网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }
A
set policy tunnel-traffic then tunnel remote-vpn
B
set policy tunnel-traffic then permit tunnel remote-vpn
C
set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D
set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn
参考答案
参考解析
解析：
暂无解析
更多 “单选题Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }A set policy tunnel-traffic then tunnel remote-vpnB set policy tunnel-traffic then permit tunnel remote-vpnC set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permitD set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn” 相关考题
考题
Which two statements are true with regard to policy ordering? ()(Choose two.)
A. The last policy is the default policy, which allows all traffic.B. The order of policies is not important.C. New policies are placed at the end of the policy list.D. The insert command can be used to change the order.
考题
Which configuration keyword ensures that all in－progress sessions are re－evaluated upon committing a security policy change?()
A. policy-rematchB. policy-evaluateC. rematch-policyD. evaluate-policy
考题
Which CLI command is used to enable L2TP tunnel switching?()
A. l2tp tunnellingB. l2tp tunnel switchingC. l2tp tunnel-switchingD. enable l2tp tunnel switching
考题
Users are complaining of slow performance. The iostat command indicates hdiskxxx is extremely busy. There is no activity on any other hdisks in the same volume group. Which of the following is the best action to take?（）A.Change intra policy to outerB.Change intra policy to centerC.Change inter policy to maximumD.Increase the physical partition size
考题
A complete change in policy is needed if relations are ever to improve.A: strict
B: wide
C: ever
D:radical
考题
A GRE tunnel is configured between a local and a remote site. Where should the service policy be applied to classify packets based on the pretunnel header? （）A、in global configuration mode， apply the service policy and use the qos pre-classifyB、in global configuration mode， apply the service policy but do not use the qos pre-classify commandC、apply the service policy on the physical interface but do not use the qos pre-classifyD、apply the service policy on the tunnel interface but do not use the qos pre-classify command E、apply the service policy on the tunnel interface and use the qos pre-classify command
考题
Which two statements or sets of statements are true about the application of the qos pre-classify command？（）A、 If the classification policy is based upon the ToS byte， the qos pre-classify command is required because the ToS byte only appears in the inner IP header.B、 The ToS byte is copied to the outer header by default. Therefore， the qos pre-classify command is not necessary.C、 With GRE encapsulation， the qos pre-classify command is applied on the tunnel interface. This practice allows for different OoS configurations on each tunnel.D、 With GRE encapsulation， the qos pre-classify command is applied on the physical interface. This practice allows for different OoS configurations on each interface.E、 With IPsec encapsulation， the qos pre-classify command is applied on the physical interface. This practice allows for different OoS configurations on each interface.
考题
Which methods would enable traffic to be forwarded along an MPLS TE tunnel？（）A、MP-BGP routingB、Static routingC、Policy routingD、AutorouteE、Forwarding adjacency
考题
Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change?（）A、policy-rematchB、policy-evaluateC、rematch-policyD、evaluate-policy
考题
Which statement about MPLS traffic engineering policy-based tunnel selection （PBTS） is not true？（）A、The tunnel that is not configured with the policy-class command acts as the defaultB、EXP selection is between multiple tunnels to the same destinationC、There is no requirement for IGP extensionsD、Tunnels are configured using the policy-class command and carry multiple EXP valuesE、It supports VRF traffic， IP-to-MPLS switching， and MPLS-to-MPLS switching
考题
Which command will list ODM class descriptions to provide the format needed to create a new class?（）A、odmaddB、odmgetC、odmshowD、odmcreate
考题
Users are complaining of slow performance. The iostat command indicates hdiskxxx is extremely busy. There is no activity on any other hdisks in the same volume group. Which of the following is the best action to take?（）A、Change intra policy to outerB、Change intra policy to centerC、Change inter policy to maximumD、Increase the physical partition size
考题
Which two configuration elements are required for a route-based VPN？（）A、secure tunnel interfaceB、security policy to permit the IKE trafficC、a route for the tunneled transit trafficD、tunnel policy for transit traffic referencing the IPsec VPN
考题
our network contains a Network Policy Server (NPS) named Server1.You need to configure a network policy for a VLAN.Which RADIUS attributes should you add？（）A、¡¤Logi-LAT-ServiceˆLogin-LAT-Node ˆLogin-LAT-Group ˆNAS-IdentifierB、¡¤Tunne-Assignment-ID ˆTunnel-Preference ˆTunnel-Client-Auth-ID ˆNAS-Port-IdC、¡¤Tunne-Client-Endpt ˆTunnel-Server-Endpt ˆNAS-Port-Type ˆTunnel-PasswordD、¡¤Tunne-Medium-Type ˆTunnel-Pvt-Group-ID ˆTunnel-Type ˆTunnel-Tag
考题
多选题Which two statements are true with regard to policy ordering? （）(Choose two.)AThe last policy is the default policy, which allows all traffic.BThe order of policies is not important.CNew policies are placed at the end of the policy list.DThe insert command can be used to change the order.
