Toensurequality，whatisthemaximumend-to-endtransittimein……

多项选择题WhichtwostatementsaboutCiscoSecurityManagementSuitearecorrect？（）

A. It should be implemented in a management VLAN.
B. Its connection to managed devices should be over a data VLAN.
C. It is made up of Cisco Security MARS and Clean Access software.
D. It should be deployed as close to the edge of the network as possible.
E. It delivers policy administration and enforcement for the Cisco Self-Defending Network.

多项选择题WhichthreemechanismsareusedtosecuremanagementtrafficfromoutsideIPSsensors？（）

A. secure tunnels
B. a separate management VLAN
C. secure VLANs to isolate sensors
D. an out-of-band path around the firewall
E. asymmetric traffic flows to isolate sensors
F. private VLANs to put all sensors on isolated ports

多项选择题InwhichtwolocationsinanenterprisenetworkcananIPSsensorbeplaced？（）

A. bridging VLANs on two switches
B. bridging two VLANs on one switch
C. between two Layer 2 devices with trunking
D. between two Layer 2 devices without trunking
E. between a Layer 2 device and a Layer 3 device with trunking

多项选择题Whichtwoofthesecorrectlydescribeasymmetricroutingandfirewalls？（）

A. only operational in routed mode
B. only operational in transparent mode
C. only eight interfaces can belong to an asymmetric routing group
D. operational in both failover and non-failover configurations
E. only operational when the firewall has been configured for failover

多项选择题Whichtwostatementsaboutaninterfaceconfiguredwiththeasr-groupcommandarecorrect？（）

A. The FWSM supports up to 16 asymmetric routing groups.
B. If a matching packet is not found， the packet is dropped.
C. Asymetric routing of return traffic is enabled.
D. If a matching packet is found， the Layer 3 header is rewritten.
E. If a matching packet is found， the Layer 3 header is rewritten and the packet is forwarded to thedefault gateway.