多項(xiàng)選擇題Which two statements about Cisco Security Management Suite are correct？ （）

A. It should be implemented in a management VLAN.
B. Its connection to managed devices should be over a data VLAN.
C. It is made up of Cisco Security MARS and Clean Access software.
D. It should be deployed as close to the edge of the network as possible.
E. It delivers policy administration and enforcement for the Cisco Self-Defending Network.


您可能感興趣的試卷

你可能感興趣的試題

1.多項(xiàng)選擇題Which three mechanisms are used to secure management traffic from outside IPS sensors？（）

A. secure tunnels
B. a separate management VLAN
C. secure VLANs to isolate sensors
D. an out-of-band path around the firewall
E. asymmetric traffic flows to isolate sensors
F. private VLANs to put all sensors on isolated ports

2.多項(xiàng)選擇題In which two locations in an enterprise network can an IPS sensor be placed？ （）

A. bridging VLANs on two switches
B. bridging two VLANs on one switch
C. between two Layer 2 devices with trunking
D. between two Layer 2 devices without trunking
E. between a Layer 2 device and a Layer 3 device with trunking

3.多項(xiàng)選擇題Which two of these correctly describe asymmetric routing and firewalls？ （）

A. only operational in routed mode
B. only operational in transparent mode
C. only eight interfaces can belong to an asymmetric routing group
D. operational in both failover and non-failover configurations
E. only operational when the firewall has been configured for failover

4.多項(xiàng)選擇題Which two statements about an interface configured with the asr-group command are correct？ （）

A. The FWSM supports up to 16 asymmetric routing groups.
B. If a matching packet is not found， the packet is dropped.
C. Asymetric routing of return traffic is enabled.
D. If a matching packet is found， the Layer 3 header is rewritten.
E. If a matching packet is found， the Layer 3 header is rewritten and the packet is forwarded to thedefault gateway.

5.多項(xiàng)選擇題Which three of the following descriptions are true about the firewall modes？ （）

A. Transparent mode is layer 2.
B. Routed mode is layer 3.
C. Routed mode has 1 IP address.
D. Transparent mode has 1 IP address.

6.單項(xiàng)選擇題What is the traditional mode for a firewall？（）

A. routed mode
B. context mode
C. bridged mode
D. transparent mode
E. full security mode

7.多項(xiàng)選擇題What are two characteristics of GSS？ （）

A. It helps verify end-to-end path availability.
B. It provides traffic rerouting in case of disaster.
C. HSRP， GLBP， and VRRP can be clients of GSS.
D. BGP must be the routing protocol between the distributed data centers.
E. DNS responsiveness is improved by providing centralized domain management.

8.多項(xiàng)選擇題What are two characteristics of OER？ （）

A. It can take on HSRP， VRRP， and GLBP as clients.
B. It provides automatic inbound route optimization.
C. Path selection may be based on delay， loss， or jitter.
D. The border router makes decisions about which outbound path to use.
E. Automatic load distribution is provided for multiple connections.

9.多項(xiàng)選擇題What are two characteristics of the SLB One-arm mode？ （）

A. It is not as common as bridge mode
B. The MSFC is not directly connected to the CSM
C. Outbound traffic from servers may need to be directed by PBR or CSNAT to the CSM
D. The SLB is moved to a position where selected inbound and outbound server traffic goesthrough the SLB
E. The CSM statically routes inbound server traffic to the aggregation switch FWSM， then to the connected server subnet