Avoid DHCP server spoofing attacks. DHCP snooping is usually enabled. What is the correct statement?

• A.connected user's firewall interface is configured in trusted mode
• B.The firewall interface connected to the DHCP server is configured as untrusted mode.
• C.DHCP relay packets received on the interface in the untrusted mode are discarded.
• D.The DHCP relay packet received in the D trusted mode and passed the DHCP snooping check.

Comment: *

Name: *

Email: *

Verification: *

Which of the following messages can be used for health check in server load balancing? (Multiple choice)

• A.TCP packets
• B.DNS packets
• C.ICMP packets
• D.UDP packets

Comment: *

Name: *

Email: *

Verification: *

Refer to the following load balancing configuration:
[USG] slb enable
[USG] slb
[USG-slb] rserver 1 rip 10.1.1.3 weight 32
[USG-slb] rserver 2 rip 14.1.1.4 weight 16
[USG-slb] rserver 3 rip 10.1.1.5 weight 32
[USG-slb] group test
[USG-slb-group-test] metric srchash
[USG-slb-group-test] add rserver 1
[USG-slb-group-test] add rserver 2
[USG-slb-group-test] add rserver 3
Which of the following statements is correct? (Choose two answers)

• A.The load balancing algorithm is the polling algorithm.
• B.The configuration is a complete load balancing configuration.
• C.Values of weight determine which data stream path should be used, the smaller weight values should correspond to the real server that has less processing capacity.
• D.Weight is the weight of a real weight.

Comment: *

Name: *

Email: *

Verification: *

SSL works at the application layer and is encrypted for specific applications, while IPsec operates at which layer and provides transparent encryption protection for this level and above?

• A.Transport Layer
• B.The data link layer
• C.Network Layer
• D.Presentation Layer

Comment: *

Name: *

Email: *

Verification: *

When using manual IPsec negotiation, if there is a NAT device on the network then we need to use NAT traversal.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *