A.After the fragmented packet is directly forwarded, the firewall forwards the fragment according to the interzone security policy if it is not the fragmented packet of the first packet.

B.For fragmented packets, NAT ALG does not support the processing of SIP fragmented packets.

C.By default, the number of large fragment caches of an IPV4 packet is 32, and the number of large fragmentation buffers of an IPV6 packet is 255.

D.By default, the firewall caches fragmented packets.

A.Streaming algorithm

B.Symmetric encryption algorithm

C.Hash algorithm

D.Asymmetric encryption algorithm

A.server key exchange message indicates that the server has finished sending all the information

B.in the server key exchange message, it contains set of parameters required for completing key exchange

C.in the server key exchange message, it contains the negotiated CipherSuite which is copied to the state of the current connection

D.it contains an X.509 certificate in server key exchange message, the public key is contained in the certificate, which is issued to the client to verify signatures or to encrypt messages when key exchange

A.banned from trust region access to untrust region and the destination address is 10.1 0 0/16 segment all hosts ICMP message

B.banned from trust region access to untrust region and the source address is 10.1 0 0/16 segment all the hosts ICMP message

C.banned from trust region access to untrust region and the source address is10.2.10.10 host to all the hosts ICMP message

D.banned from trust region access to untrust region and the destination address is 10 1 10 10 host ICMP message

A.Server-map is processed after status detection

B.Server-map is processed before the security policy matches

C.The source NAT policy is processed after the security policy is matched.

D.Source NAT policy query is processed after the session is created