CCNA 安全(640-553)题库.pdf

CCNA安全题库 (640-553) QQ 136277148 考试群128807570 此资料为北京友思网络提供。北京友思网络提供全国各地CCNA，CCNP，CCIE笔试报名： CCNA 1700（重考）CCNP 1550 CCIE笔试 2500. Exam A QUESTION 1 Examine the following options, which access list will permit HTTP traffic sourced from host 00 port 3030 destined to host 0? A. access-list 101 permit tcp host 0 eq 80 55 eq 3030 B. access-list 101permit tcp any eq 3030 C. access-list 101 permit tcp 55 eq www 0 eq www D. access-list 101 permit tcp 55 eq 3030 5 eq www Answer: D Section: (none) QUESTION 2 DRAG DROP Drag three proper statements about the IPsec protocol on the above to the list on the below. ActualT A. B. C. D. Answer: Section: (none) Explanation/Reference: Pass Any Exam. Any Time. - 2 Cisco 640-553: Practice Exam QUESTION 3 In a brute-force attack, what percentage of the keyspace must an attacker generally search through until he or she finds the key that decrypts the data? A. Roughly 50 percent B. Roughly 66 percent ActualT C. Roughly 75 percent D. Roughly 10 percent Answer: A Section: (none) QUESTION 4 The information of Cisco Router and Security Device Manager(SDM) is shown below: Pass Any Exam. Any Time. - 3 Cisco 640-553: Practice Exam ActualT Within the sdm-permit policy map, what is the action assigned to the traffic class class-default? A. inspect Pass Any Exam. Any Time. - 4 Cisco 640-553: Practice Exam B. drop C. police D. pass Answer: B Section: (none) QUESTION 5 DRAG DROP On the basis of the description of SSL-based VPN, place the correct descriptions in the proper locations. ActualT A. B. C. D. Answer: Section: (none) Explanation/Reference: Pass Any Exam. Any Time. - 5 Cisco 640-553: Practice Exam QUESTION 6 Which description is correct based on the exhibit and partial configuration? ActualT A. All traffic destined for network will be denied due to the implicit deny all. B.