【单选题】
What information does the key length provide in an encryption algorithm?___
A. the cipher block size
B. the hash bloc k size
C. the number of permutations
D. the packet size
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
C
解析
暂无解析
相关试题
【单选题】
How do you verify TaCACS+ connectivity to a device？___
A. You successfully log in to the device by using the local credentials
B. You connect via console port and receive the login prompt.
C. You connect to the device using SSH and receive the login prompt.
D. You successfully log in to the device by using ACS credentials
【单选题】
Which term best describes the concept of preventing the modification of data in transit and in storage？___
A. availability
B. confidentially
C. fidelity
D. integrity
【单选题】
Which loS command is used to define the authentication key for ntp？___
A. switch（config ）#ntp authentication-key 1 mds Clcs
B. switch（config ）#ntp authenticate
C. switch（config）#ntp trusted-key 1
D. switch（config）#ntp source 192.168.0.1
【单选题】
What is true about the cisco lOS Resilient Configuration feature ?___
A. The feature can be disabled through a remote session
B. There is additional space required to secure the primary cisco lOS image file.
C. The feature automatically detects image or configuration version mismatch.
D. Remote storage is used for securing files
【单选题】
When is the default deny all policy an exception in zone-based firewalls？___
A. when traffic terminates on the router via the self zone
B. when traffic traverses two interfaces in different zones
C. when traffic traverses two interfaces in the same zone
D. when traffic sources from the router via the self zone
【单选题】
.If an access port is assigned as an isolated port in a PVLAN， which network ports can it communicate with？___
A. promiscuous ports in the same PLVAN
B. isolated ports in the same PVLAN
C. all ports in the same PAVLAN at ILAR
D. all ports in the adjacent PVLAN
【单选题】
Which IPSEC mode is used to encypt traffic directly between a client and a server VPN endpoint？___
A. quick mode
B. transport mode
C. aggressive mode
D. tunnel mode
【单选题】
Which command do you enter to verify that a vpn connection is established between two endpoints and that the connection is passing traffic？ ___
A. Firewall#sh crypto session
B. Firewall#debug crypto isakmp
C. Firewall#tsh crypto ipsec sa
D. Firewall#sh crypto isakmp sa
【单选题】
which type of Pvlan port allows communication from all port types？___
A. isolated
B. in -line
C. community
D. promiscuous
【单选题】
Which command do you enter to configure your firewall to conceal internal addresses？___
A. no ip directed-broadcast
B. no ip logging facility
C. no proxy-arp
D. no ip inspect audit-trial
E. no ip inspect
F. route
【单选题】
Which feature defines a campus area network？ ___
A. It has a limited number of segments.
B. It has limited or restricted Internet access
C. It lacks ex1ternal connectivity.
D. It has a single geographic location
【单选题】
What technology can you use to provide data confidentiality data integrity and data origin authentication on your network？___
A. IPSec
B. Certificate Authority
C. IKE
D. Data
E. ncryption Standards
【单选题】
which standard is a hybrid protocol that uses oakley and skerne ke y exchanges is an ISAKMP framework？___
A. SHA
B. IPSec
C.
D. ES
【单选题】
What is the effect of the asa command crypto isakmp nat-traversal？___
A. It opens port 500 only on the out side interface
B. It opens port 500 only on the inside interface
C. It opens port 4500 on all interfaces that are IPSec enabled
D. It opens port 4500 only on the out side interfac
【单选题】
Which Fire POWER preproce ssor engine is used to prevent SYN attacks？___
A. Inline normalization
B. IP Defragmentation
C. Ports can
D. etection
【单选题】
Which NAT type allows objects or groups to reference an IP address ？___
A. identity NAt
B. static NAT
C. dynamic
D. dynamic NAT
【单选题】
Which Auto NAT policies are processed first？___
A. Dynamic NAT with longest prefix
B. Dynamic NAT with shortest prefix
C. static NAT with longest prefix
D. static NAT with shortest prefix
【单选题】
Which feature allows a dynamic Pat pool to se lect the next address in the pat pool instead of the next port of an existing address？___
A. next IP
B. round robin
C. dynamic rotation
D. NAT address rotation
【单选题】
Which IPS detection method can you use to detect attacks that are based on the attackers IP address？___
A. anomally-based
B. policy-based
C. signature-based
D. reputation-based
【单选题】
Which type of encryption technology has the broadest platform support？___
A. software
B. middleware
C. file-level
D. hardware
【单选题】
Which type of address translation supports the initiation of comm unications bidirectionally ？___
A. multi-session PAT
B. dynamic NAT
C. dynamic PAT
D. static NAT
【单选题】
Which label is given to a person who uses existing computer scripts to hack into computers while lacking the expertise to write the own？___
A. script kiddy
B. white hat hacker
C. hacktivist
D. phreaker
【单选题】
What is the primary purpose of a defined rule in an IPS？___
A. to configure an event action that takes place when a signature is triggered
B. to define a set of actions that occur when a specific user logs in to the system
C. to configure an event action that is pre-defined by the system administrator
D. to detect internal attacks
【单选题】
Which option is the default valuce for the Diffie- Hell man group when configuring a site-to-site VPn on an asa device ？___
A. Group 1
B. Group 2
C. Group 5
D. Group 7
【单选题】
Which feature filters CoPP packets?___
A. access control lists
B. class maps
C. policy maps
D. route maps
【单选题】
Which command is used in global configuration mode to enable AAA？___
A. configure-model aaa
B. configure aaa-modelA
C. aaa new-model
D. aaa
E. XEC
【单选题】
Which statement about the given configuration is true？___
A. The single-connection command causes the device to establish one connection for all TACACS
B. The single-connection command causes the device to process one TacAcs request and then move to the next server
C. The timeout com mand causes the device to move to the next server after 20 seconds of TACACS inactive
【多选题】
What are two well-known security terms？___
A. phishing//网络钓鱼
B. ransomware //勒索软件
C. BPDU guard
D. LACP
E. hair-pinning
【多选题】
Which two commands must you enter to securely archive the primary bootset of a device___
A. router（config ）#secure boot-config
B. router（config）#auto secure
C. router（config）#secure boot-image
D. router（config）#service passw ord-encryption
【多选题】
Which two functions can SIEM provide ？___
A. correlation between logs and events from multiple systems
B. event aggregation that allows for reduced log storage requirements
C. proactive malware analysis to block malicious traffic
D. dual-factor authentication
E. centralized firewall management
【多选题】
Which two features of Cisco Web Reputation tracking can mitigate web-based threats？___
A. buffer overflow filterin dhsuowip
B. Bayesian filters
C. web reputation filters
D. outbreak filtering
E. exploit filtering
【多选题】
What are two challenges when deploying host- level IPS？ ___
A. The deployment must support multiple operating systems.
B. It is unable to provide a complete networ k picture of an attack.
C. It is unable to determine the outcome of e very attack that it detects
D. It does not provide protection for offsite computers
E. It is unable to detect fragmentation attacks
【多选题】
Which technology can be used to rate data fidelity and to provide an authenticated hash for data?___
A. file reputation
B. file analysis
C. signature updates
D. network blocking
【多选题】
Which two statements about host-based iPS solutions are true？___
A. It uses only signature-based polices
B. It can be deployed at the perimeter.
C. It can be have more restrictive policies than network-based IPS
D. it works with deployed firewall
E. It can generate alerts based on be havior at the de sto
【多选题】
When two events would cause the state table of a stateful firewall to be updated？ ___
