网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
不属于Firewall的功能的是（）
- A、网络安全的屏障
- B、强化网络安全策略
- C、对网络存取和访问进行加速
- D、防止内部信息的外泄
参考答案
更多 “不属于Firewall的功能的是（）A、网络安全的屏障B、强化网络安全策略C、对网络存取和访问进行加速D、防止内部信息的外泄” 相关考题
考题
在Eudemon防火墙上,查看防火墙会话老化时间的命令是()
A.display Firewall statistic systemB.display Firewallsession aging-timeC.display Firewall session table verboseD.display Firewall session table detail
考题
某全国连锁企业的总部和分布在全国各地的30家分公司之间经常需要传输各种内部数据，因此公司决定在总部和各分公司之间建立VPN技术。具体拓扑如下：配置部分只显示了与总部与分公司1的配置。根据拓扑完成问题1-问题3。
[问题1]（3分）：在总部与分公司之间相连的VPN方式是（1），在IPsec工作模式中有传输模式和隧道模式，其中将源IP数据包整体封装后再进行传输的模式是（2）.1备选答案：A.站点到站点 B.端到端C.端到站点[问题2]（13分）：请将相关配置补充完整。总部防火墙firewall1的部分配置如下。 （3）[FIREWALL1] interface（4）[FIREWALL1-GigabitEthernet1/0/2] ip address （5）[FIREWALL1-GigabitEthernet1/0/2] quit[FIREWALL1] interface GigabitEthernet 1/0/1[FIREWALL1-GigabitEthernet1/0/1] ip address 202.1.3.1 24[FIREWALL1-GigabitEthernet1/0/1] quit# 配置接口加入相应的安全区域。[FIREWALL1] firewall zone trust [FIREWALL1-zone-trust] add interface （6）[FIREWALL1-zone-trust] quit[FIREWALL1]（7）[FIREWALL1-zone-untrust] add interface GigabitEthernet 1/0/1[FIREWALL1-zone-untrust] quit2. 配置安全策略，允许私网指定网段进行报文交互。# 配置Trust域与Untrust域的安全策略，允许封装前和解封后的报文能通过[FIREWALL1]（8）[FIREWALL1-policy-security] rule name 1[FIREWALL1-policy-security-rule-1] source-zone （9）[FIREWALL1-policy-security-rule-1] destination-zone untrust[FIREWALL1-policy-security-rule-1] source-address （10）[FIREWALL1-policy-security-rule-1] destination-address 192.168.200.0 24[FIREWALL1-policy-security-rule-1] action （11）[FIREWALL1-policy-security-rule-1] quit…..# 配置Local域与Untrust域的安全策略，允许IKE协商报文能正常通过FIREWALL1。[FIREWALL1-policy-security] rule name 3[FIREWALL1-policy-security-rule-3] source-zone local[FIREWALL1-policy-security-rule-3] destination-zone untrust[FIREWALL1-policy-security-rule-3] source-address 202.1.3.1 32[FIREWALL1-policy-security-rule-3] destination-address 202.1.5.1 32[FIREWALL1-policy-security-rule-3] action permit[FIREWALL1-policy-security-rule-3] quit…3. 配置IPSec隧道。# 配置访问控制列表，定义需要保护的数据流。[FIREWALL1] (12)[FIREWALL1-acl-adv-3000] rule permit (13)[FIREWALL1-acl-adv-3000] quit# 配置名称为tran1的IPSec安全提议。[FIREWALL1] ipsec proposal tran1[FIREWALL1-ipsec-proposal-tran1] encapsulation-mode (14)[FIREWALL1-ipsec-proposal-tran1] transform esp[FIREWALL1-ipsec-proposal-tran1] esp authentication-algorithm sha2-256[FIREWALL1-ipsec-proposal-tran1] esp encryption-algorithm aes[FIREWALL1-ipsec-proposal-tran1] quit# 配置序号为10的IKE安全提议。[FIREWALL1] (15)[FIREWALL1-ike-proposal-10] authentication-method pre-share[FIREWALL1-ike-proposal-10] authentication-algorithm sha2-256[FIREWALL1-ike-proposal-10] quit# 配置IKE用户信息表。[FIREWALL1] ike user-table 1[FIREWALL1-ike-user-table-1] user id-type ip 202.1.5.1 pre-shared-key Admin@gkys[FIREWALL1-ike-user-table-1] quit# 配置IKE Peer。[FIREWALL1] ike peer b[FIREWALL1-ike-peer-b] ike-proposal 10[FIREWALL1-ike-peer-b] user-table 1[FIREWALL1-ike-peer-b] quit# 配置名称为map_temp序号为1的IPSec安全策略模板。[FIREWALL1] ipsec policy-template map_temp 1[FIREWALL1-ipsec-policy-template-map_temp-1] security acl 3000[FIREWALL1-ipsec-policy-template-map_temp-1] proposal tran1[FIREWALL1-ipsec-policy-template-map_temp-1] ike-peer b[FIREWALL1-ipsec-policy-template-map_temp-1] reverse-route enable[FIREWALL1-ipsec-policy-template-map_temp-1] quit# 在IPSec安全策略map1中引用安全策略模板map_temp。[FIREWALL1] ipsec policy map1 10 isakmp template map_temp# 在接口GigabitEthernet 1/0/1上应用安全策略map1。[FIREWALL1] interface GigabitEthernet 1/0/1[FIREWALL1-GigabitEthernet1/0/1] ipsec policy map1[FIREWALL1-GigabitEthernet1/0/1] quit [问题3]IPsec中，通过一些协议的处理，可以有效的保护分组安全传输。其中能够确保数据完整性，但是不能确保数据机密性的是（17），而技能报数数据传输的机密性又能保证数据完整性的是（18）
考题
下列不属于ISA Server的客户端类型的是（）。A、Redistribute ClientB、Firewall ClientC、SecureNAT ClientD、Web Proxy Client
考题
Which three statements about firewall modes are correct？ （）A、 A firewall in routed mode has one IP addressB、 A firewall in transparent mode has one IP addressC、 In routed mode， the firewall is considered to be a Layer 2 dewD、 In routed mode， the firewall is considered to be a Layer 3 deviceE、 In transparent mode， the firewall is considered to be a Layer 2 deviceF、 In transparent mode， the firewall is considered to be a Layer 3 device
考题
下列哪些命令不能查看Eudemon防火墙的会话表项内容（）。A、displays ession tableB、display firewall session tableC、display firewall session contentD、display firewall session
考题
Which two statements are correct about firewall filters in the Junos OS?（）A、Firewall filters are stateless.B、Firewall filters are used to control routing information that is exchanged between devices.C、Firewall filters are used to control traffic passing through the device.D、Firewall filters can only be applied to traffic entering the device.
