When designing remote access to the Enterprise Campus networ

第1题：

第2题：

When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）

• A、 It is recommended to place the VPN termination device in line with the Enterprise Edge 1
• B、 Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment
• C、 VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
• D、 Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7

第3题：

第4题：

When designing the WAN module within the enterprise edge, which document is used to specify the connectivity and performance agreements with the service provider?（）

• A、RFP
• B、RFC
• C、SLC/SLA
• D、SOW

第5题：

A route-based VPN is required for which scenario? （）

• A、when the remote VPN peer is behind a NAT device
• B、when multiple networks need to be reached across the tunnel
• C、when the remote VPN peer is a dialup or remote access client
• D、when a dynamic routing protocol such as OSPF is required across the VPN

第6题：

When designing the routing for an Enterprise Campus network it is important to keep while of thefollowing filtering aspects in mind？（）

• A、 Filtering is only useful when combined with route summarization
• B、 It is best to filter （allow） the default and summary prefixes only in the Enterprise Edge to remotesites or site-to-site IPsec VPN networks
• C、 IGPs （for example EIGRP or OSPF） are superior to route filtering in avoiding in inappropriatetransit traffic through remote nodes or inaccurate or inappropriate routing updates
• D、 The primary limitation of router filtering is that it can only be applied on outbound updates

第7题：

When designing the Network Admission Control （NAC） Appliance for the Enterprise Campus Network， which of the following requirements would help the designer to narrow down the NAC choices， from Virtual Gateway to Real IP Gateway， or from In-band to Out-band？（）

• A、 QoS ToS/DSCP values are required to be forwarded transparently
• B、 Device redundancy is required
• C、 Per-user ACL support is required
• D、 Multicast service support is required

第8题：

第9题：

A policy-based IPsec VPN is ideal for which scenario？（）

• A、when you want to conserve tunnel resources
• B、when the remote peer is a dialup or remote access client
• C、when you want to configure a tunnel policy with an action of deny
• D、when a dynamic routing protocol such as OSPF must be sent across the VPN

第10题：

What is the result when all Cisco Enterprise Campus Architecture components are designed withinteroperability in mind? （）

• A、high availability
• B、strengthened security
• C、improved connectivity options
• D、continuity of service