CCNA（200-120）803题库V2.0(2014.10.08)-选择题

《CCNA（200-120）803题库V2.0(2014.10.08)-选择题》由会员分享，可在线阅读，更多相关《CCNA（200-120）803题库V2.0(2014.10.08)-选择题（131页珍藏版）》请在金锄头文库上搜索。

1、CCNA（200-120）803题库题库V2.0(2014.10.08)Number: 200-120Passing Score: 825Time Limit: 120 minFile Version: v2.0CCNA（200-120）题库）题库V2.0（2014.10.8） CCNA 题库战报1000人超级QQ群 :65330887CCNA 最新题库最新题库/最新战报最新战报 发布区：发布区： http:/ 鸿鹄论坛鸿鹄论坛 http:/CCNA考试报名1900，详情请联系鸿鹄全国区客服 QQ 613523101-613523109鸿鹄论坛官方淘宝店铺：http:/ 报名思科CCNA考试，

2、送思科真实设备试验 http:/ part 12. part 23. part 34. part 45. part 56. part 67. Drag n DropCCNA考试交流1000人QQ群：1504299912 0 1 4 . 1 0 . 8 更新内容：增加两道实验题OS P F Ne i 、E I G R P T RCCNA考试交流1000人QQ群：65330887 Exam AQUESTION 1Refer to the exhibit. What will Router1 do when it receives the data frame shown? (Choose thre

3、e.)A. Router1 will strip off the source MAC address and replace it with the MAC address 0000.0c36.6965.B. Router1 will strip off the source IP address and replace it with the IP address 192.168.40.1.C. Router1 will strip off the destination MAC address and replace it with the MAC address0000.0c07.43

4、20.D. Router1 will strip off the destination IP address and replace it with the IP address of 192.168.40.1.E. Router1 will forward the data packet out interface FastEthernet0/1.F. Router1 will forward the data packet out interface FastEthernet0/2.Correct Answer: ACFSection: part 1ExplanationExplanat

5、ion/Reference:考点：数据通信过程源目IP/mac地址的变化。 Age(min)下面- 为本地端口A：源MAC替换为f0/2口的mac，正确B：替换源IP，错误C：替换目的mac为下一跳入口的MAC，正确D：替换目的IP，错误E：从f0/1转发数据，错误F：正确 -鸿鹄论坛http:/ 2Refer to the exhibit. Which three statements correctly describe Network Device A? (Choose three.)CCNA考试交流1000人QQ群：65330887 A. With a network wide mas

6、k of 255.255.255.128, each interface does not require an IP address.B. With a network wide mask of 255.255.255.128, each interface does require an IP address on a uniqueIP subnet.C. With a network wide mask of 255.255.255.0, must be a Layer 2 device for the PCs to communicatewith each other.D. With

7、a network wide mask of 255.255.255.0, must be a Layer 3 device for the PCs to communicatewith each other.E. With a network wide mask of 255.255.254.0, each interface does not require an IP address.Correct Answer: BDESection: part 1ExplanationExplanation/Reference:如图，哪三个选项正确的描述了网络设备A？考点分析：这题考的是子网掩码的问

8、题。使用掩码255.255.255.128和255.255.255.0时，两台主机的IP地址属于两个网段，所以A要用路由器（三层设备）才能通信，所以A设备每个接口需要设置IP地址。使用掩码255.255.254.0是，两台主机属于同一个网段，所以A要使用switch或hub就能通信，且不需要ip地址QUESTION 3Which layer in the OSI reference model is responsible for determining the availability of the receivingprogram and checking to see if enough

9、 resources exist for that communication?A. transportB. networkC. presentationD. sessionE. applicationCorrect Answer: ESection: part 1ExplanationExplanation/Reference:OSI中那一层负责决定一个进程的可用性并查看是否有可用的资源分给该进程？考点分析：OSI七层参考模型中负责决定一个进程的可用性并查看是否有可用的资源分给该进程是第七层应用层QUESTION 4Which of the following describes the r

10、oles of devices in a WAN? (Choose three.)A. A CSU/DSU terminates a digital local loopB. A modem terminates a digital local loopCCNA考试交流1000人QQ群：65330887 C. A CSU/DSU terminates an analog local loopD. A modem terminates an analog local loopE. A router is commonly considered a DTE deviceF. A router is

11、 commonly considered a DCE deviceCorrect Answer: ADESection: part 1ExplanationExplanation/Reference:SU/DSU是用于连接终端和数字专线的设备，属于DCE设备modem用于数字信号和模拟信号的转换，属于DCE设备路由器一般是DTE设备QUESTION 5Refer to the exhibit, Host A pings interface S0/0 on router 3, what is the TTL value for that ping?A. 253B. 252C. 255D. 254

12、Correct Answer: ASection: part 1ExplanationExplanation/Reference:默认是255，每经过一个路由器减1QUESTION 6A network administrator is verifying the configuration of a newly installed host by establishing an FTPconnection to a remote server. What is the highest layer of the protocol stack that the nework administra

13、toris using for this operation?CCNA考试交流1000人QQ群：65330887 A. applicationB. presentationC. sessionD. transportE. internetF. data linkCorrect Answer: ASection: part 1ExplanationExplanation/Reference:HTTP、FTP、TELNET、SNMP、DNS等服务都是在应用层QUESTION 7Refer to the exhibit. After HostA pings HostB, which entry wi

14、ll be in the ARP cache of HostA to support thistransmission?A.B.C.CCNA考试交流1000人QQ群：65330887 D.E.F.Correct Answer: DSection: part 1ExplanationExplanation/Reference:问：当主机A ping 主机B之后，下面那个ARP缓存条目会支持此次通讯？考题分析：这道题考的是局域网ARP的请求。Host A要ping Host B，首先Host A需要封装ping包，而封装ping包需要Host A和Host B的二、三层地址的信息。然而Host A

15、不知道Host B的二层地址，这样Host A就会向局域网发送Arp请求，来请求Host B的二层地址。网关收到Host A的Arp请求后，发现Host B是其他网段的地址，这样网关会启用代理Arp的功能，将自己的二层地址应答给Host A。Host A收到应答包后会对本地的ARP缓存进行更新，将应答方的IP和MAC地址存储在ARP缓存中，同时完成ping包的封装。网关在收到ping包后会自动完成二层地址的重定向。所以答案是D。此题考查的是pc的arp表，不要和包的目的地址、源地址弄混了。在以太网寻址的时候，依靠的事MAC地址，每一个网段都需要寻找到自己的下一条（gateway）以自己的MAC

16、作为source gateway的mac作为destination封装Frame，然后将Frame转发出去 ，但是数据包是不会进行变化的，也就是packet的头部信息不会发生改变。所以IP包头的source和des地址是不会变更的 -鸿鹄论坛http:/ 8A network interface port has collision detection and carrier sensing enabled on a shared twisted pairnetwork. From this statement, what is known about the network interfac

17、e port?A. This is a 10Mb/s switch port.B. This is a 100Mbs switch port.C. This is an Ethernet port operating at half duplex.D. This is an Ethernet port operating at full duplex.E. This is a port on a network interface card in a PC.Correct Answer: CSection: part 1ExplanationExplanation/Reference:考点：考

18、查冲突域的概念。在半双工网络中才存在冲突域。综上所述选CQUESTION 9A receiving host computes the checksum on a frame and determines that the frame is damaged.Theframe is then discarded.At which OSI layer did this happen?A. sessionB. networkC. physicalD. data linkE. transportCCNA考试交流1000人QQ群：65330887 Correct Answer: DSection: pa

19、rt 1ExplanationExplanation/Reference:帧的处理是在二层QUESTION 10Which of the following correctly describe steps in the OSI data encapsulation process? (Choose two.)A. The transport layer divides a data stream into segments and may add reliability and flow controlinformation.B. The data link layer adds physi

20、cal source and destination addresses and an FCS to the segment.C. Packets are created when the network layer encapsulates a frame with source and destination hostaddresses and protocol-related control information.D. Packets are created when the network layer adds Layer 3 addresses and control inform

21、ation to asegment.E. The presentation layer translates bits into voltages for transmission across the physical link.Correct Answer: ADSection: part 1ExplanationExplanation/Reference:传输层将数据分段，并且加入flow control等信息。在网络层就将数据进行打包，并加上ip包头，链路层。将包进行成Frame，封装二层头部 -鸿鹄论坛http:/ 11Refer to the graphic.Host A is c

22、ommunicating with the seiver. What will be the source MAC address of theframes received by Host A from the server?A. the MAC address of the seiver network interfaceB. the MAC address of host A C. the MAC address of router interface e 1D. the MAC address of router interface e0CCNA考试交流1000人QQ群：6533088

23、7 Correct Answer: DSection: part 1ExplanationExplanation/Reference:host A收到server的帧的源mac地址是host A的网关的mac。QUESTION 12Refer to the exhibit.What two results would occur if the hub were to be replaced with a switch that isconfigured with one Ethernet VLAN?(choose two)A. The number of collision domains w

24、ould decrease.B. The number of collision domains would increase.C. The number of broadcast domains would remain the same.D. The number of collision domains would remain the same.E. The number of broadcast domains would increase.Correct Answer: BCSection: part 1ExplanationExplanation/Reference:hub不可以

25、隔离冲突域，所有端口同一个冲突域中 ， 交换机可以隔离冲突域，每个端口在不同冲突域中，故换成交换机冲突域个数会增加，大小会减小，而hub 交换机都不可隔离广播域 所有端口都在同一个广播域中，故广播域数量不变A 冲突域数量减少B 冲突域数量增加 C 广播域数量不变D 冲突域数量不变E 广播域数量增加QUESTION 13Which three statements accurately describe layer 2 Ethernet switches?(choose three)A. Microsegmentation decreases the number of collisions o

26、n the network.B. if a switch receives a frame for an unkown destination,it uses ARP to resolve the address.C. Spanning Tree Protocol allows switches to automatically share vlan information.D. In a properly functioning network with redundant switched paths,each switched aegment will containCCNA考试交流10

27、00人QQ群：65330887 one root bridge with all its ports in the forwarding state.All other switches in that broadcast domain willhave only one root port.E. Establishing vlans increases the number of broadcast domains.F. Switches that are configured with vlans make forwarding decisions based on both layer

28、2 and layer 3address information.Correct Answer: ADESection: part 1ExplanationExplanation/Reference:A为分割减少冲突的数量，这里是冲突并不是冲突域，正确B收到未知目的帧会产生泛洪C这是vtp的特性，不是stp的D在一个能够正常运行的网络冗余交换路径，每一个交换网段将包括一个跟桥。所有端口都在转发状态，其他本广播域的交换机有一个根端口。正确E.VLAN增加了广播域。正确F vlan使转发基于二层和三层IP。题目要求对2层交换机的描述，二层交换机不能基于3层IP转发QUESTION 14Where

29、does routing occur within the DoD TCP/IP reference model?A. applicationB. internetC. networkD. transportCorrect Answer: BSection: part 1ExplanationExplanation/Reference:路由发生在DOD模型的哪一层？注意是DOD模型不是OSI模型QUESTION 15Which destination addresses will be used by Host A to send data to Host C? (Choose two.)A.

30、 the IP address of Switch 1B. the MAC address of Switch 1C. the IP address of Host CD. the MAC address of Host CE. the IP address of the routers E0 interfaceF. the MAC address of the routers E0 interfaceCCNA考试交流1000人QQ群：65330887 Correct Answer: CFSection: part 1ExplanationExplanation/Reference:数据包在转

31、发的过程中，源目IP不变，源目MAC会变化。目的地不在同一个网段，数据先发送到网关。QUESTION 16For what two purposes does the Ethernet protocol use physical addresses? (Choose two.)A. to uniquely identify devices at Layer 2B. to allow communication with devices on a different networkC. to differentiate a Layer 2 frame from a Layer 3 packetD

32、. to establish a priority system to determine which device gets to transmit firstE. to allow communication between different devices on the same networkF. to allow detection of a remote device when its physical address is unknownCorrect Answer: AESection: part 1ExplanationExplanation/Reference:考点：考查

33、mac地址的作用。A：在二层唯一确定一台设备，正确B：是设备在不同的网络中通信，错误，不同网络通信需要通过IP地址确定。C：区别二层和三层帧，错误。D：确定设备的优先级，错误。没有这个功能。E：是同一网络的不同设备可以通信，正确F：当不知道远程设备的物理地址时可以查询，错误。不能跨网段。 -鸿鹄论坛http:/ 17Refer to the exhibit. Based on the information given. Which switch will be elected root bridge and why?A. Switch A ,because it has the lowest

34、 MAC addressB. Switch C,because it has the lowest priorityC. Switch B,because it has the highest MAC addressD. Switch C,because it is the most centrally located switchE. Switch A,because it is the most centrally located switchF. Switch D,because it has the highest priorityCorrect Answer: BSection: p

35、art 1CCNA考试交流1000人QQ群：65330887 ExplanationExplanation/Reference:选跟桥先比较优先级，优先级相同再比较mac地址大小QUESTION 18What value is primarily used to determine which port becomes the root port on each nonroot switch in aspanning-tree topology?A. lowest port MAC addressB. port priority number and MAC address.C. VTP re

36、vision numberD. highest port priority number.E. path costCorrect Answer: ESection: part 1ExplanationExplanation/Reference:此处为选举跟端口，先要比较到跟桥的cost。如果是选跟桥，先比较优先级QUESTION 19Refer to the exhibit.Switch-1 needs to send data to a host with a MAC address of 00b0.d056.efa4.Whatwill Switch-1 do with this data?

