A. If a port is connected to a foreign device make sure to disable CDP， DTP， RPR， PAgP， UDLP， and any other unnecessary protocols， and enable UplinkFast/BPDU guard on it.
B. Enable root guard feature to prevent a directly or indirectly connected STP-capable device from affecting the location of the root bridge.
C. Configure VTP domains appropriately or turn off VTP altogether to limit or prevent possible undesirable protocol interaction with regards to the network-wide VLAN configuration.
D. Set the native VLAN ID to match the port VLAN ID of any 802.1q trunk to prevent spoofing.
E. Disable all unused ports and place them in an unused VLAN to avoid unauthorized access.

A. Smaller companies are at less risk than larger enterprises， so their security needs are not as great.
B. Business strategy should directly relate to the security policy and budget.
C. The designated security expert should report to the IT department， since that is where thesolution will be implemented.
D. Security should be a continuous process.
E. Security solutions should come from multiple vendors to make it easier to coordinate security events from the point of origin.

A. Cisco lOS Matrix Navigator
B. Cisco Feature Navigator
C. Cisco lOS Package Planner
D. Cisco lOS Security Planner
E. Cisco Dynamic Configuration Tool

A. available only in autonomous APs
B. available in autonomous and lightweight APs
C. a feature of WDS in autonomous APs
D. a feature of WDS in lightweight APs
E. requires at least one AP and one Wireless LAN Services Module

A. An 802.11 g access point with a variety of antennas can be used in all standard site surveys.
B. Site surveys can be performed manually or through assisted site survey.
C. Channel power during testing starts at the default minimum and gradually increases to the maximum.
D. Overlapping access points can create performance problems.
E. Surveys should be done after hours in an office building or during reduced inventory levels in warehouses.

A. It provides configuration， monitoring， and troubleshooting capabilities across a wide range of security products.
B. It integrates security device management products and collects events on an "as needed" basis to reduce management overhead.
C. It integrates security management capabilities into the router or switch.
D. It provides a single point of contact for all security configuration tasks thereby enhancing the return on investment.
E. It leverages existing network management systems such as HP OpenView to lower the cost of implementation.

A. full 802.11e compliance
B. full WPAv2 compliance
C. wireless IDS
D. NAC

A. onboard VPN accelerator
B. events correlation and proactive response
C. high-performance AIM VPN modules
D. virtual firewall
E. Cisco lOS Firewall and lOS IPS
F. transparent firewall

A. BPII 
B. SPII-Plus 
C. FPII 
D. EPII-Plus 
E. HPII 
F. HPII-PIus

A. Preparation
B. Planning
C. Design
D. Implementation
E. Operation
F. Optimization