不定项选择题21. What security controls are capable of monitoring traffic to detect and prevent problems in the network?哪种安全控制机制通过监控流量的行为以发现并阻止网络中可能存在的威胁?
不定项选择题24. Which of the following do you configure to prevent traffic from traversing an untrusted interface unless the group member is registered into a GET VPN?在组成员尚未成功注册到GETVPN时，你可以配置以下哪项来阻止流量在不可信任的接口发送?
不定项选择题17. Which of the following port authentication host modes allows a single data and singlevoice host to be authenticated?以下哪种端口认证主机模式可以同时对数据设备和语音设备进行认证?
不定项选择题21. Which of the following are modes of operation of the EZVPN Remote feature on hardware clients?(Select all that apply.)以下哪些是硬件客户端EZVPN远程特性的操作模式?(选择所有正确的选项)
不定项选择题 If MAB is enabled
不定项选择题12. What can users use to access internal resources with the ISR performing as a proxy to provide internal content on its SSL VPN portal?用户能够使用以下哪种方式来访问内部资源，此时ISR扮演代理，并在其SSL VPN的门户页而上提供资源内容?
不定项选择题9. If a DMVPN spoke router is configured with a point-to-point GRE interface, the spoke will only participate in which type of topology? 如果DMVPN分支路由器配置了点到点的GRE接口，那么该分支只能参与哪种类型的拓扑?
不定项选择题1. The central processing unit of each device is tasked to not do which of these?设备CPU不具备以下哪种功能?
不定项选择题19. Which of the following global services are disabled by the Auto Secure feature?启用Auto Secure后，以下哪些全局服务将被禁用?
不定项选择题4. Which of the following are the main sections of the Security Control Framework?安全控制架构主要由以下哪些部分构成?
不定项选择题23. Which of the following are valid steps required for the creation of an FPM filtering policy?以下属于创建FPM过滤策略的步骤?
不定项选择题 The DTP state on a trunk port can be set to what
不定项选择题6. What UDP ports are used by Cisco as the default authentication and accounting ports? Cisco ACS使用哪两种UDP端口作为默认的认证与结算端口?
不定项选择题3. Which mechanism provides key management and transmission protection?以下哪项技术提供了密钥管理和传输保护的功能?
不定项选择题5. DMVPNs can use pre-shared keys or PKI-based IKE authentication. Either choice is acceptable for a hub-and-spoke network, but which of the following is recommended for a fully meshed network? DMVPN支持使用预共享密钥或基于PKI的IKE认证。对于中心到分支模型的拓扑，这两种认证方法都是可接受的；但是对于全互连模型的拓扑，你应当优选使用以下哪项认证方法?
不定项选择题15. Which of the following are valid EAP packet types?以下哪些是合法的EAP数据包类型?
不定项选择题12. Which of the following type of password is used to secure SSH connections?以下哪种密码用于保护SSH连接的安全?
不定项选择题10. Which of the following PVLAN edge ports is unable to communicate with other PVLAN edge ports?以下哪种PVE端口无法与其他PVE端口相互通信?
不定项选择题9. What is the tool used to create the Cisco SSC configuration profile?哪种工具用于创建Cisco SSC配置文件?
不定项选择题19. GET VPNs use which feature to provide large-scale transmission protection that uses the existing routing infrastructure? (Select all that apply.) GET VPN凭借以下哪些特性的支持，使得它能够在现有的路由基础设施上提供大规模的传输保护?(选择所有正确答案)