思科认证CCNP安全VPN642-648认证考试分类模拟试题3

作者：佚名类别：思科认证状态：已完本总点击数：总推荐数：阅读权限：免费最后更新：2019-08-04 21:39:01

思科认证CCNP安全VPN642-648认证考试分类模拟3

题目列表

【单选题】1、How many phases are involved in a successful user CSD session?一个成功的用户CSD会话包括多少个阶段
【多选题】2、 Which of the following are valid Host Scan applications and extensions? (Choose all that apply.)
【单选题】3、What is the default inactivity timeout in minutes for a user Vault session?一个用户Vault会话的默
【单选题】4、Which Host Scan extension provides remediation?哪个主机扫描扩展提供纠正方法?
【单选题】5、 Which privilege level is required for ActiveX installation of CSD from a clientless SSL VPN conn
【单选题】6、Which of these are not valid prelogin assessment criteria? (Choose all that apply.)下面的哪些是无
【单选题】7、Which files are used for holding connection entry information?哪个文件用于保存连接条目的信息?
【单选题】8、 Which of the following are not platforms capable of running the Cisco IPsec VPN Client?(Choose a
【单选题】8、 Which of the following are not platforms capable of running the Cisco IPsec VPN Client?(Choose a
【多选题】9、Which of the following are capable of fulfilling the role of the VPN head-end device?下面哪一种设
【单选题】10、 Which of the following are not valid DH groups for use with the Cisco IPsec VPN Client? (Choose
【单选题】11、What is the recommended value when setting the MTU for a connection?当为一个连接设置MTU时，推荐的
【单选题】12、Which ACL type is used with split-tunneling configuration?哪种类型的ACL用于分离隧道的配置?
【单选题】13、 Which Diffie-Hellman group must be used for a tunnel establishment between an ASA device and th
【单选题】14、Which methods are available for client IP address assignment?哪些方法可用于客户端IP地址分配?
【单选题】15、 Which is the preferred method of controlling VPN client access to internal resources?哪一个是控
【单选题】16、Which of the following is not required for a basic Easy VPN configuration?一个基本的Easy VPN配置
【单选题】17、 Which of the following is not classed as an advanced method for controlling VPN client access t
【单选题】18、 Within which field of a digital certificate used for identity reasons would you commonly find a
【多选题】19、 Which of the following are valid certificate revocation list methods? (Choose all that apply.)
【单选题】20、 When choosing to implement a one-way certificate-based authentication scheme, which one would y
【单选题】21、 When configuring your ASA to use more than one NTP server, what parameter decides whether one s
【单选题】22、 After receiving a digital certificate from a CA, you import it into the Windows certificate sto
【单选题】23、 When examining a digital certificate for the available OCSP and CRL revocation list locations,
【单选题】24、 Which of the following are available group policy types on the ASA? (Choose all that apply.)下
【多选题】25、 Which of the following are legitimate ways to assign a group policy? (Choose all that apply.)下
【单选题】26、In what format are the attributes stored in an external group policy?属性以什么格式保存在一个外
【单选题】27、 Which of the following remote user types are external group policy objects available on? (Choos
【单选题】28、By default, where is ASA syslog information stored?默认情况下，ASA的系统日志信息存储在哪里?
【单选题】29、 When configuring an AAA server on the ASA, which communication protocol when configured allows
【多选题】30、 Which of the following are available actions used for NetFlow flow information creation? (Choos
【单选题】31、 When deploying an active/standby failover solution for HA requirements, which should you config
【单选题】32、 Which of the following are available for use when deploying a stateful HA solution for Easy VPN
【单选题】33、 By default, how many interfaces must be in any state other than UP for a failover to occur?默认
【单选题】34、 When deploying an HA or VPN load-sharing configuration using the IPsec VPN client software, whi
【单选题】35、 What is the minimum number of cluster members before a cluster can become operational?可使集群
【单选题】36、 Which of the following protocols are used for the periodic keepalives sent between IKE peers du
【单选题】What type of packet is sent by a peer across a failover link to detect the operational state of a pe
【单选题】38、 Which of the following are available interface types that can be used for a stateful failover l
【单选题】39、 By default, after how many DPD R_U_THERE packets sent without receiving a DPD_R_U_THERE_ACK res
【单选题】40、 What is the default number of seconds before a monitored interface availability status is chang
【单选题】41、 When deploying an advanced authentication scheme that requires each user at the remote site to
【单选题】41、 When deploying an advanced authentication scheme that requires each user at the remote site to
【单选题】41、 When deploying an advanced authentication scheme that requires each user at the remote site to
【多选题】42、 Which of the following are available authentication methods used between the Easy VPN Remote cl
【单选题】43、 Which advanced hardware client feature, if enabled, allows a Cisco Aironet access point at the
【多选题】44、 When preparing to allow a Cisco IP phone unauthenticated access to a VPN head-end site without
【单选题】45、 What is the minimum number of configuration steps required for a basic Easy VPN Remote client t
【多选题】46、 Which of the following are valid modes of operation when configuring the Easy VPN Remote client
【单选题】47、 When deploying an IPsec site-to-site VPN what is the vecommended method of peer anthentication
【单选题】48、During which phase does peer authentication occur?对端验证发生在哪个阶段?
【多选题】49、 Which of the following are available Diffie-Hellman groups for use on the ASA? (Choose all that
【单选题】50、 How many methods exist for IPsec site-to-site VPN configuration using the ASDM?使用ASDM配置IPSe
【单选题】51、By default, which ASA interface in the ASDM is enabled for IPsec operation?默认情况下，在ASDM中，ASA
【单选题】52、 When configuring an IPsec site-to-site VPN, where are your available authentication options sto
【单选题】53、 You have configured your IKEv1 policies and have confirmed that your site-to-site VPN tunnel is
【单选题】54、 When configuring peer authentication using digital certificates, what can you choose to send th
【单选题】55、 When deploying an HA solution for VPN, which method can provide you with stateful failover?当为
【单选题】56、 How many configuration elements are required for a successful QoS deployment using the MQC?使用
【单选题】57、 When configuring QoS policies, at which stage do you configure your classification criteria?当
【单选题】58、 When deciding to rate limit the amount of traffic passing through your ASA 10/100 interface to
【单选题】59、 True or false: When you are configuring OSPF to form a neighborship between your ASA devices, y
【单选题】60、 True or false: When you are configuring OSPF between neighboring ASA devices, the OSPF process
【单选题】61、 True or false: When you are configuring an active/standby failover pair, the stateful interface
【单选题】62、 When you are configuring active/standby failover, which of the following is not a required step