What are two security features of the Cisco Secure Router 500 Series？ （）

A .  reports financial losses from attacks B .  providessecutiy command and control C .  provides VPN connectivity to clients D .  expedites reporting of incidents E .  manage rogue wireless signal

A . Store the VHD files on a dedicated NTFS volume B . Store unencrypted VHD files on a volume that uses Windows BitLocker drive encryption C . Encrypt the VHD files by using EFS on a volume that uses Windows BitLocker drive encryption D . Encrypt the VHD files by using EFS on a volume that does not use Windows BitLocker drive encryptio

A . Perform a One-step lockdown on the Router B . Perform a Virus Scan C . Perform a Secure audit on the Router D . Perform a Denial Of Service attack on the Router to verify that it is protected E . Perform a real-time inspection of incoming traffic destined for the router

A . displays a screen with Fix-it check boxes to let you choose which potential security-related configuration changes to implement B . has two modes of operationinteractive and non-interactive C . automatically enables Cisco IOS firewall and Cisco IOS IPS to secure the router D . uses interactive dialogs and prompts to implement role-based CLI E . requires users to first identify which router interfaces connect to the inside network and which connectto the outside network

A . The network administrator can apply port security to dynamic access ports B . The network administrator can configure static secure or sticky secure mac addresses in the voice vlan. C . The sticky learning feature allows the addition of dynamically learned addresses to the running configuration. D . The network administrator can apply port security to EtherChannels. E . When dynamic mac address learning is enabled on an interface,the switch can learn new addresses,up to the maximum defined.

A . It can be invoked only from the doGet or doPost methods. B . It can be used independently of the getRemoteUser method. C . Can return "true" even when its argument is NOT defined as a valid role name in the deployment descriptor. D . Using the isUserInRole method overrides any declarative authentication related to the method in which it is invoked.

A . Use SSH to encrypt content as it is transferred to the Web server on the perimeter network B . Install the Microsoft FrontPage Server Extensions， and use FrontPage to update content C . Use Web Distributed Authoring and Versioning （WebDAV） over and SSL connection to the Web server to update content D . Use FTP over an IPSec connection to transfer content to the Web server E . Use Telnet to connect to the Web server， and then perform content changes directly on the server

A . ATM B . IDS C . IOS D . IOX E . IPS F . SDM

A . Allow unrestricted access to the console or VTY ports B . Use a firewall to restrict access from the outside to the network devices C . Always use Telnet to access the device command line because its data is automatically encrypted D . Use SSH or another encrypted and authenticated transport to access device configurations E . Prevent the loss of passwords by disabling password encryptio

A . A TACACS+ server is required to implement 802.1x. B . MIC protects against man-in-the-middle and replay attacks. C . The 802.1x standard provides encryption services for wireless clients. D . The AES （symmetric block cipher） is specified in the IEEE 802.11i specification. E . The IEEE 802.11i specification uses RC4 as its encryption mechanism. F . WPA requires TKIP and AES as encryption methods.

A . the use of hosted email services eliminating the need for local security B . the perceived costs of security solutions C . the lack of risk analysis D . the lack of threats to their network E . the belief that free security tools are sufficient F . the desire to avoid unnecessary technologie

A .  Smaller companies are at less risk than larger enterprises， so their security needs are not as great. B .  Business strategy should directly relate to the security policy and budget. C .  The designated security expert should report to the IT department， since that is where thesolution will be implemented. D .  Security should be a continuous process. E .  Security solutions should come from multiple vendors to make it easier to coordinate security events from the point of origin.

A . Store the VHD files on a dedicated NTFS volume B . Store unencrypted VHD files on a volume that uses Windows BitLocker drive encryption C . Encrypt the VHD files by using EFS on a volume that uses Windows BitLocker drive encryption D . Encrypt the VHD files by using EFS on a volume that does not use Windows BitLocker drive encryptio

A . ATM B . IDS C . IOS D . IOX E . IPS F . SDM

A . Allow unrestricted access to the console or VTY ports. B . Use a firewall to restrict access from the outside to the network devices. C . Always use Telnet to access the device command line because its data is automatically encrypted. D . Use SSH or another encrypted and authenticated transport to access device configurations. E . Prevent the loss of passwords by disabling password encryption.&e

A .  Cisco Intrusion Prevention System B .  higher bandwidth C .  virtual private networks D .  access control lists E .  URL filtering

A . Require the internal Web developers to use Telnet with Kerberos authentication. Require the consultants to use L2TP with IPSec B . Require the internal Web developers to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV）. Require the consultants to use Microsoft.NET Passport authentication with Security Level 0 C . Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use WebDAV over SSL D . Require the internal Web developers to use L2TP with IPSec. Require the consultants to use Encrypting File System （EFS） over Web Distributed Authoring and Versioning （WebDAV） E . Require the internal Web developers to use Web Distributed Authoring and Versioning （WebDAV） over SSL.Require the consultants to use L2TP with IPSec

A . It should be implemented in a management VLAN. B . Its connection to managed devices should be over a data VLAN. C . It is made up of Cisco Security MARS and Clean Access software. D . It should be deployed as close to the edge of the network as possible. E . It delivers policy administration and enforcement for the Cisco Self-Defending Network.

A . tie rods B . through bolts C . lead wires D . bearing ca

A .  It should be implemented in a management VLAN. B .  Its connection to managed devices should be over a data VLAN. C .  It is made up of Cisco Security MARS and Clean Access software. D .  It should be deployed as close to the edge of the network as possible. E .  It delivers policy administration and enforcement for the Cisco Self-Defending Network.

A . detailed VLAN information B . an incident response plan C . results of testing the new network configuration D . an existing hierarchical network topology E . a security policy for your organizatio

A .  security contexts B . - transparent firewall C .  WebVPN D .  Active/Active failover E .  low latency queuing F .  AIP-SSM intrusion preventio