A.Stateful packet inspection will be applied only to HTTP packets that also match ACL 110
B.This is an inbound policy（applied to traffic sourced from the less secured zone destined to the moresecured zone）
C.This is an outbound policy（applied to traffic sourced from the more secured zone destined to the lesssecured zone）
D.All packets will be dropped since the class-default traffic class is matching all traffic

A.Source interface where encrypted traffic originates
B.IP address for the remote peer
C.Transform set for the IPsec tunnel
D.Interface for the VPN connection

A.It sends ping requests in segments of an invalid size
B.It intercepts the third step in a TCP three-way handshake to hijack a session
C.It sends ping requests to a subnet， requesting that devices on that subnet send ping replies to a targetsystem
D.It uses Trojan horse applications to create a distributed collection of "zombie" computers， which can beused to launch a coordinated DDoS attack

A.password encryption service
B.changes to the config-register setting
C.the xmodem privilege EXEC mode command to recover the Cisco IOS image
D.ROMMON

A.The traffic is dropped
B.The resulting action is determined by the destination IP address
C.The source IP address is checked，and，if a match is not found， traffic is routed out interface Serial 1
D.The resulting action is determined by the destination IP address and port number

A.Altering the key length causes the ciphertext to be completely different
B.Changing only a few bits of a ciphertext message causes the plain text to be completely different
C.Altering the key length causes the plain text to be completely different
D.Changing only a few bits of a plain-text message causes the ciphertext to be completely different

A.requires the Basic or Advanced Signature Definition File
B.uses the built-in signatures that come with the Cisco IOS image as backup
C.supports SDEE，SYSLOG，and SNMP for sending Cisco IPS alerts
D.uses Cisco IPS 5.x signature format

A.The port’s violation mode is set to restrict
B.The port is shut down
C.The MAC address table is cleared and the new MAC address is entered into the table
D.The port remains enabled， but bandwidth is throttled until old MAC addresses are aged out

A.Fixed-length groups of digits called blocks
B.Individual blocks，one at a time，with the transformations varying during the encryption
C.Individual digits，one at a time，with the transformations varying during the encryption
D.Fixed-length groups of bits called blocks

A.It specifies the login authentication method list named console-in using the local user database on the router
B.It specifies the login authorization method list named console-in using the local RADIUS username-password data base
C.It specifies the login authentication list named console-in using the local username- password data base on the router
D.It specifies the login authorization method list named console-in using the local username- password data base on the router