网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
Which IPsec security protocol should be used when confidentiality is required?（）
- A、AH
- B、MD5
- C、PSK
- D、ESP
参考答案
更多 “Which IPsec security protocol should be used when confidentiality is required?（）A、AHB、MD5C、PSKD、ESP” 相关考题
考题
Which two parameters are configured in IPsec policy? ()(Choose two.)
A. modeB. IKE gatewayC. security proposalD. Perfect Forward Secrecy
考题
A network IPS provides which of the following?()
A. The layer 3 protocol on which other protocols like TCP and UDP communicate.B. Enables the IPSec protocol on internal workstations.C. Packet-based detection and prevention of network attacks.D. Single mode IP communication for a fiber line between remote sites.
考题
Which IPsec security protocol should be used when confidentiality is required?()
A. AHB. MD5C. PSKD. ESP
考题
Which device might be installed at a branch office to enable and manage an IPsec site－to－site VPN?()
A.Cisco IOS IPsec/SSL VPN clientB.Cisco VPN ClinetC.ISDN terminal adapterD.Cisco Adaptive Security Appliance
考题
IPsec, also known as the internet Protocol ( ) , defines the architecture for security services for IP network traffic IPsec describes the framework for providing security a the IP layer, as well as the suite of protocols designed to provide that security: through_ ( )_ and encryption of IP network packets. IPec can be used 10 protect network data, for example, by setting up circuits using IPsec ( ), in which all data being sent between two endpoints is encrypted, as with a Virtual (请作答此空) Network connection ;for encrypting application layer data ;and for providing security for routers sending routing data across the public internet. Internet traffic can also be secured from host to host without the use of IPsec, for example by encryption at the ( ) layer with HTTP Secure (TTPS)or an the transport layer wit the Transport Layer Security (TLS)protocol.A.pubic]
B.private]
C.personal
D.proper
考题
Which of the following commands will display a router’s crypto map IPsec security associationsettings？（）A、show crypto map ipsec saB、show crypto mapC、show crypto engine connections activeD、show ipsec crypto mapE、show crypto map saF、show ipsec crypto map sa
考题
What is the port number of an IPsec Encapsulating Security Payfoad packet？（）A、UOP port 50B、IP protocol 51C、TCP port 51D、TCP port 50E、IP protocol 50F、UDP port51
考题
Which IOS security feature is configured by the ip inspect inspection-name {in | out} command？（）A、IPsec site-to-site VPNB、Cisco AutoSecureC、Cisco IOS FirewallD、IPS
考题
IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）A、IKE keepalives are unidirectional and sent every ten secondsB、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keysC、To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepacketsD、IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
考题
Which two parameters are configured in IPsec policy？（）A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Which two configuration elements are required for a policy-based VPN？（）A、IKE gatewayB、secure tunnel interfaceC、security policy to permit the IKE trafficD、security policy referencing the IPsec VPN tunnel
考题
Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?（）A、Cisco IOS IPsec/SSL VPN clientB、Cisco VPN ClinetC、ISDN terminal adapterD、Cisco Adaptive Security Appliance
考题
What is the port number of an IPsec Encapsulating Security Payload packet？（）A、IP protocol 50B、IP protocol 51C、TCP port 50D、TCP port 51E、UDP port 50F、UDP port 51
考题
Which security-enabled device is recommended to provide a site-to-site IPsec VPN solution， but not SSL？（）A、 Cisco Integrated Service RoutersB、 Cisco ASA 5500 Series Security ApplianceC、 CiscoWebVPN Services ModuleD、 CiscoIPsec VPN Module
考题
A network IPS provides which of the following?（）A、The layer 3 protocol on which other protocols like TCP and UDP communicate.B、Enables the IPSec protocol on internal workstations.C、Packet-based detection and prevention of network attacks.D、Single mode IP communication for a fiber line between remote sites.
考题
Which three JUNOS software features allow for increased security on your network？（）A、firewall filtersB、data encryptionC、routing protocol authenticationD、support for BGP path mtu discoveryE、automatic discovery for IPSEC neighbors
考题
Which two parameters are configured in IPsec policy? （）(Choose two.)A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Regarding an IPsec security association （SA）， which two statements are true？（）A、IKE SA is bidirectional.B、IPsec SA is bidirectional.C、IKE SA is established during phase 2 negotiations.D、IPsec SA is established during phase 2 negotiations.
考题
单选题Which security-enabled device is recommended to provide a site-to-site IPsec VPN solution， but not SSL？（）A
Cisco Integrated Service RoutersB
Cisco ASA 5500 Series Security ApplianceC
CiscoWebVPN Services ModuleD
CiscoIPsec VPN Module
考题
多选题Which three JUNOS software features allow for increased security on your network？（）Afirewall filtersBdata encryptionCrouting protocol authenticationDsupport for BGP path mtu discoveryEautomatic discovery for IPSEC neighbors
考题
单选题Which statement contains the correct parameters for a route-based IPsec VPN?（）A
[edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; }policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { interface ge-0/0/1.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; }B
[edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; } policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { interface st0.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; }C
[edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200;} policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { bind-interface ge-0/0/1.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; }D
[edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; }policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { bind-interface st0.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; }
考题
单选题What is the port number of an IPsec Encapsulating Security Payfoad packet？（）A
UOP port 50B
IP protocol 51C
TCP port 51D
TCP port 50E
IP protocol 50F
UDP port51
考题
单选题Which of the following commands will display a router’s crypto map IPsec security associationsettings？（）A
show crypto map ipsec saB
show crypto mapC
show crypto engine connections activeD
show ipsec crypto mapE
show crypto map saF
show ipsec crypto map sa
考题
单选题Which operational mode command displays all active IPsec phase 2 security associations？（）A
show ike security-associationsB
show ipsec security-associationsC
show security ike security-associationsD
show security ipsec security-associations
考题
单选题What is the port number of an IPsec Encapsulating Security Payload packet？（）A
IP protocol 50B
IP protocol 51C
TCP port 50D
TCP port 51E
UDP port 50F
UDP port 51
考题
多选题Which two mechanisms can be used to detect IPsec GRE tunnel failures？（）ADead Peer Detection （DPD）BCDPCisakmp keepalivesDGRE keepalive mechanismEThe hello mechanism of the routing protocol across the IPsec tunnel
考题
多选题IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）AIKE keepalives are unidirectional and sent every ten secondsBIPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keysCTo establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepacketsDIKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
热门标签
最新试卷
