最新的Cisco Implementing Cisco IOS Network Security (IINS v2.0) - 640-554免費考試真題

A. Overload

B. Static NAT

C. Dynamic PAT

D. Dynamic NAT

A. It cannot detect application-layer attacks.

B. It works only in promiscuous mode.

C. It cannot ensure each TCP connection follows a legitimate TCP three-way handshake.

D. The status of TCP sessions is retained in the state table after the sessions terminate.

E. It cannot support UDP flows.

F. It has low performance due to the use of syn-cookies.

A. Standard access lists should be placed as near as possible to the destination

B. Extended access lists should be placed as near as possible to the destination

C. Standard access lists filter on the source address

D. Standard access lists should be placed as near as possible to the source

E. Extended access lists should be placed as near as possible to the source

F. Standard access lists filter on the destination address

A. takes a variable-length message and produces a 168-bit message digest

B. takes a message less than 2^64 bits as input and produces a 160-bit message digest

C. takes a fixed-length message and produces a 128-bit message digest

D. takes a variable-length message and produces a 128-bit message digest

A. permit 172.16.80.0 255.255.240.0

B. permit 172.16.80.0 0.0.3.255

C. permit 172.16.80.0 0.0.248.255

D. permit 172.16.80.0 0.0.7.255

E. permit 176.16.80.0 255.255.252.0

F. permit 172.16.80.0 255.255.248.0

A. Smart tunnels can be used by clients that do not have administrator privileges.

B. Smart tunnels offer better performance than port forwarding.

C. Smart tunnels require the client to have the application installed locally.

D. Smart tunnels support all operating systems.

A. to enable smart tunnel access for applications that are not web-based

B. to enable split tunneling when using clientless SSL VPN access

C. to enable single-sign-on so the SSL VPN users need only log in once

D. to enable users to login to a web portal to download and launch the AnyConnect client

E. to optimize the SSL VPN connections using DTLS

A. Configure a web ACL.

B. Configure a smart tunnel.

C. Turn off URL entry.

D. Configure a portal access rule.

A. PVLAN Edge can be configured to restrict the number of MAC addresses that appear on a single port.

B. By default, when a port policy error occurs, the switchport shuts down.

C. The switch does not forward any traffic from one protected port to any other protected port.

D. The switch only forwards traffic to ports within the same VLAN Edge.

A. 06

B. 50

C. 51

D. 47

A. Rainbow table

B. Cryptotext

C. Ciphertext

D. Salt

A. Enable authentication and encryption on the trunk port.

B. Limit the allowed VLAN(s) on the trunk to the native VLAN only.

C. Configure an unused VLAN as the native VLAN.

D. Enable encryption on the trunk port.

E. Disable double tagging by enabling DTP on the trunk port.