CCNA2.docx
- 文档编号:25270722
- 上传时间:2023-06-06
- 格式:DOCX
- 页数:13
- 大小:20.78KB
CCNA2.docx
《CCNA2.docx》由会员分享,可在线阅读,更多相关《CCNA2.docx(13页珍藏版)》请在冰豆网上搜索。
CCNA2
1.Refertotheexhibit.AnetworkadministratoristryingtoconfigurearoutertouseSDM.Afterthisconfigurationshownintheexhibitisapplied,theSDMinterfaceoftherouterisstillnotaccessible.Whatisthecauseoftheproblem?
*Theusernameandpasswordarenotconfiguredcorrectly.
Theauthenticationmethodisnotconfiguredcorrectly.
TheHTTPtimeoutpolicyisnotconfiguredcorrectly.
Thevtysarenotconfiguredcorrectly.
2.Refertotheexhibit.BranchAhasanon-CiscorouterthatisusingIETFencapsulationandBranchBhasaCiscorouter.Afterthecommandsthatareshownareentered,R1andR2failtoestablishthePVC.TheR2LMIisCisco,andtheR1LMIisANSI.TheLMIissuccessfullyestablishedatbothlocations.WhyisthePVCfailing?
ThePVCtoR1mustbepoint-to-point.
LMItypesmustmatchoneachendofaPVC.
TheframerelayPVCscannotbeestablishedbetweenCiscoandnon-Ciscorouters.
*TheIETFparameterismissingfromtheframe-relaymapip10.10.10.1201command.
3.Refertotheexhibit.AnACLcalledManagersalreadyexistsonthisrouter.Whathappensifthenetworkadministratorissuesthecommandsasshownintheexhibit?
ThenewACLoverwritestheexistingACL.
Thenetworkadministratorwillreceiveanerrormessage.
*TheexistingACLismodifiedtoincludethenewcommand.
AsecondManagersACLiscreatedthatcontainsonlythenewcommand.
4.Refertotheexhibit.AnetworkadministratoristryingtobackuptheIOSsoftwareonR1totheTFTPserver.Hereceivestheerrormessagethatisshownintheexhibit,andcannotpingtheTFTPserverfromR1.Whatisanactionthatcanhelptoisolatethisproblem?
Usecorrectsourcefilenameinthecommand.
VerifythattheTFTPserversoftwareisrunning.
MakesurethatthereisenoughroomontheTFTPserverforthebackup.
*CheckthatR1hasaroutetothenetworkwheretheTFTPserverresides.
5.Whatcananetworkadministratordotorecoverfromalostrouterpassword?
usethecopytftp:
flash:
command
boottheroutertobootROMmodeandenterthebcommandtoloadtheIOSmanually
telnetfromanotherrouterandissuetheshowrunning-configcommandtoviewthepassword
*boottheroutertoROMmonitormodeandconfiguretheroutertoignorethestartupconfigurationwhenitinitializes
6.WhichcombinationofauthenticationandLayer2protocolshouldbeusedtoestablishalinkbetweenaCiscoandanon-Ciscorouterwithoutsendingauthenticationinformationinplaintext?
CHAPandHDLC
*CHAPandPPP
PAPandHDLC
PAPandPPP
7.Refertotheexhibit.WhichstatementcorrectlydescribeshowRouter1processesanFTPrequestthatentersinterfaces0/0/0andisdestinedforanFTPserveratIPaddress192.168.1.5?
Theroutermatchestheincomingpackettothestatementthatwascreatedbytheaccess-list201denyicmp192.168.1.00.0.0.255anycommand,continuescomparingthepackettotheremainingstatementsinACL201toensurethatnosubsequentstatementsallowFTP,andthentherouterdropsthepacket.
TherouterreachestheendofACL101withoutmatchingaconditionanddropsthepacketbecausethereisnostatementthatwascreatedbytheaccess-list101permitipanyanycommand.
*Theroutermatchestheincomingpackettothestatementthatwascreatedbytheaccess-list101permitipany192.168.1.00.0.0.255commandandallowsthepacketintotherouter.
Itmatchestheincomingpackettothestatementthatwascreatedbytheaccess-list201permitipanyanycommandandallowsthepacketintotherouter.
8.Whichthreestatementsaccuratelydescribeattributesofasecuritypolicy?
(Choosethree.)
*Itcreatesabasisforlegalactionifnecessary.
Itshouldnotbealteredonceitisimplemented.
*Itdefinesaprocessformanagingsecurityviolations.
Itfocusesprimarilyonthreatsfromoutsideoftheorganization.
*Itdefinesacceptableandunacceptableuseofnetworkresources.
Itprovidesstep-by-stepprocedurestohardenroutersandothernetworkdevices.
9.Refertotheexhibit.ThenetworkadministratorcreatesastandardaccesscontrollistonRouter1toprohibittrafficfromthe172.16.1.0/24networkfromreachingthe172.16.2.0/24networkwhilestillpermittingInternetaccessforallnetworks.Onwhichrouterinterfaceandinwhichdirectionshoulditbeapplied?
interfaceFa0/0,inbound
interfaceFa0/0,outbound
interfaceFa0/1,inbound
*interfaceFa0/1,outbound
10.Refertotheexhibit.WhyaretheroutersunabletoestablishaPPPsession?
*Theusernamesaremisconfigured.
TheIPaddressesareondifferentsubnets.
Theclockrateisconfiguredonthewrongendofthelink.
TheCHAPpasswordsmustbedifferentonthetworouters.
Interfaceserial0/0/0onRouter1mustconnecttointerfaceserial0/0/1onRouter2.
