CCNA学习必备.docx

CCNA学习必备.docx

《CCNA学习必备.docx》由会员分享，可在线阅读，更多相关《CCNA学习必备.docx（15页珍藏版）》请在冰豆网上搜索。

CCNA学习必备

1.WhatfunctionalitydoaccesscontrollistsprovideintheimplementationofdynamicNATonaCiscorouter?

definewhichaddressescanbetranslated

definewhichaddressesareassignedtoaNATpool

definewhichaddressesareallowedouttherouter

definewhichaddressescanbeaccessedfromtheinsidenetwork

2.Whichthreeguidelineswouldhelpcontributetocreatingastrongpasswordpolicy?

（Choosethree.）

Onceagoodpasswordiscreated,donotchangeit.

Deliberatelymisspellwordswhencreatingpasswords.

Createpasswordsthatareatleast8charactersinlength.

Usecombinationsofuppercase,lowercase,andspecialcharacters.

Writepasswordsinlocationsthatcanbeeasilyretrievedtoavoidbeinglockedout.

Uselongwordsfoundinthedictionarytomakepasswordsthatareeasytoremember.

3.

Refertotheexhibit.Everytimetheadministratorrebootsthisrouter,thebootprocessendsinsetupmode.Whatisapossibleproblem?

ThereisinsufficientRAMfortheIOStoloadonthisrouter.

Apasswordrecoveryprocessshouldbedoneonthisrouter.

ThebootstrapversionandtheversionoftheIOSaredifferent.

TheIOSimageisdamagedandmustbereloadedusingtftpdnld.

Theconfigurationregisterissettoignorethestartupconfiguration.

4.Whichoptioncorrectlydefinesthecapacitythroughthelocalloopguaranteedtoacustomerbytheserviceprovider?

BE

DE

CIR

CBIR

5.

Refertotheexhibit.AhostconnectedtoFa0/0isunabletoacquireanIPaddressfromtheDHCPserver.Theoutputofthedebugipdhcpservercommandshows“DHCPD:

thereisnoaddresspoolfor10.1.1.1″.Whatistheproblem?

The10.1.1.1addressisalreadyconfiguredonFa0/0.

Thedefaultrouterforthe10Networkpoolisincorrect.

Theiphelper-addressmustbeaddedtoFa0/0interface.

Thepoolofaddressesforthe10Networkpoolisincorrect.

6.WhichdatalinklayerencapsulationprotocolisusedbydefaultforserialconnectionsbetweentwoCiscorouters?

ATM

FrameRelay

HDLC

PPP

SDLC

7.

Refertotheexhibit.WhichstatementcorrectlydescribeshowRouter1processesanFTPrequestthatentersinterfaces0/0/0andisdestinedforanFTPserveratIPaddress192.168.1.5?

Theroutermatchestheincomingpackettothestatementthatwascreatedbytheaccess-list201denyicmp192.168.1.00.0.0.255anycommand,continuescomparingthepackettotheremainingstatementsinACL201toensurethatnosubsequentstatementsallowFTP,andthentherouterdropsthepacket.

TherouterreachestheendofACL101withoutmatchingaconditionanddropsthepacketbecausethereisnostatementthatwascreatedbytheaccess-list101permitipanyanycommand.

Theroutermatchestheincomingpackettothestatementthatwascreatedbytheaccess-list101permitipany192.168.1.00.0.0.255commandandallowsthepacketintotherouter.

Itmatchestheincomingpackettothestatementthatwascreatedbytheaccess-list201permitipanyanycommandandallowsthepacketintotherouter.

8.ComparedwithIDSsystems,whatcanIPSsystemsdotoprovidefurtherprotectionofcomputersystems?

detectpotentialattacks

stopthedetectedattackfromexecuting

updateOSpatchesforcomputersystems

scancomputersystemsforvirusesandspyware

9.WhichIEEE802.16broadbandwirelesstechnologyallowsuserstoconnecttotheISPatspeedscomparabletoDSLandcable?

Wi-Fi

satellite

WiMAX

MetroEthernet

10.AnetworkadministratorhaschangedtheVLANconfigurationsonhisnetworkswitchesoverthepastweekend.Howcantheadministratordetermineiftheadditionsandchangesimprovedperformanceandavailabilityonthecompanyintranet?

Conductaperformancetestandcomparewiththebaselinethatwasestablishedpreviously.

Interviewdepartmentalsecretariesanddetermineiftheythinkloadtimeforwebpageshasimproved.

Determineperformanceontheintranetbymonitoringloadtimesofcompanywebpagesfromremotesites.

Comparethehitcountsonthecompanywebserverforthecurrentweektothevaluesthatwererecordedinpreviousweeks.

11.

Refertotheexhibit.Whatisthemeaningofthetermdynamicintheoutputofthecommand?

ThebandwidthcapabilityoftheinterfaceincreasesanddecreasesautomaticallybasedonBECNs.

TheSerial0/0/1interfaceacquired172.16.3.1fromaDHCPserver.

ThemappingbetweenDLCI100and172.16.3.1waslearnedthroughInverseARP.

DLCI100willautomaticallyadapttochangesintheFrameRelaycloud.

12.WhichtypeofACLwillpermittrafficinboundintoaprivatenetworkonlyifanoutboundsessionhasalreadybeenestablishedbetweenthesourceanddestination?

extended

reflexive

standard

time-based

13.WhichtwostatementsaretrueaboutIPv6linklocaladdresses?

（Choosetwo.）

Theybeginwiththe2000:

:

/3prefix.

