单项选择题

Which is a benefit of implementing RFC 2827？（）

A.Prevents DoS from legimate， non-hostile end systems
B.Prevents disruption of "special services"， such as Mobile IP
C.Defeats DoS Attacks which employ IPSource Address Spoofing
D.Restricts directed broadcasts at the ingress router
E.Allows DHCP or BOOTP packets to reach the relay agents asappropriate

<上一题目录下一题>

热门试题

单项选择题When configuringa CiscoAdaptiveSecurity Appliancein multiplecontextmode，whichofthefollowcapabilitiesaresupported？（）

A. Multicastis supported
B. Dynamic routing protocols are supported
C. VPN configurations are supported
D. Static routes are supported

单项选择题WhenconfiguringsystemstateconditionswiththeCiscoSecurityAgent，whatistheresultingactionwhen configuringmorethanonesystemstatecondition？（）

A.Any matching state condition will result with the state being triggered
B. Once a state condition ismet， the system ceases searching further conditions and will cause the state condition to trigger
C. All specified state conditions are used as part of the requirements tobe met to for the state to trigger
D. Once the state conditions are met， they become persistent and can only be removed using the Reset feature

多项选择题TheRiskRatingforan IPSsignatureiscalculatedusingfourprimarycomponents.Selectthefourcomponentsbelow.（）

A. SignatureFidelity Rating
B. Alert Severity Rating
C. Exploit Probability Rating
D. Target Value Rating
E. Attack Relevancy Rating

多项选择题AnIPSsensorwith3sniffinginterfacescanbeconfiguredas：（）

A. 3 promiscuous sensors
B. 3 inline sensors
C. 1 inline sensor， 1 promiscuous sensor
D. 2 inline sensors， 1 promiscuous sensors

多项选择题Giventhe topology ofaserver（withIP209.165.202.150）protectedbehindtheinsideinterfaceofanASA PIX，andtheInternetontheoutsideinterface.UsersontheInternetneedtoaccesstheserveratanytime，butthefirewalladministratordoesnotwanttoNATtheaddressoftheserver-sinceitiscurrentlyapublicaddress.Whichofthefollowingcommandscanbeusedtoaccomplishthis？（）

A. nat （inside） 0 209.165.202.150 255.255.255.255
B. access-list no-nat permit ip host209.165.202.150 anynat（inside） 0 access-list no-nat
C. static（inside，outside） 209.165.202.150 209.165.202.150 netmask 255.255.255.255
D. no nat-control
E. nat （inside） 1 209.165.202.150 255.255.255.255