37、A. switch-1 will drop the data because it dose not have an entry for that MAC addressB. switch-1 will flood the data out all of its port from which the data originatedC. switch-1 will forward the data to its default gatewayD. switch-1 will send an ARP request out all its ports except the port from w

38、hich the data originatedCorrect Answer: BSection: part 1ExplanationExplanation/Reference:答案：B 没有mac地址会泛红根据下图，Switch-1需要往一台MAC地址为00b0.d056.efa4的主机发数据，Switch-1会如何处理这些数据?CCNA考试交流1000人QQ群：65330887 A. Switch-1 will drop the data because it does not have an entry for that MAC address.(Switch-1会丢弃该数据，因为它没有

39、该MAC地址条目)B. Switch-1 will flood the data out all of its ports except the port from which the data originated.(Switch-1会泛洪该数据到所有的接口，除了该数据的源接口)C. Switch-1 will send an ARP request out all its ports except the port from which the data originated.(Switch-1会发送ARP请求到所有的接口，除了该数据的源接口)D. Switch-1 will forwar

40、d the data to its default gateway.(Switch-1会往默认网关发送该数据)QUESTION 20What is the function of the command switchport trunk native vlan 999 on a switch?A. It designates VLAN 999 for untagged traffic.B. It blocks VLAN 999 traffic from passing on the trunk.C. It creates a VLAN 999 interface.D. It designate

41、s VLAN 999 as the default for all unkown tagged traffic.Correct Answer: ASection: part 1ExplanationExplanation/Reference:设置vlan999为本征vlan，交换机默认本征vlan为vlan1.此题正确答案为A.QUESTION 21Which two protocols are used by bridges and/or switches to prevent loops in a layer 2 network? (Choosetwo.)A. 802.1dB. VTPC.

42、 802.1qD. STPE. SAPCorrect Answer: ADSection: part 1ExplanationExplanation/Reference:考点分析：这道题考的是生成树协议。能防止二层环路的当然是生成树协议，生成树协议有STP（802.1d）和RSTP（802.1w）。QUESTION 22Which switch would STP choose to become the root bridge in the selection process?A. 32768: 11-22-33-44-55-66B. 32768: 22-33-44-55-66-77C. 3

43、2769: 11-22-33-44-55-65D. 32769: 22-33-44-55-66-78Correct Answer: ASection: part 1ExplanationExplanation/Reference:stp选举跟桥首先比较优先级大小.然后比较mac地址大小QUESTION 23A switch is configured with all ports assigned to vlan 2 with full duplex FastEthernet to segment existingdepartmental traffic. What is the effect

44、 of adding switch ports to a new VLAN on the switch?CCNA考试交流1000人QQ群：65330887 A. More collision domains will be created.B. IP address utilization will be more efficient.C. More bandwidth will be required than was needed previously.D. An additional broadcast domain will be created.Correct Answer: DSe

45、ction: part 1ExplanationExplanation/Reference:一个交换机把所有的端口以全双工的模式加到一个vlan里，把一个端口加入到一个新的vlan里会对此交换机产生什么影响？考点分析：这道题考的是vlan的概念。将一个交换的端口加入一个新vlan代表一个新的广播域产生了，因为vlan有隔离广播域的作用QUESTION 24What are three benefits of implementing vlans?(choose three)A. A more efficient use of bandwidth can be achieved allowing

46、 many physical groups to use the samenetwork infrastructureB. Broadcast storms can be mitigated by decreasing the number of broadcast domains,thus increasingtheir size.C. A higher level of network security can be reached by separating sensitive data traffic from othernetwork traffic.D. Port-based vl

47、ans increase switch-port use efficient,thanks to 802.1Q trunksE. A more efficient use of bandwidth can be achieved allowing many logical networks to use the samenetwork infrastructure.F. Broadcast storms can be mitigated by increasing the number of broadcast domains,thus reducing theirsize.G. VLANs

48、make it easier for IT staff to configure new logical groups,because the vlans all belong to thesame broadcast domain. Correct Answer: CEFSection: part 1ExplanationExplanation/Reference:A错，不是通过物理上组合，而是逻辑上的B错，应该是增加广播域的数量C一个更高的层次网络安全可以实现,以分离的敏感数据从其他网络。正确D thanks to 802.1Q trunks不正确E正确 ，logical是逻辑的意思F正确

49、G错误，是VTP的作用不是vlan的 -鸿鹄论坛http:/ 25Which IEEE standard protocol is initiated as a result of successful DTP completion in a switch overFastEthernet?A. 802.3adB. 802.1wC. 802.1QD. 802.1dCorrect Answer: CSection: part 1ExplanationCCNA考试交流1000人QQ群：65330887 Explanation/Reference:动态中继协议DTP，是 VLAN 组中思科的私有协议，

50、主要用于协商两台设备间链路上的中继过程及中继封装 802.1Q 类型。QUESTION 26Which of the following are benefits of VLANs? (Choose three.)A. They increase the size of collision domains.B. They allow logical grouping of users by function.C. They can enhance network security.D. They increase the size of broadcast domains while decr

51、easing the number of collision domains.E. They increase the number of broadcast domains while decreasing the size of the broadcast domains.F. They simplify switch administration.Correct Answer: BCESection: part 1ExplanationExplanation/Reference:考查VLAN的特点A：增加冲突域的大小，错误B：允许逻辑划分网段，正确C：增强网络安全，正确。不同vlan不能

52、直接通信。D：当减少冲突域时增加广播域的大小。错误E：减少广播域的大小时增加了广播域个数。正确。F:简化交换机管理。答非所问。 -鸿鹄论坛http:/ 27Refer to the exhibit.A technician has installed SwithchB and needs to configure it for remote access fromthe management workstation connected SwitchA Which set of commands is required to accomplish thistask?A. SwitchB(conf

53、ig)#interface FastEthernet 0/1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#no shutdownB. SwitchB(config)#ip default-gateway 192.168.8.254CCNA考试交流1000人QQ群：65330887 SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#no shutdow

54、nC. SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#ip default-gateway 192.168.8.254 255.255.255.0SwitchB(config)#no shutdownD. SwitchB(config)#ip default-network 192.168.8.254SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.2

55、52 255.255.255.0SwitchB(config)#no shutdownCorrect Answer: BSection: part 1ExplanationExplanation/Reference:想要远程管理交换机需要在交换机上的配置，B正确QUESTION 28In an Ethernet network, under what two scenarios can devices transmit? (Choose two.)A. when they receive a special tokenB. when there is a carrierC. when they

56、 detect no other devices are sendingD. when the medium is idleE. when the server grants accessCorrect Answer: CDSection: part 1ExplanationExplanation/Reference:在以太网网络，在什么情况下可以两种设备可以传输?考点分析：这题考的是以太网的基本概念CSMA/CD，题目问在两种情况下设备才会开始传输数据，当然是当它检测到没有其他设备在传输数据或传输介质是空闲的时才开始传输数据。 -鸿鹄论坛http:/ 29Which two states a

57、re the port states when RSTP has converged?(choose two)A. blockingB. learningC. discardingD. forwardingE. listeningCorrect Answer: CDSection: part 1ExplanationExplanation/Reference:在RSTP中只有三种端口状态，Discarding、Leaning和Forwarding，汇聚之后的状态只有Discarding、Forwarding。QUESTION 30Which two commands can be used t

58、o verify a trunk link configurationt status on a given cisco switch?(choose two)CCNA考试交流1000人QQ群：65330887 A.show interfaces interfaceB.show interfaces trunkC.show interfaces switchportD.show ip interface briefE.show interfaces vlanCorrect Answer: BCSection: part 1ExplanationExplanation/Reference:查看t

59、runk命令，show interface trunk和show interface switchport ，只能选BCQUESTION 31Which command enables RSTP on a switch?A. spanning-tree mode rapid-pvstB. spanning-tree uplinkfastC. spanning-tree backbonefastD. spanning-tree mode mstCorrect Answer: ASection: part 1ExplanationExplanation/Reference:启用RSTP的命令QUE

60、STION 32Which of the following statements describe the network shown in the graphic? (Choose two.)A. There are two broadcast domains in the network.B. There are four broadcast domains in the network.C. There are six broadcast domains in the network.D. There are four collision domains in the network.

61、E. There are five collision domains in the network.F. There are seven collision domains in the network.Correct Answer: AFSection: part 1CCNA考试交流1000人QQ群：65330887 ExplanationExplanation/Reference:路由器一个端口一个广播域交换机一个端口一个冲突域集线器一个冲突域。左边是集线器，右边是交换机。路由器有两个端口，所以有两个广播域。 右边交换机有6个端口加上左边集线器一共7个冲突域。QUESTION 33Ref

62、er to the exhibit.All switch ports are assigned to the correct VLANs, but none of the hosts connected to SwitchA cancommunicate with hosts in the same VLAN connected to SwitchB. Based on the output shown, what is themost likely problem?A. The access link needs to be configured in multiple VLANs.B. T

63、he link between the switches is configured in the wrong VLAN.C. The link between the switches needs to be configured as a trunk.D. VTP is not configured to carry VLAN information between the switches.E. Switch IP addresses must be configured in order for traffic to be forwarded between the switchesC

64、orrect Answer: CSection: part 1ExplanationExplanation/Reference:由图中可知，两个交换机相连接的端口都是access，应该配置成trunkQUESTION 34Refer to the exhibit. Given the output shown from this Cisco Catalyst 2950, what is the most likely reasonthat interface FastEthernet 0/10 is not the root port for VLAN 2?CCNA考试交流1000人QQ群：6

65、5330887 A. This switch has more than one interface connected to the root network segment in VLAN 2.B. This switch is running RSTP while the elected designated switch is running 802.1d Spanning Tree.C. This switch interface has a higher path cost to the root bridge than another in the topology.D. Thi

66、s switch has a lower bridge ID for VLAN 2 than the elected designated switch.Correct Answer: CSection: part 1ExplanationExplanation/Reference:如图，给出了Cisco交换机2950的输出代码，Fa0/10没有成为Vlan2的根端口最优可能的原因是什么？考点分析：一个端口要想成为根端口，首先比较根路径成本， 越低越可能。题目问为什么没能成为根端口，原因最可能就是根路径成本比其他端口高。 -鸿鹄论坛http:/ 35Why will a switch neve

67、r learn a broadcast address?A. Broadcast frames are never sent to swiches.B. Broadcast addresses use an incorrect format for the switching table.C. A broadcast address will never be the source address of a frame.D. Broadcasts only use network layer addressing.E. A broadcast frame is never forwarded

68、by a switch.Correct Answer: CSection: part 1ExplanationExplanation/Reference:QUESTION 36Refer to the exhibit. Why has this switch not been elected the root bridge for VLAN1?CCNA考试交流1000人QQ群：65330887 A. It has more than one interface that is connected to the root network segment.B. It is running RSTP

69、 while the elected root bridge is running 802.1d spanning tree.C. It has a higher MAC address than the elected root bridge.D. It has a higher bridge ID than the elected root bridge.Correct Answer: DSection: part 1ExplanationExplanation/Reference:考点：考查STP选举原则，RID小者优先。由提示可知根桥的RID为20481A：有超过1个接口连接到根网段，

70、错误B：使用了RSTP，但是选举根桥时使用了802.1d，错误C：比根桥有更高的MAC地址，错误D：比根桥有更高的RID，正确。QUESTION 37Which two link protocols are used to carry multiple VLANs over a single link? (Choose two.)A. VTPB. 802.1qC. IGPD. ISLE. 802.3uCorrect Answer: BDSection: part 1ExplanationExplanation/Reference:考点分析：这道题考的是Trunk的基本概念。Trunk的协议有两

71、种，一种是通用的802.1Q协议，另一种是cisco专用的ISL协议。QUESTION 38assuming the default switch configuration which vlan range can be added modified and removed on acisco switch?CCNA考试交流1000人QQ群：65330887 A. 2 through 1001B. 1 through 1001C. 1 through 1002D. 2 through 1005Correct Answer: ASection: part 1ExplanationExplana

72、tion/Reference:交换机上默认那些是可以修改和移动的vlan。2-1001QUESTION 39Which statement about vlan operation on cisco catalyst switches is true?A. when a packet is received from an 802.1Q trunk,the vlan id can be determined from the source MACaddress table.B. unkown unicast frames are retransmitted only to the ports

73、that belong to the same vlanC. ports between switches should be configured in access mode so that vlans can span across the portsD. broadcast and multicast frames are retransmitted to ports that are configured on different vlan.Correct Answer: BSection: part 1ExplanationExplanation/Reference:A通过源mac

74、地址确定vlan，不正确B未知单播帧只在本vlan传播，正确C交换机之间应该设置为trunkDvlan能分割广播域，广播不能跨vlan传输QUESTION 40Refer to the topology shown in the exhibit. Which ports will be STP designated ports if all the links areoperating at the same bandwidth? (Choose three.)A. Switch A - Fa0/0B. Switch A - Fa0/1C. Switch B - Fa0/0D. Switch