11.Whataretwomaincomponentsofdataconfidentiality?
(Choosetwo.)
checksum
digitalcertificates
**encapsulation
**encryption
hashing
12.AtechnicianistalkingtoacolleagueatarivalcompanyandcomparingDSLtransferratesbetweenthetwocompanies.Bothcompaniesareinthesamecity,usethesameserviceprovider,andhavethesamerate/serviceplan.Whatistheexplanationforwhycompany1reportshigherdownloadspeedsthancompany2reports?
Company1onlyusesmicrofiltersatbranchlocations.
Company1hasalowervolumeofPOTStrafficthancompany2has.
**Company2islocatedfartherfromtheserviceproviderthancompany1is.
Company2sharestheconnectiontotheDSLAMwithmoreclientsthancompany1shareswith.
13.Whatistheresultwhenthecommandpermittcp192.168.4.00.0.3.255anyeq23isenteredinanamedaccesscontrollistandappliedontheinboundinterfaceofarouter?
Alltrafficfrom192.168.4.0/24largerthan23bytesispermitted.
FTPtrafficfromthe192.168.4.0/24networkispermitted.
TCPtrafficdestinedto192.168.4.0/24networkispermitted.
**Telnettrafficoriginatingfrom192.168.4.0/22ispermittedout.
14.Whataretwomajorcharacteristicsofaworm?
(Choosetwo.)
**exploitsknownvulnerabilities
attachesitselftoanotherprogram
executedbyapredefinedtimeorevent
masqueradesasanacceptedprogram
**copiesitselftothehostandselectsnewtargets
15.WhileconfiguringaFrameRelayconnection,whenshouldastaticFrameRelaymapbeused?
theremoterouterisanon-Ciscorouter
thelocalrouterisconfiguredwithsubinterfaces
**broadcasttrafficandmulticasttrafficoverthePVCmustbecontrolled
globallysignificantratherthanlocallysignificantDLCIsarebeingused
16.AsystemadministratormustprovideInternetconnectivityfortenhostsinasmallremoteoffice.TheISPhasassignedtwopublicIPaddressestothisremoteoffice.HowcanthesystemadministratorconfiguretheroutertoprovideInternetaccesstoalltenusersatthesametime?
ConfigurestaticNAT.
ConfiguredynamicNAT.
ConfigurestaticNATwithoverload.
**ConfiguredynamicNATwithoverload.
17.Refertotheexhibit.WhichDHCPrequestswillR1answer?
allDHCPrequeststhatR1receives
requeststhatarebroadcastto10.0.1.255
DNSrequestswithadestinationof10.0.1.3
**requeststhatarereceivedontheFastEthernet0/0interface
requeststhatcomefromanynetworksthatarenotlistedasexcluded
18.Whatarethesymptomswhenthes0/0/0interfaceonarouterisattachedtoanoperationalCSU/DSUthatisgeneratingaclocksignal,butthefarendrouteronthepoint-to-pointlinkhasnotbeenactivated?
showcontrollersindicatescabletypeDCEV.35.showinterfacess0/0/0indicatesserialdown,lineprotocoldown.
showcontrollersindicatescabletypeDCEV.35.showinterfacess0/0/0indicatesserialup,lineprotocoldown.
**showcontrollersindicatescabletypeDTEV.35.showinterfacess0/0/0indicatesserialup,lineprotocoldown.
showcontrollersindicatescabletypeDTEV.35.showinterfacess0/0/0indicatesserialdown,lineprotocoldown.
19.AtechnicianhasbeenaskedtorunCiscoSDMone-steplockdownontherouterofacustomer.Whatwillbetheresultofthisprocess?
TrafficisonlyforwardedfromSDM-trustedCiscorouters.
SecuritytestingisperformedandtheresultsaresavedasatextfilestoredinNVRAM.
**Therouteristestedforpotentialsecurityproblemsandanynecessarychangesaremade.
Alltrafficenteringtherouterisquarantinedandcheckedforvirusesbeforebeingforwarded.
20.Refertotheexhibit.AnetworkadministratorhasissuedthecommandsthatareshownonRouter1andRouter2.AlaterreviewoftheroutingtablesrevealsthatneitherrouterislearningtheLANnetworkoftheneighborrouter.WhatismostlikelytheproblemwiththeRIPngconfiguration?
Theserialinterfacesareindifferentsubnets.
**TheRIPngprocessisnotenabledoninterfaces.
TheRIPngprocessesdonotmatchbetweenRouter1andRouter2.
TheRIPngnetworkcommandismissingfromtheIPv6RIPconfiguration.
21.Refertotheexhibit.WhichstatementistrueabouttheFrameRelayconnection?
TheFrameRelayconnectionisintheprocessofnegotiation.
**AcongestioncontrolmechanismisenabledontheFrameRelayconnection.
The“ACTIVE”statusoftheFrameRelayconnectionindicatesthatthenetworkisexperiencingcongestion.
OnlycontrolFECNandBECNbitsaresentovertheFrameRelayconnection.Nodatatraffictraversesthelink.
22.WhenconfiguringaFrameRelayconnection,whatisthepurposeofInverseARP?
toassignaDLCItoaremotepeer
todisablepeerrequestsfromdetermininglocalLayer3addresses
tonegotiateLMIencapsulationsbetweenlocalandremoteFrameRelaypeers
**tocreateamappingofDLCItoLayer3addressesthatbelongtoremotepeers
23.WhenNATisinuse,whatisusedtodeterminetheaddressesthatcanbetrans
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- CCNA2