|
|
发表于 2019-4-26 09:57:06
|
显示全部楼层
4 z& H1 A' a8 l- t
! a6 c" u$ l1 _! ~本帖最后由 小乔 于 2019-4-25 15:26 编辑' b0 K3 J8 } k. n; S/ ~9 c
5 X& Q% ?/ \9 |+ }& G. `
5 u# q9 c" `- n2 u9 L( J% x8 x! O. K0 v
考生记忆内容，仅供参考
& N. W4 n7 z5 ~ R" f: F' ^) f. l) M, H7 u; N
Question 1( w* R ]! }: Y, G% i8 H/ q6 {
Which of the following features allows a router to install a floating route in its routing table when the GRE tunnel goes down intermittently?
- } [# T1 K. C+ z1 ZA. tracking objects- b3 y& ?; l/ A8 H# X9 k: x% F" [8 }
B. IP SLA1 g2 ] K# \) ]5 I& b, H- H+ T, Q8 X; J0 W E) H5 k% }5 p$ W( C
C. ?7 b0 N$ q* Y& Y8 M" [ M7 \
4 O) v4 W, w6 j6 y" xD. GRE keepalive
4 ~2 I+ M! M" G! O6 t& RAnswer: D/ P5 A+ P0 r' Z& Z$ X* |; |- a7 o
Question 2
3 K4 |4 R7 R& ?/ wRefer to the exhibit. _! K a* P2 D2 Y0 L' B+ f
access-list 101 permit tcp 89 any
( a Y5 I/ ~1 Y6 E. ], K8 v* I1 ]access-list 101 permit tcp any 10.1.1.1 0.0.0.0 eq 179$ i$ o5 V! F V) l5 O, J
! `+ ^! s. {/ |( F0 J* oaccess-list 101 permit tcp any eq 179 any8 D8 g" k& L) w. J# P$ e, Y+ o7 t7 O) Q7 t$ R d+ N+ n" Z
access-list 101 permit gre any any7 r) u3 S! j5 T" Z. A( Q) a3 Z
access-list 101 permit tcp nse any2 y9 q( U: e" h3 [3 @4 {: V4 p
* \) \1 O7 l/ @access-list 101 deny ospf any any
) \" f" A( ^2 n! i5 l0 waccess-list 101 permit tcp 10.1.1.1 172.16.1.0 0.0.0.255 eq 226 ] j( g0 k. F, h1 z( s3 q' P$ T0 |0 ?3 E3 n
access-list 101 permit tcp 10.1.1.1 172.16.1.0 0.0.0.255 eq telnet5 C$ i+ C# u* D. {. O
access-list 101 permit tcp 10.1.1.1 172.16.1.0 0.0.0.255 eq 80
! _- z- s9 |- K3 Raccess-list 101 deny tcp 10.1.1.1 172.16.1.0 0.0.0.255 eq 2
3 m3 R5 v c! r0 qWhich two routing protocols are permitted by the ACL above? (Choose two)
% u/ f. Z8 N' h$ g0 ]9 uA. BGP1 z- I; F+ B, r4 ]5 m6 v+ o4 U7 V- v
B. OSPF% S6 C* V: q1 [# L7 }. f3 l4 I/ W: O, ?( [
C. EIGRP) X- m" a& C# S" v# ]
D. GRE; M# m }" i q: E9 I) d( q
5 N+ Y8 p( e) K5 A$ p# U2 qE. NSE (something like that)
. _1 r( d) H$ |: @" YAnswer: A D* e# q0 M6 n. g8 g
Explanation
$ {2 Z' j+ d# `8 F9 WBGP operates on TCP port 179 and the ACL statements “access-list 101 permit tcp any 10.1.1.1 eq 179” and “access-list 101 permit tcp any eq 179 any” allows BGP to go through.
* y8 S& m3 Y+ m Y8 pOSPF is denied with the “access-list 101 deny ospf any any” statement -> Answer B is not correct., w6 a9 p/ Y) u
EIGRP runs directly over IP using IP protocol number 88 – it does not use TCP or UDP. In the above ACL statements there is no line for EIGRP so it will be dropped by implicit “deny all” statement at the end of the ACL -> Answer C is not correct.0 k& b+ m( j/ x0 B9 }
GRE is allowed with the “access-list 101 permit gre any any” statement -> Answer D is correct.
: t0 y. R/ @4 ?% YNote: There was a report saying that the correct answers were “OSPF” (the config was different and it was allowed in first statement) and “BGP” so please grasp the concept to solve this question properly.
