网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
When is an IPSec SA built on the Teleworker Router?（）
A
when the router is booted up
B
when the router administratively does a no shutdown on the IPSec SA
C
when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up
D
when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately
参考答案
参考解析
解析：
暂无解析
更多 “单选题When is an IPSec SA built on the Teleworker Router?（）A when the router is booted upB when the router administratively does a no shutdown on the IPSec SA C when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up D when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately” 相关考题
考题
What is the term "ordered control" mean regarding how MPLS LSPs are established?()
A. establish starting at the egress router going back to the ingress routerB. establish starting at the ingress router going downstream to the egress routerC. establish when a router learns of a new prefixD. establish when the path correctly matches the reverse path forwarding check
考题
When does the E－series router start monitoring DHCP traffic using the DHCP External function?()
A. When the discovery packet enters the router from the DHCP client.B. Only when the offer packet enters the router from the DHCP server.C. When the acknowledge packet enters the router from the DHCP server.D. Only when the discovery packet leaves the router going to the DHCP server.
考题
Given the following LSP configuration, which statement is true? ()
A. The router will use path1 when it is available and stable.B. The router will use path3 when it is available and stable.C. The router will attempt to establish path2 only when path1 and path3 are down.D. The router will attempt to establish path1 only when path2 and path3 are down.
考题
Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network.Which of the following answers best describes the router‘s logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）A. When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interfaceB. When routing the packet, matching a route whose outgoing interface is the GRE tunnel interfaceC. When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interfaceD. When permitted by an ACL that was referenced in the associated crypto map
考题
A customer wants to TFTP a new image from the corporate network to Flash on the Teleworker router through the IPSec tunnel. How should you configure the Teleworker router?（）A、No additional steps are required. B、Add the appropriate source-interface command. C、The router cannot access a server in the Enterprise Campus network. D、The Teleworker Router does not have any client applications; therefore this type of request is not possible.
考题
Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network. Which of the following answers best describes the router's logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）A、When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interfaceB、When routing the packet, matching a route whose outgoing interface is the GRE tunnel interfaceC、When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interfaceD、When permitted by an ACL that was referenced in the associated crypto map
考题
When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）A、when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through B、when the Teleworker router itself is doing NAT/pNATC、alwaysD、never
考题
You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）A、The crypto ACL numberB、The IPSEC mode （tunnel or transport）C、The GRE tunnel interface IP addressD、The GRE tunnel source interface or IP address， and tunnel destination IP addressE、The MTU size of the GRE tunnel interface
考题
Which of the following HSRP router states does an active router enter when it is preempted by a higher priority router？（）A、 activeB、 speakC、 learnD、 listenE、 initF、 standby
考题
The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）A、when all access to the Internet is through the IPSec tunnelB、when there is direct Internet access via split-tunnelingC、when there is no Internet access configured through the Teleworker routerD、whenever you have IOS-Firewall (CBAC) configured
考题
When is an IPSec SA built on the Teleworker Router?（）A、when the router is booted upB、when the router administratively does a no shutdown" on the IPSec SA C、when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up D、when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately
考题
Why is NTP an important component when implementing IPSec VPN in a PKI environment？（）A、 To ensure the router has the correct time when generating its private/public key pairs.B、 To ensure the router has the correct time when checking certificate validity from the remote peersC、 To ensure the router time is sync with the remote peers for encryption keys generationD、 To ensure the router time is sync with the remote peers during theDH exchangeE、 To ensure the router time is sync with the remote peers when generating the cookies during IKE phase 1
考题
What is the term "ordered control" mean regarding how MPLS LSPs are established?（）A、establish starting at the egress router going back to the ingress routerB、establish starting at the ingress router going downstream to the egress routerC、establish when a router learns of a new prefixD、establish when the path correctly matches the reverse path forwarding check
考题
When is the BA Classifier engaged for identifying the forwarding class of traffic in a Juniper router?（）A、after a packet is identified by a multifield classifierB、after the traffic passes though a shaperC、prior to ingress policing of trafficD、while the packet is stored in the switching fabric of the router
考题
When does the E-series router start monitoring DHCP traffic using the DHCP External function?（）A、When the discovery packet enters the router from the DHCP client.B、Only when the offer packet enters the router from the DHCP server.C、When the acknowledge packet enters the router from the DHCP server.D、Only when the discovery packet leaves the router going to the DHCP server.
考题
When controlling the virtual router assignment for a PPP over ATM client, which mechanism does the router use first?（）A、profileB、domain mapC、DHCP serverD、RADIUS server
考题
单选题Which of the following HSRP router states does an active router enter when it is preempted by a higher priority router？（）A
activeB
speakC
learnD
listenE
initF
standby
考题
单选题What is the term "ordered control" mean regarding how MPLS LSPs are established?（）A
establish starting at the egress router going back to the ingress routerB
establish starting at the ingress router going downstream to the egress routerC
establish when a router learns of a new prefixD
establish when the path correctly matches the reverse path forwarding check
考题
单选题The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）A
when all access to the Internet is through the IPSec tunnelB
when there is direct Internet access via split-tunnelingC
when there is no Internet access configured through the Teleworker routerD
whenever you have IOS-Firewall (CBAC) configured
考题
单选题When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）A
when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through B
when the Teleworker router itself is doing NAT/pNATC
alwaysD
never
考题
单选题When is the BA Classifier engaged for identifying the forwarding class of traffic in a Juniper router?（）A
after a packet is identified by a multifield classifierB
after the traffic passes though a shaperC
prior to ingress policing of trafficD
while the packet is stored in the switching fabric of the router
考题
单选题Given the following LSP configuration, which statement is true? （）A
The router will use path1 when it is available and stable.B
The router will use path3 when it is available and stable.C
The router will attempt to establish path2 only when path1 and path3 are down.D
The router will attempt to establish path1 only when path2 and path3 are down.
考题
单选题When controlling the virtual router assignment for a PPP over ATM client, which mechanism does the router use first?（）A
profileB
domain mapC
DHCP serverD
RADIUS server
考题
单选题Why is NTP an important component when implementing IPSec VPN in a PKI environment？（）A
To ensure the router has the correct time when generating its private/public key pairs.B
To ensure the router has the correct time when checking certificate validity from the remote peersC
To ensure the router time is sync with the remote peers for encryption keys generationD
To ensure the router time is sync with the remote peers during theDH exchangeE
To ensure the router time is sync with the remote peers when generating the cookies during IKE phase 1
考题
单选题When does the E-series router start monitoring DHCP traffic using the DHCP External function?（）A
When the discovery packet enters the router from the DHCP client.B
Only when the offer packet enters the router from the DHCP server.C
When the acknowledge packet enters the router from the DHCP server.D
Only when the discovery packet leaves the router going to the DHCP server.
考题
单选题Refer to the exhibit. Which Virtual Router Redundancy Protocol （VRRP） statement is true about the roles of the master virtual router and the backup virtual router？（）A
Router A is the master virtual router， and Router B is the backup virtual router. When Router A fails， Router B will become the master virtual router. When Router A recovers， Router B will maintain the role of master virtual routeB
Router A is the master virtual router， and Router B is the backup virtual router. When Router A fails， Router B will become the master virtual router. When Router A recovers， it will regain the master virtual router roleC
Router B is the master virtual router， and Router A is the backup virtual router. When Router B fails， Router A will become the master virtual router. When Router B recovers， Router A will maintain the role of master virtual router.D
Router B is the master virtual router， and Router A is the backup virtual router. When Router B fails， Router A will become the master virtual router. When Router B recovers， it will regain the master virtual router role
考题
单选题A customer wants to TFTP a new image from the corporate network to Flash on the Teleworker router through the IPSec tunnel. How should you configure the Teleworker router?（）A
No additional steps are required. B
Add the appropriate source-interface command. C
The router cannot access a server in the Enterprise Campus network. D
The Teleworker Router does not have any client applications; therefore this type of request is not possible.
热门标签
最新试卷