75、B - Fa0/1E. Switch C - Fa0/0F. Switch C - Fa0/1Correct Answer: BCDSection: part 1CCNA考试交流1000人QQ群：65330887 ExplanationExplanation/Reference:B的mac最小为根桥 ，B的俩端口为指定端口. A的F0/0和C的F0/0为根端口。A的mac较小，A的F0/1为指定端口，C的F0/1堵塞QUESTION 41Refer to the exhibit. How should the FastEthernet0/1 port on the 2950 model swi

76、tches that are shown inthe exhibit be configured to allow connectivity between all devices?A. The ports only need to be connected by a crossover cable.B.SwitchX(config)# interface FastEthernet 0/1SwitchX(config-if)# switchport mode trunkC.SwitchX(config)# interface FastEthernet 0/1SwitchX(config-if)

77、# switchport mode accessSwitchX(config-if)# switchport access vlan 1D.SwitchX(config)# interface FastEthernet 0/1SwitchX(config-if)# switchport mode trunkSwitchX(config-if)# switchport trunk vlan 1SwitchX(config-if)# switchport trunk vlan 10SwitchX(config-if)# switchport trunk vlan 20Correct Answer:

78、 BSection: part 1ExplanationExplanation/Reference:fa0/0,fa0/1-此两接口都必须配置成trunk,才能达到vlan间通信而且sw1和sw2间的链路必须trunk才能带到相同vlan的通信QUESTION 42Refer to the exhibit A frame on vlan 1on switch s1 is sent to switch s2 when the frame is received on vlan2,what causes this behavior?CCNA考试交流1000人QQ群：65330887 A. trun

79、k mode mismatchesB. vlans that do not correspond to a unique IP subnetC. native vlan mismatchesD. allowing only vlan 2 on the destination.Correct Answer: CSection: part 1ExplanationExplanation/Reference:两交换机本征vlan不一样，不能正常通信QUESTION 43Which three statements about RSTP are true?(choose three)A. RSTP s

80、ignificantly reduces topology reconverging time after a link failure.B. RSTP expends the STP port roles by adding the alternate and backup roles.CCNA考试交流1000人QQ群：65330887 C. RSTP port atates are blocking,discarding,learing,or forwarding.D. RSTP also uses the STP proprsal-agreement sequence.E. RSTP u

81、se the same timer-baseed process as STP on point-to-point links.F. RSTP provides a faster transition to the forwarding state on point-to-point links than STP does.Correct Answer: ABFSection: part 1ExplanationExplanation/Reference:A能够减少汇聚时间B比STP增加了端口角色alternat和backupF在点到点链路提供比STP更快的传输和转发QUESTION 44At

82、 which layer of the OSI model is RSTP used to prevent loops?A. data linkB. networkC. physicalD. transportCorrect Answer: ASection: part 1ExplanationExplanation/Reference:QUESTION 45What dose a Layer 2 switch use to decide where to forward a received frame?A. source MAC addressB. source IP addressC.

83、source switch portD. destination IP addressE. destination port addressF. destination MAC addressCorrect Answer: FSection: part 1ExplanationExplanation/Reference:二层交换机用目的mac地址来转发收到的帧QUESTION 46Refer to the exhibit. Which statement is true?CCNA考试交流1000人QQ群：65330887 A. The Fa0/11 role confirms that Swi

84、tchA is the root bridge for VLAN 20.B. VLAN 20 is running the Per VLAN Spanning Tree Protocol.C. The MAC address of the root bridge is 0017.596d.1580.D. SwitchA is not the root bridge, because not all of the interface roles are designated.Correct Answer: DSection: part 1ExplanationExplanation/Refere

85、nce:stp对于跟桥所有的接口都是指定端口QUESTION 47Which two benefits are provided by creating VLANs? (Choose two.)A. added securityB. dedicated bandwidthC. provides segmentationD. allows switches to route traffic between subinterfacesE. contains collisionsCorrect Answer: ACSection: part 1ExplanationExplanation/Refer

86、ence:vlan的主要特点第一个提供网络安全因为默认vlan间是不能够通信的,第二个提供了网络分段.因为一个vlan就是一个逻辑子网QUESTION 48Which command can be used from a PC to verify the connectivity between hosts that connect through aswitch in the same LAN?A. ping addressB. tracert addressC. traceroute addressCCNA考试交流1000人QQ群：65330887 D. arp addressCorrec

87、t Answer: ASection: part 1ExplanationExplanation/Reference:Traceroute是用来侦测主机到目的主机之间所经路由，这里是在同一个lan，所以用不到QUESTION 49Based on the network shown in the graphic which option contains the potential networking problem andprotocol or setting that can to prevent the problem?A. Routing loops, hold down timer

88、sB. Switching loops, split horizonC. Routing loops, split horizonD. Switching loops, VTPE. Routing loops, STPF. Switching loops, STPCorrect Answer: FSection: part 1ExplanationExplanation/Reference:交换机存在环路，STP生成树来防止环路QUESTION 50Refer to the exhibit. Which two statements are true about interVLAN routi

89、ng in the topology that is shownin the exhibit? (Choose two.)CCNA考试交流1000人QQ群：65330887 A. Host E and host F use the same IP gateway address.B. Router1 and Switch2 should be connected via a crossover cable.C. Router1 will not play a role in communications between host A and host D.D. The FastEthernet

90、 0/0 interface on Router1 must be configured with subinterfaces.E. Router1 needs more LAN interfaces to accommodate the VLANs that are shown in the exhibit.F. The FastEthernet 0/0 interface on Router1 and Switch2 trunk ports must be configured using the sameencapsulation type.Correct Answer: DFSecti

91、on: part 1ExplanationExplanation/Reference:问：如下图，对于图中拓扑中vlan之间路由，那两个选项是正确的？考点分析：这道题考的是vlan间的路由，用的是单臂路由的拓扑模型。此拓扑模型是由路由器来完成vlan间数据流量的转发。如图，Route1不需要更多的Lan接口，它只需要在F0/0口上创建更多的子接口来完成对更多vlan的接入。所以E错误，这题的正确答案是D，F。在单臂路由的时候，首先路由器的接口要配置子接口针对每一个vlan一个逻辑接口，其次交换机的接口要配置trunk，并且封装要和路由器接口的封装一致 -鸿鹄论坛http:/ 51Which t

92、wo of these are characteristics of the 802.1Q protocol?(choose two)A. it is a layer 2 messaging protocol which maintains vlan configurations across network.B. it includes an 8-bit field which specifies the priority of a frame.C. it is used exclusively for tagging vlan frames and dose not address net

93、work reconvergence followingswitched network topology changes.D. it modifies the 802.3 frame header,and thus requires that the FCS be recomputed.E. it is a trunking protocol capable of carring untagged frames.Correct Answer: DESection: part 2ExplanationExplanation/Reference:A描述的是vtp的特性B应该是3bitCexclu

94、sively是唯一的意思。802.1Q不是唯一的D修改帧的头部，需要重新进行FCS校验，正确E是一个trunk协议并支持不打标记的帧，正确CCNA考试交流1000人QQ群：65330887 QUESTION 52Refer to the exhibit. Each of these four switches has been configured with a hostname, as well as beingconfigured to run RSTP. No other configuration changes have been made. Which three of these

95、 show thecorrect RSTP port roles for the indicated switches and interfaces? (Choose three.)A. SwitchA, Fa0/2, designatedB. SwitchA, Fa0/1, rootC. SwitchB, Gi0/2, rootD. SwitchB, Gi0/1, designatedE. SwitchC, Fa0/2, rootF. SwitchD, Gi0/2, rootCorrect Answer: ABFSection: part 2ExplanationExplanation/Re

96、ference:如图，每个交换机都配置了主机名，也都运行了RSTP，在就没有做其他的配置了。下面哪三个选项正确的描述了RSTP的端口角色？考点分析：1.判断根桥，通过比较各个网桥的Mac地址，桥Mac地址最小的为根桥，所以根桥是C，根桥上的所有端口是指定端口。2.判断非根桥上的跟端口。在同一个交换机上，到根网桥的cost较小的那个端口会成为root port。所以SwitchA Fa0/1，SwitchD Gi0/2，SwitchB Gi0/1会成为相应交换机上的RP。3.判断每个网段上的指定端口。 SWA-SWB段：SWA的F0/2端口的cost为19，SWB的G0/2端口cost为4+19

97、=23，所以SWA的F0/2为指定端口。 SWB-SWD段：SWB的G0/1端口cost为19+19=38，SWD的G0/1端口cost为19，所以SWD的G0/1端口为指定端口。 4.剩余SWB的G0/2端口既不是指定端口，又不是根端口，处于堵塞状态。CCNA考试交流1000人QQ群：65330887 注：100M链路cost为19.1000M链路cost为4. -鸿鹄论坛http:/ 53Refer to the exhibit.The network administrator normally establishes a telnet session with the switch f

98、romhost A.However,host A is unavailable.The administrators attempt to the switch from host B fails,but pingsto the other two hosts are successful.what is the issue?A. Host B and the switch need to be in the same subnet.B. The switch needs and appropriate default gateway assigned.C. The switch interf

99、ace connected to the router is down.D. Host B need to be assigned an IP address in vlan 1.E. The switch interfaces need the appropriate IP addresses assigned.Correct Answer: BSection: part 2ExplanationExplanation/Reference:远程管理交换机需要在交换机上设置default gateway和vlan IPQUESTION 54Refer to the exhibit. What

100、switch proves the spanning-tree designated port role for the network segmentthat services the printers?CCNA考试交流1000人QQ群：65330887 A. Switch1B. Switch2C. Switch3D. Switch4Correct Answer: CSection: part 2ExplanationExplanation/Reference:题目求哪一个交换机为打印机提供指定端口？由图可知S1是根桥。指定端口是基于网段间选举的。S3-S4之间S3的BID比S4小，所以S3

101、-S4之间的指定端口在S3上。QUESTION 55What is one benefit of PVST+?A. PVST+reduces the CPU cycles for all the switches in the networkB. PVST+automatically selects the root bridge location,to provide optimized bandwidth usage.C. PVST+allow the root switch location to be optimized per vlan.D. PVST+supports Layer

102、3 load balancing without loops.Correct Answer: CSection: part 2ExplanationExplanation/Reference:PVST+允许每一个vlan有自己的跟桥 -鸿鹄论坛http:/ 56Which are valid modes for a switch port used as a VLAN trunk? (Choose three.)A. transparentB. autoC. onD. desirableCCNA考试交流1000人QQ群：65330887 E. blockingF. forwardingCorr

103、ect Answer: BCDSection: part 2ExplanationExplanation/Reference:以下哪些是vlan trunk端口的有效模式？考点分析：这道题考的是trunk的模式。这是trunk基本概念，可以形成trunk链路的模式有auto、on和desirableQUESTION 57How many broadcast domains are shown in the graphic assuming only the default vlan is configured onthe switches?A. oneB. sixC. twelveD. two

104、Correct Answer: ASection: part 2ExplanationExplanation/Reference:一个vlan为一个广播域，图中有两个交换机，但是只有一个默认的vlan，所以只有一个广播域QUESTION 58Which three of these statements regarding 802.1Q trunking are correct? (Choose three.)A. 802.1Q native VLAN frames are untagged by default.B. 802.1Q trunking ports can also be sec

105、ure ports.C. 802.1Q trunks can use 10 Mb/s Ethernet interfaces.D. 802.1Q trunks require full-duplex, point-to-point connectivity.E. 802.1Q trunks should have native VLANs that are the same at both ends.Correct Answer: ACESection: part 2ExplanationExplanation/Reference:802.1q native vlan是不做标记的，并且在tru

106、nk两边的native需要一致QUESTION 59Refer to the exhibit. The output that is shown is generated at a switch. Which three of these statements aretrue? (Choose three.)CCNA考试交流1000人QQ群：65330887 A. All ports will be in a state of discarding, learning, or forwarding.B. Thiry VLANs have been configured on this swit

107、ch.C. The bridge priority is lower than the default value for spanning tree.D. All interfaces that are shown are on shared media.E. All designated ports are in a forwarding state.F. The switch must be the root bridge for all VLANs on this switch.Correct Answer: ACESection: part 2ExplanationExplanati

108、on/Reference:rstp的所有接口在收敛完成之前都将经历discarding-learning-forwarding的状态,并且rstp的默认优先级应该为32768，所有的DP都将转发数据QUESTION 60Refer to the exhibit. At the end of an RSTP election process, which access layer switch port will assumethe discarding role?CCNA考试交流1000人QQ群：65330887 A. Switch3, port fa0/1B. Switch3, port f

109、a0/12C. Switch4, port fa0/11D. Switch4, port fa0/2E. Switch3, port Gi0/1F. Switch3, port Gi0/2Correct Answer: CSection: part 2ExplanationExplanation/Reference:SW1为跟桥，SW4会选择一个端口作为根端口，另一个堵塞。在两个端口cost相同的情况下，选择端口号小的为跟端口，端口号大的堵塞。QUESTION 61Which term describes a spanning-tree network that has all switch

