When enabling IPS on an ISR using the Cisco SDM IPS Wizard， in what location can the SDF be placed？（）

A . ip pim rp-address B . ip pim ssm C . ip pim sparse-mode D . ip pim passive

A .  VTP mode B .  STP root status C .  Negotiation status D .  Management domain E .  Configuration revision number

A . QoS Element for Wireless Phones B . IGMP Snooping C . WMM D . AVVID Priority Mapping

A . uplink speed less than 768kbps B . supporting Voice-over-IP C . using PPPoE encapsulation D . using PPPoA encapsulation E . uplink speed greater than 768k

A . Ensure the /etc/auto_start file exists on the VIOS. B . Ensure the 'cfgdev -a boot=yes' command has been executed. C . Select the 'Automatically start when the managed system is powered on' option within the VIO Server LPAR profile. D . Add the VIO Server to the 'Automatically start when the managed system is powered on' field on the Managed System properties.

A .  An interface ’san-port-channel’ in NXOS B .  An interface ’port-channel’ in NXOS C .  An interface ’port-channel’ with ’mode fc’ configured D .  An interface ’fc-port-channel’ in NXOS

A . DHCP requests will be switched in the software， which may result in lengthy response times. B . The switch will run out of ACL hardware resources. C . All DHCP requests will pass through the switch untested. D . The DHCP server reply will be dropped and the client will not be able to obtain an IP address.

A . when the router is booted up B . when the router administratively does a no shutdown" on the IPSec SA  C . when traffic matches a line of the access-list tied into the crypto-map in the router configuration, and that particular IPSec SA is not already up  D . when the ISAKMP SA completes negotiation of all IPSec SAs (one per access-list line in the crypto ACL), it will be brought up immediately

A . open authentication plus MAC B . open authentication plus EAP C . shared key D . network EAP

A . 75 percent B . 60 percent C . 56 percent D . 50 percent E . 25 percent

A . open authentication plus mac B . open authentication plus eap C . shared key D . network ea

A . No more than one secure MAC address should be set. B . The default will be set. C . The IP phone should use a dedicated port， therefore only one MAC address is needed per port. D . No value is needed if the switchport priority extend command is configured.  E . No more than two secure MAC addresses should be set.

A . Ensure the /etc/auto_start file exists on the VIos B . Ensure the ’cfgdev -a boot=yes’ command has been executed. C . Select the ’Automatically start when the managed system is powered on’ option within the vio Server lpar profile. D . Add the VIO Server to the ’Automatically start when the managed system is powered on’ field on the managed System properties.

A . 8192 B . 16384 C . 49152 D . 65535

A . BPDU guard can be used to prevent invalid BPDUs from propagating throughout the network.  B . BPDU guard can guarantee proper selection of the root bridge. C . BPDU guard can be utilized to prevent the switch from transmitteing BPDUs and incorrectly altering the root bridge election. D . BPDU guard can be utilized along with PortFast to shut down ports when a switch is connected to the port. E . None of the other alternatives apply

A . ip pim rp-address B . ip pim ssm C . ip pim sparse-mode D . ip pim passive

A . take part B . watch C . go to their quarters D . stay out of the way and do what they want

A . Configure TCP header compression on interface B . Configure MPL on the Frame Relay interfaces C . Configure FRF 12 fragmentation on the Frame Relay interfaces D . Fragmentation is not supported with service internetworking

A . wind direction remains steady B . wind speed increases C . barometer falls D . All of the above

A . when installing SSD drives B . when adding a new workload C . when installing SATA drives D . when adding more Linux host

A . QoS and IPSec should never be used together.  B . IKE/ISAKMP packets are DiffSERV codepoint CS6, so the traffic is never dropped. C . Source IKE/ISAKMP packets off the loop-back address.  D . Classify IKE/ISAKMP packets so they are appropriately prioritized.

A . SYS.SOURCE$  B . SYS.AUD$  C . DBA_SOURCE  D . DBA_AUDIT_TRAIL

A .  The physical port can be used as part of a Shared Ethernet Adapter （SEA）. B .  All physical ports on the Host Ethernet Adapter （HEA） default to promiscuous mode. C .  Multiple logical ports can be assigned to a physical port if that logical port is in promiscuous mode. D .  All physical ports that belong to the same port group will be set to promiscuous mode on the Host Ethernet Adapter （HEA）.

A . The port’s violation mode is set to restrict B . The port is shut down C . The MAC address table is cleared and the new MAC address is entered into the table D . The port remains enabled， but bandwidth is throttled until old MAC addresses are aged out