思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試(習(xí)題卷1)

試卷科目：思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試(習(xí)題卷1)PAGE"pagenumber"pagenumber/SECTIONPAGES"numberofpages"numberofpages思科認(rèn)證互聯(lián)網(wǎng)專家CCIE考試第1部分：?jiǎn)雾?xiàng)選擇題，共222題，每題只有一個(gè)正確答案,多選或少選均不得分。[單選題]1.WhichencryptionhashingalgorithmdoesNTPuseforauthentication?A)SSLB)AES256C)AES128D)MD5答案:D解析:[單選題]2.AnadministratormustenableTelnetaccesstoRouterXusingtherouterusernameandPassworddatabaseforauthentication.Whichconfigurationshouldbeapplied?A)RouterX(config)#aaanew-modelRouterX(config)#aaaauthenticationloginauth-listlocalB)RouterX(config)#linevty04RouterX(config-line)#loginRouterX(config-line#endC)RouterX(config)#lineaux0RouterX(config-line)#passwordciscoRouterX(config-line#loginD)RouterX(config)#linevty04RouterX(config-line)#loginlocalRouterX(config-line#end答案:D解析:[單選題]3.Inatraditional3tiertopology,anengineermustexplicitlyconfigureaswitchastherootbridgeandexcludeitfromanyfurtherelectionprocessforthespanning-treedomain.Whichactionaccomplishesthistask?A)Configurethespanning-treepriorityto32768B)ConfigurerootguardandportfastonallaccessswitchportsC)ConfigureBPDUguardinallswitch-to-switchconnectionsD)Configurethespanning-treepriorityequalto0答案:B解析:[單選題]4.WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?A)HTTPB)SSHC)HTTPSD)TCP答案:C解析:[單選題]5.WhichkeyboardshortcutcanyouusetoexittheSystemConfigurationDialogonaCisconetworkingdeviceandreturntoprivilegedEXECmodewithoutmakingchanges?A)Ctrl+Alt+DeleteB)Shift-EscC)Ctrl-CD)Ctrl-v答案:C解析:您可以使用哪個(gè)鍵盤快捷鍵退出Cisco網(wǎng)絡(luò)設(shè)備上的系統(tǒng)配置對(duì)話框并返回到特權(quán)執(zhí)行模式而不進(jìn)行更改？[單選題]6.IfthemaximumpowerlevelassignmentforglobalTPC802.11a/n/acisconfiguredto10DBm,whichpowerleveleffectivelydoublesthetransmitpower?A)13dBmB)14dBmC)17dBmD)20dBm答案:A解析:[單選題]7.WhichIPv6first-hopsecurityfeatureblockstrafficsourcedfromIPv6addressesthatarcoutsidetheprefixgleanedfromrouteradvertisements?A)IPV6RAGUARDB)IPV6DHCPGUARDC)IPV6SOURCEGUARDD)IPV6PREFIXGUARD答案:D解析:[單選題]8.InOSPF,whichLSAtypeisresponsibleforpointingtotheASBRrouter?A)type1B)type2C)type3D)type4答案:D解析:[單選題]9.WhichWANtopologyprovidesacombinationofsimplicityquality,andavailability?A)PartialmeshB)FullmeshC)Point-to-pointD)Hub-and-spoke答案:C解析:[單選題]10.WhichDNSlookupdoesanaccesspointperformwhenattemptingCAPWAPdiscovery?A)CISCO-DNA-CONTROILLER.localB)CAPWAP-CONTROLLER.localC)CISCO-CONTROLLER.localD)CISCO-CAPWAP-CONTROLLER.local答案:D解析:[單選題]11.WhichcomponentoftheCiscoCyberThreatDefensesolutionprovidesuserandflowcontextanalysis?A)CiscoFirepowerandFireSIGHTB)CiscoStealthwatchsystemC)AdvancedMalwareProtectionD)CiscoWebSecurityAppliance答案:B解析:[單選題]12.WhentheactiverouterinanHSRPgroupfails,whatrouterassumestheroleandforwardspackets?A)forwardingB)backupC)standbyD)listening答案:C解析:[單選題]13.WhathappenstothesignalstrengthofanRFsignalduetowavespreading?A)ThesignalstrengthoftheRFsignalwillfalloffequallynearthetransmitterandalsofartherawayB)ThesignalstrengthoftheRFsignalwillfalloffquicklynearthetransmitterbutmoreslowlyfartherawayC)ThesignalstrengthoftheRFsignalwillfalloffslowlynearthereceiverandmorequicklyfartherawayD)ThesignalstrengthoftheRFsignalwillfalloffslowlynearthetransmitterbutmorequicklyfartheraway答案:B解析:[單選題]14.WhichencryptionhashingalgorithmdoesNTPuseforauthentication?A)SSLB)MD5C)AES128D)AES256答案:B解析:[單選題]15.WhichdesignprincipleshouldbefollowedinaCiscoSD-Accesswirelessnetworkdeployment?A)TheWLCisconnectedoutsideofthefabricB)TheWLCispartofthefabricunderlayC)Theaccesspointisconnectedoutsideofthefabric.D)TheWLCispartofthefabricoverlay.答案:A解析:[單選題]16.AnAPiscurrentlytransmittingat50mW.WhatisthevaluewhenconvertedtodBm.A)14dBmB)17dBmC)23dBmD)20dBm答案:B解析:[單選題]17.whichcommandcanyouenteronaCiscoIOSdevicetoenableascheduledalgorithmthatdirectslookupcallstomultipleDNShosts?A)ipdomainround-robinB)ipname-server45C)ipdomainlookupD)ipdomainlist答案:B解析:您可以在CiscoIOS設(shè)備上輸入哪個(gè)命令來(lái)啟用將查找調(diào)用定向到多個(gè)DNS主機(jī)的計(jì)劃算法？[單選題]18.whichipv6migrationmethodreliesondynamictunnelsthatusethe2002::/16reservedaddressspace?A)6RDB)6TO4C)ISATAPD)GRE答案:B解析:[單選題]19.WhichresourceisabletobesharedamongvirtualmachinesdeployedonthesamephysicalServer?A)VMconfigurationfileB)operatingsystemC)diskD)applications答案:C解析:[單選題]20.InanMPLS-VPNenvironment,whatistheeffectofconfiguringanidenticalsetofroutetargetsforaparticularVRFbutthenconfiguringanonidenticalRDacrossmultiplePEdevices?A)TheroutesarcrejectedbytheremotePEbecausetheyhaveadifferentRDthanitsroutes.B)Theroutesarecorrectlymanagedbythecontrolplane,butthereareinstanceswhereroutestakeuptwiceasmuchmemory.C)TheroutesarenotsenttoanyremotePEwithadifferentRD.D)TheroutespropagatetotheremotePE.butthePEneverinstallstheminitsforwardingtable.答案:B解析:[單選題]21.Howdoclouddeploymentsdifferfromon-premdeployments?A)Clouddeploymentsaremorecustomizablethanon-premisesdeploymentsB)Clouddeploymentsrequirelongerimplementationtimesthanon-premisesdeploymentsC)Clouddeploymentsrequirelessfrequentupgradesthanon-premisesdeploymentsD)Clouddeploymentshavelowerupfrontcoststhanon-premisesdeployments答案:D解析:[單選題]22.AnetworkadministratorispreparingaPythonscripttoconfigureaCiscoIOSXE-baseddeviceonthenetwork.Theadministratorisworriedthatcolleagueswillmakechangestothedevicewhilethescriptisrunning.Whichoperationoftheclientmanagerinpreventcolleaguemakingchangestothedevicewhilethescriptisrunning?A)m.lock(config=?running?)B)m.lock(target=?running?)C)m.freeze(target=?running?)D)m.freeze(config=?running?)答案:B解析:[單選題]23.Aferyouapplythegivenconfigurationtoarouter,theDHCPclientsbehindthedevicecannotcommunicatewithhostsoutsideoftheirsubnet.Whichactionismostlikelytocorrecttheproblem?A)ConfigurethednsserveronthesamesubnetastheclientsB)ActivatethedhcppoolC)CorrectthesubnetmaskD)configurethedefaultgateway答案:D解析:在將給定的配置應(yīng)用到路由器之后，設(shè)備后面的DHCP客戶機(jī)就不能這樣做了與子網(wǎng)之外的主機(jī)通信。哪種行動(dòng)最有可能糾正這個(gè)問(wèn)題?D配置默認(rèn)網(wǎng)關(guān)[單選題]24.Forwhichroutesdoesthedistancebgp105070commandsettheadministrativedistance?A)forBGPinternalroutesonlyB)forallBGProutesC)forBGPexternalroutesonlyD)betweenBGProutesandIGProutes答案:B解析:bgp105070命令為哪些路線設(shè)置管理距離？B.對(duì)于所有BGP路由[單選題]25.Whichpasswordmustanengineerusetoentertheenablemode?class="fr-ficfr-dibcursor-hover"A)adminadmin123B)defaultC)testing1234D)cisco123答案:C解析:[單選題]26.YouhaveconfiguredarouterwithanOSPFrouterID,butitsIPaddressstillreflectsthephysicalinterface.Whichactioncanyoutaketocorrecttheproblemintheleastdisruptiveway?A)ReloadtheOSPFprocessB)ReloadtherouterC)SavetherouterconfigurationD)Specifyaloopbackaddress答案:D解析:您已經(jīng)使用OSPF路由器ID配置了一個(gè)路由器，但是它的IP地址仍然反映了物理接口。您可以采取哪些措施以最少的中斷方式解決問(wèn)題？d.指定環(huán)回地址[單選題]27.HowdoesafabricAPfitinthenetwork?A)ItisinlocalmodeandmustbeconnecteddirectlytothefabricbordernodeB)ItisinFlexConnectmodeandmustbeconnecteddirectlytothefabricbordernodeC)ItisinlocalmodeanmustconnecteddirectlytothefabricedgeswitchD)ItisinFlexConnectmodeandmustbeconnecteddirectlytothefabricedgeswitch答案:C解析:[單選題]28.Whichcommandcanyouentertoconfigureabuilt-inpolicerwithminimumguaranteedbandwidthwithoutstarvingotherclassesduringperiodsofcongestion?A)BANDWIDTHREMAININGPERCENTB)BANDWIDTHC)PRIORITYPERCENTD)FAIR-QUEUE答案:C解析:[單選題]29.WhichmethodofaccountauthenticationdoesOAuth2.0withinRESTAPIs?A)username/rolecombinationB)accesstokensC)cookieauthenticationD)basicsignatureworkflow答案:B解析:[單選題]30.Ifconfiguringastaticdefaultrouteontherouterwiththeiproute120commandhowdoestherouterrespond?class="fr-ficfr-dibcursor-hover"A)ItignoresthenewstaticrouteuntiltheexistingOSPFdefaultrouteisremovedB)ItimmediatelyreplacestheexistingOSPFrouteintheroutingtablewiththenewlyconfiguredstaticrouteC)Itstartsload-balancingtrafficbetweenthetwodefaultroutesD)ItstartssendingtrafficwithoutaspecificmatchingentryintheroutingtabletoGigabitEthernet0/1答案:A解析:[單選題]31.WhenisitusefilltodisablesplithorizononanEIGRPinterface?A)DISABLEITWHENYOUWANTTOPROVIDEADDITIONALBACKUPPATHSINYOURNETWORK.B)DISABLEITWHENYOUWANTTOSENDROUTESTHATARCLEARNEDFROMANOTHERROUTINGPROTOCOLTOPEEROILTHESAMEINTERFACE.C)DISABLEITWHENYOUNEEDTOSENDUPDATESTOPEERSONTHEINTERFACEONWHICHTHEUPDATESWERERECEIVED.D)ITISNEVERADVISABLETODISABLESPLITHORIZONONANEIGRPINTERFACE.答案:C解析:[單選題]32.WhichtypeofaccesslistcomparessourceanddestinationIPaddress?A)standardB)extendedC)IPnamedD)reflexive答案:B解析:哪種訪問(wèn)列表比較源和目標(biāo)IP地址？B.擴(kuò)展[單選題]33.howmanyaddressfamiliescanasingleOSPFV3instancesupport?A)1B)2C)5D)10答案:A解析:[單選題]34.HowdotraditionalcampusdevicemanagementandCiscoDNACenterdevicemanagementdifferinregardstodeployment?A)CiscoDNACenterdevicemanagementcanbeimplementedatalowercostthanmosttraditionalcampusdevicemanagementoptionsB)TraditionalcampusdevicemanagementschemescantypicallydeploypatchesandupdatesmorequicklythanCiscoDNACenterdevicemanagement.C)CiscoDNACenterdevicemanagementcandeployanetworkmorequicklythantraditionalcampusdevicemanagementD)TraditionalcampusdevicemanagementallowsanetworktoscalemorequicklythanwithCiscoDNACenterdevicemanagement.