考题
查看SecPath防火墙会话的命令是（）。A、display firewall session tableB、display firewall sessionC、display session tableD、display aspf session
考题
以下配置邮件主题过滤关键字错误的是（）。A、firewall smtp-filter subject add*B、firewall smtp-filter subject add*hello*C、firewall smtp-filter subject addhel loD、firewall smtp-filter subject add"hel lo"
考题
What is the recommended practice when considering VPN termination and firewall placement？（）A、 have the firewall and VPN appliance deployed in parallelB、 place the VPN in line with the firewall， with the VPN terminating inside the firewallC、 place the public side of the VPN termination device in the DMZ behind a firewallD、 place the VPN in line with the firewall， with the VPN terminating outside the firewall
考题
What is a virtual firewall？（）A、another name for a firewall deployed in routed modeB、another name for a firewall deployed in transparent modeC、a separation of multiple firewall security contexts on a single firewallD、a firewall that， when deployed in routed mode， can support up to 1000 VLANs per contextE、a firewall that has multiple contexts， all of which share the same policies （such as NAT and ACLs）
考题
Under which configuration hierarchy is an access profile configured for firewall user authentication？（）A、[edit access]B、[edit security access]C、[edit firewall access]D、[edit firewall-authentication]
考题
Which statement accurately describes firewall user authentication？（）A、Firewall user authentication provides another layer of security in a network.B、Firewall user authentication provides a means for accessing a JUNOS Software-based security device.C、Firewall user authentication enables session-based forwarding.D、Firewall user authentication is used as a last resort security method in a network.
考题
单选题在Eudemon防火墙上，查看防火墙会话老化时间的命令是（）A
display Firewall statistic systemB
display Firewallsession aging-timeC
display Firewall session table verboseD
display Firewall session table detail
考题
单选题What is a virtual firewall？（）A
another name for a firewall deployed in routed modeB
another name for a firewall deployed in transparent modeC
a separation of multiple firewall security contexts on a single firewallD
a firewall that， when deployed in routed mode， can support up to 1000 VLANs per contextE
a firewall that has multiple contexts， all of which share the same policies （such as NAT and ACLs）
考题
多选题Which three statements about firewall modes are correct？ （）AA firewall in routed mode has one IP addressBA firewall in transparent mode has one IP addressCIn routed mode， the firewall is considered to be a Layer 2 dewDIn routed mode， the firewall is considered to be a Layer 3 deviceEIn transparent mode， the firewall is considered to be a Layer 2 deviceFIn transparent mode， the firewall is considered to be a Layer 3 device
考题
单选题在Eudemon1000防火墙中，查看当前的会话表项总数量，可以用如下的命令（）。A
display firewall statistic systemB
display firewall statistic system normalC
display firewall sessionD
display firewall session normal
考题
单选题The Cisco network-based virtual firewall service solution helps service providers to deliver cost-effective， scalable， integrated security services for enterprise customers using Cisco platforms.What is a virtual firewall？（）A
another name for a firewall deployed in routed modeB
another name for a firewall deployed in transparent modeC
a separation of multiple firewall security contexts on a single firewallD
a firewall that， when deployed in routed mode， can support up to 1000 VLANs per context
考题
多选题下列哪些命令不能查看Eudemon防火墙的会话表项内容（）。Adisplays ession tableBdisplay firewall session tableCdisplay firewall session contentDdisplay firewall session
考题
单选题What is the recommended practice when considering VPN termination and firewall placement？（）A
have the firewall and VPN appliance deployed in parallelB
place the VPN in line with the firewall， with the VPN terminating inside the firewallC
place the public side of the VPN termination device in the DMZ behind a firewallD
place the VPN in line with the firewall， with the VPN terminating outside the firewall
考题
多选题Which two commands can be used to monitor firewall user authentication？（）Ashow access firewall-authenticationBshow security firewall-authentication usersCshow security audit logDshow security firewall-authentication history
考题
单选题The Cisco network-based virtual firewall service solution helps service providers to deliver costeffective, scalable, integrated security services for enterprise customers using Cisco platforms .What is a virtual firewall?（）A
another name for a firewall deployed in routed modeB
another name for a firewall deployed in transparent modeC
a separation of multiple firewall security contexts on a single firewallD
a firewall that, when deployed in routed mode, can support up to 1000 VLANs per context
热门标签
最新试卷