A. when a packet is evaluated against the outbound access list and is denied
B. when a con nection is created
C. when rate-limiting is applied
D. when a connection s timer has expired within the state table.
E. when an outbound packet is forwarded to the outbound interface
【多选题】
Which two characteristics apply to an intrusion Prevention System（IPS）？___
A. Cannot drop the packet on its own
B. Cabled directly inline with the flow of the network traffic
C. Runs in promiscuous mode wat
D. Does not add delay to the original traffic
E. Can drop traffic based on a set of rules
【多选题】
crypto ipsec trans form-set myset esp-md5-hmac esp-aes-256，What are two effects of the given command？___
A. It configures authentication use AES 256.
B. It configures authentication to use MD5 HMAC
C. It configures authentication use AES 256.
D. It configures encryption to ase MD5 HMAC.
E. It configures encryption to use AES 256
【多选题】
your security team has discovered a malicious program that has been harvesting the CEos email messages and the com pany 's user database for the last 6 months. What are two possible types of attacks your team discovered？___
A. social activism
B. EPolymorphic Virus
C. advanced persistent threat
D. drive-by spyware
E. targeted malware
【单选题】
以下关于数据处理的叙述中，不正确的足___。
A. ：数据处理不仅能预测不久的未来，自时还能影响未
B. ：数据处理和数据分析可以为决策提供真知灼见
C. ：数据处理的重点应从技术角度去发现和解释数据蕴涵的意义
D. ：数据处理足从现实世界到数据，冉从数据到现实世界的过程
推荐试题
【多选题】
解放后，我们按照李四光的学说勘探石油，在所谓“贫油”的中国发现了丰富的石油储藏。而在人口问题上，马寅初的理论却长期未予重视，致使人口增长过快，给社会主义建设事业带来很大困难，这说明（ ）?
A. 真理的内容是客观的
B. 实践是检验真理的唯一标准
C. 意识对物质具有能动的作用
D. 科学理论是检验真理的标准
【多选题】
“实践.认识.再实践.再认识.这种形式，循环往复以至无穷，而实践和认识之每一循环的内容，都比较地进到了高一级的程度，这就是辩证唯物论的全部认识论”。这个论断揭示了（ ）?
A. 认识对于实践的依赖关系
B. 认识是一个辩证的发展过程
C. 主观与客观.理论与实践的具体的历史的统一
D. 马克思主义认识论是能动的革命的反映论
【多选题】
“没有革命的理论，就不会有革命的运动”。这句话（ ）?
A. 是主张意识决定物质的错误观点
B. 是只承认理性认识的教条主义的主张
C. 说明了科学的理论是行动的指南
D. 体现了正确的理论对革命运动的巨大的能动作用
【多选题】
属于辩证唯物主义认识论的观点有（ ）?
A. “人类的一切认识，都具有相对性”
B. “任何具体真理都带有近似正确的性质”
C. “没有革命的理论，就不会有革命的运动”
D. “真理是有用的，有用的是真理”
【多选题】
马克思说：“批判的武器当然不能代替武器的批判，物质的力量只能用物质力量来摧毁；但是理论一经群众掌握，也会变成物质力量。”这段话体现的哲学思想是（ ）?
A. 理论就是巨大的物质力量
B. 理论对实践有指导作用
C. 理论不能代替实践
D. 理论可以决定一切
【多选题】
感性认识和理性认识的相互联系体现在（ ）?
A. 感性认识是对事物本质的.全面的.内部联系的认识
B. 理性认识是对事物现象的.片面的.外部联系的认识
C. 理性认识依赖于感性认识
D. 感性认识必然要上升到理性认识，才能透过现象深入事物的本质
【多选题】
社会意识相对独立性主要表现在（ ）?
A. 社会意识具有历史继承性
B. 各种社会意识之间的相互影响
C. 社会意识对社会存在能动的反作用
D. 社会意识与社会存在发展的不平衡性
【多选题】
每一次科学技术革命，都不同程度地引起生产方式.生活方式和思维方式的深刻变化和社会的巨大进步。其对生产方式产生的深刻影响主要有（ ）?
A. 改变了社会生产力的构成要素
B. 改变了人们的思维方式
C. 改变了人们的劳动形式
D. 改变了社会的经济结构，特别是导致第三产业结构发生变革
【多选题】
唯物史观认为，生产力对生产关系的决定作用表现在（ ）?
