A. key mixingB. AES-based encryptionC. anti-replay sequ……

多项选择题WheneverafailovertakesplaceontheASA（configuredforfailover），allactiveconnectionsaredroppedandclientsmustre-establishtheirconnectionsunless：（）

A. The ASA is configured for Active-Standby failover.
B.  The ASA is configured for Active-Activefailover.
C. The ASA is configured for Active-Active failover and a state failover link has been configured.
D. The ASA is configured for Active-Standby failover and a state failover link has been configured.
E. The ASA is configured to use a serial cable as the failover link.
F. The ASA is configured for LAN-Based failover

多项选择题WhattwothingsmustyoudoontherouterbeforegeneratinganSSHkeywiththe cryptokeygeneratersa IOScommand？（）

A. Configure the SSH version that the router will use
B. Configure the host name of the router
C. Enable AAA Authentication
D. Configure the default IP domain name that the router will use
E. Enable SSH transport support onthe vty lines

单项选择题Whatisthemainreasonforusingthe ipipsdeny-actionips-interface IOScommand？（）

A. To selectively apply drop actions to specific interfaces
B. To enable IOS to droptraffic for signatures configured with the Drop action
C. To support load-balancing configurations in which traffic can arrive via multipleinterfaces 
D. This is nota valid IOS command

多项选择题WhichofthefollowingistrueabouttheCiscoIOS-IPSfunctionality？（）

A. The signatures available are built into the IOS code.
B. Toupdate signatures youneed to install a new IOS image
C. To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
D. Loading and enabling selected IPS signatures is user configurable
E. Cisco IOS onlyprovides Intrusion Detection functionality
F. Cisco IOS-IPS requires a network module installed in your router running sensor software

单项选择题WhatistrueaboutaPre-BlockACLconfiguredwhensettingupyoursensortoperformIPBlocking？（）

A. The Pre-Block ACL is overwritten when a blockingaction is initiatied by the sensor
B. The blocking ACL entries generated by the sensor override the Pre-Block ACL entries
C. The Pre-Block ACL entries override the blocking ACL entries generated by the sensor
D. The Pre-Block ACL is replaced by the Post-Block ACL when a blocking actionis initiated bythe sensor
E. You can not configure a Pre-Block ACL when configuring IP Blockingon your sensor