A.防止敏感用戶和應(yīng)用暴露于不受信任的用戶前
B.網(wǎng)絡(luò)性能提升
C.凈化協(xié)議流量，防止暴露協(xié)議漏洞
D.正確的配置防火墻后，使得安全策略的實(shí)現(xiàn)更簡單、可擴(kuò)展、更健壯

A.RIP is an example of distance vector routing protocols.
B.Updates are periodic and include the entire routing table.
C.Routing updates are sent only after topology changes
D.The protocol can be useful in hub-and-spoke and hierarchical networks.
E.Convergence is usually faster than with link state protocols
F.Each router has its own view of the topology

A.10.10.0.0/18 subnetted with mask 255.255.255.252
B.10.10.0.0/25 subnetted with mask 255.255.255.252
C.10.10.0.0/24 subnetted with mask 255.255.255.252
D.10.10.0.0/23 subnetted with mask 255.255.255.252
E.10.10.0.0/16 subnetted with mask 255.255.255.252

A.ICMP消息
B.Traceroute
C.DOS TCP SYN
D.DOS smurf

A.Addresses are allocated after a negotiation between the server and the host to determine the length ofthe agreement.
B.Addresses are assigned for a fixed period of time.At the end of period，a newquest for an address mustbe made ，and another address is then assigned.
C.Addresses are leased to host.A host will usually keep the same address by periodicallycontacting theDHCP sever to renew the lease.
D.Addresses are permanently assigned so that the host uses the same address at all times.

A.spanning-tree backbonefast
B.spanning-tree uplinkfast
C.spanning-tree portfast
D.spanning-tree cost512

A.拒絕服務(wù)器攻擊
B.IP地址欺騙
C.DOS TCP SYN攻擊
D.DOS smurf攻擊

A.802.3ad
B.802.1w
C.802.1Q
D.802.1d

A.每個(gè)用戶的挑戰(zhàn)驗(yàn)證機(jī)制
B.簡化路由器對ACL的處理
C.降低網(wǎng)絡(luò)黑客對網(wǎng)絡(luò)的攻擊機(jī)會(huì)
D.在不損害其他安全配置的前提下，可以動(dòng)態(tài)的讓用戶穿越防火墻

A.data integrity
B.encryption
C.key exchange
D.authentication