CCSP SelfStudy CCSP CSI: Exam Certification Guide, Second Edition [Electronic resources] نسخه متنی

What are the three layers of the SAFE Enterprise blueprint?

1. Enterprise campus

2. Service provider edge

3. Enterprise building layer

4. Enterprise core

5. Enterprise edge layer

6. Internet layer

Which modules compose the enterprise campus layer?

1. Management module

2. Enterprise Edge Distribution module

3. WAN module

4. Server module

5. Building Distribution module

6. Core module

7. E-Commerce module

8. Building module

Which modules compose the enterprise edge layer?

1. Management module

2. WAN module

3. Server module

4. E-Commerce module

5. VPN and Remote Access module

6. Corporate Internet module

In the Management module of the enterprise campus, the Cisco IOS device provides which of the following functions?

1. Provides stateful packet filtering from the rest of the enterprise blueprint modules

2. Provides IPSec termination for management

3. Performs network intrusion detection

4. Enforces traffic shaping and policing

5. Provides user authentication services

What is the role of the system administration host in the Management module?

1. Aggregates log information for the firewall and the NIDS devices

2. Provides SNMP management and monitoring of network devices

3. Provides for configuration, software, and content changes on network devices, and IPS on other network-management hosts

4. Provides one-time, two-factor authentication services to the network devices

5. Provides alarm aggregation and analysis for all network IDS appliances throughout the Campus and Corporate Internet modules

What is the purpose of the Server module in the enterprise campus design?

1. The Server module provides access to end-user workstations.

2. The Server module provides applications services to end users and other systems within the blueprint.

3. The Server module provides quick routing and switching of traffic within the campus.

4. The Server module provides access to network-management applications within the campus.

What is the function of the Layer 3 switches in the Building Distribution module?

1. To provide traffic segmentation from the enterprise edge to the core

2. To route and switch traffic as quickly as possible

3. To provide for Layer 2 switch aggregation before the core, along with services such as filtering, QoS, CAR, and VLAN definition

4. To facilitate the use of IDS in the module

5. None of these answers is correct.

Which of the following key devices are present in the Building module?

1. Layer 3 switch

2. E-mail server

3. IP phones

4. Firewall

5. Intrusion-detection appliance

6. End-user workstations

7. Web server

8. Layer 2 switch

What is the purpose of the access-control server in the Management module?

1. Provides for password authentication using a one-time, one-factor authentication service

2. Authorizes users to execute commands using Kerberos authentication

3. Provides access to the console port of other network devices

4. Provides one-time, two-factor authentication services to the network devices

What is the purpose of the Layer 3 switches in the Server module?

1. The switches in the module are not Layer 3 switches; they are Layer 2 switches.

2. No special purpose is assigned to the Layer 3 switches in this module.

3. The Layer 3 switches provide services such as traffic filtering, QoS, VLANs, and private VLANs to the servers. They also provide for traffic inspection through the use of integrated NIDS.

4. The Layer 3 switches provide firewall services through the use of an integrated Firewall Service module.

The E-Commerce module in the enterprise edge can be subdivided into three layers. What are they?

1. Internet layer

2. Web layer

3. Firewall layer

4. Middle layer

5. Internal layer

6. Application servers layer

7. Database layer

Which of the following is a factor in determining whether a WAN module is needed?

1. When there is an unjustifiable cost factor of migrating to IPSec VPNs

2. Whenever management feels that WANs are justified

3. When QoS requirements cannot be met through the use of IPSec VPNs

4. When private networks are needed for security reasons

5. When legacy WAN connections exist

What is the purpose of the firewalls in the E-Commerce module?

1. To provide traffic negotiation and control among the various layers of the e-commerce design

2. To terminate VPNs coming into the E-Commerce module

3. To provide inbound traffic enforcement only

4. To provide network-level protection of resources through stateful filtering of traffic

5. To terminate SSL connections coming into the E-Commerce module

Which IPSec parameters are used in the VPN and Remote Access module of the SAFE Enterprise blueprint design?

1. AH, 3DES, SHA1-HMAC

2. ESP, DES, SHA1-HMAC

3. AH, AES-256, MD5-HMAC

4. AH, AES-192, SHA1-HMAC

5. ESP, 3DES, SHA1-HMAC

6. ESP, AES-128, MD5-HMAC

7. AH, NULL, SHA1-HMAC

Which of the following are some of the functions of the firewalls in the Corporate Internet module?

1. Layer 4 to Layer 7 traffic inspection

2. Stateful filtering of traffic

3. Remote IPSec tunnel termination for users and remote sites

4. Intrusion detection

5. Caching of user credentials

6. Differentiated access for remote-access users