2017.2.15 CCNP路由有錯,請更正

gumdun

QUESTION 204 題目應是這樣
- N; G4 G& D/ `- v  @9 k# p
. S- G# e# @" e& ?" \Which configuration can you apply to a device so that it always permits outbound
web traffic on Saturdays and Sundays between the hours of 1:00AM and 11:59PM?
) y6 S& a& A7 X/ I5 tA. time-range SATSUN periodic Saturday Sunday 1:00 to 23:59
access-list 102 permit tcp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
ip access-group 102 in
" n* c( O, N/ Y9 A$ \1 TB. time-range SATSUN absolute Saturday Sunday 1:00 to 23:59
access-list 102 permit tcp any any eq 80 time-range SATSUN
) Y  Y5 o$ w/ ]" c5 w* U4 paccess-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
ip address 10.9.5.3 255.255.255.0
+ [! n* W4 F) f' H9 K" V5 \0 Uip access-group 102 in

9 ^; t. I- z7 z' Z8 q, N# `C. time-range SATSUN periodic Saturday Sunday 1:00 to 23:59
access-list 102 permit udp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
interface Vlan303
# b6 S& `; w$ z+ z* \# B* F+ Lip address 10.9.5.3 255.255.255.0
( _3 |; a$ V& K, H7 `ip access-group 102 out
! m* H& v) D# ND. time-range SATSUN periodic Saturday Sunday 1:00 to 11:59
/ u% O; }. X6 Z7 Z  F! u+ H- Raccess-list 102 permit tcp any any eq 80 time-range SATSUN
access-list 102 permit tcp any any eq 443 time-range SATSUN
) X9 e' {$ P+ Zinterface Vlan303
. e' `. H8 b% d* Zip address 10.9.5.3 255.255.255.0
ip access-group 102 in
9 N8 J/ n1 O& q& w" k1 X' WAnswer: A
/ V9 Z/ \% S. k; x
Explanation: For the following example, a Telnet connection is permitted from the
$ ?0 H: \  n/ [1 M/ P# h. Winside to outside network on Monday, Wednesday, and Friday during business hours:
/ Q! K6 K0 Y' B2 N' @) K, r1 W) ltime-range EVERYOTHERDAY
& a9 j4 @+ W2 r7 y& Iperiodic Monday Wednesday Friday 8:00 to 17:00
access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq telnet time-range
EVERYOTHERDAY
, ]8 o- m" D3 O/ |6 jinterface Ethernet0/0
7 v$ O1 R) p5 D( _7 D* K4 K7 {9 Mip address 10.1.1.1 255.255.255.0
$ v7 m* N7 H/ A2 ?* u# dip access-group 101 in
. U  T8 _; e; V# {) i% kFor the question, answer B is incorrect because of the portion “absolute”. Usage of
5 S& S8 L8 ~* e6 H4 U  ^“absolute” is as follows:
4 p7 S7 T- P  xtime-range test
absolute start 8:00 1 January 2017 end 18:00 31 March 2017
Answer C is incorrect because of the portion “udp”. Also, for applying access list on
% }. u1 l- d5 B4 I, d9 O. r2 Z8 O8 y- xNAT inside interface (i.e. with private IP address 10.9.5.3) to block outbound web
3 {1 e* B% L' @& u7 ~" W# Htraffic, the portion “out” is wrong.
Answer D is incorrect because of the portion “11:59” which means 11:59AM.

Rockyw

路过了解一下

gumdun

QUESTION 182 正確答案是這個
9 T1 H1 T& B) FYou have implemented mutual route redistribution between OSPF and EIGRP on a border router. When checking the routing table on one of the EIGRP routers within the EIGRP routing domain, you are seeing some, but not all of the expected routes. What should you verify to troubleshoot this problem?

A. The border router is using a proper seed metric for OSPF.
B. The border router is using a proper seed metric for EIGRP.
C. The administrative distance is set for OSPF and EIGRP.
D. The missing OSPF routes are present in the routing table of the border router.
) A" |+ c3 w; _7 K# K0 D7 F+ H8 dE. The subnet keyword on the border router in the redistribute OSPF command.
2 U8 a6 f, r! b

! C- j6 R6 w3 t* X9 K/ U8 A- S; F2 e  g
Answer: D
, X" f; ~. l8 q4 C! g
* L2 U# r5 Z0 `/ W' U0 y/ SExplanation

  h/ {) J! L8 s' C5 b7 h& _8 WWe are checking the routing table on EIGRP routers not OSPF so we don’t need to check the seed metric for OSPF. Besides OSPF doesn’t need to specify seed metric as all external routes get a default metric of 20 (except for BGP, which is 1) -> A is not correct.

We must specify seed metrics when redistributing into EIGRP (and RIP). If not all the redistributed routes will not be seen but the question says only some routes are missing -> B is not correct.

The default administrative distance for external routes redistributed into EIGRP is 170 so we don’t need to set it -> C is not correct.
# F- [& a; j/ V' h7 P
The sunbet keyword is only used when redistributing into OSPF, not to other routing protocols -> E is not correct.

We should check the routing table of the border router to see the missing OSPF routes are there or not. An incorrect distribute-list can block some routes and we can’t see it in other EIGRP routers -> D is correct.

Rockyw

路过了解一下

Rockyw

路过了解一下

江南/sun

gumdun

QUESTION 185
. Q) L+ P% H' y/ K- v+ |, O! ?
' c4 N4 g+ i& VWhat is the difference between the IPv6 addresses ::/0 and ::/128?
0 Y9 G" I' D3 e4 ]  l5 j
# ^  N: {8 f4 }A. /0 is the unspecified address, and ::/128 is the multicast address.
9 `  z1 j6 v+ o5 g/ B) dB. /0 is the unicast address, and ::/128 is the anycast address.
C. /0 is the unicast address, and ::/128 is the multicast address.
D. /0 is the anycast address, and ::/128 is the multicast address.
! R# X  O  c0 s9 T" E* JE. /0 is the default route, and ::/128 is the unspecified address.
F. /0 is the anycast address, and ::/128 is the default address.
正確ans 是
3 M: S3 J* y: SAnswer: E