答案:C解析:[單選題]35.WhichstatementaboutSTPportstatesistrue?A)APORTINTHEBLOCKINGSTATEREMAINSINTHATSTATEFOR30SECONDSBEFORETRANSITIONINGTOTHELISTENINGSTATE.B)LISTENINGANDLEARNINGARCTRANSITORYPORTSTATESTHATUSETHEFORWARDDELAYTIMER.C)WHENAPORTTRANSITIONSTOTHELEARNINGSTATE,ITCANSENDANDRECEIVEDATAFRAMESD)APORTINTHEBLOCKINGSTATELEARNSADDRESSANDRECEIVESBPDUS答案:B解析:[單選題]36.AcustomertransitionsawiredenvironmenttoaCiscoSD-Accesssolution.ThecustomerDoesnotwanttointegratethewirelessnetworkwiththefabric.WhichwirelessdeploymentApproachenablesthetwosystemstocoexistandmeetsthecustomerrequirement?A)Deployaseparatenetworkforthewirelessenvironment.B)ImplementaCiscoDNACentertomanagethetwonetworks.C)Deploythewirelessnetworkoverthetopofthefabric.D)DeploytheAPsinautonomousmode.答案:B解析:[單選題]37.Ifanotice-levelmessagingissenttoasyslogserver,whicheventhasoccurred?A)AnetworkdevicehasrestartedB)AnARPinspectionhasfailedC)AroutinginstancehasflappedD)Adebugoperationisrunning答案:C解析:[單選題]38.WhichCiscoFlexConnectstateallowswirelessusersthatareconnectedtothenetworktoContinueworkingaftertheconnectiontotheWLChasbeenlost?A)AuthenticationDown/SwitchingDownB)Authentication-Central/Switch-LocalC)Authentication-Down/Switch-LocalD)Authentication-Central/Switch-Central答案:C解析:DOWN&Local[單選題]39.QUESTION11Refertotheexhibit.WhichstatementabouttheOPSFdebugoutputistrue?A)TheoutputdisplaysOSPFhellomessageswhichrouterR1hassentorreceivedoninterfaceFa0/1.B)TheoutputdisplaysOSPFmessageswhichrouterR1hassentorreceivedonallinterfaces.C)TheoutputdisplaysOSPFmessageswhichrouterR1hassentorreceivedoninterfaceFa0/1.D)TheoutputdisplaysOSPFhelloandLSACKmessageswhichrouterR1hassentorreceived.答案:A解析:[單選題]40.''HTTP/1.1204NoContent''isreturnedwhenthecurl-i-xDELETEcommandisissued.whichsituationhasoccurred?A)TheobjectcouldnotbelocatedattheURLpathB)ThecommandsucceededindeletingtheobjectC)TheobjectwaslocatedatheURL,butitcouldnotbedeletedD)TheURLwasinvalid答案:B解析:[單選題]41.WhichaccesscontrolslistallowsonlyTCPtrafficwithadestinationportrangeof22-443,excludingport80?A)Denytcpanyanyeq80Permittcpanyanygt21lt444B)Permittcpanyanyneq80C)Permittcpanyanyrange22443Denytcpanyanyeq80D)Denytcpanyanyneq80Permittcpanyanyrange22443答案:A解析:[單選題]42.WhichvalueisincludedintheinitialTCPSYNmessage?A)asequencenumberB)aTTLnumberC)anacknowledgmentnumberD)asessionID答案:A解析:初始TCPSYN消息中包含哪些值？a.序列號(hào)[單選題]43.WhichvaluedocsEIGRPusetodeterminethemetricforasummaryaddress?A)THEAVERAGEOFTHECOMPONENTMETRICSB)ADEFAULTFIXEDVALUEC)THELOWESTMETRICAMONGTHECOMPONENTROUTESD)THEHIGHESTMETRICAMONGTHECOMPONENTROUTES答案:C解析:[單選題]44.OnwhichporttypewouldyouconfigureSTPPortFastBPDUguard?A)ROOTPORTSB)DESIGNATEDPORTSC)HOSTPORTSD)ALTERNATEPORTS答案:C解析:[單選題]45.WhenusingRapidPVST+,whichcommandguaranteestheswitchisalwaystherootbridgeforVLAN200?A)Spanning-treevlan200priority614440B)Spanning-treevlan200priority0C)Spanning-treevlan200priority38572422D)Spanning-treevlan200rootprimary答案:B解析:[單選題]46.Accordingtothenetworkingbestpractices,whichnetworkdeviceshouldbeusedforoptimizationandratelimiting?A)THEPROVIDERCOREDEVICEB)THEPROVIDEREDGEDEVICEC)THECUSTOMERCOREDEVICED)THECOUSTOMEREDGEDEVICE答案:D解析:[單選題]47.whichkeychaincryptographicalgorithmissupportedbytheIS-ISroutingprotocol?A)HMAC-SHA1-12B)HMAC-MD5C)MD5D)HMAC-SHA1-20答案:B解析:[單選題]48.WhichIPsecsecurityprotocolshouldbeusedwhenconfidentialityisrequired?A)MD5B)PSKC)AHD)ESP答案:D解析:當(dāng)需要保密時(shí)，應(yīng)該使用哪種IPsec安全協(xié)議?DESP[單選題]49.Awirelessconsultantisdesigningahigh-densitywirelessnetworkforalecturehallfor1000students.Whichantennatypeisrecommendedforthisenvironment?A)sectorantennaB)dipoleantennaC)parabolicdishD)omnidirectionalantenna答案:D解析:[單選題]50.IfthemaximumpowerlevelassignmentforglobalTPC802.11a/n/acisconfiguredto10dBm,whichpowerleveleffectivelydoublestheTransmitpower?A)13dBmB)14dBmC)17dBmD)20dBm答案:C解析:[單選題]51.Whichnetworkactionoccurswithinthedataplane?A)comparethedestinationIPaddresstotheIProutingtable.B)runroutingprotocols(OSPF,EIGRP,RIP,BGP)C)makeaconfigurationchangefromanincomingNETCONFRPCD)replytoanincomingICMPechorequest答案:A解析:[單選題]52.whichoptionsistheimplicitaccessruleforIPV6acls?A)PERMITALLB)PERMITNEIGHBORDISCOVERY,DENYEVERYTHINGELSEC)DENYALLD)PERMITALLICMP,DENYEVERYTHINGELSE答案:B解析:[單選題]53.refertotheexhibit.Whichconfigurationmustyouapplytoroutersothatitcangeneratealogmessageinthegivenformat?A)SERVICEALIGNMENTLOGGINGB)SERVICETIMESTAMPSLOGDATETIMEC)SERVICETIMESTAMPSLOGUPTIMED)SERVICESEQUENCE-NUMBERS答案:C解析:[單選題]54.WhichHTTPstatuscodeisthecorrectresponseforarequestwithanincorrectpasswordappliedtoaRESTAPIsession?A)HTTPStatusCode:200B)HTTPStatusCode:302C)HTTPStatusCode:401D)HTTPStatusCode:504答案:C解析:[單選題]55.AfteryouconfigureaDHCPserveronVLAN10toserviceclientsonVLAN10andVLAN20.clientsonVLAN10aregivenIPaddressassignments,butclientsonVLAN20failtoreceiveIPaddresses.Whichactionmustyoutaketocorrecttheproblem?A)ConfiguretheiphelperaddresscommandintheDHCPserverconfiguration.B)ConfiguretheDNSnameoptionintheDHCPserverconfigurationC)ConfigureaseparateDHCPserveronVLAN20D)ConfigurethedefaultgatewayintheDHCPseverconfiguration答案:C解析:在VLAN10上配置一個(gè)DHCP服務(wù)器以服務(wù)VLAN10和VLAN20上的客戶機(jī)之后。VLAN10上的客戶機(jī)獲得IP地址分配，但VLAN20上的客戶機(jī)無(wú)法接收IP地址。你必須采取什么措施來(lái)糾正這個(gè)問(wèn)題？c.在VLAN20上配置單獨(dú)的DHCP服務(wù)器[單選題]56.which802.11frametypeisassociationreponse?A)managementB)protectedframeC)actionD)control答案:A解析:[單選題]57.WhichdataisproperlyformattedwithJSON?A){"name":"Peter","age","25","likesJson":true,"characteristics":["small","strong",18]}B){"name":"Peter","age":"25","likesJson":true,"characteristics":["small","strong","18"],}C){"name":Peter,"age":25,"likesJson":true,"characteristics":["small","strong","18"],}D){"name":"Peter""age":"25""likesJson":true"characteristics":["small","strong",18]}答案:A解析:[單選題]58.ShortlyafterSiteAwasconnectedtoSiteBoveranewsingle-modefiberpath.usersatSiteAreportintermittentconnectivityissueswithapplicationshostedatSiteB.Whatisthecauseoftheintermittentconnectivityissue?class="fr-ficfr-dibcursor-hover"A)InterfaceerrorsareincrementingB)AnincorrectSFPmediatypewasusedatSiteAC)HighusageiscausinghighlatencyD)Thesiteswereconnectedwiththewrongcabletype答案:C解析:[單選題]59.WhatdoCiscoDNAsouthboundAPIsprovide?A)interfacebetweenthecontrollerandtheconsumerB)RESTfulAPIinterfacefororchestratorcommunicationC)interfacebetweenthecontrollerandthenetworkdevicesD)NETCONFAPIinterfacefororchestratorcommunication答案:C解析:[單選題]60.HowdoEIGRPmetricscomparetoOSPFmetrics?A)TheEIGRPadministrativedistanceforexternalroutesis170,andtheOSPFAdministrativedistanceforexternalroutesis110B)EIGRPusestheDijkstraalgorithm,andOSPFusesTheDUALalgorithmC)TheEIGRPadministrativedistanceforexternalroutesis170,andtheOSPFAdministrativedistanceforexternalroutesisundefinedD)EIGRPmetricsarebasedonacombinationofbandwidthandpacketloss,andOSPFMetricsarebasedoninterfacebandwidth答案:A解析:[單選題]61.WhatfunctiondoesVXLANperforminanSD-Accessdeployment?A)policyplaneforwardingB)controlplaneforwardingC)dataplaneforwardingD)systemsmanagementandorchestration答案:C解析:VXLAN=dataplaneforwarding[單選題]62.Ifthenoiseflooris-90dBmandthewirelessclientisreceivingasignalof-75dBm,whatistheSNR?A)15B)1.2C)-165D)83答案:A解析:[單選題]63.Whatcausesaporttobeplacedintheerr-disabledstate?A)latencyB)portsecurityviolationC)shutdowncommandissuedontheportD)nothingpluggedintotheport答案:B解析:[單選題]64.ThenetworkadministratorwantsVLAN67traffictobeuntaggedbetweenSwitch1andSwitch2whileallotherVLANsaretoremaintagged.Whichcommandaccomplishesthistask?class="fr-ficfr-dibcursor-hover"A)switchportaccessvlan67B)switchporttrunkallowedvlan67C)switchportprivate-vlanassociationhost67D)switchporttrunknativevlan67答案:D解析:[單選題]65.AcustomerwantstoconnectadevicetoanautonomousCiscoAPconfiguredasaWGB.TheWGBisconfiguredproperly:however,itfailstoassociatetoaCAPWAP-enabledAP.WhichChangemustbeappliedintheadvancedWLANsettingstoresolvethisissue?A)EnableAironetIE.B)Enablepassiveclient.C)DisableAAAoverride.D)DisableFlexConnectlocalswitching.答案:A解析:[單選題]66.WhichgoalisachievedbytheimplementationofprivateIPv4addressingonanetwork?A)providesanaddedlevelofprotectionagainstInternetexposureB)providesareductioninsizeoftheforwardingtableonnetworkroutersC)allowscommunicationacrosstheInternettootherprivatenetworksD)allowsserversandworkstationstocommunicateacrosspublicnetworkboundaries答案:A解析:[單選題]67.Anengineermustprotecttheircompanyagainstransomwareattacks.Whichsolutionallowstheengineertoblocktheexecutionstageandpreventfileencryption?A)UseCiscoAMPdeploymentwiththeMaliciousActivityProtectionengineerenabledB)UseCiscoAMPdeploymentwiththeExploitPreventionengineenabledC)UseCiscoFirepowerandblocktraffictoTORnetworksD)UseCiscoFirepowerwithIntrusionPolicyandsnortrulesblockingSMBexploitation答案:A解析:[單選題]68.whichfeaturemonitorsnetworkeventsandtakesautomatedactionbasedonscriptsconfiguredbytheadministrator?A)EPCB)EEMC)PERFORMANCEMONITORD)NETFLOW答案:B解析:[單選題]69.WhichbehaviorcanbeexpectedwhentheHSRPversionsischangedfrom1to2?A)EachHSRPgroupreinitializesbecausethevirtualMACaddresshaschangedB)Nochangesoccurbecauseversion1and2usethesamevirtualMACOUIC)EachHSRPgroupreinitializesbecausethemulticastaddresshaschangedD)Nochangesoccurbecausethestandbyrouterisupgradedbeforetheactiverouter答案:A解析:[單選題]70.WhichIPSLAoperationtypeisenhancedbytheuseoftheIPSLAsResponder?A)DNSB)HTTPC)ICMPECHOD)UDPECHO答案:D解析:[單選題]71.R1haslearnedroute/24viaIS-IS.OSPF,RIP.andInternalEIGRPUndernormaloperatingconditions,whichroutingprotocolisinstalledintheroutingtable?A)<li>IS-IS</li>B)RIPC)InternalEIGRPD)OSPF答案:C解析:EIGRP的AD最低，所以選擇安裝EIGRP協(xié)議class="fr-ficfr-dib"[單選題]72.AnengineermustconfigureanACLthatpermitspacketswhichincludeanACKintheTCPheader.WhichentrymustbeincludedintheACL?A)access-list110permittepanyanyeq21establishedB)access-list110permittepanyanyeq21tcp-ackC)access-list10permittepanyanyeq21establishedD)access-list10permitipanyanyeq21tcp-ack答案:A解析:[單選題]73.ApacketisbeingsentacrossrouterR1tohost4.Whatisthedestinationrouteforthepacket?class="fr-ficfr-dibcursor-hover"A)54viaSerial0/0/1B)54viaSerial0/0/0C)46viaSerial0/1/0D)50viaSerial0/0/0答案:A解析:[單選題]74.RouterR1hasastaticroutethatisconfiguredtodestinationnetwork.AdirectlyconnectedinterfaceisconfiguredwithanIPaddressinthesamedestinationnetwork.WhichstatementaboutR1istrue?A)R1refusestoadvertisethedynamicroutetootherneighborsB)R1prefersthestaticrouteC)R1prefersthedirectlyconnectedinterfaceD)R1sendsawithdrawalnotificationtotheneighboringrouter答案:C解析:路由器R1有一個(gè)配置到目標(biāo)網(wǎng)絡(luò)的靜態(tài)路由。一個(gè)直接已連接接口在相同的目標(biāo)中配置一個(gè)IP地址網(wǎng)絡(luò)。關(guān)于R1，哪個(gè)陳述是正確的?CR1更喜歡直接連接的接口[單選題]75.Anorganizationsecuresitsnetworkwithmulti-factorauthenticationusinganauthenticatorapponemployeesmartphones.HowistheapplicsecuredinthecaseofAuser?ssmartphonebeinglostorstolen?A)TheapplicationrequirestheusertoenteraPINbeforeitprovidesthesecondfactorB)theapplicationchallengesauserbyrequiringanadministratorpasswordtoreactivatewhenthesmartphoneisrebootedC)TheapplicationrequiresanaadministratorpasswordtoreactivateafteraconfiguredintervalD)Theapplicationverifiesthattheuserisinaspecificlocationbeforeitprovidesthesecondfactor答案:A解析:[單選題]76.AclientdevicefailstoseetheenterpriseSSID,butotherdevicesareconnectedtoit.Whatisthecauseofthisissue?A)ThehiddenSSIDwasnotmanuallyconfiguredontheclient.B)ThebroadcastSSIDwasnotmanuallyconfiguredontheclient.C)TheclienthasincorrectcredentialsstoredfortheconfiguredhiddenSSID.D)TheclienthasincorrectcredentialsstoredfortheconfiguredbroadcastSSID.答案:A解析:[單選題]77.WhichLISPcomponentisrequiredforaLISPsitetocommunicatewithanon-LISPsite?A)ETRB)ITRC)ProxyETRD)ProxyITR答案:C解析:[單選題]78.Ifaclient?sradiodevicereceivesasignalstrengthof-67dBmandthenoiseflooris-85dBm,WhatistheSNRvalue?A)15dBB)16dBC)18dBD)20dB答案:C解析:[單選題]79.WhatisonedifferencebetweenSaltstackandAnsible?A)SaltStackusesanAPIproxyagenttoprogramCiscoboxesonagentmode,whereasAnsibleusesaTelnetconnectionB)SaltStackusestheAnsibleagentonthebox,whereasAnsibleusesaTelnetserverontheBoxC)SaltStackisconstructedwithminion,whereasAnsibleisconstructedwithYAMLD)SaltStackusesSSHtointeractwithCiscodevices,whereasAnsibleusesaneventbus答案:C解析:[單選題]80.AnNSSAareahastwoABRsconnectedtoArea0.Whichstatementistrue?A)BothABRstranslateTypc-7LSAstoTypc-5LSAs.B)TheABRwiththehighestrouterIDtranslatesTypc-7LSAstoTypc-5LSAs.C)NoLSAtranslationisneeded.D)BothABRsforwardType-5LSAsfromtheNSSAareatobackbonearea.