The key lengths for DES and 3DES， respectively， are：（）

多项选择题WhichalgorithmsdidTKIPaddtothe802.11specification？（）

A. key mixing
B. AES-based encryption
C. anti-replay sequence counter
D.  message integrity check
E. cyclic redundancy check

多项选择题WheneverafailovertakesplaceontheASA（configuredforfailover），allactiveconnectionsaredroppedandclientsmustre-establishtheirconnectionsunless：（）

A. The ASA is configured for Active-Standby failover.
B.  The ASA is configured for Active-Activefailover.
C. The ASA is configured for Active-Active failover and a state failover link has been configured.
D. The ASA is configured for Active-Standby failover and a state failover link has been configured.
E. The ASA is configured to use a serial cable as the failover link.
F. The ASA is configured for LAN-Based failover

多项选择题WhattwothingsmustyoudoontherouterbeforegeneratinganSSHkeywiththe cryptokeygeneratersa IOScommand？（）

A. Configure the SSH version that the router will use
B. Configure the host name of the router
C. Enable AAA Authentication
D. Configure the default IP domain name that the router will use
E. Enable SSH transport support onthe vty lines

单项选择题Whatisthemainreasonforusingthe ipipsdeny-actionips-interface IOScommand？（）

A. To selectively apply drop actions to specific interfaces
B. To enable IOS to droptraffic for signatures configured with the Drop action
C. To support load-balancing configurations in which traffic can arrive via multipleinterfaces 
D. This is nota valid IOS command

多项选择题WhichofthefollowingistrueabouttheCiscoIOS-IPSfunctionality？（）

A. The signatures available are built into the IOS code.
B. Toupdate signatures youneed to install a new IOS image
C. To activate new signatures you download a new Signature DefiitionFile （SDF） from Cisco’s web site
D. Loading and enabling selected IPS signatures is user configurable
E. Cisco IOS onlyprovides Intrusion Detection functionality
F. Cisco IOS-IPS requires a network module installed in your router running sensor software