A. If a port is connected to a foreign device make sure to disable CDP， DTP， RPR， PAgP， UDLP， and any other unnecessary protocols， and enable UplinkFast/BPDU guard on it.
B. Enable root guard feature to prevent a directly or indirectly connected STP-capable device from affecting the location of the root bridge.
C. Configure VTP domains appropriately or turn off VTP altogether to limit or prevent possible undesirable protocol interaction with regards to the network-wide VLAN configuration.
D. Set the native VLAN ID to match the port VLAN ID of any 802.1q trunk to prevent spoofing.
E. Disable all unused ports and place them in an unused VLAN to avoid unauthorized access.

A. It provides configuration， monitoring， and troubleshooting capabilities across a wide range of security products.
B. It integrates security device management products and collects events on an "as needed" basis to reduce management overhead.
C. It integrates security management capabilities into the router or switch.
D. It provides a single point of contact for all security configuration tasks thereby enhancing the return on investment.
E. It leverages existing network management systems such as HP OpenView to lower the cost of implementation.

A. Cisco ISR Routers with the Enhanced Security Bundles support WebVPN.
B. Cisco security appliances act as a proxy between the end user and the target web server.
C. Cisco PIX Security Appliances （running release 7.0） and Adaptive Security Appliances both support WebVPN.
D. Cisco’s WebVPN solution supports both TCP and UDP port forwarding for legacy application support.

A. WebVPN for SSL
B. IPSec
C. AIM
D. Stateful packet inspection

A. Planning
B. Design
C. Implementation
D. Operation
E. Optimization

A. Smaller companies are at less risk than larger enterprises， so their security needs are not as great.
B. Business strategy should directly relate to the security policy and budget.
C. The designated security expert should report to the IT department， since that is where thesolution will be implemented.
D. Security should be a continuous process.
E. Security solutions should come from multiple vendors to make it easier to coordinate security events from the point of origin.

A. 5 GHz equipment will not be able to penetrate through walls as well as 2.4 GHZ equipment.
B. 2.4 GHz equipment will not be able to penetrate through walls as well as 5 GHz equipment.
C. Mounting antennas near metal objects will slightly amplify the signal.
D. When determining coverage， you should begin measuring attenuation from the middle of the room.

A. Cisco lOS Matrix Navigator
B. Cisco Feature Navigator
C. Cisco lOS Package Planner
D. Cisco lOS Security Planner
E. Cisco Dynamic Configuration Tool

A. BGP
B. IGRP
C. ISIS
D. OSPF
E. EIGRP

A. CiscoWorks Security Device Management Center （SD/MC）
B. Security Device Manager （SDM）
C. Adaptive Security Device Manager （ASDM）
D. CiscoWorks VMS/Management Center （VMS/MC）