多选题Users of a site-to-site VPN are reporting performance problems. The VPN connection employs IPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()AEmploy path MTU discovery.BSet the MTU higher than 1500 bytes.CTurn off pre-fragmentation for IPSec.DSet the MTU value to 1400 bytes.

多选题
Users of a site-to-site VPN are reporting performance problems. The VPN connection employs IPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()
A

Employ path MTU discovery.

B

Set the MTU higher than 1500 bytes.

C

Turn off pre-fragmentation for IPSec.

D

Set the MTU value to 1400 bytes.


参考解析

解析: 暂无解析

相关考题:

You have a computer that runs Windows Vista. You create a virtual private network (VPN) connection between the computer and your company’s network.You notice that while the computer is connected through the VPN connection, users on the company network can access shared folders on the computer.You need to prevent network users from accessing your shared folders when you are connected to the company’s network by using the VPN connection.What should you do?()A.AB.BC.CD.D

You are an experienced network administrator in an international corporation. During your working hours, you are asked to deploy the Cisco SSL VPN AIM module in a Cisco 1800 Series Router. The beneficial reason for that deployment is to:()A. improve performance up to 300% for both IPsec and SSL VPN applicationsB. improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareC. improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardwareD. improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE. improve performance exclusively for SSL VPN applications

You are considering deploying the Cisco SSL VPN AIM module in a Cisco 1800 Series Router.Which benefit should you expect?() A. to improve performance exclusively for SSL VPN applicationsB. to improve performance up to 300% for both IPsec and SSL VPN applicationsC. to improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareD. to improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE. to improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardware

Users of a site-to-site VPN are reporting performance problems. The VPN connection employs IPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()A. Employ path MTU discovery.B. Set the MTU higher than 1500 bytes.C. Turn off pre-fragmentation for IPSec.D. Set the MTU value to 1400 bytes.

Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?()A. Easy VPNB. GRE tunnelingC. Virtual Tunnel InterfacesD. DynamicMultipoint VPNE. Group Encrypted Transport VPN

Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?() A.Cisco IOS IPsec/SSL VPN clientB.Cisco VPN ClinetC.ISDN terminal adapterD.Cisco Adaptive Security Appliance

Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?()A、Easy VPNB、GRE tunnelingC、Virtual Tunnel InterfacesD、DynamicMultipoint VPNE、Group Encrypted Transport VPN

Users of a site-to-site VPN are reporting performance problems. The VPN connection employsIPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()A、 Employ path MTU discovery.B、 Set the MTU higher than 1500 bytes.C、 Turn off pre-fragmentation for IPSec.D、 Set the MTU value to 1400 bytes.

Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?()A、Easy VPNB、GRE tunnelingC、Virtual Tunnel InterfacesD、Dynamic Multipoint VPNE、Group Encrypted Transport VPN

You deploy a windows server 2008 VPN server behind a firewall. Remote uses connect to the VPN by using portable computers that run windows vista with the latest service pack. The firewall is configured to allows only secured web communications. You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall. What should you do?()A、Create an IPsec tunnel.B、Create an SSTP VPN connection.C、Create a PPTP VPN connection.D、Create a L2tp VPN connection.

下述哪个是H3C专有的VPN技术?()A、GRE VPNB、IPSec VPNC、动态VPND、MPLS VPN

下列VPN中,能单独提供数据加密特性的有()A、L2TP VPNB、IPSec VPNC、SSL VPND、GRE VPN

MSR可以做为专业的VPN网关,支持()。A、SSL VPNB、L2TP VPNC、IPSec VPND、MPLS VPNE、GRE VPN

Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?()A、Cisco IOS IPsec/SSL VPN clientB、Cisco VPN ClinetC、ISDN terminal adapterD、Cisco Adaptive Security Appliance

You are an experienced network administrator in an international corporation. During your working hours, you are asked to deploy the Cisco SSL VPN AIM module in a Cisco 1800 Series Router. The beneficial reason for that deployment is to:()A、improve performance up to 300% for both IPsec and SSL VPN applicationsB、improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareC、improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardwareD、improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE、improve performance exclusively for SSL VPN applications

You are considering deploying the Cisco SSL VPN AIM module in a Cisco 1800 Series Router.Which benefit should you expect?()A、to improve performance exclusively for SSL VPN applicationsB、to improve performance up to 300% for both IPsec and SSL VPN applicationsC、to improve performance for both IPsec and SSL VPN applications with IPsec encryption taking place in hardwareD、to improve performance up to 200% for both IPsec and SSL VPN applications with encryption taking place in hardwareE、to improve performance up to 300% for both IPsec and SSL VPN applications with SSL encryption taking place in hardware

Which security-enabled device is recommended to provide a site-to-site IPsec VPN solution, but not SSL?()A、 Cisco Integrated Service RoutersB、 Cisco ASA 5500 Series Security ApplianceC、 CiscoWebVPN Services ModuleD、 CiscoIPsec VPN Module

You deploy a Windows Server 2008 R2 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows 7.The firewall is configured to allow only secured Web communications.You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall.What should you do?()A、Create an IPsec tunnel.B、Create an SSTP VPN connection.C、Create a PPTP VPN connection.D、Create an L2TP VPN connection.

