《CCNA（200-125）题库V3.0（2016.08.30）选择题》由会员分享，可在线阅读，更多相关《CCNA（200-125）题库V3.0（2016.08.30）选择题（167页珍藏版）》请在金锄头文库上搜索。
1、CCNA（200-125）题库）题库V3.0(2016.10.11)Number: 200-125Passing Score: 810Time Limit: 120 minFile Version: v3.0CCNA（200-125）题库）题库V3.0?（?（2016.10.11） CCNA 考试交流QQ群 :CCNA 最新题库最新题库/最新战报最新战报 发布区：发布区： http:/ 鸿鹄论坛鸿鹄论坛 http:/思科华为考试报名全国优惠，报名请联系鸿鹄全国区客服 QQ 613523101QQ 613523103QQ 613523105QQ 613523107QQ 613523108QQ 6
2、13523109鸿鹄论坛官方淘宝店铺：http:/ t t p :/b b s .h h 010.c o m /190906300Exam AQUESTION 1Refer to the exhibit. What will Router1 do when it receives the data frame shown? (Choose three.)A. Router1 will strip off the source MAC address and replace it with the MAC address 0000.0c36.6965.B. Router1 will strip
3、off the source IP address and replace it with the IP address 192.168.40.1.C. Router1 will strip off the destination MAC address and replace it with the MAC address0000.0c07.4320.D. Router1 will strip off the destination IP address and replace it with the IP address of 192.168.40.1.E. Router1 will fo
4、rward the data packet out interface FastEthernet0/1.F. Router1 will forward the data packet out interface FastEthernet0/2.Correct Answer: ACFSection: part 1ExplanationExplanation/Reference:考点：数据通信过程源目IP/mac地址的变化。 Age(min)下面- 为本地端口A：源MAC替换为f0/2口的mac，正确B：替换源IP，错误C：替换目的mac为下一跳入口的MAC，正确D：替换目的IP，错误E：从f0/
5、1转发数据，错误F：正确鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / -鸿鹄论坛http:/ 2Refer to the exhibit. Which three statements correctly describe Network Device A? (Choose three.)A. With a network wide mask of 255.255.255.128, each interface does not requ
6、ire an IP address.B. With a network wide mask of 255.255.255.128, each interface does require an IP address on a uniqueIP subnet.C. With a network wide mask of 255.255.255.0, must be a Layer 2 device for the PCs to communicatewith each other.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D. With a network w
7、ide mask of 255.255.255.0, must be a Layer 3 device for the PCs to communicatewith each other.E. With a network wide mask of 255.255.254.0, each interface does not require an IP address.Correct Answer: BDESection: part 1ExplanationExplanation/Reference:如图，哪三个选项正确的描述了网络设备A？考点分析：这题考的是子网掩码的问题。使用掩码255.2
8、55.255.128和255.255.255.0时，两台主机的IP地址属于两个网段，所以A要用路由器（三层设备）才能通信，所以A设备每个接口需要设置IP地址。使用掩码255.255.254.0是，两台主机属于同一个网段，所以A要使用switch或hub就能通信，且不需要ip地址QUESTION 3Which layer in the OSI reference model is responsible for determining the availability of the receivingprogram and checking to see if enough resources
9、exist for that communication?A. transportB. networkC. presentationD. sessionE. applicationCorrect Answer: ESection: part 1ExplanationExplanation/Reference:OSI中那一层负责决定一个进程的可用性并查看是否有可用的资源分给该进程？考点分析：OSI七层参考模型中负责决定一个进程的可用性并查看是否有可用的资源分给该进程是第七层应用层QUESTION 4Which of the following describes the roles of dev
10、ices in a WAN? (Choose three.)A. A CSU/DSU terminates a digital local loopB. A modem terminates a digital local loopC. A CSU/DSU terminates an analog local loopD. A modem terminates an analog local loopE. A router is commonly considered a DTE deviceCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h
11、010.c o m /F. A router is commonly considered a DCE deviceCorrect Answer: ADESection: part 1ExplanationExplanation/Reference:SU/DSU是用于连接终端和数字专线的设备，属于DCE设备modem用于数字信号和模拟信号的转换，属于DCE设备路由器一般是DTE设备DTE和DCE的区别;DCE是数据通信设备，如MODEM，连接DTE设备的通信设备。一般广域网常用的DCE设备有：CSU/DSU,广域网交换机，MODEM。DTE,DCE的之间的区别是DCE一方提供时钟，DTE不提供
12、时钟，但它依靠DCE提供的时钟工作，比如PC机和MODEM之间。数据传输通常是经过DTE-DCE，再经过DCE-DTE的路径。其实对于标准的串行端口，通常从外观就能判断是DTE还是DCE，DTE是针头（俗称公头),DCE是孔头，（俗称母头），这样两种接口才能接再一起。ROUTER之间用串口的时候一般无所谓哪头是DCE，哪头是DTE。有的是默认规定好的，比如modem永远是DCE，与其相连的电信程控交换机则为DCE，配的时候DCE不设置clock rate的话，无法通信。QUESTION 5Refer to the exhibit, Host A pings interface S0/0 on
13、router 3, what is the TTL value for that ping?A. 253B. 252C. 255D. 254Correct Answer: ASection: part 1ExplanationExplanation/Reference:默认是255，每经过一个路由器减1鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 6A network administrator is verifying the configuration of a newly installed host by establishing an
14、 FTPconnection to a remote server. What is the highest layer of the protocol stack that the nework administratoris using for this operation?A. applicationB. presentationC. sessionD. transportE. internetF. data linkCorrect Answer: ASection: part 1ExplanationExplanation/Reference:HTTP、FTP、TELNET、SNMP、
15、DNS等服务都是在应用层QUESTION 7Refer to the exhibit. After HostA pings HostB, which entry will be in the ARP cache of HostA to support thistransmission?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A.B.C.D.E.F.Correct Answer: DSection: part 1ExplanationExplanation/Reference:问：当主机A ping 主机B之后，
16、下面那个ARP缓存条目会支持此次通讯？考题分析：这道题考的是局域网ARP的请求。Host A要ping Host B，首先Host A需要封装ping包，而封装ping包需要Host A和Host B的二、三层地址的信息。然而Host A不知道Host B的二层地址，这样Host A就会鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /向局域网发送Arp请求，来请求Host B的二层地址。网关收到Host A的Arp请求后，发现Host B是其他网段的地址，这样网关会启用代理Arp的功能，将自己的二层地址应答给Host A。Host A收到应答包后会对本地的ARP缓
17、存进行更新，将应答方的IP和MAC地址存储在ARP缓存中，同时完成ping包的封装。网关在收到ping包后会自动完成二层地址的重定向。所以答案是D。此题考查的是pc的arp表，不要和包的目的地址、源地址弄混了。在以太网寻址的时候，依靠的事MAC地址，每一个网段都需要寻找到自己的下一条（gateway）以自己的MAC作为source gateway的mac作为destination封装Frame，然后将Frame转发出去 ，但是数据包是不会进行变化的，也就是packet的头部信息不会发生改变。所以IP包头的source和des地址是不会变更的 -鸿鹄论坛http:/ 8A network int
18、erface port has collision detection and carrier sensing enabled on a shared twisted pairnetwork. From this statement, what is known about the network interface port?A. This is a 10Mb/s switch port.B. This is a 100Mbs switch port.C. This is an Ethernet port operating at half duplex.D. This is an Ethe
19、rnet port operating at full duplex.E. This is a port on a network interface card in a PC.Correct Answer: CSection: part 1ExplanationExplanation/Reference:考点： collision detection and carrier sensing 载波冲突检测。 CSMA/CD载波侦听多路访问，是在传统的半双工、共享以太网中的一种技术。现在使用的交换机都是全双工。综上所述选CQUESTION 9A receiving host computes t
20、he checksum on a frame and determines that the frame is damaged.Theframe is then discarded.At which OSI layer did this happen?A. sessionB. networkC. physicalD. data linkE. transportCorrect Answer: DSection: part 1ExplanationExplanation/Reference:帧的处理是在二层QUESTION 10Which two correctly describe steps
21、in the OSI data encapsulation process? (Choose two.)A. The transport layer divides a data stream into segments and may add reliability and flow controlinformation.B. The data link layer adds physical source and destination addresses and an FCS to the segment.C. Packets are created when the network l
22、ayer encapsulates a frame with source and destination hostaddresses and protocol-related control information.D. Packets are created when the network layer adds Layer 3 addresses and control information to asegment.E. The presentation layer translates bits into voltages for transmission across the ph
23、ysical link.Correct Answer: ADCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Section: part 1ExplanationExplanation/Reference:传输层将数据分段，并且加入flow control等信息。在网络层就将数据进行打包，并加上ip包头，链路层。将包进行成Frame，封装二层头部 -鸿鹄论坛http:/ 11Refer to the graphic.Host A is communicating with the seiver. What will be
24、 the source MAC address of theframes received by Host A from the server?A. the MAC address of the seiver network interfaceB. the MAC address of host A C. the MAC address of router interface e 1D. the MAC address of router interface e0Correct Answer: DSection: part 1ExplanationExplanation/Reference:h
25、ost A收到server的帧的源mac地址是host A的网关的mac。QUESTION 12Refer to the exhibit.What two results would occur if the hub were to be replaced with a switch that isconfigured with one Ethernet VLAN?(choose two)鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. The number of collision domains would decrease.B. The number o
26、f collision domains would increase.C. The number of broadcast domains would remain the same.D. The number of collision domains would remain the same.E. The number of broadcast domains would increase.Correct Answer: BCSection: part 1ExplanationExplanation/Reference:hub不可以隔离冲突域，所有端口同一个冲突域中 ， 交换机可以隔离冲突
27、域，每个端口在不同冲突域中，故换成交换机冲突域个数会增加，大小会减小，而hub 交换机都不可隔离广播域 所有端口都在同一个广播域中，故广播域数量不变A 冲突域数量减少B 冲突域数量增加 C 广播域数量不变D 冲突域数量不变E 广播域数量增加QUESTION 13Which three statements accurately describe layer 2 Ethernet switches?(choose three)A. Microsegmentation decreases the number of collisions on the network.B. if a switch
28、receives a frame for an unkown destination,it uses ARP to resolve the address.C. Spanning Tree Protocol allows switches to automatically share vlan information.D. In a properly functioning network with redundant switched paths,each switched aegment will containone root bridge with all its ports in t
29、he forwarding state.All other switches in that broadcast domain willhave only one root port.E. Establishing vlans increases the number of broadcast domains.F. Switches that are configured with vlans make forwarding decisions based on both layer 2 and layer 3address information.Correct Answer: ADESec
30、tion: part 1ExplanationExplanation/Reference:CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A为分割减少冲突的数量，这里是冲突并不是冲突域，正确B收到未知目的帧会产生泛洪C这是vtp的特性，不是stp的D在一个能够正常运行的网络冗余交换路径，每一个交换网段将包括一个跟桥。所有端口都在转发状态，其他本广播域的交换机有一个根端口。正确E.VLAN增加了广播域。正确F vlan使转发基于二层和三层IP。题目要求对2层交换机的描述，二层交换机不能基于3层IP转发QUESTION 1
31、4Where does routing occur within the DoD TCP/IP reference model?A. applicationB. internetC. networkD. transportCorrect Answer: BSection: part 1ExplanationExplanation/Reference:路由发生在DOD模型的哪一层？注意是DOD模型不是OSI模型QUESTION 15Which destination addresses will be used by Host A to send data to Host C? (Choose
32、two.)鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. the IP address of Switch 1B. the MAC address of Switch 1C. the IP address of Host CD. the MAC address of Host CE. the IP address of the routers E0 interfaceF. the MAC address of the routers E0 interfaceCorrect Answer: CFSection: part 1ExplanationExplana
33、tion/Reference:数据包在转发的过程中，源目IP不变，源目MAC会变化。目的地不在同一个网段，数据先发送到网关。QUESTION 16For what two purposes does the Ethernet protocol use physical addresses? (Choose two.)A. to uniquely identify devices at Layer 2B. to allow communication with devices on a different networkC. to differentiate a Layer 2 frame fr
34、om a Layer 3 packetD. to establish a priority system to determine which device gets to transmit firstE. to allow communication between different devices on the same networkF. to allow detection of a remote device when its physical address is unknownCorrect Answer: AESection: part 1ExplanationCCNA 题库
35、战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Reference:考点：考查mac地址的作用。A：在二层唯一确定一台设备，正确B：是设备在不同的网络中通信，错误，不同网络通信需要通过IP地址确定。C：区别二层和三层帧，错误。D：确定设备的优先级，错误。没有这个功能。E：是同一网络的不同设备可以通信，正确F：当不知道远程设备的物理地址时可以查询，错误。不能跨网段。 -鸿鹄论坛http:/ 17Refer to the exhibit. Based on the information given. Which
36、 switch will be elected root bridge and why?A. Switch A ,because it has the lowest MAC addressB. Switch C,because it has the lowest priorityC. Switch B,because it has the highest MAC addressD. Switch C,because it is the most centrally located switchE. Switch A,because it is the most centrally locate
37、d switchF. Switch D,because it has the highest priorityCorrect Answer: BSection: part 1ExplanationExplanation/Reference:选跟桥先比较优先级，优先选择priority数值小的。优先级相同再比较mac地址大小。QUESTION 18What value is primarily used to determine which port becomes the root port on each nonroot switch in aspanning-tree topology?A
38、. lowest port MAC addressB. port priority number and MAC address.C. VTP revision numberD. highest port priority number.E. path costCorrect Answer: ESection: part 1ExplanationExplanation/Reference:此处为选举跟端口，先要比较到跟桥的cost。如果是选跟桥，先比较优先级鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 19Refer to the exhibi
39、t.Switch-1 needs to send data to a host with a MAC address of 00b0.d056.efa4.Whatwill Switch-1 do with this data?A. switch-1 will drop the data because it dose not have an entry for that MAC addressB. switch-1 will flood the data out all of its port from which the data originatedC. switch-1 will for
40、ward the data to its default gatewayD. switch-1 will send an ARP request out all its ports except the port from which the data originatedCorrect Answer: BSection: part 1ExplanationExplanation/Reference:答案：B 交换机根据收到数据帧中的源MAC地址建立该地址同交换机端口的映射，并将其写 入MAC地址表中。交换机将数据帧中的目的MAC地址同已建立的MAC地址表进行比较，以决定由哪个端口进行转发。如
41、数据帧中的目的MAC地址不在MAC地址表中，则发生泛洪。泛洪（flooding） 交换机和网桥使用的一种数据流传递技术，将某个接口受到的数据流从除该核接口之外的所有接口发送出去。根据下图，Switch-1需要往一台MAC地址为00b0.d056.efa4的主机发数据，Switch-1会如何处理这些数据?A. Switch-1 will drop the data because it does not have an entry for that MAC address.(Switch-1会丢弃该数据，因为它没有该MAC地址条目)B. Switch-1 will flood the data
42、out all of its ports except the port from which the data originated.(Switch-1会泛洪该数据到所有的接口，除了该数据的源接口)C. Switch-1 will send an ARP request out all its ports except the port from which the data originated.(Switch-1会发送ARP请求到所有的接口，除了该数据的源接口)D. Switch-1 will forward the data to its default gateway.(Switch
43、-1会往默认网关发送该数据)QUESTION 20What is the function of the command switchport trunk native vlan 999 on a switch?A. It designates VLAN 999 for untagged traffic.B. It blocks VLAN 999 traffic from passing on the trunk.C. It creates a VLAN 999 interface.D. It designates VLAN 999 as the default for all unkown
44、tagged traffic.Correct Answer: ASection: part 1ExplanationCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Reference:设置vlan999为本征vlan，交换机默认本征vlan为vlan1.此题正确答案为A.本征VLAN（Native Vlan）分配给 802.1Q中继端口。802.1Q中继端口支持来自多个VLAN的流量（有标记流量），也支持来自VLAN以外的流量（无标记流量）。802.1Q中继端口会将无标记流量发送到本征VLAN。
45、QUESTION 21Which two protocols are used by bridges and/or switches to prevent loops in a layer 2 network? (Choosetwo.)A. 802.1dB. VTPC. 802.1qD. STPE. SAPCorrect Answer: ADSection: part 1ExplanationExplanation/Reference:考点分析：这道题考的是生成树协议。能防止二层环路的当然是生成树协议，生成树协议有STP（802.1d）和RSTP（802.1w）。QUESTION 22Whic
46、h switch would STP choose to become the root bridge in the selection process?A. 32768: 11-22-33-44-55-66B. 32768: 22-33-44-55-66-77C. 32769: 11-22-33-44-55-65D. 32769: 22-33-44-55-66-78Correct Answer: ASection: part 1ExplanationExplanation/Reference:stp选举跟桥首先比较优先级大小.然后比较mac地址大小QUESTION 23A switch is
47、 configured with all ports assigned to vlan 2 with full duplex FastEthernet to segment existingdepartmental traffic. What is the effect of adding switch ports to a new VLAN on the switch?A. More collision domains will be created.B. IP address utilization will be more efficient.C. More bandwidth will
48、 be required than was needed previously.D. An additional broadcast domain will be created.Correct Answer: DSection: part 1ExplanationExplanation/Reference:一个交换机把所有的端口以全双工的模式加到一个vlan里，把一个端口加入到一个新的vlan里会对此交换机产生什么影响？考点分析：这道题考的是vlan的概念。将一个交换的端口加入一个新vlan代表一个新的广播域产生了，因为vlan有隔离广播域的作用鸿鹄论坛出品：h t t p :/b b s
49、.h h 010.c o m /QUESTION 24What are three benefits of implementing vlans?(choose three)A. A more efficient use of bandwidth can be achieved allowing many physical groups to use the samenetwork infrastructureB. Broadcast storms can be mitigated by decreasing the number of broadcast domains,thus incre
50、asingtheir size.C. A higher level of network security can be reached by separating sensitive data traffic from othernetwork traffic.D. Port-based vlans increase switch-port use efficient,thanks to 802.1Q trunksE. A more efficient use of bandwidth can be achieved allowing many logical networks to use
51、 the samenetwork infrastructure.F. Broadcast storms can be mitigated by increasing the number of broadcast domains,thus reducing theirsize.G. VLANs make it easier for IT staff to configure new logical groups,because the vlans all belong to thesame broadcast domain. Correct Answer: CEFSection: part 1
52、ExplanationExplanation/Reference:A错，不是通过物理上组合，而是逻辑上的B错，应该是增加广播域的数量C一个更高的层次网络安全可以实现,以分离的敏感数据从其他网络。正确D thanks to 802.1Q trunks不正确E正确 ，logical是逻辑的意思F正确G错误，描述的是VTP的作用而不是vlan的作用 -鸿鹄论坛http:/ 25Which IEEE standard protocol is initiated as a result of successful DTP completion in a switch overFastEthernet?A
53、. 802.3adB. 802.1wC. 802.1QD. 802.1dCorrect Answer: CSection: part 1ExplanationExplanation/Reference:动态中继协议DTP，是 VLAN 组中思科的私有协议，主要用于协商两台设备间链路上的中继过程及中继封装 802.1Q 类型。QUESTION 26Which of the following are benefits of VLANs? (Choose three.)A. They increase the size of collision domains.B. They allow logi
54、cal grouping of users by function.C. They can enhance network security.D. They increase the size of broadcast domains while decreasing the number of collision domains.E. They increase the number of broadcast domains while decreasing the size of the broadcast domains.F. They simplify switch administr
55、ation.Correct Answer: BCECCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Section: part 1ExplanationExplanation/Reference:考查VLAN的特点A：增加冲突域的大小，错误B：允许逻辑划分网段，正确C：增强网络安全，正确。不同vlan不能直接通信。D：当减少冲突域时增加广播域的大小。错误E：减少广播域的大小时增加了广播域个数。正确。F:简化交换机管理。答非所问。 -鸿鹄论坛http:/ 27Refer to the exhibit.A technicia
