多項(xiàng)選擇題Which two of these are advantages of placing the VPN device parallel to the firewall?()

A. high scalability
B. the design supports a layered security model
C. firewall addressing does not need to change
D. IPsec decrypted traffic is inspected by the firewall
E. there is a centralized point for logging and content inspection


您可能感興趣的試卷

你可能感興趣的試題

1.單項(xiàng)選擇題What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?()

A. RADIUS or LDAP
B. an internal router running EIGRP
C. Reverse Route Injection and OSPF or RIPv2
D. the VPN appliance to be deployed in line with the firewall

2.單項(xiàng)選擇題What is the recommended practice when considering VPN termination and firewall placement?()

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall, with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall, with the VPN terminating outside the firewall

4.單項(xiàng)選擇題In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?()

A. Layer 2
B. Layer 3
C. in-band
D. out-of-band
E. edge
F. central

5.單項(xiàng)選擇題Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?()

A. NAC can authenticate using 802.1X and IBNS cannot
B. NAC can ensure only compliant machines connect and IBNS cannot
C. NAC can ensure access to the correct network resources and IBNS cannot
D. NAC can manage user mobility and reduce overhead costs and IBNS cannot

最新試題

During consultation, you find that a customer has only a single asset closet and is looking for a solution that is easy to deploy. Which NAS physical deployment model would you suggest to this customer?()

題型:?jiǎn)雾?xiàng)選擇題

What is the term for a logical SAN which provides isolation among devices physically connected to the same fabric?()

題型:?jiǎn)雾?xiàng)選擇題

The Cisco NAC Appliance is able to check which three items before allowing network access?()

題型:多項(xiàng)選擇題

Which three of these are important when determining NAS Server scaling? ()

題型:多項(xiàng)選擇題

Which of these is true of a Layer 3 out-of-band NAS deployment?()

題型:?jiǎn)雾?xiàng)選擇題

One of your customers wishes to use the NAS to perform DHCP functions and does not currently have a Layer 3 gateway in its production network. Which gateway mode is appropriate for this customer?()

題型:?jiǎn)雾?xiàng)選擇題

As an experienced technician, you are responsible for Technical Support. Which of the following descriptions is correct about the characteristic of SLB one arm mode?()

題型:?jiǎn)雾?xiàng)選擇題

Please match the Cisco STP enahancement term to its definition.()(1) BPDU guard(2) PortFast(3) BackboneFast(4) Loop guard(5) Root guard(a) shuts down a port that receives a BPDU when enabled(b) cuts convergence time by mas-age for indirect failure(c) prevents the aliernate or root port from being designated in absence of BPDUs(d )causes Layer 2 LAN interface access port to immediately enter the forwarding state(e) helps prevent bridging loops due to jni-directional link failures on point-to-point links

題型:?jiǎn)雾?xiàng)選擇題

Which signal and noise values will result in the best phone communication with an access point?()

題型:?jiǎn)雾?xiàng)選擇題

Which of these is a benefit of using Network Admission Control instead of Cisco Identity Based Networking Services?()

題型:?jiǎn)雾?xiàng)選擇題