考题
单选题Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }A
set policy tunnel-traffic then tunnel remote-vpnB
set policy tunnel-traffic then permit tunnel remote-vpnC
set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permitD
set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn
考题
单选题Which statement about MPLS traffic engineering policy-based tunnel selection （PBTS） is not true？（）A
The tunnel that is not configured with the policy-class command acts as the defaultB
EXP selection is between multiple tunnels to the same destinationC
There is no requirement for IGP extensionsD
Tunnels are configured using the policy-class command and carry multiple EXP valuesE
It supports VRF traffic， IP-to-MPLS switching， and MPLS-to-MPLS switching
考题
单选题our network contains a Network Policy Server (NPS) named Server1.You need to configure a network policy for a VLAN.Which RADIUS attributes should you add？（）A
¡¤Logi-LAT-ServiceˆLogin-LAT-Node ˆLogin-LAT-Group ˆNAS-IdentifierB
¡¤Tunne-Assignment-ID ˆTunnel-Preference ˆTunnel-Client-Auth-ID ˆNAS-Port-IdC
¡¤Tunne-Client-Endpt ˆTunnel-Server-Endpt ˆNAS-Port-Type ˆTunnel-PasswordD
¡¤Tunne-Medium-Type ˆTunnel-Pvt-Group-ID ˆTunnel-Type ˆTunnel-Tag
考题
单选题Which command while in a vi session will change the currently selected word?（）A
ecB
wcC
ewD
cw
考题
单选题QoS policies are applied on the switches of a LAN. Which type of command will show the effects of the policy in real time?（）A
show commandB
debug commandC
configuration commandD
rommon command
考题
单选题A policy-based IPsec VPN is ideal for which scenario？（）A
when you want to conserve tunnel resourcesB
when the remote peer is a dialup or remote access clientC
when you want to configure a tunnel policy with an action of denyD
when a dynamic routing protocol such as OSPF must be sent across the VPN
考题
多选题Which two statements or sets of statements are true about the application of the qos pre-classify command？（）AIf the classification policy is based upon the ToS byte， the qos pre-classify command is required because the ToS byte only appears in the inner IP header.BThe ToS byte is copied to the outer header by default. Therefore， the qos pre-classify command is not necessary.CWith GRE encapsulation， the qos pre-classify command is applied on the tunnel interface. This practice allows for different OoS configurations on each tunnel.DWith GRE encapsulation， the qos pre-classify command is applied on the physical interface. This practice allows for different OoS configurations on each interface.EWith IPsec encapsulation， the qos pre-classify command is applied on the physical interface. This practice allows for different OoS configurations on each interface.
考题
单选题Which CLI command is used to enable L2TP tunnel switching?（）A
l2tp tunnellingB
l2tp tunnel switchingC
l2tp tunnel-switchingD
enable l2tp tunnel switching
考题
单选题Which CLI command shows whether an L2TP Tunnel Switch profile is applied?（）A
l2tp tunnel testB
show subscribersC
show aaa domain-mapD
show l2tp destination profile
考题
单选题Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing asecurity policy change？（）A
policy-rematchB
policy-evaluateC
rematch-policyD
evaluate-policy
考题
多选题Which two configuration elements are required for a policy-based VPN？（）AIKE gatewayBsecure tunnel interfaceCsecurity policy to permit the IKE trafficDsecurity policy referencing the IPsec VPN tunnel
考题
多选题Which two configuration elements are required for a route-based VPN？（）Asecure tunnel interfaceBsecurity policy to permit the IKE trafficCa route for the tunneled transit trafficDtunnel policy for transit traffic referencing the IPsec VPN
热门标签
最新试卷