5 p4 k1 S8 T9 S1 j" w5 z- nQuestion 3- q6 u- x4 M) }
Refer to the exhibit.$ B4 `: J l$ w9 n8 r$ ^
R13 d2 }7 q, f7 \9 Q* f! @7 P7 J$ x8 J5 l. l
int Gigabitethernet 0/0
3 s9 w/ N* y2 U) K! k! [, b; rip address 10.10.20.2 255.255.55.0 R2; _ A! ?, P+ \/ ^/ U8 |! w5 _2 W2 L6 |% H& [
int Gigabitethernet 0/2. L, W8 ~! V" u- K6 W
ip address 10.10.30.2 255.255.55.0% Y: k: D7 @2 i3 t2 u# t3 Y
. i p% c3 g2 d. J, j- O4 pR1#show ?6 R- [5 W2 B- C. l7 t1 B7 G) o3 ~3 U* Q6 O2 p( _6 l; p2 Q
interface Packets
( y% Q8 r- I- l/ E+ y8 N2 M: KSSH 0- K5 P \$ Y0 W0 Q b2 K, P( e
hsrp 10
: ?% T2 A' \. L+ C" ^8 @7 t' UR2#show ?% N' L: |% s+ h7 E, a2 \( A
interface Packets% ?3 ?7 M( Y! h+ z9 E- k: U# r1 @8 o
SSH 101 ^: o& r! d( n' |( w5 f
; P1 J) W, v/ H, U2 {# H/ q5 j' shsrp 200 \& O9 ~/ s$ ^! s: A" U0 O8 L$ d6 V& w" D
xxxx 30
; f, O( _1 F* x7 j5 F; V" wR2#ssh -l admin 10.10.20.2' |! ~1 D7 |' X6 |6 J
%failure
0 q1 |5 S9 ?$ W. b ^3 E6 W& T) fA company is implementing Management Plane Protection (MPP) on its network. Which of the following commands allows R2 successfully connect to Router 1 via SSH?+ S3 {% I) n, o1 ~8 m) ]
A. ssh -p 22 -l admin 10.10.30.22 o. O& P7 x& n- p- l! B6 G6 @9 W( b2 M9 k2 E! W; B6 l% Z. h# p2 e
B. ssh -v 2 -l admin 10.10.30.27 C T3 E$ B* K3 w
C. ssh -p 22 -l admin 10.10.20.25 q, v0 K; }7 N- q
. W) i$ k2 C' [4 t: D ?D. ssh -v 2 -l admin 10.10.20.2
4 v: C) q1 n" ^! pAnswer: B$ @/ V' ~! n: ]8 K! W6 w! d
Explanation
/ h1 [' S: v6 B$ |7 C6 O; f7 J9 U7 PSSH has the following options:1 E0 I" n# m Q7 s
R1#ssh ?2 h! H- O) N' r( b- n) Q M
-c Select encryption algorithm7 c/ j3 w. _2 ~8 O ?
-l Log in using this user name2 M7 U" l) O2 U3 `- b$ J; x6 q
-m Select HMAC algorithm2 [* f5 A# ^* [7 _4 z+ w2 F2 v- ~, \' k- \/ ]9 p
-o Specify options7 q5 ~, u8 ~1 C8 g) e# ?8 }1 {( Y" Q- ]3 ]
-p Connect to this port }6 m( ~' a1 i; G! W7 S% Y
0 E: e& O' J% k. `-v Specify SSH Protocol Version/ [; {. N' m9 B' q+ L3 k5 E. F& ^; T/ N8 B2 k& X
-vrf Specify vrf name, A7 Y' ]8 M Z: X* p* e' m( | ?' S, v
WORD IP address or hostname of a remote system6 {8 c0 [) L' J7 b5 L1 `: H: C* f# ^; M& j5 }" b1 N( H
In this question it seems R1 does not allow SSH so we have to SSH to R2 (10.10.30.2).6 K0 i) c7 N6 E* X: x& z
Question 4
* l8 A# }7 t4 Q8 V0 [Section 19 h9 n9 p8 h. u/ a, D5 I* ]) c0 F# q2 |4 l! s
It shows some output (cant remember)- `( ^% @# `2 x( C2 [9 R5 I r" N3 |0 B9 L1 R/ \
Section 2* B9 U" |/ q; I# }9 D9 v+ F" c8 ]( ~7 Q4 T. x% Q0 u2 Y# W" R
Debugging is9 Z8 ^; Y' r$ y( W6 K/ E$ o, _2 T% m; x1 G4 }# P2 B
Condition 1 – username6 a1 h' G& N5 k+ d1 F( U
& p6 `1 q+ ? w3 |, E3 \Condition 2 – int g0/2+ V s" d) b4 L6 G
F+ y2 k3 S& [: B+ n1 P% {Section 3
; q, t2 H& K* F' _4 ^% @It shows some output …2 p8 z" T6 n3 \7 f& L( ?: s
Which of the following commands results in the Section 2 of the output above?+ w9 _/ a" W" |' Z4 L4 H
A., G' u) m( i1 T5 c c& A3 ]9 { X$ Q2 e/ z, h6 t
R#debug condition username* _' N- M' ^0 B1 K/ G+ f
R#debug condition interface g0/2- r/ x$ q: b5 v' x: e5 A
B.
