What is the recommended practice when considering VPN termination and firewall placement?()A. have the firewall and VPN appliance deployed in parallelB. place the VPN in line with the firewall, with the VPN terminating inside the firewallC. place the publ

题目
What is the recommended practice when considering VPN termination and firewall placement?()

A. have the firewall and VPN appliance deployed in parallel

B. place the VPN in line with the firewall, with the VPN terminating inside the firewall

C. place the public side of the VPN termination device in the DMZ behind a firewall

D. place the VPN in line with the firewall, with the VPN terminating outside the firewall

相似考题

1.As an experienced technician, you are responsible for Technical Support. One of the trainees is asking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend?（）A. inline with a firewallB. in a DMZ outside the firewallC. parallel with a firewallD. in a DMZ behind the firewall

2.What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode？（）A、 RADIUS or LDAPB、 an internal router running EIGRPC、 Reverse Route Injection and OSPF or RIPv2D、 the VPN appliance to be deployed in line with the firewall

3.When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）A、 It is recommended to place the VPN termination device in line with the Enterprise Edge 1B、 Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deploymentC、 VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in placeD、 Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7

4.Refer to the exhibit. When deploying an MSFC and an FWSM, which statement is correct?()A. Proper placement depends on the VLAN assignment.B. Place it outside the firewall.C. Place it inside the firewall to make design and management easier.D. Place it inside the firewall with multiple context modes connecting to all configured contexts.

更多“What is the recommended practice when considering VPN termination and firewall placement?() ”相关问题

  • 第1题：

    The VPN termination function provides the ability to connect two networks together securely over the internet. Which of these is true of IP addressing with regard to VPN termination?（）

    • A、termination devices need routable addresses inside the VPN
    • B、termination devices need not routable addresses inside the VPN
    • C、IGP routing protocols will update their routing tables over anIPsec VPN
    • D、addressing designs need to allow for summarization

    正确答案:D

  • 第2题：

    Your company has a single active directory domain. The company network is protected by a firewall. Remote users connect to your network through a VPN server by using PPTP. When the users try to connect to the VPN server， they receive the following error message： Error 721： The remote computer is not responding. You need to ensure that users can establish a VPN connection. What should you do？ （）

    • A、Open port 1423 on the firewall
    • B、Open port 1723 on the firewall
    • C、Open port 3389 on the firewall
    • D、Open port 6000 on the firewall

    正确答案:B

  • 第3题：

    What is the recommended practice when considering VPN termination and firewall placement？（）

    • A、 have the firewall and VPN appliance deployed in parallel
    • B、 place the VPN in line with the firewall， with the VPN terminating inside the firewall
    • C、 place the public side of the VPN termination device in the DMZ behind a firewall
    • D、 place the VPN in line with the firewall， with the VPN terminating outside the firewall

    正确答案:C

  • 第4题：

    As an experienced technician， you are responsible for Technical Support. One of the trainees isasking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend？（）

    • A、 inline with a firewall
    • B、 in a DMZ outside the firewall
    • C、 parallel with a firewall
    • D、 in a DMZ behind the firewall

    正确答案:D

  • 第5题：

    Your company has a single Active Directory domain. The company network is protected by a firewall.Remote users connect to your network through a VPN server by using PPTP.When the users try to connect to the VPN server, they receive the following error message :Error 721:The remote computer is not responding.You need to ensure that users can establish a VPN connection.What should you do？（）

    • A、Open port 1423 on the firewall.
    • B、Open port 1723 on the firewall.
    • C、Open port 3389 on the firewall.
    • D、Open port 6000 on the firewall.

    正确答案:B

  • 第6题：

    单选题
    As an experienced technician， you are responsible for Technical Support. One of the trainees isasking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend？（）
    A

     inline with a firewall

    B

     in a DMZ outside the firewall

    C

     parallel with a firewall

    D

     in a DMZ behind the firewall


    正确答案： A
    解析： 暂无解析

  • 第7题：

    问答题
    Practice 4　　A: What is important when...?　　Choosing a conference center　　●Facilities　　●Accommodations　　●Location　　B: What is important when...?　　Selecting an employee　　●Qualification　　●Personality　　● Creativity

    正确答案： 【参考范例】
    If you choose A:
    When choosing a conference center, it is of vital importance to consider the facilities, since facility available is the hardware component of a conference center. If the facility is in condition,, our work won’t be held up.
    Moreover, accommodation is another important matter. As a complex building, a conference center should cater to daily necessities, providing the guests with satisfactory food and bedrooms, which would leave them a pleasant recollection.
    At the same time, location is a decisive factor for business. For a conference center, company-intensive downtown area would be an ideal choice. However, there’s also a trend of moving towards tranquil suburbs.
    If you choose B:
    When selecting an employee, we should check on his or her qualification first. Certificates and diplomas can be referred to, since they reflect the extent to which the candidate receives education. However, they do not necessarily stand for a candidate’s qualification. We’ve met with too many incompetent holders of advanced degrees in real life. It is unrealistic to depend on them to make a profit for the company. On the contrary, interviewees with practical experience would bring in more benefits for the company.
    The second factor is the personality of the candidate. Everyone has a unique personality, which is a welcome phenomenon. However, a group of staff with similar personalities will meet with far less internal conflicts. Yet, there’s also a problem to worry about, since this unit might become a stagnantworking place where there is no room for vitality in the long run. Therefore, what is needed is a balance.
    Moreover, we should attach great importance to an employee’s creativity. Mediocreyesmanwho is accustomed to echoing the views of others clearly belongs to redundantlabourer. The employee is expected to have innovative ideas and be creative.
    解析： 暂无解析

  • 第8题：

    单选题
    You deploy Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack. The firewall is configured to allow only secured web communications. You need to enable remote users to connect as securely as possible. you must achieve this goal without opening any additional ports on the firewall.  What should you do （　）？
    A

    Create an IPsec tunnel

    B

    Create an SSTP VPN connection

    C

    Create a PPTP VPN connection

    D

    Create an L2TP VPN connection


    正确答案： D
    解析： 暂无解析

  • 第9题：

    单选题
    When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）
    A

     It is recommended to place the VPN termination device in line with the Enterprise Edge 1

    B

     Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment

    C

     VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place

    D

     Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7


    正确答案： D
    解析： 暂无解析

  • 第10题：

    单选题
    What is the recommended practice when considering VPN termination and firewall placement？（）
    A

     have the firewall and VPN appliance deployed in parallel

    B

     place the VPN in line with the firewall， with the VPN terminating inside the firewall

    C

     place the public side of the VPN termination device in the DMZ behind a firewall

    D

     place the VPN in line with the firewall， with the VPN terminating outside the firewall


    正确答案： A
    解析： 暂无解析

  • 第11题：

    When using IPAT via Aliasing， what is the default distribution preference for the placement of the service IPlabels？（）

    • A、Collocation
    • B、Anti-Collocation
    • C、Collocation with persistent
    • D、Anti-Collocation with persistent

    正确答案:B

  • 第12题：

    What is the recommended practice regarding UDLD when implementing it in all fiber-optic LANports？（）

    • A、 Adjust the default hello timers to three seconds for aggressive mode
    • B、 Enable it in global mode and on every interface you need to support
    • C、 Enable it in global mode to support every individual fiber-optic interface
    • D、 Enable it to create channels containing up to eight parallel links between switches

    正确答案:C

  • 第13题：

    As a network technician， do you know what is a recommended practice for secure configurationmanagement？（）

    • A、Disable post scan
    • B、Use SSH or SSL
    • C、Enable trust levels
    • D、Deny echo replies on all edge routers

    正确答案:B

  • 第14题：

    You are designing a strategy to allow users to gain VPN access to the internal network.  What should you do？（）

    • A、 Allow all inbound VPN traffic to pass through the internal firewall and the perimeter firewall.
    • B、 Allow all inbound VPN traffic to pass through the perimeter firewall only.
    • C、 Allow all VPN traffic from the source IP address of 131.107.1.14 to pass through the internal firewall.
    • D、 Allow all VPN traffic from the source IP address of 191.168.1.0/24 to pass through the perimeter firewall.

    正确答案:B

  • 第15题：

    单选题
    As an experienced technician, you are responsible for Technical Support. One of the trainees is asking your advice on VPN Termination Device and Firewall Placement. Which of the following approaches will you recommend?（）
    A

    inline with a firewall

    B

    in a DMZ outside the firewall

    C

    parallel with a firewall

    D

    in a DMZ behind the firewall


    正确答案： A
    解析： 暂无解析

  • 第16题：

    单选题
    What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode？（）
    A

     RADIUS or LDAP

    B

     an internal router running EIGRP

    C

     Reverse Route Injection and OSPF or RIPv2

    D

     the VPN appliance to be deployed in line with the firewall


    正确答案： A
    解析： 暂无解析

  • 第17题：

    问答题
    Practice 7　　A: What is important when...?　　Maintaining customer interest in a company’s products　　●Quality goods　　● Excellent after-sales service　　●Feedback　　B: What is important when...?　　Considering transport management　　●Timing　　●Cost

    正确答案： 【参考范例】
    If you choose A:
    As everyone knows, it is of great importance for a company to maintain customer interest in their products, which can help the company keep the sales increasing. I think a company should make every effort to retain its current customers. First, it should always confirm that it provides its customers with quality goods and good after-sales services. Second, it should place enough emphasis on the feedback from its current customers and take prompt action to meet their needs and demands. Third, if possible, some incentives to its old customers should be provided to maintain this part of customers. All in all, a company should try every possible way to keep its current customers who are satisfied with its products and services, and meanwhile it should stay ahead of the market.
    If you choose B:
    Any distribution of products from producers to whole-salers or from wholesalers to retailers requires transportation. Sometimes, the cost of transporting some products can outnumber the cost of producing them. Therefore, an efficient form of transportation can give rise to lower costs and higher profits for the company. For each form of transportation, timing, cost, and availability should be estimated. This assessment permits the company to choose an optimal method of transportation. The most common forms of transportation used to distribute are truck, rail, air, water, pipeline.
    解析： 暂无解析

  • 第18题：

    单选题
    You deploy a Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack.  The firewall is configured to allow only secured Web communications. You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall.What should you do？（）
    A

    Create an IPsec tunnel.

    B

    Create an SSTP VPN connection.

    C

    Create a PPTP VPN connection.

    D

    Create an L2TP VPN connection.


    正确答案： B
    解析： 暂无解析

  • 第19题：

    单选题
    What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?（）
    A

    RADIUS or LDAP

    B

    an internal router running EIGRP

    C

    Reverse Route Injection and OSPF or RIPv2

    D

    the VPN appliance to be deployed in line with the firewall


    正确答案： D
    解析： 暂无解析

  • 第20题：

    单选题
    You are designing a strategy to allow users to gain VPN access to the internal network.  What should you do？（）
    A

     Allow all inbound VPN traffic to pass through the internal firewall and the perimeter firewall.

    B

     Allow all inbound VPN traffic to pass through the perimeter firewall only.

    C

     Allow all VPN traffic from the source IP address of 131.107.1.14 to pass through the internal firewall.

    D

     Allow all VPN traffic from the source IP address of 191.168.1.0/24 to pass through the perimeter firewall.


    正确答案： B
    解析： 暂无解析

相关内容