110、ports in either the blocking or forwardingstate? A. redundantB. spannedC. provisionedD. convergedCorrect Answer: DSection: part 2ExplanationExplanation/Reference:收敛以后交换机端口只有堵塞和转发状态QUESTION 62What are the possible trunking modes for a switch port? (Choose three.)A. transparentB. autoC. onD. desirable

111、CCNA考试交流1000人QQ群：65330887 E. clientF. forwardingCorrect Answer: BCDSection: part 2ExplanationExplanation/Reference:考点：考查交换机在trunk模式下的模式auto：不会主动发DTP信息on：强制成为trunk，也主动发DTP信息desirable：DTP主动模式，发DTP和对方协商 -鸿鹄论坛http:/ 63Which two of these statements regarding RSTP are correct? (Choose two.)A. RSTP cannot

112、operate with PVST+.B. RSTP defines new port roles.C. RSTP defines no new port states.D. RSTP is a proprietary implementation of IEEE 802.1D STP.E. RSTP is compatible with the original IEEE 802.1D STP.Correct Answer: BESection: part 2ExplanationExplanation/Reference:RSTP定义了新的端口类型，包括隔离端口，备份端口等，rstp如果与

113、stp同时存在的话。那么将兼容成stpQUESTION 64Refer to the exhibit.Which two statements are true of the interfaces on switch1?(choose two)CCNA考试交流1000人QQ群：65330887 A. A hub is connected directly to FastEthernet0/5B. FastEthernet0/1 is configured as a trunk link.C. FastEthernet0/5 has statically assigned mac address

114、D. Interface FastEthernet0/2 has been disable.E. Multiple devices are connected directly to FastEthernet0/1.F. FastEthernet0/1 is connected to a host with multiple network interface cards.Correct Answer: ABSection: part 2ExplanationExplanation/Reference:图中可以看出F0/1,F0/2为trunk。F0/5端口有多个mac地址，而且不是trunk

115、，只能是接了一个hubQUESTION 65Three switches are connected to one anther via trunk ports.Assuming the default switchconfiguration,which switch is elected as the root bridge for the spanning-tree instance of vlan 1?A. the switch with the lowest MAC addressB. the switch with the higest MAC addressCCNA考试交流1000

116、人QQ群：65330887 C. the switch witch the higest IP addressD. the switch with the lowest IP addressCorrect Answer: ASection: part 2ExplanationExplanation/Reference:在运行STP协议的网络中选择根桥需要利用桥ID.桥ID由桥优先级（所有思科交换机上默认优先级为32768）和MAC地址组合来决定的。在网络中，桥ID最小的网桥成为根桥。桥ID=桥优先级+桥mac 越小越优先QUESTION 66What are three advantages

117、of VLANs? (Choose three.)A. VLANs establish broadcast domains in switched networks.B. VLANs utilize packet filtering to enhance network security.C. VLANs provide a method of conserving IP addresses in large networks.D. VLANs provide a low-latency internetworking alternative to routed networks.E. VLA

118、Ns allow access to network services based on department, not physical location.F. VLANs can greatly simplify adding, moving, or changing hosts on the network.Correct Answer: AEFSection: part 2ExplanationExplanation/Reference:A：VLAN在交换网络中建立广播域，正确B：利用VLAN的数据包过滤，增强网络的安全性。错误，没有这个特性。C：提供了在大型网络中的保护IP地址的方法

119、。错误。D：提供低延迟互联网络替代路由网络。错误E：vlan允许基于逻辑划分的网络访问，不是物理位置。正确。F：VLAN可以大大简化添加，移动或更改网络上的主机。正确。 -鸿鹄论坛http:/ 67Which two benefits are provided by using a hierarchical addressing network addressing scheme? (Choosetwo.)A. reduces routing table entriesB. auto-negotiation of media ratesC. efficient utilization of M

120、AC addressesD. dedicated communications between devicesE. ease of management and troubleshootingCorrect Answer: AESection: part 2ExplanationExplanation/Reference:提供分层的网络地址规划,第一个我们容易实时路由汇总从而减少路由条目,第二给我们在管理方面还错误排查方面提供了便利QUESTION 68What is the alternative notation for the IPV6 address B514:82C3:0000:00

121、00:0029:EC7A:0000:EC72?A. B514:82C3:0029:EC7A:0000:EC72B. B514:82C3:0029:EC7A:EC72CCNA考试交流1000人QQ群：65330887 C. B514:82C3:0029:EC7A:0:EC72D. B514:82C3:0029:EC7A:EC72Correct Answer: CSection: part 2ExplanationExplanation/Reference:考试时候C可能会出现14:82C3:0029:EC7A:0:EC72这种情况，系统错误，不用管它，选CQUESTION 69Refer to

122、the diagram. All hosts have connectivity with one another. Which statements describe theaddressing scheme that is in use in the network? (Choose three.)A. The subnet mask in use is 255.255.255.192.B. The subnet mask in use is 255.255.255.128.C. The IP address 172.16.1.25 can be assigned to hosts in

123、VLAN1D. The IP address 172.16.1.205 can be assigned to hosts in VLAN1E. The LAN interface of the router is configured with one IP address.F. The LAN interface of the router is configured with multiple IP addresses.Correct Answer: BCFSection: part 2ExplanationExplanation/Reference:1、子网掩码要使两个IP处于不同网段。

124、255.255.255.128把一个C类划分成两个子网。2、在路由器上配置子接口，用单臂路由实现通信。 -鸿鹄论坛http:/ 70Which two statements describe characteristics of IPv6 unicast addressing? (Choose two.)A. Global addresses start with 2000:/3.B. Link-local addresses start with FE00:/12.C. Link-local addresses start with FF00:/10.D. There is only one

125、 loopback address and it is :1.E. If a global address is assigned to an interface, then that is the only allowable address for the interface.Correct Answer: ADSection: part 2ExplanationCCNA考试交流1000人QQ群：65330887 Explanation/Reference:ipv6的常规问题，globaladdress的其实段位2000:/3这个是定义好了的,D选项说的是换回地址,也就是ipv4的127.

126、0.0.1这个类似的.所以D正确QUESTION 71the network administrator has been asked to give reasons for moving from ipv4 to ipv6. what are two validreasons for adopting ipv6 over ipv4?(choose two)A. telnet access does not require a passwordB. nat C. no broadcastD. chanage of destination address in the ipv6 headerE.

127、 chanage of source address in the ipv6 headerF. autoconfigurationCorrect Answer: CFSection: part 2ExplanationExplanation/Reference:要求给出IPV4向IPv6转换的理由，也就是v6的优点。C没有广播, F自动设置QUESTION 72An administrator must assign static IP addresses to the servers in a network.For network192.168.20.24/29, the router i

128、s assigned the first usable host address while the sales server is given thelast usable host address. Which of the following should be entered into the IP propertied box for the salesserver?A. IP address:192.168.20.14 Subnet Mask:255.255.255.248 Default Gateway:192.168.20.9B. IP address:192.168.20.2

129、54 Subnet Mask:255.255.255.0 Default Gateway:192.168.20.1C. IP address:192.168.20.30 Subnet Mask:255.255.255.248 Default Gateway:192.168.20.25D. IP address:192.168.20.30 Subnet Mask:255.255.255.240 Default Gateway:192.168.20.17E. IP address:192.168.20.30 Subnet Mask:255.255.255.240 Default Gateway:1

130、92.168.20.25Correct Answer: CSection: part 2ExplanationExplanation/Reference: 192.168.20.24/29地址范围 192.168.20.24- 192.168.20.31，其中第一个地址为网络地址，最后一个为广播地址，这两个地址不可用。QUESTION 73Which subnet mask would be appropriate for a network address range to be subnetted for up to eightLANs, with each LAN containing

131、5 to 26 hosts?A. 0.0.0.240B. 255.255.255.252C. 255.255.255.0D. 255.255.255.224E. 255.255.255.240Correct Answer: DSection: part 2ExplanationExplanation/Reference:每个网段有5到26个host，最好是用32的块大小，掩码为255.255.255.224CCNA考试交流1000人QQ群：65330887 QUESTION 74How many bits are contained in each field of an IPv6 addre

132、ss?A. 24B. 4C. 8D. 16Correct Answer: DSection: part 2ExplanationExplanation/Reference:IPV6地址每一段地址有16位QUESTION 75Which three approaches can be used while migrating from an IPV4 addressing scheme to an IPV6scheme.(choose three)A. statically map IPV4 address to IPV6 addressesB. configuration IPv4 tunne

133、ls between IPV6 islandsC. use DHCPv6 to map IPV4 addresses to IPV6 addressesD. use proxying and translation to translate IPV6 packets into IPV4 packetsE. configure IPV6 directlyF. enable dual-stack routingCorrect Answer: ABFSection: part 2ExplanationExplanation/Reference:答案是ABF。IPV6向IPV4过渡书上有三种方法：隧道

134、，双栈，NAT-PT.A是静态NAT-PYB是隧道F是双栈 -鸿鹄论坛http:/ 76Refer to the exhibit. In this VLSM addressing scheme, what summary address would be sent from routerA?CCNA考试交流1000人QQ群：65330887 A. 172.16.0.0 /16B. 172.16.0.0 /20C. 172.16.0.0 /24D. 172.32.0.0 /16E. 172.32.0.0 /17F. 172.64.0.0 /16Correct Answer: ASection:

135、part 2ExplanationExplanation/Reference:QUESTION 77How is an EUI-64 format interface ID created from a 48-bit MAC address?A. by appending 0xFF to the MAC address.B. by prefixing the MAC address with 0xFFEE.C. by prefixing the MAC address with 0xFF and appending 0xFF to it.D. by inserting 0xFFFE betwe

136、en the upper three bytes and the lower three bytes of the MAC addressE. by prefixing the MAC address with 0xF and inserting 0xF after each of its first three bytes.Correct Answer: DSection: part 2ExplanationExplanation/Reference:EUI-64是扩展的mac地址，由64位组成，通过在mac地址中间，也就是第24位的前面插入16位0XFFFE，以创建一个64位，独特的接口标

137、识符。 -鸿鹄论坛http:/ 78Refer to the exhibit.Which is the most efficient summarization that R1 can use to advertise its networks toR2?A. 172.1.4.0/22B. 172.1.0.0/21C. 172.1.0.0/22CCNA考试交流1000人QQ群：65330887 D. 172.1.4.0/25172.1.4.128/25172.1.5.0/24172.1.6.0/24172.1.7.0/24E. 172.1.4.0/24172.1.5.0/24172.1.6.0

138、/24172.1.7.0/24Correct Answer: ASection: part 2ExplanationExplanation/Reference:做一个最精确的路由汇总，将图中IP地址做汇总QUESTION 79Which option is a valid IPv6 address?A. 2001:0000:130F:099a:12aB. 2002:7654:A1AD:61:81AF:CCC1C. FEC0:ABCD:WXYZ:0067:2A4D. 2004:1:25A4:886F:1Correct Answer: DSection: part 2ExplanationExpl

139、anation/Reference:A.只能一个冒号B.应该8个字段C.16进制没有WXYZQUESTION 80Which three are characteristics of an IPV6 anycast address?(choose three)A. any-to-many communication modelB. delivery of packets to the group interface that is closest to the sending deviceC. one-to-many communication modelD. the same address

140、 for multiple devices in the groupE. one-to-nearest communication modelF. a unique IPV6 address for each device in the groupCorrect Answer: BDESection: part 2ExplanationExplanation/Reference:A 多对多通信模型 B 数据包传送到该组接口，转发到最近的节点C 一对多通信模型D 同组中多个接口共用一个地址E 发送到任播地址的分组被转发到最近的端口（节点）F 组中每个节点有一个唯一的IV6地址（每台设备可以有一个

141、以上的端口，所以用节点来表示）题目考查IPV6的任播3个特点：1.数据包传送到该组接口，转发到最近的节点2.同组中多个接口共用一个地址CCNA考试交流1000人QQ群：65330887 3.发送到任播地址的分组被转发到最近的端口（节点）考试可以这么记： anycast =closet 、nearest、 same dress for multiple devices 近 、 近 、 一个地址多个设备 -鸿鹄论坛http:/ 81A national retail chain needs to design an IP addressing scheme to support a nationw

142、ide network. Thecompany needs a minimum of 300 sub-networks and a maximum of 50 host addresses per subnet.Working with only one Class B address, which of the following subnet masks will support an appropriateaddressing scheme? (Choose two.)A. 255.255.255.0B. 255.255.255.128C. 255.255.252.0D. 255.255

143、.255.224E. 255.255.255.192F. 255.255.248.0Correct Answer: BESection: part 2ExplanationExplanation/Reference:一个国家的零售连锁店需要设计一个IP方案来支持一个全国性的网络互联。该公司需要最少300个子网段以及每个子网段最多50太主机。仅使用一个B类地址，下列中哪些子网掩码能够满足这个地址分配方案？需要至少300个子网，每个子网至少50台主机。使用一个B类地址来划分。考点分析：这道题考的是VLSM。因为题中说每个网段最多50机器，且2550 Cisco 预设 point to point

144、封装C & D - 是 Frame-Relay lmi-typeQUESTION 188Router A is unable to reach Router B.Both routers are running ios version 12.0.After reviewing thecommand output and graphic,what is the most likely cause of the problem?A. incorrect bandwidth configurationB. incorrect LMI configurationC. incorrect map sta

