640-554無料問題集「Cisco Implementing Cisco IOS Network Security (IINS v2.0)」

質問 1

Which two protocols enable Cisco Configuration Professional to pull IPS alerts from a Cisco ISR router? (Choose two.)

（A）TFTP

（B）HTTPS

（C）FTP

（D）SDEE

（E）syslog

（F）SSH

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which authentication protocol does the Cisco AnyConnect VPN password management feature require to operate?

（A）MS-CHAPv2

（B）MS-CHAPv1

（C）CHAP

（D）Kerberos

正解：A 解答を投票する

質問 3

Which Cisco Security Manager feature enables the configuration of unsupported device features?

（A）FlexConfig

（B）Deployment Manager

（C）Configuration Manager

（D）Policy Object Manager

正解：A 解答を投票する

質問 4

Which command will configure AAA accounting using the list of all RADIUS servers on a device to generate a reload event message when the device reloads?

（A）aaa accounting auth-proxy default start-stop group radius

（B）aaa accounting exec default start-stop group radius

（C）aaa accounting system default start-stop group radius

（D）aaa accounting network default start-stop group radius

正解：C 解答を投票する

質問 5

Which three statements about the IPsec ESP modes of operation are true? (Choose three.)

（A）Tunnel mode only encrypts and authenticates the data.

（B）Transport mode authenticates the IP header.

（C）Tunnel mode is used between a host and a security gateway.

（D）Transport mode leaves the original IP header in the clear.

（E）Tunnel mode is used between two security gateways.

正解：C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

What is the key difference between host-based and network-based intrusion prevention?

（A）Network-based IPS provides better protection against OS kernel-level attacks against hosts and servers.

（B）Host-based IPS can work in promiscuous mode or inline mode.

（C）Host-based IPS is more scalable then network-based IPS.

（D）Host-based IPS deployment requires less planning than network-based IPS.

（E）Network-based IPS is better suited for inspection of SSL and TLS encrypted data flows.

（F）Network-based IPS can provide protection to desktops and servers without the need of installing specialized software on the end hosts and servers.

正解：F 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which command configures stateful packet inspection to inspect a packet after it passes the inbound ACL of the input interface?

（A）ip inspect out

（B）ip inspect name audit-trail off

（C）ip inspect in

（D）ip inspect name audit-trail on

正解：C 解答を投票する

質問 8

Which one of the following items may be added to a password stored in MD5 to make it more secure?

（A）Cryptotext

（B）Rainbow table

（C）Ciphertext

（D）Salt

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which command will configure a Cisco ASA firewall to authenticate users when they enter the enable syntax using the local database with no fallback method?

（A）aaa authentication enable console local

（B）aaa authentication enable console LOCAL

（C）aaa authentication enable console SERVER_GROUP LOCAL

（D）aaa authentication enable console LOCAL SERVER_GROUP

正解：B 解答を投票する

質問 10

Which type of Cisco ASA access list entry can be configured to match multiple entries in a single statement?

（A）object groups

（B）extended wildcard matching

（C）nested object-class

（D）class-map

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

What Cisco Security Agent Interceptor is in charge of intercepting all read/write requests to the rc files in UNIX?

（A）File system interceptor

（B）Configuration interceptor

（C）Execution space interceptor

（D）Network interceptor

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

When port security is enabled on a Cisco Catalyst switch, what is the default action when the configured maximum number of allowed MAC addresses value is exceeded?

（A）The MAC address table is cleared and the new MAC address is entered into the table.

（B）The port remains enabled, but bandwidth is throttled until old MAC addresses are aged out.

（C）The port is shut down.

（D）The violation mode of the port is set to restrict.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Which network security framework is used to set up access control on Cisco Appliances?

（A）NAS

（B）AAA

（C）TACACS+

（D）RADIUS

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

What are two primary attack methods of VLAN hopping? (Choose two.)

（A）CAM-table overflow

（B）double tagging

（C）switch spoofing

（D）VoIP hopping

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

Which statement describes how VPN traffic is encrypted to provide confidentiality when using asymmetric encryption?

（A）The sender encrypts the data using the sender's public key, and the receiver decrypts the data using the receiver's public key.

（B）The sender encrypts the data using the receiver's public key, and the receiver decrypts the data using the receiver's private key.

（C）The sender encrypts the data using the receiver's private key, and the receiver decrypts the data using the sender's public key.

（D）The sender encrypts the data using the sender's public key, and the receiver decrypts the data using the sender's private key.

（E）The sender encrypts the data using the sender's private key, and the receiver decrypts the data using the sender's public key.

（F）The sender encrypts the data using the receiver's private key, and the receiver decrypts the data using the receiver's public key.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

640-554 無料問題集「Cisco Implementing Cisco IOS Network Security (IINS v2.0)」

弊社を連絡する

関連リンク

トップ試験