Regarding the command to view the number of security policy matches, which of the following is correct?

Regarding the order of the PKI work process, which of the following is correct?
1. The communication terminal applies for the CA certificate
2. PKI reply to CA certificate
3. Obtain each other's certificates and verify the validity
4. Install the local certificate on the communication end
5. PKI issues local certificates
6. The correspondent applies for a local certificate
7. Install the CA certificate on the communication end
8. Communicate with each other

In the authentication policy of the firewall, ______ allows users to obtain the corresponding relationship between the user and IP without entering a user name and password, so as to perform policy management based on the user.

The main reason why NAPT can achieve one-to-many address translation is that ______ is also converted while addressing, so multiple private addresses can share the same public address.

Regarding the description of the intrusion detection system, which of the following is wrong?