单选题 You want to create a policy allowing traffic from any host in the Trust zone to hostb.example.com(172.19.1.1) in theUntrust zone. How do you do create this policy? （）
Specify the IP address (172.19.1.1/32) as the destination address in the policy.
Specify the DNS entry (hostb.example.com.) as the destination address in the policy.
Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.
Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.
单选题 Click the Exhibit button. Which type of source NAT is configured in the exhibit?（）
static source pool
interface source pool
source pool with PAT
souce pool without PAT
多选题 Which three parameters are configured in the IKE policy?（） (Choose three.)
mode
preshared key
external interface
security proposals
dead peer detection settings
多选题 On which three traffic types does firewall pass-through authentication work? （）(Choose three.)
ping
FTP
Telnet
HTTP
HTTPS
多选题 Which two statements regarding asymmetric key encryption are true?（） (Choose two.)
The same key is used for encryption and decryption.
It is commonly used to create digital certificate signatures.
It uses two keys: one for encryption and a different key for decryption.
An attacker can decrypt data if the attacker captures the key used for encryption.
单选题 A traditional router is better suited than a firewall device for which function? （）
VPN establishment
packet-based forwarding
stateful packet processing
network address translation
多选题 Which two are characteristics of link-state routing protocols?（） (Choose two.)
Routers choose a best path for a destination based on the SPF algorithm.
All routers in a given area or level build a consistent database describing the network's topology.
Routers choose the best path for a destination based on the interface on which they received the link stateadvertisement with the lowest cost.
All routers in a given area or level forward link state advertisements between interfaces in the same area or level, adding their metric to the link state advertisement's cost information when they forward it.
单选题 Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）
The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.
The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.
The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.
The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.
多选题 Click the Exhibit button. host_a is in subnet_a and host_b is in subnet_b. Given the configuration shown in the exhibit, which statement is true about traffic from host_a to host_b?（）
DNS traffic is denied.
Telnet traffic is denied.
SMTP traffic is denied.
Ping traffic is permitted.
公众号
Copyright © 2020-2020 深圳市题王科技有限公司 All Right Reserved.
粤公网安备 44030402003701号