145、tementD. incorrect IP addressCorrect Answer: CSection: part 4ExplanationExplanation/Reference:frame-relay map ip 172.16.100.1 200 broadcast 这个命令配置错误 DLCI号应该是本地的100-鸿鹄论坛http:/ 189Refer to the exhibit. What is the meaning of the term dynamic as displayed in the output of the showframe-relay map comman

146、d shown?A. The Serial0/0 interface is passing traffic.B. The DLCI 100 was dynamically allocated by the routerC. The Serial0/0 interface acquired the IP address of 172.16.3.1 from a DHCP serverD. The DLCI 100 will be dynamically changed as required to adapt to changes in the Frame Relay cloudE. The m

147、apping between DLCI 100 and the end station IP address 172.16.3.1 was learned throughInverse ARPCorrect Answer: ESection: part 4ExplanationCCNA考试交流1000人QQ群：65330887 Explanation/Reference: -鸿鹄论坛：http:/ 190A network administrator needs to configure a serial link between the main office and a remote lo

148、cation.Therouter at the remote office is a non-cisco router. How should the network administrator configure the serialinterface of the main office router to make the connection?A. Main(config)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#no shutB. Main(con

149、fig)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#encapsulation ietfMain(config-if)#no shutC. Main(config)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#encapsulation frame-relayMain(config-if)#authenication chapM

150、ain(config-if)#no shutD. Main(config)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#encapsulation pppMain(config-if)#no shutCorrect Answer: DSection: part 4ExplanationExplanation/Reference:remote office 使用非思科路由器，则main office 是思科路由器。HDLC是Cisco路由器在同步串行线路上的默认封

151、装方式。每个厂商的HDLC都是专用的。PPP 用于异步串行（拨号）或同步串行（isdn）介质。PPP的基本目标是在数据链路层点到点链路上传输第3层包。它不是一个专用协议，这就意味着如果你的路由器并不都是Cisco的，可以在串行接口上配置PPP封装。串行接口两端的路由器都配置PPP才能工作。帧中继有两种封装类型-Cisco和IETF.除非手动输入IETF，否则默认封装是Cisco。如果用帧中继连接一条Cisco设备和一条非Cisco设备，要选择IETF封装类型。命令格式如下Router(config)#int s0/0/0Router(config-if)#encapsulation ?fram

152、e-relay Frame Relay networkshdlc Serial HDLC synchronousppp Point-to-Point protocolRouter(config-if)#encapsulation frame-relay ?ietf Use RFC1490/RFC2427 encapsulation由此判断选项B 和C，命令格式不正确。如果当一台思科路由器和一台非思科路由器通过串行连接在一起时，必须配置PPP或另外一种封装方法，像帧中继，因为默认的HDLC不能工作。-鸿鹄论坛http:/ 191Which are three reasons that an or

153、ganization with multiple branch offices and roaming users mightimplement a Cisco VPN solution instead of point-to-point WAN links?(choose three)A. reduced cost B. better throughputC. increased securityCCNA考试交流1000人QQ群：65330887 D. scalabilityE. reduced latencyF. broadband incompatibilityCorrect Answe

154、r: ACDSection: part 4ExplanationExplanation/Reference:答案：A C D. VPN英文全称是“Virtual Private Network”，翻译过来就是“虚拟专用网络”。vpn被定义为通过一个公用网络（通常是因特网）建立一个临时的、安全的连接，是一条穿过混乱的公用网络的安全、稳定隧道。特点：1.安全保障2.服务质量保证（QoS）3.可扩充性和灵活性4.可管理性A 节约成本 C 增强安全性D 易扩展B提高吞吐量-感觉应该是P2P的优点E减少潜在因素 F带宽 不是很有关系 -鸿鹄论坛http:/ 192What two statistics

155、appear in show frame-relay map output?(choose two)A. The number of FECN packets that are received by the routerB. The number of BECN packets that are received by the router.C. The ip address of the local routerD. The value of the local DLCIE. The status of the PVC that is configured on the routerCor

156、rect Answer: DESection: part 4ExplanationExplanation/Reference:QUESTION 193Users have been complaining that their Frame Relay connection to the corporate site is very slow. Thenetwork administrator suspects that the link is overloaded. Based on the partial output of the Router#show frame relay pvc c

157、ommand shown in the graphic, which output value indicates to the local routerthat traffic sent to the corporate site is experiencing congestion?CCNA考试交流1000人QQ群：65330887 A. DLCI = 100B. last time PVC status changed 00:25:40C. in BECN packets 192D. in FECN packets 147E. in DE packets 0Correct Answer:

158、 CSection: part 4ExplanationExplanation/Reference:BECN为后向拥塞指示，FECN为前向拥塞指示在帧中继网络里，前向显式拥塞通告（FECN）是发送端向接收端发送的降低数据传输速率的请求；后向显式拥塞通告（BECN）是接收端向发送端发送的降低数据传输速率的请求。当大量数据包到达而来不及处理时，FECN和BECN可以最大程度地减小数据包丢失的可能性。如果在通信电路中，发送端频繁地发送FECN帧，说明网络的可用带宽无法满足接收端的需要。同样的，如果接收端频繁地发送BECN帧，则说明网络的可用带宽不能满足发送端的需要。 -鸿鹄论坛http:/ 194w

159、hich command allows you to verify the encapsulation type (CISCO OR IETF) for a frame relay link?A. show frame-relay mapB. show frame-relay lmiC. show inter serialD. show frame-relay pvcCorrect Answer: ASection: part 4ExplanationExplanation/Reference:帧中继封装有两种cisco和ietf。默认是cisco。QUESTION 195It has bec

160、ome necessary to configure an existing serial interface to accept a second Frame Relay virtualcircuit.Which of the following processes are required to accomplish this task?(choose three)A. configure static frame relay map entries for each subinterface network.B. remove the ip address from the physic

161、al interfaceCCNA考试交流1000人QQ群：65330887 C. create the virtual interfaces with the interface commandD. configure each subinterface with its own IP addressE. disable split horizon to prevent routing loops between the subinterface networksF. encapsulate the physical interface with multipoint PPPCorrect A

162、nswer: BCDSection: part 4ExplanationExplanation/Reference:现存有一条帧中继需要加第二条帧中继，需要创建子接口，使用点对多点A 点对多点需要frame-relay map。这里是配置的点到点帧中继，不需要做mapE取消水平分割不是为了防止路由环路F用多点PPP封装物理端口,错 -鸿鹄论坛http:/ 196What occurs on a Frame Relay network when the CIR is exceeded?A. All TCP traffic is marked discard eligible.B. All UDP

163、 traffic is marked discard eligible and a BECN is sent.C. All TCP traffic is marked discard eligible and a BECN is sent.D. All traffic exceeding the CIR is marked discard eligible.Correct Answer: DSection: part 4ExplanationExplanation/Reference:当在一个帧中继网络中，CIR过载会发生什么？考点分析：这道题考的是帧中继。CIR是在帧中继技术中，是用户向帧中

164、继业务运营商申请的是承诺的信息速率。当信息速率突发量大于Bc+Be时，网络将丢弃帧。答案是D。D：所有超过的流量都丢弃。QUESTION 197Which two statements about using the CHAP authentication mechanism in a PPP link are true?(choosetwo)A. CHAP uses a two-way handshakeB. CHAP authentication periodically occurs after link establishmentC. CHAP has no protection fr

165、om playback attacksD. CHAP authentication is performed only upon link establishmentE. CHAP uses a three-way handshakeF. CHAP authentication passwords are sent in plaintextCorrect Answer: BESection: part 4ExplanationExplanation/Reference:PAP是两次握手机制；CHAP通过3次握手，CHAP定期发出挑战，以确保远程节点有有效的密码，CHAP采用MD5加密算法，而P

166、AP采用明文A.CHAP认证采用的是两次握手机制B.CHAP的认证是链路建立之后周期性发生的C.CHAP认证没有重放攻击的保护D.执行CHAP认证只是在链路建立的时候E.CHAP认证采用的三次握手机制F.CHAP认证的密码是采用明文的方式传输的 -鸿鹄论坛http:/ QUESTION 198Refer to the exhibit. Which statement describes DLCI 17? A. DLCI 17 describes the ISDN circuit between R2 and R3. B. DLCI 17 describes a PVC on R2. It ca

167、nnot be used on R3 or R1. C. DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3. D. DLCI 17 describes the dial-up circuit from R2 and R3 to the service provider. Correct Answer: CSection: part 4ExplanationExplanation/Reference:DLCI号是一个二层地址，和mac类似QUESTION 199What is the result of issui

168、ng the frame-relay map ip 192.168.1.2 202 broadcast command?A. defines the source IP address that is used in all broadcast packets on DLCI 202B. defines the DLCI that is used for all packets that are sent to the 192.168.1.2 IP addressC. defines the destination IP address that is used in all broadcas

169、t packets on DLCI 202D. defines the DLCI on which packets from the 192.168.1.2 IP address are receivedCorrect Answer: BSection: part 4ExplanationExplanation/Reference:题目是说， 出现frame-relay map ip 192.168.1.2 202 broadcast 结果是什么？broadcast支持广播,命令也有说明映射关系.翻译选项A说-定义源ip地址-显然不对。B说-定义这对所有发送到192.168.1.2的IP地址的

170、数据包使用的DLCI。是对的。而C应该是说-定义了目标IP地址，它是在所有的广播数据包上使用的DLCI 202。也说不通D说-定义的数据包的IP地址从192.168.1.2收到的DLCI。也不对。题目要求 frame-relay map ip 192.168.1.2 202 broadcast 的作用，而不是broadcast的作用，所以选C是片面的 -鸿鹄论坛http:/ 200Which PPP subprotocol negotiates authentication options?A. NCPB. LCPC. ISDNCCNA考试交流1000人QQ群：65330887 D. DLCI

171、E. SLIPCorrect Answer: BSection: part 4ExplanationExplanation/Reference:PPP的哪一个子协议能够协商验证：LCPQUESTION 201What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)A. They create split-horizon issues.B. They require a unique subnet within a routing domain.C. They emulate l

172、eased lines.D. They are ideal for full-mesh topologies.E. They require the use of NBMA options when using OSPF.Correct Answer: BCSection: part 5ExplanationExplanation/Reference:帧中继点到点子接口的特点？A：水平分割，错误。B：每个子接口需要一个独立的网段，正确。C：类似专线，正确。D:全网互联是理想拓扑，错误。通常是hub-spokeE：NBMA不支持OSPF，错误。考点分析：这道题考的是帧中继。帧中继网络中点到点子接

173、口的两个特性是需要一个唯一的子网和模拟了租用线路，答案是BC。 -鸿鹄论坛http:/ 202Which command can be used to verify the DLCI destination address in a Frame Relay static configuration?A. show frame-relay end-to-endB. show frame-relay mapC. show frame-relay lmiD. show frame-relay pvcCorrect Answer: BSection: part 5ExplanationExplanat

174、ion/Reference:QUESTION 203What is the purpose of the inverse ARP?A. to map a known DLCI to an IP addressB. to map a known IP address to a MAC addressC. to map known SPID to a MACaddressD. to map a known DLCI to a MAC addressE. to map a known IP address to a SPID.CCNA考试交流1000人QQ群：65330887 F. to map a

175、 known MAC address to an IP addressCorrect Answer: ASection: part 5ExplanationExplanation/Reference:在帧中继链路上， inverse ARP把DLCI号解析为IP地址QUESTION 204Two routers named Atlanta and Brevard are connected via their serial interfaces as illustrated, but they areunable to communicate. The Atlanta router is kn

176、own to have the correct configuration.Given the partial configurations, identify the fault on the Brevard router that is causing the lack ofconnectivity.A. incompatible IP addressB. insufficient bandwidthC. incorrect subnet maskD. incompatible encapsulationE. link reliability too lowF. IPCP closedCo

177、rrect Answer: DSection: part 5ExplanationExplanation/Reference:两个路由器端口封装不一致，一个是HDLC，一个是PPPQUESTION 205Refer to the exhibit. The company uses EIGRP as the routing protocol. What path will packets take from ahost on 192.168.10.192/26 network to a host on the LAN attached to router R1?CCNA考试交流1000人QQ群：

178、65330887 A. The path of the packets will be R3 to R2 to R1.B. The path of the packets will be R3 to R1 to R2.C. The path of the packets will be both R3 to R2 to R1 and R3 to R1.D. The path of the packets will be R3 to R1Correct Answer: DSection: part 5ExplanationExplanation/Reference:考点：考查EIGRP的路径选择

179、。从R3内网到R1的路径选择。链路的带宽一样，很明显是直接从R3到R1。 -鸿鹄论坛http:/ 206How does using the service password encryption command on a router provide additional security?A. by encrypting all passwords passing through the routerB. by encrypting passwords in the plain text configuration fileC. by requiring entry of encrypte

180、d passwords for access to the deviceD. by configuring an MD5 encrypted key to be used by routing protocols to validate routing exchangesE. by automatically suggesting encrypted passwords for use in configuring the routerCorrect Answer: BSection: part 5ExplanationExplanation/Reference:当使用这条命令后，所有在路由器

181、上配置是密码都被加密。A:所有通过路由器的密码都被加密。错误B：正确C：当访问设备时提供加密的密码。错误D：通过配置一个加密的密钥为路由协议使用，错误E：在用户配置路由器时自动建议加密密码。错误 -鸿鹄论坛http:/ QUESTION 207Refer to the exhibit. Switch port FastEthernet 0/24 on AlSwitch1 will be used to create an IEEE 802.1Q-complaint trunk to another switch. Based on the output shown, What is the r

182、eason the trunk does not form,even thought the proper cabling has been attached?A. VLANs have not been created yet.B. An IP address must be configured for the port.C. The port is currently configured for access mode.D. The correct encapsulation type has not been configured.E. The no shutdown command

183、 has not been entered for the port.Correct Answer: CSection: part 5ExplanationExplanation/Reference:由图中知道接口配置为access模式。A：vlan没有创建，错误B：一个IP地址被配置在端口，错误。C：端口当前处于access模式,正确。D：没有配置正确的封装模式，错误。E：接口没有no shutdown，错误。QUESTION 208Refer to the exhibit. In the Frame Relay network, which ip address would be assi

184、gned to the interfaces withpoint-to-poin PVCs?CCNA考试交流1000人QQ群：65330887 A. DLCI 16:192.168.10.1/24DLCI 17:192.168.10.2/24DLCI 99:192.168.10.3/24DLCI 28:192.168.10.4/24B. DLCI 16:192.168.10.1/24DLCI 17:192.168.11.1/24DLCI 99:192.168.10.2/24DLCI 28:192.168.11.2/24C. DLCI 16:192.168.10.1/24DLCI 17:192.

