单选题Which statement correctly describes IPsec VPN backup technology？（）A The cypto isakmp keepalive command is used to configure the Stateful Switchover （SSO）protocolB Reverse Route Injection （RRI） is configured on at the remote site to inject the central s

第1题：

Which statement about the use of Route Target Rewrite is true？（）

• A、It is mainly used in Intra-AS MPLS VPLS deployments and is configured at the ASBR to avoid misconfiguration of the Route Target assignment for VPN configurations
• B、It is mainly used in Inter-AS MPLS VPN deployments and is configured at the ASBR to avoid misconfiguration of the Route Target assignment for VPN configurations
• C、It is mainly used in Intra-AS MPLS VPLS deployments and is configured at the Router Reflectorto avoid misconfiguration in Route Target assignment for VPN configurations
• D、It is mainly used in Inter-AS MPLS VPLS deployments and is configured at the Router Reflectorto avoid misconfiguration of the Route Target assignment for VPN configurations
• E、It is mainly used in Inter-AS MPLS VPLS deployments and is configured at the PE router to avoid to misconfiguration of the Route Target assignment for VPN configurations

第2题：

Which statement best describes Cisco supervisor engine redundancy using Stateful Switchover？（）

• A、Switchover ensures that Layer 2 through Layer 4 traffic is not interrupted
• B、Redundancy requires BGP， OSPF， EIGRP， or IS-IS
• C、Redundancy provides fast supervisor switchover for all Cisco Catalyst 6500 series switches
• D、Switchover can be caused by clock synchronization failure between supervisors

第3题：

第4题：

Which statements describes the remote sites in a Cisco Single-Site Secure Network Foundation solution with remote teleworkers？（）

• A、They are separate from the central site and use NAT to route through the Internet to the Central Site
• B、They are part of the VLANs at the Central Site； they are in the same subnets
• C、They use public IP Addresses that are routable through the Internet
• D、They are in separate subnets but are part of the private address space of the network

第5题：

During the Easy VPN Remote connection process，which phase involves pushing the IP address， Domain Name System （DNS），and split tunnel attributes to the client？（）

• A、mode configuration
• B、the VPN client establishment of an ISAKMP SA
• C、IPsec quick mode completion of the connection
• D、VPN client initiation of the IKE phase 1 process

第6题：

What best describes the usage of Route-Target rewrite？（）

• A、Route-Target Rewrite is mainly used in Inter-AS MPLS-VPN deployments and is configured at the PErouter in originating AS ASBR to avoid misconfiguration in Route-Target assignment for VPN configurations.
• B、Route-Target Rewrite is mainly used in Inter-AS MPLS-VPN deployments and is configured at the route-Reflector in originating AS ASBR to avoid misconfiguration in Route-Target assignment for VPN configurations.
• C、Route-Target Rewrite is mainly used in Inter-AS MPLS-VPN deployments and is configured at the ASBR to avoid misconfiguration in Route-Target assignment for VPN configurations.
• D、None of the above.

第7题：

Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?（）

• A、Easy VPN
• B、GRE tunneling
• C、Virtual Tunnel Interfaces
• D、DynamicMultipoint VPN
• E、Group Encrypted Transport VPN

第8题：

第9题：

Which two mechanisms can be used to detect IPsec GRE tunnel failures？（）

• A、Dead Peer Detection （DPD）
• B、CDP
• C、isakmp keepalives
• D、GRE keepalive mechanism
• E、The hello mechanism of the routing protocol across the IPsec tunnel

第10题：

When designing remote access to the Enterprise Campus network for teleworkers and mobileworkers， which of the following should the designer consider？（）

• A、 It is recommended to place the VPN termination device in line with the Enterprise Edge 1
• B、 Maintaining access rules， based on the source IP of the client， on an internal firewall drawnfrom a headend RADIUS server is the most secure deployment
• C、 VPN Headend routing using Reverse Route Injection （RRI） with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
• D、 Clientless SSL VPNs provide more granular access control than SSL VPN clients （thin or thick），including at Layer 7