答案:B解析:[單選題]81.Whatbenefitdoescontroller-basednetworkingprovideversustraditionalnetworking?A)providesanaddedlayerofsecuritytoprotectfromDDoSattacksB)combinescontrolanddataplanefunctionalityonasingledevicetominimizelatencyC)movesfromatwo-tiertoathree-tiernetworkarchitecturetoprovidemaximumredundancyD)allowsconfigurationandmonitoringofthenetworkfromonecentralizedpoint答案:D解析:[單選題]82.WhichmethoddisplaystextdirectlyintotheactiveconsolewithasynchronousEEMappletpolicy?A)eventmanagerappletboomEventsyslogpattern?UP?Action1.0syslogprioritydirectmsg?loggingdirectlytoconsole?B)eventmanagerappletboomeventsyslogpattern?UP?Action1.0gets?loggingdirectlytoconsole?C)eventmanagerappletboomeventsyslogpattern?UP?Action1.0string?loggingdirectlytoconsole?D)eventmanagerappletboomeventsyslogpattern?UP?Action1.0puts?loggingdirectlytoconsole?答案:D解析:[單選題]83.WhichLISPinfrastructuredeviceprovidesconnectivitybetweennon-LISPsitesandLISPsitesbyreceivingnon-LISPtrafficwithaLISPsitedestination?A)PETRB)PITRC)mapresolverD)mapserver答案:B解析:[單選題]84.AnetworkengineerimplementsISISforIPv6andthendiscoversthatISISadjacenciesategoingdown.Whichactioncanbetakentoficthisproblem?A)ENABLEMULTITOPOLOGYONTHEISISDOMAINB)CONFIGURELINKLOCALIPV6ADDRESSONISISINTERFACEC)CHANGETHEIS-TYPEONALLISISROUTERSTOLEVEL-2-ONLYD)ENABLEISISFORIPV6ONLOOPBACKINTERFACES答案:D解析:[單選題]85.Whenawirelessclientroamsbetweentwodifferentwirelesscontrollers,anetworkconnectivityoutageisexperienceforaperiodoftime.Whichconfigurationissuewouldcausethisproblem?A)AllofthecontrollerswithinthemobilitygroupareusingthesamevirtualinterfaceIPaddressB)AllofthecontrollersinthemobilitygroupareusingthesamemobilitygroupnameC)NotallofthecontrollersinthemobilitygroupareusingthesamemobilitygroupnameD)NotallofthecontrollerswithinthemobilitygroupareusingthesamevirtualinterfaceIPaddress答案:D解析:[單選題]86.WhatdoCiscoDNAsouthboundAPIsprovide?A)InterfacebetweenthecontrollerandthenetworkdevicesB)NETCONFAPIinterfacefororchestrationcommunicationC)RESTfulAPIinterfacefororchestratorcommunicationD)Interfacebetweenthecontrollerandtheconsumer答案:A解析:[單選題]87.Refertotheexhibit.Whichconfigurationmustyouapplytoroutersothatitcangeneratealogmessageinthegivenformat?A)ServicealignmentloggingB)ServicetimestampslogdatetimeC)ServicetimestampsloguptimeD)Servicesequence-numbers答案:C解析:[單選題]88.AnengineermustconfigureanewWLANthatallowsausertoenterapassphraseandprovidesForwardsecrecyasasecuritymeasure.WhichLayer2WLANconfigurationisrequiredontheCiscoWLC?A)WPA2PersonalB)WPA3EnterpriseC)WPA3PersonalD)WPA2Enterprise答案:C解析:[單選題]89.OnwhichprotocolortechnologyisthefabricdataplanebasedinCiscoSD-Accessfabric?A)VXLANB)LISPC)CiscoTrustSecD)IS-IS答案:A解析:[單選題]90.Howaremap-registermessagessentinaLISPdeployment?A)egresstunnelrouterstomapresolverstodeterminetheappropriateegresstunnelrouterB)ingresstunnelrouterstomapserverstodeterminetheappropriateegresstunnelrouterC)egresstunnelrouterstomapserverstodeterminetheappropriateegresstunnelrouterD)ingresstunnelrouterstomapresolverstodete