|
|
题型除了选择 有托图 有sim实验
65道题 90分钟
实验题不难做nat 转换 但是按照题库的做法 按现实情况 做不出效果，有人说是版本原因，asa8.3 以下可以，我用的eve-ng 8.4版本的asa
题目要求 外网http 连接到dmz web服务器， 还有高安全级别区域可以ping通 低安全级别的设备
STATIC NAT Translated IP = 209.165.201.30 DMZ->OUTSIDE
For ACL
ACL = Outside
IP address is real_ip_address = 172.16.1.2
可以实现，但是考试当中两种方法我都试过了，外网到dmz 服务器 根本没法打开，为了保险最后还是选择了保守的题库做法，我觉得失分在这里，应该用
自己的做法。别浪费时间在这上面，很多人反馈都测不出效果，我觉得这道题的目的就是不想让大家测试，无非就这么两种情况 私网转换 或者公网转换
题库做法 见我分享的 dumps 还有一个dumps 太大超过30M 实在没法
这个论坛关于安全讨论太少了 给大家推荐个论坛 不知道国内朋友需不需要翻墙
http://www.securitytut.com/ccna-security-210-260/share-your-ccna-security-experience-2
里面有最新题目的反馈 还会讨论很多有争议的题目 有些人会分享dumps 在dropbox 里, gooledrive 里大都是广告，个人感觉这个论坛比一些题库靠谱
你总会发现不同网站的题库有些答案也不一样，有些题库更新并不及时。
最后给大家分享dumps 最近更新 9月份，考前还是要看论坛反馈就像这里一样
还有一些是有争议的题 总结了 确定最后答案
UESTION 87
If a router configuration includes the line aaa authentication login default group tacacs+ enable, which events will occur when the TACACS+ server returns an
error? (Choose two.)
A. The user will be prompted to authenticate using the enable password
B. Authentication attempts to the router will be denied
C. Authentication will use the router`s local database
D. Authentication attempts will be sent to the TACACS+ server
Correct Answer: AD
QUESTION 111
Which accounting notices are used to send a failed authentication attempt record to a AAA server? (Choose two.)
A. start-stop
B. stop-record
C. stop-only
D. stop
Correct Answer: AC
drag drop question #1 answer is
put the following in legacy (3des,sha-1,HMAC-MD5)
drag drop question #2 answer is
put the following in insecure (des,md5)
put the follwoing in secure (3des,sha-1,hmac-md5)
What command can you use to verify the binding table status?
A. show ip dhcp snooping statistics
B. show ip dhcp snooping database
C. show ip dhcp snooping binding
D. show ip dhcp pool
E. show ip dhcp snooping
F. show ip dhcp source binding
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
Explanation:
"show ip dhcp snooping binding" shows the contents of the binding table, but the summary or overall
status is shown by "show ip dhcp snooping database".
QUESTION 180
Which three statements are characteristics of DHCP Spoofing? (Choose three.)
A. Arp Poisoning
B. Modify Traffic in transit
C. Used to perform man-in-the-middle attack
D. Physically modify the network gateway
E. Protect the identity of the attacker by masking the DHCP address
F. Can access most network devices
Correct Answer: ABC
QUESTION 256
Which two functions can SIEM provide? (Choose Two)
A. Correlation between logs and events from multiple systems.
B. event aggregation that allows for reduced log storage requirements.
C. proactive malware analysis to block malicious traffic.
D. dual-factor authentication.
E. centralized firewall management.
Correct Answer: AB
QUESTION 269
What information does the key length provide in an encryption algorithm?
A. the packet size
B. the number of permutations
C. the hash block size
D. the cipher block size
Correct Answer: B
QUESTION 214
What does the key length represent
A. Hash block size
B. Cipher block size
C. Number of permutations
Correct Answer: C
What data is transferred during DH for making public and private key?
A. Random prime integer (CORRECT)
B. Encrypted data transfer
C. Diffie-Hellman
QUESTION 259
which Firepower Management Center feature detects and blocks exploits and hack attempts
A. content blocker
B. AMP - Advance Malware Protection
C. file control
D. intrusion prevention
Correct Answer: B
What is the primary purpose of the Integrated Services Routers (ISR) in the BYOD solution?
A. Provide connectivity in the home office environment back to the corporate campus
B. Provide WAN and Internet access for users on the corporate campus
C. Enforce firewall-type filtering in the data center
D. Provide connectivity for the mobile phone environment back to the corporate campus
Answer: A
Which is not a function of mobile device management (MDM)?
A. Enforce strong passwords on BYOD devices
B. Deploy software updates to BYOD devices
C. Remotely wipe data from BYOD devices
D. Enforce data encryption requirements on BYOD devices
Correct Answer: B
Which is not an advantage of an On-Premise MDM solution?
A. Higher level of control over the BYOD solution
B. Ease of deployment and operation of the BYOD solution
C. Ability to meet regulatory requirements
D. Security of the overall BYOD solution
Correct Answer: B
The purpose of the certificate authority (CA) is to ensure what?
A. BYOD endpoints are posture checked
B. BYOD endpoints belong to the organization
C. BYOD endpoints have no malware installed
D. BYOD users exist in the corporate LDAP directory
Correct Answer: B
What are the challenges faced when deploying host based IPS?
A. Must support multi operating systems
B. Does not have full network picture
C. ?
D. ?
Correct Answer: AB
NAT 实验 反馈 节选
FIRST IP= 209.165.201.30
STATIC NAT TRANSLATED IP =172.16.1.2
ACL =OUTSIDE
IP 209.165.201.30
I’ve watched the videos of Keith Barker from CCNP security regarding NAT and ACLs. Based on the video for NAT it should be like this:
***************************************************************
IP address = 172.16.1.2
STATIC NAT Translated IP = 209.165.201.30 DMZ->OUTSIDE
For ACL
ACL = Outside
IP address is real_ip_address = 172.16.1.2
****************************************************************
FIRST IP= 209.165.201.30
STATIC NAT TRANSLATED IP =172.16.1.2
ACL =OUTSIDE
IP 209.165.201.30
************************************
Step 1: Firewall, Configuration, NAT Rules, Name=WebSvr, IP version IPv4, IP address=172.16.1.2 Static NAT=209.165.201.30
Step 2: Firewall, Config, Access Rules, Interface=Outside, Action=Permit, Source=any, Destination=209.165.201.30, Service=tcp/http
Step 3: Firewall, Config, Service policy Rules, Click Global Policy and edit, Rule Action tab, Click ICMP and apply
Step 4: Ping www.cisco.com from Inside PC
Step 5: Type http://209.165.201.30 in web browser in the Outside PC
I translated the private address to public, and clicked on advanced settings and set it DMZ to Outside,then ACL permit outside any to DMZ server address.And it worked %100. （这个我考试时也试过 没出效果）
Question about MDM deployment models (choose two).
Correct Answer:
a) On-premise Correct
b) Cloud-based Correct
|
|
简体中文
英语
日语
韩语
法语
西班牙语
越南语
泰语
阿拉伯语
俄语
葡萄牙语
德语
意大利语
希腊语
荷兰语
波兰语
保加利亚语
爱沙尼亚语
丹麦语
芬兰语
捷克语
罗马尼亚语
斯洛文尼亚语
瑞典语
匈牙利语
繁体中文
文言文
发表于 2017-12-15 12:13:00
置顶卡
喧嚣卡
变色卡
千斤顶
楼主
成长值: 36070
