思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試(習(xí)題卷3)

試卷科目：思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試(習(xí)題卷3)PAGE"pagenumber"pagenumber/SECTIONPAGES"numberofpages"numberofpages思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試第1部分：單項選擇題，共82題，每題只有一個正確答案,多選或少選均不得分。[單選題]1.whichtopologyallowsthesplit-horizonruletobesafelydisabledwhenusingEIGRP?A)FULLMESHB)PARTIALMESHC)HUBANDSPOKED)RING答案:C解析:[單選題]2.WhichQOSfeaturecandroptrafficthatexceedsthecommittedaccessrate?A)weightedfairqueuingB)FIFOC)policingD)shaping答案:C解析:哪些QOS特性可以刪除超過提交訪問速率的流量?C治安[單選題]3.UsingtheEIRPformula,whatparameterissubtractedtodeterminetheEIRPvalue?A)antennacablelossB)antennagainC)transmitterpowerD)signal-to-noiseratio答案:A解析:[單選題]4.R1haslearnedroute/24vianumerousroutingprotocols.Whichrouteisinstalled?A)routewiththelowestcostB)routewiththenexthopthathasthehighestIPC)routewiththeshortestprefixlengthD)routewiththelowestadministrativedistance答案:D解析:[單選題]5.WhatmechanismdoesPIMusetoforwardmulticasttraffic?A)PIMsparsemodeusesapullmodeltodelivermulticasttrafficB)PIMdensemodeusesapullmodeltodelivermulticasttrafficC)PIMsparsemodeusesreceiverstoregisterwiththeRPD)PIMsparsemodeusesafloodandprunemodeltodelivermulticasttraffic答案:A解析:[單選題]6.WhatfeaturecanadeviceusetoidentifyothermembersofthesameIPv6multicastgrouponanetworksegment?A)MLDB)MSDPC)SOURCE-SPECIFICMULTICASTD)RENDEZVOUSPOINTS答案:A解析:[單選題]7.AcorporateofficeusesfourfloorsinabuildingFloor1has24usersFloor2has29usersFloor3has28usersFloor4has22usersWhichsubnetsummarizesandgivesthemostefficientdistributionofIPaddressesfortherouterconfiguration?A)/25assummaryand/27foreachfloorB)/26assummaryand/29foreachfloorC)/24assummaryand/28foreachfloorD)/23assummaryand/25foreachfloor答案:A解析:[單選題]8.onwhichporttypewouldyouconfigureSTPportfastBPDUguard?A)ROOTPORTSB)DESIGNATEDPORTSC)HOSTPORTSD)ALTERNATEPORTS答案:C解析:[單選題]9.whichportsecurityviolationmodeallowstrafficfromvalidmacaddresstopassbutblocktrafficfrominvalidmacaddress?A)protectB)shutdownC)shutdownvlanD)restrict答案:A解析:哪個端口違反安全模式允許從有效的mac地址通過流量，但阻止無效的流量mac地址嗎?A保護[單選題]10.WhichIEEEstandardprotocolisinitiatedasaresultofsuccessfulDTPcompletioninaswitchoverFastEthernet?A)802.3adB)802.1wC)802.1QD)802.1d答案:C解析:在切換成功完成DTP后，會啟動哪個IEEE標(biāo)準(zhǔn)協(xié)議FastEthernet嗎?C802.1Q[單選題]11.Whenafloatingstaticrouteisconfigured,whichactionensuresthatthebackuprouteisusedwhentheprimaryroutefails?A)ThefloatingstaticroutemusthaveahigheradministrativedistancethantheprimaryroutesoitisusedasabackupB)Theadministrativedistancemustbehigherontheprimaryroutesothatthebackuproutebecomessecondary.C)ThefloatingstaticroutemusthavealoweradministrativedistancethantheprimaryroutesoitisusedasabackupD)Thedefault-informationoriginatecommandmustbeconfiguredfortheroutetobeinstalledintotheroutingtable答案:A解析:[單選題]12.HowdoesailIPv6hostautomaticallygenerateaglobaladdress?A)ITPREPENDSITSINTERFACEIDENTIFIERTOTHENETWORKPREFIXESCONTAINEDINROUTERADVERTISEMENTMESSAGES.B)ITAPPENDSITSINTERFACEIDENTIFIERTOTHENETWORKPREFIXESCONTAINEDINROUTERADVERTISEMENTMESSAGES.C)ITAPPENDSITSINTERFACEIDENTIFIERTOTHENETWORKPREFIXESCONTAINEDINROUTERSOLICITATIONMESSAGES,D)ITPREPENDSITSINTERFACEIDENTIFIERTOTHENETWORKPREFIXESCONTAINEDINROUTERSOLICITATIONMESSAGES答案:B解析:[單選題]13.Whichbenefitisofferedbyacloudinfrastructuredeploymentbutislackinginanon-premisesdeployment?A)efficientscalabilityB)virtualizationC)storagecapacityD)supportedsystems答案:A解析:[單選題]14.WhichTCPsettingistunedtominimizetheriskoffragmentationonaGRE/IPtunnel?A)MSSB)MTUC)MRUD)windowsize答案:A解析:[單選題]15.WhichDHCPoptionhelpslightweightAPsfindtheIPaddressofawirelessLANcontroller?A)Option43B)Option60C)Option67D)Option150答案:A解析:[單選題]16.WhichprotocolisimplementedtoestablishseA)ESPB)IPsecC)IKED)TLS答案:D解析:[單選題]17.Amanagerasksanetworkengineertoadvisewhichcloudservicemodelsareusedsoemployeesdonothavetowastetheirtimeinstalling,managing,andupdatingsoftwarewhichisonlyusedoccasionally.Whichcloudservicemodeldoestheengineerrecommend?A)infrastructure-as-a-serviceB)platform-as-a-serviceC)businessprocessasservicetosupportdifferenttypesofserviceD)software-as-a-service答案:D解析:[單選題]18.WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?A)HTTPB)SSHC)HTTPSD)TCP答案:C解析:[單選題]19.HowaretheCiscoExpressForwardingtableandtheFIBrelatedtoeachother?A)TheFIBisusedtopopulatetheCiscoExpressForwardingtableB)TheCiscoExpressForwardingtableallowsroutelookupstobeforwardedtotherouteprocessorforprocessingbeforetheyaresenttotheFIBC)TherecanbeonlyoneFIBbutmultipleCiscoExpressForwardingtablesonIOSdevicesD)CiscoExpressForwardingusesaFIBtomakeIPdestinationprefix-basedswitchingdecisions答案:D解析:[單選題]20.AnetworkengineerisenablingHTTPSaccesstothecoreswitch,whichrequiresacertificateTobeinstalledontheswitchsignedbythecorporatecertificateauthority.WhichConfigurationcommandsarerequiredtoissueacertificatesigningrequestfromthecoreSwitch?A)Core-Switch(config)#cryptopkitrustpointCore-SwitchCore-Switch(ca-trustpoint)#enrollmentterminalCore-Switch(config)#cryptopkienrollCore-SwitchB)Core-Switch(config)#cryptopkienrollCore-SwitchCore-Switch(config)#iphttpsecure-trustpointCore-SwitchC)Core-Switch(config)#iphttpsecure-trustpointCore-SwitchCore-Switch(config)#cryptopkienrollCore-SwitchD)Core-Switch(config)#cryptopkitrustpointCore-SwitchCore-Switch(ca-trustpoint)#enrollmentterminalCore-Switch(config)#iphttpsecure-trustpointCore-Switch答案:A解析:doublepki[單選題]21.WhichMACaddressisrecognizedasaVRRPvirtualaddress?A)0000.5E00.010aB)0005.3711.0975C)0000.0C07.AC99D)0007.C070/AB01答案:A解析:[單選題]22.WhattechnologyallowsaPEroutertoexchangeVPNv4routeswithotherPErouters?A)MPLSL3VPNB)MPLSL2VPNC)VPLSD)FRAMERELAYTOATMAAL5INTERWORKING答案:A解析:[單選題]23.WhichdesignprincipleshouldbefollowedinaCiscoSD-Accesswirelessnetworkdeployment?A)TheWLCisconnectedoutsideofthefabricB)TheWLCispartofthefabricunderlayC)Theaccesspointisconnectedoutsideofthefabric.D)TheWLCispartofthefabricoverlay.