填空题26. Availability of security features on the Cisco IOS Software Catalyst switch is very ______ dependent. Cisco Catalyst交换机安全功能的可用性与______密切相关。
填空题1. ______ is an IEEE standard that provides a framework for authenticating and authorizing network devices connected to LAN ports and for preventing access in the event that the authentication fails. ______标准是一种基于端口的访问控制架构，它对连接到局域网端口的设备进行认证与授权，确保只有合法用户才能访问网络资源与服务。
填空题5. ______ VPNs are easier to deploy than a full tunneling remote access VPN，but they typically provide limited access to resources when compared to the full tunnel. ______ VPN比完全隧道远程访问VPN的部署要简单，但是相比于完全隧道VPN，这种模式只能提供有限的资源访问。
填空题16. An extended access list can use the number ranges of ______ and ______. 扩展ACL可以使用范围从______到______的列表编号。
填空题3. ______ control plane services are considered first, and then the conditioned traffic is passed through to ______ control plane services. 应首先考虑使用______控制面服务，再使用______控制面服务。
填空题25. ______ is a free event-monitoring solution for Cisco IPS events, including the IPS functionality provided by Cisco IOS Software running on a Cisco ISR. ______是一种免费的Cisco IPS事件监控解决方案，包括Cisco集成多业务路由器的IPS功能。
填空题 The security focuses of service availability
填空题15. The ______ is a virtual information storage location that contains collections of managedobjects. ______是一种虚拟的信息存储空间，可以将其视为一系列受控对象的集合。
填空题20. Digital signatures are commonly used by many authentication protocols for traffic running over ______ networks. 当流量在______网络上传输时，许多认证协议通常都使用数字签名对流量的真实性和完整性进行保护。
填空题16. The URL filter feature provides the ability to ______, ______, or ______ the traffic whose URL matches the configured characteristics. 对于URL与配置条件相互匹配的流量，URL过滤特性可以对其实施______、______或______行为。
填空题 VTIs support native IPsec tunneling
填空题18. Reducing ______ on group members is recommended to reduce the load on the key server. 推荐减少组成员的______，从而降低密钥服务器的资源消耗。
填空题 When configuring fail-open policies
填空题13. ______ will automatically detect peer failures and path failures and then automatically reroute around the failure if redundant paths and devices are in place. ______可以自动检测对等体的故障和路径的失效，同时在冗余路径和设备已经就位的情况下，它还能够自动收敛并绕过当前的故障点。
填空题 GET VPNs are based on GDOI
填空题13. The ______ feature provides the ability for a host to gain some network access even after failing authentication. 被划分到______中的主机即使认证失败，也可以访问部分网络资源。
填空题9. One major benefit of using IPsec VTIs is that it is no longer required to apply a ______ to a physical interface. IPSec VTI的一个主要优点是无需将______应用到物理接口。
填空题6. The Cisco IOS Software ______ command can be used to verify that the 802.1X authentication is functioning properly. 管理员可以使用命令______测试请求方、认证方与认证服务器的状态。
填空题13. Many of the ______ interface options that can be applied to physical interfaces can beapplied to the IPsec virtual tunnel interface. 不少应用在物理接口的______接口特性也可以应用在IPSec VTI。
填空题19. Cisco Integrated Services Routers(ISR) differ from the Catalyst switches in that the security features are handled by the ______ in the router as opposed to specialized ASICs. Cisco集成多业务路由器与Cisco Catalyst交换机的不同之处在于，前者的安全功能通过______而非专用ASIC实现。