广州 642-832 1000PASS！（CCNP完美收官）--错题补充

kandlly

+ h8 `: _0 U# J% _: F- X2 l3 v, s+ \- b各位战友：希望本帖一起给位战友重视！
' o3 J. H$ u; R! I( M; d之前战报“  http://bbs.hh010.com/forum.php?mod=viewthread&tid=172375&fromuid=60253 说随后对题库中遇到错题提出进行补充，本人将守信用，在下面将给出错题内容！
本人综合几位642-832千分PASS战报或交流经验得出642-832题库中错误部分，同时也希望版主对题库中错误尽早修改过来。
1 A" j! r! L3 W. U+ x# `+ _有1道选择题。如果你已经在其他战报中看到过，在这里加深一下印象；你如果第一次看到，请在题库中标出。
  |0 b4 Q5 r* g! f7 q- i
% d- G# ~: v& C9 s5 V0 }QUESTION 13
What is the result of configuring the logging console warning command?

+ G3 o4 G* s, o  |4 gA. warning,critical,alert,and emergency messages will be logged on console
" l# U5 `. g( C, s. z  z; TB. messages with a severity level of 4 and higher will be logged to all available TTY lines
C. warning,error,critical,and informational messages will be logged on the console
D. the logging console warning command needs to be followed in the configuration with logging
buffered bute size to …size for the console
E. only warning messages will be logged on the console
) w2 G, ~0 t; }2 a0 z9 x
- l# O# u1 h- ~2 C1 u/ F这在V200题库中，答案为B。但是综合几位战友（考试中遇到过），说答案有问题，至少两位1000PASS战友对于肯定答案选择"A "。希望后来战友注意。
6 \8 Z' m5 n6 O. G+ C& V
一道13TT中Port Secuity的问题解决，加下划线部分考试是题目中是没有的，相应题目中内容都是需要自己考试时候在相应设备使用命名得出来的。我们考试时候得出的内容没有这么直接，所以给位在看题库时候找出关键内容。其实万精油中已经给出来的。不清楚，可以再次使用上面链接到本人642-832战报中下载解题思路看一看。
: E, L9 \5 s2 O2 rTROUBLE TICKET STATEMENT:
. i- f2 V; g9 B6 L' E2 F; kThe implementation group has been using the test bed to do a ‘proof-of-concept’ that required both client 1 and client 2 to access the Web Server at 209.65.200.241. After several changed to interface status, network addressing, routing schemes and layer 2 connectivity, at trouble ticket has been opened indicating that client 1 cannot ping the 209.65.200.241 (internet Server).
2 k4 [: L9 U: b( ]以下信息需要自己show run获得：
Client one is getting a 169.x.x.x IP address and is not able to ping Client 2 or DSW1. Inital troubleshooting
shows that port Fa1/0/1 on ASW1 is in errdisable state.
Configuration on ASW1
. S4 X) p9 R! u% m2 [Interface FastEthernet1/0/1
- b, @' N! @# uswitchport mode access
switchport port-security
2 o- L: H7 g( ]% ?( d% K# xswitchport port-security mac-address 0000.0000.0001
Interface FastEthernet1/0/2
switchport mode access
switchport port-security
switchport port-security mac-address 0000.0000.0002
, C5 i! _: |- P1 h8 {7 K- j
What is the solution of the fault condition?

0 U% N. l) P5 e! yA. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security interface configuration commands. Then in exec mode clear errdisable interface fa 1/0/1-2vlan 10 command
B. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security,followed by shutdown,no shutdown interface configuration commands.
/ U0 P  z5 ~7 J$ B1 M6 n* E$ gC. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security interface configuration commands.
. D4 e4 b1 K2 K& ^' y% {1 ED. In Configuration mode, using the interface range Fa 1/0/1 -2, then no switchport-security interface configuration commands. Then in exec mode clear errdisable interface fa 1/0/1, then clear errdisable interface fa 1/0/2 commands
0 A  W5 o+ i) M* T
这在V200题库中，答案为D。但是综合几位战友和自己经验（每人都会遇到）得出答案为B 。
拓展一下：端口安全有三种违规规则，考过813的战友应该一定都不会陌生。
2 ^& b3 {5 P/ Z# ^# e+ E7 J. o1 {S（config-if）#switchport port-secuity violation {protect| restrict| shutdown } ===={}是必选，但是三选一，默认选择是shutdown，违规端口立即进入“Errdisable”状态，相当于关闭端口。要使shutdown端口重新恢复使用，有两种方式恢复：必须手工重启或通过errdisable自动恢复，可以设置自动恢复时间。
如果违规规则设置的是restrict或protect，那么在重新启用端口就需要清空获悉的MAC地址，从而让交换机能够使用该端口。清空命令clear prot-security dynamic [ address mac地址 |interface 端口号 ]

希望上面对后来战友有用。
要是觉得不错，麻烦给位坛友顶起来，让更多后来的832战友看到！！！
9 y  B4 c& q* w9 g8 X
( v6 }" l6 k1 S3 m. V9 M
( v, q, M' T: E1 g  t0 }8 g
3 U  i- ^; Z8 l
" i0 }! h/ p- F) |( u% B) G

沙丁祺

kongbai2716

正在纠结这两个问题，楼主给出的太及时了，感谢感谢

huangtidi

wangfi007

woodward2012

非常详细的战报

dragonx

虽然考过了，但还是要顶下LZ

shuhan

xxf37

fate3008

trueliveb

huyihi

thank you very much

huyihi

congratulation

ts00000000

glw366