- 积分
- 125
- 鸿鹄币
- 个
- 好评度
- 点
- 精华
- 最后登录
- 1970-1-1
- 阅读权限
- 20
- 听众
- 收听
助理工程师
 
|
发表于 2018-5-25 21:15:20
|
显示全部楼层
5 o. u$ M8 X) Y3 N. ~- k/ V請問題目是像這樣嗎?
; R+ u/ T0 Q9 Q# t4 U! N. O5 Y7 i" Q3 {
QUESTION 1 - v) C4 b g& O+ g$ F7 B1 q1 m
The following commands are issued on a Cisco Router: ' \) k# h. ~; Q, z
Router(configuration)#access-list 199 permit tcp host 10.1.1.1 host
2 C! E5 a; R: I9 J' a# D& a( F172.16.1.1 3 _: u* W5 z/ v! I1 ^
Router(configuration)#access-list 199 permit tcp host 172.16.1.1 host . F& w2 J; a# u3 ]% R2 x4 M
10.1.1.1 # y: F; K6 k* L5 O2 H0 ]6 E4 x N
Router(configuration)#exit
! B K" u9 X- B. x- b; S/ k8 O) W: tRouter#debug ip packet 199
) U5 J# i9 h! WWhat will the debug output on the console show? 8 @) p& T4 C0 l& k% u$ f; {
A. All IP packets passing through the router / p* r: h! @0 V( Q
B. Only IP packets with the source address of 10.1. 1.1 ! G# A* G" x8 K* c$ V" x8 }, e8 A0 g
C. All IP packets from 10.1.1.1 to 172.16.1.1
' E' d- @: z+ W" d8 n' RD. All IP Packets between 10.1.1.1 and 172.16.1.1
1 M: K c0 \+ A2 N& dAnswer: D
* Q& q# B0 D7 D W( X
" }' {8 a! R5 I# _4 s/ vExplanation:
* a! n; J% `" Y5 j6 M+ {/ ZIn this example, the "debug ip packet" command is tied to access list 199, specifying which IP
1 Q- x8 \1 Q6 L3 m2 Z4 t2 _packets should be debugged. Access list 199 contains two lines, one going from the host with IP
! K; x% ?0 E0 E9 Maddress 10.1.1.1 to 172.16.1.1 and the other specifying all TCP packets from host 172.16.1.1 to
1 u ?6 a. w x10.1.1.1.
6 F7 p. f2 U( ~0 u
* p8 \/ ]. G0 n+ g& Q* g. W( gQUESTION 2
2 X0 n7 Y7 O% f' Q* V0 mWhat level of logging is enabled on a Router where the following logs are seen? %LINK-3-
4 L c. H% ~+ n* W4 M3 E A- a6 pUPDOWN:
/ A: y; E3 f! w @" PInterface FastEthernet0/1, changed state to up % LINEPROTO-5-UPDOWN:
" {* w* L; _: s) R: ~9 ?Line protocol on Interface FastEthernet0/1, changed state to up
; X3 S1 t1 Y {/ V' ZA. alerts
. k7 ?. o' F1 x( z k- HB. critical ; P4 w/ \1 p( f7 {$ N
C. errors z4 l* K" v+ V' l
D. notifications
; X% s. V- J. y, c& AAnswer: D
1 E* p' W+ l; M4 M' O2 `2 R( w0 }: y7 ^! }& E( K6 C l! z
Explanation: @ H0 [3 h2 `5 ^
Cisco routers, switches, PIX and ASA firewalls prioritize log messages into 8 levels (0-7), as
{1 `4 N/ b8 B; {- \3 Yshown below: ; G. F" a% i1 w$ B
LevelLevel NameDescription * d3 v/ N Z2 |+ W) p
0 Emergencies System is unusable & k& x# Q. ~2 _* o5 e: Q
1 Alerts Immediate action needed
6 r% O- e8 I; h2 Critical Critical conditions 8 l% H1 z6 ], }
3 Errors Error conditions
7 G, l: S0 y; X- U! R4 Warnings Warning conditions
3 w! e4 V3 K& N6 S: G5 Notifications Informational messages
. n d- t3 V! Q/ ^6 j: C9 T+ v7 a3 l6 Informational Normal but significant conditions # B( b! U* K) n+ y/ f9 a
7 Debugging Debugging messages 1 S/ ?3 _2 B; L9 V
When you enable logging for a specific level, all logs of that severity and greater (numerically * H0 S! R4 k% {+ I1 L
less) will be logged. In this case we can see that logging level of 3 (as seen by the 3 in "LINK-3-
6 x/ n" M, g5 a1 R* g7 UUPDOWN") and level 5 (as seen by the 5 in "LINEPROTO-5-UPDOWN") are shown, which 4 P! f! C2 ~' d3 l
means that logging level 5 must have been configured. As shown by the table, logging level 5 is ( h; Z8 X! i& Z$ K& S0 m! F
8 A1 \6 _* E) L, _+ I& X4 C7 @5 d
QUESTION 3
3 k7 |! h/ c; {" a" bYou have the followings commands on your Cisco Router:
6 B( S1 P, L' m3 T! q" o: N# ^5 ~ip ftp username admin + a( K$ r+ ?" f; H: E
ip ftp password backup
0 y' C: i$ t; B/ D3 Y0 bYou have been asked to switch from FTP to HTTP. Which two commands will you use to replace 7 ^9 W4 m* @, A
the existing commands?
6 ~, b3 Z$ [& pA. ip http username admin : T5 C. S, K' O1 p$ C- ~9 k
B. ip http client username admin
+ n* @ w& \+ Q! F0 d/ f& tC. ip http password backup
$ _) _% P! L- L" nD. ip http client password backup
" {. L8 T6 \! N! D3 `E. ip http server username admin $ y! _( e9 K* d- w) O
F. ip http server password backup
! m' R" e8 D0 {/ J- jAnswer: BD
( ~' c( L, T" P( }& g
3 z3 |: W- l' Q: v. N1 W2 JExplanation:" U) n P, ]# p3 b
Configuring the HTTP Client 6 p4 w" o# l+ h1 q
Perform this task to enable the HTTP client and configure optional client characteristics. The 8 k- ~' ?8 C& _" e* U3 P
standard HTTP 1.1 client and the secure HTTP client are always enabled. No commands exist to
5 |. p9 B$ V, U% u6 K i- edisable the HTTP client. For information about configuring optional characteristics for the HTTPS
9 u' E: |2 A/ b' ]4 R7 y( E' Z# Rclient, see the HTTPS-HTTP Server and Client with SSL 3.0, Release 12.2(15)T, feature module. |
|