【单选题】
Which type of malicious software can create a back-door into a device or network?___
A. bot
B. worm
C. virus
D. Trojan
查看试卷,进入试卷练习
微信扫一扫,开始刷题
答案
D
解析
暂无解析
相关试题
【单选题】
Which security term refers to the like lihood that a weakness will be exploited to cause damage to an asset?___
A. threat
B. risk
C. countermeasure
D. vulnerability
【单选题】
Which IPS detection method examines network traffic for preconfigured patterns?___
A. signature-based detection
B. honey-pot detection
C. anomaly-based detection
D. policy-based detection
【单选题】
What is an advantage of split tunneling ?___
A. It allows users with a VpN connection to a corporate network to access the internet with sending traffic across the cor porate network.
B. It allows users with a vpn connection to a corporate network to access the internet by using the vPN for security.
C. It protects traffic on the private network from users on the public network
D. It enables the VPN server to filter traffic more efficiently
【单选题】
Which IDS/IPS state misidentifies acceptable behavior as an attack ?___
A. false negative
B. true positive NEKA G
C. true negative
D. false positive
【单选题】
What is the maximum num ber of methods that a single method list can contain?___
A. 4
B. 3
C. 2
D. 5
【单选题】
Which command enables authentication at the oSPFv2 routing process level?___
A. ip ospf authentication message-digest
B. area 0 authentication message-digest
C. ip ospf message-digest-key 1 mds Cisco
D. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
【单选题】
Which type of firewall monitors a nd protects a specific system?___
A. firewall
B. application firewall
C. stateless firewall wvp
D. personal firewall
【单选题】
On an ASA, which maps are used to identify traffic?___
A. Route maps
B. Policy maps
C. Class maps
D. Service maps
【单选题】
Which type of social engineering attack targets top executives?___
A. whaling
B. vishin
C. spear phishing ng
D. baiting
【单选题】
What is the minimum Cisco lOS version that supports zone-based firewalls?___
A. 12.1T
B. 15.1
C. 15.0
D. 124
【单选题】
In which type of attack does an attacker overwrite an entry in the CAM table to divert traffic destined to a legitimate host?___
A. DHCP spoofing
B. ARP spoofing
C. CAM table overflow
D. MAC spoofing
【多选题】
Which two attack types can be prevented with the impleme ntation of a Cisco IPS solution?___
