多项选择题

A.The crypto ACL numberB.The IPSEC mode （tunnel or tran……

You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）

A.The crypto ACL number
B.The IPSEC mode （tunnel or transport）
C.The GRE tunnel interface IP address
D.The GRE tunnel source interface or IP address， and tunnel destination IP address
E.The MTU size of the GRE tunnel interface

<上一题目录下一题>

热门试题

多项选择题Refer to the exhibit. Which two statements about the AAA configuration are true？（）

A.A good security practice is to havethe none parameter configured as the final method used toensure that no other authentication method will be used
B.If a TACACS+ server is not available， then a user connecting via the console port would not beable to gain access since no other authentication method has been defined
C.If a TACACS+ server is not available， then the user Bob could be able to enter privileged modeas long as the proper enable password is entered
D.Theaaa new-model command forces the router to override every other authentication methodpreviously configured for the router lines
E.To increase security， group radius should be used instead of group tacacs+
F.Two authentication options are prescribed by the displayedaaa authentication command

单项选择题Incomputersecurity，AAAstandsforauthentication，authorizationandaccounting.WhichoptionabouttheAAAauthenticationenabledefaultgroupradiusenablecommandiscorrect？（）

A.If the radius server returns an error， the enable password will be used
B.If the radius server returns a ’failed’ message， the enable password will be used
C.The command login authentication group will associate the AM authentication to a specifiedinterface
D.If the group database is unavailable， the radius server will be used

单项选择题Authentication is the process of determining if a user or identity is who they claim to be. Refer tothe exhibit. Which statement about the authentication process is correct？（）

A.The LIST1 list will disable authentication on the console port
B.All login requests will be authenticated using the group tacacs+ method
C.The default login authentication will automatically be applied to all login connections
D.Because no method list is specified， the LIST1 list will not authenticate anyone on the consoleport

单项选择题Asanetworkengineer，doyouknowforwhatpurposeSDMusesSecurityDeviceEventExchange（SDEE）？（）

A.to provide a keepalive mechanism
B.to pull event logs from the router
C.to extract relevant SNMP information
D.to perform application-level accounting

单项选择题Asanetworktechnician，doyouknowwhatisarecommendedpracticeforsecureconfigurationmanagement？（）

A.Disable post scan
B.Use SSH or SSL
C.Enable trust levels
D.Deny echo replies on all edge routers