A.This is a normal system-generated information message and does not require further investigation.
B.Service timestamps have been globally enabled.
C.This message is unimportant and can be ignored.
D.This message is a level 5 notification message.

A.A copy of the frame is forwarded out all switch ports other than the port the frame was received on.
B.The frame is transmitted on the native VLAN.
C.The switch sends a NACK segment to the frame’s source MAC address.
D.The frame is dropped.

A.Three or more login requests have failed within the last 100 seconds.
B.When the router goes into quiet mode， any host is permitted to access the router via Telnet，actual   SSH， and HTTP， since the quiet-mode access list has not been configured.
C.The login block-for command is configured to block login hosts for 93 seconds.
D.All logins from any sources are blocked for another 193 seconds.

A.Loopback interface
B.Command and control interface
C.Monitoring interface
D.Management interface

A.The period of time in which virtual login attempts are blocked， following repeated failed login attempts
B.The period of time in which virtual logins are blocked as security services fully initialize
C.A period of time when no one is attempting tolog in
D.The period of time between successive login attempts

A.aaa configuration commands and the SDM Basic Firewall wizard
B.setup exec command and the SDM Security Audit wizard
C.auto secure exec command and the SDM One-Step Lockdown wizard
D.Cisco Common Classification Policy Language configuration commands and the SDM Site-to- Site VPN

A.takes a fixed-length message and produces a 128-bit message digest
B.takes a variable-length message and produces a 168-bit message digest
C.takes a message less than 2^64 bits as input and produces a 160-bit message digest
D.takes a variable-length message and produces a 128-bit message digest ActualTests.com

A.The ACL applied to the vty lines has no in or out option like ACL being applied to an interface.
B.The ACL is applied to the Telnet port with the ip access-group command.
C.The ACL must be applied to each vty line individually.
D.The ACL should be applied to all vty lines in the in direction to prevent an unwanted user from connecting to an unsecured port.

A.It cannot support UDP flows.
B.It cannot ensure each TCP connection follows a legitimate TCP three-way handshake.
C.It cannot detect application-layer attacks.
D.The status of TCP sessions is retained in the state table after the sessions terminate.

A.A router interface can belong to multiple zones.
B.Policy maps are used to classify traffic into different traffic classes， and class maps are used to assignaction to the traffic classes.
C.The pass action works in only one direction
D.A zone-pair is bidirectional because it specifies traffic flowing among the interfaces within the zone-pair in both directions.