Firewall is a _______ mechanism used by organizations to protect their LANs from the Internet．A．reliableB．stableC．peacefulD．SecurityA．B．C．D．

第1题：

第2题：

第3题：

第4题：

第5题：

第6题：

You have a firewall filter containing two terms applied in an inbound direction on a customer interface.You would like this filter to protect your network from a spoofed denial of service attack. Which match criterion should be configured ito identify unwanted packets?（）

• A、from source-port
• B、from source-address
• C、from destination-address
• D、from destination-port

正确答案:B

第7题：

Which two statements are true about the Cisco Classic （CBAC） IOS Firewall set？（）

• A、It can be used to block bulk encryption attacks
• B、It can be used to protect against denial of service attacks
• C、Traffic originating from the router is considered trusted， so it is not inspected
• D、Based upon the custom firewall rules， an ACL entry is statically created and added to theexisting ACL permanently
• E、Temporary ACL entries that allow selected traffic to pass are created and persist for theduration of the communication session

正确答案:B,E

第8题：

While performing a site survey to document the existing environment before implementing a new HACMP cluster， it was discovered that a port filtering firewall was being used to protect the production system. The plan is to continue using the firewall and add a second firewall to avoid a single point of failure. Each node in the two-node cluster will have all of its network adapters connected to the firewalls， and all connections to the nodes will pass through these firewalls.  What must be considered about HACMP in a firewall environment？（）  

• A、 Firewalls are not supported in a HACMP environment.
• B、 HACMP uses only TCP/IP so firewalls are not relevant.
• C、 Specific ports must be open for HACMP communications.
• D、 Dynamic routing must be used to properly route packets in a firewall-protected environment.

正确答案:C

第9题：

You have a firewall filter containing two terms applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. What match criterion should be used in the first term of the filter？（）

• A、Source TCP port
• B、Source IP address
• C、Destination TCP port
• D、Destination IP address

正确答案:B

第10题：

第11题：

第12题：

第13题：

第14题：

第15题：

第16题：

第17题：

Which three techniques should be used to secure management protocols？（）

• A、Configure SNMP with only read-only community strings.
• B、Encrypt TFTP and syslog traffic in an IPSec tunnel.
• C、Implement RFC 3704 filtering at the perimeter router when allowing syslog access from devices on the outside of a firewall.
• D、Synchronize the NTP master clock with an Internet atomic clock.
• E、Use SNMP version 2.
• F、Use TFTP version 3 or above because these versions support a cryptographic authentication mechanism between peers.

正确答案:A,B,C

第18题：

What are three applications for firewall filters in JUNOS software？（）

• A、route filtering
• B、protect the routing engine
• C、securing the router control plane
• D、protect against hidden bridge loops
• E、protect against denial of service attacks

正确答案:B,C,E

第19题：

Which of the following is the BEST reason to implement a firewall on a server？（）

• A、To watch for bandwidth issues
• B、To protect the server from all traffic
• C、To block certain traffic by ports
• D、To monitor certain malicious traffic

正确答案:C

第20题：

You have a firewall filter applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. Which action should be configured to accomplish your goal?（）

• A、then reject
• B、then discard
• C、then next filter
• D、then silent-drop

正确答案:B

第21题：

Which two features protect the ERX Edge Router from denial-of-service attacks? （）(Choose two.)

• A、rate limiting of ICMP
• B、RADIUS authorizations
• C、source address validation
• D、stateful firewall on the router

正确答案:A,C

第22题：

第23题：