单选题A traditional router is better suited than a firewall device for which function? ()A VPN establishmentB packet-based forwardingC stateful packet processingD network address translation

题目
单选题
A traditional router is better suited than a firewall device for which function? ()
A

VPN establishment

B

packet-based forwarding

C

stateful packet processing

D

network address translation

参考答案和解析
正确答案: A
解析: 暂无解析
如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

A traditional router is better suited than a firewall device for which function? ()

A. VPN establishment

B. packet-based forwarding

C. stateful packet processing

D. network address translation


参考答案:B

第2题:

Which two of these are advantages of placing the VPN device in the DMZ on the firewall?()

A. fewer devices to manage

B. moderate-to-high scalability

C. stateful inspection of decrypted VPN traffic

D. increased bandwidth with additional interfaces

E. decreased complexity as traffic is filtered from the firewall


参考答案:B, C

第3题:

阅读下面的短文,回答问题 [When an IP packet arrives at a router, generally the router looks at the destination address of the packet, and forwards the packet to one of its network interfaces. The forwarding decision is usually done by looking up the destination address from another data structure called a forwarding table. The forwarding table is created by the router using the routing table and possible routing policies existing in the router. The router then creates a table where it lists which networks are accessible through which of the router’s network interfaces. An IP router looks at every IP packet individually and does the forwarding decision on a packet-by-packet basis. If something changes in the router’s routing table, a packet can take a different route from a preceding packet even if it has the same destination.] From the paragraph above,we can see that the router ( ) a forwarding table according to the routing table and possible routing policies existing in the router. When an IP packet arrives at a router, the ( ) part of packet is normally checked by the router. An IP router checks every IP Packet individually and makes the forwarding decision based on ( ).

A.is generating B.generate C.is generated D.generates A.forwarding table B.network interfaces C.routing policies D.destination address A.the destination address and network interfaces B.forwarding table and network interfaces C.the destination address and forward table D.routing policies and routing table


正确答案:D,D,C

第4题:

Which three functions are provided by JUNOS Software for security platforms?()

  • A、VPN establishment
  • B、stateful ARP lookups
  • C、Dynamic ARP inspection
  • D、Network Address Translation
  • E、inspection of packets at higher levels (Layer 4 and above)

正确答案:A,D,E

第5题:

Traditional IP packet forwarding analyzes the( )IP address contained in the network layer header of each packet as the packet travels from its source to its final destination.A router analyzes the destination IP address independently at each hop in the network.Dynamic( )protocols or static configuration builds the database needed to analyze the destination IP address(the routing table).The process of implementing traditional IP routing also is called hop-by-hop destination-based( )routing.Although successful,and obviously widely deployed,certain restrictions,which have been realized for some time,exist for this method of packet forwarding that diminish is(请作答此空).New techniques are therefore required to address and expand the functionality of an IP-based network infrastructure.This first chapter concentrates on identifying these restrictions and presents a new archiecture,known as multiprotocol( )switching,that provides solutions some of these restrictions.

A.reliability
B.flexibility
C.stability
D.capability

答案:B
解析:
传统的IP数据包转发分析目的IP地址,该地址包含在每个从源到最终目的地的网络层数据包的头部。一个路由器的分析目的IP地址,该地址独立在网络中的每跳。动态路由协议或静态配置构建数据库,该数据数据库需要分析目的IP地址(路由表)。实施传统的IP路由的过程也叫作基于目的地的逐条单播路由。虽然成功而且明显得广泛部署,并实现了一段时间,但是必然有某些限制,这种数据包转发方法的存在是减少了灵活性。新技术是因此需要地址和扩展一个基于ip的网络基础设施的功能。第一章集中在识别一种新的架构的限制条件和反馈,该架构众所周知是多协议标签交换,它为其中的一些限制条件提供解决方案。

第6题:

Which two features protect the ERX Edge Router from denial-of-service attacks? ()(Choose two.)

A. rate limiting of ICMP

B. RADIUS authorizations

C. source address validation

D. stateful firewall on the router


参考答案:A, C

第7题:

We have already covered the topic of network addresses. The first(71) in a block (in classes A,B,and C) defines the network address. In classes A,B,and C,if the hostid is all ls, the address is called a direct broadcast address. It is used by a.() to send a packet to all hosts in a specific network. All hosts will accept a packet having this type of destination address. Note that this address can be used only as a (73)address in an lP packet. Note also that this special address also reduces the number of available hostid for each netid in classes A,B,and C.
In classes A,B,and C,an address with all Is for the netid and hostid (32 bits) defines a(74) address in the current network.A host that wants to send a message to every other host can use this address as a destination address in an IP packet. However,a router will block a packet having this type ofaddress to confine the broadcasting to the (75) network. Note that this address belongs to class E.

A.router
B.switch
C.huB.
D.firewall

答案:A
解析:

第8题:

Which three functions are provided by the Junos OS for security platforms?()(Choose three.)

A. VPN establishment

B. stateful ARP lookups

C. Dynamic ARP inspection

D. Network Address Translation

E. inspection of packets at higher levels (Layer 4 and above)


参考答案:A, D, E

第9题:

Traditional IP packet forwarding analyzes the( )IP address contained in the network layer header of each packet as the packet travels from its source to its final destination.A router analyzes the destination IP address independently at each hop in the network.Dynamic(请作答此空)protocols or static configuration builds the database needed to analyze the destination IP address(the routing table).The process of implementing traditional IP routing also is called hop-by-hop destination-based( )routing.Although successful,and obviously widely deployed,certain restrictions,which have been realized for some time,exist for this method of packet forwarding that diminish is( ).New techniques are therefore required to address and expand the functionality of an IP-based network infrastructure.This first chapter concentrates on identifying these restrictions and presents a new archiecture,known as multiprotocol( )switching,that provides solutions some of these restrictions.

A.routing
B.forwarding
C.transmission
D.management

答案:A
解析:
传统的IP数据包转发分析目的IP地址,该地址包含在每个从源到最终目的地的网络层数据包的头部。一个路由器的分析目的IP地址,该地址独立在网络中的每跳。动态路由协议或静态配置构建数据库,该数据数据库需要分析目的IP地址(路由表)。实施传统的IP路由的过程也叫作基于目的地的逐条单播路由。虽然成功而且明显得广泛部署,并实现了一段时间,但是必然有某些限制,这种数据包转发方法的存在是减少了灵活性。新技术是因此需要地址和扩展一个基于ip的网络基础设施的功能。第一章集中在识别一种新的架构的限制条件和反馈,该架构众所周知是多协议标签交换,它为其中的一些限制条件提供解决方案。

第10题:

What will an Easy VPN hardware client require in order to insert its protected network address when it connects using network extension mode?()

  • A、 RADIUS or LDAP
  • B、 an internal router running EIGRP
  • C、 Reverse Route Injection and OSPF or RIPv2
  • D、 the VPN appliance to be deployed in line with the firewall

正确答案:C

更多相关问题