14. A parameter map is applied inside which of the following?参数图应用在以下哪种特性中?
A.Class map类型映射
B.Service map服务映射
C.Interface接口
D.Policy map策略映射
A B C D
D
15. Which of the following are valid methods for matching traffic with a class map?采用类型图匹配流量时，以下哪些命令是合法的?
A.match-all
B.match-same
C.match-any
D.match-none
A B C D
AC
16. Which of the following are valid inspect policy map actions?以下哪些属于合法的检测型策略图行为?
A.police监控
B.ignore忽I咯
C.inspect检测
D.deny拒绝
A B C D
AC
17. To configure the ZBPFW for management and control plane traffic, which of the following zones is used?配置ZPF保护管理面与控制面流量时采用以下哪种区域?
A.Manage管理区域
B.Self自区域
C.Router路由区域
D.Entity实体区域
A B C D
B
18. Which of the following are supposed AIC protocols? 以下哪些属于AIC支持的协议?
A.AOL Instant Messenger AOL即时通信
B.TFTP普通文件传输协议
C.MGCP媒体网关控制协议
D.H.323
A B C D
AD
19. Which of the following parameter map types is used along with HTTP inspection? HTTP检测使用以下哪种参数图类型?
A.GLOB
B.Shell外壳
C.regex正则表达式
D.inspect检测
A B C D
C
20. What types of security controls are capable of monitoring traffic to detect problems in the network?哪种安全控制机制通过监控流量的行为以发现网络中可能存在的威胁?
A.Intrusion prevention systems(IPS)入侵防御系统(IPS)
B.Protocol analyzers协议分析仪
C.Intrusion detection systems(IDS)入侵防御系统(IDS)
D.Security policy安全策略
A B C D
C
21. What security controls are capable of monitoring traffic to detect and prevent problems in the network?哪种安全控制机制通过监控流量的行为以发现并阻止网络中可能存在的威胁?
A.Intrusion detection systems(IDS)入侵防御系统(IDS)
B.Wireless sniffers无线嗅探器
C.Intrusion prevention systems(IPS)入侵防御系统(IPS)
D.None of these answers are correct以上答案均不正确
A B C D
C
22. The software-based IPS can support which of the same analysis features as the hardware IPS appliances?与硬件IPS设备相比，软件IPS具备前者的哪些分析功能?
A.Some某些功能
B.All全部功能
C.None不具备
D.Most大部分功能
A B C D
D
23. It is highly recommended to deploy all selected signatures initially without putting which type of action in place to permit tuning the sensor for a particular environment to minimize falsepositive and false negative events?强烈建议在初始阶段部署所有签名，但不要为它们设置哪种行为，以便根据不同的环境调节传感器，从而最大程度减少误报和漏报?
A.Remote远程行为
B.Passive被动行为
C.Preventative预防性行为
D.All of these answers are correct以上答案均不正确
A B C D
C
24. What is an indication of confidence in a signature's performance given the environmentin which it is deployed?哪种指标表示给定网络中所部署签名的可信程度?
A.Attack Seventy Rating(ASR)攻击严重性评级(ASR)
B.Signature Fidelity Rating(SFR)签名真实性评级(SFR)
C.Target Value Rating(TVR)目标值评级(TVR)
D.Event Risk Rating(ERR)事件风险评级(ERR)
A B C D
B
25. If a license on a router expires, it will no longer be able to do what after the licenseexpiration date?如果许可过期，路由器将无法使用许可截止日期之后的哪种功能?
A.Apply any signatures created应用任何创建的签名
B.Analyze traffic分析流量
C.Take preventative action when a signature is matched在签名匹配时实施预防性行为
D.None of these answers are correct以上答案均不正确
A B C D
A
26. SDEE uses what kind of communication model for event messages? SDEE采用何种模型处理事件消息?
A.Pull拉模型
B.Push推模型
C.Manual人工模型
D.None of these answers are correct以上答案均不正确
A B C D
A
27. What is one of the common issues found when deploying Cisco IOS Software IPS sensors to accommodate the signature database?部署软件IOS IPS传感器时，哪种情况会导致无法加载签名数据库?
