【多选题】
Which two actions can an end usts take to manage a lost or stolen device in Cisco ISE？ ___
A. Activate Cisco ISE End point Protection Services to quarantine the device.
B. Add the mac address of the device to a list of blacklisted devices
C. Force the device to be locked with a PIN
D. Request revocation of the digital certificate of the device.
E. Reinstate a device that the user previously marked as lost or stolen
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
AC
解析
暂无解析
相关试题
【多选题】
Which two problems can arise when a proxy firewall serves as the gateway between networks？___
A. It can prevent content caching
B. It can limit application support
C. It is unable to prevent direct connections to other networks
D. It can cause reduced throughput.
E. It is unable to provide antivirus protection
【多选题】
When using the Adaptive Security Device Manager（ASDM）， which two methods are available to add a new root certificate？___
A. Use sCep
B. Install from SFTP server
C. Install from a file
D. Use Https
E. Use LDAP
【多选题】
Which two are considered basic security principles？___
A. Accountability
B. Redundancy
C. High Availabilit
D. Integrity
E. Confidentiality
【多选题】
Which two roles of the Cisco WSA are true？___
A. IPS
B. firewall
C. antispam
D. web proxy
E. URL filter
【单选题】
Which next-generation encryption algorithm supports four variants？___
A. SHA-2
B. SHA-1
C. MD5
D. HMAC
【单选题】
What aims to remove the abil ity to deny an action？___
A. Non-Repudiation
B. Accountability
C. Integrity
D. Deniability
【单选题】
Which statements about the native VLAN is true ？___
A. It is susceptible to VLAN hopping attacks.
B. It is the Cisco recommended VLAN for switch-management traffic
C. It is most secure when it is a ssigned to vLAn 1.
D. It is the cisco-recomme nded vlan for user traffic
【单选题】
There are two versions of IKE:IKEv1 and IKEv2. Both IKEv1 and IKEv2 protocols operate in phases IKEv1 operates in two phases. IKEv2 operates in how many phases？___
A. 2
B. 3
C. 4
D. 5
【单选题】
What does the dh group refer to？___
A. length of key for hashing C
B. length of key for encryption
C. tunnel lifetime key
D. length of key for key exchange
E. length of key for authentication
【单选题】
Which path do you follow to enable aaa through the SDM ？___
A. Configure Tasks > AAA
B. Configure > Addition Authentication > AAA
C. Configure > AAA
D. Configure > Additional Tasks > AAA
E. Configure Authentication > AAA
【单选题】
which technology cloud be used on top of an MPLS VPN to add confidentiality ？___
A. IPsec
B. 3DES
C. AES
D. SSL
【单选题】
Which term is most closely aligned with the basic purpose of a SIEM solution? ___
A. Non-Repudiation
B. Accountability
C. Causality
D. Repudiation
【单选题】
You have just deployed SNMPv3 in your environment， Your manager asks you to make sure that our SNMP agents can only talk to the SNMP Manager. What would you configure on your SNMI agents to satisfy this request？___
A. A SNMP View containing the SNMP managers