A. DDos
B. man-in-the-middle
C. worms
D. ARP spoofing
E. VLAN hopping
【多选题】
choose four___
A. DHCP snooping ——————————blocks DHCP messages
B. Dynamic ARP inspection——————verifies IP-to-MAC traffic on untrusted ports
C. IP sources guard ——————————provides layer 2 interface security with ports ACLs
D. Port security————————————mitigates MAC-address spoofing at the access interface
【多选题】
choose four___
A. Step1————————run the system setup wizard
B. Step2————————add an authentication realm
C. Step3————————configure identity management
D. Step4————————configure directory group
【多选题】
What are two advanced features of the Cisco AMp solution for endpoints ___
A. contemplation
B. foresight
C. sandboxing
D. reputation
E. reflection
【多选题】
Which two characteristics of RADIUS are true?___
A. It encrypts only the password between user and server.
B. It uses TCP ports 1812/1813
C. It uses UDP ports 1812/1813.
D. It uses UDP port 49
E. It uses TCP port 49
【多选题】
What are two challenges of using a network-based IPS? ___
A. It is unable to determine whether a detected attack was successful
B. It requires additional storage and proce ssor capacity on syslog servers
C. As the network expands, it requires you to add more sensors.
D. It is unable to detect attacks across the entire network
E. It must support multiple operating systems.
【多选题】
What are two default be haviors of the traffic on a zone-based firewall?___
A. Traffic within the self -zone uses an im plicit deny all.
B. All traffic between zones is implicitly blocked
C. Communication is allowed between interfadAss that are members of the same zone
D. Communication is blocked between interfaces that are members of the same zone
E. The CBAC rules that are configured on router interfaces apply to zone interfaces
【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model?___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE? ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks?___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager(ASDM), which two methods are available to add a new root certificate?___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles?___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true?___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants?___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action?___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ?___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases?___
A. 2
B. 3
C. 4
D. 5
【单选题】
What does the dh group refer to?___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ?___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ?___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment, Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request?___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port?___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch?___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature, what is the effect on the parent signature and the family of subsignatures?___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected, the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks?___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device?___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection?___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing?___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
