1 J9 q4 G! O' Q+ J
% @, o' H* G1 @- N6 e& i答案不一定都正确,仅供参考
, `1 V1 i) ~! R b- ?; yQ.1
2 q% [1 y/ y+ N' [/ i" qTroubleshoot uRPF loose mode at client gateway router for networks that are not in the routing table. (Choose two)) [& v% {8 p! P- L
a. Dynamic routing is configured on the router
+ _5 n; q1 J. U5 Cb. CEF is enabled on the router, }. ?1 r: N$ b
c. allow-default is configured for loose mode" G, F) L+ D( D& j/ `1 R A/ e% o
d. CFE is disabled on the router
' L5 o: q/ r; p( Z7 u, Ge. Static Routing is configured on the router4 f' I4 T4 i3 J! Q7 I7 G
answer : B & C0 o* A9 J' f; j$ O" i+ d* S
Q.2# d( y" ^5 W% {% [4 g, o- [3 [
Which two can use to protect & secure management plane from unwanted & unauthorized access ?(Choose two)
/ m( D8 u a7 L) T" n: na. Limit physical access to network devices
( Z) H$ q# R! F* h2 H: Wb. Use RADIUS instead of TACACS+ for AAA
# j' X+ U- b" V% G/ O5 qc. Create an ACL to permit Telnet access only
# w, }* f; n) {d. Enable authentication for the routing protection
! v! ?4 l; V! z. Le. Use MPP to limit the interfaces on which management traffic can traverse the device
! h$ _' E' X# E) b, lanswer : CE U) J) Z* n; W: o: M- G& i- |
8 w1 ^4 L# h. _" O5 _$ M' x
# _* Y5 d6 U' I) ]% C3 T) L; u* r, D8 M. X1 l3 e
+ h9 W, h3 @9 Q& i3 `
Q.3/ H, D1 J5 b2 Q/ j$ N) Q, [1 \4 Z
Which command enables authenticated login if a TACACS+ failure occurs ?: u( i1 C, s) b. \
a. aaa authentication login test group local tacacs+
, ]* i5 m: w: [b. aaa authentication login test group tacacs+ local) } t# c9 F6 C- O1 R
c. aaa authentication login test group radius local% M# S9 h( p0 m5 |9 s4 \
d. aaa authentication ppp dialins group tacacs+ local
+ `- o# f! ^9 ^* b) _) O2 p; Canswer : B0 g R9 w9 F6 W, H7 Z- z
Q.4
5 ?. p5 F& M2 oWhen your network experiences Cisco Discovery Protocol and LLDP issues, with which layer of the OSI model must you begin troubleshooting ?
3 H3 ?. d( E: oa. datalink layer e7 f& F% x! f/ t
b. physical layer2 t# U d( t% H
c. network layer
# s# H. u8 b2 c% M: D$ _7 `% Uanswer : A% m4 {% J& H' c5 d- M T9 ?" l. }
& D) Y5 k; V8 H. v. k
! G3 A3 |5 E6 F3 o" K/ d+ {
Q5Restrict access for device on management plane? (choose two)8 u4 T: i5 a7 C1 c5 W
A. enable Cisco Express Forward (CEF) globally; i) L: L& _. ^# t
B. Add authentication for routing protocols
- R Y2 b1 X' B9 [C. Restrict physical access% O5 ?- v& ?. |1 M
D. Add ACLs for telnet Answer A, D Q6 What IP header option fields can you modify in an extended ping? (Choose three) A. Value
) i( ^- D) H5 [B. Strict
) M$ r. ~- N9 r: }) D, [0 SC. Record
% e! j- f! T+ n1 e# O F& R1 TD. Timestamp+ P x3 ?/ q$ W/ c/ w/ P
E. Timeout AnswerB,C,D
: [; h0 o) }8 M) x9 F* ? U6 a" p |