A. 生产力的状况决定生产关系的性质
B. 生产力的性质决定生产关系的状况
C. 生产力的发展决定生产关系的变化
D. 生产力的变化决定生产关系的发展
【多选题】
下列各项适用于一切社会形态的历史唯物主义原理有（ ）?
A. 生产力和生产关系辩证关系的原理
B. 经济基础和上层建筑辩证关系的原理
C. 阶级斗争是社会发展的直接动力的原理
D. 暴力革命是社会形态更替的基本途径的原理
【多选题】
关于马克思主义的阶级分析方法说法正确的有（ ）?
A. 坚持阶级分析方法，就是运用马克思主义的阶级和阶级斗争观点去观察和认
B. 阶级分析方法为我们透过纷繁复杂的阶级社会现象，认识阶级社会的本质和规律，提供科学的指导
C. 阶级分析方法要求全面地.动态地分析阶级状况，分析各阶级的经济地位.政治立场和意识形态，准确把握各阶级之间的关系和阶级力量的对比，把握社会活动和社会生活的脉搏
D. 在认识和处理阶级矛盾时，要严格区分阶级矛盾和非阶级矛盾，区分对抗阶级与非对抗阶级之间的矛盾，区分敌我矛盾和人民内部矛盾
【多选题】
关于人民群众是历史的创造者的说法正确的有（ ）?
A. 人民群众是物质财富的创造者
B. 人民群众是社会精神财富的创造者
C. 人民群众是社会变革的决定力量
D. 人民群众创造历史的活动要受到一定社会历史条件的制约
【多选题】
在人类和人类社会形成的过程中，劳动所起的作用有（ ）?
A. 劳动创造了人脑
B. 劳动创造了人手
C. 劳动推动了语言的产生与发展
D. 劳动产生了意识和人类所特有的抽象思维能力
【多选题】
社会形态更替有规律，但并不否定人们历史活动的能动性，并不排斥人们在遵循社会发展规律的基础上，对于某种社会形态的历史选择性。人们的历史选择性包含三层意思（ ）?。
A. 社会发展的客观必然性造成了一定历史阶段社会发展的基本趋势，为人们的历史选择提供了基础.范围和可能性空间
B. 社会形态更替的过程也是一个合目的性和合规律性相统一的过程
C. 社会形态更替归根结底是社会矛盾运动的结果
D. 人们的历史选择性，归根结底是人民群众的选择性
【多选题】
下列各项正确反映人的活动和社会发展规律的关系的有（ ）?
A. 人们可以认识和利用社会发展规律
B. 人们可以加速或延缓社会规律的实现
C. 人们可以根据自己的愿望改变社会规律
D. 社会规律就是人的活动的规律
【多选题】
历史英雄人物在历史的发展过程中起着特殊的作用，主要表现在（ ）?
A. 他们比一般人站得高.看得远，解决历史任务的愿望比别人强烈
B. 先进阶级的政治代表人物所提出的思想能够成为社会变革的先导，他们为群众指明革命斗争的方向，在革命斗争中起着领导核心的作用
C. 有些占统治地位的剥削阶级的政治代表，在特殊的条件下，运用其权力满足社会的某些需要，对历史发展也会起某种甚至是重大的促进作用
D. 杰出的科学家.思想家.艺术家.教育家等的创造性活动，对于人类科学文化的发展和社会进步，有着巨大的推动作用
【多选题】
唯物史观认为，人民群众创造历史的表现（ ）?
A. 人民群众是物质财富的创造者
B. 人民群众是精神财富的创造者
C. 人民群众是社会变革的决定力量
D. 人民群众可以随心所欲地创造历史
【多选题】
唯物史观在考察谁是历史创造者时所坚持的原则（ ）?
A. 立足于现实的人及其本质来把握历史的创造者
B. 立足于整体的社会历史过程来探究谁是历史的创造者
C. 从社会历史发展的必然性入手来考察和说明谁是历史的创造者
D. 从人与历史关系的不同层次上考察谁是历史的创造者
