InwhichNASoperatingmodeareACLfilteringandbandwidththrot……

单项选择题Anorganizationhiresacontractorwhoonlyneedsaccesstoemailandagroupcalendar.Theydonotneedadministratoraccesstothecomputer.WhichVPNmodelisthemostappropriate？（）

A. Thin Model
B. Thick Client
C. Port Forwarding
D. Clientless Access
E. Layer 3 Network Access

单项选择题Whichoftheserecommendeddesignsprovidesthehighestavailability？（）

A. map the Layer 2 VLAN number to the Layer 3 subnet
B. control route propagation to edge switches using distribute lists
C. use a Layer 2 distribution interconnection link with HSRP or GLBP
D. use a Layer 3 distribution interconnection link with HSRP or GLBP
E. use equal-cost Layer 3 load balancing on all links to limit the scope of queries in EIGRP

单项选择题WhichoftheseisacorrectdescriptionofSSO？（）

A. It will only become active after a software failure.
B. It will only become active after a hardware failure.
C. It requires that Cisco NSF be enabled in order to work successfully.
D. It synchronizes the MAC·， FIB·， and adjacency tables between Active and Standby RouteProcessors.

单项选择题WhichofthesestatementsiscorrectregardingSSOandCiscoNSF？（）

A. Utilizing Cisco NSF in Layer 2 environments can reduce outages to one to three seconds.
B. Utilizing SSO in Layer 3 environments can reduce outages to one to three seconds.
C. Distribution switches are single points of failure causing outages for the end devices.
D. Utilizing Cisco NSF and SSO in a Layer 2 environment can reduce outages to less than onesecond.
E. NSF and SSO with redundant supervisors have the most impact on outages at the accesslayer.

单项选择题WhatistherecommendedpracticewhenconsideringVPNterminationandfirewallplacement？（）

A. have the firewall and VPN appliance deployed in parallel
B. place the VPN in line with the firewall， with the VPN terminating inside the firewall
C. place the public side of the VPN termination device in the DMZ behind a firewall
D. place the VPN in line with the firewall， with the VPN terminating outside the firewall