For best packet switching performance with crypto, what is the recommend packet switching path in a Cisco Teleworker Router?（）

单项选择题Whenimplementing802.1XonTeleworkerroutersandusingseparateDHCPaddresspoolsforTeleworkerandHome-userdevices,trafficbetweendevicescanberestricted.Howcanyoubestaccomplishthis?（）

A.Access Lists between the inside interface and loopback interface
B.Context Based Access Control
C.Dynamic Host Configuration Protocol
D.Network Address translation

单项选择题Refer to the exhibit. Given the CPE deployment model, the Enterprise applications shown, and the functions being provided as designated, the appropriate product choice is _____.（）

A.Cisco PIX 501 Firewall
B.Cisco 831 router
C.Cisco 837 router 
D.Cisco VPN3002 Hardware Client
E.Cisco SW VPN Client

单项选择题WhatmethodinaCiscoIOSroutercanconfirmthatpacketsmarkedforaparticularQoSmarkingarebeingmatched?（）

A.Issue a show policy-map interface command. 
B.Assuming Netflow is enabled, issue a show ip cache verbose flow command.
C.Issue a show crypto ipsec session command.
D.Issue a debug qos set command and a terminal monitor command.

单项选择题AnimportantlimitationoftheCiscoBusinessReadyTeleworkersolutionis_____.（）

A.IP phone extensions for teleworkers must be chosen carefully so not to duplicate campus phone extensions.
B.More security exposure exists due to lack of support for Intrusion Detection System and URL filtering for teleworker originated traffic.
C.Compressed RTP and IPSec are not compatible and result in no bandwidth savings.
D.Broadband modems must support Quality of Service for adequate voice quality.

单项选择题Refer to the exhibit. The Linksys router in the diagram is performing pNAT (port network address translation). What hash algorithm should you choose and why?（）

A.Use hash MD5 to ensure that IKE works through NAT. 
B.Use ah-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT. 
C.Use 3DES, as it will encrypt the IPSec header IP addresses and bypass addressing issues. 
D.Use esp-sha-hmac, as it does not check the integrity of the IP header. The IP header will change due to NAT.