The topology of the BFD-bound static route is as follows: The administrator has configured the following on firewall A: [USG9000_A] bfd [USG9000_A-bfd] quit [USG9000_A] bfd aa bind peer-ip 1.1.1.2
[USG9000_A- Bfd session-aa] discriminator local 10 [USG9000_A-bfd session-aa] discriminator remote 20 Which of the following configurations can be added to the firewall to implement BFD-bound static routes?

• A.[USG9000_A]ip route-static 0.0.0.0 0 1.1.1.2 track bfd-session aa
• B.[USG9000_A-bfd session-aa] commit
• C.[USG9000_A]bfd aa bind local-ip 1.1.1.1
• D.[USG9000_A] ip route-static 0.0.0.0 0 1.1.1.2 bfd-session aa

Comment: *

Name: *

Email: *

Verification: *

Virtual firewalls to forward multiple instances refers to the presence of more than one firewall routing table, supports forwarding address overlapping, are implemented in the same configuration interface, and the user can configure permissions and view all data.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

What is the correct description of IKE?

• A.IKE is a protocol carried by UDP and is a signaling protocol of IPSec.
• B.IKE negotiates an SA for IPSec and hands over the established parameters and security associations to IPSec.
• C.IPSec encrypts or verifies the packet by using the SA negotiated by IKE.
• D.IPSec must use IKE key exchange

Comment: *

Name: *

Email: *

Verification: *

An enterprise has deployed the eSight platform. Which of the following devices can be managed on this platform? (Multiple Choice)

• A.Firewall
• B.Access Control
• C.Switch
• D.Storage Devices

Comment: *

Name: *

Email: *

Verification: *

Which of the following attacks is a SYN Flood attack?

• A.attacker sends a large number of SYN packets, which causes a large number of incomplete TCP connections to occupy the resources of the attacker.
• B.means that the attacker and the attacked object normally establish a TCP full connection, but there is no subsequent message.
• C.means that the attacker sends a large number of ICMP packets, such as ping, to the attacker.
• D.means that the attacker occupies the link bandwidth of the server by sending a large number of UDP packets to the attacker.

Comment: *

Name: *

Email: *

Verification: *