单选题When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）Awhen a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through Bwhen the Teleworker router itself is doing NAT/pNATCalwaysDnever
单选题
When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）
A
when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through
B
when the Teleworker router itself is doing NAT/pNAT
C
always
D
never
参考解析
解析：
暂无解析
相关考题：
A router that performs Network Address Translation (NAT) is installed between your computer and the Internet.The router fails. You connect the computer directly to the Internet.You need to ensure that the computer is connected to the Internet in the most secure manner possible.What should you do?（）A.AB.BC.CD.D
When is it necessary to use a public IP address on a routing interface?() A. Connect a router on a local network.B. Connect a router to another router.C. Allow distribution of routes between networks.D. Translate a private IP address.E. Connect a network to the Internet.
An Enterprise customer is concerned about the effort involved in allocating remote network addressing at the Teleworker location. What should you recommend to the customer?（）A、CiscoWorks VPN ManagerB、Easy VPN client modeC、deploy Linksys routers with menu driven configurationD、disable 802.1x and Auth Proxy on the Teleworker router
A customer wants to TFTP a new image from the corporate network to Flash on the Teleworker router through the IPSec tunnel. How should you configure the Teleworker router?（）A、No additional steps are required. B、Add the appropriate source-interface command. C、The router cannot access a server in the Enterprise Campus network. D、The Teleworker Router does not have any client applications; therefore this type of request is not possible.
Easy VPN operates in two modes. Although Client Mode has advantages, there are environments where it should not be used.（）A、Teleworker devices must be accessed from the central site (server, printers).B、IP addressing is simplified.C、The Teleworker LAN is a transit networking for routing.D、An Enterprise application does not function with Network Address Translation.E、The Teleworker router is an MPLS PE node.
When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）A、when a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through B、when the Teleworker router itself is doing NAT/pNATC、alwaysD、never
What is the best way to ensure that IKE/ISAKMP packets are not dropped when QoS is enabled on the uplink interface of the Teleworker router?（）A、QoS and IPSec should never be used together. B、IKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped.C、Source IKE/ISAKMP packets off the loop-back address. D、Classify IKE/ISAKMP packets so they are appropriately prioritized.
The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）A、when all access to the Internet is through the IPSec tunnelB、when there is direct Internet access via split-tunnelingC、when there is no Internet access configured through the Teleworker routerD、whenever you have IOS-Firewall (CBAC) configured
When is an IPSec SA built on the Teleworker Router?（）A、when the router is booted upB、when the router administratively does a no shutdown" on the IPSec SA C、when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up D、when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately
In a Teleworker deployment with a single IP phone connected to a Cisco 831 router, select the true statement regarding Call Admission Control.（）A、RSVP is a required configuration to support conference calls without voice packet loss. B、The QoS configuration on the 831 router must always provision sufficient bandwidth for two RTP streams. C、Call admission control is an issue only when using hardware DSP resources. D、When using the conference call features on a 7960 IP phone, only one RTP stream is present regardless of how many extensions are on the conference.
When is it necessary to use a public IP address on a routing interface?（）A、Connect a router on a local network.B、Connect a router to another router.C、Allow distribution of routes between networks.D、Translate a private IP address.E、Connect a network to the Internet.
Why is NTP an important component when implementing IPSec VPN in a PKI environment？（）A、 To ensure the router has the correct time when generating its private/public key pairs.B、 To ensure the router has the correct time when checking certificate validity from the remote peersC、 To ensure the router time is sync with the remote peers for encryption keys generationD、 To ensure the router time is sync with the remote peers during theDH exchangeE、 To ensure the router time is sync with the remote peers when generating the cookies during IKE phase 1
When implementing 802.1X on Teleworker routers and using separate DHCP address pools for Teleworker and Home-user devices, traffic between devices can be restricted. How can you best accomplish this?（）A、Access Lists between the inside interface and loopback interfaceB、Context Based Access ControlC、Dynamic Host Configuration ProtocolD、Network Address translation
An Enterprise customer wants to reduce the configuration effort for their Teleworker router deployments. What is one way to simplify the IPSec-related configuration in the remote routers?（）A、CiscoWorks VPN Manager B、deploy Linksys routers with menu-driven configurationC、Easy VPN client mode D、disable 802.1x and Auth Proxy on the Teleworker router
When does the E-series router start monitoring DHCP traffic using the DHCP External function?（）A、When the discovery packet enters the router from the DHCP client.B、Only when the offer packet enters the router from the DHCP server.C、When the acknowledge packet enters the router from the DHCP server.D、Only when the discovery packet leaves the router going to the DHCP server.