答案:A解析:[單選題]24.RouterR1hasastaticroutethatisconfiguredtodestinationnetwork.AdirectlyconnectedinterfaceisconfiguredwithanIPaddressinthesamedestinationnetwork.WhichstatementaboutR1istrue?A)R1refusestoadvertisethedynamicroutetootherneighborsB)R1prefersthestaticrouteC)R1prefersthedirectlyconnectedinterfaceD)R1sendsawithdrawalnotificationtotheneighboringrouter答案:C解析:路由器R1有一個配置到目標(biāo)網(wǎng)絡(luò)的靜態(tài)路由。一個直接已連接接口在相同的目標(biāo)中配置一個IP地址網(wǎng)絡(luò)。關(guān)于R1，哪個陳述是正確的?CR1更喜歡直接連接的接口[單選題]25.WhatisYANGusedfor?A)ScrapingdataviaCLIB)ProcessingSNMPread-onlypollsC)DescribingdatamodelsD)Providingatransportfornetworkconfigurationdatabetweenclientandserver答案:C解析:[單選題]26.forwhatreasonmightyouchoosetouseanSVTIinterfaceinsteadofacryptomaponatunnelinterface?A)SVTISSUPPORTDYNAMICROUTINGPROTOCOLSWITHOUTGREHEADERS.B)SVTISCANSUPPORTMULTIPLEIPSECSAS.C)SVTISCANCARRYNON-IPTRAFFIC.D)SVTISSUPPORTCEF-SWITCHEDTRAFFICSHAPING.答案:A解析:[單選題]27.WhenDHCPisconfiguredonarouter,whichcommandmustbeenteredsothedefaultgatewayisautomaticallydistributed?A)default-routerB)default-gatewayC)iphelper-addressD)dns-server答案:A解析:[單選題]28.Whichpasswordmustanengineerusetoentertheenablemode?class="fr-ficfr-dibcursor-hover"A)adminadmin123B)defaultC)testing1234D)cisco123答案:C解析:[單選題]29.Onwhichcombinationsarestandardaccesslistsbased?A)destinationaddressandwildcardmaskB)sourceaddressandwildcardmaskC)destinationaddressandsubnetmaskD)sourceaddressandsubnetmask答案:B解析:標(biāo)準(zhǔn)訪問列表基于哪些組合？B.源地址和通配符掩碼[單選題]30.TwoswitchesareconnectedandusingCiscoDynamicTrunkingProtocolSW1issettoDynamicDesirable。Whatistheresultofthisconfiguration?A)Thelinkisinadownstate.B)ThelinkisinanerrordisablesstateC)Thelinkisbecomesanaccessport.D)Thelinkbecomesatrunkport.答案:D解析:CiscoDynamicTrunkingProtocol（思科動態(tài)中繼協(xié)議）：思科動態(tài)中繼協(xié)議（DTP），是VLAN協(xié)議組中思科專有協(xié)議，主要用于協(xié)商兩臺設(shè)備間鏈路上的中繼及中繼封裝（如802.1Q）類型。[單選題]31.WhichsignalstrengthandnoisevaluesmeettheminimumSNRforvoicenetworks?A)Signalstrength-69dBm,noise94dBmB)Signalstrength-67dBm,noise91dBmC)Signalstrength-68dBm,noise89dBmD)Signalstrength-66dBm,noise90dBm答案:B解析:[單選題]32.YouareconfiguringanIPSLAICMPEchooperationtotroubleshootanetworkconnectivityissue.WhendoyouenteranIPaddresstotesttheIPSLA?A)whenyouenabletheICMPEchooperationB)whenyoudefinetheICMPEchooperationC)whenyouspecifythetestfrequencyD)whenyouverifytheIPSLAoperation答案:B解析:您正在配置IPSLAICMP回顯操作以解決網(wǎng)絡(luò)連接問題。何時輸入IP地址以測試IPSLA？b.定義ICMP回顯操作時[單選題]33.RouterR2isconfiguredwithmultipleroutestoreachnetwork/24fromrouterR1.WhatprotocolischosenbyrouterR2toreachthedestinationnetwork/24?class="fr-ficfr-dibcursor-hover"A)eBGPB)StaticC)OSPFD)EIGRP答案:B解析:[單選題]34.WhichfreeapplicationmakeRESTcallagainstDNAcenter?A)PostmanB)AnsibleC)ChefD)Puppet答案:A解析:[單選題]35.whichstatementaboutaciscoAPICcontrollerversusamoretraditionalSDNcontrolleristrue?A)APICUSESAPOLICYAGENTTOTRANSLATEPOLICIESINTOINSTRUCTIONS.B)APICSUPPORTSOPFLEXASANORTHBOUNDPROTOCOL.C)APICDOESSUPPORTASOUTHBOUNDRESTAPI.D)APICUSESAUIMPERATIVEMODEL.