Which site-to-site VPN solution allows Cisco routers， PIX Firewalls， and Cisco hardware clients to act as remote VPN clients in order to receive predefined security policies and configuration parameters from the VPN headend at the central site？（）

A . If the VPN server is configured for Xauth， the VPN client waits for a username / password challenge. B . The Cisco Easy VPN feature only supports transform sets that provide authentication and encryption. C . The VPN client initiates aggressive mode （AM） if a pre-shared key is used for authentication during the IKE phase 1 process. D . The VPN client verifies a server username/password challenge by using a AAA authentication server that supports TACACS+ or RADIUS. E . The VPN server can only be enabled on Cisco PIX Firewalls and Cisco VPN 3000 series concentrators. F . When connecting with a VPN client，the VPN server must be configured for ISAKMP group 1，2 or 5.

A . QuickVPN (QVPN) client software for simplified management B . minimal configuration requirements C . 802.1g capabilities and support for multiple wireless networks simultaneously (multiple BSSIDs) D . wireless bridging to overcome the lack of physical network cable

A . Default MDT groups are used for PIM control traffic， low-bandwidth sources， and flooding of sparse mode traffic. B . MDTs are built in customer networks C . Data MDT groups are used for high-bandwidth sources to reduce replication to uninterested PEs. D . MDTs are built in provider networks E . The number of MDTs depends on PIM modes of MDT groups.

A .  Cisco Integrated Service Routers B .  Cisco ASA 5500 Series Security Appliance C .  CiscoWebVPN Services Module D .  CiscoIPsec VPN Module

A . User authentication B . Overlapping IP address space C . GRE or IPsec configuration D . MTU size E . VPN client software F . Authentication server configured ly

A . Cisco IOS IPsec/SSL VPN client B . Cisco VPN Clinet C . ISDN terminal adapter D . Cisco Adaptive Security Appliance

A . Easy VPN B . GRE tunneling C . Virtual Tunnel Interfaces D . DynamicMultipoint VPN E . Group Encrypted Transport VPN

A . The command access-list 110 permit gre must be configured to specify which traffic will be encrypted. B . The command access-list 110 permit ip must be configured to specify which hosts can use the tunnel. C . The tunnel destination 172.17.63.18 command must be configured on the Tunnel0 interface. D . The tunnel mode gre command must be configured on the Tunnel0 interface. E . The tunnel source Ethernet1 command must be configured on the Tunnel0 interface. F . The tunnel source Tunnel0 command must be configured on the Tunnel0 interface.

A . LDP notification B . L2TPv3 session C . VPN route target communities D . Multiprotocol BGP peering of PE routers E . MPLS forwarding

A .  number of branch offices B .  number of IGP routing peers C .  remote Office and home worker throughput bandwidth requirements D .  high availability requirements E .  Supported applicatio

A .  high scalability B .  the design supports a layered security model C .  firewall addressing does not need to change D .  IPsec decrypted traffic is inspected by the firewall E .  there is a centralized point for logging and content inspectio

A .  Easy VPN B .  GRE tunneling C .  Virtual Tunnel Interfaces D .  Dynamic Multipoint VPN E .  Group Encrypted Transport VPN

A . The MDT group address should be the same for both address families in the same VRF B . The MDT group address should be the same for both address families in the different VRFs C . Configuration of the MDT source on a pre-VRF basis is supported only on IPv6 D . The MDT group address should be different for both address families in the same VRF

A . EAP B . Chap C . Ms-Chap D . PPTP E . PAP F . SPAP

A . Routing loops B . Misconfiguration of VPN end points C . Overiapping IP address space D . DMVPN E . User profiles F . MTU

A . HMAC-MD5 B . RSA C . HMAC-SHA-1 D . DH1 E . DH2

A . allows dynamic routing over the tunnel B . supports multi-protocol （non-IP） traffic over the tunnel C . reduces IPsec headers overhead since tunnel mode is used D . simplifies the ACL used in the crypto map E . uses Virtual Tunnel Interface （VTI） to simplify the IPsec VPN configuratio

A . Cisco IOS IPsec/SSL VPN client B . Cisco VPN Clinet C . ISDN terminal adapter D . Cisco Adaptive Security Appliance

A . The configuration to define Route-Distinguisher is Ip vrf bulle Rd 1：1 B . A route distinguisher can be imported and exported to and from a VRF C . Route-Distinguisher is an 8 byte BGP attribute value used in influencing BGP best path algorithm. D . Route-Distinguisher is an 8 byte value used in creating unique VPNv4 address.

A . L2VPN Pseudowire Switching allows the user to extend L2VPN Pseudowires across an inter-AS boundary B . L2VPN Pseudowire Switching allows the user to extend L2VPN Pseudowires across two separate MPLS networks C . Quality of service is not supported per Pseudowire D . L2VPN Pseudowire Switching connects two or more contiguous Pseudowires segments to from an end-to-end multihop Pseudowire E . The Cisco MPLS Traffic Engineering tunnel selection is not supported

A . Provider support for intra-AS and CSC scenarios B . Uses separate signaling plane， which provides more security than IPv4 C . BGP is the preferred routing protocol for connecting two SPs D . No requirement for a separate signaling plane

A . high scalability B . the design supports a layered security model C . firewall addressing does not need to change D . IPsec decrypted traffic is inspected by the firewall E . there is a centralized point for logging and content inspectio

A . The virtual routing and forwarding table is separate from the global routing table that exists on PE routers. Routes are injected into the VRF from the CE-PE routing protocols for that VRF and any MP-BGP announcements that match the defined VRF RTs B . Multiprotocol Border Gateway Protocol is run between PE and CE routers to exchange customer prefixes in a VPNv4 format C . A customer edge router peers at Layer 3 to the provider edge. The PE-CE interface runs either a dynamic routing protocol （eBGP， RIPv2， EIGRP， OSPF） or a static routing protocol （Static， Connected） D . VPNv4 address is the combination of the RT and customer IPv4 prefix. These VPNv4 prefixes are passed in MP-BGP

A . Site Of Origin SOO B . Route-Target C . Route-Distinguisher D . Domain Identifier BGP extended commumity