填空题9. The recommended algorithms for encryption of user traffic are ______ and ______. 用于加密用户流量的推荐算法是______和______。
填空题12. The Easy VPN client can be the Cisco VPN client or an Easy VPN Remote hardware device such as the ______. EZVPN客户端可以是Cisco VPN客户端软件，或是EZVPN远程硬件设备，如______。
填空题15. Hackers with malicious intent are referred to as ______. 心怀鬼胎的黑客被称为______。
填空题4. Output control plane services are applied after the packet exits the control plane and are only available with ______ control plane services. 输出控制面服务在流量离开控制面后执行，且仅在 ______ 控制面服务中可用。
填空题2. Three different types of NAT can be configured: ______, ______, and ______. NAT包括______、______与______等3种类型。
填空题14. As the Cisco Easy VPN Remote initiates a VPN tunnel, the Cisco Easy VPN ______ pushes the IP Security (IPsec) policies to the Cisco Easy VPN Remote ______ and creates the corresponding VPN tunnel connection. 当Cisco EZVPN远程特性发起VPN隧道时，Cisco EZVPN ______可以向Cisco EZVPN远程______推送IPSec策略，并建立相关的VPN隧道连接。
填空题 IPsec ______ define the encapsulation(ESP or AH)
填空题 In a LAN environment
填空题2. The ______ created on the mGRE interface on the hub must be large enough to accommodate all the spoke routers' GRE interfaces. 在中心路由器的mGRE接口上所使用的______必须足够大，以便容纳所有分支路由器的GRE接口。
填空题2. The ______ ensures network and service availability. ______用于确保网络与服务的可用性。
填空题 In a VTI-based IPsec VPN topology
填空题6. ARP also has another method of identifying host IP-to-MAC associations, which iscalled ______. ______用于确定某个IP地址关联的MAC地址。
填空题8. A firewall is used to enforce an access policy between ______. 防火墙在______之间执行访问策略。
填空题10. When the user sends a(n) ______ request to the web server, the switch intercepts theuser's HTTP session request and presents the user with a pop-up dialog box that hasa username and password field. 用户向Web服务器发送______请求，交换机截取该请求后在用户的Web浏览器中弹出一个对话框，提示用户输入用户名和密码。
填空题14. The configuration of SSH without the use of labels requires that the ______ and ______ be configured first. 如果不采用密钥对标签配置SSH，则需要首先设置______与______。
填空题23. The Cisco IOS Software Certificate Server stores its database on the local ______ of the router. Cisco IOS软件证书服务器把数据库存储于路由器的本地______。
填空题15. There is a(n) ______ at the end of each access list. 每个ACL的末尾都包含—条______语句。
填空题7. The recommended algorithms for IKE session encryption are ______ and ______. 用于IKE会话加密的推荐算法是______和______。
填空题22. GET VPNs use ______ as the group keying mechanism. GET VPN使用______作为组密钥分发机制。
填空题16. ______ scans scan the service ports of a single host and request different services ateach port. ______扫描是对一台主机的不同端口以及每个端口的不同服务进行扫描。