【多选题】
Which two advantages does the on-premise model for MDM deployment have over the cloud-based model？___
A. The on-premise model is easier and faster to de ploy than the cloud-based model
B. The on-premise model is more scalable than the cloud-based model
C. The on-premise model is generally less expensive than the cloud-based model
D. The on-premise model generally has less latency than the cloud- based model.
E. The on-premise model provides more control of the MDM solution than the cloud
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
DE
解析
暂无解析
相关试题
【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
A. 2
B. 3
C. 4
D. 5
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
推荐试题
【多选题】
“中国梦”的本质是国家富强、民族振兴、人民幸福。对三者关系的描述，正确的有___
A. 国家富强、民族振兴是人民幸福的基础和保障
B. 人民幸福是国家富强、民族振兴的题中之义和必然要求
C. 人民幸福是国家富强、民族振兴的根本出发点和落脚点
D. 国家的富强、民族的振兴要以人民幸福得到满足为条件
【多选题】
以下对“中国梦”的描述，正确的有___
A. 中国梦是国家情怀、民族情怀、人民情怀相统一的梦
B. 中国梦归根到底是人民的梦
C. 中国梦是国家的梦、民族的梦，也是每一个中国人的梦
D. 中国梦与世界各国人民的美好梦想相通
【多选题】
实现“中国梦”必须弘扬中国精神，这一中国精神是指___
A. 以英雄主义为核心的民族精神
B. 以爱国主义为核心的民族精神
C. 以改革拼搏为核心的时代精神
D. 以改革创新为核心的额时代精神
【多选题】
党对全面建成小康社会作出的新部署即“两个一百年”的奋斗目标是指___
A. 到建国 100 年时建成惠及十几亿人口的更高水平的小康社会
B. 到建党 100 年时建成惠及十几亿人口的更高水平的小康社会
C. 到建国 100 年时基本实现现代化，建成社会主义现代化国家
D. 到建党 100 年时基本实现现代化，建成社会主义现代化国家
【多选题】
党的十九大对我国全面建设社会主义现代化国家的进程分两个阶段来安排，这两个阶段分别是___
A. 从 2020 年到 2035 年，在全面建成小康社会的基础上，再奋斗 15 年，基本实现社会主义现代化
B. 从 2035 年到本世纪中叶，在基本实现现代化的基础上，再奋斗 15 年，把我国建成富强民主文明和谐美丽的社会主义现代化强国
C. 从 2020 年到 2050 年，在全面建成小康社会的基础上，再奋斗 15 年，基本实现社会主义现代化
D. 从 2050 年到 2065 年，在基本实现现代化的基础上，再奋斗 15 年，把我国建成富强民主文明和谐美丽的社会主义现代化强国
【多选题】
新时代中国特色社会主义发展的战略安排是___
A. 从全面建成小康社会到基本实现现代化
B. 从全面建设小康社会到基本实现现代化
C. 从基本实现现代化到全面建成社会主义现代化强国
D. 从基本实现现代化到全面建设社会主义现代化强国
【多选题】
从 2020 年到 2035 年，我国将基本实现现代化。这一阶段的目标要求是___
A. 我国经济实力、科技实力将大幅跃升，跻身创新型国家行列
B. 国家治理体系和治理能力现代化基本实现
