【多选题】
What are two reasons to recommend SNMPv 3 over SNMPv2？___
A. SNMPv3 is secure because you can configure authe ntication and privacy
B. SNMPv3 is insecure because it send in formation in clear text
C. SNMPv2 is insecure because it send information in clear text
D. SNMPv3 is a Cisco proprietary protocol
E. SNMPv2 is secure because you can configure authentication and privacy
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
AC
解析
暂无解析
相关试题
【多选题】
Which two actions can a zone- based firewall apply to a packet as it transits a zone pair？___
A. drop
B. inspect
C. queue
D. quarantine
【单选题】
Which security principle has been violated if data is altered in an unauthorized manner？___
A. accountability
B. confidentiality
C. availability
D. integrity
【单选题】
Which IKE Phase 1 parameter can you use to require the site-to-site VPN to use a pre-shared ？___
A. encryption
B. authentication
C. group
【单选题】
Which command successfully creates an administrative user with a password of "cisco"on a Cisco router?___
A. username Operator privilege 7 password cisco
B. username Operator privilege 1 password cisco
C. username Operator privilege 15 password cisco
D. username Operator password cisco privilege 15
【单选题】
Which EAP method authenticates a client against Active Directory without the use of client-side 802.1X certificates？___
A. EAP-TLS
B. EAP-MSCHAPv2
C. EAP-PEAP
D.
E. AP-GTC
【单选题】
What is a limitation of network-based IPS？___
A. It must be in dividually configured to support every operating system on the network.
B. It is most effective at the in dividual host level
C. It is unable to monitor attacks across the entire netw ork
D. Large installations require numerous sensors to fully protect the network
【单选题】
When would you configure the ip dhcp snooping trust command on a sw itch？___
A. when the switch is connected to a DHCP server
B. when the switch is working in an edge capacit
C. when the switch is connected to a client system
D. when the switch is serving as an aggregator
【单选题】
How does the 802. 1x supplicant communicate with the authentication server？___
A. The supplicant creates EAP packets and sends them to the authenticator, which encapsulates them into RADIUS and forwards them to the authentication server.
B. The supplicant creates RADIUS packets and sends them to the authe nticator, which encapsulates the m into EAP and forwards them to the a uthentication server.
C. The supplicant creates RADIUS packets and sends them to the authenticator, which translates them into eap and forwards them to the a ut hentication server
D. The supplicant creates
E. AP packets and sends them to the authe nticator, which translates them into radius and forwards them to the authentication server.
【单选题】
Which command do you enter to verify the phase I status of a VPN connection？___
A. sh crypto se ssion
B. debug crypto isakmp
C. sh crypto isakmp sa
D. sh crypto ipsec sa
【单选题】
Refer to the exhibit. what is the e ffect of the given configuration？___
A. It enables authentication，
B. It prevents keychain authentication.
C. The two routers receive normal updates from one another.
D. The two device s are able to pass the message digest to one another.
【单选题】
Which command can you enter to configure OSPF to use hashing to authenticate routing updates？___
A. ip ospf aut hentication message-digest
B. neighbor 192 168.0 112 cost md5
C. ip ospf priority 1
D. ip ospf aut hentication-key
【单选题】
Which command can you enter to verify the status of Cisco lOS Resilient Configuration on a Cisco router?___
A. show secure bootset
B. secure boot-image
C. show binary file
D. ure boot-config
【单选题】
A user on your network inadvertently activates a botnet program that was received as an emai attachment. Which type of mechanism does Cisco Firepower use to detect and block only the botnet attack？___
A. network-based access control rule
B. reputation-based
C. user-ba sed access control rule
D. botnet traffic filter
【单选题】
What does the policy map do in CoPP？___
A. defines service parameters
B. defines packet selection parameters
C. defines the packet filter
D. define s the action to be performed
【单选题】
How is management traffic isolated on a Cisco ASR 1002？___
A. Traffic isolation is done on the vlan level
B. There is no management traffic isolation on a Cisco ASR 1002
C. Traffic is isolated based upon how you configure routing on the device
D. The management interface is configured in a special vRF that provides traffic isolation from the default routing table
【单选题】
Which statement about NaT table evaluation in the asa is true？___
A. After-auto NAT polices are appl d first
B. Manual NAT policies are applied first
C. the asa uses the most specific match
D. Auto NAT policies are applied first
【单选题】
Which information can you display by executing the show crypto ipsec sa command？___