A.Lack of router memory路由器内存不足
B.Insufficient router processor speed路由器CPU性能不足
C.Insufficient interface throughput接口吞吐量不足
D.None of these answers are correct以上答案均不正确
A B C D
A
二、填空题
1. A typical NAT implementation includes a single ______ stub host that requires translation to a(n) ______ network. NAT通常用于将单一一个______末端主机地址转换为______网络地址。
内部 外部
2. Three different types of NAT can be configured: ______, ______, and ______. NAT包括______、______与______等3种类型。
静态 动态 过载
3. ______ has a many-to-one relationship with traffic conversations being differentiated by port number. ______为多对一映射，每个会话被分配给一个指定端口。
过载NAT(PAT)
4. The configuration of ______ requires a local address that will be translated and an external address that will be used in place of this local address on the external network. 配置______时，内部地址被转换为外部地址，后者供外部网络通信使用。
静态NAT
5. With dynamic NAT, the source address(es) is/are identified through the use of a ______. 在动态NAT中，源地址通过______加以标识。
标准IP ACL
6. By default, the translation entry timeout is ______ with dynamic NAT. 默认情况下，动态NAT的转换条目有效期为______。
24小时
7. In a typical NAT configuration，the internal network hosts see the external host address ______. 在典型的NAT配置中，从内部主机的角度观察，外部主机地址______。
不变
8. A firewall is used to enforce an access policy between ______. 防火墙在______之间执行访问策略。
安全域
9. In IOS versions before 15.0.1M, intrazone traffic was ______ by default. 在Cisco IOS软件版本15.0.1M之前，区域内流量默认被______。
允许
10. Traffic policy is applied ______ between zones using zone pairs. 通过使用区域对，流量策略在区域之间是______应用的。
单向
11. Zone pairs can be set up to protect the control and management planes by using the ______. 通过配置______，区域对可以保护控制面与管理面的安全。
系统定义的self zone
12. The PAM feature is used to map ______ onto ______. PAM特性用于将______映射到______。
将非标准端口 公共服务
13. With Layer 3/4 traffic, the class map type is always the ______. 三层/四层流量总是使用______类型映射。
检测类
14. When using the inspect type policy map, the creation of a parameter map is ______. 使用检测型策略映射时，参数映射的创建是______。
可选的
15. If no zone pair is defined, traffic will ______ between zones. 如果没有定义区域对，流量将______在区域之间传输。
不会
16. The URL filter feature provides the ability to ______, ______, or ______ the traffic whose URL matches the configured characteristics. 对于URL与配置条件相互匹配的流量，URL过滤特性可以对其实施______、______或______行为。
通过 丢弃 记录
17. When a signature is matched, the Cisco IOS IPS sensors can ______, ______, or ______.一旦签名匹配，Cisco IOS IPS传感器将采取以下3种措施：______、______或______。
发送告警消息 丢弃违规数据包 重置连接
18. A ______ signature is present in router memory and can be enabled without recompiling the signature database. ______ 签名加载在路由器内存中，无需对签名数据库进行重编译就能启用这种签名。
被禁用
19. SDEE uses a pull mechanism to pull alerts from IPS sensors over a/an ______ connection. SDEE采用拉模型(pull model)经由 ______ 连接将IPS传感器产生的告警信息“拉”出来。
HTTPS
20. The signature update license is configured on the router using the ______ command. 通过命令______为路由器配置签名更新许可。
license install
21. When Cisco SDEE notification is enabled, by default, ______ events can be stored in the local event store. This number can be increased to hold a maximum of ______. 启用Cisco SDEE通告后，本地事件库默认可以保存______个事件，上限为______。
200 1000
22. The ______ command can be used to view the events that are written to the local SDEE event store. 命令______显示了保存在本地SDEE事件库中的事件信息。
show ip sdee alerts
23. The ______ command displays all interfaces on which IPS is enabled. 命令______显示所有启用IPS的接口信息。
show ip ips interfaces
24. The Cisco IOS IPS router can send IPS alerts through ______ and can have the ______ feature enabled at the same time. Cisco IOS IPS路由器具备同时通过______发送IPS告警并启用______的能力。
深色：已答题 浅色：未答题