默认题库 - CCNP(642-825)

单选题

Which statement about an IPS is true？（）

A. The IPS is in the traffic path.
B. Only one active interface is required.
C. Full benefit of an IPS will not be realized unless deployed in conjunction with an ID
D. When malicious traffic is detected，the IPS will only send an alert to a management station.

查看答案

单选题

During the Easy VPN Remote connection process，which phase involves pushing the IP address， Domain Name System （DNS），and split tunnel attributes to the client？（）

A. mode configuration
B. the VPN client establishment of an ISAKMP SA
C. IPsec quick mode completion of the connection
D. VPN client initiation of the IKE phase 1 proce

查看答案

多选题

Which three statements about IOS Firewall configurations are true？（）

A. The IP inspection rule can be applied in the inbound direction on the secured interface.
B. The IP inspection rule can be applied in the outbound direction on the unsecured interface.
C. The ACL applied in the outbound direction on the unsecured interface should be an extended AC
D. The ACL applied in the inbound direction on the unsecured interface should be an extended AC
E. For temporary openings to be created dynamically by Cisco IOS Firewall，the access-list for thereturning traffic must be a standard AC
For temporary openings to be created dynamically by Cisco IOS Firewall，the IP inspection rule must be applied to the secured interface.

查看答案

多选题

Which two network attack statements are true？（）

Access attacks can consist of password attacks，trust exploitation，port redirection，and man-in-the-middle attacks.
B. Access attacks can consist of UDP and TCP SYN flooding，ICMP echo-request floods，and ICMP directed broadcasts.
C. DoS attacks can be reduced through the use of access control configuration，encryption，and RFC 2827 filtering.
DoS attacks can consist of IP spoofing and DDoS attacks.
E. IP spoofing can be reduced through the use of policy-based routing.
F. IP spoofing exploits known vulnerabilities in authentication services， FTP services，and web services to gain entry to web accounts，confidential databases，and other sensitive information.

查看答案

多选题

Which three features are benefits of using GRE tunnels in conjunction with IPsec for building site-to-site VPNs？（）

A. allows dynamic routing over the tunnel
B. supports multi-protocol （non-IP） traffic over the tunnel
C. reduces IPsec headers overhead since tunnel mode is used
D. simplifies the ACL used in the crypto map
E. uses Virtual Tunnel Interface （VTI） to simplify the IPsec VPN configuratio

查看答案

单选题

What is a reason for implementing MPLS in a network？（）

A. MPLS eliminates the need of an IGP in the core.
B. MPLS reduces the required number of BGP-enabled devices in the core.
C. Reduces routing table lookup since only the MPLS core routers perform routing table lookups.
D. MPLS eliminates the need for fully meshed connections between BGP enabled devices.

查看答案

多选题

Which three techniques should be used to secure management protocols？（）

A. Configure SNMP with only read-only community strings.
B. Encrypt TFTP and syslog traffic in an IPSec tunnel.
C. Implement RFC 3704 filtering at the perimeter router when allowing syslog access from devices on the outside of a firewall.
D. Synchronize the NTP master clock with an Internet atomic clock.
E. Use SNMP version 2.
F. Use TFTP version 3 or above because these versions support a cryptographic authentication mechanism between peers.

查看答案

多选题

If an edge Label Switch Router （LSR） is properly configured，which three combinations are possible？（）

A received IP packet is forwarded based on the IP destination address and the packet is sent as an IP packet.
B. An IP destination exists in the IP forwarding table. A received labeled packet is dropped because the label is not found in the LFIB table.
C. There is an MPLS label-switched path toward the destination. A received IP packet is dropped because the destination is not found in the IP forwarding table.
D. A received IP packet is forwarded based on the IP destination address and the packet is sent as a labeled packet.
E. A received labeled IP packet is forwarded based upon both the label and the IP address.
F. A received labeled packet is forwarded based on the label. After the label is swapped，the newly labeled packet is sent.

查看答案