185、168.11.1/24DLCI 99:192.168.12.1/24DLCI 28:192.168.13.1/24D. DLCI 16:192.168.10.1/24DLCI 17:192.168.10.1/24DLCI 99:192.168.10.2/24DLCI 28:192.168.10.3/24Correct Answer: BSection: part 5ExplanationExplanation/Reference:虚链路为点对点，R2为子接口，每条虚链路各自一个网段QUESTION 209Refer to the exhibit.A new subnet with 60 hos

186、ts has been added to the network.Which subnet addressshould this network use to provide enough usable addresses while wasting the fewest addresses?CCNA考试交流1000人QQ群：65330887 A. 192.168.1.56/27B. 192.168.1.64/26C. 192.168.1.64/27D. 192.168.1.56/26Correct Answer: BSection: part 5ExplanationExplanation/

187、Reference:要考虑到图中已经用掉的网段QUESTION 210Refer to the exhibit. All of the routers in the network are configured with the ip subnet-zero command.Which network addresses should be used for Link A and Network A? (Choose two.)A. Network A - 172.16.3.48/26B. Network A - 172.16.3.128/25C. Network A - 172.16.3.1

188、92/26D. Link A - 172.16.3.0/30E. Link A - 172.16.3.40/30F. Link A - 172.16.3.112/30Correct Answer: BDSection: part 5ExplanationCCNA考试交流1000人QQ群：65330887 Explanation/Reference:配置了ip subnet-zero，可以使用全0网段。A：错误，120台主机，主机位至少为7位。B:正确，主机位32-25=7C：错误，主机位少于7位D：正确。因为使用了ip subnet-zero。E:错误，包含在172.16.3.32/27网段中

189、F:错误，包换在172.16.3.96/27网段中。QUESTION 211A router has learned three possible routes that could be used to reach a destination network. One route isfrom EIGRP and has a composite metric of 20514560. Another route is from OSPF with a metric of 782.The last is from RIPv2 and has a metric of 4. Which route

190、 or routes will the router install in the routingtable?A. the OSPF routeB. the EIGRP routeC. the RIPv2 routeD. all three routesE. the OSPF and RIPv2 routesCorrect Answer: BSection: part 5ExplanationExplanation/Reference:考点：考查路由条目进入路由表的原则：最优路由才能进入。去往同一目的的多条路由，先比较AD值，AD值小者优先；AD值一直则比较metric值。AD值：EIGRP

191、90OSPF 110RIP 120QUESTION 212A network administrator needs to allow only one Telnet connection to a router. For anyone viewing theconfguration and issuing the show run command, the password for Telnet access should be encrypted.Which set of commands will accomplish this task?A.service password-encry

192、ptionaccess-list 1 permit 192.168.1.0 0.0.0.255line vty 0 4loginpassword ciscoaccess-class 1B.enable password secretline vty 0loginpassword ciscoC.service password-encryptionline vty 1loginpassword ciscoD.service password-encryptionline vty 0 4loginpassword ciscoCorrect Answer: CSection: part 5Expla

193、nationCCNA考试交流1000人QQ群：65330887 Explanation/Reference:首先密码加密的命令为service password-encyption 题目要求只能有一个人连接懂啊路由器.那么我们就开启一个vty线路.然后设置password并且配置login就OK了 -鸿鹄论坛http:/ 213Refer to the exhibit.The speed of all serial links is E1 and the speed of the all Ethernet links is 100Mb/s.Astatic route will be estab

194、lished on the Manchester router to the direct traffic toward the internet over themost direct path available.What configuration on the Manchester router will establish a router toward theinternet for traffic that originates from workstation on the Manchester LAN?A. ip route 0.0.0.0 255.255.255.0 172

195、.16.100.2B. ip route 0.0.0.0 255.255.255.252 128.107.1.1C. ip route 0.0.0.0 0.0.0.0 128.107.1.1D. ip route 0.0.0.0 0.0.0.0 172.16.100.1E. ip route 0.0.0.0 255.255.255.255 172.16.100.2F. ip route 0.0.0.0 0.0.0.0 172.16.100.2Correct Answer: FSection: part 5ExplanationExplanation/Reference:设置静态路由QUESTI

196、ON 214Refer to the exhibit. The network administrator must establish a route by which London workstations canforward traffic to the Manchester workstations. What is the simplest way to accomplish this?CCNA考试交流1000人QQ群：65330887 A. Configure a dynamic routing protocol on London to advertise all routes

197、 to Manchester.B. Configure a dynamic routing protocol on London to advertise summarized routes to Manchester.C. Configure a dynamic routing protocol on Manchester to advertise a default route to the London router.D. Configure a static default route on London with a next hop of 10.1.1.1.E. Configure

198、 a static route on London to direct all traffic destined for 172.16.0.0/22 to 10.1.1.2.F. Configure Manchester to advertise a static default route to London.Correct Answer: ESection: part 5ExplanationExplanation/Reference:网络管理员必须建立一条目的从伦敦的网络转发到曼彻斯特的网络，最简单的方法是什么？ london 要访问manchester的主机，那么我们只要知道那个一个静

199、态路由讲数据包发出去就可以，通过子网汇总172.16.0.0/22可以代表manchester的3个网段。并且制定吓一跳为10.1.1.2 -鸿鹄论坛http:/ 215Refer to the exhibit.The network administrator requires easy configuration options and minimal routingprotocol traffic.Which two options provide adequate routing table information for traffic that passes betweenthe

200、two routers and satisfy the requests of the network administrator?(choose two)CCNA考试交流1000人QQ群：65330887 A. a dynamic routing procotol on InternetRouter to advertise summarized routers to CentralRouter.B. a dynamic routing procotol on CentralRouter to advertise summarized routers to InternetRouter.C.

201、 a static route on InternetRouter to direct traffic that is destined for 172.16.0.0/16 to CentralRouter.D. a dynamic routing procotol on InternetRouter to advertise all routes to CentralRouer.E. a dynamic routing procotol on CentralRouer to advertise all routes to InternetRouterF. a static,default r

202、oute on CentralRouter that directs traffic to InternetRouter.Correct Answer: CFSection: part 5ExplanationExplanation/Reference:题目要求用简单设置和最小路由流量的路由，所以采用静态路由或默认路由QUESTION 216What is the effect of using the service password-encryption command?A. nly passwords configured after the command has been enter

203、ed will be encrypted.B. Only the enable password will be encrypted.C. Only the enable secret password will be encryptedD. It will encrypt the secret password and remove the enable secret password from the configuration.E. It will encrypt all current and future passwords.Correct Answer: ESection: par

204、t 5ExplanationExplanation/Reference:E.加密已经有的和未来的密码QUESTION 217CCNA考试交流1000人QQ群：65330887 Refer to the exhibit.What is the effect of the configuration that is shown?A. It tells the router or switch to try establish an SSH connection first and if that fail to use telnet.B. Itconfigures a cisco network

205、device to use the SSH protocol on incoming communications via the virtualterminal ports.C. It allows seven failed login attempts before the VTY lines are temporarily shutdown.D. It configures the virtual terminal lines with the password 030752180500.E. It configures SSH globally for all logins.Corre

206、ct Answer: BSection: part 5ExplanationExplanation/Reference:此条命令允许5条SSH虚链路QUESTION 218Refer to the exhibit.What is the reason that the interface status is “administratively down,line protocoldown”?A. There is a mismatch in encapsulation typesB. The wrong type of cable is connected to the interfaceC.

207、 The interface has been configured with the shutdown commandD. The interface is not receiving any keepalivesE. The interface needs to be configured as a DTE deviceF. There is no encapsulation type configuredCorrect Answer: CSection: part 5ExplanationExplanation/Reference:注释：很明显是物理层的问题，以前题库中出现过此题，以前是

208、双选，现在变成单选了。仔细看一下B选项被舍弃了，因为这是串口，串口线只有一种两个端口，DTE和DCE，两头接错属于时钟配置错误是protocoldown。QUESTION 219Refer to the exhibit. When running OSPF, What would cause router A not to form an adjacency with routerCCNA考试交流1000人QQ群：65330887 B?A. The loopback addresses are on different subnets.B. The value of the dead time

209、rs on the router are different.C. Route summarization is enabled on both routers.D. The process indentifier on router A is different than the process identifier on router B.Correct Answer: BSection: part 5ExplanationExplanation/Reference:考点：考查OSPF邻居建立的条件。区域ID，hello周期，网段，认证等。A：loopback地址不同网段，错误B：hell

210、o的死亡时间不一样，正确C：开启了路由汇总，错误。这个没关系D：两端的路由进程不一致。错误。 -鸿鹄论坛http:/ 220Which two of these statements are true of IPv6 address representation? (Choose two.)A. There are four types of IPv6 addresses: unicast, multicast, anycast, and broadcast.B. A single interface may be assigned multiple IPv6 addresses of any

211、 type.C. Every IPv6 interface contains at least one loopback address.D. The first 64 bits represent the dynamically created interface ID.E. Leading zeros in an IPv6 16 bit hexadecimal field are mandatory.Correct Answer: BCSection: part 5ExplanationExplanation/Reference:每个Ipv6接口至少包括一个环回口地址：由mac地址转换不用

212、手动设置QUESTION 221Refer to the exhibit. A junior network administrator was given the task of configuring port security onSwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device isdetected, the port is to drop frames from this device. The administrator configur

213、ed the interface and testedit with successful pings from PC_A to RouterA, and then observes the output from these two showcommands.Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)CCNA考试交流1000人QQ群：65330887 A. Port security needs to be globally enabled.B. Po

214、rt security needs to be enabled on the interface.C. Port security needs to be configured to shut down the interface in the event of a violation.D. Port security needs to be configured to allow only one learned MAC address.E. Port security interface counters need to be cleared before using the show c

215、ommand.F. The port security configuration needs to be saved to NVRAM before it can become active.Correct Answer: BDSection: part 5ExplanationExplanation/Reference:题目大意是说在交换机A上端口f0/1上配置端口安全，目的是只允许 PC_A连接网络,其他设备连接上将被丢弃,并且PCA可以ping通RA,问在swa上必须改变的哪两个配置？考点分析：一般端口安全是在接口下配置的。如题，只允许PC_A连接交换机的Fa0/1口，所以应该限制接口

216、所允许的最大MAC地址数为1，即答案为BD。 -鸿鹄论坛http:/ 222Which set of commands is recommended to prevent the use of a hub in the access layer?A.switch(config-if)#switchport mode trunkswitch(config-if)#switchport port-security maximum 1B.switch(config-if)#switchport mode trunkswitch(config-if)#switchport port-security

217、mac-address 1C.switch(config-if)#switchport mode accessswitch(config-if)#switchport port-security maximum 1D.switch(config-if)#switchport mode accessswitch(config-if)#switchport port-security mac-address 1CCNA考试交流1000人QQ群：65330887 Correct Answer: CSection: part 5ExplanationExplanation/Reference:防止集线

218、器在接入层交换机上使用需要下列那个命令？考点分析：这道题考的是端口安全，怎么限制集线器的使用，即是只允许在交换机的接口上连一个终端设备。QUESTION 223What is known as one-to-nearest addressing in IPv6?A. global unicastB. anycastC. multicastD. unspecified addressCorrect Answer: BSection: part 5ExplanationExplanation/Reference:考点分析：这题考的是ipv6的基本的地址类型anycast，anycast指IPV6协

219、议中一个发送方同最近的一组接收方之间的通信。QUESTION 224What is the first 24 bits in a MAC address called?A. NICB. BIAC. OUID. VAICorrect Answer: CSection: part 5ExplanationExplanation/Reference:考点分析：Mac地址是由48个比特位组成的，前24位比特位是标准组织分给厂商的厂商代码，叫做组织惟一标识符，即OUI。后24个比特位是厂商分给各个网卡的，从而使各个网卡的物理地址具有惟一性。 -鸿鹄论坛http:/ 225Refer to the exh