推荐试题
【单选题】
[单选题]第1523题:根据《劳动防护用品监督管理规定》.(劳动防护用品目录由国家安全生产监督管理总局确定并公布___
A. 特殊
B. 特种
C. 一般
【单选题】
[单选题]第1524题:炸药燃烧与一般可燃物爆炸不同,它不需要___就能进行燃烧。
A. 空气中的氧气
B. 点火源
C. 可燃物
【单选题】
[单选题]第1525题:裂解炉对流段原料预热盘管破裂后,室内最明显的变化是___。
A. 裂解炉横跨断温度异常上升
B. 裂解炉烟气温度异常上升
C. 裂解炉负压不断降低
【单选题】
[单选题]第1526题:乙烯在工作环境中最高允许浓度为___mg/m2。
A. 100
B. 200
C. 300
【单选题】
[单选题]第1527题:下列选项中不属于急冷油管线防堵措施的是___
A. 控制好QO黏度在指标范围内
B. 定期切换、清理急冷油循环泵进出口过滤器,防止过滤器堵塞
C. 控制汽油分馏塔釜在低液位
【单选题】
[单选题]第1528题:为了保证安全阀能够正常排放物料火炬总管的管径通常由___决定
A. 最大允许组合背压
B. 火炬气的流速
C. 最大火炬排放量
【单选题】
[单选题]第1529题:压力容器作业的职业禁忌证不包括___。
A. 心脏病及心电图明显异常(心律失常)
B. 红绿色盲
C. 恐高症
【单选题】
[单选题]第1530题:根据事故情景,对事故现场进行观票、分析或测定,确定事故严重程度、影响范围和变化趋势等。这在应急演练中属于___。
A. 观测
B. 事故监测
C. 测试
【单选题】
[单选题]第1531题:干气密封主密封的作用是___。
A. 防止机体内物料外泄
B. 防止润滑油外泄
C. 防止润滑油漏入机体
【单选题】
[单选题]第1532题:个人剂量监测档案应保存___。
A. 终生保存
B. 50年
C. 80年
【单选题】
[单选题]第1533题:若系统内存在燃爆性气体爆破片的材料不应选用___。
A. 橡胶
B. 塑料
C. 铁片
【单选题】
[单选题]第1534题:发生特别重大突发事件对人民生命财产安全、国家安全、公共安全、环损安全或者社会秩序物成重大威胁采取有关法律、法规、规章规定的应急处置措施不能消除或者有效控制、减轻其严重社会危害,需要进入___的.由全国人民代表大会常务委员会或者国务院依照宪法和其他有关法律规定的权限和程序决定。
A. 紧急状态
B. 非常时期
C. 戒严
【单选题】
[单选题]第1535题:压力容器内的压力由于容器内部或外部受热而显著增加且容器与其它设备的连接管道又装有截止阀应单独装设___。
A. 温度计
B. 压力表
C. 安全卸压装置
【单选题】
[单选题]第1536题:液体能发生闪燃的___叫闪点。
A. 最高温度
B. 最低温度
C. 临界温度
【单选题】
[单选题]第1537题:下列密封属于静密封的是___。
A. 垫片密封
B. 填料密封
C. 机械密封
【单选题】
[单选题]第1538题:随着排放量的逐年增加会引起地球温度升高的是___。
A. 二氧化氮
B. 二氧化碳
C. 一氧化碳
【单选题】
[单选题]第1539题:降低生产过程新鲜水的消耗,装置冷却水应使用___水。
A. 循环
B. 工业
C. 江河
【单选题】
[单选题]第1540题:离心泵抽空的原因之一是___。
A. 入口压力偏高
B. 泵的出口阀关死
C. 吸入管内有空气
【单选题】
[单选题]第1541题:演练脚本一般采用表格形式,主要内容包括:演练模拟事故情景;处置行动与执行人员,指令与对白:步骤及时间安排视频背景与字幕,演练___等。
A. 顺序
B. 解说词
C. 动作和说明
【单选题】
[单选题]第1542题:裂解炉对流段炉管检修抽查20%以上的弯头壁厚,减蒲率达壁厚___%寸应予以更换。
A. 40
B. 30
C. 50
【单选题】
[单选题]第1543题:冬天,为防止水换热器循环水冻结的主要措施是___。
A. 蒸汽伴热
B. 打开水冷器循环水旁通
C. 全开循环水
【单选题】
[单选题]第1544题:下列选项中,引起管道腐蚀的因素有___。
A. 管道的材质
B. 空气的温度
C. 压力的高低
【单选题】
单选题]第1545题:主要化工污染物质有___。
A. 水污染物质
B. 大气污染物质
C. 以上两类物质
【单选题】
[单选题]第1546题:丙烯精馏塔塔顶冷凝器内漏时,下列处理方法正确的是___。
A. 换热器切出检修
B. 不需处里
C. 降负荷即可
【单选题】
[单选题]第1547题:安全阀作为压力容器的附件或管件,可起超压保护作用,其定压时,应根据___确定安全阀的开启压力。
A. 安全阀的种类
B. 安全阀的位置
C. 介质的操作压力与物态
【单选题】
[单选题]第1548题:主控室的桑声声级设计值要求是小于等于___dBA 。
A. 60
B. 55
C. 70
【单选题】
[单选题]第1549题:裂解炉翅片损坏的主要原因为___。
A. 排烟温度过低,造成水蒸气凝液,与烟道气中酸性气体混合,腐蚀对流段想片
B. 燃料燃烧不完全,对流殿积灰严重
C. 对流段温度过高,造成管线疲劳
【单选题】
[单选题]第1550题:导致高心泵扬程小的原因是___。
A. 入口压力高
B. 转速过低
C. 联轴器对中不良
【单选题】
[单选题]第1551题:火炬排放物料时应缓慢,并防止大量___进入火炬总管以防下火雨。
A. 轻烃
B. 燃料气
C. 碳五
【单选题】
[单选题]第1552题:急冷钢炉内管损坏根数很少时,可采用将内管堵死的方法进行修理堵管数量不应超过该急冷锅炉管子总数的___%
A. 4
B. 5
C. 3
【单选题】
[单选题]第1553题:低压带电作业可能造成的事故类型是___。
A. 机械伤害
B. 物体打击
C. 电流伤害
【单选题】
[单选题]第1554题:《使用有毒物品作业场所劳动保护条例》规定,用人单位应当搜照规定对从事使用高毒物品作业的劳动者___
A. 妥善安置
B. 进行调离
C. 进行岗位轮换
【单选题】
[单选题]第1555题:安全阀的定压依据是___。
A. 其开启压力一般为最高压力的1.05至1.5倍
B. 其开启压力一般为最高压力的1.05至1.10倍
C. 其开启压力一般为最高压力的1.05至1.3倍
【单选题】
[单选题]第1556题:工房内防静电的措施不包括___。
A. 通风
B. 造潮
C. 降温
【单选题】
[单选题]第1557题:未按期复审或复审《特种作业人员操作证》不合格者,其___。
A. 参加再培训后方可有效
B. 在下一年度再重审
C. 操作证自行失效
【单选题】
[单选题]第1558题:演练工作通信保障就是根据演练工作需要,采用___,保证演练通信信息通畅。
A. 电信系统
B. 多种公用或专用通信系统
C. 计算机系统
【单选题】
[单选题]第1559题:分离各塔发生塔超压联锁后发生的动作是___.防止塔压进一步上升。
A. 切撕进料
B. 切撕塔釜加热
C. 放空阀打开
【单选题】
[单选题]第1560题:为防止在机泵运行时操作人员被机泵的转动部位伤害,机泵需要设置___。
A. 泵入口压力表
B. 泵出口压力表
C. 机泵联轴节护置
【单选题】
[单选题]第1561题:燃料容器管道直径越小,发生爆炸的危险___。
A. 越小
B. 越大
C. 无规律
【单选题】
[单选题]第1562题:职业病目录中,职业中毒有___种。
A. 54
B. 56
C. 65