Your network contains two Active Directory forests named contoso.com and fabrikam.com.You have a standalone Network Policy Server (NPS) named NPS1.You have a VPN server named VPN1. VPN1 is configured as a RADIUS client to NPS1.You need to ensure that users from both forests can establish VPN connections by using their own domain accounts.What should you do?()A、On NPS1, configure remediation server groups.B、On NPS1, configure connection request policies.C、On VPN1, modify the DNS suffix search order.D、On VPN1, modify the IKEv2 Client connection controls.

You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server supports only PPTP connections. A firewall protects the VPN server from the Internet. From a remote computer connected to the Internet, you attempt to connect to the VPN server. During the connection attempt, you receive a message that your user name and password are being verified. You then receive the following error message: “Error 721: The remote computer is not responding.”You need to ensure that you can establish a VPN connection to the VPN server from the Internet.  What should you do?()A、On the VPN server, enable LAN routing.B、On the VPN server, create a demand-dial interface.C、On the firewall, allow inbound connections that use TCP port 1701.D、On the firewall, allow inbound connections that use Generic Route Encapsulation (GRE) protocol 47.

You deploy Windows Server 2008 VPN server behind a firewall. Remote users connect to the VPN by using portable computers that run Windows Vista with the latest service pack. The firewall is configured to allow only secured web communications. You need to enable remote users to connect as securely as possible. you must achieve this goal without opening any additional ports on the firewall.  What should you do ( )?  A、Create an IPsec tunnelB、Create an SSTP VPN connectionC、Create a PPTP VPN connectionD、Create an L2TP VPN connection

You deploy a Windows Server 2008 R2 VPN server behind a firewall. Remote users connect to theVPN by using portable computers that run Windows 7. The firewall is configured to allow only secured Web communications.You need to enable remote users to connect as securely as possible. You must achieve this goal without opening any additional ports on the firewall. What should you do?()A、Create an IPsec tunnel.B、Create an SSTP VPN connection.C、Create a PPTP VPN connection.D、Create an L2TP VPN connection.

下列VPN技术中,属于第二层VPN的有()A、L2TP VPNB、BGP/MPLS VPNC、GRE VPND、IPSec VPN

单选题Which site-to-site VPN solution allows Cisco routers, PIX Firewalls, and Cisco hardware clients toact as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site?()A Easy VPNB GRE tunnelingC Virtual Tunnel InterfacesD Dynamic Multipoint VPNE Group Encrypted Transport VPN

多选题Users of a site-to-site VPN are reporting performance problems. The VPN connection employsIPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()AEmploy path MTU discovery.BSet the MTU higher than 1500 bytes.CTurn off pre-fragmentation for IPSec.DSet the MTU value to 1400 bytes.

多选题Users of a site-to-site VPN are reporting performance problems. The VPN connection employs IPSec and GRE and traverses several Ethernet segments. The VPN packets are being fragmented as they traverse the links. What would be two methods to overcome this problem?()AEmploy path MTU discovery.BSet the MTU higher than 1500 bytes.CTurn off pre-fragmentation for IPSec.DSet the MTU value to 1400 bytes.

单选题You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server supports only PPTP connections. A firewall protects the VPN server from the Internet. From a remote computer connected to the Internet, you attempt to connect to the VPN server. During the connection attempt, you receive a message that your user name and password are being verified. You then receive the following error message: “Error 721: The remote computer is not responding.”You need to ensure that you can establish a VPN connection to the VPN server from the Internet.  What should you do?()AOn the VPN server, enable LAN routing.BOn the VPN server, create a demand-dial interface.COn the firewall, allow inbound connections that use TCP port 1701.DOn the firewall, allow inbound connections that use Generic Route Encapsulation (GRE) protocol 47.

多选题What is a key characteristic of the Cisco Business Ready Teleworker solution which is different from traditional software-client based Teleworker solutions?()Aall traffic is encrypted using IPSec and the Triple-DES algorithmBfull support for all Enterprise applications, including data, voice, and videoCthousands of Teleworker VPN tunnels can be aggregated to a headquarters locationDthe VPN tunnel is an always on site-to-site VPN connectionEportability for use while travelingFused with broadband Cable/DSL subscriptions