A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall， with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall， with the VPN terminating outside the firewall
您可能感興趣的試卷
你可能感興趣的試題
A. RX-queue deferred
B. TX-queue deferred
C. RX-queue saturation
D. TX-queue saturation
E. RX-queue starvation
F. TX-queue starvation
Which two practices will avoid Cisco Express Forwarding polarization？（）
A. The core layer should use default Layer 3 hash information.
B. The core layer should use default Layer 4 hash information.
C. The distribution layer should use default Layer 3 hash information.
D. The distribution layer should use default Layer 4 hash information.
E. The core layer should use Layer 3 and Layer 4 information as input to the Cisco Expressing Forwarding hashing algorithm.
F. The distribution layer should use Layer 3 and Layer 4 information as input into the Cisco Expressing Forwarding hashing algorithm.
A. RADIUS or LDAP
B. an internal router running EIGRP
C. Reverse Route Injection and OSPF or RIPv2
D. the VPN appliance to be deployed in line with the firewall
A. high scalability
B. the design supports a layered security model
C. firewall addressing does not need to change
D. IPsec decrypted traffic is inspected by the firewall
E. there is a centralized point for logging and content inspection
A. to ensure a loop-free topology
B. to protect against user-side loops
C. when a VLAN spans access layer switches
D. for the most deterministic and highly available network topology
E. because of the risk of lost connectivity without Spanning Tree Protocol
最新試題
Which path selection protocol is used by Fibre Channel fabrics？（）
How many channels are defined in the IEEE 802.11b DSSS channel set？（）
What amount of cell overlap ensures smooth roaming for wireless endpoints？（）
At a certain customer’s site， a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses. In which access mode has this NAS been configured to operate？（）
Which two statements correctly describe a situation in which an Active/Standby Service Module design is being used？ （）
In a collapsed core design， which two benefits are provided by a second-generation Cisco MDS director？ （）
One of your customers has deployed a Layer 3 gateway in the untrusted network. Which gateway mode is appropriate for this customer？（）
During consultation， you find that a customer has only a single asset closet and is looking for asolution that is easy to deploy. Which NAS physical deployment model would you suggest to this customer？（）
Which two design recommendations are most appropriate when OSPF is the data center core routing protocol？ （）
What is the traditional mode for a firewall？（）