CCSP642504642533最新题库.docx
- 文档编号:2824807
- 上传时间:2022-11-15
- 格式:DOCX
- 页数:28
- 大小:1.02MB
CCSP642504642533最新题库.docx
《CCSP642504642533最新题库.docx》由会员分享,可在线阅读,更多相关《CCSP642504642533最新题库.docx(28页珍藏版)》请在冰豆网上搜索。
CCSP642504642533最新题库
SecuringNetworkswithCiscoRoutersandSwitches
QUESTION1
WhichtwotechnologiescansecurethecontrolplaneoftheCiscorouter?
(Choosetwo)
A.
BPDUprotection
B.
role-basedaccesscontrol
C.
routingprotocolauthentication
D.
CPPr
Answer:
CD
QUESTION2
CiscoSecureAccessControlServer(ACS)isahighlyscalable,high-performanceaccesscontrolserverthatprovidesacomprehensiveidentitynetworkingsolution.WhichofthesestatementsiscorrectregardingusersetuponACS4.0?
A.
Usersareassignedtothedefaultgroup.
B.
Ausercanbelongtomorethanonegroup.
C.
Theusernamecancontaincharacterssuchas"#"and"?
".
D.
Thesettingsatthegroupleveloverridethesettingsconfiguredattheuserlevel
Answer:
A
QUESTION3
Pleasestudytheexhibitcarefully,andthenanswerthefollowingquestion:
.
ActualT
"PassAnyExam.AnyTime."-3
Cisco642-504:
PracticeExam
ActualT
"PassAnyExam.AnyTime."-4
Cisco642-504:
PracticeExam
RefertotheappropriateSDMscreen(s),whichtwostatementscorrectlydescribetheCiscoIOSZone-BasedFirewallconfiguration?
(Choosetwo)
A.
The"reset"actionisappliedtoanyHTTPrequestsourcedfromthe"in"zoneanddestinedtothe"out"zone,whichalsohasarequestUniformResourceIdentifier(URI)thatisgreaterthan500bytesislength.
B.
The"inspect"actionisappliedtoInternetControlMessageProtocol(ICMP)trafficsourcedfromthe"in"zoneanddestinedtothe"out"zone.
C.
The"http-policy"inspectionpolicymapisappliedtoallHTTPandHTTPStrafficsourcedfromthe"in"zoneanddestinedtothe"out"zone.
D.
The"testpm"inspectionpolfcymapisappliedtother'inoufzone-pair.
Answer:
AD
QUESTION4
RefertotheappropriateSDMscreen(s),whatistheUserDatagramProtocol(UDP)idletimesetforanyHTTPtrafficthatissourcedfromthe"in"zoneanddestinedtothe"out"zone?
ActualT
"PassAnyExam.AnyTime."-6
Cisco642-504:
PracticeExam
ActualT
"PassAnyExam.AnyTime."-7
Cisco642-504:
PracticeExam
ActualT
A.
10seconds
B.
15seconds
C.
30seconds
"PassAnyExam.AnyTime."-8
Cisco642-504:
PracticeExam
D.
35seconds
Answer:
D
QUESTION5
RefertotheappropriateSDMscreen(s),whatisthereasonthatoutsidehostscan'tinitiateTelnet(port23)traffictothe172.16.1.10insidehost?
ActualT
"PassAnyExam.AnyTime."-9
Cisco642-504:
PracticeExam
v
ActualT
"PassAnyExam.AnyTime."-10
Cisco642-504:
PracticeExam
A.
Theimplicitdenyaccesscontrollist(ACL)entryontheinboundACLisappliedtotheoutsideActualT
interface.
B.
StaticNATisnotcorrectlyenabledtotranslatethe172.16.1.10insidehostaddress.
C.
Thereisnozone-basedfirewallpolicyappliedtothetrafficsourcedfromthe"out"zoneanddestinedtothe"in"zone.
D.
Theimplicitdenyaccescontrollist(ACL)entryontheinboundACLisappliedtotheoutsideinterface.
Answer:
C
QUESTION6
Whichtwocategoiytypesareassociatedwith5.xsignatureuseinCiscoIOSIPS?
(Choosetwo.)
A.
basic
B.
advanced
C.
attack-drop
D.
built-in
Answer:
AB
QUESTION7
SelecttwoissuesthatyoushouldconsiderwhenimplementingIOSFirewallIDS.(Choosetwo)
A.
Thememoryusage
B.
ThenumberofDMZs
C.
Thesignaturecoverage
D.
Thenumberofrouterinterfaces
Answer:
AC
QUESTION8
YouaretheCiscoConfigurationAssistantinyourcompany.Whichcommandisusedtosupport802.lxguestVLANfunctionalitybasedonthefollowingconfiguration?
A.
aaaauthorizationnetworkdefaultgroupradius
B.
aaaauthenticationdotlxdefaultgroupradius
C.
aaaaccountingdotlxdefaultstart-stopgroupradius
D.
aaaaccountingsystemdefaultstart-stopgroupradius
Answer:
A
QUESTION9
YouareinchargeofSecuringNetworksCiscoRoutersandSwitchesinyourcompany.WhyistheCiscoIOSFirewallauthenticationproxynotworkingbasedonthefollowingconfiguration?
aaanewmodel
aaaauthenticationlogindefaultgrouptacacs
aaaauthenticationauth-proxydefaultgrouptacacs+aaaaccountingauth-proxydefaultstart-stopgrouptacacs+enablepasswordTeSt_123
ipauto-proxynamepxyhttp
ipauto-proxyauth-proxy-banner
interfaceEthernetO/1
ipaddress192.168.1.1255.255.255.0
ipauto-proxypxy
noiphttpserver
tacacs-serverhost192.168.123.14
tacacs-serverkeyCisco
lOutputomitted
A.
Theaaaauthenticationauth-proxydefaultgrouptacacs+commandismissing
B.
Therouterlocalusernameandpassworddatabaseisnotconfigured.
C.
YouforgottoenableHTTPserverandAAAauthentication
D.
CiscoIOSauthenticationproxynotsupportTACACS+,
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- CCSP642504642533 最新 题库
![提示](https://static.bdocx.com/images/bang_tan.gif)