A.will enter the fast mode regardless of whether the negotiation is successful or not.

B.All the negotiation packets of the first phase in the main mode are encrypted.

C.barbarian mode uses DH algorithm

D.All negotiation packets in the first phase of the aggressive mode are encrypted.

A.port mapping function is not used. The packets sent from the FTP client to the FTP server on port 21000 are ordinary packets and are not recognized as FTP packets.

B.is not configured with ASPF function

C.device dropped all UDP traffic

D.The firewall can only recognize the FTP traffic of port 21 and cannot identify the FTP traffic of port
21000.

A.HTTP Flood source authentication

B.load check

C.URI detection of destination IP

D.fingerprint learning

A.vrrp vitual-ip ip address master vrid 1

B.vrrp vitual-ip ip address vrid 1 master

C.vrrp vrid 1 vitual-ip ip address master

D.vrrp master vitual-ip address vrid 1

A.Filters scanned messages and special control messages by detecting sessions

B.Based on the application, the validity of the source address of the packet is authenticated. These applications support the protocol interaction. The cleaning device prevents the attack traffic from the virtual source or tool by sending source detection packets.

C.Session-based defense against concurrent connections, new connections, or connection-depleted connections that exceed the threshold

D.mainly relies on fingerprint learning and packet capture analysis to obtain traffic characteristics, and to prevent bots or attack traffic initiated by agents to distinguish normal users from access behavior.