填空题 IPsec ______ define the encapsulation(ESP or AH)
填空题 In a LAN environment
填空题2. The ______ created on the mGRE interface on the hub must be large enough to accommodate all the spoke routers' GRE interfaces. 在中心路由器的mGRE接口上所使用的______必须足够大，以便容纳所有分支路由器的GRE接口。
填空题2. The ______ ensures network and service availability. ______用于确保网络与服务的可用性。
填空题 In a VTI-based IPsec VPN topology
填空题6. ARP also has another method of identifying host IP-to-MAC associations, which iscalled ______. ______用于确定某个IP地址关联的MAC地址。
填空题8. A firewall is used to enforce an access policy between ______. 防火墙在______之间执行访问策略。
填空题10. When the user sends a(n) ______ request to the web server, the switch intercepts theuser's HTTP session request and presents the user with a pop-up dialog box that hasa username and password field. 用户向Web服务器发送______请求，交换机截取该请求后在用户的Web浏览器中弹出一个对话框，提示用户输入用户名和密码。
填空题14. The configuration of SSH without the use of labels requires that the ______ and ______ be configured first. 如果不采用密钥对标签配置SSH，则需要首先设置______与______。
填空题23. The Cisco IOS Software Certificate Server stores its database on the local ______ of the router. Cisco IOS软件证书服务器把数据库存储于路由器的本地______。
填空题15. There is a(n) ______ at the end of each access list. 每个ACL的末尾都包含—条______语句。
填空题7. The recommended algorithms for IKE session encryption are ______ and ______. 用于IKE会话加密的推荐算法是______和______。
填空题22. GET VPNs use ______ as the group keying mechanism. GET VPN使用______作为组密钥分发机制。
填空题16. ______ scans scan the service ports of a single host and request different services ateach port. ______扫描是对一台主机的不同端口以及每个端口的不同服务进行扫描。
填空题13. Unauthorized network access is made easier when ______ are implemented on thenetwork. ______会在一定程度上降低攻击者入侵网络的难度。
填空题2. When using any-to-any communications with direct communication paths with lowlatency and high throughput, a ______ topology is typically the only choice. 当要求任意站点之间都能直接通信、数据传输延时较低且吞吐量较高时，一般采用______拓扑。
填空题 The SCF model defines the harden, isolate
填空题 In a VTI-based IPsec VPN
填空题 The ______ in a switch stores information
填空题 To participate in the PKI system