答案:A解析:[單選題]36.Howdostratumlevelsrelatetothedistancefromatimesource?A)Stratum0devicesareconnecteddirectlytoanauthoritativetimesourceB)Stratum1devicesareconnecteddirectlytoanauthoritativetimesourceC)Stratum15devicesareconnecteddirectlytoanauthoritativetimesourceD)Stratum15devicesareanauthoritativetimesource答案:B解析:[單選題]37.WhenOSPFlearnsmultiplepathstoanetwork,howdoesitselectaroute?A)ItmultipletheactiveKvalueby256tocalculatetheroutewiththelowestmetric.B)Foreachexistinginterface,itaddsthemetricfromthesourceroutertothedestinationtocalculatetheroutewiththelowestbandwidth.C)Itdividesareferencebandwidthof100Mbpsbytheactualbandwidthoftheexistinginterfacetocalculatetherouterwiththelowestcost.D)Itcountthenumberofhopsbetweenthesourcerouterandthedestinationtodeterminetherouterwiththelowestmetric答案:C解析:[單選題]38.Whatisrequiredforavirtualmachinetorun?A)ahypervisorandphysicalserverhardwareB)aType1hypervisorandahostoperatingsystemC)onlyaType1hypervisorD)onlyaType2hypervisor答案:A解析:一個管理程序和物理服務(wù)器硬件[單選題]39.WhichcloudserviceistypicallyusedtoprovideDNSandDHCPservicestoanenterprise?A)IaaSB)DaaSC)SaaSD)PaaS答案:A解析:哪個云服務(wù)通常用于向企業(yè)提供DNS和DHCP服務(wù)?AIaaS[單選題]40.WhichreasoncouldcauseanOSPFneighborshiptobeintheEXSTART/EXCHANGEstate?A)MismatchedOSPFnetworktypeB)MismatchedareasC)MismatchedMTUsizeD)MismatchedOSPFlinkcosts答案:C解析:[單選題]41.Refertotheexhibit.Whichstatementistrue?A)THEOUTPUTSHOWSANIPV6MULTICASTADDRESSWITHLINK-LOCALSCOPE.B)THEOUTPUTSHOWSANIPV6MULTICASTADDRESSTHATISUSEDFORUNIQUELOCALSOURCESONLY.C)THEOUTPUTSHOWSANIPV6MULTICASTADDRESSTHATCANBEUSEDFORBIDIR-PIMONLY.D)THEOUTPUTSHOWSAILIPV6MULTICASTADDRESSWITHEMBEDDEDRP.答案:D解析:[單選題]42.WhatisonecharacteristicofVXLAN?A)Itsupportsamaximumof4096VLANs.B)Itsupportsmultitenantsegments.C)ItusesSTPtopreventloopsintheunderlaynetwork.D)ItusestheLayer2headertotransferpacketsthroughthenetworkunderlay.答案:B解析:[單選題]43.whenisitmostimportanttoimplementmultiplesynonymousareaaddressesouanIS-ISnetwork?A)WHENINTEGRATINGANIS-ISLAYER2ROUTERWITHANOTHERROUTINGPROTOCOLB)WHENANIS-ISROUTERISMERGINGROUTINGINFORMATIONC)WHENSPLITTINGAREASINTHEIS-ISDOMAIND)WHENMERGINGORSPLITTINGAREASINTHEIS-ISDOMAIN答案:D解析:[單選題]44.whatistheinitialBFDstate?A)DOWNB)INITC)UPD)ADMINDOWN答案:A解析:[單選題]45.WhattheroleofafusioninanSD-Accesssolution?A)providesconnectivitytoexternalnetworksB)actsasaDNSserverC)performsrouteleakingbetweenuser-definedvirtualnetworksandsharedservicesD)providesadditionalforwardingcapacitytothefabric答案:C解析:[單選題]46.Ifaclient?sradiodevicereceivesasignalstrengthof-67dBmandthenoiseflooris-85dBm,WhatistheSNRvalue?A)15dBB)16dBC)18dBD)20dB答案:C解析:[單選題]47.Whichneighbor-discoverymessagetypeisusedtoverifyconnectivitytoaneighborwhenthelink-layeraddressoftheneighborisknown?A.neighborsolicitationA)NEIGHBORSOLICITATIONB)NEIGHBORADVERTISEMENTC)ROUTERADVERTISEMENTD)ROUTERSOLICITATION答案:A解析:[單選題]48.WhichgoalisachievedbytheimplementationofprivateIPv4addressingonanetwork?A)allowsserversandworkstationstocommunicateacrosspublicnetworkboundariesB)providesareductioninsizeoftheforwardingtableonnetworkroutersC)allowscommunicationacrosstheInternettootherprivatenetworksD)providesanaddedlevelofprotectionagainstInternetexposure答案:D解析:[單選題]49.whatoccurstoframesduringtheprocessofframeflooding?A)FramesaresenttoeveryportontheswitchinthesameVLANexceptfromtheoriginatingportB)FramesaresenttoeveryportontheswitchthathasamatchingentryintheMACaddresstable.C)Framesaresenttoallports,includingthosethatareassignedtootherVLANs.D)FramesaresenttoeveryportontheswitchinthesameVLAN.答案:A解析:[單選題]50.InwhichSTPstatedoesMACaddresslearningtakeplaceonaPortFast-enabledport?A)listeningB)forwardingC)discardingD)learning答案:B解析:MAC地址學(xué)習(xí)發(fā)生在支持portfast的端口的哪個STP狀態(tài)?B轉(zhuǎn)發(fā)[單選題]51.inWhichwaydoesaspineand-leafarchitectureallowforscalabilityinanetworkwhenadditionalaccessportsarerequired?A)AspineswitchandaleafswitchcanbeaddedwithredundantconnectionsbetweenthemB)Aspineswitchcanbeaddedwithatleast40GBuplinksC)Aleafswitchcanbeaddedwithasingleconnectiontoacorespineswitch.D)Aleafswitchcanbeaddedwithconnectionstoeveryspineswitch答案:D解析:葉不連接到葉，每一片葉都連接到骨干，部署在top；骨干不連接到骨干，連接到所有葉，部署在中部或尾端。[單選題]52.Whichauthorizationframeworkgivesthird-partyapplicationslimitedaccesstoHTTPservices?A)IPsecB)OAuth2.0C)BasicAuthD)GRE答案:B解析:[單選題]53.Whenisanexternalantennausedinsideabuilding?A)Onlywhenusing5GHzB)Onlywhenusing2.4GHzC)OnlywhenusingMobilityExpressD)Whenitprovidestherequiredcoverage.答案:D解析:[單選題]54.AnengineermustconfigureanewWLANthatallowsausertoenterapassphraseandprovidesForwardsecrecyasasecuritymeasure.WhichLayer2WLANconfigurationisrequiredontheCiscoWLC?A)WPA2PersonalB)WPA3EnterpriseC)WPA3PersonalD)WPA2Enterprise答案:C解析:[單選題]55.WhatactionestablishestheOSPFneighborrelationshipwithoutforminganadjacency?class="fr-ficfr-dibcursor-hover"A)modifyhellointervalB)modifyprocessIDC)modifypriorityD)modifynetworktype答案:A解析:[單選題]56.whichprefixlistmatchesandpermitsallRFC1918networkroutesthathavemasksof/16through/24?A)IPPREFIX-LISTFOOSEQ10PERMIT/16LE24B)IPPREFIX-LISTFOOSEQ10PERMIT/8GE15LE25C)IPPREFIX-LISTFOOSEQ10PERMIT/16GE15LE25D)IPPREFIX-LISTFOOSEQ10PERMIT/8GC16LE24答案:D解析:[單選題]57.whichipv6migrationmethodreliesondynamictunnelsthatusethe2002::/16reservedaddressspace?A)6RDB)6TO4C)ISATAPD)GRE答案:B解析:[單選題]58.WhichoneoftheseisavalidHSRPVirtualMacAddress?A)0000.0C07.AC15B)0000.5E00.01A3C)0007.B400.AE01D)0007.5E00.B301答案:A解析:其中哪個是有效的HSRP虛擬Mac地址?A0000.0C07.AC15[單選題]59.WhathappenswhenaFlexConnectAPchangestostandalonemode?A)Allcontroller-dependentactivitiesstopworkingexcepttheDFS.B)AllclientroamingcontinuestoworkC)OnlyclientsoncentralswitchingWLANsstayconnected.D)AllclientsonanWLANsaredisconnected答案:C解析:[單選題]60.WhichreasoncouldcauseanOSPFneighborshiptobeintheEXSTART/EXCHANGEstate?A)mismatchedOSPFlinkcostsB)mismatchedOSPFnetworktypeC)mismatchedareasD)mismatchedMTUsize答案:D解析:[單選題]61.HHTTP/1.1204NoContent"isreturnedwhenthecurl-i?XDELETEcommandisissued.Whichsituationhasoccurred?A)TheobjectcouldnotbelocatedattheURIpath.B)TheURIwasinvalid.C)Thecommandsucceededindeletingtheobject.D)TheobjectwaslocatedattheURI,butitcouldnotbedeleted.答案:C解析:[單選題]62.whichtaskmustyouperformtoenableanIOSdevicetouseDNSservices?A)configurearelayagentinformationreforwardingpolicyB)configuremanualbindingsC)configuretherelayagentinformationoptionD)configureanameserver答案:B解析:要使IOS設(shè)備使用DNS服務(wù)，必須執(zhí)行哪些任務(wù)?B配置手動綁定[單選題]63.WhatoccurswhenahighbandwidthmulticaststreamissentoveranMVPNusingCiscohardware?A)ThetrafficusesthedefaultMDTtotransmitthedataonlyifitisa(S,G)multicastrouteentryB)AdataMDTiscreatedtoifitisa(*,G)multicastrouteentriesC)AdataanddefaultMDTarecreatedtofloodthemulticaststreamoutofallPIM-SMneighbors.D)AdataMDTiscreatedtoallowforthebesttransmissionthroughthecorefor(S,G)multicastrouteEntries.答案:D解析:adataMDTS,G[單選題]64.Whatsoftwaredefinedarchitectureplaneassistsnetworkdeviceswithmakingpacket-forwardingdecisionsbyprovidingLayer2reachabilityandLayer3routinginformation?A)dataplaneB)controlplaneC)policyplaneD)managementplane答案:B解析:[單選題]65.Whywouldalogfilecontaina*nexttothedate?A)ThenetworkdeviceisnotconfiguredtouseNTPtimestampsforlogging.B)ThenetworkdevicewasunabletoreachtheNTPserverwhenthelogmessageswererecorded.C)ThenetworkdeviceisnotconfiguredtouseNTPD)ThenetworkdevicewasreceivingNTPtimewhenthelogmessageswererecorded答案:C解析:[單選題]66.HowdoesafabricAPfitinthenetwork?A)ItisinlocalmodeandmustbeconnecteddirectlytothefabricbordernodeB)ItisinFlexConnectmodeandmustbeconnecteddirectlytothefabricbordernodeC)ItisinlocalmodeanmustconnecteddirectlytothefabricedgeswitchD)ItisinFlexConnectmodeandmustbeconnecteddirectlytothefabricedgeswitch答案:C解析:[單選題]67.WhichCISCOSD-WANcomponentauthenticatestheroutersandthevSmartcontrollers?A)vAnalyticsB)vBondorchestratorC)vEdgeD)vManageNMS答案:B解析:[單選題]68.Whichcommandcanyouentertoconfigureabuilt-inpolicerwithminimumguaranteedbandwidthwithoutstarvingotherclassesduringperiodsofcongestion?A)BANDWIDTHREMAININGPERCENTB)BANDWIDTHC)PRIORITYPERCENTD)FAIR-QUEUE答案:C解析:[單選題]69.WhichVXLANcomponentisusedtoencapsulateanddecapsulateEthernetframes?A)EVPNB)VTEPC)VNID)GRE答案:B解析:VXLANTunnelEndpoint[單選題]70.WhichaccesscontrollistallowsonlyTCPtrafficwithadestinationportrangeof22-443,excludingport80?A)denytcpanyanyeq80Permittcpanyanygt21lt444B)permittcpanyanyrange22443denytcpanyanyeq80C)permittcpanyanyeq80D)denytcpanyanyeq80Permittcpanyanyrange22443答案:D解析:[單選題]71.WithIGMPv2,whichmulticastgroupaddressdoestheIGMPquerierusetosendquerymessagestoallhostsontheLAN?A)B)C)D)答案:B解析:[單選題]72.WhichrequirementforanAnsible-managednodeistrue?A)ItmustbeaLinuxserveroraCiscodeviceB)ItmusthaveanSSHserverrunningC)Itmustsupportadhoccommands.D)ItmusthaveanAnsibleTowerinstalled答案:B解析:[單選題]73.WhenisitusefilltodisablesplithorizononanEIGRPinterface?A)DISABLEITWHENYOUWANTTOPROVIDEADDITIONALBACKUPPATHSINYOURNETWORK.B)DISABLEITWHENYOUWANTTOSENDROUTESTHATARCLEARNEDFROMANOTHERROUTINGPROTOCOLTOPEEROILTHESAMEINTERFACE.C)DISABLEITWHENYOUNEEDTOSENDUPDATESTOPEERSONTHEINTERFACEONWHICHTHEUPDATESWERERECEIVED.D)ITISNEVERADVISABLETODISABLESPLITHORIZONONANEIGRPINTERFACE.