填空题15. The ______ and ______ protocols are not supported by 802.1X natively without externaltunneling support. 除非采用外部隧道协议，否则802.1X架构本身不支持______与______协议。
填空题8. The ______ switchport security classification includes dynamically learned addresses that are automatically added to the running configuration. 在端口安全中，______地址由交换机端口动态学习并自动添加到运行配置中。
填空题15. XAUTH takes place ______ IKE phase 1 completes and ______ the IKE phase 2 (IPsec SA) negotiations begin. XAUTH特性作用于IKE阶段1协商完成______和IKE阶段2(IPSec SA)协商开始______。
填空题7. ______ populates each spoke's routing table so that each spoke knows about the subnets behind the other spokes. 由于______的运行和参与，使得分支路由器能够学习到位于其他分支内部的子网。
填空题4. ______ prevents bridging loops in a redundant switched network environment. ______用于阻止交换式网络中出现的环路。
填空题12. The PAM feature is used to map ______ onto ______. PAM特性用于将______映射到______。
填空题18. A ______ signature is present in router memory and can be enabled without recompiling the signature database. ______ 签名加载在路由器内存中，无需对签名数据库进行重编译就能启用这种签名。
填空题 To handle Wake-on-LAN devices in an 802
填空题11. You should design the VPN to meet an organization's requirements for availability. The design should provide a level of high availability that is commensurate with the ______ of meeting availability needs. 设计VPN满足企业或机构的可用性需求。这种设计应当在高可用性的等级与满足可用性需求所带来的______之间寻找一种平衡
填空题8. The ______ feature enhances Control Plane Protection by providing a mechanism for limiting the number of matched protocol packets allowed at the process level. ______特性在进程级限制特定协议能容纳的未处理数据包，从而增强了控制面保护(CPPr)的功能。
填空题7. The switchport mode that actively attempts to make a switchport a trunk is ______. 在______模式中，本交换机端口主动与远端交换机端口协商中继。
填空题 When implementing 802.1X
填空题 With the ______ optional EAP-TLS parameter
填空题 In a hub-and-spoke deployment
填空题16. Group passwords are very vulnerable to compromise simply because of their ______ nature. 由于组密码具有______的特点，因此它非常容易遭到窃取和泄露。
填空题22. ______ fields are used by NetFlow to identify specific flows. NetFlow采用______字段标识特定的网络流。
填空题19. Cisco recommends that the ______ feature not be used in production environments. Cisco不建议在生产环境中启用______特性。
填空题14. Cisco IOS Software IPsec ______ is not supported on VTIs. IPSec VTI不支持Cisco IOS软件的______特性。
填空题3. ______ has a many-to-one relationship with traffic conversations being differentiated by port number. ______为多对一映射，每个会话被分配给一个指定端口。
填空题 The ______ includes the client MAC address