不定项选择题23. It is highly recommended to deploy all selected signatures initially without putting which type of action in place to permit tuning the sensor for a particular environment to minimize falsepositive and false negative events?强烈建议在初始阶段部署所有签名，但不要为它们设置哪种行为，以便根据不同的环境调节传感器，从而最大程度减少误报和漏报?
不定项选择题16. Which of the following areas of the network are the most susceptible to configuration errors affecting security?以下哪种配置错误最容易影响到网络安全?
不定项选择题1. Which network topology is in use when two sites interconnect using a secure VPN using point-to-point connectivity?拓扑结构判断：两个站点之间通过安全的VPN直接相连。
不定项选择题9. Which command is used to configure an overlapping NAT configuration?哪条命令用于配置NAT复用?
不定项选择题26. SDEE uses what kind of communication model for event messages? SDEE采用何种模型处理事件消息?
不定项选择题14. Which interface command can be used to choose the best path when deploying the dynamic routing protocol OSPF?当部署OSPF作为动态路由协议时，以下哪条接口命令能被用于调整最佳的路径选择?
不定项选择题19. What is the one central trusted introducer called?唯一的集中式可信任引介者被称为?
不定项选择题 Which 802
不定项选择题 what are the three types of private VLAN ports
不定项选择题2. Which network topology is in use when one central site is considered a hub and all other sites connect directly to the hub site? Most user traffic flows between their respective spoke networks and the hub, but when necessary, two spoke sites can communicate by the hub network acting as a relay between the spoke networks. 拓扑结构判断：中央站点是网络的核心，所有分支站点均与中央站点相连。大部分用户流量在分支站点和中央站点之间传输，两个分支站点在必要时也可以通过中央站点相互通信。
不定项选择题3. The purpose of a slow-path denial of service attack is to force packets to be what?慢路径拒绝服务攻击的目的是强制设备对数据包进行以下哪种操作?
填空题22. An ______ is a piece of information that binds a PKI member's name to its public key and puts it into a standard format. ______是一种遵循标准格式的信息块，它绑定了PKI成员的公钥与名字。
填空题8. A VPN technology that supports ______ must be chosen if the transport network does not route internal VPN address spaces. 如果传输网络不支持内部地址路由，则必须选择支持______的VPN技术。
填空题9. In the case of redundant DMVPNs with multiple GRE tunnels establishing between the same spokes, it is necessary to use ______ for IPsec SAs to establish properly. 在冗余的DMVPN解决方案中，由于分支之间可能建立多条GRE隧道，因此你应当使用______来优化IPSec SA的数量。
填空题12. A good disaster recovery plan must include contingencies for both ______ and ______ security breaches. 一份完备的灾难恢复计划必须同时考虑______与______两个方面的安全突发事件。
填空题 Verify the operational status of the 802
填空题 When terminating a clientless VPN
填空题11. Hosts behind the remote VPN router are not reachable for a session initiated from the central site in ______ mode. 在______模式下，如果中心站点作为会话的发起方，那么它将无法与远程VPN路由器身后的主机进行通信。
填空题13. The Cisco Easy VPN Server can ______ IPsec tunnels that are initiated by remote users running VPN client software on their systems. Cisco EZVPN服务器能够______那些由运行VPN客户端软件的远程用户发起的IPSec隧道。
填空题2. Configuring ______ causes a period verification to take place, thus ensuring that the client is still connected and the port should remain in the authenticated state. 交换机每隔一段时间对客户进行______，以确保客户仍然与端口相连，且端口仍然处于授权状态。