A. ISAKMP SAs that are established between two peers
B. recent changes to the IP address of a peer router
C. proxy infor mation for the connection between two peers
D. IPsec SAs established between two peers
【单选题】
How can you prevent NAT rules from sending traffic to incorrect interfaces？___
A. Assign the output interface in the NAT statement
B. Add the no-proxy-arp command to the nat line.
C. Configure twice NAT instead o bject NAT. 5
D. Use packet-tracer rules to reroute misrouted NAT entries.
【单选题】
What term can be defined as the securing， control， and identification of digital data？___
A. cryptography
B. crypto key
C. cryptoanalysis
D. cryptology
【单选题】
Which feature in the dNS security module provide on and off network DNS protection？___
A. Data Loss Prevention
B. Umbrella
C. Real-time sandboxing
D. Layer-4 monitoring
【单选题】
Which a dverse consequence can occur on a network without BPDu guard ?___
A. The olde st switch can be elected as the root bridge
B. Unauthorized switches that are connected to the network can cause spanning-tree loops
C.
D. ouble tagging can cause the switches to experience CAM table overload.
【单选题】
What configuration is required for multitenancy ?___
A. shared infrastructure
B. multiple carriers
C. co-located resources
D. multiple separate zones
【单选题】
Why does ISE require its own certificate issued by a trusted CA？___
A. ISEs certificate allows guest devices to validate it as a trusted network device
B. It generates certificates for guest devices ba sed on its own certificate
C. It requests certificates for guest devices from the Ca server based on its own certificate.
D. ISE's certificate allows it to join the network security framework
【单选题】
which attack involves large numbers of ICMP packets with a spoofed source IP address？___
A. smurf attack
B. Teardrop attack
C. Nuke attack
D. SYN Flood attack
【单选题】
Which statement about interface and global access rules is true？___
A. Interface access rules are processed before global access rules.
B. Global access rules apply only to outbound traffic， but interface access rules can be applied in either direction
C. The implicit allow is proce ssed after both the global and interface access rules
D. If an interface access rule is applied， the global access rule is ignored
