默认题库 - CCNP(642-081)

多选题

Authentication for user data traffic is important, but so is authentication for IP voice traffic. The Cisco 830 802.1 feature provides an easier method for allowing IP voice traffic through the VPN, because it（）.

A. requires access lists to identify the voice traffic
B. can allow traffic from a device without 802.1X authentication, by MAC address
C. can allow traffic from Cisco IP phones by listening to their CDP advertisements
D. allows all packets marked with a ToS of 5 to bypass authentication
E. allows all IP voice packets to bypass authentication via stateful inspectio

查看答案

多选题

Why would the network manager elect to implement a configuration that includes GRE tunnels for a eleworker deployment?（）

A. GRE can use transport mode and save up to twenty bytes per packet.
B. The corporate network includes many discontinuous blocks of IP networks and requires split tunneling.
C. The corporation's primary application is based on IP multicast.
D. Without GRE, there is no means to detect a head-end failure.
E. GRE would enable path MTU discovery.

查看答案

单选题

When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）

A. when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through
B. when the Teleworker router itself is doing NAT/pNAT
C. always
D. never

查看答案

单选题

Choose the false statement concerning the use of CiscoWorks Internetwork Performance Monitor (IPM) in a Teleworker deployment.（）

A. IPM should not be run on a production network.
B. IPM helps verify if a Service Provider is meeting the Service Level Agreement.
C. IPM contains a database that can store data on latency, jitter, and drops of voice packets over a period of weeks or months.
D. The QoS service policy should contain an allocation of sufficient bandwidth in the priority queue (LLQ) for both the SAA probe simulating a voice call and the voice call. If not, voice quality will suffer.

查看答案

多选题

What are disadvantages of Network Address Translation Transparency?（）

A. There is no disadvantage.
B. It will add 16 bytes per packet of overhead(8 bytes UDP header, and 8 bytes of NON-IKE Marker).
C. It will add 36 bytes per packet of overhead (20 bytes of IP header, 8 bytes of UDP header, 8 bytes of NON-IKE Marker).
D. It will require that both crypto peers support this feature in the IOS version. Both crypto peers must also have this feature enabled.

查看答案

多选题

When is it appropriate to enable Link Fragmentation and Interleaving (LFI) on DSL connections for Teleworkers?（）

A. uplink speed less than 768kbps
B. supporting Voice-over-IP
C. using PPPoE encapsulation
D. using PPPoA encapsulation
E. uplink speed greater than 768k

查看答案

单选题

What is the minimum recommended uplink/downlink speed to support a single encrypted IP voice Teleworker call?（）

A. 256kbps / 1024kbps
B. 256kbps / 1544kbps
C. 160kbps / 768kbps
D. 384kbps / 384kbps
E. 128kbps / 512k

查看答案

单选题

An important limitation of the Cisco Business Ready Teleworker solution is_____.（）

A. IP phone extensions for teleworkers must be chosen carefully so not to duplicate campus phone extensions.
B. More security exposure exists due to lack of support for Intrusion Detection System and URL filtering for teleworker originated traffic.
Compressed RTP and IPSec are not compatible and result in no bandwidth savings.
D. Broadband modems must support Quality of Service for adequate voice quality.

查看答案

单选题

Choose the true statement regarding QoS pre-classify.（）

A. QoS pre-classify permits making QoS decisions based on elements from the unencrypted IP packet.
B. QoS pre-classify is required when encrypting voice.
C. QoS pre-classify is an advantage to Service Providers transporting encrypted packets.
D. QoS pre-classify is not designed for IPSec/GRE configurations.

查看答案

单选题

What is not a difference between VPN tunnel authentication and per-user authentication?（）

A. VPN tunnel authentication is part of the IKE specification.
B. VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
C. User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization.
D. 802.1X with EAP-TLS (509 certificates) can be used to authenticate an IPSec tunnel.

查看答案