When implementing best practices for IP Source Address Spoofing and Defeating Denial of Service Attacks with IP SourceAddress Spoofing， what RFC is commonly usedto protect your network？（）

A .  it leverages Java’s built-in serialization B .  it provides a more efficient serialization of the object C .  it allows the object to be shared across applications D .  it allows the object to be shared across programming platform

A . In interface configuration mode, the OSPFv3 area ID combination assigns interfaces to OSPFv3 areas. B . In router configuration mode, the network wildcard area ID combination assigns networks to OSPFv3 areas. C . In interface configuration mode, the IPv6 OSPF process area ID combination assigns interfaces to OSPFv3 areas. D . In router configuration mode, the IPv6 OSPF interface area ID combination assigns interfaces to OSPFv3 areas.

A . only the low-order 23 bits of the MAC address are used to map IP addresses B . only the low-order 24 bits of the MAC address are used to map IP addresses C . only the high-order 23 bits of the MAC address are used to map IP addresses D . only the low-order 23 bits of the IP address are used to map MAC addresses E . the 0x01004f MAC address prefix is used for mapping IP addresses to MAC addresses F . the 0x01005e MAC address prefix is used for mapping IP addresses to MAC addresse

A . Implement highly redundant switching and links with no single points or paths of failure. B . Implement server load balancing. C . Implement the Hot Standby Router Protocol (HSRP) for failover protection. D . Implement intrusion detection with automatic notification of intrusion attempts in place.

A . Routes learned using any IP routing protocol can only be redistributed into non IP routing protocols. B . OSPF can import routes learned using EIGRP, RIP, and IS - IS. C . OSPF routes cannot be exported into EIGRP, RIP, an d IS - IS. D . At the interdomain level, OSPF cannot import routes learned using BGP. E . OSPF routes can be exported into BGP.

A . FECN B . LLQ C . WRED D . LFI E . CRTP F . CBWFQ

A . hub and spoke B . PE C . CE D . hub E . spoke

A . default VLAN information for all unused switch ports B . 802.1x configuration parameters  C . number of IP subnets needed D . IP routing protocol informatio

A . javax.servlet.http.HttpSessionListener B . javax.servlet.http.HttpSessionBindingListener C . javax.servlet.http.HttpSessionAttributeListener D . javax.servlet.http.HttpSessionActivationListener

A . Access Lists between the inside interface and loopback interface B . Context Based Access Control C . Dynamic Host Configuration Protocol D . Network Address translatio

A . approval from senior management B . end-user requirements C . IEEE 802.1X authentication parameters D . a summary implementation pla

A . When you want to drop excess traffic above the CIR B . When there is a speed mismatch between the central site and the remote site C . When using Frame Relay SVCs D . When over-subscribing the central site link E . When LLQ is implemented on the Frame Relay PVC F . When Multilink PPP LFI is implemented on the Frame Relay PVC

A .  CDPmust be enabled on all switches in theVTP management domain. B .  All switches in the VTPdomain must run the same version of VTP. C .  When using secure mode VTP， only configure management domain passwords onVTP servers. D .  EnablingVTP pruning on a server willenable the feature for the entire management domain. E .  Use of theVTPmulti-domain feature should be restricted to migration and temporary implementation.

A . improving the network management system and the performance and functionality of infrastructure operations B . providing a step-by-step plan that details the installation and service-commission tasks required in order to create a controlled-implementation environment that emulates a customer network C . developing and implementing a training plan using classes， workshops， or c-learning courses D . compiling a training manual for use in ongoing operations E . reducing the risk of downtime due to facilities-related problem

A .  Adjust the default hello timers to three seconds for aggressive mode B .  Enable it in global mode and on every interface you need to support C .  Enable it in global mode to support every individual fiber-optic interface D .  Enable it to create channels containing up to eight parallel links between switche

A . Make all ports private VLAN ports. B . Place all unused ports in native VLAN 1 until needed. C . Proactively configure unused switch ports as access ports. D . Disable Cisco Discovery Protocol globally.

A .  The minimum configurable capacity allocation is 1.0 core and the minimum increment is 0.1 core. B .  The minimum configurable capacity allocation is 0.1 core and the minimum increment is 0.01 core. C .  The minimum configurable capacity allocation is 1.0 core and the minimum increment is 0.01 core. D .  The minimum configurable capacity allocation is 0.1 core and the minimum increment is 0.001

A . The standby database is protected against write operations.  B . The primary database is protected against write operations.  C . The primary database is protected against data loss and data divergence.  D . The standby database is protected against data loss and data divergence.&e

A . providing a step-by-step plan that details the installation and service-commission tasks required in order to create a controlled-implementation environment that emulates a customer network B . assessing the ability of site facilities to accommodate proposed infrastructure changes C . developing and executing proof-of-concept tests， validating high-level infrastructure design， and identifying any design enhancements D . installing， configuring， and integrating systems components based on an implementation plan developed in earlier phases E . improving a customer’s infrastructure security system

A .  Implement highly redundant switching and links with no single points or paths of failure. B .  Implement server load balancing. C .  Implement the Hot Standby Router Protocol （HSRP） for failover protection. D .  Implement intrusion detection with automatic notification of intrusion attempts in place.

A . only the low-order 23 bits of the MAC address are used to map IP addresses B . only the low-order 24 bits of the MAC address are used to map IP addresses C . only the high-order 23 bits of the MAC address are used to map IP addresses D . only the low-order 23 bits of the IP address are used to map MAC addresses E . the 0x01004f MAC address prefix is used for mapping IP addresses to MAC addresses F . the 0x01005e MAC address prefix is used for mapping IP addresses to MAC addresse

A . detailed VLAN information B . an incident response plan C . results of testing the new network configuration D . an existing hierarchical network topology E . a security policy for your organizatio

A. Implement a RADIUS request attribute policy to assist with realm selection and create different role-mapping rules for the user in each realm. B. Implement a directory/attribute server on the realm and set up this server to determine by group membership the proper role to which a user should be mapped. C. Reorder the role-mapping rules to allow for the more open role to be mapped first and then enable the "stop processing rules when this rule matches" function on this role. D. Implement a Host Checker policy on the realm that determines the geographic location of the device and restricts the user based on the results of the policy.