【单选题】
Which type of malicious software can create a back-door into a device or network？___
A. bot
B. worm
C. virus
D. Trojan
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset？___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns？___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
【单选题】
What is an advantage of split tunneling ？___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ？___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain？___
A. 4
B. 3
C. 2
D. 5
【单选题】
Which command enables authentication at the oSPFv2 routing process level？___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system？___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA， which maps are used to identify traffic？___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives？___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls？___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host？___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution？___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
推荐试题
【单选题】
行政诉讼中，经复议的案件，复议机关决定维持原具体行政行为的，被告为____。___
A. 作出原具体行政行为的行政机关
B. 复议机关
C. 作出原具体行政行为的行政机关和复议机关
D. 当事人选择
【单选题】
我国宪法规定的公民在法律面前一律平等原则的含义是什么？___
A. 18周岁以上的公民在法律面前平等
B. 人民在法律面前平等
C. 凡具有中华人民共和国国籍的人在法律面前平等
D. 居住在中国境内的人在法律面前平等
【单选题】
行政机关收到政府信息公开申请，能够当场答复的，应当当场予以答复。行政机关不能当场答复的，应当自收到申请之日起____个工作日内予以答复。___
A. 10
B. 20
C. 15
D. 30
【单选题】
某市政府为了加强管理，经常制定规章以外的其他规范性文件，则这些规范性文件____。___
A. 对于某些不是关系重大公共利益的可以设定行政许可
B. 经法律的授权后，可以在授权的范围内设定行政许可
C. 经国务院授权后，可以在授权的范围内设定行政许可
D. 一律不得设定行政许可
【单选题】
医师定期考核不合格被暂停执业活动期满再次考核仍不合格的、中止医师生执业活动满二年的以及国务院卫生行政部门规定不宜从事相关业务的其他情形的，医师所在的医疗机构应当在____日内报告医师注册的卫生行政部门。___
A. 30
B. 20
C. 10
D. 7
【单选题】
医师注册后受刑事处罚的，其所在的医疗、预防、保健机构应当在____内报告准予注册的卫生行政部门，卫生行政部门应当注销注册，收回医师执业证书。___
A. 十五日
B. 三十日
C. 六十日
D. 九十日
【单选题】
按照《病原微生物实验室生物安全管理条例》的要求，可以从事高致病病原微生物实验活动的实验室是____。___
A. 一、二级实验室
B. 三、四级实验室
C. 一、三级实验室
D. 二、四级实验室
【单选题】
____，行政复议机关不可以进行调解。___
A. 市政府征用某村土地，该村居民认为补偿数额过低申请复议
B. 某企业对税务机关所确定的税率及税额不服申请复议
C. 公安机关以张某非法种植罂粟为由对其处以拘留10日并处1000元罚款，张某申请复议
D. 沈某对建设部门违法拆除其房屋的赔偿决定不服申请复议
【单选题】
艾滋病病毒感染者是指____。___
A. 感染了艾滋病病毒而且已经出现临床症状和体征的人
B. 接触过艾滋病病人的人
C. 接触过艾滋病病毒的人
D. 感染了艾滋病病毒但还没出现临床症状和体征的人
【单选题】
我国《刑法》第三百三十五条规定了医疗事故罪，即医务人员由于严重不负责任，造成就诊人死亡或者严重损害就诊人身体健康的，可以判处____以下有期徒刑或者拘役。___
A. 1年
B. 3年
C. 5年
