单项选择题
What is not a difference between VPN tunnel authentication and per-user authentication?（）
A.VPN tunnel authentication is part of the IKE specification.
B.VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
C.User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization.
D.802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.
相关考题
-
单项选择题
Context-BasedAccessControl(CBAC)isthealgorithmoftheCiscoIOSfirewallfeature.HowdoesCBACimproveTeleworkersecurity?（）
A.Inbound packets are permitted only if they are part of a legitimate data flow initiated by a device on the Teleworker home network.
B.All packets are checked for integrity by analyzing their checksum.
C.Every packet is checked to see if it was sent through the VPN tunnel.
D.Every packet is inspected to see if any disallowed URLs are included. URLs are forwarded to the security cache engine for authorization. -
单项选择题
Refer to the exhibit. Given the interface configuration on a DSL connection with PPPoE, select the true statement.（）
A.The router is limiting the size of TCP and UDP packets.
B.The configuration implements an effective Layer-2 fragmentation technique.
C.The value of 542 is recommended in several RFCs.
D.There is another upstream router terminating the PPPoE session. -
多项选择题
ForEthernet-to-Ethernetrouters,suchastheCisco831behindacablemodemorDSLbridge,atrafficshaperisconfigured.Thisisrequiredsincetheoutput10-Mbpsinterfacewillnotbecongested.Whichtwostatementsaretrue?（）
A.The parent policy-map shapes and the child policy-map queues.
B.The mean-rate and burst-size must always be the same value.
C.This will not work without a Dialer interface configured.
D.The shaper provides congestion feedback.