C. 社会文明程度达到新高度，国家文化软实力显著增强
D. 人民生活更为宽裕，美丽中国目标基本实现
【多选题】
新时代中国特色社会主义发展战略安排的提出，是___
A. 在综合分析国际国内形势和我国发展条件之后作出的重大决策
B. 是党适应我国发展实际作出的必然选择
C. 对动员全党全国各族人民万众一心实现中华民族伟大复兴的中国梦具有重大意义
D. 应对国际挑战的新举措
【多选题】
深化供给侧结构性改革的主要内容___
A. 推进增长动能转换，以加快发展先进制造业为重点全面提升实体经济
B. 深化要素市场化配置改革，实现由以价取胜向以质取胜的转变
C. 加大人力资本培育力度，更加注重调动和保护人的积极性
D. 坚持续推进‘三去一降一补’，优化市场供求结构
【多选题】
现代化经济体系主要内容有___
A. 建设创新引领、协同发展的产业体系
B. 建设统一开放、竞争有序的市场体系
C. 建设体现效率、促进公平的收入分配体系
D. 建设彰显优势、协调联动的城乡区域发展体系
【多选题】
建设现代化经济体系，需要扎实管用的政策举措和行动。当前，要突出抓好的工作有___
A. 大力发展实体经济
B. 加快实施创新驱动发展战略
C. 激发各类市场主体活力
D. 积极推动城乡域协调发展
【多选题】
实现人民当家作主，就要___
A. 扩大人民有序政治参与
B. 保证人民依法实行民主选举、民主协商、民主决策、民主管理、民主监督
C. 巩固基层政权，完善基层民主制度
D. 保障人民知情权、参与权、表达权、监督权
【多选题】
坚持依法治国，就要___
A. 维护国家法制统一、尊严、权威
B. 加强人权法治保障
C. 保证人民依法享有广泛权利和自由
D. 健全依法决策机制，构建决策科学、执行坚决、监督有力的权力运行机制
【多选题】
发展协商民主，必须___
A. 推进协商民主广泛多层制度化发展
B. 统筹政党协商、政府协商、政协协商
C. 积极开展人大协商、基层协商、人民团体协商,逐步探索社会组织协商，构建程序合理、环节完整的社会主义协商民主体系
D. 确保协商民主有制可依、有规可守、有章可循、有序可遵，不断提高协商民主的科学性和实效性
【多选题】
如何巩固和发展爱国统一战线___
A. 坚持长期共存、互相监督、肝胆相照、荣辱与共，支持民主党派按照中国特色社会主义参政党要求更好履行职能
B. 深化民族团结进步教育，铸牢中华民族共同体意识
C. 全面贯彻党的宗教工作基本方针，坚持我国宗教的中国化，积极引导宗教与社会主义社会相适应
D. 牢牢把握大团结大联合的主题，做好统战工作。
【多选题】
扎实推进祖国和平统一进程，对台工作大政方针有___
A. 坚持“和平统一、一国两制”方针
B. 推动两岸关系和平发展
C. 坚持一个中国原则和“九二共识”
D. 坚决反对和遏制任何形式的“台独”
【多选题】
舆论导向正确是党和人民之福，舆论导向错误是党和人民之祸。好的舆论可以成为___
A. 发展的“推进器”
B. 民意的“晴雨表”
C. 社会的“粘合剂”
D. 道德的“风向标”
【多选题】
社会主义核心价值体系内容是___
A. 马克思主义指导思想
B. 中国特色社会主义共同理想
C. 以爱国主义为核心的民族精神和以改革创新为核心的时代精神
D. 社会主义荣辱观
【多选题】
培育和践行社会主义核心价值观，要___
A. 把社会主义核心价值观融入社会生活各个方面
B. 坚持全民行动、干部带头，从家庭做起、从娃娃抓起
C. 立足中华优秀传统文化和革命文化
D. 发扬中国人民在长期奋斗中培育、继承、发展起来的伟大民族精神
【多选题】
提高国家文化软实力，要___
A. 努力弘扬中华文化，推进中华文化创新发展
B. 讲好中国故事，传播好中国声音，阐释好中国特色
C. 增强对外话语的创造力、感召力和公信力，提高国际话语权
D. 加强当代中国价值观念的提炼与阐释，拓展对外传播平台和载体
【多选题】
形成人与自然和谐发展新格局要 做到___
A. 把节约资源放在首位
B. 坚持保护优先、自然恢复为主
C. 着力推进绿色发展、循环发展、低碳发展
D. 形成节约资源和保护环境的空间格局、产业结构、生产方式、生活方式
