|
Question 1.
If the FTP protocol fixup is not enabled for a given port, which statements are true?
(Choose two)A. Outbound standard FTP will work properly on that port.
B. Outbound passive FTP will not work properly on that port.
C. Outbound standard FTP will not work properly on that port.
D. Outbound standard FTP will work properly on that port if outbound traffic is not explicitly
disallowed.
E. Inbound standard FTP will not work properly on that port even if a conduit to the inside
server exists.
F. Outbound passive FTP will work properly on that port as long as outbound traffic is not
explicitly disallowed.Answer: C, F
Explanation:
This workaround will force your clients to use FTP in passive mode, and inbound FTP service will not be supported.
Outbound standard FTP will not work without fixup protocol ftp 21, however, passive FTP will function correctly with no fixup protocol ftp configured.Reference:
Cisco PIX 500 Series Firewalls - Cisco Secure PIX Firewall FTP Vulnerabilities
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_advisory09186a00800b13bd.shtmlQuestion 2.
Which statement about the PIX Firewall and PPPoE is true?A. When PPPoE is configured, the user enters his username and password to connect to a
PPPoE server and set the MTU size to 1492 bytes.
B. The PIX Firewall does not detect PPPoE session termination.
C. When PPPoE is configured, you must set the MTU size to the correct value to allow PPPoE
to be transmitted in an Ethernet frame.
D. To clear and restart a PPPoE session, enter the clear ppp session command.
E. When configured, the PIX Firewall's PPPoE client automatically connects to a service
provider's access concentrator without user intervention.Answer: E
Explanation:
At system initialization, the PPPoE client establishes a session with the AC by exchanging a series of packets.
Once the session is established, a PPP link is set up, which includes authentication using Password Authentication (PAP) protocol. Once the PPP session is established, each packet is encapsulated in the PPPoE and PPP headers.Reference:
Using PIX Firewall in SOHO Networks
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/config/pixclnt.pdfQuestion 3.
How can dynamic outside NAT simplify router configuration on your internal or perimeter networks?A. By controlling the addresses that appear on these networks.
B. Because you can configure your routing within the nat command.
C. Because you can configure your routing within the global command.
D. Because statics take precedence over nat and global command pairs.Answer: A
Explanation:
Inside dynamic NAT
Translates between host addresses on more secure interfaces and a range or pool of IP addresses on a less secure interface. This provides a one-to-one mapping between internal and external addresses that allows internal users to share registered IP addresses and hides internal addresses from view on the public Internet.Reference:
Establishing Connectivity
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htmQuestion 4.
Which is likely to cause standard failover via the special serial cable not to work? (Choose two)A. The two PIX Firewalls are running different version of software.
B. The hardware models are the same.
C. The secondary PIX Firewall has not been properly configured as a secondary PIX Firewall.
D. The secondary PIX Firewall has a 3DES license.
E. The hardware models are different.
F. The standby PIX Firewall has not yet replicated its configuration to the primary PIX Firewall.Answer: A, E
Explanation:
Failover System Requirements
ƒ Identical PIX Firewall hardware and software versions Description
ƒ The failover feature requires two units that are identical in the following respects:
ƒ Model (a PIX 515E cannot be used with a PIX 515)
ƒ Same number and type of interfaces
ƒ Software version
ƒ Activation key type (DES or 3DES)
ƒ Flash memory
ƒ Amount of RAMReference:
Cisco PIX Firewall Software - Using PIX Firewall Failover
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a008017278a.htmlQuestion 5.
Select the correct statement:A. With the Diffie-Hellman exchange, the DES key never crosses the network.
B. With the Diffie-Hellman exchange, the DES key crosses the network in encrypted form.
C. With the Diffie-Hellman exchange, the DES key never crosses the network in clear text.
D. With RSA encrypt and sign technique the key never crosses the network.Answer: A
Explanation:
Cisco's IKE implementation uses a Diffie-Hellman exchange to get the secret keys. This exchange can be authenticated with RSA (or pre-shared keys). With the Diffie-Hellman exchange, the DES key never crosses the network (not even in encrypted form), which is not the case with the RSA encrypt and sign technique.Reference:
IPSec - An Introduction to IP Security (IPSec) Encryption
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a0080094203.shtmlQuestion 6.