D. 7年
【单选题】
实施人体器官移植手术的医疗机构及其医务人员未对人体器官捐献人进行医学检查或者未采取措施，导致接受人因人体器官移植手术感染疾病的，依照____规定予以处罚。___
A. 医院感染管理办法
B. 执业医师法
C. 医疗机构管理条例
D. 医疗事故处理条例
【单选题】
以下表述不正确的是____。___
A. 省级人民政府卫生行政部门负责划定血站采供血服务区域
B. 采供血服务区域受行政区域的限制
C. 同一行政区域内不得重复设置血液中心、中心血站
D. 血站与单采血浆站不得在同一县级行政区域内设置
【单选题】
被申请行政复议的具体行政行为除____情形外，行政复议机关可以作出变更决定。___
A. 事实清楚，证据确凿，适用依据正确，程序违法的
B. 事实清楚，证据确凿，适用依据错误，程序合法的
C. 事实清楚，证据确凿，适用依据正确，程序合法，但是明显不当的
D. 事实不清，证据不足，复议机关经审理查明事实清楚，证据确凿的
【单选题】
高致病性病原微生物菌（毒）种或者样本在运输、储存中被盗、被抢、丢失、泄漏的，县级人民政府和省级人民政府在接到报告后，分别于____小时内按照规定报告。___
A. 1，1
B. 1，2
C. 2，1
D. 2，2
【单选题】
按照《母婴保健法》及其实施办法规定，____须经设区的市级卫生计生行政部门许可。___
A. 从事婚前医学检查的医疗保健机构和人员
B. 从事终止妊娠手术的医疗保健机构和人员
C. 从事遗传病诊断的医疗保健机构和人员
D. 从事产前诊断的医疗保健机构和人员
【单选题】
人民法院应当在立案之日起____内，将起诉状副本发送被告。被告应当在收到起诉状副本之日起____内向人民法院提交作出行政行为的证据和所依据的规范性文件，并提出答辩状。___
A. 5日，15日
B. 5日，10日
C. 10日，15日
D. 10日，20日
【单选题】
医师变更执业地点、执业类别、执业范围等注册事项的，应当到什么部门办理变更注册手续。___
A. 本单位人事部门
B. 县级以上卫生行政部门
C. 省级以上卫生行政部门
D. 准予注册的卫生行政部门
【单选题】
行使国家立法权的机关是____。___
A. 全国人民代表大会
B. 全国人民代表大会常务委员会
C. 全国人民代表大会和全国人民代表大会常务委员会
D. 全国人民代表大会、全国人民代表大会常务委员会和国务院
【单选题】
国家赔偿义务机关在规定期限内未作出是否赔偿的决定，赔偿请求人可以自期限届满之日起____内，向人民法院提起诉讼。___
A. 2个月
B. 3个月
C. 6个月
D. 9个月
【单选题】
乡(镇)人民政府或者街道办事处应当对公民的生育申请及时受理、审核，并自受理申请之日起____内将审核意见和申请人的申请材料报县级卫生和计划生育行政部门审批。___
A. 五日
B. 十日
C. 十五日
D. 二十日
【单选题】
国家对放射源和射线装置实行分类管理。根据放射源、射线装置对人体健康和环境的潜在危害程度，从高到低将放射源分为____。___
A. Ⅰ类、Ⅱ类、Ⅲ类、Ⅳ类、Ⅴ类
B. Ⅰ类、Ⅱ类、Ⅲ类、Ⅳ类
C. Ⅰ类、Ⅱ类、Ⅲ类
D. Ⅰ类、Ⅱ类
【多选题】
根据《最高人民法院关于审理非法行医刑事案件具体应用法律若干问题的解释》对于“未取得医生执业资格的人非法行医”规定,下列正确的是____。___
A. 未取得或者以非法手段取得医师资格从事医疗活动的
B. 个人未取得《医疗机构执业许可证》开办医疗机构的
C. 被依法吊销医师执业证书期间从事医疗活动的
D. 家庭接生员实施家庭接生以外的医疗行为的
【多选题】
制订《放射诊疗管理规定》的法律依据包括以下哪些法律、法规？___
A. 《中华人民共和国职业病防治法》
B. 《中华人民共和国传染病防治法》
C. 《放射性同位素与射线装置放射条例》
D. 《医疗机构管理条例》
【多选题】
2002年，甲乙两村发生用地争议，某县政府召开协调会并形成会议纪要。2008年12月，甲村一村民向某县政府申请查阅该会议纪要。下列哪些选项是正确的？___
A. 该村民可以口头提出申请
B. 因会议纪要形成于《政府信息公开条例》实施前，故不受《条例》规范
C. 因会议纪要不属于政府信息，某县政府可以不予公开
D. 如某县政府提供有关信息，可以向该村民收取检索、复制、邮寄等费用
【多选题】
监督员在对某医疗机构监督检查时,发现该医疗机构存在使用非卫生技术人员执业问题：内科一名人员无医师资格证行医,一名注册范围为外科的执业医师在妇产科执业。卫生行政机关决定依据《医疗机构管理条例》及其实施细则规定对该医疗机构进行查处,具体措施包括哪些项。___
A. 责令改正违法行为
B. 警告
C. 罚款2000元
D. 罚款4000元
【单选题】
国家对放射源和射线装置实行分类管理。根据放射源、射线装置对人体健康和环境的潜在危害程度，从高到低将放射源分为___。
A. Ⅰ类、Ⅱ类、Ⅲ类、Ⅳ类、Ⅴ类，
B. Ⅰ类、Ⅱ类、Ⅲ类、Ⅳ类、
C. Ⅰ类、Ⅱ类、Ⅲ类、
D. Ⅰ类、Ⅱ类
【单选题】
某医院未取得许可证将本院一枚钴60放射源转让给当地一家蔬菜加工企业，依法应由哪个行政执法部门给予相应的行政处罚___。
A. 公安部门
B. 环境保护主管部门
C. 卫生计生行政部门
D. 卫生监督所