答案:C解析:[單選題]74.Which802.11frametypeisassociationresponse?A)managementB)protectedframeC)controlD)action答案:A解析:[單選題]75.Refertotheexhibit.Whichconfigurationmustyouapplytoroutersothatitcangeneratealogmessageinthegivenformat?A)ServicealignmentloggingB)ServicetimestampslogdatetimeC)ServicetimestampsloguptimeD)Servicesequence-numbers答案:C解析:[單選題]76.Whichdesignprinciplestatesthatauserhasnoaccessbydefaulttoanyresource,andunlessAresourceisexplicitlygranted,itshouldbedenied?A)completemediationB)leastprivilegeC)economyofmechanismD)fail-safedefaults答案:D解析:[單選題]77.WhichIGMPsnoopingfeaturetracksIGMPv3hostsonaper-portbasis?A)IGMPV3QUERIERB)IGMPV3STATIC-GROUPC)FAST-LEAVED)EXPLICITTRACKINGE)MEMBERSHIPREPORT答案:A解析:[單選題]78.WhichinformationiscontainedinanOSPFType7Not-So-StubbyAreaNSSAExternalLSA?A)ThepathsandcoststoallOSPFNSSAareasthatareexternaltothecurrentarea.B)ThepathandcoststoreachotherstubareaborderroutersistheOSPFroutingdomain.C)Theaddressofroutersthatconnectthecurrentareatootherareasandthecosttoreachthoserouters.D)Externalnetworkaddress,mask,andcosttoreacheachnetworkthatisexternaltotheOSPFdomainandonlywithintheNSSAE)Theexternalnetworkaddress,mask,andcosttoreachnetworksthatareexternaltotheOSPFNSSAincludingthedefaultroute.答案:D解析:[單選題]79.WhichattributeisnotpartoftheBGPextendedcommunitywhenaPEcreatesaVPN-IPv4routewhilerunningOSPFbetweenPE-CE?A)OSPFDOMAINIDENTIFIERB)OSPFROUTETYPEC)OSPFROUTERIDD)MEDE)OSPFNETWORKTYPE答案:E解析:[單選題]80.whichactiondoesroutepoisoningtakethatserversasaloop-preventionmethod?A)ITIMMEDIATELYSENDSROUTINGUPDATESWITHANUNREACHABLEMETRICTOALLDEVICES.B)ITIMMEDIATELYSENDSROUTINGUPDATESWITHAMETRICOF255TOALLDEVICES.C)ITPROHIBITSAROUTERFROMADVERTISINGBACKONTOTHEINTERFACEFROMWHICHITWASLEARNED.D)ITADVERTISESAROUTEWITHANUNREACHABLEMETRICBACKONTOTHEINTERFACEFROMWHICHITWASLEARNED.E)ITPOISONSTHEROUTEBYTAGGINGITUNIQUELYWITHINTHENETWORK答案:A解析:[單選題]81.WhataretheminimumrequirementsforCiscoPfRtoprovideroutingcontrol?A)ONEMASTERCONTROLLER,TWOBORDERROUTERS,TWOINTERNALINTERFACES,ANDTWOEXTERNALINTERFACES.B)ONEMASTERCONTROLLER,ONEBORDERROUTER,ONEINTERNALINTERFACE,ANDTWOEXTERNALINTERFACES.C)ONEMASTERCONTROLLER,TWOBORDERROUTER,ONEINTERNALINTERFACE,ANDONEEXTERNALINTERFACE.D)ONEMASTERCONTROLLER,ONEBORDERROUTER,TWOINTERNALINTERFACES,ANDONEEXTERNALINTERFACE.E)TWOMASTERCONTROLLERS,ONEBORDERROUTER,ONEINTERNALINTERFACE,ANDONEEXTERNALINTERFACE.答案:B解析:[單選題]82.whichoptiondescribestheeffectofthecommandiproutevrfDMZglobal?A)ITCREATESASTATICROUTEINTHEGLOBALROUTINGTABLEFOR,ANDTHENEXTHOPISINTHEVRFDMZ.B)ITCREATESASTATICROUTEINTHEGLOBALROUTINGTABLEFORANDTHENEXTHOPISINTHEGLOBALROUTINGTABLE.C)ITCREATESASTATICDEFAULTROUTEINTHEVRFDMZ;ANDTHENEXTHOPISINTHEGLOBALROUTINGTABLE.D)ITCREATESASTATICROUTEINTHEVRPDMZFOR,ANDTHENEXTHOPISINTHEVRFDMZ.E)ITCREATESASTATICROUTEINTHEYRFDMZFOR,ANDTHENEXTHOPISINTHEGLOBALROUTINGTABLE.答案:E解析:第2部分：多項選擇題，共18題，每題至少兩個正確答案,多選或少選均不得分。[多選題]83.whichBGPfeatureallowsaroutertomaintainitscurrentBGPconfigurationwhileitadvertisesadifferentASnumbertonewconnections?(choosetwo)A)LOCAL-ASB)NEXT-HOP-SELFC)ALLOW-ASIND)SOFTRESET答案:BC解析:[多選題]84.InaCiscoSD-WANsolution,whichtwofunctionsareperformedbyOMP?(Choosetwo.)A)advertisementofnetworkprefixesandtheirattributesB)configurationofcontrolanddatapoliciesC)gatheringofunderlayinfrastructuredataD)deliveryofcryptokeysE)segmentationanddifferentiationoftraffic答案:AB解析:[多選題]85.Whileexaminingexcessivetrafficonthenetwork,itisnotedthatallincomingpacketsonaninterfaceappeartobeallowedeventhoughanIPv4ACLisappliedtotheinterface.Whichtwomisconfigurationscausethisbehavior?(Choosetwo)A)ThepacketsfailtomatchanypermitstatementB)AmatchingpermitstatementistoohighintheaccesstestC)AmatchingpermitstatementistoobroadlydefinedD)TheACLisemptyE)Amatchingdenystatementistoohighintheaccesslist答案:BC解析:[多選題]86.InwhichtwocircumstancesareprivateIPv4addressesappropriate?(Choosetwo)A)oninternalhoststhatstreamdatasolelytoexternalresourcesB)onhoststhatcommunicatesonlywithotherinternalhostsC)onthepublic-facinginterfaceofafirewallD)onhoststhatrequireminimalaccesstoexternalresourcesE)toallowhostsinsideanenterprisetocommunicateinbothdirectionswithhostsoutsidetheenterprise答案:BD解析:在哪種情況下私有IPv4地址是合適的?(選擇兩個)BD在僅與其他內(nèi)部主機通信的主機上在需要對外部資源進行最小訪問的主機上[多選題]87.Youarebackingupaserverwitha1Gbpslinkandalatencyofa2ms.Whichtwostatementsaboutthearetrue?(Choosetwo)A)THEBANDWIDTHDELAYPRODUCTIS2MB.B)THEDEFAULTTCPSENDWINDOWSIZEISTHELIMITINGFACTORC)THEDEFAULTTCPRECEIVEWINDOWSIZEISTHELIMITINGFACTORD)THEBANDWIDTHDELAYPRODUCTIS500MB.E)THEBANDWIDTHDELAYPRODUCTIS500MB.答案:AC解析:[多選題]88.whichtwooptionsareexamplesofnorthboundandorsouthboundprotocols?(choosetwo)A)ISISB)JSONC)OPENSTACKD)NETCONFE)BGP-LS答案:DE解析:[多選題]89.refertotheexhibit.Whichtwostatementsaboutthedeviceconfigurationarctrue?(choosetwo)A)THEDEVICEHASCONTROL-PLANEPROTECTIONENABLED.B)THEDEVICEIMPLICITLYALLOWSTELNETCONNECTIONSC)THEGIGABITETHERNET0/1INTERFACEOFTHEDEVICEALLOWSINCOMINGSSHANDSNMPCONNECTIONS.D)THEDEVICEHASMANAGEMENT-PLANEPROTECTIONENABLED.E)THEDEVICEALLOWSSSHCONNECTIONSTOITSLOOPBACKINTERFACE.答案:CD解析:[多選題]90.Refertotheexhibit.Whichtwooptionsaretwobenefitsofthisconfiguration?(Choosetwo)A)INCREASEDSECURITYB)REDUNDANCYC)REDUCEDJITTERD)REDUCEDLATENCYE)LOADSHARING答案:BE解析:[多選題]91.AnengineermustconfigureAAAonaCisco9800WLCforcentralwebauthentication.Whichtwocommandsareneededtoaccomplishthistask?(Choosetwo)A)(CiscoController)>configradiusacctadd21812SECRETB)(CiscoController)>configwlanaaa-overrideenable<wlan-id>C)(CiscoController)>configwlanaaa-overridedisable<wlan-id>D)Device(config-locsvr-da-radius)#client2server-key0SECRETE)Device(config)#aaaserverradiusdynamic-author答案:DE解析:[多選題]92.圖Refertotheexhibit.whichtwostatementsaboutrouterR1aretrue?(choosetwo)A)therouterhastwoEIGRPneighborsandoneOSPFneighborB)atleasttwoIGProutingprotocolsarerunnin