We have already created a permanent mapping between a local ip address and a global IP address using the following command:Pix (config)#static (inside, outside) 172.29.40.8 10.10.10.6
Now we want to create an exception to the PIX Firewall ASA using conduit command. The conduit command must permit TCP for the global IP address 172.29.40.8 that was specified in the static command statement and permit http access over port 80. Choose the correct command.A. pix(config)#conduit permit tcp host 172.29.40.8 any eq www
B. pix(config)#conduit permit tcp host 172.29.40.8 eq www any
C. pix(config)#conduit permit ip host 172.29.40.8 eq www any
D. pix(config)#conduit permit tcp 172.29.40.8 eq 80 anyAnswer: B
Explanation:
The conduit command in answer B permits the host 172.29.40.8 any HTTP access over port 80 (www).Reference:
PIX Firewall Software Version 6.3 Commands
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/qref.htm
|
Need Dump, Please help thanks
|
Question 1. To which level of the storage configuration hierarchy do the read and write cache policies apply on the MSA2000? A. virtual disk B. array C. physical disk D. volume Answer: D Question 2. You recently upgraded to CommandView EVA v7 and changed the password to pa$$word01. You can no longer manage the EVA5000. What is a possible cause? A. The password contains unsupported characters. B. The password contains fewer than 12 characters. C. The password requires at least one uppercase character. D. The password contains more than 8 characters. Answer: D Question 3. What is a hidden MSA2000 volume that contains preallocated reserve space for snapshot data? A. snap pool B. master volume C. target volume D. rollback pool Answer: A Question 4. What is the EVAperf default setting for collecting data? A. every second B. every 5 seconds C. every 15 seconds D. every 10 seconds Answer: D Question 5. After a power outage, the MSA2000 controller powers up while some member disks of a RAID set are still unavailable. Which disaster recovery function attempts to get the associated LUN online? A. Refresh Disk Blocks B. Dequarantine Virtual Disk C. ReInitialize Disk Blocks D. Trust Virtual Disk Answer: D Question 6. What is the minimum version of CommandView to enable all the features of controller firmware XCS 6.10? A. CommandView EVA 6.02 B. CommandView EVA 7.0 C. CommandView EVA 6.1 D. CommandView EVA 6.0 Answer: B Question 7. What is the maximum size LUN that can be created on the EVA4400 at initial release? A. 2TB B. 16TB C. 1TB D. 32TB Answer: A Question 8. DRAG DROP Match each customer requirement with the appropriate HP StorageWorks solution Answer: Explanation: Question 9. You are installing an MSA2012fc storage solution at a customer site. The manual addition of a global spare disk fails. What is the most probable reason for the failure? A. No virtual disk exists on the system. B. Global spares must be added in pairs. C. Global spare disks must reside in the same enclosure as thevdisks. D. Unassigned disks are automatically used as global spares. Answer: A Question 10. Which items can be part of a disk group on an HP StorageWorks EVA for a successful online disk drive code load? (Select two.) A. unprotected RSS B. Vraid0 LUN C. Vraid5 LUN D. reconstructing disk group E. Vraid1 LUN Answer: C, E
|
Question 1.
What is an example of a stress test?
A. purchasing at anE.commerce site
B. updating orders on a client/server system
C. viewing upcoming flight itineraries on a flight reservation application
D. displaying the home page immediately after a marketing promotion has been run
Answer: D
Question 2.
When scheduling a scenario, which run modes are available in the Controller? (Select two.)
A. Group
B. Scenario
C. Duration
D. Global Schedule
E. Real-Life schedule
F. Run Until Complete
Answer: E, F
Question 3.
You want to control the delay between iterations. Where do you set this in the Run-time settings?
A. General: Pacing
B. General: Think Time
C. Network: Speed Simulation
D. Browser: Browser Emulation
Answer: A
Question 4.