B. Routing Filter with the SNMP managers in it applied outbound
C. A standard ACL containing the SNMP managers applied to the SNMP configuration
D. A SNMP Group containing the SNMP managers
【单选题】
Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port？___
A. BPDU filte
B. DHCP snooping
C. BPDU guard
D. Port Fast
【单选题】
Which command enables port security to use sticky MAC addresses on a switch？___
A. switchport port-security violation restrict
B. switchport port-security mac-address sticky
C. switchport port-security violation protect
D. switchport port-security
【单选题】
When you edit an IPS subsignature， what is the effect on the parent signature and the family of subsignatures？___
A. The change applies to the parent signature and the entire family of subsignatures
B. The change applies to the parent signature and the subsignature that you edit
C. The change applies only to subsignatures that are numbered sequentially after the subsignature that you edit
D. Other signatures are unaffected， the change applies only to the subsignature that you dit
【单选题】
Which type of mechanism does Cisco FirePOWER de ploy to protect ag detected moving across other networks？___
A. antivirus scanning
B. policy-based
C. reputation-based
D. signature-based
【单选题】
What action must you take on the ise to blacklist a wired device？___
A. Locate the switch through which the device is connected and push an a cl restricting all access by the device
B. Issue a CoA request for the de vice's mac address to each access switch in the network
C. Revoke the device's certificate so it is unable to authenticate to the network
D. Add the device's MAc address to a list of black listed devices
【单选题】
Which type of firewall can perform deep packet inspection？___
A. packet-filtering firewall
B. stateless firewall
C. application firewall
D. personal firewall
【单选题】
What is the main purpose of Control Plane Policing？___
A. to prevent exhaustion of route-proce ssor resources
B. to organize the egress packet queues
C. to define traffic classes
D. to maintain the policy map
【单选题】
Which attack can be prevented by OSPF authentication？___
A. smurf attack
B. IP spoofing attack
C. denial of service attack
D. buffer overflow attack
【单选题】
What is the best definition of hairpinning？___
A. ingress traffic that traverses the outbound interface on a device
B. traffic that enters one interface on a device and that exits through another interface
C. traffic that enters and exits a device through the same interface
D. traffic that tunnels through a device interface
【单选题】
Which SNMPv3 security level provides authentication using HMAC with MD5， but does not use encryption？___
A. authPriv
B. authNo Priv
C. noAuthNoPriv
D. NoauthPriv
【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
推荐试题
【多选题】
涉密信息系统发生下列何种情况时，应当按照国家保密规定及时向保密行政管理部门报告，并采取相应措施。___
A. 密级发生变化
B. 主要业务应用发生变化
C. 使用范围和使用环境发生变化
D. 不再使用
【多选题】
从事涉密业务的企业事业单位应当具备的条件，下列说法正确的是___。
A. 在中国人民共和国境内依法成立2年以上的法人，无违法犯罪记录
B. 所有人员具有中华人民共和国国籍
C. 保密制度完善，有专门的机构或者人员负责保密工作，具有从事涉密业务的专业能力
