【单选题】
You have implemented a dynamic blacklist， using security intelligence to block illicit network activity. However， the blacklist contains several approved connections that users must access for usiness pur poses. Which action can you take to retain the blacklist while allowing users to access the approve d sites？___
A. Create a whitelist and manually add the approved addresses.
B. Disable the dynamic blacklist and deny the specif ic address on a whitelist while permitting the others
C. Edit the dynamic blacklist to remove the approved addresses
D. Disable the dynamic blacklist and create a static blacklist in its place
查看试卷，进入试卷练习
微信扫一扫，开始刷题
答案
A
解析
暂无解析
相关试题
【单选题】
When connecting to an external resource,you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.1.30. Which option do you implement ?___
A. dynamic source NAT that uses an IP ad dress as a mapped source
B. static destination NAT that uses a subnet as a real de stination
C. dynamic source NAT that uses a range as a mapped source
D. static destination NAT that uses a subnet as a real source
【单选题】
Refer to the exhibit. 【nat（ins，any）dynamic interface】Which ty pe of NaT is configured on a Cisco ASA？___
A. dynamic NAT
B. source identity NAT
C. dynamic PAT
D. identity twice NAT
【单选题】
Which mitigation technology for web-based threats prevents the removal of confidential data from the network？___
A. CTA
B. DCA
C. AMP
D. DLP
【单选题】
Refer to the exhibit. What is the effect of the given configuration？___
A. It establishes the preshared key for the switch
B. It establishes the preshared key for the firewall.
C. It establishes the preshared key for the Cisco ISE appliance
D. It establishes the preshared key for the router.
【多选题】
What are two major considerations when choosing between a SPAN and a TAP when plementing IPS？___
A. the type of analysis the iS will perform
B. the amount of bandwidth available
C. whether RX and TX signals will use separate ports
D. the way in which media errors will be handled
E. the way in which dropped packets will be handled
【多选题】
What are two direct-to-tower methods for redirecting web traffic to Cisco Cloud Web Security？___
A. third-party proxies
B. Cisco Catalyst platforms
C. Cisco NAC Agent
D. hosted PAC files
E. CiSco ISE
【多选题】
Which three descriptions of RADIUS are true？ ___
A. It uses TCP as its transport protocol.
B. Only the password is encrypted
C. It supports multiple transport protocols
D. It uses UDP as its transport protocol
E. It combines authentication and authorization
F. It separates authentication，authorization，and accounting
【多选题】
Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10？___
A. using switchport trunk native vlan 10 command on trunk ports
B. enabling BPDU guard on all access ports
C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
D. applying ACl between VLAN
E. using switchport mode access command on all host ports
F. using switchport nonegotiate command on dynamic desirable ports
【多选题】
What are two features of transparent firewall mode ___
A. It conceals the presence of the firewall from attackers
B. It allows some traffic that is blocked in routed mode
C. It enables the aSA to perform as a router.
D. It acts as a routed hop in the network.
E. It is configured by default
【多选题】
Which two models of A sa tend to be used in a data center？___
A. 5555X
B. 5585X
C. ASA service module
D. 5512X
E. 5540
F. 5520
【多选题】
Which two statements about hardware-based encrption are true？___
A. It is widely accessible
B. It is potentially easier to compromise than software-based encryption. It requires minimal configuration
C. It requires minimal configuration
D. It can be implemented without impacting performance
E. It is highly cost-effective
【多选题】
In which two modes can the Cisco We b Security appliance be de ployed？___
A. as a transparent proxy using the Secure Sockets Layer protocol
B. as a transparent proxy using the Web Cache Communication Protocol
C. explicit proxy mode
D. as a transparent proxy using the Hyper Text Transfer Protocol
E. explicit active mode
【单选题】
24．对于工作环境恶劣、启动频繁的异步电动机，所用热继电器热元件的额定电流可选为电动机额定电流的___倍。
A. 0.95~1.05
B. O.85~0.95
C. 1.05~1.15
D. 1.15~1.50
推荐试题
【单选题】
板桩式地锚，打入地中的方向，可分为垂直锚和斜向锚两种，其受力方向最好与锚桩【】，而且拉力的作用点最好靠近地面，这样受力较好。___
A. 互成45°
B. 互成60°
C. 平行
D. 垂直
【单选题】
私自超过合同约定的容量用电的，除应拆除私增容设备外，属于两部制电价用户，应补交私增设备容量使用月数的基本电费，并承担【】倍私增容量基本电费的违约使用电费。___
A. 2
B. 3
C. 4
D. 5
【单选题】
终端交流采样不得接入电能计量装置二次回路中，而应优先接入【】柜的电压、电流互感器或计量柜中非电能计量用的电压、电流互感器，所接绕组为测量绕组。___
A. 进线
B. 计量
C. 出线
D. 避雷器
【单选题】
对受电点内难以按电价类别分别装设用电计量装置而执行定比电量计费的用户，供电企业【】个月至少对其用电比例或定量核定一次，用户不得拒绝。___
A. 6
B. 12
C. 24
D. 36
【单选题】
某单相居民客户反映，其用电高峰时电压为230V，则该客户的电压【】。___
A. 超下限了
B. 超上限了
C. 超过220V标准电压，所以不合格
D. 符合允许电压偏差要求
【单选题】
按从上到下从左到右的布局，反映【】的图纸为电路图。___
A. 电气设备和配电方式
B. 电气设备和配电线路
C. 电气设备功能关系和配电方式
D. 电气设备相互关系和配电线路
