部署IPSEC VPN 网络时我们需要考虑IP 地址的规划,尽量在分支节点使用可以聚合的IP 地址段,其中每条加密ACL 将消耗多少IPSEC SA 资源() A、 1 个B、 2 个C、 3 个D、 4 个
部署IPSEC VPN 网络时我们需要考虑IP 地址的规划,尽量在分支节点使用可以聚合的IP 地址段,其中每条加密ACL 将消耗多少IPSEC SA 资源()
- A、 1 个
- B、 2 个
- C、 3 个
- D、 4 个
相关考题:
阅读以下说明,回答问题1至问题5。[说明]某企业采用Windows 2000操作系统部署企业虚拟专用网(VPN),将企业的两个异地网络通过公共Internet安全地互联起来。微软Windows 2000操作系统当中对IPSec具备完善的支持,下图给出了基于Windows 2000系统部署IPSec VPN的网络结构图。IPSec是IETF以RFC形式公布的一组安全协议集,它包含了AH与ESP两个安全机制,其中(1)不支持保密服务。
某企业采用Windows 2000操作系统部署企业虚拟专用网(VPN),将企业的两个异地网络通过公共 Internet安全地互联起来。微软Windows 2000操作系统当中对IPSec具备完善的支持,图13-3给出了基于 Windows 2000系统部署IPSec VPN的网络结构图。IPSec的密钥管理包括密钥的确定和分发。IPSec支持自动密钥分配和 [16] 两种密钥管理方式。试比较这两种方式的优缺点。如果按照图13-3所示的网络结构配置IPSec VPN,安全机制选择的是ES
阅读以下关于网络安全的技术说明,根据要求回答问题1~问题5。【说明】某企业采用Windows Server2003操作系统部署企业虚拟专用网(VPN),将企业的两个异地网络通过公共Internet安全的互联起来。微软Windows Server 2003操作系统中对IPSec具备完善的支持,图1-16示出了基于Windows Server 2003系统部署IPSec VPN的网络结构图。使用VPN技术,是为了保证内部数据通过Internet安全传输。VPN技术主要采用哪些技术来保证数据安全?
部署移动用户的IPSEC VPN网络时,建议采用什么样的防火墙部署方案()。 A.防火墙设备部署在VPN网关前方(Internet侧)B.防火墙设备部署在VPN网关后方(内网侧)C.防火墙设备同VPN网关并行D.不需要部署防火墙设备
VPN是虚拟专用网的简称,主要类型可分为网络层的IPSec VPN和应用层的(17)VPN两种,其中IPSec VPN主要是为了解决(18)的互联。A.PPTPB.SSLC.SocksD.CA
You are an experienced network administrator in an international corporation. During your working hours, you are asked to deploy the Cisco SSL VPN AIM module in a Cisco 1800 Series Router. The beneficial reason for that deployment is to:()A. improve performance up to 300% for both IPsec and SSL VPN applicationsB. improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareC. improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardwareD. improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE. improve performance exclusively for SSL VPN applications
Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?() A.Cisco IOS IPsec/SSL VPN clientB.Cisco VPN ClinetC.ISDN terminal adapterD.Cisco Adaptive Security Appliance
部署移动用户的IPSEC VPN 网络时,建议采用什么样的防火墙部署方案() A、 防火墙设备部署在VPN 网关前方(Internet 侧)B、 防火墙设备部署在VPN 网关后方(内网侧)C、 防火墙设备同VPN 网关并行D、 不需要部署防火墙设备
部署IPSEC VPN 网络需要考虑如何同时进行Internet 访问,从缓解中心节点压力的角度考虑,建议采用分布式的Internet 访问部署,此时分支节点需要进行VPN 流量和Internet 流量的分流。
防火墙IPSEC VPN特性支持哪些支持()A、IPSEC VPN热备功能B、支持IPSEC VPN隧道化功能C、支持IKEV2和基于域名的协商功能D、支持手机、PAD上自带的IPSEC VPN软件进行连接
Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?()A、Cisco IOS IPsec/SSL VPN clientB、Cisco VPN ClinetC、ISDN terminal adapterD、Cisco Adaptive Security Appliance
You are an experienced network administrator in an international corporation. During your working hours, you are asked to deploy the Cisco SSL VPN AIM module in a Cisco 1800 Series Router. The beneficial reason for that deployment is to:()A、improve performance up to 300% for both IPsec and SSL VPN applicationsB、improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareC、improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardwareD、improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE、improve performance exclusively for SSL VPN applications
You are considering deploying the Cisco SSL VPN AIM module in a Cisco 1800 Series Router.Which benefit should you expect?()A、to improve performance exclusively for SSL VPN applicationsB、to improve performance up to 300% for both IPsec and SSL VPN applicationsC、to improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareD、to improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE、to improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardware
Regarding a route-based versus policy-based IPsec VPN, which statement is true?()A、A route-based VPN generally uses less resources than a policy-based VPN.B、A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.C、A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.D、A route-based VPN uses a policy referencing the IPsec VPN; a policy-based VPN policy does not use apolicy referencing the IPsec VPN
单选题Regarding a route-based versus policy-based IPsec VPN, which statement is true?()AA route-based VPN generally uses less resources than a policy-based VPN.BA route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.CA route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.DA route-based VPN uses a policy referencing the IPsec VPN; a policy-based VPN policy does not use apolicy referencing the IPsec VPN
单选题You are considering deploying the Cisco SSL VPN AIM module in a Cisco 1800 Series Router.Which benefit should you expect?()Ato improve performance exclusively for SSL VPN applicationsBto improve performance up to 300% for both IPsec and SSL VPN applicationsCto improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareDto improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareEto improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardware