400-251 答案核对+配图更新

leiwu1991

4 O+ W5 w9 A& y; H  ?  @, k# p5 s
: K' L) @1 O) j这个应该是我考试生涯以来核对的最坑爹的一套题了。。。好多技术思科都没有任何配置说明或者原理介绍，导致现在有些题还是不太确定答案是否正确。 一下呢是一些我发现的错题，答案以及思科解说和连接。还有一些题图模糊不清了给配个网上找到的新图

错题：
) |+ Z/ g4 }9 E$ @25. Answer:B (https://www.cisco.com/c/en/us/ab ... -expiry-attack.html)
! b& n+ u9 X( k3 bIn practice, filtering packets whereby TTL value is less than or equal to the value that is needed to traverse the longest path across the network will completely mitigate this attack vector. 过滤掉小于或等于最长链路的TTL, 也就是保留最长链路以上
: _0 O1 N. z5 Q/ g
1 Z, p9 c3 o- }& O7 w39.
Answer:Ahttps://www.cisco.com/c/en/us/su ... ugs-main-00.html
QM1 message 定义截图第一行显示这个debug做什么：IKE got SPI from key engine

47.
Answer: B (https://www.cisco.com/c/en/us/su ... 282-ios-ca-ios.html)
$ @' i) k/ k9 K) a) Y, g$ v.pub 和 .prv 是生成的公匙和私匙

49.
  h3 P' t! \9 o  |2 w# CAnswer:C(https://www.cisco.com/c/en/us/pr ... /web_rep_index.htmlesa-00.html)拥有anti-malware功能，能配置一个范围内直接被扫描
1 [" T( V& O+ j9 |答案错是因为有选项0以下判定为可以，conservative模式-2到0不会被直接throttle

$ F5 u  P$ [6 u0 y: \' L2 {50.
0 t9 ?8 f- t3 yAnswer:E (https://www.cisco.com/c/en/us/pr ... eet_c78-655324.html)
Provides zero-day threat protection powered by Cisco Outbreak Intelligence, which uses dynamic reputation- and behavior-based analysis
% C/ R$ }( V) ~: o
/ M# k, M4 R% T+ r53.
! S8 X: E* G" h! n! f5 W& cAnswer:BC(https://supportforums.cisco.com/ ... ooping/td-p/2802180)
: w, c4 R, l6 ~& ]If a DHCP client message (DISCOVER, REQUEST, DECLINE, INFORM, RELEASE) is received on an untrusted port and the source MAC address of the frame does not match the chaddr (client hardware address) field inside the message body, it is dropped思科确认是CHADDR不是CLID


* q7 M& I* M5 f. J79.
  F. t9 w- X6 l. |Answer:F
图里缺的是 authentication，不是authorization
. b# s% K* q3 A; l/ m' P
! _! ]8 x+ D. c7 a1 w0 t
, A" s; }/ v2 B/ W" u) Y/ T

leiwu1991

29, 39的图片

shyfuc

谢谢分享

leiwu1991

补充两道：
42.
Answer:
% Q( `! w9 ~; u/ s1 EBFG (https://www.cisco.com/c/en/us/td ... 9-A0FE-639CCC359342)
; L4 c/ x# C8 v3 o2 y* t. s+ B4 ~SSL VPN delivers three modes of SSL VPN access: clientless, thin-client, and full-tunnel client support(anyconnect).

# V7 @6 {6 A: b3 Y' x& l* D96.
2 ~' F: s& n- n' c4 T# ]2 {Answer:
& f+ m) q; y; w9 v# w6 \  s+ V3 \AD (https://www.cisco.com/en/US/docs ... 10_ipep_deploy.html)
6 m+ c# v$ ]+ r3 T$ XThe Simple Network Management Protocol (SNMP) Agent is not supported by Inline Posture.
5 v+ E3 f( }# S; m" JThe Cisco Discovery Protocol (CDP) is not supported by Inline Posture.
( ~" ^' ]8 z; k3 d; {
7 t5 S7 k; _/ E4 V. |" M3 [* l

gcclove

ayagigi

wsy123456

谢谢分享

AARON2018

那个103道题库配上这几道修正的题过人稳定吗？

legendwins

同学刚刚考过了

zjhzjh0521

是103题题库吗

wenoch

非常同意，这是遇到过最坑的pdf，一页文字，一页图片，轮着来。明摆着坑人

paulpaul12345

謝謝分享

AARON2018

最近103Q能过人吗?

AARON2018

legendwins 发表于 2018-3-25 07:30
同学刚刚考过了

哪天考的?在北京吗？用的是这个103Q的题库吗？谢谢！

moshengren

那么可以过人吗