Cisco Security Solutions for Systems Engineers - 642-584무료 덤프문제 풀어보기

A. A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.

B. Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.

C. Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.

D. The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.

A. Detection of behavioral anomalies

B. Detection of protocol anomalies

C. Attack obfuscation

D. Forensic capturing

E. VPN termination

F. Flexible content filtering

A. SSL site-to-site VPN

B. SSL remote access VPN

C. IPsec site-to-site VPN

D. IPsec remote access VPN

A. VLAN attacks

B. IP source routing

C. DHCP-based IP redirection attacks

D. MAC address floods

E. Spanning-tree attacks

A. It supports session persistence after hibernation or standby.

B. It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a Round-robin fashion.

C. The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.

D. Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.

E. It is exclusively configured by central policies; no local configuration is possible.