A. Configure source NAT in transparent mode, the firewall does not support easy-ip mode

B. The firewall does not support NAPT conversion of ESP and AH packets

C. The IP address in the address pool can overlap with the public IP address of the NAT server

D. When there are VoIP services in the network, NAT ALG is not required to be configured

A. Local external network egressIPaddress

B. External network egressIPaddress

C. localTunnelinterfaceIPaddress

D. PeerTunnelinterfaceIPaddress

A. True

B. False

A. rule named, source-zone untrust, destination-zone trust, destination-address 10.10.1.1 32, action permit

B. rule name b, source-zone untrust, destination-zone trust, source-address 202.106.1.1 32, action permit

C. rule name b, source-zone untrust, destination-zone trust, source-address 10.10.1.1 32, action permit

D. rule name c, source-zone untrust, destination-zone trust, destination-address 202.106.1.1 32, action permit

A. IPS equipment can be connected in series at the network boundary and deployed online

B. IPS devices cannot be deployed in bypass mode in the network

C. The IDS device needs to be linked to the firewall to block the intrusion

D. Once the IPS device detects the intrusion, it can block it in real time