CCNA(640-553)真题精选Word文档下载推荐.docx
- 文档编号:8375733
- 上传时间:2023-05-11
- 格式:DOCX
- 页数:31
- 大小:15.68KB
CCNA(640-553)真题精选Word文档下载推荐.docx
《CCNA(640-553)真题精选Word文档下载推荐.docx》由会员分享,可在线阅读,更多相关《CCNA(640-553)真题精选Word文档下载推荐.docx(31页珍藏版)》请在冰点文库上搜索。
Internet.
C[单项选择题]
3、Whichdescriptionaboutasymmetricencryptionalgorithmsiscorrect?
A.Theyusethesamekeyforencryptionanddecryptionof
data.
B.Theyusedifferentkeysfordecryptionbutthesamekeyforencryptionof
C.Theyusedifferentkeysforencryptionanddecryptionof
D.Theyusethesamekeyfordecryptionbutdifferentkeysforencryptionof
C
4、Forthefollowingitems,whichmanagementtopologykeepsmanagementtrafficisolatedfrom
ActualTproductiontraffic?
A.OTP
B.OOB
C.SAFE
D.MARS
B
5、Youworkasanetworkengineer,doyouknowanIPsectunnelisnegotiatedwithintheprotectionofwhichtypeoftunnel?
A.L2Ftunnel
B.L2TPtunnel
C.GREtunnel
D.ISAKMPtunnel
D
6、Examinethefollowingoptions,wheneditingglobalIPSsettings,whichonedeterminesiftheIOS-basedIPSfeaturewilldroporpermittrafficforaparticularIPSsignatureenginewhileanewsignatureforthatengineisbeingcompiled?
A.EnableSignatureDefault
B.EnableEngineFailClosed
C.EnableDefaultIOSSignature
D.EnableFailOpened
7、WhichstatementbestdescribesCiscoIOSZone-BasedPolicyFirewall?
A.Arouterinterfacecanbelongtomultiple
zones.
B.Policymapsareusedtoclassifytrafficintodifferenttrafficclasses,andclassmapsareusedtoassignactiontothetraffic
classes.
C.Thepassactionworksinonlyonedirection
D.Azone-pairisbidirectionalbecauseitspecifiestrafficflowingamongtheinterfaceswithinthezone-pairinboth
directions.
8、WhichstatementbestdescribesconfiguringaccesscontrolliststocontrolTelnettrafficdestinedtotherouteritself?
A.TheACLappliedtothevtylineshasnoinoroutoptionlikeACLbeingappliedtoan
interface.
B.TheACLisappliedtotheTelnetportwiththeipaccess-group
command.
C.TheACLmustbeappliedtoeachvtyline
individually.
D.TheACLshouldbeappliedtoallvtylinesintheindirectiontopreventanunwanteduserfromconnectingtoanunsecured
port.
9、WhatistheMD5algorithmusedfor?
A.takesafixed-lengthmessageandproducesa128-bitmessagedigest
B.takesavariable-lengthmessageandproducesa168-bitmessagedigest
C.takesamessagelessthan2^64bitsasinputandproducesa160-bitmessage
digestD.takesavariable-lengthmessageandproducesa128-bitmessagedigest
10、Forthefollowingoptions,whichoneaccuratelymatchestheCLIcommand(s)totheequivalentSDMwizardthatperformssimilarconfigurationfunctions?
A.aaaconfigurationcommandsandtheSDMBasicFirewallwizard
B.setupexeccommandandtheSDMSecurityAuditwizard
C.autosecureexeccommandandtheSDMOne-StepLockdownwizard
D.CiscoCommonClassificationPolicyLanguageconfigurationcommandsandtheSDMSite-to-SiteVPN
11、Basedonthefollowingitems,whichtwotypesofinterfacesarefoundonallnetwork-basedIPSsensors?
A.Loopbackinterface
B.Commandandcontrolinterface
C.Monitoringinterface
D.Managementinterface
B,C
12、Whichdescriptionistrueabouttheshowlogincommandoutputdisplayedintheexhibit?
A.Threeormoreloginrequestshavefailedwithinthelast100
seconds.
B.Whentheroutergoesintoquietmode,anyhostispermittedtoaccesstherouterviaTelnet,actualSSH,andHTTP,sincethequiet-modeaccesslisthasnotbeen
configured.
C.Theloginblock-forcommandisconfiguredtoblockloginhostsfor93
D.Allloginsfromanysourcesareblockedforanother193
13、Giventheexhibit
below.Youareanetworkmanagerofyour
company.YouarereadingyourSyslog
serverreports.OnthebasisoftheSyslogmessageshown,whichtwodescriptionsarecorrect?
A.Thisisanormalsystem-generatedinformationmessageanddoesnotrequirefurther
investigation.
B.Servicetimestampshavebeenglobally
enabled.
C.Thismessageisunimportantandcanbe
ignored.
D.Thismessageisalevel5notification
message.
