When configuring IOS firewall （CBAC） operations on Cisco routers， the "inspection rule" could be applied at which two locations？ （）

多项选择题TheCS-MARSapplianceoffersattackmitigatonsusingwhichtwomethods？（）

A. Automatically pushing ACLs to layer 3 devices to block the attacker’s traffic
B. Automatically pushing commands to layer 2 switches to shutdown the attacker’s ports
C. Automatically resetting the attacker’sTCP connections
D. RecommendingACLs tobe manuallypushed tolayer 3 devices such as routers/firewalls
E. Operating as an inline appliance， it automaticallyblocks malicious traffic inline
F. Working inconjuction with CSM to block the attacker’s traffic inline

单项选择题WhichofthefollowingarenotstepsinsettingupaTLSsession？（）

A. Client sends Hello to Server listing all of its supported cipher suites
B. Server sends Hello to Client listing all of its supported cipher suites
C. Client calculates and sends encryptedpre_master_secret
D. Client and Server calculate keys from pre_master_secret
E. Server sends Change Cipher Spec to indicate a shift to encrypted mode

单项选择题PEAPprovidesauthenticationfortheEAPexchangeusing：（）

A. RC4
B. TLS
C. SSH
D. AES
E. 3DES

单项选择题Toenable TCPPortForwardingapplicationsusingIOSWebVPN，whatneedstobedownloadedtotheclient？（）

A. Cisco SecurityAgent （CSA）
B. CiscoTrustAgent （CTA）
C. Cisco Secure Desktop （CSD）
D. A small Java Applet
E. SSLVPN Client （SVC）
F. SSLVPN Client （SVC） and Cisco Secure Desktop （CSD）

单项选择题WhyisNTPanimportantcomponentwhenimplementingIPSecVPNinaPKIenvironment？（）

A. To ensure the router has the correct time when generating its private/public key pairs.
B. To ensure the router has the correct time when checking certificate validity from the remote peers
C. To ensure the router time is sync with the remote peers for encryption keys generation
D. To ensure the router time is sync with the remote peers during theDH exchange
E. To ensure the router time is sync with the remote peers when generating the cookies during IKE phase 1