填空题 With Layer 3/4 traffic
填空题17. ______ is where existing point-to-point key exchanges can be tied together to soften the public key distribution problem. ______能够配合现存的安全点到点密钥交换方法来缓和公钥分发的问题。
填空题18. When assigning reflexive access lists to an interface，they are typically placed ______ on an interface facing away from the internal network or ______ on an interface facing toward the internal network. 为接口配置白反ACL时，通常将其置于背对内部网络的______方向，或面向内部网络的______方向。
填空题10. Traffic policy is applied ______ between zones using zone pairs. 通过使用区域对，流量策略在区域之间是______应用的。
填空题 9
填空题 When a signature is matched
填空题24. ______ scans scan the service ports of a single host and request different services ateach port. ______扫描是对一台主机的所有端口以及每个端口的不同服务进行扫描。
填空题20. The Cisco Configuration Professional (Cisco CP) is a GUI device-management application for ______. Cisco配置专家(Cisco CP)是一种用于配置______的GUI设备管理软件。
填空题5. ______ provides a framework that provides pokey negotiations and key management processes.是一种用于策略协商与密钥管理的框架。
填空题22. ______ is the process of determining that a user is who he says he is. ______ 是验证用户身份的过程。
填空题 If ______ are needed
填空题 ______ can be used to restrict 802
填空题 When enrolling to a PKI
填空题11. The highest available configuration mode is ______, which is used to configure featureoptions for the entire device. 最高级别的命令配置模式是______，该模式用于对整台设备的特性进行配置。
填空题12. The ______ feature provides the ability for a host without 802.1X support to gain fullnetwork access. 对于不支持802.1X的主机，可以采用______功能对其进行认证并给予访问网络资源的所有权限。
填空题10. The three different private VLAN classifications are ______, ______, and ______. 私有VLAN中的端口角色可以分为______、______与______。
填空题21. The ______ defines the encapsulation and cryptographic settings that will be distributed to the group members by the key server as part of the SA. ______定义了封装及加密的策略，并且这些策略将被密钥服务器分发给组成员作为安全关联(SA)的一部分。
填空题7. The SAFE design principle ______ was developed to make sure that designs were easilycapable of meeting industry benchmarks. SAFE架构定义的______设计原则旨在确保网络设计符合行业标准。
填空题 If no zone pair is defined
填空题1. The ______ Security aspect protects network data from being altered in transit. ______可以保护数据在传输过程中不被篡改。