B,D
14、WhatwillbeenabledbythescanningDynamicVectorStreaming(DVS)?
A.Firmware-levelvirusdetection
B.Signature-basedvirusfiltering
C.Layer4virusdetection
D.Signature-basedspywarefiltering
technology-The
15、WhichstatementbestdescribestherelationshipsbetweenAAAfunctionandTACACS+,RADIUSbasedontheexhibitshown?
A.TACACS+-P4S1andP4S4RADIUS-P4S2andP4S3
B.TACACS+-P4S2andP4S4RADIUS-P4S1andP4S3
C.TACACS+-P4S1andP4S3ActualRADIUS-P4S2andP4S4
D.TACACS+-P4S2andP4S3RADIUS-P4S1andP4S4
16、Whichkindoftabletodaytokeeptrackof()
A.reflexiveACL
B.dynamicACL
C.queuing
D.netflow
E.state
E
willbeusedbymostfirewallstheconnectionsthroughthefirewall?
17、Basedontheusernameglobalconfigurationmodecommanddisplayedinthe
exhibit.Whatdoestheoptionsecret5indicateabouttheenablesecretpassword?
A.ItishashedusingMD5
B.Itisencryptedusingaproprietaryalgorithm
C.ItishashedusingSHA
D.ItisencryptedusingDHgroup5
Cisco
encryption
18、BeforeaDiffie-Hellmanexchangemaybegin,thetwopartiesinvolvedmustagreeonwhat?
A.Twosecretkeys
B.Twononsecretkeys
C.Twosecretnumbers
D.Twononsecretnumbers
19、WhichthreeitemsareCiscobest-practicerecommendationsforsecuringanetwork?
A.Routinelyapplypatchestooperatingsystemsandapplications
B.Disableunneededservicesandportsonhosts
C.DeployHIPSsoftwareonallend-userworkstations
D.Requirestrongpasswordsandenablepasswordexpiration
A,B,D
20、WhatCiscoSecurityAgentInterceptorisinchargeofinterceptingallread/writerequeststothercfilesinUNIX?
A.Configurationinterceptor
B.Networkinterceptor
C.Filesysteminterceptor
D.Executionspaceinterceptor
21、WhichlocationwillberecommendedforextendedorextendednamedACLs?
A.whenusingtheestablishedkeyword,alocationclosetothedestinationpointtoensurethatreturntrafficisallowed
B.anintermediatelocationtofilterasmuchtrafficaspossible
C.alocationasclosetothesourcetrafficaspossible
D.alocationasclosetothedestinationtrafficaspossible
C更多内容请访问《睦霖题库》微信公众号
22、RefertoCiscoIOSZone-BasedPolicyFirewall,willtheinspectionpolicybeapplied?
A.tothezone-pair
B.tothezone
C.totheinterface
D.totheglobalservicepolicy
where[单项选择题]
23、Whichstatementistrueaboutvishing?
A.Influencinguserstoforwardacalltoatollnumber(forexample,alongdistanceorinternationalnumber)
B.Influencinguserstoprovidepersonalinformationoverawebpage
C.Usinganinsidefacilitatortointentionallyforwardacalltoatollnumber(forexample,alongdistanceorinternationalnumber)
D.Influencinguserstoprovidepersonalinformationoverthephone
24、WhichoneofthefollowingitemsmaybeaddedtoapasswordstoredinMD5tomakeitmoresecure?
A.Ciphertext
B.Salt
C.Cryptotext
D.Rainbowtable
25、Whichexampleisofafunctionintendedforcryptographichashing?
A.MD65
B.SHA-135
C.XR12
D.MD5
26、Whichisthemaindifferencebetweenhost-basedandnetwork-basedintrusionprevention?
A.Host-basedIPScanworkinpromiscuousmodeorinline
mode.
B.Network-basedIPScanprovideprotectiontodesktopsandserverswithouttheneedofinstallingspecializedsoftwareontheendhostsand
servers.
C.Network-basedIPSisbettersuitedforinspectionofSSLandTLSencrypteddata
flows.
D.Host-basedIPSdeploymentrequireslessplanningthannetwork-based
IPS.
27、Whichclassesdoesthe
U.S.governmentplaceclassifieddatainto?
A.Top-secret
B.Confidential
C.SBU
D.Secret
28、Whichthreeoptionsarenetworkevaluationtechniques?
A.Performingend-usertrainingontheuseofantispywaresoftware
B.Performingvirusscans
C.ScanninganetworkforactiveIPaddressesandopenportsonthoseIPaddresses
D.Usingpassword-crackingutilities
B,C,D
29、Youareanetworktechnicianat
C.WhichdescriptioniscorrectwhenyouhavegeneratedRSAkeysonyourCiscoroutertoprepareforsecuredevicemanagement?
A.Youmustthenspecifythegeneral-purposekeysizeusedforauthenticationwiththecryptokeygeneratersageneralkeysmodulus
B.Youmustthenzeroizethekeystoresetsecureshellbef
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- CCNA 640 553 精选