CCIE系列認證CCIE(350-018)問答題每日一練(2019.05.12)

A. RFC 1149
B. RFC 3704
C. RFC 1918
D. RFC 2827

A. Cisco Secure Desktop （CSD）
B. NAC Appliance Agent （NAA）
C. Cisco SecurityAgent （CSA）
D. SSLVPN Client （SVC）
E. Cisco TrustAgent （CTA）

A. policy based routing （PBR）
B. unicast reverse path forwarding （uRPF）
C. lock and keyACL
D. RFC 1918filtering
E. IP source routing

A. TKIP uses an advanced encryption scheme based on AES
B. TKIP provides authentication and integrity checking using Cipher Block Chaining Message Authentication Code （CBC-MAC）
C. TKIP provides per-packet keyingand a rekeying mechanism
D. TKIP provides message integrity check
E. TKIP reduces WEP’s vulnerabilities byusing different hardware encryption chipset
F. TKIP uses a 48 bit InitializationVector

A.These attacks send multiple FIN segments forcing TCP connection release.
B.These attacks fill up a hosts’ listen queue by failing to ACK partially openedTCPconnections.
C.These attacks take advantage of the hosts transmit backoff algorithm by sending jam signals to the host.
D.These attacks increment the ISN of each segment by a random number causing constant TCP retransmissions.
E.These attacks send TCP RST segments in response toconnection SYN+ACK segments forcing SYN retransmissions.