思科认证考试
IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）A、IKE keepalives are unidirectional and sent every ten secondsB、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Heade
题目
IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）
- A、IKE keepalives are unidirectional and sent every ten seconds
- B、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
- C、To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
- D、IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
参考答案和解析
相似问题和答案
第1题：
VPN是虚拟专用网的简称，主要类型可分为网络层的IPSec VPN和应用层的(17)VPN两种，其中IPSec VPN主要是为了解决(18)的互联。
A．PPTP
B．SSL
C．Socks
D．CA
第2题：
A.Cisco IOS IPsec/SSL VPN client
B.Cisco VPN Clinet
C.ISDN terminal adapter
D.Cisco Adaptive Security Appliance
第3题：
IPSec VPN采用何种加密算法进行加密?
采用对称式(Symmetric)和非对称式(Asymmetric)的加密算法来执行加密作业。
第4题：
二层MPLS VPN可分为（）
- A、VLL
- B、VPLS
- C、VPDN
- D、IPsec VPN
正确答案:A,B
第5题：
下列VPN模式中哪一种属于二层VPN？（）
- A、SSL VPN
- B、PPTP VPN
- C、IPSEC VPN
- D、L2TP VPN
正确答案:D
第6题：
You are an experienced network administrator in an international corporation. During your working hours, you are asked to deploy the Cisco SSL VPN AIM module in a Cisco 1800 Series Router. The beneficial reason for that deployment is to:（）
A. improve performance up to 300% for both IPsec and SSL VPN applications
B. improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardware
C. improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardware
D. improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardware
E. improve performance exclusively for SSL VPN applications
第7题：
请说明IPSec VPN技术的优势和不足之处。
正确答案:优势：网对网的组网方式，可实现三级或多级组网，组网方式较为固定，适合机构间组网，用户透明访问，无需登录操作（移动用户仍需软件客户端）。不足之处：权限不可具体到用户，网络层完全开放，内网资源直接暴露给分支用户，不适用于手持移动终端。
第8题：
在进行远程登陆时，最好使用哪种方式(IPSec VPN和SSL VPN)?
IPSec VPN和SSL VPN这两种VPN架构，从整体的安全等级来看，两种都能够提供安全的远程登入存取联机。但综观上述，SSL VPN在其易于使用性及安全层级，都比IPSec VPN高。我们都知道，由于Internet的迅速扩展，针对远程安全登入的需求也日益提升。
第9题：
What is not a difference between VPN tunnel authentication and per-user authentication?（）
- A、VPN tunnel authentication is part of the IKE specification.
- B、VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel).
- C、User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization.
- D、802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.
正确答案:D
第10题：
提供加密传输VPN 包括IPSec VPN、SSL VPN、DVPN 1.0、DVPN 2.0。
正确答案:错误