TheybeginwiththeFE80:

:

/10prefix.

TheyareassignedbyIANAtoanorganization.

Theymustbemanuallyconfiguredbytheadministrator.

Theyareassignedtoahostbyastatelessautoconfigurationprocess.

14.AcompanyislookingforaWANsolutiontoconnectitsheadquarterssitetofourremotesites.WhataretwoadvantagesthatdedicatedleasedlinesprovidecomparedtoasharedFrameRelaysolution?

（Choosetwo.）

reducedjitter

reducedcosts

reducedlatency

theabilitytoburstaboveguaranteedbandwidth

theabilitytoborrowunusedbandwidthfromtheleasedlinesofothercustomers

15.

Refertotheexhibit.AnetworkadministratoristryingtoconnectR1remotelytomakeconfigurationchanges.Basedontheexhibitedcommandoutput,whatwillbetheresultwhenattemptingtoconnecttoR1?

failuretoconnectduetoTelnetnotbeingenabled

failuretoconnectduetoincompleteconfigurationforTelnet

asuccessfulconnectionandabilitytomakeconfigurationchanges

asuccessfulconnectionbutinabilitytomakeconfigurationchangesbecauseoftheabsenceofanenablesecretpassword

16.Whataretwoeffectivemeasuresforsecuringrouters?

（Choosetwo.）

Protectallactiverouterinterfacesbyconfiguringthemaspassiveinterfaces.

ConfigureremoteadministrationthroughVTYlinesforTelnetaccess.

Usequotesorphrasestocreatepassphrases.

DisabletheHTTPserverservice.

EnableSNMPtraps.

17.Anissueofresponsetimehasrecentlyarisenonanapplicationserver.Thenewreleaseofasoftwarepackagehasalsobeeninstalledontheserver.Theconfigurationofthenetworkhaschangedrecently.Toidentifytheproblem,individualsfrombothteamsresponsiblefortherecentchangesbegintoinvestigatethesourceoftheproblem.Whichstatementappliestothissituation?

Schedulingwillbeeasyifthenetworkandsoftwareteamsworkindependently.

Itwillbedifficulttoisolatetheproblemiftwoteamsareimplementingchangesindependently.

Resultsfromchangeswillbeeasiertoreconcileanddocumentifeachteamworksinisolation.

Onlyresultsfromthesoftwarepackageshouldbetestedasthenetworkisdesignedtoaccommodatetheproposedsoftwareplatform.

18.

Refertotheexhibit.Fromtheoutputoftheshowinterfacesandpingcommands,atwhichlayeroftheOSImodelisafaultindicated?

application

transport

network

datalink

physical

19.Whichtechnologyisusedtodynamicallymapnexthop,networklayeraddressestovirtualcircuitsinaFrameRelaynetwork?

InverseARP

LMI

DLCI

FECN

20.Anadministratorlearnsofane-mailthathasbeenreceivedbyanumberofusersinthecompany.Thise-mailappearstocomefromtheofficeoftheadministrator.Thee-mailaskstheuserstoconfirmtheiraccountandpasswordinformation.Whichtypeofsecuritythreatdoesthise-mailrepresent?

cracking

phishing

phreaking

spamming

21.

Refertotheexhibit.Whichdatatransmissiontechnologyisbeingrepresented?

TDM

PPP

HDLC

SLIP

22.

Refertotheexhibit.ResultsoftheshowvlanandshowvtpstatuscommandsforswitchesS1andS2aredisplayedintheexhibit.VLAN11wascreatedonS1.WhyisVLAN11missingfromS2?

ThereisaLayer2loop.

TheVTPdomainnamesdonotmatch.

Onlyoneswitchcanbeinservermode.

S2hasahigherspanning-treepriorityforVLAN11thanS1does.

23.Whatistheresultofaddingtheglobalcommandservicepassword-encryptiontotheconfigurationofarouter?

Linepasswordsareencryptedwithtype7encryption.

Enablepasswordsareencryptedwithtype5encryption.

Allservicesmustprovideanencryptedpasswordtofunction.

Onlyencryptedmessagesareallowedforroutercommunication.

24.Whiletroubleshootingaproblemwithane-mailserver,anadministratorobservesthattheswitchportusedbytheservershows“up,lineprotocolup”.Theadministratorcannotpingtheserver.AtwhichlayeroftheOSImodelistheproblemmostlikelytobefound?

applicationlayer

networklayer

datalinklayer

physicallayer

25.WheredoesaserviceproviderassumeresponsibilityfromacustomerforaWANconnection?

localloop

DTEcableonrouter

demarcationpoint

demilitarizedzone

26.Whatwillbetheresultofaddingthecommandipdhcpexcluded-address192.168.24.1192.168.24.5totheconfigurationofalocalrouterthathasbeenconfiguredasaDHCPserver?

Trafficthatisdestinedfor192.168.24.1and192.168.24.5willbedroppedbytherouter.

Trafficwillnotberoutedfromclientswithaddressesbetween192.168.24.1and192.168.24.5.

TheDHCPserverwillnotissuetheaddressesrangingfrom192.168.24.1to192.168.24.5.

TherouterwillignorealltrafficthatcomesfromtheDHCPserverswithaddresses192.168.24.1and192.168.24.5.

27.

Refertotheexhibit.Partialresultsoftheshowaccess-listsandshowipinterfaceFastEthernet0/1commandsforrouterRouter1areshown.TherearenootherACLsineffect.HostAisunabletotelnettohostB.Whichactionwillcorrecttheproblembutstillre