思科认证

思科认证:ccna认证模拟试题练习(英文版)2

时间: 2013-10-10

QUESTION 6 
The command frame-relay map ip 10.121.16.8 102 broadcast was entered on the router. Which of the following statements is 
true concerning this command 
A. This command should be executed from the global configuration mode. B. The IP address 10.121.16.8 is the local router port 
used to forward data. C. 102 is the remote DLCI that will receive the information. 
D. This command is required for all Frame Relay configurations. 
E. The broadcast option allows packets, such as RIP updates, to be forwarded across the PVC. 
Answer: E 
解答: 
问题:frame-relay map ip 10.121.16.8 102 broadcast,当你在路由器上输入了这个命令,那么以下哪些说法是正确
的 
 
A不对,这个命令应该在接口模式下输入 
B不对,那个ip地址应该是远端路由器的ip地址 C不对102是本地的dlci号 
D不对,因为你如果不关闭invers-arp的话,那么不需要手动的输入这条命令. 

QUESTION 7 
Which type of attack is characterized by a flood of packets that are requesting a TCP connection to a server 
A. denial of service 
B. brute force 
C. reconnaissance 
D. Trojan horse 
Answer: A 
解答: 
问题:一种请求tcp连接到服务器的泛洪攻击是一种什么类型的攻击 答案: 
请求tcp连接到服务器的攻击其是就是syn-flooding攻击,利用tcp三次握手的天生缺陷,向对方主机发送大量的syn位 
置1的请求包,造成对方服务器正常服务的中断正常的服务 
这是一种典型的dos攻击,就是拒绝服务攻击:denial of service. 

QUESTION 8 
Which of the following are associated with the application layer of the OSI model (Choose two.) 
A. ping 
B. Telnet C. FTP D. TCP E. IP 
Answer: B, C 
解答: 
问题:以下那些协议在osi模型中的应用层 
答案:telnet和ftp 其是ping也是一个应用程序,但是不太属于标准的osi7层中的应用层程序,因为它没有传统意义上
的传输层,而是直 接使用icmp协议

QUESTION 9 
Refer to the exhibit. 
The network administrator has created a new VLAN on Switch1 and added host C and host D. The administrator has 
properly configured switch interfaces FastEthernet0/13 through FastEthernet0/24 to be members of the new VLAN. However, 
after the network administrator completed the configuration, host A could communicate with host B, but host A could not 
communicate with host C or host D. Which commands are required to resolve this problem 
A. Router(config)# interface fastethernet 0/1.3 
Router(config-if)# encapsulation dot1q 3 
Router(config-if)# ip address 192.168.3.1 255.255.255.0 
B. Router(config)# router rip 
Router(config-router)# network 192.168.1.0 
Router(config-router)# network 192.168.2.0 
Router(config-router)# network 192.168.3.0 
C. Switch1# vlan database Switch1(vlan)# vtp v2-mode Switch1(vlan)# vtp domain cisco Switch1(vlan)# vtp server 
D. Switch1(config)# interface fastethernet 0/1 
Switch1(config-if)# switchport mode trunk 
Switch1(config-if)# switchport trunk encapsulation isl 
Answer: A 
解答:

问题:网管在交换机1上面新增加了一个vlan,并且新增加了hostc和hostd,在正确划分vlan之后,发现A可以和B通 
信,A不能和C后者D通信,哪个命令能解决这个问题 
考点:单臂路由 
分析: 
单臂基本上需要两个主要的配置步骤.

1在路由器快速以太口上面增加子接口,并且封装相应的vlan id 
2要把和路由器连接的哪个交换机的快速以太口配置称trunk 
但是这个题目,因为已经有了两个子接口,所以我们在增加一个子接口就可以了.交换机的接口的trunk应该已经配 
置过了. 

QUESTION 10 
For security reasons, the network administrator needs to prevent pings into the corporate networks from hosts outside the 
internetwork. Which protocol should be blocked with access control lists 
A. IP 
B. ICMP C. TCP D. UDP 
Answer: B PPkao 考 试 网
解答: 
问题:网络管理员想要禁止ping,那么使用访问控制列表,禁止哪个协议 
答案:我们要知道ping的工作原理,向对方主机发送一个icmp 协议中的echo包,而对方主机如果存活,就向原主机
返回一 个icmp协议的echo-reply包


免责声明:因考试政策、内容不断变化与调整,本站提供的以上信息仅供参考,如有异议,请考生以权威部门公布的内容为准!本站对如上内容的真实性、完整性不作任何保证或承诺!转载目的在于传递msyz577明仕亚洲娱乐信息,并不代表本网赞同其观点和对其真实性负责。同时,本站无意侵犯他人权利,如涉及作品内容、版权和其它问题,请在30日内与本站联系,我们将在第一时间删除内容!邮箱:kefu@ppkao.com