简答题

Drag each element of the Cisco IOS Firewall Feature Set from the above and drop onto itsdescription on the below.

问答题Drag the protocols that are used to distribute MPLS labels from the above to the target area on thebelow.（Not all options will be used）

问答题Drag and drop question. The upper gives the MPLS functions， the bottom describes the planes. Drag the above items to the proper location at the below

单项选择题Study the exhibit carefully. Routers A and B are customer routers. Routers 1， 2， 3 and 4 are provider routers. The routers areoperating with various IOS versions. Which frame mode MPLS configuration statement is true？（）

A.Before MPLS is enabled， the ip cef command is only requited on routers 1 and 4
B.After MPLS is enabled， the ip cef command is only required on routers 1 and 4
C.Before MPLS is enabled， the ip cef command is only required on the Ethernet 0 interfaces ofrouters 1 and 4
D.After MPLS is enabled， the ip cef command is only required on the Ethernet 0 interfaces ofrouters 1 and 4
E.Before MPLS is enabled， the ip cef command must be applied to all provider routers

单项选择题A new router was configured with the following commands： The configuration above was found on an Internet Service Provider’s （ISP） Multiprotocol LabelSwitching （MPLS） network. What is its purpose？（）

A.To prevent customers from running TDP with the ISP routers
B.To prevent customers from running LDP with the ISP routers
C.To prevent other ISPs from running LDP with the ISP routers
D.To prevent man-in-the-middle attacks
E.To use CBAC to shut down Distributed Denial of Service attacks
F.To use IPS to protect against session-replay attacks
G.None of the above

多项选择题IPSecVPNisawidely-acknowledgedsolutionforenterprisenetwork.WhichthreeIPsecVPNstatementsaretrue？（）

A.IKE keepalives are unidirectional and sent every ten seconds
B.IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
C.To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
D.IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers