CCDP系列認(rèn)證CCDP(642-873)單項選擇題每日一練(2019.01.12)

單項選擇題
Which statement about IDS/IPS design is correct?（）
A. An IPS should be deployed if the security policy does not support the denial of traffic.
B. An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.
C. An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.
D. Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.
單項選擇題
One of your customers has deployed a Layer 3 gateway in the untrusted network. Which gateway mode is appropriate for this customer?（）
A.Virtual Gateway
B.Real-IP Gateway
C.NAT Gateway
D.Central Gateway
單項選擇題
Which design topology incurs a performance penalty since there are two encryption-decryption cycles between any two remote sites?（）
A. peer-to-peer
B. partial mesh
C. hub and spoke
D. full mesh
單項選擇題
You are the Cisco Network Designer . Which is not major scaling, sizing, and performance consideration for an IPsec design?（）
A. connection speed
B. number of remote sites
C. features to be supported
D. types of devices at the remote site
單項選擇題
You are the Cisco Network Designer in Cisco.com. Which layer NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?（）
A. Layer 2
B. Layer 3
C. Layer 4
D. out-of-band