Quiz
CCNA Security: ESP, failover, ASA and Sourcefire questions
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (7)
1Which statement about communication over failover interfaces is true?
- AAll information that is sent over the failover interface is sent as clear text, but the stateful failover link is encrypted by default.
- BAll information that is sent over the failover and stateful failover interfaces is encrypted by default
- CAll information that is sent over the failover and stateful failover interfaces is sent as clear text by default
- DUsernames, password and preshared keys are encrypted by default when they are sent over the failover and stateful failover interfaces, but other information is sent as clear text
2Which three ESP fields can be encrypted during transmission? (Choose three)
- ASecurity parameter index
- BNext header
- CPadding
- DPad length
- ESequence number
- FMAC address
3According to Cisco best practices, which three protocols should the default ACL allow on an access port to enable wired BYOD devices to supply valid credentials?
- ABOOTP
- BHTTP
- CDNS
- D802.1x
- EMAB
- FTFTP
4Which SOURCEFIRE logging action should you choose to record the most detail about a connection?
- AEnable logging at the beginning of the session
- BEnable alerts via SNMP to log events off-box
- CEnable eStreamer to log events off-box
- DEnable logging at the end of the session
5What type of algorithm uses the same key to encrypt and decrypt data?
- AA symmetric algorithm
- BAn asymmetric algorithm
- CA Public Key Infrastructure algorithm
- DAn IPSec algorithm
6If a packet matches more than one class map in an individual feature type's policy map, how does the ASA handle the packet?
- AThe ASA will apply the actions from all matching class maps it finds for the feature type
- BThe ASA will apply the actions from only the most specific matching class map it finds for the feature type
- CThe ASA will apply the actions from only the first matching class map it finds for the feature type
- DThe ASA will apply the actions from only the last matching class map it finds for the feature type
7You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP Address Reputation. A user calls and is not able to access a certain IP address. What action can you take to allow the user access to the IP address?
- ACreate a custom blacklist to allow traffic
- BCreate a whitelist and add the appropriate IP address to allow traffic
- CCreate a user-based access control rule to allow the traffic
- DCreate a network-based access control rule to allow the traffic
- ECreate a rule to bypass inspection to allow the traffic
Informações
- Descrição
- Quiz sobre Sem título, criado por Matt Tse em 17-02-2017.
- Autor
- Matt Tse
- Idioma
- English
- Visualizações
- 0
- Etiquetas
- Avaliação
- Ainda sem avaliações Avalie este quiz