四海、任人唯贤，坚持事业为上、公道正派
【单选题】
要以提升___为重点，突出政治功能，把企业、农村、机关、学校、科研院所、街道社区、社会组织等基层党组织建设成为宣传党的主张、贯彻党的决定、领导基层治理、团结动员群众、推动改革发展的坚强战斗堡垒。
A. 凝聚力
B. 领导力
C. 组织力
D. 战斗力
