1、QUESTION 37What are two characteristics of RIPv2? (Choose two.)A. classful routing protocolB. variable-length subnet masksC. broadcast addressingD. manual route summarizationE. uses SPF algorithm to compute pathAnswer: BDExplanation/Reference:A：有类路由协议，错误B：可变长度子网掩码，正确C：采用广播地址更新，错误D：手动路由汇总，正确E:使用 spf算
2、法计算路径，错误。QUESTION 38Which two Ethernet fiber-optic modes support distances of greater than 550 meters?A.1000BASE-CXB. 100BASE-FXC. 1000BASE-LXD. 1000BASE-SXE. 1000BASE-ZXAnswer: CEExplanation/Reference:A：最长距离25米B：最长距离100米C：最长距离3000米D：最长距离550米E：最长距离 70千米QUESTION 39What two things will a router do whe
3、n running a distance vector routing protocol? (Choose two.)A. Send periodic updates regardless of topology changes.B. Send entire routing table to all routers in the routing domain.C. Use the shortest-path algorithm to the determine best path.D. Update the routing table based on updates from their n
4、eighbors.E. Maintain the topology of the entire network in its database.Answer: ADExplanation/Reference:考点：考查距离矢量路由协议特性A：周期性更新，正确B：发送整个路由表到整个路由域，错误，只发送给邻居C：使用SPF算法，错误D：依靠邻居发送更新来更新路由表，正确E：在数据库中维护整个网络的拓扑。错误Which command shows if an access list is assigned to an interface?A. show ip interface interface
5、 access-listsB. show ip access-lists interface interfaceC. show ip interface interfaceD. show ip access-lists interfaceAnswer: CExplanation/Reference:QUESTION 42Refer to the exhibit. Which rule does the DHCP server use when there is an IP address conflict?A. The address is removed from the pool unti
6、l the conflict is resolved.B. The address remains in the pool until the conflict is resolved.C. Only the IP detected by Gratuitous ARP is removed from the pool.D. Only the IP detected by Ping is removed from the pool.E. The IP will be shown, even after the conflict is resolved.Answer: AExplanation/R
7、eference:show ip dhcp conflict命令可以查看哪些ip地址在使用上有冲突。有冲突的地址不再分配出去。A：地址被删除直到冲突解决，正确B:地址保留直到冲突解决，错误C/D：答案片面。E：当冲突解决后，地址会被显示。错误。QUESTION 44Refer to the exhibit. If number 2 is selected from the setup script, what happens when the user runs setupfrom a privileged prompt?A. Setup is additive and any changes
8、 will be added to the config script.B. Setup effectively starts the configuration over as if the router was booted for the first time.C. Setup will not run if an enable secret password exists on the router.D. Setup will not run, because it is only viable when no configuration exists on the router.An
9、swer: AExplanation/Reference:0不保存进入IOS命令配置模式1不保存返回设置模式2保存退出A：设置和改动被保存到配置脚本B：为有效地重新开始配置，如果路由器是第一次启动的配置。C：如果配置了密码，设置不会运行D：设置不可用，因为它只能在没有配置存在时才有效QUESTION 49Which two statements describe the Cisco implementation of VLANs? (Choose two.)A. VLAN 1 is the default Ethernet VLAN.B. CDP advertisements are only
10、 sent on VLAN 1002.C. By default, the management VLAN is VLAN 1005.D. By default, the switch IP address is in VLAN 1005.E. VLAN 1002 through 1005 are automatically created and cannot be deleted.Answer: AEExplanation/Reference:考点：考查vlan知识点。A：缺省都存在vlan1，端口都属于vlan1，正确B：CDP信息只发送到vlan1002，错误，vlan1002是fdd
11、i网络的vlan号。C：缺省情况交换机IP配置在vlan1005，错误，vlan1005trnet网络的vlan号。缺省在vlan1里面。D：vlan1002-1005 自动生成并不能被删除，正确，他们都是被保留的特殊 vlan。QUESTION 56 没有理解什么意思Refer to the exhibit. What does the (*) represent in the output?A. Packet is destined for a local interface to the router.B. Packet was translated, but no response w
12、as received from the distant device.C. Packet was not translated, because no additional ports are available.D. Packet was translated and fast switched to the destination.Answer: DExplanation/Reference:由图中提示信息可以看出，源为 10.10.0.2已经有个一个转换，所以后续的数据包快速转发。What are three advantages of VLANs? (Choose three.)A.
13、 VLANs establish broadcast domains in switched networks.B. VLANs utilize packet filtering to enhance network security.C. VLANs provide a method of conserving IP addresses in large networks.D. VLANs provide a low-latency internetworking alternative to routed networks.E. VLANs allow access to network
14、services based on department, not physical location.F. VLANs can greatly simplify adding, moving, or changing hosts on the network.Answer: AEFExplanation/Reference:A：VLAN在交换网络中建立广播域，正确B：利用VLAN的数据包过滤，增强网络的安全性。错误，没有这个特性。C：提供了在大型网络中的保护 IP地址的方法。错误D：提供低延迟互联网络替代路由网络。错误E：vlan允许基于逻辑划分的网络访问，不是物理位置。正确。F：VLAN
15、可以大大简化添加，移动或更改网络上的主机。正确。QUESTION 61An administrator would like to configure a switch over a virtual terminal connection from locations outsideof the local LAN. Which of the following are required in order for the switch to be configured from a remotelocation? (Choose two.)A. The switch must be confi
16、gured with an IP address, subnet mask, and default gateway.B. The switch must be connected to a router over a VLAN trunk.C. The switch must be reachable through a port connected to its management VLAN.D. The switch console port must be connected to the Ethernet LAN.E. The switch management VLAN must
17、 be created and have a membership of at least one switch port.F. The switch must be fully configured as an SNMP agent.Answer: ACExplanation/Reference:要想远程管理 VLAN，1、交换机配置 IP，2、路由可达QUESTION 65Which router IOS commands can be used to troubleshoot LAN connectivity problems? (Choose three.)A. pingB. trac
18、ertC. ipconfigD. show ip routeE. winipcfgF. show interfacesAnswer: ADFExplanation/Reference:A：测试连通性D：查看是否有路由F：查看接口是否可用QUESTION 64Which of the following are benefits of VLANs? (Choose three.)A. They increase the size of collision domains.B. They allow logical grouping of users by function.允许用户从逻辑上进行分
19、组C. They can enhance network security.D. They increase the size of broadcast domains while decreasing the number of collision domains.E. They increase the number of broadcast domains while decreasing the size of the broadcast domains.F. They simplify switch administration.Answer: BCEExplanation/Refe
20、rence:考查VLAN的特点A：增加冲突域的大小，错误B：允许逻辑划分网段，正确C：增强网络安全，正确。不同vlan不能直接通信。D：当减少冲突域时增加广播域的大小。错误E：减少广播域的大小时增加了广播域个数。正确。F:简化交换机管理。答非所问。QUESTION 71Which characteristics are representative of a link-state routing protocol? (Choose three.)A. provides common view of entire topologyB. exchanges routing tables with
21、neighborsC. calculates shortest pathD. utilizes event-triggered updatesE. utilizes frequent periodic updatesAnswer: ACDExplanation/Reference:链路状态路由协议有协议特点？A:提供查看拓扑的命令，正确。show ip ospf databaseB：邻居之间交换路由信息，错误。交换LSAC：计算最短路径，正确。D：利用触发更新，正确E：利用周期更新，错误。QUESTION 73Use the output from the router shown in th
22、e graphic above to determine which of the following are correct.(Choose two.)A. Router John uses a link-state routing protocol.B. Router John will receive routing updates on the Serial0/0 interface.C. Router John will receive routing updates on the Serial0/1 interface.D. Router John will send routin
23、g updates out the Serial0/0 interface.E. Router John will send routing updates out the FastEthernet0/0 interface.F. Router John will send routing updates out the Serial0/1 interface.Answer: BDExplanation/Reference:由图中几处画红线的地方可知只有 s0/0发送和接受路由信息。QUESTION 74 2的次方问题A national retail chain needs to desig
