An ACL can be used to match routes or data, but cannot be used to match both the IP address prefix length and mask length.

• A. FALSE
• B. TRUE

VRRP is implemented based on the priority and preemption functions of VRRP routers. Which of the following statements is false about the VRRP solution?

• A. When preemption is enabled, a backup device preempts the master role if it has a higher priority than the current master.
• B. The master periodically sends VRRP Advertisement packets in the VRRP group to advertise its configurations such as the priority.
• C. When preemption is disabled, a backup device does not preempt the master role even if it has a higher priority than the current master, provided that the current master is working properly.
• D. Even if the VRRP device is the IP address owner, it still needs to participate in the election and does not directly transition to the Master state when receiving a message indicating that the interface goes Up.

Which of the following statements is false about the session table mechanism on firewalls?

• A. The fast session aging function also takes effect for persistent connection sessions.
• B. A created session entry needs to be matched by packets constantly.
• C. When stateful inspection is disabled, the firewall still creates session tables for non-first packets. This allows services to run properly without the need to enable the persistent connection function.
• D. Generally, the default session aging time of the system can be used. To change the aging time, you need to estimate and determine the traffic type and number of connections on the network.

In VRRP networking, devices assume the Master and Backup roles after election. Match the two roles with their working mechanisms.(Token is reusable)