220、ibit. Which subnet mask will place all hosts on Network B in the same subnet with the leastamount of wasted addresses?A. 255.255.255.0B. 255.255.254.0CCNA考试交流1000人QQ群：65330887 C. 255.255.252.0D. 255.255.248.0Correct Answer: BSection: part 5ExplanationExplanation/Reference:310个主机,那么2的X次方-2=310 QUESTI

221、ON 226Refer to the exhibit. What is the most appropriate summarization for these routes?A. 10.0.0.0 /21B. 10.0.0.0 /22C. 10.0.0.0 /23D. 10.0.0.0 /24Correct Answer: BSection: part 5ExplanationExplanation/Reference:考点分析：这道题考的是子网的聚合。10.0. 0 0 0 0 0 0 0 0 .010.0. 0 0 0 0 0 0 0 1 .010.0. 0 0 0 0 0 0 1 0

222、.010.0. 0 0 0 0 0 0 1 0 .0十进制转成二进制， 发现这四个网段前22位都是一致的，故选项 为B。QUESTION 227What is the difference between a CSU/DSU and a modem?A. A CSU/DSU converts analog signals from a router to a leased line; a modem converts analog signalsfrom a router to a leased line.B. A CSU/DSU converts analog signals from a

223、router to a phone line; a modem converts digital signalsfrom a router to a leased line.C. A CSU/DSU converts digital signals from a router to a phone line; a modem converts analog signalsfrom a router to a phone line.D. A CSU/DSU converts digital signals from a router to a leased line; a modem conve

224、rts digital signalsfrom a router to a phone line.Correct Answer: DSection: part 5ExplanationExplanation/Reference:csu/dsu和modem的不同点是什么？考点分析：这道题考的是CSU/DSU和modem的基本作用。CSU/DSU是把数字信号从路由转换到租用线路上，modem是进行数模转换的设备。CSU/DSU一般是专线，MODEN是将模拟信号与数字信号转换 -鸿鹄论坛http:/ QUESTION 228Which two are features of IPv6?(choose

225、 two)A. multicastB. broadcastC. allcastD. podcastE. anycastCorrect Answer: AESection: part 5ExplanationExplanation/Reference:A组播E任意播ipv6没有广播QUESTION 229Which two are advantages of static routing when compared to dynamic routing?(choose two)A. Security increases because only the network administrator

226、 may change the routing tables.B. Configuration complexity decreases as network size increases.C. Routing updates are automatically sent to neighbors.D. Route summarization iscompued automatically by the router.E. Routing traffic load is reduced when used in stub network linksF. An efficient algorit

227、hm is used to build routing tables,using automatic updates.G. Routing tables adapt automatically to topology changes.Correct Answer: AESection: part 5ExplanationExplanation/Reference:静态路由相比动态路由的好处QUESTION 230A network administrator needs to configure port security on a switch.which two statements ar

228、e true?(choose two)A. The network administrator can apply port security to dynamic access portsB. The network administrator can configure static secure or sticky secure mac addresses in the voicevlan.C. The sticky learning feature allows the addition of dynamically learned addresses to the runningco

229、nfiguration.D. The network administrator can apply port security to EtherChannels.E. When dynamic mac address learning is enabled on an interface,the switch can learn new addresses,upto the maximum defined.Correct Answer: CESection: part 5ExplanationExplanation/Reference:A.动态端口不能应用的端口安全B.in the vioc

230、e vlan不正确C.保存在running configuratin 正确D.EtherChannels 不能应用端口安全CCNA考试交流1000人QQ群：65330887 E自动学习mac地址可以学到所设置的最大数量，正确QUESTION 231What are three features of the IPV6 protocol?(choose three)A. complicated headerB. plug-and-playC. no broadcastsD. checksumsE. optional IPsecF. autoconfigurationCorrect Answer:

231、 BCFSection: part 5ExplanationExplanation/Reference:B即插即用C没广播地址F自动设置QUESTION 232Which command enables IPv6 forwarding on a cisco router?A. ipv6 hostB. ipv6 unicast-routing C. ipv6 localD. ipv6 neighborCorrect Answer: BSection: part 5ExplanationExplanation/Reference:在路由器上激活IPV6的命令QUESTION 233Which co

232、mmand encrypts all plaintext passwords?A. Router(config)#password-encryptionB. Router(config)#service password-encryptionC. Router#service password-encryptionD. Router# password-encryptionCorrect Answer: BSection: part 5ExplanationExplanation/Reference:QUESTION 234You have been asked to come up with

233、 a subnet mask that will allow all three web servers to be on thesame network while providing the max number of subnets.Which network address and subnet mask meetthis requirement?A. 192.168.252.8 255.255.255.248B. 192.168.252.8 255.255.255.252C. 192.168.252.16 255.255.255.240CCNA考试交流1000人QQ群：6533088

234、7 D. 192.168.252.0 255.255.255.252E. 192.168.252.16 255.255.255.252Correct Answer: ASection: part 5ExplanationExplanation/Reference:需要3个有效地址，块大小最小为8，还要提供最大数量的子网，所以用最块大小8，掩码255.255.255.248QUESTION 235Given an IP address 172.16.28.252 with a subnet mask of 255.255.240.0, what is the correct networkadd

235、res?A. 172.16.16.0B. 172.16.24.0C. 172.16.0.0D. 172.16.28.0Correct Answer: ASection: part 5ExplanationExplanation/Reference:求网段的网络地址，即此网段的第一个IP地址QUESTION 236Which IPv6 address is the equivalent of the IPv4 interface loopback address 127.0.0.1?A. :1B. :C. 2000:/3D. 0:/10Correct Answer: ASection: part

236、 5ExplanationExplanation/Reference:QUESTION 237You are working in a data center environment and are assigned the address range 10.188.31.0/23.You areasked to develop an IP addressing plan to allow the maximum number of subnets with as many as 30hosts each.Which IP address range meets these requireme

237、nts?A. 10.188.31.0/27B. 10.188.31.0/26C. 10.188.31.0/29D. 10.188.31.0/28E. 10.188.31.0/25Correct Answer: ASection: part 5ExplanationExplanation/Reference:30hosts已经包含网关，所以用27掩码正好满足。CCNA考试交流1000人QQ群：65330887 QUESTION 238Which parameter or parameters are used to calculate OSPF cost in cisco routers?A.

238、Bandwidth,Delay,and MTUB. BandwidthC. Bandwidth and MTUD. Bandwidth , MTU,Reliability,Delay,and LoadCorrect Answer: BSection: part 5ExplanationExplanation/Reference:OSPF使用带宽计算costQUESTION 239Why do large OSPF networks use a hierarchical design?(choose three)A. to confine network instability to singl

239、e areas of the network.B. to reduce the complexity of router configurationC. to speed up convergenceD. to lower costs by replacing routers with distribution layer switchesE. to decrease latency by increasing bandwidthF. to reduce routing overheadCorrect Answer: ACFSection: part 5ExplanationExplanati

240、on/Reference:A把网络的不稳定性局限于单个区域C加快汇聚F减少路由负载 -鸿鹄论坛http:/ 240The network administrator needs to address seven LANs. RIP version 1 is the only routing protocol in useon the network and subnet 0 is not being used. What is the maximum number of usable IP addresses thatcan be supported on each LAN if the or

241、ganization is using one class C address block?A. 8B. 6C. 30D. 32E. 14F. 16Correct Answer: CSection: part 5ExplanationExplanation/Reference:需要7个网段，加上不可用的0网段一共8个网段，每个网段有32个IP地址，去掉两个不可用的，答案30 -鸿鹄论坛http:/ 241In a switched environment, what does the IEEE 802.1Q standard describe?A. the operation of VTPCC

242、NA考试交流1000人QQ群：65330887 B. a method of VLAN trunkingC. an approach to wireless LAN communicationD. the process for root bridge selectionE. VLAN pruningCorrect Answer: BSection: part 5ExplanationExplanation/Reference:IEEE 802.1Q 是一个中继标准QUESTION 242What is a global command?A. a command that is set onc

243、e and affects the entire routerB. a command that is implemented in all foreign and domestic IOS versionsC. a command that is universal in application and supports all protocolsD. a command that is available in every release of IOS, regardless of the version or deployment statusE. a command that can

244、be entered in any configuration modeCorrect Answer: ASection: part 5ExplanationExplanation/Reference:global command 全局配置命令QUESTION 243When a router undergoes the exchange protocol within OSPF, in what order does it pass through eachstate?A. exstart stateexchange stateloading statefull stateB. exstar

245、t statefull stateloading stateexchange stateC. Loading stateexchange statefull stateexstart stateD. exstart stateloading stateexchange statefull stateCorrect Answer: ASection: part 5ExplanationExplanation/Reference:Exstart一旦DR和BDR选举产生，将交换LSA信息。在这个状态，路由器要决定用于数据交换的初始的数据库描述数据包的序列号，以保证路由器得到的永远是最新的链路状态信息

246、。同时，在这个状态路由器还必须决定路由器之间的主备关系，处于主控地位的路由器会向处于备份地位的路由器请求链路状态信息。Exchange在这个状态，OSPF路由交换DBD报文，DBS仅包含LSA（链路状态信息）和指定目录的LSDB（链路状态数据库）。每一个数据包都有一个数据包序列号。在这个状态，路由器还有可能向相邻路由器发送链路状态请求数据包来请求其相应数据。从这个状态开始，我们说OSPF处于Flood状态，报文会通过泛洪（Fooding） 到路由器的其他端口上。Loading在这个状态中，路由器将结束信息的交换，路由器会建立一个链路状态请求列表（Link-state RequestList）

247、和一个链路状态转发列表（Link-state Retransmission List）。所有的不完整的或废弃的信息都将放到请求列表，中所有的更新报文将被送到转发列表中，直到该报文得到回应。Full这是两个OSPF路由器建立交互关系的最后一个状态，在这时，建立起交互关系的路由器之间已经完成了数据库同步的工作，它们的链路状态数据库已经一致。 -鸿鹄论坛：http:/ QUESTION 244Which protocol can cause overload on a CPU of a managed device? A. Netflow B. WCCPC. IP SLAD. SNMPCorrect

248、 Answer: DSection: part 5ExplanationExplanation/Reference:http:/ 245What is the alert message generated by SNMP agents called ? (choose two)A. trapB. informC. getD. setCorrect Answer: ABSection: part 5ExplanationExplanation/Reference:SNMPv2 TRAPS or SNMPv3 INFORM messages are alerts generated by SNM

249、P agents to the NMS QUESTION 246 Which three features are added in SNMPv3 over SNMPv2 ? (choose three)A. Message IntegrityB. AuthenticationC. EncryptionD. Compression E. rror Detection Correct Answer: ABCSection: part 5ExplanationExplanation/Reference:QUESTION 247What are the Popular destinations fo

250、r syslog messages to be saved? (choose three)A. flashB. The logging buffer RAM C. The console terminal D. other terminals E. Syslog server Correct Answer: BCECCNA考试交流1000人QQ群：65330887 Section: part 5ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 248What level will be trapped if the administrator exe

251、cutes the command (choose four)router(cfg)#logging trap 4 A. EmergencyB. Notice C. AlertD. ErrorE. WarningCorrect Answer: ACDESection: part 5ExplanationExplanation/Reference:the command will trap the level 4 till the most severe level ie; warning till emergency. The syslog levels and descriptions ar

252、e listed below: Code Severity Description 0 Emergency system is unusable 1 Alert action must be taken immediately 2 Critical Critical conditions 3 Error Error conditions 4 Warning Warning conditions 5 Notice normal but significant condition. I 6 Informational Informational message 7 Debug Debug-leve

253、l message -鸿鹄论坛http:/ 249What are the three things that the Netflow uses to consider the traffic to be in a same flow ?(choose three)A. IP addressB. Interface name C. Port numbers D. L3 protocol typeE. mac addressCorrect Answer: ACDSection: part 5ExplanationExplanation/Reference:to categorize traffi

254、c a single flow, the source & destination IP ADDRESS, source & destination PORTNUMBERS and the L3 PROTOCOL TYPE should match. -鸿鹄论坛http:/ 250What are the benefit of using Netflow? (Choose three.) A. Network, Application & User MonitoringB. Network Planning C. Security Analysis D. Accounting/Billing

255、CCNA考试交流1000人QQ群：65330887 Correct Answer: ACDSection: part 5ExplanationExplanation/Reference:QUESTION 251Which one of these is a valid HSRP Virtual Mac Address? A. 0000.0C07.AC15 B. 0000.5E00.01A3C. 0007.B400.AE01D. 0007.5E00.B301 Correct Answer: ASection: part 6ExplanationExplanation/Reference:HSRP

256、 virtual Mac address 0000.0c07.acXX 开头，所以答案要选择0000.0c07.ac开头的选项QUESTION 252Which three are the components of SNMP? (Choose three) A. MIBB. managerC. supervisorD. agentE. setF. AESCorrect Answer: ABDSection: part 6ExplanationExplanation/Reference:QUESTION 253Syslog was configured with a level 3 trap.

257、 Which 3 types of logs would be generated (choose three) A. Emergencies B. Alerts C. Critical D. Errors E. Warnings Correct Answer: ABCSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛http:/ 254Which three features are added in SNMPv3 over SNMPv2? (choose three)CCNA考试交流1000人QQ群：65330887 A. Mess

258、age Integrity B. Compression C. Authentication D. Encryption E. Error Detection Correct Answer: ACDSection: part 6ExplanationExplanation/Reference:QUESTION 255In a GLBP network, who is responsible for the arp request? A. AVFB. AVGC. Active Router D. Standby Router Correct Answer: BSection: part 6Exp

259、lanationExplanation/Reference: -鸿鹄论坛http:/ 256Which is true about OSPF router-id?（choose two）A. It is used for type 1 router LSAB. Highest IP address of the loopback is usedC. router-id needs to be matched on ospf neighborsD. router-id is 16 bitCorrect Answer: ABSection: part 6ExplanationExplanation

260、/Reference:QUESTION 257In GLBP, which router will respond to client ARP requests?A. The active virtual gateway will reply with one of four possible virtual MAC addresses.B. All GLBP member routers will reply in round-robin fashion.C. The active virtual gateway will reply with its own hardware MAC ad

261、dress.D. The GLBP member routers will reply with one of four possible burned in hardware addressesCorrect Answer: ASection: part 6ExplanationExplanation/Reference:QUESTION 258CCNA考试交流1000人QQ群：65330887 Which statement describes VRRP object tracking?A. It monitors traffic flow and link utilization.B.

262、It ensures the best VRRP router is the virtual router master for the group.C. It causes traffic to dynamically move to higher bandwidth linksD. It thwarts man-in-the-middle attacks.Correct Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 259What are three benefits of GLBP? (Choose t

263、hree.)A. GLBP supports up to eight virtual forwarders per GLBP group.B. GLBP supports clear text and MD5 password authentication between GLBP group members.C. GLBP is an open source standardized protocol that can be used with multiple vendors.D. GLBP supports up to 1024 virtual routers.E. GLBP can l

264、oad share traffic across a maximum of four routersF. GLBP elects two AVGs and two standby AVGs for redundancy.Correct Answer: BDESection: part 6ExplanationExplanation/Reference:QUESTION 260Which three statements about HSRP operation are true? (Choose three.)A. The virtual IP address and virtual MA+K

265、44C address are active on the HSRP Master router.B. The HSRP default timers are a 3 second hello interval and a 10 second dead interval.C. HSRP supports only clear-text authentication.D. The HSRP virtual IP address must be on a different subnet than the routers interfaces on the sameLAN.E. The HSRP

266、virtual IP address must be the same as one of the routers interface addresses on the LAN.F. HSRP supports up to 255 groups per interface, enabling an administrative form of load balancing.Correct Answer: ABFSection: part 6ExplanationExplanation/Reference:QUESTION 261Which three statements about Sysl

267、og utilization are true? (Choose three.)A. Utilizing Syslog improves network performance.B. The Syslog server automatically notifies the network administrator of network problemsC. A Syslog server provides the storage space necessary to store log files without using router disk space.D. There are mo

268、re Syslog messages available within Cisco IOS than there are comparable SNMP trapmessages.E. Enabling Syslog on a router automatically enables NTP for accurate time stampingCCNA考试交流1000人QQ群：65330887 F. A Syslog server helps in aggregation of logs and alerts.Correct Answer: CDFSection: part 6Explanat

269、ionExplanation/Reference: -鸿鹄论坛：http:/ 262A network administrator enters the following command on a router: logging trap 3. What are three message types that will be sent to the Syslog server? (Choose three.)A. informationalB. emergencyC. warningD. criticalE. debugF. errorCorrect Answer: BDFSection:

270、 part 6ExplanationExplanation/Reference:QUESTION 263What is the default Syslog facility level?A. local4B. local5C. local6D. local7Correct Answer: DSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 264What command instructs the device to timestamp Syslog debug messages in milliseconds?A.

271、service timestamps log datetime localtimeB. service timestamps debug datetime msecC. service timestamps debug datetime localtimeD. service timestamps log datetime msecCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 265What is the cause of the Syslog output messages?CCNA考试交流

272、1000人QQ群：65330887 A. The EIGRP neighbor on Fa0/1 went down due to a failed link.B. The EIGRP neighbor connected to Fa0/1 is participating in a different EIGRP process, causing theadjacency to go down.C. A shut command was executed on interface Fa0/1, causing the EIGRP adjacency to go down.D. Interfa

273、ce Fa0/1 has become error disabled, causing the EIGRP adjacency to go down.Correct Answer: CSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 266Which three statements about the features of SNMPv2 and SNMPv3 are true? (Choose three.)A. SNMPv3 enhanced SNMPv2 security featuresB. SNMPv3 ad

274、ded the Inform protocol message to SNMP.C. SNMPv2 added the Inform protocol message to SNMP.D. SNMPv3 added the GetBulk protocol messages to SNMP.E. SNMPv2 added the GetBulk protocol message to SNMP.F. SNMPv2 added the GetNext protocol message to SNMP.Correct Answer: ACESection: part 6ExplanationExp

275、lanation/Reference:QUESTION 267What are three reasons to collect Netflow data on a company network? (Choose three.)A. To identify applications causing congestionB. To authorize user network accessC. To report and alert link up / down instances.D. To diagnose slow network performance, bandwidth hogs,

276、 and bandwidth utilization.E. To detect suboptimal routing in the network.F. To confirm the appropriate amount of bandwidth that has been allocated to each Class of Service.Correct Answer: ADFSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 268What Netflow component can be applied to an

277、 interface to track IPv4 traffic?A. flow monitorCCNA考试交流1000人QQ群：65330887 B. flow recordC. flow samplerD. flow exporterCorrect Answer: ASection: part 6ExplanationExplanation/Reference:QUESTION 269What Cisco IOS feature can be enabled to pinpoint an application that is causing slow networkperformance

278、?A. SNMPB. NetflowC. WCCPD. IP SLACorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 270What command visualizes the general NetFlow data on the command line?A. show ip flow exportB. show ip flow top-talkersC. show ip cache flowD. show mls samplingE. show mls netflow ipCorrect

279、Answer: CSection: part 6ExplanationExplanation/Reference:QUESTION 271What are three values that must be the same within a sequence of packets for Netflow to consider them anetwork flow? (Choose three.)A. source IP addressB. source MAC addressC. egress interfaceD. ingress interfaceE. destination IP a

280、ddressF. IP next-hopCorrect Answer: ADESection: part 6ExplanationCCNA考试交流1000人QQ群：65330887 Explanation/Reference:QUESTION 272What are three factors a network administrator must consider before implementing Netflow in the network?(Choose three.)A. CPU utilizationB. where Netflow data will be sentC. n

281、umber of devices exporting Netflow dataD. port availabilityE. SNMP versionF. WAN encapsulationCorrect Answer: ABCSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 273What are two enhancements that OSPFv3 supports over OSPFv2? (Choose two.)A. It requires the use of ARP.B. It can support m

282、ultiple IPv6 subnets on a single link.C. It supports up to 2 instances of OSPFv3 over a common link.D. It routes over links rather than over networks.Correct Answer: BDSection: part 6ExplanationExplanation/Reference:QUESTION 274What authentication type is used by SNMPv2?A. HMAC-MD5B. HMAC-SHAC. CBC-

283、DESD. community stringsCorrect Answer: DSection: part 6ExplanationExplanation/Reference:SNMPV2使用的是那一种认证类型？QUESTION 275What parameter can be different on ports within an EtherChannel?A. speedB. DTP negotiation settingsC. trunk encapsulationD. duplexCCNA考试交流1000人QQ群：65330887 Correct Answer: BSection:

284、part 6ExplanationExplanation/Reference: 在EtherChannel中，端口上那一项参数可以配置不一样？ QUESTION 276A network administrator creates a layer 3 EtherChannel, bundling four interfaces into channel group 1. On what interface is the IP address configured?A. the port-channel 1 interfaceB. the highest number member interf

285、aceC. all member interfacesD. the lowest number member interfaceCorrect Answer: ASection: part 6ExplanationExplanation/Reference: 管理员建立了一个3层EtherChannel，把4个端口聚合到了 channel group 1，在哪一个端口设置IP地址？QUESTION 277What command sequence will configure a router to run OSPF and add network 10.1.1.0 /24 to area 0

286、?A. router ospf area 0 network 10.1.1.0 255.255.255.0 area 0B. router ospf network 10.1.1.0 0.0.0.255C. router ospf 1 network 10.1.1.0 0.0.0.255 area 0D. router ospf area 0 network 10.1.1.0 0.0.0.255 area 0E. router ospf network 10.1.1.0 255.255.255.0 area 0F. router ospf 1 network 10.1.1.0 0.0.0.25

287、5Correct Answer: CSection: part 6ExplanationExplanation/Reference:QUESTION 278Refer to the exhibit.CCNA考试交流1000人QQ群：65330887 If the router Cisco returns the given output and has not had its router ID set manually, what value willOSPF use as its router ID?A. 192.168.1.1B. 172.16.1.1C. 1.1.1.1D. 2.2.2

288、.2Correct Answer: DSection: part 6ExplanationExplanation/Reference:router id 优先选择loopback 端口中的最大IP地址QUESTION 279What OSPF command, when configured, will include all interfaces into area 0?A. network 0.0.0.0 255.255.255.255 area 0B. network 0.0.0.0 0.0.0.0 area 0C. network 255.255.255.255 0.0.0.0 are

289、a 0D. network all-interfaces area 0Correct Answer: ASection: part 6ExplanationExplanation/Reference:哪一个OSPF命令可以把所有端口划分进area 0？QUESTION 280Which statement describes the process ID that is used to run OSPF on a router ?A. It is locally significant and must be the same throughout an areaB. It is global

290、ly significant and is used to represent the AS numberC. It is locally significant and is used to identify an instance of the OSPF databaseD. It is globally significant and is used to identify OSPF stub areasCorrect Answer: CSection: part 6ExplanationExplanation/Reference:OSPF ProcessID只是本地有效，用来在本地区分

291、不同的OSPF进程QUESTION 281CCNA考试交流1000人QQ群：65330887 Refer to the exhibit. What set of commands was configured on interface Fa0/3 to produce the given theoutput?A. interface FastEthernet 0/3 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switchport mode trunkB. interface FastEthernet

292、0/3 Channel-group 2 mode passive Switchport trunk encapsulation dot1q Switchport mode trunkC. interface FastEthernet 0/3 Channel-group 2 mode on Switchport trunk encapsulation dot1q Switchport mode trunkD. interface FastEthernet 0/3 Channel-group 2 mode active Switchport trunk encapsulation dot1q Sw

293、itchport mode trunkCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 282What SNMP message alerts the manager to a condition on the network?A. responseB. trapC. cetD. captureCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 283CCNA考试交流1000人QQ群：65330887

294、Refer to the exhibit.If the devices produced the given output,what is the cause of the EtherChannelproblem?A. There is a speed mismatch between SW1s Fa0/1 and SW2s Fa0/1 interfaces.B. There is an MTU mismatch between SW1s Fa0/1 and SW2s Fa0/1 interfaces.C. There is an encapsulation mismatch between

295、SW1s Fa0/1 and SW2s Fa0/1 interface.D. SW1s Fa0/1 interface is administratively shut down.Correct Answer: ASection: part 6ExplanationExplanation/Reference:EtherChannel中两个端口需要speed一致QUESTION 284What are two benefits of using a single OSPF area network design?(choose two)A. it reduces the number of re

296、quired OSPF neighbor adjacenciesB. It reduces the types of LSAs that are generatedC. It is less CPU intensive for routers in the single areaD. It increases LSA response times.E. It removes the need for virtual linksCorrect Answer: BESection: part 6ExplanationExplanation/Reference:使用单区域OSPF的好处？减少了LSA

297、的种类不需要虚链路QUESTION 285CCNA考试交流1000人QQ群：65330887 Refer to the exhibit .A network administrator is configuring an EtherChannel between SW1 and SW2 . TheSW1 configuration is show.What is the correct configuration for SW2?A. Interface FastEthernet 0/1 Channel-group 1 mode active Switchport trunk encapsul

298、ation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-group 1 mode active Switchport trunk encapsulation dot1q Switchport mode trunkB. Interface FastEthernet 0/1 Channel-group 1 mode passive Switchport trunk encapsulation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-

299、group 1 mode passive Switchport trunk encapsulation dot1q Switchport mode trunkC. Interface FastEthernet 0/1 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switch

300、port mode trunkD. Interface FastEthernet 0/1 Channel-group 1 mode auto Switchport trunk encapsulation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-group 1 mode auto Switchport trunk encapsulation dot1q Switchport mode trunkCCNA考试交流1000人QQ群：65330887 Correct Answer: CSection: part 6E

301、xplanationExplanation/Reference:一端已经设置为auto模式，另一端必须设置为desirable模式才能协商成为trunk。QUESTION 286Refer to the exhibit. Complete the network diagram by dragging the correct device name or description tothe correct location. Not all the names or descriptions will be used.Select and Place:CCNA考试交流1000人QQ群：65330887