CCNAS SECURITY FINAL 100% 思科安全课程final答案.docVIP

Take Assessment - CCNAS Final Exam - CCNA Security: Implementing Network Security (Version 1.0) 窗体顶端 Time Remaining: 窗体底端 1 窗体顶端 Which statement describes the operation of the IKE protocol? It uses IPsec to establish the key exchange process. It uses sophisticated hashing algorithms to transmit keys directly across a network. It calculates shared keys based on the exchange of a series of data packets. It uses TCP port 50 to exchange IKE information between the security gateways. 窗体底端 2 窗体顶端 Which statement describes a factor to be considered when configuring a zone-based policy firewall? An interface can belong to multiple zones. The router always filters the traffic between interfaces in the same zone. The CBAC ip inspect command can coexist with ZPF as long as it is used on interfaces that are in the same security zones. A zone must be configured with the zone security global command before it can be used in the zone-member security command. 窗体底端 3 窗体顶端 What are two disadvantages of using network IPS? (Choose two.) Network IPS has a difficult time reconstructing fragmented traffic to determine if an attack was successful. Network IPS is incapable of examining encrypted traffic. Network IPS is operating system-dependent and must be customized for each platform. Network IPS is unable to provide a clear indication of the extent to which the network is being attacked. Network IPS sensors are difficult to deploy when new networks are added. 窗体底端 4 窗体顶端 Which three security services are provided by digital signatures? (Choose three.) authenticates the source authenticates the destination guarantees data has not changed in transit provides nonrepudiation of transactions provides nonrepudiation using HMAC functions provides confidentiality of digitally signed data 窗体底端 5 窗体顶端 Which three statements describe zone-based policy firewall rules that govern int