Refer to the exhibit. Given the CPE deployment model, the Enterprise applications shown, and the functions being provided as designated, the appropriate product choice is _____.（）

单项选择题WhatmethodinaCiscoIOSroutercanconfirmthatpacketsmarkedforaparticularQoSmarkingarebeingmatched?（）

A.Issue a show policy-map interface command. 
B.Assuming Netflow is enabled, issue a show ip cache verbose flow command.
C.Issue a show crypto ipsec session command.
D.Issue a debug qos set command and a terminal monitor command.

单项选择题AnimportantlimitationoftheCiscoBusinessReadyTeleworkersolutionis_____.（）

A.IP phone extensions for teleworkers must be chosen carefully so not to duplicate campus phone extensions.
B.More security exposure exists due to lack of support for Intrusion Detection System and URL filtering for teleworker originated traffic.
C.Compressed RTP and IPSec are not compatible and result in no bandwidth savings.
D.Broadband modems must support Quality of Service for adequate voice quality.

单项选择题Refer to the exhibit. The Linksys router in the diagram is performing pNAT (port network address translation). What hash algorithm should you choose and why?（）

A.Use hash MD5 to ensure that IKE works through NAT. 
B.Use ah-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT. 
C.Use 3DES, as it will encrypt the IPSec header IP addresses and bypass addressing issues. 
D.Use esp-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.

单项选择题Refer to the exhibit. A Teleworker router is deployed behind a broadband Cable service. If the Teleworker router has the configuration shown, what will be the DNS server selected for DHCP clients on the LAN-side interface?（）

A.DHCP clients will automatically default to the DNS root servers for all DNS requests in the IP stacks locally. 
B.DHCP clients will use the IP set in the option 150 command.
C.DHCP clients will use the DNS entry assigned by the ISP.
D.DHCP clients will have no DNS server set in the IP stack.

多项选择题Authenticationforuserdatatrafficisimportant,butsoisauthenticationforIPvoicetraffic.TheCisco830802.1featureprovidesaneasiermethodforallowingIPvoicetrafficthroughtheVPN,becauseit（）.

A.requires access lists to identify the voice traffic 
B.can allow traffic from a device without 802.1X authentication, by MAC address
C.can allow traffic from Cisco IP phones by listening to their CDP advertisements
D.allows all packets marked with a ToS of 5 to bypass authentication
E.allows all IP voice packets to bypass authentication via stateful inspection