Which three features are benefits of using GRE tunnels in conjunction with IPsec for building site-to-site VPNs？（）

A . Fixed Configuration B . Voice Mail C . Anti-X D . IPS E . Wireless LAN F . VPN Acceleratio

A . If the VPN server is configured for Xauth， the VPN client waits for a username / password challenge. B . The Cisco Easy VPN feature only supports transform sets that provide authentication and encryption. C . The VPN client initiates aggressive mode （AM） if a pre-shared key is used for authentication during the IKE phase 1 process. D . The VPN client verifies a server username/password challenge by using a AAA authentication server that supports TACACS+ or RADIUS. E . The VPN server can only be enabled on Cisco PIX Firewalls and Cisco VPN 3000 series concentrators. F . When connecting with a VPN client，the VPN server must be configured for ISAKMP group 1，2 or 5.

A . SNMPv3 enhanced SNMPv2 security features B . SNMPv3 added the Inform protocol message to SNMP C . SNMPv2 added the Inform protocol message to SNMP D . SNMPv3 added the GetBulk protocol messages to SNMP E . SNMPv2 added the GetBulk protocol message to SNMP F . SNMPv2 added the GetNext protocol message to SNMP

A . Message Integrity B . Compression C . Authentication D . Encryption E . Error Detectio

A . Spanning Tree Protocol （STP） B . Delay reduction C . Hot Standby Routing Protocol （HSRP） D . Dynamic routing protocols E . Quality of Service （QoS） F . Jitter management

A .  The CoS value is trusted for 802.1p or 802.1q tagged traffic. B .  The voice VLAN feature is disabled by default. C .  The IP phone accepts the priority of all tagged and untagged traffic and sets the CoS value to 4. D .  When the voice VLAN feature is enabled， all untagged traffic is sent according to the default CoS priority of the port. E .  PortFast is automatically disabled when a voice VLAN is configured. F .  The default CoS value for incoming traffic is set to 0.

A . Download e-mail messages as attachments to voice-mail messages.  B . Access voice-mail messages from general delivery mailboxes (GDM)s.  C . Access voice-mail messages over the network or download them selectively.  D . Delete voice-mail messages or mark them as read or unread in a manner similar to e-mail messages.  E . View instant messages and voice-mail messages from a single integrated e-mail type client using IMAP.  F . Play voice-mail locally using standard media players without requiring a connection to Cisco Unity Express.

A . PIM-SSM B . Aggregation multicast C . PIM-Bidirectional D . OOR handling E . integrated multicast F . Multicast NSF

A . database integration   B . prompt and collect   C . VoiceXML   D . opening and parsing HTTP and XML documents   E . PQ   F . E-mail Queuing&e

A . VTPv3 supports 8K VLANs. B . VTPv3 supports private VLAN mapping. C . VTPv3 allows for domain discovery. D . VTPv3 uses a primary server concept to avoid configuration revision issues. E . VTPv3 is not compatible with VTPv1 or VTPv2. F . VTPv3 has a hidden password option.

A . Data encryption. B . User authentication. C . Transparent data conversion D . Configuration and administration mechanisms. E . Support for multiple network transport protocols.

A . When properly configured,VTP minimizes VLAN misconfigurations and configuration inconsistencies B . Each broadcast domain on a switch can have its own unique VTP domain C . VTP works at Layer 3 of the OSI model and requires that a management VLAN IP address be configured. D . When properly configured,VTP maintains VLAN configuration consistency and accelerates trunk link negotiation. E . VTP pruning is used to increase available bandwidth in trunk links F . Client,server,and transparent are valid VTP modes G . To configure a switch to be part of two VTP domains,each domain must have its own password

A . Spanning Tree Protocol（STP） B . Delay reduction C . Hot Standby Routing Protocol（HSRP） D . Dynamic routing protocols E . Quality of Service（QoS） F . Jitter management

A . Online backups. B . Skipping unused block.  C . Partial database backups. D . Incremental block-level backup. E . Detection of corrupted blocks during backup.

A . Message Integrity B . Authentication C . Encryption D . Compression E . Error Detectio

A . Integrated Hardware for offload of encryption services B . Wireless LAN C . SRST with centralized Cisco CallManager fro up to 120 IP Phones D . Support For up to Eight NMEs E . Cisco CallManager Express for up to 36 IP Phones support F . High Performance Architecture optimized for concurrent service deployment

A . online product and technology information B . knowledge transfer resources C . online hardware replacement D . tools to minimize the risk of network downtime E . network management and diagnostic tools F . online solution troubleshooting

A . The "mls qos" global configuration command must be entered before configuring AutoQoS. B . CEF must be enabled. C . The "no auto qos voip" command is used to disable Cisco AutoQos and revoke all  configurations generated by Cisco AutoQos. D . CDP must be enabled. E . SNMP must be enabled.

A .  DAI can be performed on ingress ports only. B .  DAI can be performed on both ingress and egress ports. C .  DAI is supported on access ports， trunk ports， EtherChannel ports， and private VLAN ports.   D .  DAI should be enabled on the root switch for particular VLANs only in order to secure the ARP  caches of hosts in the domain. E .  DAI should be configured on all access switch ports as untrusted and on all switch ports connected to other switches as trusted. F .  DAI is supported on access and trunk ports only.

A . SWITCH_TIME B . SWITCH_GROUP C . MAX_SESS_POOL D . SWITCH_ESTIMATE

A . A custom application security policy can be configured in the Advanced Firewall Security Configuration dialog box. B . An optional DMZ interface can be specified in the Advanced Firewall Interface Configuration dialog box. C . Custom application policies for e-mail， instant messaging， HTTP， and peer-to-peer services can be created using the Intermediate Firewall wizard. D . Only the outside （untrusted） interface is specified in the Basic Firewall Interface Configuration dialog box. E . The outside interface that SDM can be launched from is configured in the Configuring Firewall for Remote Access dialog box. F . The SDM provides a basic， intermediate， and advanced firewall wizard.

A .  DHCP snooping commands are not available until the feature is enabled with the feature dhcp- snooping command. B .  When you enable the DHCP snooping feature， the switch begins building and maintaining the DHCP snooping binding database. C .  The switch will not validate DHCP messages received or use the DHCP snooping binding database to validate subsequent requests from untrusted hosts until DHCP snooping is enabled globally and for each specific VLAN. D .  Globally disabling DHCP snooping removes all DHCP snooping configuration on the switch. E .  Globally disabling DHCP snooping does not remove any DHCP snooping configuration or the configuration of other features that are dependent upon the DHCP snooping feature.