單項選擇題What is the recommended practice when considering VPN termination and firewall placement？（）

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall， with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall， with the VPN terminating outside the firewall


您可能感興趣的試卷

你可能感興趣的試題

1.單項選擇題When a router has to make a rate transition from LAN to WAN， what type of congestion needs should be considered in the network design？（）

A. RX-queue deferred
B. TX-queue deferred
C. RX-queue saturation
D. TX-queue saturation
E. RX-queue starvation
F. TX-queue starvation

2.多項選擇題

Which two practices will avoid Cisco Express Forwarding polarization？（）

A. The core layer should use default Layer 3 hash information.
B. The core layer should use default Layer 4 hash information.
C. The distribution layer should use default Layer 3 hash information.
D. The distribution layer should use default Layer 4 hash information.
E. The core layer should use Layer 3 and Layer 4 information as input to the Cisco Expressing Forwarding hashing algorithm.
F. The distribution layer should use Layer 3 and Layer 4 information as input into the Cisco Expressing Forwarding hashing algorithm.

3.單項選擇題What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode？（）

A. RADIUS or LDAP
B. an internal router running EIGRP
C. Reverse Route Injection and OSPF or RIPv2
D. the VPN appliance to be deployed in line with the firewall

4.多項選擇題Which two of these are advantages of placing the VPN device parallel to the firewall？（）

A. high scalability
B. the design supports a layered security model
C. firewall addressing does not need to change
D. IPsec decrypted traffic is inspected by the firewall
E. there is a centralized point for logging and content inspection

5.多項選擇題Under which two circumstances should Spanning Tree Protocol be implemented？ （）

A. to ensure a loop-free topology
B. to protect against user-side loops
C. when a VLAN spans access layer switches
D. for the most deterministic and highly available network topology
E. because of the risk of lost connectivity without Spanning Tree Protocol