Which level of concurrency identifies how many users are currently in the process of buying a ticket?
A. system
B. application
C. transaction
D. business process
Answer: D
Question 5.
What is the appropriate scenario outline if your quantitative goal is to attain 2,500 concurrent users for the Update transaction during peak time?
A. Load test should achieve 2,500 users only.
B. Script should define the Update transaction only.
C. Script should define the Update transaction, and the load test should achieve 2,500 users.
D. Script should define the Update transaction, and the load test should achieve 2.500 concurrent
users.
Answer: D
Question 6.
Which option in the Analysis tool allows you to see the results of two graphs from the same load test scenario in a single graph?
A. Drill Down
B. Apply Filter
C. Merge Graphs
D. Auto Correlate
Answer: C
Question 7.
What is the LoadRunner term for varying values defined in a placeholder that replaces the hard. coded values?
A. variable
B. constant
C. parameter
D. correlation
Answer: C
Question 8.
Which scenario run is recommended to set the Run-time setting to Standard Logging?
A. Debug
B. Full Load
C. Top Time
D. Scalability
Answer: C
Question 9.
What is the first indication of a performance problem?
A. The network delay time is above 15ms.
B. The DMG is not resolving the machine name.
C. The Web server's available memory drops below 1 GB.
D. The end userexpenences higherthan expected response times.
Answer: D
Question 10.
How can you validate that the LoadRunner Agent is running on the load generator?
A. Port 443 will be open.
B. The MlFW.exe process will be running.
C. The radar dish will appear in the system tray.
D. The load generator will be pinged using the name/DNS/IP.
Answer: C
|
Question 1.
What is the Draft-Kompella control plane based on?
A. IGP
B. LDP
C. MPLS
D. BGP
Answer: D
Question 2.
A router receives an IPv6 packet which is 2000 bytes in length. The MTU of the outgoing interface is 1500 bytes.
What action will the router take?
A. fragments the packet
B. forwards the packet
C. drops the packet and sends an ICMP message
D. drops the packet silently
Answer: C
Question 3.
In which two ways can you influence how downstream LSRs treat MPLS traffic? (Choose two.)
A. Use a DSCP rewrite table.
B. Statically assign a CoS value to an RSVP-signaled LSP.
C. Statically assign a CoS value to an LDP-signaled LSP.
D. Use an EXP rewrite table.
Answer: B, D
Question 4.
What is the use of MSDP across multiple PIM domains?
A. It advertises RPs to all downstream routers.
B. It advertises active multicast sources.
C. It prevents multicast routing loops.
D. It scopes multicast traffic.
Answer: B
Question 5.
Which two statements are true when configuring a domain-id ? (Choose two.)
A. The default OSPF domain-id is 127.0.0.1
B. For a layer 3 VPN connecting multiple OSPF domains, configuring a domain-id can help
Control LSA translations
C. In most cases, a domain-id must be configured
D. In most cases, you do not need to configure a domain-id
Answer: B, D
Question 6.
Into which protocol are LDP hello messages encapsulated?
A. IP
B. UDP
C. TCP
D. MPLS
Answer: B
Question 7.
Which two forwarding classes have bandwidth assigned when CoS is not explicitly configured in JUNOS software? (Choose two.)
A. Network control (NC)
B. Assured forwarding (AF)
C. Expedited forwarding (EF)
D. Best effort (BE)
Answer: A, D
Question 8.
In JUNOS software, which type of encapsulation is required on a PE router for the CE-facing interface in a Martini-based VPN?
A. ATM
B. CCC
C. Ethernet
D. HDLC
Answer: B
Question 9.
Which routing table stores IPv6 routes?
A. inet.2
B. inet.0
C. inet.v6
D. inet6.0
E. ip-net.0
Answer: D
Question 10.
Which three authentication options does IS-IS support? (Choose three.)
A. unauthenticated
B. MD5
C. Kerberos
D. simple password
E. DES
Answer: A, B, D
|