D. 用于涉密业务的场所、设施、设备符合国家保密规定和标准
【多选题】
资质单位存在下列哪些情形，作出审批的保密行政管理部门应当撤销其资质___。
A. 采取弄虚作假等不正当手段取得资质
B. 涂改、出卖、出租、出借《资质证书》
C. 伪造、非法转让《资质证书》
D. 将涉密信息系统集成业务分包或者转包给无相应资质的单位
【多选题】
下列属于保密总监或者分管保密工作负责人工作职责的是___。
A. 组织制定单位保密管理制度、保密工作计划
B. 审核、签发单位保密管理制度
C. 监督保密工作计划落实情况
D. 为保密办公室履行职责提供保障
【多选题】
资质单位存在下列哪些情形的，保密行政管理部门应当注销其资质。___
A. 《资质证书》有效期满未按规定申请延续
B. 法人资格依法终止
C. 连续两年未承接涉密项目
D. 上级单位领导层或者上级公司董事会发生变更后，含有外籍成员
【多选题】
涉外活动主要有哪些保密要求___
A. 不得带领境外人员进入涉密场所和涉密部门、部位
B. 与境外人员会谈不得涉及国家秘密
C. 不得使用境外通信设备进行涉密通信联络
D. 陪同境外人员活动不得携带涉密载体
【多选题】
复制非本单位产生的涉密载体，应当经过（）或（）批准。___
A. 单位保密总监或分管保密工作负责人
B. 单位法定代表人
C. 涉密载体制发机关、单位
D. 所在地省、自治区、直辖市保密行政管理部门
【多选题】
下列属于保密管理办公室工作职责的是___。
A. 制定、修订保密制度
B. 为保密工作提供人力、财力、物力等条件保障
C. 参与单位各项管理制度的制定、修订工作
D. 组织开展保密检查，针对存在的问题提出整改意见，并督促落实
【多选题】
下列哪些事项不能确定为国家秘密___
A. 需要社会公众广泛知晓或者参与的
B. 属于工作秘密、个人隐私的
C. 已经依法公开或者无法控制知悉范围的
D. 追查刑事犯罪中的秘密事项
【多选题】
保密管理人员应当具备下列条件___
A. 良好的政治素质
B. 熟悉保密法律法规，掌握保密知识技能
C. 熟悉本单位业务工作和保密工作情况
D. 通过保密行政管理部门组织的培训和考核
【多选题】
涉密人员对下列事项应当及时报告___
A. 配偶、子女获得境外永久居留资格或者取得外国国籍的
B. 接受境外机构组织及非亲属人员资助的
C. 发现敌对势力和境外情报机构针对本人渗透、策反行为的
D. 与境外人员结婚的
【多选题】
以下属于保密标准中涉密人员基本条件的是___
A. 遵纪守法，具有良好的品行，无犯罪记录
B. 资质单位正式员工，并在其他单位无兼职
C. 具备与岗位相匹配的技能和学历
D. 社会关系清楚，本人及其配偶为中国境内公民
【多选题】
涉密资质单位保密工作领导小组的职责是___
A. 对保密工作负领导责任
B. 为保密工作机构履行职责提供人力、财力、物力等条件保障
C. 对保密工作进行研究、部署和工作总结
D. 及时解决保密工作中的重大问题
【多选题】
应当确定为保密要害部门的是___
A. 单位日常工作中经常产生绝密级或较多机密级、秘密级国家秘密的内设机构
B. 单位日常工作中经常传递绝密级或较多机密级、秘密级国家秘密的内设机构
C. 单位日常工作中经常使用和管理绝密级或较多机密级、秘密级国家秘密的内设机构
D. 单位日常工作中经常存储大量秘密级国家秘密的内设机构
【多选题】
下列哪些做法违反了保密规定___
A. 通过个人优盘将互联网上的歌曲拷贝到单位的涉密计算机中
B. 将单位的涉密文件拷贝后，在家中的计算机上继续处理
C. 将手机连接到涉密计算机上充电
D. 将个人的便携式计算机与单位的涉密计算机相连传输资料
【多选题】
应当确定为核心涉密人员的条件是___
A. 了解和掌握涉及绝密级国家秘密的程度深
B. 了解和掌握涉及绝密级国家秘密的事项多
C. 在涉及绝密级国家秘密岗位上工作时间长
D. 在涉及绝密级国家秘密的单位中担任负责后勤保障的领导
【多选题】
有关脱密期正确的是___
A. 核心涉密人员的脱密期为2年至3年
B. 重要涉密人员的脱密期为1年至2年
C. 一般涉密人员的脱密期为半年至1年
D. 属于重要涉密人员的领导干部脱密期为3年至5年
【多选题】
关于涉密计算机的使用，以下行为中错误的有___
A. 根据工作需要，可以安装摄像头
B. 可以安装FTP服务器端，面向系统用户提供涉密文档资料下载和上传
C. 在计算机上安装个人硬盘，换成可刻录光驱进行文件的输入输出
D. 使用普通优盘直接连接涉密计算机
【多选题】
下列说法正确的是___
A. 涉密信息系统经本单位保密工作机构测试后即可投入使用
B. 涉密信息系统投入运行前应当经过国家保密行政管理部门审批
C. 涉密计算机重装操作系统后可降为非涉密计算机使用
D. 未经单位信息管理部门批准不得自行重装操作系统
【多选题】
关于国家秘密的保密期限，下列说法正确的是___
A. 国家秘密的保密期限，除另有规定外，绝密级不超过四十年，机密级不超过三十年，秘密级不超过二十年
B. 机关单位应当根据工作的需要，确定具体的保密期限、解密时间或者解密条件
C. 机关单位对工作中需要保密的事项，根据工作需要决定公开的，正式公布时即视为解密
D. 不能确定期限的国家秘密，应当确定解密的条件
【多选题】
下列说法正确的是___
A. 国家秘密载体的制作、收发、传递、使用、复制、保存、维修和销毁，应当符合国家保密规定
B. 绝密级国家秘密载体应当在符合国家保密标准的设施、设备中保存，并指定专人管理
C. 经原定密机关、单位或上级机关批准，可以复制和摘抄
D. 收发、传递和携带外出，应当指定人员负责，并采取必要的安全措施
【多选题】
关于涉密信息系统，下列说法正确的是___
A. 存储、处理国家秘密的计算机信息系统应按照涉密程度实现分级保护
B. 涉密信息系统应当按照国家保密标准配备保密设施、设备
C. 相关保密设备的采购，应当提前与厂商预约或定制
D. 涉密信息系统应当按照规定，经检查合格后，方可投入使用
【多选题】
关于涉密人员管理，下列说法正确的是___
A. 涉密人员应当具备良好的政治素质和品行，具有胜任涉密岗位所要求的能力
B. 有关机关认为涉密人员出境将对国家安全造成危害或者对国家利益造成重大损失的，不得批准出境
C. 涉密人员在脱密期内，应当履行保密义务，不得违反规定就业，不得以任何方式泄露国家机密
D. 涉密人员的合法权益受法律保护
【多选题】
关于涉密人员脱密期，下列说法正确的是___
A. 涉密人员脱密期自当事人向机关、单位提交离岗申请之日起计算
B. 核心涉密人员的脱密期为5年至8年
C. 对特殊的高知密人员，可以依法设定超过规定期限的脱密期
D. 脱密期内，不得到境外驻华机构、组织或者外资企业工作
【多选题】
涉密人员需报告的重大事项有___
A. 与境外人员结婚的
B. 接受境外亲属人员资助的
C. 配偶子女获得境外永久居留资格或者获得外国国籍的
D. 购买境外企业股份及有价债券的
