从决定参加安全笔试到考试一共4天时间,感觉基本够用了,现在的提比较稳定:141Q+6额外题全涵盖了我这次的所有考题。感谢之前的考友提供的各种信息,我在这里做个总结造福之后的考友:& e& i9 R, |& w8 z, C: G9 K
* s/ e" j, P' O: O+ j9 @' h0 c! B7 h6额外题:
$ d9 E) i' F( b' e' r5 \0 e
5 z& K n, \( |# \( X8 K) Z0 x) o9 f1, CoA Under Cisco IOS Software, which three features are supported in RADIUS Change of Authorization requests? (Choose three.) | | B. session reauthentication | |
SessionIdentification 2,Which two statements about Cisco ASAauthentication using LDAP are true? (Choose two.)' r' e9 Q- V4 b( _/ C
0 V" H& _# L6 R$ ]& l
3 L u: b& {; c$ H, GA. It uses attribute maps to map the AD memberOf attribute to the cisco ASA Group-Poilcy attribute- O, M0 F*i" s1 j e; ~8 T, P; P, e# l6 b6 q* L
B. It uses AD attribute maps to assign users togroup policies configured under the WebVPN context4 Z( t5 W6u% b) e- s/ W0 x* }' j
8 H* x3 `8 E; T5 `( h1 `' @C. The Cisco ASA can use more than one AD memberOf attribute to match a user to multiple group policies' V# u6 v1 I: ^
D. It can assign a group policy to a user basedon access credentials" D' Y4 p9 k8 ^# G1 `
% d5 ]+ G2 ]( P9 W! g6 p: j; ^2 LE. It can combine AD attributes and LDPattributes to configure group policies on the Cisco ASA2 K. n. z:H6 T- n0 w9 p4 C* r3 d9 y" l7 B! P/ U1 S* S- [. b8 O! z
F. It is a closed standard that managesdirectory-information services over distributed networks& W!K! t, {7 Z/ K
/ Z) N# F# ^ f i& q9 r# b9 ?+ _1 ~5 [1 ~' C3 z
Answer: A, B. W! \6 W" \+ l. X7 b3 V
9 Y1 G& I- n. b4 q; H# _( z, z% G7 [+ v, U! N0 o K
9 \: }3 n1 q+ a2 }3,Whichthree statements about the keying methods used by MAC Sec are true? (Choosethree.)
) [) n; b! a! d& ~3 F& p4 J: I& [& W; |3 T$ t
A. MKA is implemented as an EAPoL packetexchange.
7 F5 Q/ X7 [) k* d8 u% |; XB. SAP is enabled by default for Cisco TrustSecin manual configuration mode.* W E1 p4 L7y ?* s0 R
. n+ \# a6 A( x3 B# P: S: Y0 n% JC. SAP is supported on SPAN destination ports. q5 K4 P5 K/ m7 A; t" A) I
D. Key management for host-to-switch andswitch-to-switch MACSec sessions is provided by MKA.' J6 k]w p, X] p9 F6 D4 Z. E/ j. |/ r+ o1 u0 e! C* |+ [
E. SAP is not supported on switch SVIs.- K; _]u Z7 ?, N
8 {. V, {4 z0 u: t" GF. A valid mode for SAP is NULL.
. d/ A/ y3 X1 B% X9 d* r, w# b% Z7 g; L" T! X, P+ a
5 W; g3 z$ V% o& {/ [Answer: A, E, F 4,其中问哪个是stream cipher的直接选RC4. 5,BGP的题目是BGP for TTL Security Check是干什么用的—单选 选含有for CPU utilization-based attacks的选项. 6, file:////Users/lexin/Library/Group%20Containers/UBF8T346G9.Office/msoclip1/01/clip_image002.png 7 |$ Z) g. |* c
至于141题库的准确性: 0 K5 r0 G/ w# {1 S" v* y A* K8 t+ c Y8 Y
有争议的题目我有3个:
: R2 h1 _' {! t$ S%R, l j! K+ r2 X
- @6 ?# o; U! t) {7 i101, AEF, 5 Ghz, WPA加密,wep加密都是错的,选剩下的。2 g% C3 t' S$ T, F( ~
5 f6 V9 Z. W0 \& l H; v105,有人提到过,MSE和wIPSMonitor Mode是反的。 p#g8 h# ^$ q& x5 w: _# ]8 Y, a9 n" P
135, 选B和Da view is created.)Z1
$ ]/ B/ B5 J8 e& E
其他的我个人觉得应该没什么问题,目前题目稳定,考位也很多,有需要的考友尽快吧 8 Z0 E8 d! S! @' |9 {6 S
|