56、n has installed SwithchB and needs to configure it for remote access fromthe management workstation connected SwitchA Which set of commands is required to accomplish thistask?A. SwitchB(config)#interface FastEthernet 0/1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#no shutdow
57、nB. SwitchB(config)#ip default-gateway 192.168.8.254SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#no shutdownC. SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#ip default-gateway 192.168.8.2
58、54 255.255.255.0SwitchB(config)#no shutdownD. SwitchB(config)#ip default-network 192.168.8.254SwitchB(config)#interface vlan 1SwitchB(config)#ip address 192.168.8.252 255.255.255.0SwitchB(config)#no shutdownCorrect Answer: BSection: part 1ExplanationExplanation/Reference:鸿鹄论坛出品：h t t p :/b b s .h h
59、010.c o m /想要远程管理交换机需要在交换机上的配置，B正确QUESTION 28In an Ethernet network, under what two scenarios can devices transmit? (Choose two.)A. when they receive a special tokenB. when there is a carrierC. when they detect no other devices are sendingD. when the medium is idleE. when the server grants accessCor
60、rect Answer: CDSection: part 1ExplanationExplanation/Reference:在以太网网络，在什么情况下可以两种设备可以传输?考点分析：这题考的是以太网的基本概念CSMA/CD，题目问在两种情况下设备才会开始传输数据，当然是当它检测到没有其他设备在传输数据或传输介质是空闲的时才开始传输数据。 -鸿鹄论坛http:/ 29Which two states are the port states when RSTP has converged?(choose two)A. blockingB. learningC. discardingD. forw
61、ardingE. listeningCorrect Answer: CDSection: part 1ExplanationExplanation/Reference:在RSTP中只有三种端口状态，Discarding、Leaning和Forwarding，汇聚之后的状态只有Discarding、Forwarding。QUESTION 30Which two commands can be used to verify a trunk link configurationt status on a given cisco switch?(choose two)A.show interfaces
62、 interfaceB.show interfaces trunkC.show interfaces switchportD.show ip interface briefE.show interfaces vlanCorrect Answer: BCSection: part 1ExplanationExplanation/Reference:查看trunk命令，show interface trunk和show interface switchport ，只能选BCQUESTION 31Which command enables RSTP on a switch?CCNA 题库战报交流群：
63、 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. spanning-tree mode rapid-pvstB. spanning-tree uplinkfastC. spanning-tree backbonefastD. spanning-tree mode mstCorrect Answer: ASection: part 1ExplanationExplanation/Reference:启用RSTP的命令QUESTION 32Which of the following statements describe the networ
64、k shown in the graphic? (Choose two.)A. There are two broadcast domains in the network.B. There are four broadcast domains in the network.C. There are six broadcast domains in the network.D. There are four collision domains in the network.E. There are five collision domains in the network.F. There a
65、re seven collision domains in the network.Correct Answer: AFSection: part 1ExplanationExplanation/Reference:路由器一个端口一个广播域交换机一个端口一个冲突域集线器一个冲突域。左边是集线器，右边是交换机。路由器有两个端口，所以有两个广播域。 右边交换机有6个端口加上左边集线器一共7个冲突域。QUESTION 33Refer to the exhibit.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /All switch ports are assigned
66、to the correct VLANs, but none of the hosts connected to SwitchA cancommunicate with hosts in the same VLAN connected to SwitchB. Based on the output shown, what is themost likely problem?A. The access link needs to be configured in multiple VLANs.B. The link between the switches is configured in th
67、e wrong VLAN.C. The link between the switches needs to be configured as a trunk.D. VTP is not configured to carry VLAN information between the switches.E. Switch IP addresses must be configured in order for traffic to be forwarded between the switchesCorrect Answer: CSection: part 1ExplanationExplan
68、ation/Reference:由图中可知，两个交换机相连接的端口都是access，应该配置成trunkQUESTION 34Refer to the exhibit. Given the output shown from this Cisco Catalyst 2950, what is the most likely reasonthat interface FastEthernet 0/10 is not the root port for VLAN 2?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. T
69、his switch has more than one interface connected to the root network segment in VLAN 2.B. This switch is running RSTP while the elected designated switch is running 802.1d Spanning Tree.C. This switch interface has a higher path cost to the root bridge than another in the topology.D. This switch has
70、 a lower bridge ID for VLAN 2 than the elected designated switch.Correct Answer: CSection: part 1ExplanationExplanation/Reference:如图，给出了Cisco交换机2950的输出代码，Fa0/10没有成为Vlan2的根端口最优可能的原因是什么？考点分析：一个端口要想成为根端口，首先比较根路径成本， 越低越可能。题目问为什么没能成为根端口，原因最可能就是根路径成本比其他端口高。 -鸿鹄论坛http:/ 35Why will a switch never learn a br
71、oadcast address?A. Broadcast frames are never sent to swiches.B. Broadcast addresses use an incorrect format for the switching table.C. A broadcast address will never be the source address of a frame.D. Broadcasts only use network layer addressing.E. A broadcast frame is never forwarded by a switch.
72、Correct Answer: CSection: part 1ExplanationExplanation/Reference:QUESTION 36Refer to the exhibit. Why has this switch not been elected the root bridge for VLAN1?A. It has more than one interface that is connected to the root network segment.B. It is running RSTP while the elected root bridge is runn
73、ing 802.1d spanning tree.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. It has a higher MAC address than the elected root bridge.D. It has a higher bridge ID than the elected root bridge.Correct Answer: DSection: part 1ExplanationExplanation/Reference:考点：考查STP选举原则，RID小者优先。由提示可知根桥的RID为20481A：有超过1个接口连接到根网段
74、，错误B：使用了RSTP，但是选举根桥时使用了802.1d，错误C：比根桥有更高的MAC地址，错误D：比根桥有更高的RID，正确。QUESTION 37Which two link protocols are used to carry multiple VLANs over a single link? (Choose two.)A. VTPB. 802.1qC. IGPD. ISLE. 802.3uCorrect Answer: BDSection: part 1ExplanationExplanation/Reference:考点分析：这道题考的是Trunk的基本概念。Trunk的协议有
75、两种，一种是通用的802.1Q协议，另一种是cisco专用的ISL协议。QUESTION 38assuming the default switch configuration which vlan range can be added modified and removed on acisco switch?A. 2 through 1001B. 1 through 1001C. 1 through 1002D. 2 through 1005Correct Answer: ASection: part 1ExplanationExplanation/Reference:交换机上默认那些是可
76、以修改和移动的vlan。2-1001QUESTION 39Which statement about vlan operation on cisco catalyst switches is true?A. when a packet is received from an 802.1Q trunk,the vlan id can be determined from the source MACaddress table.B. unkown unicast frames are retransmitted only to the ports that belong to the same v
77、lanC. ports between switches should be configured in access mode so that vlans can span across the portsD. broadcast and multicast frames are retransmitted to ports that are configured on different vlan.Correct Answer: BSection: part 1ExplanationCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010
78、.c o m /Explanation/Reference:A通过源mac地址确定vlan，不正确B未知单播帧只在本vlan传播，正确C交换机之间应该设置为trunkDvlan能分割广播域，广播不能跨vlan传输QUESTION 40Refer to the topology shown in the exhibit. Which ports will be STP designated ports if all the links areoperating at the same bandwidth? (Choose three.)A. Switch A - Fa0/0B. Switch A
79、 - Fa0/1C. Switch B - Fa0/0D. Switch B - Fa0/1E. Switch C - Fa0/0F. Switch C - Fa0/1Correct Answer: BCDSection: part 1ExplanationExplanation/Reference:B的mac最小为根桥 ，B的俩端口为指定端口. A的F0/0和C的F0/0为根端口。A的mac较小，A的F0/1为指定端口，C的F0/1堵塞QUESTION 41Refer to the exhibit. How should the FastEthernet0/1 port on the 295
80、0 model switches that are shown inthe exhibit be configured to allow connectivity between all devices?鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. The ports only need to be connected by a crossover cable.B.SwitchX(config)# interface FastEthernet 0/1SwitchX(config-if)# switchport mode trunkC.SwitchX(con
81、fig)# interface FastEthernet 0/1SwitchX(config-if)# switchport mode accessSwitchX(config-if)# switchport access vlan 1D.SwitchX(config)# interface FastEthernet 0/1SwitchX(config-if)# switchport mode trunkSwitchX(config-if)# switchport trunk vlan 1SwitchX(config-if)# switchport trunk vlan 10SwitchX(c
82、onfig-if)# switchport trunk vlan 20Correct Answer: BSection: part 1ExplanationExplanation/Reference:fa0/0,fa0/1-此两接口都必须配置成trunk,才能达到vlan间通信而且sw1和sw2间的链路必须trunk才能带到相同vlan的通信QUESTION 42Refer to the exhibit A frame on vlan 1on switch s1 is sent to switch s2 when the frame is received on vlan2,what caus
83、es this behavior?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. trunk mode mismatchesB. vlans that do not correspond to a unique IP subnetC. native vlan mismatchesD. allowing only vlan 2 on the destination.Correct Answer: CSection: part 1ExplanationExplanation/Reference:两交换机本征vlan不
84、一样，不能正常通信QUESTION 43Which three statements about RSTP are true?(choose three)A. RSTP significantly reduces topology reconverging time after a link failure.B. RSTP expends the STP port roles by adding the alternate and backup roles.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. RSTP port atates are blocki
85、ng,discarding,learing,or forwarding.D. RSTP also uses the STP proprsal-agreement sequence.E. RSTP use the same timer-baseed process as STP on point-to-point links.F. RSTP provides a faster transition to the forwarding state on point-to-point links than STP does.Correct Answer: ABFSection: part 1Expl
86、anationExplanation/Reference:A能够减少汇聚时间B比STP增加了端口角色alternat和backupF在点到点链路提供比STP更快的传输和转发QUESTION 44At which layer of the OSI model is RSTP used to prevent loops?A. data linkB. networkC. physicalD. transportCorrect Answer: ASection: part 1ExplanationExplanation/Reference:QUESTION 45What dose a Layer 2
87、switch use to decide where to forward a received frame?A. source MAC addressB. source IP addressC. source switch portD. destination IP addressE. destination port addressF. destination MAC addressCorrect Answer: FSection: part 1ExplanationExplanation/Reference:二层交换机用目的mac地址来转发收到的帧QUESTION 46Refer to
88、the exhibit. Which statement is true?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. The Fa0/11 role confirms that SwitchA is the root bridge for VLAN 20.B. VLAN 20 is running the Per VLAN Spanning Tree Protocol.C. The MAC address of the root bridge is 0017.596d.1580.D. SwitchA is n
89、ot the root bridge, because not all of the interface roles are designated.Correct Answer: DSection: part 1ExplanationExplanation/Reference:stp对于跟桥所有的接口都是指定端口QUESTION 47Which two benefits are provided by creating VLANs? (Choose two.)A. added securityB. dedicated bandwidthC. provides segmentationD. al
90、lows switches to route traffic between subinterfacesE. contains collisionsCorrect Answer: ACSection: part 1ExplanationExplanation/Reference:vlan的主要特点第一个提供网络安全因为默认vlan间是不能够通信的,第二个提供了网络分段.因为一个vlan就是一个逻辑子网QUESTION 48Which command can be used from a PC to verify the connectivity between hosts that conne
91、ct through aswitch in the same LAN?A. ping addressB. tracert addressC. traceroute address鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D. arp addressCorrect Answer: ASection: part 1ExplanationExplanation/Reference:Traceroute是用来侦测主机到目的主机之间所经路由，这里是在同一个lan，所以用不到QUESTION 49Based on the network shown in the gra
92、phic which option contains the potential networking problem andprotocol or setting that can to prevent the problem?A. Routing loops, hold down timersB. Switching loops, split horizonC. Routing loops, split horizonD. Switching loops, VTPE. Routing loops, STPF. Switching loops, STPCorrect Answer: FSec
93、tion: part 1ExplanationExplanation/Reference:交换机存在环路，STP生成树来防止环路QUESTION 50Refer to the exhibit. Which two statements are true about interVLAN routing in the topology that is shownin the exhibit? (Choose two.)CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. Host E and host F use the
94、same IP gateway address.B. Router1 and Switch2 should be connected via a crossover cable.C. Router1 will not play a role in communications between host A and host D.D. The FastEthernet 0/0 interface on Router1 must be configured with subinterfaces.E. Router1 needs more LAN interfaces to accommodate
95、the VLANs that are shown in the exhibit.F. The FastEthernet 0/0 interface on Router1 and Switch2 trunk ports must be configured using the sameencapsulation type.Correct Answer: DFSection: part 1ExplanationExplanation/Reference:问：如下图，对于图中拓扑中vlan之间路由，那两个选项是正确的？考点分析：这道题考的是vlan间的路由，用的是单臂路由的拓扑模型。此拓扑模型是由路
96、由器来完成vlan间数据流量的转发。如图，Route1不需要更多的Lan接口，它只需要在F0/0口上创建更多的子接口来完成对更多vlan的接入。所以E错误，这题的正确答案是D，F。在单臂路由的时候，首先路由器的接口要配置子接口针对每一个vlan一个逻辑接口，其次交换机的接口要配置trunk，并且封装要和路由器接口的封装一致 -鸿鹄论坛http:/ 51Which two of these are characteristics of the 802.1Q protocol?(choose two)A. it is a layer 2 messaging protocol which maint
97、ains vlan configurations across network.B. it includes an 8-bit field which specifies the priority of a frame.C. it is used exclusively for tagging vlan frames and dose not address network reconvergence followingswitched network topology changes.D. it modifies the 802.3 frame header,and thus require
98、s that the FCS be recomputed.E. it is a trunking protocol capable of carring untagged frames.Correct Answer: DESection: part 2ExplanationExplanation/Reference:A描述的是vtp的特性B应该是3bitCexclusively是唯一的意思。802.1Q不是唯一的D修改帧的头部，需要重新进行FCS校验，正确E是一个trunk协议并支持不打标记的帧，正确鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION
99、 52Refer to the exhibit. Each of these four switches has been configured with a hostname, as well as beingconfigured to run RSTP. No other configuration changes have been made. Which three of these show thecorrect RSTP port roles for the indicated switches and interfaces? (Choose three.)A. SwitchA,
100、Fa0/2, designatedB. SwitchA, Fa0/1, rootC. SwitchB, Gi0/2, rootD. SwitchB, Gi0/1, designatedE. SwitchC, Fa0/2, rootF. SwitchD, Gi0/2, rootCorrect Answer: ABFSection: part 2ExplanationExplanation/Reference:如图，每个交换机都配置了主机名，也都运行了RSTP，在就没有做其他的配置了。下面哪三个选项正确的描述了RSTP的端口角色？考点分析：1.判断根桥，通过比较各个网桥的Mac地址，桥Mac地址最
101、小的为根桥，所以根桥是C，根桥上的所有端口是指定端口。2.判断非根桥上的跟端口。在同一个交换机上，到根网桥的cost较小的那个端口会成为root port。所以SwitchA Fa0/1，SwitchD Gi0/2，SwitchB Gi0/1会成为相应交换机上的RP。3.判断每个网段上的指定端口。 SWA-SWB段：SWA的F0/2端口的cost为19，SWB的G0/2端口cost为4+19=23，所以SWA的F0/2为指定端口。 SWB-SWD段：SWB的G0/1端口cost为19+19=38，SWD的G0/1端口cost为19，所以SWD的G0/1端口为指定端口。 4.剩余SWB的G0/2
102、端口既不是指定端口，又不是根端口，处于堵塞状态。CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /注：100M链路cost为19.1000M链路cost为4. -鸿鹄论坛http:/ 53Refer to the exhibit.The network administrator normally establishes a telnet session with the switch fromhost A.However,host A is unavailable.The administrators attempt
103、to the switch from host B fails,but pingsto the other two hosts are successful.what is the issue?A. Host B and the switch need to be in the same subnet.B. The switch needs and appropriate default gateway assigned.C. The switch interface connected to the router is down.D. Host B need to be assigned a
104、n IP address in vlan 1.E. The switch interfaces need the appropriate IP addresses assigned.Correct Answer: B鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Section: part 2ExplanationExplanation/Reference:远程管理交换机需要在交换机上设置default gateway和vlan IPQUESTION 54Refer to the exhibit. What switch proves the spanning-t
105、ree designated port role for the network segmentthat services the printers?A. Switch1B. Switch2C. Switch3D. Switch4Correct Answer: CSection: part 2ExplanationExplanation/Reference:题目求哪一个交换机为打印机提供指定端口？由图可知S1是根桥。指定端口是基于网段间选举的。S3-S4之间S3的BID比S4小，所以S3-S4之间的指定端口在S3上。QUESTION 55What is one benefit of PVST+
106、?A. PVST+reduces the CPU cycles for all the switches in the networkB. PVST+automatically selects the root bridge location,to provide optimized bandwidth usage.C. PVST+allow the root switch location to be optimized per vlan.D. PVST+supports Layer 3 load balancing without loops.Correct Answer: CSectio
107、n: part 2ExplanationExplanation/Reference:PVST+允许每一个vlan有自己的跟桥CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / -鸿鹄论坛http:/ 56Which are valid modes for a switch port used as a VLAN trunk? (Choose three.)A. transparentB. autoC. onD. desirableE. blockingF. forwardingCorrect Answer: BCDSec
108、tion: part 2ExplanationExplanation/Reference:以下哪些是vlan trunk端口的有效模式？考点分析：这道题考的是trunk的模式。这是trunk基本概念，可以形成trunk链路的模式有auto、on和desirableQUESTION 57How many broadcast domains are shown in the graphic assuming only the default vlan is configured onthe switches?A. oneB. sixC. twelveD. twoCorrect Answer: AS
109、ection: part 2ExplanationExplanation/Reference:一个vlan为一个广播域，图中有两个交换机，但是只有一个默认的vlan，所以只有一个广播域QUESTION 58Which three of these statements regarding 802.1Q trunking are correct? (Choose three.)A. 802.1Q native VLAN frames are untagged by default.B. 802.1Q trunking ports can also be secure ports.C. 802.1
110、Q trunks can use 10 Mb/s Ethernet interfaces.D. 802.1Q trunks require full-duplex, point-to-point connectivity.E. 802.1Q trunks should have native VLANs that are the same at both ends.Correct Answer: ACE鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Section: part 2ExplanationExplanation/Reference:802.1q nat
111、ive vlan是不做标记的，并且在trunk两边的native需要一致QUESTION 59Refer to the exhibit. The output that is shown is generated at a switch. Which three of these statements aretrue? (Choose three.)A. All ports will be in a state of discarding, learning, or forwarding.B. Thiry VLANs have been configured on this switch.C.
112、 The bridge priority is lower than the default value for spanning tree.D. All interfaces that are shown are on shared media.E. All designated ports are in a forwarding state.F. The switch must be the root bridge for all VLANs on this switch.Correct Answer: ACESection: part 2ExplanationExplanation/Re
113、ference:rstp的所有接口在收敛完成之前都将经历discarding-learning-forwarding的状态,并且rstp的默认优先级应该为32768，所有的DP都将转发数据QUESTION 60Refer to the exhibit. At the end of an RSTP election process, which access layer switch port will assumethe discarding role?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. Switch
114、3, port fa0/1B. Switch3, port fa0/12C. Switch4, port fa0/11D. Switch4, port fa0/2E. Switch3, port Gi0/1F. Switch3, port Gi0/2Correct Answer: CSection: part 2ExplanationExplanation/Reference:SW1为跟桥，SW4会选择一个端口作为根端口，另一个堵塞。在两个端口cost相同的情况下，选择端口号小的为跟端口，端口号大的堵塞。QUESTION 61Which term describes a spanning-tr
115、ee network that has all switch ports in either the blocking or forwardingstate? A. redundantB. spannedC. provisionedD. convergedCorrect Answer: DSection: part 2ExplanationExplanation/Reference:收敛以后交换机端口只有堵塞和转发状态QUESTION 62What are the possible trunking modes for a switch port? (Choose three.)A. tran
116、sparentB. autoC. onD. desirable鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /E. clientF. forwardingCorrect Answer: BCDSection: part 2ExplanationExplanation/Reference:考点：考查交换机在trunk模式下的模式auto：不会主动发DTP信息on：强制成为trunk，也主动发DTP信息desirable：DTP主动模式，发DTP和对方协商 -鸿鹄论坛http:/ 63Which two of these statements regarding RS
117、TP are correct? (Choose two.)A. RSTP cannot operate with PVST+.B. RSTP defines new port roles.C. RSTP defines no new port states.D. RSTP is a proprietary implementation of IEEE 802.1D STP.E. RSTP is compatible with the original IEEE 802.1D STP.Correct Answer: BESection: part 2ExplanationExplanation/
118、Reference:RSTP定义了新的端口类型，包括隔离端口，备份端口等，rstp如果与stp同时存在的话。那么将兼容成stpQUESTION 64Refer to the exhibit.Which two statements are true of the interfaces on switch1?(choose two)CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. A hub is connected directly to FastEthernet0/5B. FastEthernet0/1 is c
119、onfigured as a trunk link.C. FastEthernet0/5 has statically assigned mac addressD. Interface FastEthernet0/2 has been disable.E. Multiple devices are connected directly to FastEthernet0/1.F. FastEthernet0/1 is connected to a host with multiple network interface cards.Correct Answer: ABSection: part
120、2ExplanationExplanation/Reference:图中show cdp nei可以看出F0/1,F0/2为连接两个邻居交换机的端口，所以这两个端口为trunk。F0/5端口有多个mac地址，而且不是trunk，只能是接了一个hub。QUESTION 65Three switches are connected to one anther via trunk ports.Assuming the default switchconfiguration,which switch is elected as the root bridge for the spanning-tree
121、 instance of vlan 1?A. the switch with the lowest MAC address鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /B. the switch with the higest MAC addressC. the switch witch the higest IP addressD. the switch with the lowest IP addressCorrect Answer: ASection: part 2ExplanationExplanation/Reference:在运行STP协议的网络中选
122、择根桥需要利用桥ID.桥ID由桥优先级（所有思科交换机上默认优先级为32768）和MAC地址组合来决定的。在网络中，桥ID最小的网桥成为根桥。桥ID=桥优先级+桥mac 越小越优先QUESTION 66What are three advantages of VLANs? (Choose three.)A. They establish broadcast domains in switched networks.B. They utilize packet filtering to enhance network security.C. They provide a method of co
123、nserving IP addresses in large networks.D. They provide a low-latency internetworking alternative to routed networks.E. They allow access to network services based on department, not physical location.F. They can simplify adding, moving, or changing hosts on the network.Correct Answer: AEFSection: p
124、art 2ExplanationExplanation/Reference:A：VLAN在交换网络中建立广播域，正确B：利用VLAN的数据包过滤，增强网络的安全性。错误，没有这个特性。C：提供了在大型网络中的保护IP地址的方法。错误。D：提供低延迟互联网络替代路由网络。错误E：vlan允许基于逻辑划分的网络访问，不是物理位置。正确。F：VLAN可以大大简化添加，移动或更改网络上的主机。正确。 -鸿鹄论坛http:/ 67Which two benefits are provided by using a hierarchical addressing network addressing sc
125、heme? (Choosetwo.)A. reduces routing table entriesB. auto-negotiation of media ratesC. efficient utilization of MAC addressesD. dedicated communications between devicesE. ease of management and troubleshootingCorrect Answer: AESection: part 2ExplanationExplanation/Reference:提供分层的网络地址规划,第一个我们容易实时路由汇总
126、从而减少路由条目,第二给我们在管理方面还错误排查方面提供了便利QUESTION 68What is the alternative notation for the IPV6 address B514:82C3:0000:0000:0029:EC7A:0000:EC72?A. B514:82C3:0029:EC7A:0000:EC72CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /B. B514:82C3:0029:EC7A:EC72C. B514:82C3:0029:EC7A:0:EC72D. B514:82C3:0
127、029:EC7A:EC72Correct Answer: CSection: part 2ExplanationExplanation/Reference:考试时候C可能会出现14:82C3:0029:EC7A:0:EC72这种情况，系统错误，不用管它，选CQUESTION 69Refer to the diagram. All hosts have connectivity with one another. Which statements describe theaddressing scheme that is in use in the network? (Choose three.
128、)A. The subnet mask in use is 255.255.255.192.B. The subnet mask in use is 255.255.255.128.C. The IP address 172.16.1.25 can be assigned to hosts in VLAN1D. The IP address 172.16.1.205 can be assigned to hosts in VLAN1E. The LAN interface of the router is configured with one IP address.F. The LAN in
129、terface of the router is configured with multiple IP addresses.Correct Answer: BCFSection: part 2ExplanationExplanation/Reference:1、子网掩码要使两个IP处于不同网段。255.255.255.128把一个C类划分成两个子网。2、在路由器上配置子接口，用单臂路由实现通信。鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / -鸿鹄论坛http:/ 70Which two statements describe characteristics
130、of IPv6 unicast addressing? (Choose two.)A. Global addresses start with 2000:/3.B. Link-local addresses start with FE00:/12.C. Link-local addresses start with FF00:/10.D. There is only one loopback address and it is :1.E. If a global address is assigned to an interface, then that is the only allowab
131、le address for the interface.Correct Answer: ADSection: part 2ExplanationExplanation/Reference:ipv6的常规问题，globaladdress的其实段位2000:/3这个是定义好了的,D选项说的是换回地址,也就是ipv4的127.0.0.1这个类似的.所以D正确QUESTION 71the network administrator has been asked to give reasons for moving from ipv4 to ipv6. what are two validreason
132、s for adopting ipv6 over ipv4?(choose two)A. telnet access does not require a passwordB. nat C. no broadcastD. chanage of destination address in the ipv6 headerE. chanage of source address in the ipv6 headerF. autoconfigurationCorrect Answer: CFSection: part 2ExplanationExplanation/Reference:要求给出IPV
133、4向IPv6转换的理由，也就是v6的优点。C没有广播, F自动设置QUESTION 72An administrator must assign static IP addresses to the servers in a network.For network192.168.20.24/29, the router is assigned the first usable host address while the sales server is given thelast usable host address. Which of the following should be ent
134、ered into the IP propertied box for the salesCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /server?A. IP address:192.168.20.14 Subnet Mask:255.255.255.248 Default Gateway:192.168.20.9B. IP address:192.168.20.254 Subnet Mask:255.255.255.0 Default Gateway:192.168.20.1C. IP address:192.1
135、68.20.30 Subnet Mask:255.255.255.248 Default Gateway:192.168.20.25D. IP address:192.168.20.30 Subnet Mask:255.255.255.240 Default Gateway:192.168.20.17E. IP address:192.168.20.30 Subnet Mask:255.255.255.240 Default Gateway:192.168.20.25Correct Answer: CSection: part 2ExplanationExplanation/Reference
136、: 192.168.20.24/29地址范围 192.168.20.24- 192.168.20.31，其中第一个地址为网络地址，最后一个为广播地址，这两个地址不可用。QUESTION 73Which subnet mask would be appropriate for a network address range to be subnetted for up to eightLANs, with each LAN containing 5 to 26 hosts?A. 0.0.0.240B. 255.255.255.252C. 255.255.255.0D. 255.255.255.2
137、24E. 255.255.255.240Correct Answer: DSection: part 2ExplanationExplanation/Reference:每个网段有5到26个host，最好是用32的块大小，掩码为255.255.255.224QUESTION 74How many bits are contained in each field of an IPv6 address?A. 24B. 4C. 8D. 16Correct Answer: DSection: part 2ExplanationExplanation/Reference:IPV6地址每一段地址有16位Q
138、UESTION 75Which three approaches can be used while migrating from an IPV4 addressing scheme to an IPV6scheme.(choose three)A. statically map IPV4 address to IPV6 addressesB. configuration IPv4 tunnels between IPV6 islandsC. use DHCPv6 to map IPV4 addresses to IPV6 addressesD. use proxying and transl
139、ation to translate IPV6 packets into IPV4 packetsE. configure IPV6 directlyF. enable dual-stack routing鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Correct Answer: ABFSection: part 2ExplanationExplanation/Reference:答案是ABF。IPV6向IPV4过渡书上有三种方法：隧道，双栈，NAT-PT.A是静态NAT-PYB是隧道F是双栈 -鸿鹄论坛http:/ 76Refer to the exhibi
140、t. In this VLSM addressing scheme, what summary address would be sent from routerA?A. 172.16.0.0 /16B. 172.16.0.0 /20C. 172.16.0.0 /24D. 172.32.0.0 /16E. 172.32.0.0 /17F. 172.64.0.0 /16Correct Answer: ASection: part 2ExplanationExplanation/Reference:QUESTION 77How is an EUI-64 format interface ID cr
141、eated from a 48-bit MAC address?A. by appending 0xFF to the MAC address.B. by prefixing the MAC address with 0xFFEE.C. by prefixing the MAC address with 0xFF and appending 0xFF to it.D. by inserting 0xFFFE between the upper three bytes and the lower three bytes of the MAC addressE. by prefixing the
142、MAC address with 0xF and inserting 0xF after each of its first three bytes.Correct Answer: DSection: part 2CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /ExplanationExplanation/Reference:EUI-64是扩展的mac地址，由64位组成，通过在mac地址中间，也就是第24位的前面插入16位0XFFFE，以创建一个64位，独特的接口标识符。 -鸿鹄论坛http:/ 78Refer to
143、the exhibit.Which is the most efficient summarization that R1 can use to advertise its networks toR2?A. 172.1.4.0/22B. 172.1.0.0/21C. 172.1.0.0/22D. 172.1.4.0/25172.1.4.128/25172.1.5.0/24172.1.6.0/24172.1.7.0/24E. 172.1.4.0/24172.1.5.0/24172.1.6.0/24172.1.7.0/24Correct Answer: ASection: part 2Explan
144、ationExplanation/Reference:做一个最精确的路由汇总，将图中IP地址做汇总鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 79Which option is a valid IPv6 address?A. 2001:0000:130F:099a:12aB. 2002:7654:A1AD:61:81AF:CCC1C. FEC0:ABCD:WXYZ:0067:2A4D. 2004:1:25A4:886F:1Correct Answer: DSection: part 2ExplanationExplanation/Refere
145、nce:A.只能一个冒号B.应该8个字段C.16进制没有WXYZQUESTION 80Which three are characteristics of an IPV6 anycast address?(choose three)A. any-to-many communication modelB. delivery of packets to the group interface that is closest to the sending deviceC. one-to-many communication modelD. the same address for multiple
146、devices in the groupE. one-to-nearest communication modelF. a unique IPV6 address for each device in the groupCorrect Answer: BDESection: part 2ExplanationExplanation/Reference:A 多对多通信模型 B 数据包传送到该组接口，转发到最近的节点C 一对多通信模型D 同组中多个接口共用一个地址E 发送到任播地址的分组被转发到最近的端口（节点）F 组中每个节点有一个唯一的IV6地址（每台设备可以有一个以上的端口，所以用节点来表示
147、）题目考查IPV6的任播3个特点：CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /1.数据包传送到该组接口，转发到最近的节点2.同组中多个接口共用一个地址3.发送到任播地址的分组被转发到最近的端口（节点）考试可以这么记： anycast =closet 、nearest、 same dress for multiple devices 近 、 近 、 一个地址多个设备 -鸿鹄论坛http:/ 81A national retail chain needs to design an IP addressing schem
148、e to support a nationwide network. Thecompany needs a minimum of 300 sub-networks and a maximum of 50 host addresses per subnet.Working with only one Class B address, which of the following subnet masks will support an appropriateaddressing scheme? (Choose two.)A. 255.255.255.0B. 255.255.255.128C. 2
149、55.255.252.0D. 255.255.255.224E. 255.255.255.192F. 255.255.248.0Correct Answer: BESection: part 2ExplanationExplanation/Reference:一个国家的零售连锁店需要设计一个IP方案来支持一个全国性的网络互联。该公司需要最少300个子网段以及每个子网段最多50太主机。仅使用一个B类地址，下列中哪些子网掩码能够满足这个地址分配方案？需要至少300个子网，每个子网至少50台主机。使用一个B类地址来划分。考点分析：这道题考的是VLSM。整个网络最少有300个子网，2的9次方是512大
150、于300，且是B类网络，所以网络位至少,9+16=25个；每个网段最多50机器，且2550 Cisco 预设 point to point 封装C & D - 是 Frame-Relay lmi-typeQUESTION 188Router A is unable to reach Router B.Both routers are running ios version 12.0.After reviewing thecommand output and graphic,what is the most likely cause of the problem?A. incorrect ban
151、dwidth configurationB. incorrect LMI configurationC. incorrect map statementD. incorrect IP addressCorrect Answer: CSection: part 4ExplanationExplanation/Reference:frame-relay map ip 172.16.100.1 200 broadcast 这个命令配置错误 DLCI号应该是本地的100-鸿鹄论坛http:/ 189Refer to the exhibit. What is the meaning of the ter
152、m dynamic as displayed in the output of the showframe-relay map command shown?A. The Serial0/0 interface is passing traffic.B. The DLCI 100 was dynamically allocated by the routerC. The Serial0/0 interface acquired the IP address of 172.16.3.1 from a DHCP serverD. The DLCI 100 will be dynamically ch
153、anged as required to adapt to changes in the Frame Relay cloudE. The mapping between DLCI 100 and the end station IP address 172.16.3.1 was learned throughInverse ARPCorrect Answer: ESection: part 4ExplanationExplanation/Reference:CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / -鸿鹄论坛：
154、http:/ 190A network administrator needs to configure a serial link between the main office and a remote location.Therouter at the remote office is a non-cisco router. How should the network administrator configure the serialinterface of the main office router to make the connection?A. Main(config)#i
155、nterface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#no shutB. Main(config)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#encapsulation ietfMain(config-if)#no shutC. Main(config)#interface serial 0/0Main(config-if)#ip addr
156、ess 172.16.1.1 255.255.255.252Main(config-if)#encapsulation frame-relayMain(config-if)#authenication chapMain(config-if)#no shutD. Main(config)#interface serial 0/0Main(config-if)#ip address 172.16.1.1 255.255.255.252Main(config-if)#encapsulation pppMain(config-if)#no shutCorrect Answer: DSection: p
157、art 4ExplanationExplanation/Reference:remote office 使用非思科路由器，则main office 是思科路由器。HDLC是Cisco路由器在同步串行线路上的默认封装方式。每个厂商的HDLC都是专用的。PPP 用于异步串行（拨号）或同步串行（isdn）介质。PPP的基本目标是在数据链路层点到点链路上传输第3层包。它不是一个专用协议，这就意味着如果你的路由器并不都是Cisco的，可以在串行接口上配置PPP封装。串行接口两端的路由器都配置PPP才能工作。帧中继有两种封装类型-Cisco和IETF.除非手动输入IETF，否则默认封装是Cisco。如果用
158、帧中继连接一条Cisco设备和一条非Cisco设备，要选择IETF封装类型。命令格式如下Router(config)#int s0/0/0Router(config-if)#encapsulation ?frame-relay Frame Relay networkshdlc Serial HDLC synchronousppp Point-to-Point protocolRouter(config-if)#encapsulation frame-relay ?ietf Use RFC1490/RFC2427 encapsulation由此判断选项B 和C，命令格式不正确。如果当一台思科路由
159、器和一台非思科路由器通过串行连接在一起时，必须配置PPP或另外一种封装方法，像帧中继，因为默认的HDLC不能工作。-鸿鹄论坛http:/ 191Which are three reasons that an organization with multiple branch offices and roaming users mightimplement a Cisco VPN solution instead of point-to-point WAN links?(choose three)A. reduced cost B. better throughputC. increased s
160、ecurityD. scalability鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /E. reduced latencyF. broadband incompatibilityCorrect Answer: ACDSection: part 4ExplanationExplanation/Reference:答案：A C D. VPN英文全称是“Virtual Private Network”，翻译过来就是“虚拟专用网络”。vpn被定义为通过一个公用网络（通常是因特网）建立一个临时的、安全的连接，是一条穿过混乱的公用网络的安全、稳定隧道。特点：1.安全保障2
161、.服务质量保证（QoS）3.可扩充性和灵活性4.可管理性A 节约成本 C 增强安全性D 易扩展B提高吞吐量-感觉应该是P2P的优点E减少潜在因素 F带宽 不是很有关系 -鸿鹄论坛http:/ 192What two statistics appear in show frame-relay map output?(choose two)A. The number of FECN packets that are received by the routerB. The number of BECN packets that are received by the router.C. The i
162、p address of the local routerD. The value of the local DLCIE. The status of the PVC that is configured on the routerCorrect Answer: DESection: part 4ExplanationExplanation/Reference:Sample “show frame-relay map” output:R1#sh frame mapSerial0/0 (up): ip 10.4.4.1 dlci 401(0x191,0x6410), dynamic,broadc
163、ast, status defined, activeSerial0/0 (up): ip 10.4.4.3 dlci 403(0x193,0x6430), dynamic,broadcast, status defined, activeSerial0/0 (up): ip 10.4.4.4 dlci 401(0x191,0x6410), static,CISCO, status defined, activeQUESTION 193Users have been complaining that their Frame Relay connection to the corporate s
164、ite is very slow. Thenetwork administrator suspects that the link is overloaded. Based on the partial output of the Router#show frame relay pvc command shown in the graphic, which output value indicates to the local routerthat traffic sent to the corporate site is experiencing congestion?CCNA 题库战报交流
165、群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. DLCI = 100B. last time PVC status changed 00:25:40C. in BECN packets 192D. in FECN packets 147E. in DE packets 0Correct Answer: CSection: part 4ExplanationExplanation/Reference:BECN为后向拥塞指示，FECN为前向拥塞指示在帧中继网络里，前向显式拥塞通告（FECN）是发送端向接收端发送的降低数据传输速率的请求；后
166、向显式拥塞通告（BECN）是接收端向发送端发送的降低数据传输速率的请求。当大量数据包到达而来不及处理时，FECN和BECN可以最大程度地减小数据包丢失的可能性。如果在通信电路中，发送端频繁地发送FECN帧，说明网络的可用带宽无法满足接收端的需要。同样的，如果接收端频繁地发送BECN帧，则说明网络的可用带宽不能满足发送端的需要。 -鸿鹄论坛http:/ 194which command allows you to verify the encapsulation type (CISCO OR IETF) for a frame relay link?A. show frame-relay map
167、B. show frame-relay lmiC. show inter serialD. show frame-relay pvcCorrect Answer: ASection: part 4ExplanationExplanation/Reference:帧中继封装有两种cisco和ietf。默认是cisco。QUESTION 195It has become necessary to configure an existing serial interface to accept a second Frame Relay virtualcircuit.Which of the foll
168、owing processes are required to accomplish this task?(choose three)A. configure static frame relay map entries for each subinterface network.B. remove the ip address from the physical interface鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. create the virtual interfaces with the interface commandD. config
169、ure each subinterface with its own IP addressE. disable split horizon to prevent routing loops between the subinterface networksF. encapsulate the physical interface with multipoint PPPCorrect Answer: BCDSection: part 4ExplanationExplanation/Reference:现存有一条帧中继需要加第二条帧中继，需要创建子接口，使用点对多点A 点对多点需要frame-re
170、lay map。这里是配置的点到点帧中继，不需要做mapE取消水平分割不是为了防止路由环路F用多点PPP封装物理端口,错 -鸿鹄论坛http:/ 196What occurs on a Frame Relay network when the CIR is exceeded?A. All TCP traffic is marked discard eligible.B. All UDP traffic is marked discard eligible and a BECN is sent.C. All TCP traffic is marked discard eligible and a
171、 BECN is sent.D. All traffic exceeding the CIR is marked discard eligible.Correct Answer: DSection: part 4ExplanationExplanation/Reference:当在一个帧中继网络中，CIR过载会发生什么？考点分析：这道题考的是帧中继。CIR是在帧中继技术中，是用户向帧中继业务运营商申请的是承诺的信息速率。当信息速率突发量大于Bc+Be时，网络将丢弃帧。答案是D。D：所有超过的流量都丢弃。QUESTION 197Which two statements about using t
172、he CHAP authentication mechanism in a PPP link are true?(choosetwo)A. CHAP uses a two-way handshakeB. CHAP authentication periodically occurs after link establishmentC. CHAP has no protection from playback attacksD. CHAP authentication is performed only upon link establishmentE. CHAP uses a three-wa
173、y handshakeF. CHAP authentication passwords are sent in plaintextCorrect Answer: BESection: part 4ExplanationExplanation/Reference:PAP是两次握手机制；CHAP通过3次握手，CHAP定期发出挑战，以确保远程节点有有效的密码，CHAP采用MD5加密算法，而PAP采用明文A.CHAP认证采用的是两次握手机制B.CHAP的认证是链路建立之后周期性发生的C.CHAP认证没有重放攻击的保护D.执行CHAP认证只是在链路建立的时候E.CHAP认证采用的三次握手机制F.CHAP
174、认证的密码是采用明文的方式传输的 -鸿鹄论坛http:/ 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 198Refer to the exhibit. Which statement describes DLCI 17? A. DLCI 17 describes the ISDN circuit between R2 and R3. B. DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1. C. DLCI 17 is the Layer
175、 2 address used by R2 to describe a PVC to R3. D. DLCI 17 describes the dial-up circuit from R2 and R3 to the service provider. Correct Answer: CSection: part 4ExplanationExplanation/Reference:DLCI号是一个二层地址，和mac类似QUESTION 199What is the result of issuing the frame-relay map ip 192.168.1.2 202 broadca
176、st command?A. defines the source IP address that is used in all broadcast packets on DLCI 202B. defines the DLCI that is used for all packets that are sent to the 192.168.1.2 IP addressC. defines the destination IP address that is used in all broadcast packets on DLCI 202D. defines the DLCI on which
177、 packets from the 192.168.1.2 IP address are receivedCorrect Answer: BSection: part 4ExplanationExplanation/Reference:题目是说， 出现frame-relay map ip 192.168.1.2 202 broadcast 结果是什么？broadcast支持广播,命令也有说明映射关系.翻译选项A说-定义源ip地址-显然不对。B说-定义这对所有发送到192.168.1.2的IP地址的数据包使用的DLCI。是对的。而C应该是说-定义了目标IP地址，它是在所有的广播数据包上使用的DL
178、CI 202。也说不通D说-定义的数据包的IP地址从192.168.1.2收到的DLCI。也不对。题目要求 frame-relay map ip 192.168.1.2 202 broadcast 的作用，而不是broadcast的作用，所以选C是片面的 -鸿鹄论坛http:/ 200Which PPP subprotocol negotiates authentication options?A. NCPB. LCPC. ISDN鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D. DLCIE. SLIPCorrect Answer: BSection: par
179、t 4ExplanationExplanation/Reference:PPP的哪一个子协议能够协商验证：LCPQUESTION 201What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)A. They create split-horizon issues.B. They require a unique subnet within a routing domain.C. They emulate leased lines.D. They are ideal for fu
180、ll-mesh topologies.E. They require the use of NBMA options when using OSPF.Correct Answer: BCSection: part 5ExplanationExplanation/Reference:帧中继点到点子接口的特点？A：水平分割，错误。B：每个子接口需要一个独立的网段，正确。C：类似专线，正确。D:全网互联是理想拓扑，错误。通常是hub-spokeE：NBMA不支持OSPF，错误。考点分析：这道题考的是帧中继。帧中继网络中点到点子接口的两个特性是需要一个唯一的子网和模拟了租用线路，答案是BC。 -鸿鹄论
181、坛http:/ 202Which command can be used to verify the DLCI destination address in a Frame Relay static configuration?A. show frame-relay end-to-endB. show frame-relay mapC. show frame-relay lmiD. show frame-relay pvcCorrect Answer: BSection: part 5ExplanationExplanation/Reference:QUESTION 203What is th
182、e purpose of the inverse ARP?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. to map a known DLCI to an IP addressB. to map a known IP address to a MAC addressC. to map known SPID to a MACaddressD. to map a known DLCI to a MAC addressE. to map a known IP address to a SPID.F. to map a
183、 known MAC address to an IP addressCorrect Answer: ASection: part 5ExplanationExplanation/Reference:在帧中继链路上， inverse ARP把DLCI号解析为IP地址QUESTION 204Two routers named Atlanta and Brevard are connected via their serial interfaces as illustrated, but they areunable to communicate. The Atlanta router is kn
184、own to have the correct configuration.Given the partial configurations, identify the fault on the Brevard router that is causing the lack ofconnectivity.A. incompatible IP addressB. insufficient bandwidthC. incorrect subnet maskD. incompatible encapsulationE. link reliability too lowF. IPCP closedCo
185、rrect Answer: DSection: part 5ExplanationExplanation/Reference:两个路由器端口封装不一致，一个是HDLC，一个是PPPQUESTION 205Refer to the exhibit. The company uses EIGRP as the routing protocol. What path will packets take from ahost on 192.168.10.192/26 network to a host on the LAN attached to router R1?鸿鹄论坛出品：h t t p :/
186、b b s .h h 010.c o m /A. The path of the packets will be R3 to R2 to R1.B. The path of the packets will be R3 to R1 to R2.C. The path of the packets will be both R3 to R2 to R1 and R3 to R1.D. The path of the packets will be R3 to R1Correct Answer: DSection: part 5ExplanationExplanation/Reference:考点
187、：考查EIGRP的路径选择。从R3内网到R1的路径选择。链路的带宽一样，很明显是直接从R3到R1。 -鸿鹄论坛http:/ 206How does using the service password encryption command on a router provide additional security?A. by encrypting all passwords passing through the routerB. by encrypting passwords in the plain text configuration fileC. by requiring entr
188、y of encrypted passwords for access to the deviceD. by configuring an MD5 encrypted key to be used by routing protocols to validate routing exchangesE. by automatically suggesting encrypted passwords for use in configuring the routerCorrect Answer: BSection: part 5ExplanationExplanation/Reference:当使
189、用这条命令后，所有在路由器上配置是密码都被加密。A:所有通过路由器的密码都被加密。错误B：正确C：当访问设备时提供加密的密码。错误D：通过配置一个加密的密钥为路由协议使用，错误E：在用户配置路由器时自动建议加密密码。错误 -鸿鹄论坛http:/ 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 207Refer to the exhibit. Switch port FastEthernet 0/24 on AlSwitch1 will be used to create an IEEE 802.1Q-compl
190、aint trunk to another switch. Based on the output shown, What is the reason the trunk does not form,even thought the proper cabling has been attached?A. VLANs have not been created yet.B. An IP address must be configured for the port.C. The port is currently configured for access mode.D. The correct
191、 encapsulation type has not been configured.E. The no shutdown command has not been entered for the port.Correct Answer: CSection: part 5ExplanationExplanation/Reference:由图中知道接口配置为access模式。A：vlan没有创建，错误B：一个IP地址被配置在端口，错误。C：端口当前处于access模式,正确。D：没有配置正确的封装模式，错误。E：接口没有no shutdown，错误。QUESTION 208鸿鹄论坛出品：h t
192、 t p :/b b s .h h 010.c o m /Refer to the exhibit. In the Frame Relay network, which ip address would be assigned to the interfaces withpoint-to-poin PVCs?A. DLCI 16:192.168.10.1/24DLCI 17:192.168.10.2/24DLCI 99:192.168.10.3/24DLCI 28:192.168.10.4/24B. DLCI 16:192.168.10.1/24DLCI 17:192.168.11.1/24D
193、LCI 99:192.168.10.2/24DLCI 28:192.168.11.2/24C. DLCI 16:192.168.10.1/24DLCI 17:192.168.11.1/24DLCI 99:192.168.12.1/24DLCI 28:192.168.13.1/24D. DLCI 16:192.168.10.1/24DLCI 17:192.168.10.1/24DLCI 99:192.168.10.2/24DLCI 28:192.168.10.3/24Correct Answer: BSection: part 5ExplanationExplanation/Reference:
194、虚链路为点对点，R2为子接口，每条虚链路各自一个网段QUESTION 209Refer to the exhibit.A new subnet with 60 hosts has been added to the network.Which subnet addressshould this network use to provide enough usable addresses while wasting the fewest addresses?CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. 192.1
195、68.1.56/27B. 192.168.1.64/26C. 192.168.1.64/27D. 192.168.1.56/26Correct Answer: BSection: part 5ExplanationExplanation/Reference:要考虑到图中已经用掉的网段QUESTION 210Refer to the exhibit. All of the routers in the network are configured with the ip subnet-zero command.Which network addresses should be used for
196、Link A and Network A? (Choose two.)A. Network A - 172.16.3.48/26B. Network A - 172.16.3.128/25C. Network A - 172.16.3.192/26D. Link A - 172.16.3.0/30E. Link A - 172.16.3.40/30F. Link A - 172.16.3.112/30Correct Answer: BDSection: part 5Explanation鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Ref
197、erence:配置了ip subnet-zero，可以使用全0网段。A：错误，120台主机，主机位至少为7位。B:正确，主机位32-25=7C：错误，主机位少于7位D：正确。因为使用了ip subnet-zero。E:错误，包含在172.16.3.32/27网段中F:错误，包换在172.16.3.96/27网段中。QUESTION 211A router has learned three possible routes that could be used to reach a destination network. One route isfrom EIGRP and has a com
198、posite metric of 20514560. Another route is from OSPF with a metric of 782.The last is from RIPv2 and has a metric of 4. Which route or routes will the router install in the routingtable?A. the OSPF routeB. the EIGRP routeC. the RIPv2 routeD. all three routesE. the OSPF and RIPv2 routesCorrect Answe
199、r: BSection: part 5ExplanationExplanation/Reference:考点：考查路由条目进入路由表的原则：最优路由才能进入。去往同一目的的多条路由，先比较AD值，AD值小者优先；AD值一直则比较metric值。AD值：EIGRP 90OSPF 110RIP 120QUESTION 212A network administrator needs to allow only one Telnet connection to a router. For anyone viewing theconfguration and issuing the show run
200、command, the password for Telnet access should be encrypted.Which set of commands will accomplish this task?A.service password-encryptionaccess-list 1 permit 192.168.1.0 0.0.0.255line vty 0 4loginpassword ciscoaccess-class 1B.enable password secretline vty 0loginpassword ciscoC.service password-encr
201、yptionline vty 1loginpassword ciscoD.service password-encryptionline vty 0 4loginpassword ciscoCorrect Answer: CSection: part 5ExplanationCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Reference:首先密码加密的命令为service password-encyption 题目要求只能有一个人连接路由器.那么我们就开启一个vty线路.然后设置passwo
202、rd并且配置login就OK了 -鸿鹄论坛http:/ 213Refer to the exhibit.The speed of all serial links is E1 and the speed of the all Ethernet links is 100Mb/s.Astatic route will be established on the Manchester router to the direct traffic toward the internet over themost direct path available.What configuration on the
203、 Manchester router will establish a router toward theinternet for traffic that originates from workstation on the Manchester LAN?A. ip route 0.0.0.0 255.255.255.0 172.16.100.2B. ip route 0.0.0.0 255.255.255.252 128.107.1.1C. ip route 0.0.0.0 0.0.0.0 128.107.1.1D. ip route 0.0.0.0 0.0.0.0 172.16.100.
204、1E. ip route 0.0.0.0 255.255.255.255 172.16.100.2F. ip route 0.0.0.0 0.0.0.0 172.16.100.2Correct Answer: FSection: part 5ExplanationExplanation/Reference:设置静态路由QUESTION 214Refer to the exhibit. The network administrator must establish a route by which London workstations canforward traffic to the Ma
205、nchester workstations. What is the simplest way to accomplish this?鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. Configure a dynamic routing protocol on London to advertise all routes to Manchester.B. Configure a dynamic routing protocol on London to advertise summarized routes to Manchester.C. Configur
206、e a dynamic routing protocol on Manchester to advertise a default route to the London router.D. Configure a static default route on London with a next hop of 10.1.1.1.E. Configure a static route on London to direct all traffic destined for 172.16.0.0/22 to 10.1.1.2.F. Configure Manchester to adverti
207、se a static default route to London.Correct Answer: ESection: part 5ExplanationExplanation/Reference:网络管理员必须建立一条目的从伦敦的网络转发到曼彻斯特的网络，最简单的方法是什么？ london 要访问manchester的主机，那么我们只要知道那个一个静态路由讲数据包发出去就可以，通过子网汇总172.16.0.0/22可以代表manchester的3个网段。并且制定吓一跳为10.1.1.2 -鸿鹄论坛http:/ 215Refer to the exhibit.The network adm
208、inistrator requires easy configuration options and minimal routingprotocol traffic.Which two options provide adequate routing table information for traffic that passes betweenthe two routers and satisfy the requests of the network administrator?(choose two)CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b
209、 s .h h 010.c o m /A. a dynamic routing procotol on InternetRouter to advertise summarized routers to CentralRouter.B. a dynamic routing procotol on CentralRouter to advertise summarized routers to InternetRouter.C. a static route on InternetRouter to direct traffic that is destined for 172.16.0.0/1
210、6 to CentralRouter.D. a dynamic routing procotol on InternetRouter to advertise all routes to CentralRouer.E. a dynamic routing procotol on CentralRouer to advertise all routes to InternetRouterF. a static,default route on CentralRouter that directs traffic to InternetRouter.Correct Answer: CFSectio
211、n: part 5ExplanationExplanation/Reference:题目要求用简单设置和最小路由流量的路由，所以采用静态路由或默认路由QUESTION 216What is the effect of using the service password-encryption command?A. nly passwords configured after the command has been entered will be encrypted.B. Only the enable password will be encrypted.C. Only the enable
212、 secret password will be encryptedD. It will encrypt the secret password and remove the enable secret password from the configuration.E. It will encrypt all current and future passwords.Correct Answer: ESection: part 5ExplanationExplanation/Reference:E.加密已经有的和未来的密码QUESTION 217鸿鹄论坛出品：h t t p :/b b s
213、.h h 010.c o m /Refer to the exhibit.What is the effect of the configuration that is shown?A. It tells the router or switch to try establish an SSH connection first and if that fail to use telnet.B. Itconfigures a cisco network device to use the SSH protocol on incoming communications via the virtua
214、lterminal ports.C. It allows seven failed login attempts before the VTY lines are temporarily shutdown.D. It configures the virtual terminal lines with the password 030752180500.E. It configures SSH globally for all logins.Correct Answer: BSection: part 5ExplanationExplanation/Reference:此条命令允许5条SSH虚
215、链路QUESTION 218Refer to the exhibit.What is the reason that the interface status is “administratively down,line protocoldown”?A. There is a mismatch in encapsulation typesB. The wrong type of cable is connected to the interfaceC. The interface has been configured with the shutdown commandD. The inter
216、face is not receiving any keepalivesE. The interface needs to be configured as a DTE deviceF. There is no encapsulation type configuredCorrect Answer: CSection: part 5ExplanationExplanation/Reference:注释：很明显是物理层的问题，以前题库中出现过此题，以前是双选，现在变成单选了。仔细看一下B选项被舍弃了，因为这是串口，串口线只有一种两个端口，DTE和DCE，两头接错属于时钟配置错误是protocol
217、down。QUESTION 219Refer to the exhibit. When running OSPF, What would cause router A not to form an adjacency with routerCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /B?A. The loopback addresses are on different subnets.B. The value of the dead timers on the router are different.C. Ro
218、ute summarization is enabled on both routers.D. The process indentifier on router A is different than the process identifier on router B.Correct Answer: BSection: part 5ExplanationExplanation/Reference:考点：考查OSPF邻居建立的条件。区域ID，hello周期，网段，认证等。A：loopback地址不同网段，错误B：hello的死亡时间不一样，正确C：开启了路由汇总，错误。这个没关系D：两端的路
219、由进程不一致。错误。 -鸿鹄论坛http:/ 220Which two of these statements are true of IPv6 address representation? (Choose two.)A. There are four types of IPv6 addresses: unicast, multicast, anycast, and broadcast.B. A single interface may be assigned multiple IPv6 addresses of any type.C. Every IPv6 interface contai
220、ns at least one loopback address.D. The first 64 bits represent the dynamically created interface ID.E. Leading zeros in an IPv6 16 bit hexadecimal field are mandatory.Correct Answer: BCSection: part 5ExplanationExplanation/Reference:每个Ipv6接口至少包括一个环回口地址：由mac地址转换不用手动设置QUESTION 221Refer to the exhibit
221、. A junior network administrator was given the task of configuring port security onSwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device isdetected, the port is to drop frames from this device. The administrator configured the interface and testedit with s
222、uccessful pings from PC_A to RouterA, and then observes the output from these two showcommands.Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. Port security needs to be globally enabled.B. Port security needs to be
223、 enabled on the interface.C. Port security needs to be configured to shut down the interface in the event of a violation.D. Port security needs to be configured to allow only one learned MAC address.E. Port security interface counters need to be cleared before using the show command.F. The port secu
224、rity configuration needs to be saved to NVRAM before it can become active.Correct Answer: BDSection: part 5ExplanationExplanation/Reference:题目大意是说在交换机A上端口f0/1上配置端口安全，目的是只允许 PC_A连接网络,其他设备连接上将被丢弃,并且PCA可以ping通RA,问在swa上必须改变的哪两个配置？考点分析：一般端口安全是在接口下配置的。如题，只允许PC_A连接交换机的Fa0/1口，所以应该限制接口所允许的最大MAC地址数为1，即答案为BD。
225、-鸿鹄论坛http:/ 222Which set of commands is recommended to prevent the use of a hub in the access layer?A.switch(config-if)#switchport mode trunkswitch(config-if)#switchport port-security maximum 1B.switch(config-if)#switchport mode trunkswitch(config-if)#switchport port-security mac-address 1C.switch(c
226、onfig-if)#switchport mode accessswitch(config-if)#switchport port-security maximum 1D.switch(config-if)#switchport mode accessswitch(config-if)#switchport port-security mac-address 1CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Correct Answer: CSection: part 5ExplanationExplanation/R
227、eference:防止集线器在接入层交换机上使用需要下列那个命令？考点分析：这道题考的是端口安全，怎么限制集线器的使用，即是只允许在交换机的接口上连一个终端设备。QUESTION 223What is known as one-to-nearest addressing in IPv6?A. global unicastB. anycastC. multicastD. unspecified addressCorrect Answer: BSection: part 5ExplanationExplanation/Reference:考点分析：这题考的是ipv6的基本的地址类型anycast，
228、anycast指IPV6协议中一个发送方同最近的一组接收方之间的通信。QUESTION 224What is the first 24 bits in a MAC address called?A. NICB. BIAC. OUID. VAICorrect Answer: CSection: part 5ExplanationExplanation/Reference:考点分析：Mac地址是由48个比特位组成的，前24位比特位是标准组织分给厂商的厂商代码，叫做组织惟一标识符，即OUI。后24个比特位是厂商分给各个网卡的，从而使各个网卡的物理地址具有惟一性。 -鸿鹄论坛http:/ 225Ref
229、er to the exhibit. Which subnet mask will place all hosts on Network B in the same subnet with the leastamount of wasted addresses?A. 255.255.255.0B. 255.255.254.0鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. 255.255.252.0D. 255.255.248.0Correct Answer: BSection: part 5ExplanationExplanation/Reference:3
230、10个主机,那么2的X次方-2=310 QUESTION 226Refer to the exhibit. What is the most appropriate summarization for these routes?A. 10.0.0.0 /21B. 10.0.0.0 /22C. 10.0.0.0 /23D. 10.0.0.0 /24Correct Answer: BSection: part 5ExplanationExplanation/Reference:考点分析：这道题考的是子网的聚合。10.0. 0 0 0 0 0 0 0 0 .010.0. 0 0 0 0 0 0 0
231、1 .010.0. 0 0 0 0 0 0 1 0 .010.0. 0 0 0 0 0 0 1 0 .0十进制转成二进制， 发现这四个网段前22位都是一致的，故选项 为B。QUESTION 227What is the difference between a CSU/DSU and a modem?A. A CSU/DSU converts analog signals from a router to a leased line; a modem converts analog signalsfrom a router to a leased line.B. A CSU/DSU conve
232、rts analog signals from a router to a phone line; a modem converts digital signalsfrom a router to a leased line.C. A CSU/DSU converts digital signals from a router to a phone line; a modem converts analog signalsfrom a router to a phone line.D. A CSU/DSU converts digital signals from a router to a
233、leased line; a modem converts digital signalsfrom a router to a phone line.Correct Answer: DSection: part 5ExplanationExplanation/Reference:csu/dsu和modem的不同点是什么？考点分析：这道题考的是CSU/DSU和modem的基本作用。CSU/DSU是把数字信号从路由转换到租用线路上，modem是进行数模转换的设备。CSU/DSU一般是专线，MODEN是将模拟信号与数字信号转换 -鸿鹄论坛http:/ 题库战报交流群： 190906300鸿鹄论坛出品
234、：h t t p :/b b s .h h 010.c o m /QUESTION 228Which two are features of IPv6?(choose two)A. multicastB. broadcastC. allcastD. podcastE. anycastCorrect Answer: AESection: part 5ExplanationExplanation/Reference:A组播E任意播ipv6没有广播QUESTION 229Which two are advantages of static routing when compared to dynam
235、ic routing?(choose two)A. Security increases because only the network administrator may change the routing tables.B. Configuration complexity decreases as network size increases.C. Routing updates are automatically sent to neighbors.D. Route summarization iscompued automatically by the router.E. Rou
236、ting traffic load is reduced when used in stub network linksF. An efficient algorithm is used to build routing tables,using automatic updates.G. Routing tables adapt automatically to topology changes.Correct Answer: AESection: part 5ExplanationExplanation/Reference:静态路由相比动态路由的好处QUESTION 230A network
237、 administrator needs to configure port security on a switch.which two statements are true?(choose two)A. The network administrator can apply port security to dynamic access portsB. The network administrator can configure static secure or sticky secure mac addresses in the voicevlan.C. The sticky lea
238、rning feature allows the addition of dynamically learned addresses to the runningconfiguration.D. The network administrator can apply port security to EtherChannels.E. When dynamic mac address learning is enabled on an interface,the switch can learn new addresses,upto the maximum defined.Correct Ans
239、wer: CESection: part 5ExplanationExplanation/Reference:A.动态端口不能应用的端口安全B.in the vioce vlan不正确C.保存在running configuratin 正确D.EtherChannels 不能应用端口安全鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /E自动学习mac地址可以学到所设置的最大数量，正确QUESTION 231What are three features of the IPV6 protocol?(choose three)A. complicated header
240、B. plug-and-playC. no broadcastsD. checksumsE. optional IPsecF. autoconfigurationCorrect Answer: BCFSection: part 5ExplanationExplanation/Reference:B即插即用C没广播地址F自动设置QUESTION 232Which command enables IPv6 forwarding on a cisco router?A. ipv6 hostB. ipv6 unicast-routing C. ipv6 localD. ipv6 neighborCor
241、rect Answer: BSection: part 5ExplanationExplanation/Reference:在路由器上激活IPV6的命令QUESTION 233Which command encrypts all plaintext passwords?A. Router(config)#password-encryptionB. Router(config)#service password-encryptionC. Router#service password-encryptionD. Router# password-encryptionCorrect Answer:
242、BSection: part 5ExplanationExplanation/Reference:QUESTION 234You have been asked to come up with a subnet mask that will allow all three web servers to be on thesame network while providing the max number of subnets.Which network address and subnet mask meetthis requirement?A. 192.168.252.8 255.255.
243、255.248B. 192.168.252.8 255.255.255.252C. 192.168.252.16 255.255.255.240CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D. 192.168.252.0 255.255.255.252E. 192.168.252.16 255.255.255.252Correct Answer: ASection: part 5ExplanationExplanation/Reference:需要3个有效地址，块大小最小为8，还要提供最大数量的子网，所以用最块大小
244、8，掩码255.255.255.248QUESTION 235Given an IP address 172.16.28.252 with a subnet mask of 255.255.240.0, what is the correct networkaddres?A. 172.16.16.0B. 172.16.24.0C. 172.16.0.0D. 172.16.28.0Correct Answer: ASection: part 5ExplanationExplanation/Reference:求网段的网络地址，即此网段的第一个IP地址QUESTION 236Which IPv6
245、address is the equivalent of the IPv4 interface loopback address 127.0.0.1?A. :1B. :C. 2000:/3D. 0:/10Correct Answer: ASection: part 5ExplanationExplanation/Reference:QUESTION 237You are working in a data center environment and are assigned the address range 10.188.31.0/23.You areasked to develop an
246、 IP addressing plan to allow the maximum number of subnets with as many as 30hosts each.Which IP address range meets these requirements?A. 10.188.31.0/27B. 10.188.31.0/26C. 10.188.31.0/29D. 10.188.31.0/28E. 10.188.31.0/25Correct Answer: ASection: part 5ExplanationExplanation/Reference:30hosts已经包含网关，
247、所以用27掩码正好满足。鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 238Which parameter or parameters are used to calculate OSPF cost in cisco routers?A. Bandwidth,Delay,and MTUB. BandwidthC. Bandwidth and MTUD. Bandwidth , MTU,Reliability,Delay,and LoadCorrect Answer: BSection: part 5ExplanationExplanation/
248、Reference:OSPF使用带宽计算costQUESTION 239Why do large OSPF networks use a hierarchical design?(choose three)A. to confine network instability to single areas of the network.B. to reduce the complexity of router configurationC. to speed up convergenceD. to lower costs by replacing routers with distributio
249、n layer switchesE. to decrease latency by increasing bandwidthF. to reduce routing overheadCorrect Answer: ACFSection: part 5ExplanationExplanation/Reference:A把网络的不稳定性局限于单个区域C加快汇聚F减少路由负载 -鸿鹄论坛http:/ 240The network administrator needs to address seven LANs. RIP version 1 is the only routing protocol
250、in useon the network and subnet 0 is not being used. What is the maximum number of usable IP addresses thatcan be supported on each LAN if the organization is using one class C address block?A. 8B. 6C. 30D. 32E. 14F. 16Correct Answer: CSection: part 5ExplanationExplanation/Reference:需要7个网段，加上不可用的0网段
251、一共8个网段，每个网段有32个IP地址，去掉两个不可用的，答案30 -鸿鹄论坛http:/ 241In a switched environment, what does the IEEE 802.1Q standard describe?A. the operation of VTPCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /B. a method of VLAN trunkingC. an approach to wireless LAN communicationD. the process for root
252、 bridge selectionE. VLAN pruningCorrect Answer: BSection: part 5ExplanationExplanation/Reference:IEEE 802.1Q 是一个中继标准QUESTION 242What is a global command?A. a command that is set once and affects the entire routerB. a command that is implemented in all foreign and domestic IOS versionsC. a command th
253、at is universal in application and supports all protocolsD. a command that is available in every release of IOS, regardless of the version or deployment statusE. a command that can be entered in any configuration modeCorrect Answer: ASection: part 5ExplanationExplanation/Reference:global command 全局配
254、置命令QUESTION 243When a router undergoes the exchange protocol within OSPF, in what order does it pass through eachstate?A. exstart stateexchange stateloading statefull stateB. exstart statefull stateloading stateexchange stateC. Loading stateexchange statefull stateexstart stateD. exstart stateloadin
255、g stateexchange statefull stateCorrect Answer: ASection: part 5ExplanationExplanation/Reference:Exstart一旦DR和BDR选举产生，将交换LSA信息。在这个状态，路由器要决定用于数据交换的初始的数据库描述数据包的序列号，以保证路由器得到的永远是最新的链路状态信息。同时，在这个状态路由器还必须决定路由器之间的主备关系，处于主控地位的路由器会向处于备份地位的路由器请求链路状态信息。Exchange在这个状态，OSPF路由交换DBD报文，DBS仅包含LSA（链路状态信息）和指定目录的LSDB（链路状态
256、数据库）。每一个数据包都有一个数据包序列号。在这个状态，路由器还有可能向相邻路由器发送链路状态请求数据包来请求其相应数据。从这个状态开始，我们说OSPF处于Flood状态，报文会通过泛洪（Fooding） 到路由器的其他端口上。Loading在这个状态中，路由器将结束信息的交换，路由器会建立一个链路状态请求列表（Link-state RequestList） 和一个链路状态转发列表（Link-state Retransmission List）。所有的不完整的或废弃的信息都将放到请求列表，中所有的更新报文将被送到转发列表中，直到该报文得到回应。Full这是两个OSPF路由器建立交互关系的最后一
257、个状态，在这时，建立起交互关系的路由器之间已经完成了数据库同步的工作，它们的链路状态数据库已经一致。 -鸿鹄论坛：http:/ t t p :/b b s .h h 010.c o m /QUESTION 244Which protocol can cause overload on a CPU of a managed device? A. Netflow B. WCCPC. IP SLAD. SNMPCorrect Answer: DSection: part 5ExplanationExplanation/Reference:http:/ 245What is the alert mes
258、sage generated by SNMP agents called ? (choose two)A. trapB. informC. getD. setCorrect Answer: ABSection: part 5ExplanationExplanation/Reference:SNMPv2 TRAPS or SNMPv3 INFORM messages are alerts generated by SNMP agents to the NMS QUESTION 246 Which three features are added in SNMPv3 over SNMPv2 ? (
259、choose three)A. Message IntegrityB. AuthenticationC. EncryptionD. Compression E. rror Detection Correct Answer: ABCSection: part 5ExplanationExplanation/Reference:Message Integrity 数据完整性Authentication 认证Encryption 加密Compression 压缩rror Detection 错误侦测QUESTION 247What are the Popular destinations for s
260、yslog messages to be saved? (choose three)A. flashB. The logging buffer RAM C. The console terminal D. other terminals CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /E. Syslog server Correct Answer: BCESection: part 5ExplanationExplanation/Reference:系统日志常用的存储位置： RAM、控制台终端、系统日志服务器 -鸿鹄论
261、坛：http:/ 248What level will be trapped if the administrator executes the command (choose four)router(cfg)#logging trap 4 A. EmergencyB. Notice C. AlertD. ErrorE. WarningCorrect Answer: ACDESection: part 5ExplanationExplanation/Reference:the command will trap the level 4 till the most severe level ie
262、; warning till emergency. The syslog levels and descriptions are listed below: Code Severity Description 0 Emergency system is unusable 1 Alert action must be taken immediately 2 Critical Critical conditions 3 Error Error conditions 4 Warning Warning conditions 5 Notice normal but significant condit
263、ion. I 6 Informational Informational message 7 Debug Debug-level message -鸿鹄论坛http:/ 249What are the three things that the Netflow uses to consider the traffic to be in a same flow ?(choose three)A. IP addressB. Interface name C. Port numbers D. L3 protocol typeE. mac addressCorrect Answer: ACDSecti
264、on: part 5ExplanationExplanation/Reference:to categorize traffic a single flow, the source & destination IP ADDRESS, source & destination PORTNUMBERS and the L3 PROTOCOL TYPE should match. NetFlow常用的字段：源IP地址、目标IP地址、源端口号、目标端口号、第三层协议、服务类型、输入逻辑接口 -鸿鹄论坛http:/ 250What are the benefit of using Netflow? (C
265、hoose three.) 鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. Network, Application & User MonitoringB. Network Planning C. Security Analysis D. Accounting/Billing Correct Answer: ACDSection: part 5ExplanationExplanation/Reference:A 网络应用&用户检测C 安全分析D 统计账单QUESTION 251Which one of these is a valid HSRP Virtua
266、l Mac Address? A. 0000.0C07.AC15 B. 0000.5E00.01A3C. 0007.B400.AE01D. 0007.5E00.B301 Correct Answer: ASection: part 6ExplanationExplanation/Reference:HSRP virtual Mac address 0000.0c07.acXX 开头，所以答案要选择0000.0c07.ac开头的选项QUESTION 252Which three are the components of SNMP? (Choose three) A. MIBB. manager
267、C. supervisorD. agentE. setF. AESCorrect Answer: ABDSection: part 6ExplanationExplanation/Reference:QUESTION 253Syslog was configured with a level 3 trap. Which 3 types of logs would be generated (choose three) A. Emergencies B. Alerts C. Critical D. Errors E. Warnings Correct Answer: ABCCCNA 题库战报交流
268、群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Section: part 6ExplanationExplanation/Reference:The syslog levels and descriptions are listed below: Code Severity Description 0 Emergency system is unusable 1 Alert action must be taken immediately 2 Critical Critical conditions 3 Error Error condi
269、tions 4 Warning Warning conditions 5 Notice normal but significant condition. I 6 Informational Informational message 7 Debug Debug-level message ABCD都正确，答案只能选3个。-鸿鹄论坛http:/ 254Which three features are added in SNMPv3 over SNMPv2? (choose three)A. Message Integrity B. Compression C. Authentication D
270、. Encryption E. Error Detection Correct Answer: ACDSection: part 6ExplanationExplanation/Reference:QUESTION 255In a GLBP network, who is responsible for the arp request? A. AVFB. AVGC. Active Router D. Standby Router Correct Answer: BSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛http:/ 256Wh
271、ich is true about OSPF router-id?（choose two）A. It is used for type 1 router LSA鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /B. Highest IP address of the loopback is usedC. router-id needs to be matched on ospf neighborsD. router-id is 16 bitCorrect Answer: ABSection: part 6ExplanationExplanation/Referenc
272、e:OSPF router-id 首先选择loopback口中的最大IP地址。如果没有环回地址，选择物理端口中最大的。QUESTION 257In GLBP, which router will respond to client ARP requests?A. The active virtual gateway will reply with one of four possible virtual MAC addresses.B. All GLBP member routers will reply in round-robin fashion.C. The active virtual
273、 gateway will reply with its own hardware MAC address.D. The GLBP member routers will reply with one of four possible burned in hardware addressesCorrect Answer: ASection: part 6ExplanationExplanation/Reference:active virtual gateway=AVGQUESTION 258Which statement describes VRRP object tracking?A. I
274、t monitors traffic flow and link utilization.B. It ensures the best VRRP router is the virtual router master for the group.C. It causes traffic to dynamically move to higher bandwidth linksD. It thwarts man-in-the-middle attacks.Correct Answer: BSection: part 6ExplanationExplanation/Reference:哪一项描述了
275、VRRP的目标跟踪？B 可以确保在VRRP分组中最佳的路由器是主虚拟路由器QUESTION 259What are three benefits of GLBP? (Choose three.)A. GLBP supports up to eight virtual forwarders per GLBP group.B. GLBP supports clear text and MD5 password authentication between GLBP group members.C. GLBP is an open source standardized protocol that
276、can be used with multiple vendors.D. GLBP supports up to 1024 virtual routers.E. GLBP can load share traffic across a maximum of four routersF. GLBP elects two AVGs and two standby AVGs for redundancy.Correct Answer: BDESection: part 6ExplanationExplanation/Reference:GLBP分组中仅有一个AVG，最多有4个AVFCCNA 题库战报
277、交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 260Which three statements about HSRP operation are true? (Choose three.)A. The virtual IP address and virtual MA+K44C address are active on the HSRP Master router.B. The HSRP default timers are a 3 second hello interval and a 10 second de
278、ad interval.C. HSRP supports only clear-text authentication.D. The HSRP virtual IP address must be on a different subnet than the routers interfaces on the sameLAN.E. The HSRP virtual IP address must be the same as one of the routers interface addresses on the LAN.F. HSRP supports up to 255 groups p
279、er interface, enabling an administrative form of load balancing.Correct Answer: ABFSection: part 6ExplanationExplanation/Reference:QUESTION 261Which three statements about Syslog utilization are true? (Choose three.)A. Utilizing Syslog improves network performance.B. The Syslog server automatically
280、notifies the network administrator of network problemsC. A Syslog server provides the storage space necessary to store log files without using router disk space.D. There are more Syslog messages available within Cisco IOS than there are comparable SNMP trapmessages.E. Enabling Syslog on a router aut
281、omatically enables NTP for accurate time stampingF. A Syslog server helps in aggregation of logs and alerts.Correct Answer: CDFSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 262A network administrator enters the following command on a router: logging trap 3. What are three message typ
282、es that will be sent to the Syslog server? (Choose three.)A. informationalB. emergencyC. warningD. criticalE. debugF. errorCorrect Answer: BDFSection: part 6ExplanationExplanation/Reference:The syslog levels and descriptions are listed below: Code Severity Description 0 Emergency system is unusable
283、1 Alert action must be taken immediately 2 Critical Critical conditions 3 Error Error conditions 4 Warning Warning conditions 鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /5 Notice normal but significant condition. I 6 Informational Informational message 7 Debug Debug-level message 选择0-3级QUESTION 263What i
284、s the default Syslog facility level?A. local4B. local5C. local6D. local7Correct Answer: DSection: part 6ExplanationExplanation/Reference:local7-Debugging 调试 -鸿鹄论坛：http:/ 264What command instructs the device to timestamp Syslog debug messages in milliseconds?A. service timestamps log datetime localti
285、meB. service timestamps debug datetime msecC. service timestamps debug datetime localtimeD. service timestamps log datetime msecCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 265What is the cause of the Syslog output messages?A. The EIGRP neighbor on Fa0/1 went down due to
286、 a failed link.B. The EIGRP neighbor connected to Fa0/1 is participating in a different EIGRP process, causing theadjacency to go down.C. A shut command was executed on interface Fa0/1, causing the EIGRP adjacency to go down.D. Interface Fa0/1 has become error disabled, causing the EIGRP adjacency t
287、o go down.Correct Answer: CSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 266Which three statements about the features of SNMPv2 and SNMPv3 are true? (Choose three.)CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. SNMPv3 enhanced SNMPv2 security featuresB. SNMPv3 added
288、 the Inform protocol message to SNMP.C. SNMPv2 added the Inform protocol message to SNMP.D. SNMPv3 added the GetBulk protocol messages to SNMP.E. SNMPv2 added the GetBulk protocol message to SNMP.F. SNMPv2 added the GetNext protocol message to SNMP.Correct Answer: ACESection: part 6ExplanationExplan
289、ation/Reference:QUESTION 267What are three reasons to collect Netflow data on a company network? (Choose three.)A. To identify applications causing congestionB. To authorize user network accessC. To report and alert link up / down instances.D. To diagnose slow network performance, bandwidth hogs, an
290、d bandwidth utilization.E. To detect suboptimal routing in the network.F. To confirm the appropriate amount of bandwidth that has been allocated to each Class of Service.Correct Answer: ADFSection: part 6ExplanationExplanation/Reference:NetFlow facilitates solutions to many common problems encounter
291、ed by IT professionals.+ Analyze new applications and their network impactIdentify new application network loads such as VoIP or remote site additions.+ Reduction in peak WAN trafficUse NetFlow statistics to measure WAN traffic improvement from application-policychanges; understand who is utilizing
292、the network and the network top talkers.+ Troubleshooting and understanding network pain pointsDiagnose slow network performance, bandwidth hogs and bandwidth utilization quicklywithcommand line interface or reporting tools. - D is correct.+ Detection of unauthorized WAN trafficAvoid costly upgrades
293、 by identifying the applications causing congestion. - A is correct.+ Security and anomaly detectionNetFlow can be used for anomaly detection and worm diagnosis along with applicationssuch as Cisco CS-Mars.+ Validation of QoS parametersConfirm that appropriate bandwidth has been allocated to each Cl
294、ass of Service (CoS)andthat no CoS is over- or under-subscribed.- F is correct -鸿鹄论坛：http:/ 268What Netflow component can be applied to an interface to track IPv4 traffic?A. flow monitorB. flow record鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. flow samplerD. flow exporterCorrect Answer: ASection: part
295、 6ExplanationExplanation/Reference:QUESTION 269What Cisco IOS feature can be enabled to pinpoint an application that is causing slow networkperformance?A. SNMPB. NetflowC. WCCPD. IP SLACorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 270What command visualizes the general Ne
296、tFlow data on the command line?A. show ip flow exportB. show ip flow top-talkersC. show ip cache flowD. show mls samplingE. show mls netflow ipCorrect Answer: CSection: part 6ExplanationExplanation/Reference:CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 271What are three val
297、ues that must be the same within a sequence of packets for Netflow to consider them anetwork flow? (Choose three.)A. source IP addressB. source MAC addressC. egress interfaceD. ingress interfaceE. destination IP addressF. IP next-hopCorrect Answer: ADESection: part 6ExplanationExplanation/Reference:
298、QUESTION 272What are three factors a network administrator must consider before implementing Netflow in the network?(Choose three.)A. CPU utilizationB. where Netflow data will be sentC. number of devices exporting Netflow dataD. port availabilityE. SNMP versionF. WAN encapsulation鸿鹄论坛出品：h t t p :/b
299、b s .h h 010.c o m /Correct Answer: ABCSection: part 6ExplanationExplanation/Reference: -鸿鹄论坛：http:/ 273What are two enhancements that OSPFv3 supports over OSPFv2? (Choose two.)A. It requires the use of ARP.B. It can support multiple IPv6 subnets on a single link.C. It supports up to 2 instances of
300、OSPFv3 over a common link.D. It routes over links rather than over networks.Correct Answer: BDSection: part 6ExplanationExplanation/Reference:QUESTION 274What authentication type is used by SNMPv2?A. HMAC-MD5B. HMAC-SHAC. CBC-DESD. community stringsCorrect Answer: DSection: part 6ExplanationExplanat
301、ion/Reference:SNMPV2使用的是那一种认证类型？QUESTION 275What parameter can be different on ports within an EtherChannel?A. speedB. DTP negotiation settingsC. trunk encapsulationD. duplexCorrect Answer: BSection: part 6ExplanationExplanation/Reference: 在EtherChannel中，端口上那一项参数可以配置不一样？ QUESTION 276A network admini
302、strator creates a layer 3 EtherChannel, bundling four interfaces into channel group 1. On what interface is the IP address configured?A. the port-channel 1 interfaceB. the highest number member interfaceCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C. all member interfacesD. the lowe
303、st number member interfaceCorrect Answer: ASection: part 6ExplanationExplanation/Reference: 管理员建立了一个3层EtherChannel，把4个端口聚合到了 channel group 1，在哪一个端口设置IP地址？QUESTION 277What command sequence will configure a router to run OSPF and add network 10.1.1.0 /24 to area 0?A. router ospf area 0 network 10.1.1.
304、0 255.255.255.0 area 0B. router ospf network 10.1.1.0 0.0.0.255C. router ospf 1 network 10.1.1.0 0.0.0.255 area 0D. router ospf area 0 network 10.1.1.0 0.0.0.255 area 0E. router ospf network 10.1.1.0 255.255.255.0 area 0F. router ospf 1 network 10.1.1.0 0.0.0.255Correct Answer: CSection: part 6Expla
305、nationExplanation/Reference:QUESTION 278Refer to the exhibit.If the router Cisco returns the given output and has not had its router ID set manually, what value willOSPF use as its router ID?A. 192.168.1.1B. 172.16.1.1C. 1.1.1.1D. 2.2.2.2Correct Answer: DSection: part 6Explanation鸿鹄论坛出品：h t t p :/b
306、b s .h h 010.c o m /Explanation/Reference:router id 优先选择loopback 端口中的最大IP地址QUESTION 279What OSPF command, when configured, will include all interfaces into area 0?A. network 0.0.0.0 255.255.255.255 area 0B. network 0.0.0.0 0.0.0.0 area 0C. network 255.255.255.255 0.0.0.0 area 0D. network all-interfa
307、ces area 0Correct Answer: ASection: part 6ExplanationExplanation/Reference:哪一个OSPF命令可以把所有端口划分进area 0？QUESTION 280Which statement describes the process ID that is used to run OSPF on a router ?A. It is locally significant and must be the same throughout an areaB. It is globally significant and is use
308、d to represent the AS numberC. It is locally significant and is used to identify an instance of the OSPF databaseD. It is globally significant and is used to identify OSPF stub areasCorrect Answer: CSection: part 6ExplanationExplanation/Reference:OSPF ProcessID只是本地有效，用来在本地区分不同的OSPF进程QUESTION 281Refe
309、r to the exhibit. What set of commands was configured on interface Fa0/3 to produce the given theoutput?A. interface FastEthernet 0/3 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switchport mode trunkB. interface FastEthernet 0/3 Channel-group 2 mode passive Switchport trunk e
310、ncapsulation dot1q Switchport mode trunkC. interface FastEthernet 0/3 Channel-group 2 mode on Switchport trunk encapsulation dot1q Switchport mode trunkD. interface FastEthernet 0/3CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / Channel-group 2 mode active Switchport trunk encapsulati
311、on dot1q Switchport mode trunkCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 282What SNMP message alerts the manager to a condition on the network?A. responseB. trapC. cetD. captureCorrect Answer: BSection: part 6ExplanationExplanation/Reference:An agent can send unsolicit
312、ed traps to the manager. Traps are messages alerting theSNMP manager to a condition on the network. Traps can mean improper userauthentication, restarts, link status (up or down), MAC address tracking, closing of a TCPconnection, loss of connection to a neighbor, or other significant events.Referenc
313、e:http:/ 283Refer to the exhibit.If the devices produced the given output,what is the cause of the EtherChannelproblem?鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. There is a speed mismatch between SW1s Fa0/1 and SW2s Fa0/1 interfaces.B. There is an MTU mismatch between SW1s Fa0/1 and SW2s Fa0/1 interf
314、aces.C. There is an encapsulation mismatch between SW1s Fa0/1 and SW2s Fa0/1 interface.D. SW1s Fa0/1 interface is administratively shut down.Correct Answer: ASection: part 6ExplanationExplanation/Reference:EtherChannel中两个端口需要speed一致QUESTION 284What are two benefits of using a single OSPF area networ
315、k design?(choose two)A. it reduces the number of required OSPF neighbor adjacenciesB. It reduces the types of LSAs that are generatedC. It is less CPU intensive for routers in the single areaD. It increases LSA response times.E. It removes the need for virtual linksCorrect Answer: BESection: part 6E
316、xplanationExplanation/Reference:使用单区域OSPF的好处？减少了LSA的种类不需要虚链路QUESTION 285Refer to the exhibit .A network administrator is configuring an EtherChannel between SW1 and SW2 . TheSW1 configuration is show.What is the correct configuration for SW2?A. Interface FastEthernet 0/1 Channel-group 1 mode active
317、Switchport trunk encapsulation dot1q Switchport mode trunkCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m / Interface FastEthernet 0/2 Channel-group 1 mode active Switchport trunk encapsulation dot1q Switchport mode trunkB. Interface FastEthernet 0/1 Channel-group 1 mode passive Switchp
318、ort trunk encapsulation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-group 1 mode passive Switchport trunk encapsulation dot1q Switchport mode trunkC. Interface FastEthernet 0/1 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switchport mode trunk Interface Fast
319、Ethernet 0/2 Channel-group 1 mode desirable Switchport trunk encapsulation dot1q Switchport mode trunkD. Interface FastEthernet 0/1 Channel-group 1 mode auto Switchport trunk encapsulation dot1q Switchport mode trunk Interface FastEthernet 0/2 Channel-group 1 mode auto Switchport trunk encapsulation
320、 dot1q Switchport mode trunkCorrect Answer: CSection: part 6ExplanationExplanation/Reference:一端已经设置为auto模式，另一端必须设置为desirable模式才能协商成为trunk。QUESTION 286In which two formats can the IPv6 address fd15:0db8:0000:0000:0700:0003:400F:572B be written?(Choose two.)A. fd15:0db8:0000:0000:700:3:400F:527BB. d15
321、:db8:700:3:400F:527BC. fd15:db8:0:700:3:4F:527BD. fd15:0db8:7:3:4F:527BE. fd15:db8:700:3:400F:572BCorrect Answer: AESection: part 6ExplanationExplanation/Reference:-鸿鹄论坛：http:/ 287When an interface is configured with PortFast BPDU guard, how does the interface respond when itreceives a BPDU?鸿鹄论坛出品：h
322、 t t p :/b b s .h h 010.c o m /A. It continues operating normally.B. It goes into a down/down state.C. It becomes the root bridge for the configured VLAN.D. It goes into an errdisable state.Correct Answer: DSection: part 6ExplanationExplanation/Reference:QUESTION 288What are three characteristics of
323、 the TCP protocol? (Choose three.)A. It uses a single SYN-ACK message to establish a connection.B. The connection is established before data is transmitted.C. It ensures that all data is transmitted and received by the remote device.D. It supports significantly higher transmission speeds than UDP.E.
324、 It requires applications to determine when data packets must be retransmitted.F. It uses separate SYN and ACK messages to establish a connection.Correct Answer: BCFSection: part 6ExplanationExplanation/Reference:QUESTION 289Which command can you enter to determine whether serial interface 0/2/0 has
325、 been configured usingHDLC encapsulation?A. router#show platformB. router#show interfaces Serial 0/2/0C. router#show ip interface s0/2/0D. router#show ip interface briefCorrect Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 290Which function of the IP SLAs ICMP jitter operation ca
326、n you use to determine whether a VoIP issue iscaused by excessive end-to-end time?A. packet lossB. jitterC. successive packet lossD. round-trip time latencyCorrect Answer: DSection: part 6ExplanationCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Reference:QUESTION 291Which
327、 condition does the err-disabled status indicate on an Ethernet interface?A. There is a duplex mismatch.B. The device at the other end of the connection is powered off.C. The serial interface is disabled.D. The interface is configured with the shutdown command.E. Port security has disabled the inter
328、face.F. The interface is fully functioning.Correct Answer: ESection: part 6ExplanationExplanation/Reference:QUESTION 292Which statement about RADIUS security is true?A. It supports EAP authentication for connecting to wireless networks.B. It provides encrypted multiprotocol support.C. Device-adminis
329、tration packets are encrypted in their entirety.D. It ensures that user activity is fully anonymous.Correct Answer: ASection: part 6ExplanationExplanation/Reference:-鸿鹄论坛：http:/ 293Which two statements about IPv4 multicast traffic are true? (Choose two.)A. It burdens the source host without affectin
330、g remote hosts.B. It uses a minimum amount of network bandwidth.C. It is bandwidth-intensive.D. It simultaneously delivers multiple streams of data.E. It is the most efficient way to deliver data to multiple receivers.Correct Answer: DESection: part 6ExplanationExplanation/Reference:QUESTION 294Whic
331、h type of device can be replaced by the use of subinterfaces for VLAN routing?A. Layer 2 bridgeB. Layer 2 switchC. Layer 3 switch鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D. routerCorrect Answer: CSection: part 6ExplanationExplanation/Reference:QUESTION 295Which statement about LLDP is true?A. It is a
332、Cisco proprietary protocolB. It is configured in global configuration mode.C. The LLDP update frequency is a fixed value.D. It runs over the transport layer.Correct Answer: BSection: part 6ExplanationExplanation/Reference:QUESTION 296What are two benefits of private IPv4 IP addresses? (Choose two.)A
333、. They are routed the same as public IP addresses.B. They are less costly than public IP addresses.C. They can be assigned to devices without Internet connections.D. They eliminate the necessity for NAT policies.E. They eliminate duplicate IP conflicts.Correct Answer: BCSection: part 6ExplanationExp
334、lanation/Reference:-鸿鹄论坛：http:/ 297If the primary root bridge experiences a power loss, which switch takes over?A. switch 0040.00.90C5B. switch 00E0.F90B.6BE3C. switch 0004.9A1A.C182D. switch 00E0.F726.3DC6Correct Answer: CSection: part 6ExplanationExplanation/Reference:QUESTION 298A network adminis
335、trator is troubleshooting an EIGRP problem on a router and needs to confirm the IPaddresses of the devices with which the routerhas established adjacency. The retransmit interval and the queue counts for the adjacent routers alsoCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /need to b
336、e checked. What command will displaythe required information?A. Router# show ip eigrp neighborsB. Router# show ip eigrp interfacesC. Router# show ip eigrp adjacencyD. Router# show ip eigrp topologyCorrect Answer: ASection: part 6ExplanationExplanation/Reference:QUESTION 299What is the authoritative
337、source for an address lookup?A. a recursive DNS searchB. the operating system cacheC. the ISP local cacheD. the browser cacheCorrect Answer: ASection: part 6ExplanationExplanation/Reference:QUESTION 300Which command can you enter to verify that a BGP connection to a remote device is established?A. s
338、how ip bgp summaryB. show ip community-listC. show ip bgp pathsD. show ip routeCorrect Answer: ASection: part 6ExplanationExplanation/Reference:QUESTION 301Which three circumstances can cause a GRE tunnel to be in an up/down state? (Choose three.)A. The tunnel interface IP address is misconfigured.B
339、. The tunnel interface is down.C. A valid route to the destination address is missing from the routing table.D. The tunnel address is routed through the tunnel itself.E. The ISP is blocking the traffic.F. An ACL is blocking the outbound traffic.Correct Answer: BCDSection: part 7Explanation鸿鹄论坛出品：h t
340、 t p :/b b s .h h 010.c o m /Explanation/Reference:-鸿鹄论坛：http:/ 302Which three statements about IPv6 prefixes are true? (Choose three.)A. FEC0:/10 is used for IPv6 broadcast.B. FC00:/7 is used in private networks.C. FE80:/8 is used for link-local unicast.D. FE80:/10 is used for link-local unicast.E.
341、 2001:1/127 is used for loopback addresses.F. FF00:/8 is used for IPv6 multicast.Correct Answer: BDFSection: part 7ExplanationExplanation/Reference:QUESTION 303Which command can you enter to display duplicate IP addresses that the DHCP server assigns?A. show ip dhcp conflict 10.0.2.12B. show ip dhcp
342、 database 10.0.2.12C. show ip dhcp server statisticsD. show ip dhcp binding 10.0.2.12Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 304Which two statements about using leased lines for your WAN infrastructure are true? (Choose two.)A. Leased lines provide inexpensive WAN a
343、ccess.B. Leased lines with sufficient bandwidth can avoid latency between endpoints.C. Leased lines require little installation and maintenance expertise.D. Leased lines provide highly flexible bandwidth scaling.E. Multiple leased lines can share a router interface.F. Leased lines support up to T1 l
344、ink speeds.Correct Answer: CDSection: part 7ExplanationExplanation/Reference:QUESTION 305Which two statements about IPv6 and routing protocols are true? (Choose two.)A. EIGRPv3 was developed to support IPv6 routing.B. OSPFv3 was developed to support IPv6 routing.CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p
345、 :/b b s .h h 010.c o m /C. Loopback addresses are used to form routing adjacencies.D. EIGRP, OSPF, and BGP are the only routing protocols that support IPv6.E. Link-local addresses are used to form routing adjacencies.Correct Answer: BESection: part 7ExplanationExplanation/Reference:-鸿鹄论坛：http:/ 306
346、Which feature builds a FIB and an adjacency table to expedite packet forwarding?A. cut throughB. fast switchingC. process switchingD. Cisco Express ForwardingCorrect Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 307Which command can you enter to verify that a 128-bit address is l
347、ive and responding?A. tracerouteB. telnetC. pingD. ping ipv6Correct Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 308What are two reasons that duplex mismatches can be difficult to diagnose? (Choose two.)A. The interface displays a connected (up/up) state even when the duplex set
348、tings are mismatched.B. 1-Gbps interfaces are full-duplex by default.C. Full-duplex interfaces use CSMA/CD logic, so mismatches may be disguised by collisions.D. The symptoms of a duplex mismatch may be intermittent.E. Autonegotiation is disabled.Correct Answer: ADSection: part 7ExplanationExplanati
349、on/Reference:QUESTION 309Which condition indicates that service password-encryption is enabled?鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A. The local username password is in clear text in the configuration.B. The enable secret is in clear text in the configurationC. The local username password is encry
350、pted in the configuration.D. The enable secret is encrypted in the configuration.Correct Answer: CSection: part 7ExplanationExplanation/Reference:-鸿鹄论坛：http:/ 310Which two Cisco IOS commands, used in troubleshooting, can enable debug output to aremote location? (Choose two)A.no logging consoleB.logg
351、ing host ip-addressC.terminal monitorD.show logging | redirect flashioutput.txtE.snmp-server enable traps syslogCorrect Answer: BCSection: part 7ExplanationExplanation/Reference:QUESTION 311Which command can you enter to route all traffic that is destined for 192.168.0.0/20 to aspecific interface?A.
352、router(config)#ip route 192.168.0.0 255.255.240.0 GigabitEthernet0/1B.router(config)#ip route 0.0.0.0 255.255.255.0 GigabitEthernet0/1C.router(config)#ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1D.router(config)#ip route 192.168.0.0 255.255.255.0 GigabitEthernet0/1Correct Answer: ASection: part 7Expl
353、anationExplanation/Reference:QUESTION 312During which phase of PPPoE is PPP authentication performed?A.the PPP Session phaseB.Phase 2C.the Active Discovery phaseD.the Authentication phaseE.Phase 1CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Correct Answer: ASection: part 7Explanatio
354、nExplanation/Reference:QUESTION 313Which two statements about late collisions are true? (Choose two.)A.They may indicate a duplex mismatch.B.By definition, they occur after the 512th bit of the frame has been transmitted.C.They indicate received frames that did not pass the FCS match.D.They are fram
355、es that exceed 1518 bytes.E.They occur when CRC errors and interference occur on the cable.Correct Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 314Which protocol is the Cisco proprietary implementation of FHRP?A.HSRPB.VRRPC.GLBPD.CARPCorrect Answer: ASection: part 7ExplanationE
356、xplanation/Reference:QUESTION 315Which two passwords must be supplied in order to connect by Telnet to a properlysecured Cisco switch and make changes to the device configuration? (Choose two.)A.tty passwordB.enable secret passwordC.vty passwordD.aux passwordE.console passwordF.username passwordCorr
357、ect Answer: BCSection: part 7ExplanationExplanation/Reference:鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 316Which logging command can enable administrators to correlate syslog messages withmillisecond precision?A.no logging consoleB.logging buffered 4C.no logging monitorD.service timestamps log
358、 datetime msecE.logging host 10.2.0.21Correct Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 317Which two features can dynamically assign IPv6 addresses? (Choose two.)A.IPv6 stateless autoconfigurationB.DHCPC.NHRPD.IPv6 stateful autoconfigurationE.ISATAP tunnelingCorrect Answer: A
359、BSection: part 7ExplanationExplanation/Reference:QUESTION 318What is the first step in the NAT configuration process?A.Define inside and outside interfaces.B.Define public and private IP addresses.C.Define IP address pools.D.Define global and local interfaces.Correct Answer: ASection: part 7Explanat
360、ionExplanation/Reference:QUESTION 319Which three statements about link-state routing are true? (Choose three.)A.Routes are updated when a change in topology occurs.B.Updates are sent to a multicast address by default.C.OSPF is a link-state protocol.CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h
361、010.c o m /D.Updates are sent to a broadcast address.E.RIP is a link-state protocolF.It uses split horizon.Correct Answer: ABCSection: part 7ExplanationExplanation/Reference:QUESTION 320Refer to the exhibit. Which two statements are true about the loopback address that isconfigured on RouterB? (Choo
362、se two.)A.It ensures that data will be forwarded by RouterB.B.It provides stability for the OSPF process on RouterB.C.It specifies that the router ID for RouterB should be 10.0.0.1.D.It decreases the metric for routes that are advertised from RouterB.E.It indicates that RouterB should be elected the
363、 DR for the LAN.Correct Answer: BCSection: part 7ExplanationExplanation/Reference:QUESTION 321What are three characteristics of satellite Internet connections? (Choose three.)鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A.Their upload speed is about 10 percent of their download speed.B.They are frequently
364、 used by rural users without access to other high-speedconnections.C.They are usually at least 10 times faster than analog modem connections.D.They are usually faster than cable and DSL connections.E.They require a WiMax tower within 30 miles of the user location.F.They use radio waves to communicat
365、e with cellular phone towers.Correct Answer: ABCSection: part 7ExplanationExplanation/Reference:QUESTION 322Refer to the exhibit.What is the effect of the given configuration?A.It configures an inactive switch virtual interface.B.It configures an active management interface.C.It configures the nativ
366、e VLAN.D.It configures the default VLAN.Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 323Which spanning-tree protocol rides on top of another spanning-tree protocol?A.MSTPB.RSTPC.PVST+D.Mono Spanning TreeCorrect Answer: ASection: part 7ExplanationExplanation/Reference:CCN
367、A 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 324The enable secret command is used to secure access to which CLI mode?A.global configuration modeB.privileged EXEC modeC.user EXEC modeD.auxiliary setup modeCorrect Answer: BSection: part 7ExplanationExplanation/Reference:QUESTION
368、 325Which two spanning-tree port states does RSTP combine to allow faster convergence?(Choose two.)A.blockingB.listeningC.learningD.forwardingE.discardingCorrect Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 326Which NAT function can map multiple inside addresses to a single out
369、side address?A.PATB.SFTPC.RARPD.ARPE.TFTPCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 327Which two statements about northbound and southbound APIs are true? (Choose two.)A.Only southbound APIs allow program control of the network.B.Only northbound APIs allow program cont
370、rol of the network.C.Only southbound API interfaces use a Service Abstraction Layer.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /D.Only northbound API interfaces use a Service Abstraction Layer.E.Both northbound and southbound API interfaces use a Service Abstraction Layer.F.Both northbound and southbound
371、 APIs allow program control of the network.Correct Answer: BCSection: part 7ExplanationExplanation/Reference:QUESTION 328Which three statements about static routing are true? (Choose three.)A.It uses consistent route determinationB.It is best used for small-scale deployments.C.Routing is disrupted w
372、hen links fail.D.It requires more resources than other routing methods.E.It is best used for large-scale deployments.F.Routers can use update messages to reroute when links fail.Correct Answer: ABCSection: part 7ExplanationExplanation/Reference:QUESTION 329Which protocol advertises a virtual IP addr
373、ess to facilitate transparent failover of a Ciscorouting device?A.FHRPB.DHCPC.RSMLTD.ESRPCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 330If primary and secondary root switches with priority 16384 both experience catastrophiclosses, which tertiary switch can take over?A.a
374、 switch with priority 20480B.a switch with priority 8192C.a switch with priority 4096D.a switch with priority 12288Correct Answer: ASection: part 7鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /ExplanationExplanation/Reference:QUESTION 331Which c
375、ommand can you enter to configure a local username with an encryptedpassword and EXEC mode user privileges?A.Router(config)#username jdone privilege 1 password 7 08314D5D1A48B.Router(config)#username jdone privilege 1 password 7 PASSWORD1C.Router(config)#username jdone privilege 15 password 0 08314D
376、5D1A48D.Router(config)#username jdone privilege 15 password 0 PASSWORD1Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 332Which switching method duplicates the first six bytes of a frame before making aswitching decision?A.fragment-free switchingB.store and-forward switchin
377、gC.cut through switchingD.ASIC switchingCorrect Answer: CSection: part 7ExplanationExplanation/Reference:Cut and Through method has lowest latency. In this method Switch only read first sixbytes from frame after the preamble. These six bytes are the destination address offrame. This is the fastest m
378、ethod of switching. This method also processes invalidframes. Only advantage of this method is speed.QUESTION 333If a router has four interfaces and each interface is connected to four switches, howmany broadcast domains are present on the router?A. 1B. 2C. 4D. 8Correct Answer: CSection: part 7Expla
379、nationExplanation/Reference:QUESTION 334鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /What is the correct routing match to reach 172.16.1.5/32?A.172.16.1.0/26B.172.16.1.0/25C.172.16.1.0/24D.the default routeCorrect Answer: ASection: part 7ExplanationExplanation/Reference:当多条路由符合，选择最长掩码的路由QUESTION 335Which
380、command can you enter to view the ports that are assigned to VLAN 20?A.Switch#show vlan id 20B.Switch#show ip interface briefC.Switch#show interface vlan 20D.Switch#show ip interface vlan 20Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 336Which interface counter can you u
381、se to diagnose a duplex mismatch problem?A.no earnerB.late collisionsC.giantsD.CRC errorsE.deferredF.runtsCorrect Answer: BSection: part 7ExplanationExplanation/Reference:QUESTION 337Which two commands can you enter to verify that a configured NetFlow data export isoperational? (Choose two.)A.show i
382、p flow exportB.show ip cache flowC.ip flow ingressD.ip flow egressCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /E.interface ethernet 0/0F.ip flow-export destinationCorrect Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 338Refer to the exhibit.Which user-mode passw
383、ord has just been set?A.TelnetB.AuxiliaryC.SSHD.ConsoleCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 339Which two statements about IPv6 router advertisement messages are true? (Choosetwo.)A.They use ICMPv6 type 134.B.The advertised prefix length must be 64 bits.C.The adve
384、rtised prefix length must be 48 bits.D.They are sourced from the configured IPv6 interface address.E.Their destination is always the link-local address of the neighboring node.Correct Answer: ABSection: part 7ExplanationExplanation/Reference:鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 340What is
385、 the purpose of the POST operation on a router?A.determine whether additional hardware has been addedB.locate an IOS image for bootingC.enable a TFTP serverD.set the configuration registerCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 341Which feature can you implement to
386、reserve bandwidth for VoIP calls across the callpath?A.PQB.CBWFQC.round robinD.RSVPCorrect Answer: DSection: part 7ExplanationExplanation/Reference:When implemented on all nodes in the path, RSVP guarantees bandwidth for the callalong the entire path for the entire duration of the call. This is the
387、only techniquethat achieves this level of accuracy.QUESTION 342Which command is necessary to permit SSH or Telnet access to a cisco switch that isotherwise configured for these vty line protocols?A.transport type allB.transport output allC.transport preferred allD.transport input allCorrect Answer:
388、DSection: part 7ExplanationExplanation/Reference:QUESTION 343Which step in the router boot process searches for an IOS image to load into the router?A.bootstrapB.POSTCCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C.mini-IOSD.ROMMON modeCorrect Answer: ASection: part 7ExplanationExplan
389、ation/Reference:QUESTION 344Which command can you execute to set the user inactivity timer to 10 seconds?A.SW1(config-line)#exec-timeout 0 10B.SW1(config-line)#exec-timeout 10C.SW1(config-line)#absolute-timeout 0 10D.SW1(config-line)#absolute-timeout 10Correct Answer: ASection: part 7ExplanationExpl
390、anation/Reference:QUESTION 345Which command can you enter to display the hits counter for NAT traffic?A.show ip nat statisticsB.debug ip natC.show ip debug natD.clear ip nat statisticsCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 346Which command can you use to set the ho
391、stname on a switch?A.switch-mdf-c1(config)#hostname switch-mdf1B.switch-mdf-c1hostname switch-mdf1C.switch-mdf-c1#hostname switch-mdf1D.switch-mdf-c1(config-if)#hostname switch-mdf1Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 347鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Whi
392、ch command sets and automatically encrypts the privileged enable mode password?A.Enable password c1sc0B.Secret enable c1sc0C.Password enable c1sc0D.Enable secret c1sc0Correct Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 348Which two types of NAT addresses are used in a Cisco NAT
393、 device? (Choose two.)A.inside localB.inside globalC.inside privateD.outside privateE.external globalF.external localCorrect Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 349Which three commands can you use to set a router boot image? (Choose three.)A.Router(config)# boot system
394、 flash c4500-p-mz.121-20.binB.Router(config)# boot system tftp c7300-js-mz.122-33.SB8a.binC.Router(config)#boot system rom c7301-advipservicesk9-mz.124-24.T4.binD.Router boot flash:c180x-adventerprisek9-mz-124-6T.binE.Router(config)#boot flash:c180x-adventerprisek9-mz-124-6T.binF.Router(config)#boot
395、 bootldr bootflash:c4500-jk9s-mz.122-23f.binCorrect Answer: ABCSection: part 7ExplanationExplanation/Reference:QUESTION 350Refer to the exhibit.CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /What is the result of setting the no login command?A.Telnet access is denied.B.Telnet access r
396、equires a new password at the first login.C.Telnet access requires a new password.D.no password is required for telnet access.Correct Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 351Which command can you enter to determine whether a switch is operating in trunkingmode?A.show ip
397、interface briefB.show vlanC.show interfacesD.show interface switchportCorrect Answer: DSection: part 7ExplanationExplanation/Reference:QUESTION 352After you configure the Loopback0 interface, which command can you enter to verify thestatus of the interface and determine whether fast switching is ena
398、bled?A.Router#show ip interface loopback 0B.Router#show runC.Router#show interface loopback 0D.Router#show ip interface briefCorrect Answer: ASection: part 7Explanation鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Explanation/Reference:QUESTION 353Which technology allows a large number of private IP addres
399、ses to be represented by asmaller number of public IP addresses?A.NATB.NTPC.RFC 1631D.RFC 1918Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 354What are three broadband wireless technologies? (Choose three.)A.WiMaxB.satellite InternetC.municipal Wi-FiD.site-to-site VPNE.DS
400、LAMF.CMTSCorrect Answer: ABCSection: part 7ExplanationExplanation/Reference:QUESTION 355Which two security appliances will you use in a network? (Choose two.)A.ATMB.IDSC.IOSD.IOXE.IPSF.SDMCorrect Answer: BESection: part 7ExplanationExplanation/Reference:QUESTION 356Which two statements about the tun
401、nel mode ipv6ip command are true? (Choose two.)CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /A.It enables the transmission of IPv6 packets within the configured tunnel.B.It specifies IPv4 as the encapsulation protocol.C.It specifies IPv6 as the encapsulation protocolD.It specifies IP
402、v6 as the transport protocol.E.It specifies that the tunnel is a Teredo tunnel.Correct Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 357Which command sequence can you enter to create VLAN 20 and assign it to an interfaceon a switch?A.Switch(config)#vlan 20Switch(config)#Interfac
403、e gig x/ySwitch(config-if)#switchport access vlan 20B.Switch(config)#Interface gig x/ySwitch(config-if)#vlan 20Switch(config-vlan)#switchport access vlan 20C.Switch(config)#vlan 20Switch(config)#Interface vlan 20Switch(config-if)#switchport trunk native vlan 20D.Switch(config)#vlan 20Switch(config)#
404、Interface vlan 20Switch(config-if)#switchport access vlan 20E.Switch(config)#vlan 20Switch(config)#Interface vlan 20Switch(config-if)#switchport trunk allowed vlan 20Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 358Which technology can enable multiple VLANs to communicate
405、 with one another?A.inter-VLAN routing using a Layer 3 switchB.inter-VLAN routing using a Layer 2 switchC.intra-VLAN routing using router on a stickD.intra-VLAN routing using a Layer 3 switchCorrect Answer: ASection: part 7ExplanationExplanation/Reference:鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUEST
406、ION 359What is the danger of the permit any entry in a NAT access list?A.It can lead to overloaded resources on the routerB.It can cause too many addresses to be assigned to the same interface.C.It can disable the overload command.D.It prevents the correct translation of IP addresses on the inside n
407、etwork.Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 360In which three ways is an IPv6 header simpler than an IPv4 header? (Choose three.)A.Unlike IPv4 headers, IPv6 headers have a fixed length.B.IPv6 uses an extension header instead of the IPv4 Fragmentation field.C.IPv6
408、 headers eliminate the IPv4 Checksum field.D.IPv6 headers use the Fragment Offset field in place of the IPv4 Fragmentation field.E.IPv6 headers use a smaller Option field size than IPv4 headers.F.IPv6 headers use a 4-bit TTL field, and IPv4 headers use an 8-bit TTL field.Correct Answer: ABCSection:
409、part 7ExplanationExplanation/Reference:QUESTION 361Which IPv6 header field is equivalent to the TTL?A.Hop LimitB.Flow LabelC.TTDD.Hop CountE.Scan TimerCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 362Which command can you enter to set the default route for all traffic to
410、an interface?A.router(config)#ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1B.router(config)#ip route 0.0.0.0 255.255.255.255 GigabitEthernet0/1CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /C.router(config-router)#default-information originateD.router(config-router)#default-information
411、originate alwaysCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 363Which type of address is the public IP address of a NAT device?A.outside globalB.outside localC.inside globalD.inside localE.outside publicF.inside publicCorrect Answer: CSection: part 7ExplanationExplanatio
412、n/Reference:QUESTION 364What is the effect of the overload keyword in a static NAT translation configuration?A.It enables port address translationB.It enables the use of a secondary pool of IP addresses when the first pool is depleted.C.It enables the inside interface to receive traffic.D.It enables
413、 the outside interface to forward traffic.Correct Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 365What should be part of a comprehensive network security plan?A.Allow users to develop their own approach to network security.B.Physically secure network equipment from potential acc
414、ess by unauthorizedindividualsC.Encourage users to use personal information in their passwords to minimize thelikelihood of passwords being forgotten.D.Delay deployment of software patches and updates until their effect on end-userequipment is well known and widely reportedE.Minimize network overhea
415、d by deactivating automatic antivirus client updates.鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /Correct Answer: BSection: part 7ExplanationExplanation/Reference:QUESTION 366If all OSPF routers in a single area are configured with the same priority value, whatvalue does a router use for the OSPF router I
416、D in the absence of a loopback interface?A.the IP address of the first Fast Ethernet interfaceB.the IP address of the console management interfaceC.the highest IP address among its active interfacesD.the lowest IP address among its active interfacesE.the priority value until a loopback interface is
417、configuredCorrect Answer: CSection: part 7ExplanationExplanation/Reference:QUESTION 367What are two requirements for an HSRP group? (Choose two.)A.exactly one active routerB.one or more standby routersC.one or more backup virtual routersD.exactly one standby active routerE.exactly one backup virtual
418、 routerCorrect Answer: ABSection: part 7ExplanationExplanation/Reference:QUESTION 368Which two statements about wireless LAN controllers are true? (Choose two.)A.They can simplify the management and deployment of wireless LANs.B.They rely on external firewalls for WLAN security.C.They are best suite
419、d to smaller wireless networks.D.They must be configured through a GUI over HTTP or HTTPS.E.They can manage mobility policies at a systemwide level.Correct Answer: AESection: part 7ExplanationExplanation/Reference:CCNA 题库战报交流群： 190906300鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /QUESTION 369Which standa
420、rds-based First Hop Redundancy Protocol is a Cisco supported alternativeto Hot Standby Router Protocol?A.VRRPB.GLBPC.TFTPD.DHCPCorrect Answer: ASection: part 7ExplanationExplanation/Reference:QUESTION 370Refer to the exhibit. Complete the network diagram by dragging the correct device name or description tothe correct location. Not all the names or descriptions will be used.Select and Place:鸿鹄论坛出品：h t t p :/b b s .h h 010.c o m /
