单项选择题

Refer to the exhibit. Based on the VPN connection shown， which statement is true？（）

A.Traffic that matches access list 103 will be protected
B.This VPN configuration will not work because the tunnel IP and peer IP are the same
C.The tunnel is down because the transform set needs to include the Authentication Header parameter
D.The tunnel is down as result of being a static rule. It should be configured as a Dynamic IPsec policy

<上一题目录下一题>

热门试题

单项选择题Forthefollowingitems，whichoneactsasaVPNterminationdeviceandislocatedataprimarynetworklocation？（）

A.Broadband service
B.Headend VPN device
C.VPN access device
D.Tunnel

单项选择题Refer to the exhibit. You are the network security administrator responsible for router security.Your networkuses internal IP addressing according to RFC 1918 specifications.From the default rules shown，whichaccess control list would prevent IP address spoofing of these internal networks？（）

A.SDM_Default_197
B.SDM_Default_199
C.SDM_Default_196
D.SDM_Default_198

单项选择题HowdoyoudefinetheauthenticationmethodthatwillbeusedwithAAA？（）

A.With the method aaa command
B.With the method command
C.With a method list
D.With a method statement

单项选择题Whichnameisofthee-mailtrafficmonitoringservicethatunderliesthatarchitectureofIronPort？（）

A.SenderBase
B.TrafMon
C.IronPort M-Series
D.E-Base

单项选择题On the basis of the show policy-map type inspect zone-pair session command output provided in theexhibit.What can be determined about this Cisco IOS zone based firewall policy？（）

A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy（applied to traffic sourced from the less secured zone destined to the moresecured zone）
C.This is an outbound policy（applied to traffic sourced from the more secured zone destined to the lesssecured zone）
D.All packets will be dropped since the class-default traffic class is matching all traffic