* }0 u, b" z: o8 Y0 GR# debug condition interface g0/20 d" n0 x5 Z/ G8 i% A
R#debug condition username
" y) t8 E& E2 J% Z0 `C., r$ H. e P# e; c% B8 ^+ g
R(conf)# debug condition username7 e% X: j. \9 |; J, S4 G+ ]& p7 D$ b6 z# T9 t- s( ^/ Z4 a: }( `
R(conf)#debug condition interface g0/26 w5 A4 Y ]4 ~$ }( k) A
D.2 f" ]* C5 j# I6 A: X7 f* `
1 s; w B' R. M2 R5 ]R(conf)#debug condition interface g0/29 O- Y: ?3 T) c" }9 p4 \8 p4 c! b' \; S9 I' A
R(conf)# debug condition username
7 L1 F+ q5 P; e4 FAnswer: A C8 k, s0 b# G, k5 Y
Explanation* C: A& u& ?- ?+ k0 b( e- t
The “debug condition” command must be issued in Privileged mode (not global configuration mode)) @; h9 w) Y0 ?& n
Question 5! I- O5 D. r% [7 e3 U: A4 @$ ]
Two hosts (PC A & PC B) in the same subnet (IP addresses 10.10.20.10 & 10.10.20.30, both /24) connected to Layer 2 switches each (using ports g0/5). The layer 2 switches connect to other switches which connects to a Multilayer (L3) switch.
% G; x, K6 T$ u1 @) R/ AWhat is the reason PC A cannot reach PC B?
, N! A5 o8 n3 K1 U0 l* b2 dA. IP routing is not enabled in the L3 switch" }9 X3 n! m5 P4 X. @
B. Interfaces g0/5 of the switches are in different VLANs& A b6 ^: ^ X) d, M# p2 ^: b/ }) M8 e# m! C- @1 q4 v
C. PC A and PC B are in different subnets8 t$ |. h. O8 C, p6 H
D. ?
$ t* m7 H. ]8 V8 lAnswer: B
4 F+ @2 o- z. J3 XExplanation
( ~% `7 t; J+ ]9 a A+ USuppose all the related ports are in up/up state then there are only two reasons that PCA & PCB cannot communicate:$ h$ Z7 ?8 _4 r- m {' x/ D' i/ @3 U
+ These two PCs are in different VLANs
% i7 w+ h. Q) }* ?+ o, o: j% l+ The ports on L3 switch that are connected to two Layer 2 switches are routing ports (with “no switchport” command)
& U+ _2 T0 J7 R* `5 {, n( m4 ZQuestion 6
- @" R4 d9 L5 @Refer to the exhibit6 }7 T4 E+ N$ h5 T
R1#show access-list3 A5 |7 h, n' N7 `) N
IP access-list extended Super_User( e# r, Y/ R# F$ e* U; ? g* B8 `5 s$ l# F
1 permit ip host xxxx host xxxxx5 _7 Y& P$ I4 _ W2 x
1 N5 U# n4 x* O$ t0 h/ {, c2 permit ip host xxxx host xxxxx
. U6 p1 i, D* ?# J/ p3 permit ip host xxxx host xxxxx# a6 y8 v. O# m o
K$ Z- E3 u) k/ s4 permit ip host xxxx host xxxxx
2 Q4 E0 l' G; h+ F. t5 permit ip host xxxx host xxxxx
3 u5 H+ _' A0 L/ v+ P' @- e6 permit ip host xxxx host xxxxx( X* `: s" p: t, u4 o! o4 \. q/ ]: D' G" R" I* L' i
7 permit ip host xxxx host xxxxx5 Q% j" [/ g) W: i2 H8 |* D7 s5 G1 c0 e+ ~9 ?" L
8 permit ip host xxxx host xxxxx
4 l6 i V# `! ]% J9 permit ip host xxxx host xxxx+ _+ p6 b: c3 c! \7 u( l
Which of the following commands inserts five additional lines to the ACL Entry Sequence between lines 3 and 4 without changing the existing configuration?
3 @8 o0 ?- L) E6 [( ~4 e. h/ K* {A. R(conf)# ip access-list resequence Super_User 1 6& U- Z+ [3 A0 R* } ]
B. R(conf)# ip access-list resequence Super_User 1 57 |& w' m% v) s7 S
O) a8 Y1 M( J# m+ XC. R(conf-nacl)# ip access-list resequence Super_User 1 6
/ l1 X8 u# O- N) ]9 C- R* JD. R(conf-nacl)# ip access-list resequence Super_User 1 5 |
32#
2019-4-26 09:57:06
回复(0)
收起回复
|
简体中文
英语
日语
韩语
法语
西班牙语
越南语
泰语
阿拉伯语
俄语
葡萄牙语
德语
意大利语
希腊语
荷兰语
波兰语
保加利亚语
爱沙尼亚语
丹麦语
芬兰语
捷克语
罗马尼亚语
斯洛文尼亚语
瑞典语
匈牙利语
繁体中文
文言文
[复制链接]
