Refer to the exhibit. Which statement is true about the configuration of split tunnels using SDM？（）
A.Any protected subnets that are entered represent subnets at the end user’s site that will be accessed without going through the encrypted tunnel.
B.Any protected subnets that are entered represent subnets at the end user’s site that will be accessed through the encrypted tunnel.
C.Any protected subnets that are entered represent subnets at the VPN server site that will be accessed without going through the encrypted tunnel.
D.Any protected subnets that are entered represent subnets at the VPN server site that will be accessedthrough the encrypted tunnel.
您可能感興趣的試卷
你可能感興趣的試題
A.All passwords entered during the AutoSecure configuration must be a minimum of 8 characters in length.
B.Cisco123 would be a valid password for both the enable password and the enable secret commands.
C.The auto secure command can be used to secure the router login as well as the NTP and SSH protocols.
D.For an interactive full session of AutoSecure， the auto secure login command should be used.
E.If the SSH server was configured， the 1024 bit RSA keys are generated after the auto secure commandis enabled.
Refer to the exhibit.
What does the "26" in the first two hop outputs indicate？（）
A.the outer label used to determine the next hop
B.the IPv4 label for the destination network
C.the IPv4 label for the forwarding router
D.the IPv4 label for the destination router
A.If the VPN server is configured for Xauth， the VPN client waits for a username / password challenge.
B.The Cisco Easy VPN feature only supports transform sets that provide authentication and encryption.
C.The VPN client initiates aggressive mode （AM） if a pre-shared key is used for authentication during the IKE phase 1 process.
D.The VPN client verifies a server username/password challenge by using a AAA authentication server that supports TACACS+ or RADIUS.
E.The VPN server can only be enabled on Cisco PIX Firewalls and Cisco VPN 3000 series concentrators.
F.When connecting with a VPN client，the VPN server must be configured for ISAKMP group 1，2 or 5.
Refer to the exhibit.
Which statement about the authentication process is true？（）
A.The LIST1 list will disable authentication on the console port.
B.Because no method list is specified， the LIST1 list will not authenticate anyone on the console port.
C.All login requests will be authenticated using the group tacacs+ method.
D.All login requests will be authenticated using the local database method.
E.The default login authentication will automatically be applied to all login connections.
Refer to the exhibit. What type of security solution will be provided for the inside network？（）
A.The TCP connection that matches the defined ACL will be reset by the router if the connection does not complete the three-way handshake within the defined time period.
B.The router will reply to the TCP connection requests. If the three-way handshake completes successfully， the router will establish a TCP connection between itself and the server.
C.The TCP traffic that matches the ACL will be allowed to pass through the router and create a TCP connection with the server.
D.The router will intercept the traceroute messages. It will validate the connection requests before forwarding the packets to the inside network.
最新試題
Which statement is true when ICMP echo and echo-reply are disabled on edge devices？（）
Which two statements are true about broadband cable （HFC） systems？（）
Refer to the exhibit. Which order correctly identifies the steps to provision a cable modem to connect to a headend as defined by the DOCSIS standard？（）
During the Easy VPN Remote connection process，which phase involves pushing the IP address， Domain Name System （DNS），and split tunnel attributes to the client？（）
Refer to the exhibit. Which statement is true about the configuration of split tunnels using SDM？（）
Refer to the exhibit. The show mpls interfaces detail command has been used to display information about the interfaces on router R1 that have been configured for label switching. Which statement is true about the MPLS edge router R1?（）
What are three configurable parameters when editing signatures in Security Device Manager （SDM）？（）
Refer to the exhibit.Which three statements describe the steps that are required to configure an IPsec site-to-site VPN using a GRE tunnel？（）
What are two possible actions an IOS IPS can take if a packet in a session matches a signature？（）
Which three categories of signatures can a Cisco IPS microengine identify？（）