Which three configuration tasks are required to successfully deploy NBAR to recognize TCP and UDP stateful protocols？ （）

A . Cisco Express Forwarding （CEF） must be globally enabled. B . Prior to the enabling of the Cisco AutoOoS feature， the bandwidth command must be applied on all interfaces or subinterfaces. C . After the enabling of the Cisco AutoOoS feature， the bandwidth command must be applied on all interfaces or subinterfaces . D . OoS policies must be enabled on all interfaces that will participate in the AutoOoS configuration. E . An IP address must be configured on all low-bandwidth interfaces （768 kb/s or lower） that will participate in the AutoOoS configuration F . An IP address must be configured on all interfaces that will participate in the AutoOoS configuratio

A .  Switch profiles allow configurations to be synchronized between switches and are supported with any Cisco NX-OS Software managed device. B .  DCNM LAN can archive configurations from devices even if they are not managed by the DCNM server， and the administrator can supply the device management IP address and credentials. C .  You can archive a maximum of 50 configuration versions per managed device. D .  Managed devices must be licensed in DCNM LAN before they can be used with configuration change management. E .  Device-running configuration will be archived only if it differs from the last archived version.

A .  A user cannot set privileges on the persistent lightweight jobs B .  Persistent lightweight jobs generate a large amount of metadata C .  It is possible to create fully self-contained persistent lightweight jobs D .  The use of a template is mandatory to create persistent lightweight jobs E .  Persistent lightweight jobs are useful when users need to create a large number of jobs in a short time

A .  The Standby hello time is 2 seconds. B .  Two HSRP groups are configured. C .  The Standby track interface priority is 10. D .  The Standby hold time is 10 seconds E .  The Standby priority is 100. F .  The Standby delay is 3 seconds.

A . route list B . route group C . gateway list D . route patter

A .  route list B .  route group C .  gateway list D .  route patter

A . The use of a queuing method that will give VoIP traffic strict priority over other traffic   B . The use of RTP header compression for the VoIP traffic. C . The proper classification and marking of the traffic as close to the source as possible D . The use of 802.1QinQ trunking for VoIP traffic E . The use of WRED for the VoIP traffic

A . TCP port B . authentication C . IP DF bit D . retransmit retries E . sequencing F . hostname

A . A user cannot set privileges on the persistent lightweight jobs B . Persistent lightweight jobs generate a large amount of metadata C . It is possible to create fully self-contained persistent lightweight jobs D . The use of a template is mandatory to create persistent lightweight jobs E . Persistent lightweight jobs are useful when users need to create a large number of jobs in a short time

A . PIM sparse - dense mode and PIM dense mode require an RP on the network. B . PIM sparse mode and PIM dense mode require an RP on the network. C . PIM sparse mode interfaces are always added to the multicast routing table in a router. D . PIM sparse mode and PIM sparse - dense mode require an RP on the network. E . PIM dense mode interfaces are always added to the multicast routing table in a router. F . PIM sparse - dense mode acts as PIM dense mode if an RP is not known.

A . isolated B . protected C . private D . associated E . promiscuous F . munity

A .  In a vPC topology， the primary HSRP router will respond to ARP requests， but both HSRP routers will forward data traffic. No additional configuration is required. B .  In a vPC topology， the primary HSRP router will respond to ARP requests， but both HSRP routers will forward data traffic if the peer-gateway feature is enabled. C .  You can configure two overlapping HSRP groups to load share traffic from the connected hosts while providing the default router redundancy. D .  You can use the show standby command to verify HSRP operation and configuration. E .  If you remove the feature hsrp command， all relevant HSRP configuration information isalso removed.

A .  DMVPN B .  MPLS VPN C .  IPv6 VPN D .  Cisco IOS SSL VPN E .  site-to-site VPN F .  Cisco Easy VPN

A . A user cannot set privileges on the persistent lightweight jobs B . Persistent lightweight jobs generate a large amount of metadata C . It is possible to create fully self-contained persistent lightweight jobs D . The use of a template is mandatory to create persistent lightweight jobs E . Persistent lightweight jobs are useful when users need to create a large number of jobs in a short time

A . isolated mode B . switchport mode C . modular mode D . community mode E . promiscuous mode F . global mode

A . The IP inspection rule can be applied in the inbound direction on the secured interface B . The IP inspection rule can be applied in the outbound direction on the unsecured interface C . The ACL applied in the inbound direction on the unsecured interface should be an extendedACL. D . For temporary openings to be created dynamically by Cisco IOS Firewall， the access-list for thereturning traffic must be a standard ACL

A . A received IP packet is forwarded based on the IP destination address and the packet is sent as an IP packet. B . An IP destination exists in the IP forwarding table. A received labeled packet is dropped because the label is not found in the LFIB table. C . There is an MPLS label-switched path toward the destination. A received IP packet is dropped because the destination is not found in the IP forwarding table. D . A received IP packet is forwarded based on the IP destination address and the packet is sent as a labeled packet. E . A received labeled IP packet is forwarded based upon both the label and the IP address. F . A received labeled packet is forwarded based on the label. After the label is swapped，the newly labeled packet is sent.

A . one IP network or subnetwork for each subinterface B . subinterface numbering that matches vlan tages C . subinterface encapsulation identifiers that match vlan tags D . a management domain for each subinterface E . one physical interface for each subinterface F . one subinterface per vla

A . NAT B . VPN C . STP D . Security Audit

A . On/On B . On/Auto C . Passive/Active D . Desirable/Auto E . Active/Active F . Desirable/Desirable

A .  set Flash Recovery Area B .  enable Flashback logging C .  create FLASHBACK tablespace D .  start the database in the ARCHIVELOG mode E .  start the database in the NOARCHIVELOG mode

A . The IP inspection rule can be applied in the inbound direction on the secured interface. B . The IP inspection rule can be applied in the outbound direction on the unsecured interface. C . The ACL applied in the outbound direction on the unsecured interface should be an extended ACL. D . The ACL applied in the inbound direction on the unsecured interface should be an extended ACL. E . For temporary openings to be created dynamically by Cisco IOS Firewall，the access-list for thereturning traffic must be a standard ACL. F . For temporary openings to be created dynamically by Cisco IOS Firewall，the IP inspection rule must be applied to the secured interface.

A .  Region name B .  Configuration revision number C .  VLAN instance map D .  IST STP BPDU hello timer E . CST instance map F .  PVST+ instance ma

A . start LDP B . enable CEF switching C . configure the MPLS ID D . disable IP TTL propagation E . configure conditional label advertising F . enable label switching on frame mode interface

A . A custom application security policy can be configured in the Advanced Firewall Security Configuration dialog box. B . An optional DMZ interface can be specified in the Advanced Firewall Interface Configuration dialog box. C . Custom application policies for e-mail， instant messaging， HTTP， and peer-to-peer services can be created using the Intermediate Firewall wizard. D . Only the outside （untrusted） interface is specified in the Basic Firewall Interface Configuration dialog box. E . The outside interface that SDM can be launched from is configured in the Configuring Firewall for Remote Access dialog box. F . The SDM provides a basic， intermediate， and advanced firewall wizard.