单项选择题

A. inline with a firewallB. in a DMZ outside the firewa……

As an experienced technician, you are responsible for Technical Support. One of the trainees is asking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend?（）

A. inline with a firewall
B. in a DMZ outside the firewall
C. parallel with a firewall
D. in a DMZ behind the firewall

<上一题目录下一题>

热门试题

单项选择题You are the Cisco Network Designer. Which of these is least important when determining how many users a NAS can support?（）

A. bandwidth
B. number of plug-ins per scan
C. total number of network devices
D. number of checks in each posture assessment

单项选择题Please match the Cisco STP enahancement term to its definition.（） (1) BPDU guard (2) PortFast (3) BackboneFast (4) Loop guard (5) Root guard (a) shuts down a port that receives a BPDU when enabled (b) cuts convergence time by mas-age for indirect failure (c) prevents the aliernate or root port from being designated in absence of BPDUs (d )causes Layer 2 LAN interface access port to immediately enter the forwarding state (e) helps prevent bridging loops due to jni-directional link failures on point-to-point links

A.（a）-（1）；（b）-（2）；（c）-（4）；（d）-（5）；（e）-（3）
B.（a）-（4）；（b）-（3）；（c）-（2）；（d）-（5）；（e）-（1）
C.（a）-（3）；（b）-（2）；（c）-（4）；（d）-（5）；（e）-（1）
D.（a）-（1）；（b）-（3）；（c）-（4）；（d）-（2）；（e）-（4）

单项选择题You are the Cisco Network Designer . Which is not major scaling, sizing, and performance consideration for an IPsec design?（）

A. connection speed
B. number of remote sites
C. features to be supported
D. types of devices at the remote site

单项选择题You are the network consultant from pass4sure.com. One of your customer has six sites, three of which process a large amount of traffic among them. He plans to grow the number of sites in the future. Which is the most appropriate design topology?（）

A.full mesh
B.peer-to-peer
C.partial mesh
D.hub and spoke

单项选择题Please match the Cisco NAC appliance component to its description.（） (1)Cisco NAS (2)Cisco NAA (3)Rule-set Lpdates (4)Cisco NAM (a) a centralized management point (b) an in-band cr out-of-band device for network access control (c) a Windows-based client which allows network access based on the tasks running (d) a status crecker for operating systems,antivirus,antispyware,etc.

A.（a）-（4）；（b）-（1）；（c）-（2）；（d）-（3）
B.（a）-（3）；（b）-（2）；（c）-（4）；（d）-（1）
C.（a）-（4）；（b）-（3）；（c）-（1）；（d）-（2）
D.（a）-（2）；（b）-（4）；（c）-（3）；（d）-（1）