A router that performs Network Address Translation （NAT） is installed between your computer and the Internet. The router fails. You connect the computer directly to the Internet. You need to ensure that the computer is connected to the Internet in the most secure manner possible. What should you do？（）A、Enable the Remote Desktop feature in the System Properties dialog box.B、Configure the network category of your network connection to Public.C、Configure the network category of your network connection to Private.D、Enable the Windows Collaboration Computer Name Registration Service exception in Microsoft Windows Firewall.
单选题An Enterprise customer is concerned about the effort involved in allocating remote network addressing at the Teleworker location. What should you recommend to the customer?（）ACiscoWorks VPN ManagerBEasy VPN client modeCdeploy Linksys routers with menu driven configurationDdisable 802.1x and Auth Proxy on the Teleworker router
单选题When is an IPSec SA built on the Teleworker Router?（）Awhen the router is booted upBwhen the router administratively does a no shutdown on the IPSec SA Cwhen traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up Dwhen the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately
单选题The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）Awhen all access to the Internet is through the IPSec tunnelBwhen there is direct Internet access via split-tunnelingCwhen there is no Internet access configured through the Teleworker routerDwhenever you have IOS-Firewall (CBAC) configured
单选题When should you enable Network Address Translation Transparency (NAT-T) on the Teleworker?（）Awhen a router between the Teleworker router and the head-end VPN router is doing NAT/pNAT and does not support IPSec pass-through Bwhen the Teleworker router itself is doing NAT/pNATCalwaysDnever
单选题When implementing 802.1X on Teleworker routers and using separate DHCP address pools for Teleworker and Home-user devices, traffic between devices can be restricted. How can you best accomplish this?（）AAccess Lists between the inside interface and loopback interfaceBContext Based Access ControlCDynamic Host Configuration ProtocolDNetwork Address translation
单选题When is it necessary to use a public IP address on a routing interface?（）AConnect a router on a local network.BConnect a router to another router.CAllow distribution of routes between networks.DTranslate a private IP address.EConnect a network to the Internet.
单选题Why is NTP an important component when implementing IPSec VPN in a PKI environment？（）A To ensure the router has the correct time when generating its private/public key pairs.B To ensure the router has the correct time when checking certificate validity from the remote peersC To ensure the router time is sync with the remote peers for encryption keys generationD To ensure the router time is sync with the remote peers during theDH exchangeE To ensure the router time is sync with the remote peers when generating the cookies during IKE phase 1
单选题An Enterprise customer wants to reduce the configuration effort for their Teleworker router deployments. What is one way to simplify the IPSec-related configuration in the remote routers?（）ACiscoWorks VPN Manager Bdeploy Linksys routers with menu-driven configurationCEasy VPN client mode Ddisable 802.1x and Auth Proxy on the Teleworker router
单选题Refer to the exhibit. Which Virtual Router Redundancy Protocol （VRRP） statement is true about the roles of the master virtual router and the backup virtual router？（）A Router A is the master virtual router， and Router B is the backup virtual router. When Router A fails， Router B will become the master virtual router. When Router A recovers， Router B will maintain the role of master virtual routeB Router A is the master virtual router， and Router B is the backup virtual router. When Router A fails， Router B will become the master virtual router. When Router A recovers， it will regain the master virtual router roleC Router B is the master virtual router， and Router A is the backup virtual router. When Router B fails， Router A will become the master virtual router. When Router B recovers， Router A will maintain the role of master virtual router.D Router B is the master virtual router， and Router A is the backup virtual router. When Router B fails， Router A will become the master virtual router. When Router B recovers， it will regain the master virtual router role
单选题Easy VPN operates in two modes. Although Client Mode has advantages, there are environments where it should not be used.（）ATeleworker devices must be accessed from the central site (server, printers).BIP addressing is simplified.CThe Teleworker LAN is a transit networking for routing.DAn Enterprise application does not function with Network Address Translation.EThe Teleworker router is an MPLS PE node.
单选题What is the best way to ensure that IKE/ISAKMP packets are not dropped when QoS is enabled on the uplink interface of the Teleworker router?（）AQoS and IPSec should never be used together. BIKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped.CSource IKE/ISAKMP packets off the loop-back address. DClassify IKE/ISAKMP packets so they are appropriately prioritized.
单选题A customer wants to TFTP a new image from the corporate network to Flash on the Teleworker router through the IPSec tunnel. How should you configure the Teleworker router?（）ANo additional steps are required. BAdd the appropriate source-interface command. CThe router cannot access a server in the Enterprise Campus network. DThe Teleworker Router does not have any client applications; therefore this type of request is not possible.