24、n an IP addressing scheme to support a nationwide network. Thecompany needs a minimum of 300 sub-networks and a maximum of 50 host addresses per subnet.Working with only one Class B address, which of the following subnet masks will support an appropriateaddressing scheme? (Choose two.)A. 255.255.255
25、.0B. 255.255.255.128C. 255.255.252.0D. 255.255.255.224E. 255.255.255.192F. 255.255.248.0Answer: BEExplanation/Reference:需要至少300个子网，每个子网至少50台主机。使用一个B类地址来划分。A：最多有256个子网，错误C：只有64个子网D：每个子网只有30个可用IPF：只有 32个子网QUESTION 79What information does a router running a link-state protocol use to build and maintain
26、 its topologicaldatabase? (Choose two.)A. hello packetsB. SAP messages sent by other routersC. LSAs from other routersD. beacons 信息received on point-to-point linksE. routing tables received from other link-state routersF. TTL packets from designated routersAnswer: ACExplanation/Reference:链路状态路由协议如何维
27、护拓扑数据库？A：hello包用于维护邻居关系，正确。B：错误，没有这个概念。C：通过其他路由器的LSA，正确。D：从点到点链路接收，错误。答案片面E：从其他路由器接收路由表，错误。相互间不直接发送路由表。F：从 DR接受 TTL包，错误，答非所问。QUESTION 80Which statements describe the routing protocol OSPF? (Choose three.)A. It supports VLSM.B. It is used to route between autonomous systems.C. It confines network ins
28、tability to one area of the network.D. It increases routing overhead on the network.E. It allows extensive control of routing updates.F. It is simpler to configure than RIP v2.Answer: ACEExplanation/Reference:A：支持VLSM，正确B：在AS之间使用，错误。在AS内部使用C：限制了不稳定网络的范围，正确。通过划分区域实现。D：增加了网络的开销，错误。E：允许路由更新控制，正确。F：比 RI
29、Pv2更容易配置，错误，答非所问。Which of the following are types of flow control? (Choose three.)A. bufferingB. cut-throughC. windowingD. congestion avoidanceE. load balancingAnswer: ACDExplanation/Reference:流控制有哪些？A：缓存B：直通C：窗口机制D：拥塞避免E：负载均衡。What can be determined from the line of show ip route output shown in the
30、 exhibit? (Choose two.) 注意R =rip 管理距离修改Rout ripDistance 10A. The next routing update can be expected in 35 seconds.B. The IP address 10.10.10.6 is configured on S0/1.C. The IP address 10.10.10.8 is configured on S0/1.D. This route is using the default administrative distance.E. The 10.10.10.8 networ
31、k is two hops away from this router.Answer: DEExplanation/Reference:考点：考查RIP的路由条目。通过RIP学习到一条到达10.10.10.8的路由，下一跳是10.10.10.6，出接口是s/1。A：错误。rip更新周期为30s，正常计时器不会超过30B：错误，这个ip是对端接口ipC：错误。s0/1的ip无法得知D：正确，rip缺省的管理距离是120E：正确。QUESTION 93Refer to the exhibit. From RouterA, a network administrator is able to pin
32、g the serial interface of RouterBbut unable to ping any of the subnets attached to RouterB. Based on the partial outputs in the exhibit, whatcould be the problem?A. EIGRP does not support VLSM.B. The EIGRP network statements are incorrectly configured.C. The IP addressing on the serial interface of
33、RouterA is incorrect.D. The routing protocol has summarized on the classful boundary.E. EIGRP has been configured with an invalid autonomous system number.Answer: DQUESTION 97For what two purposes does the Ethernet protocol use physical addresses? (Choose two.)A. to uniquely identify devices at Laye
34、r 2B. to allow communication with devices on a different networkC. to differentiate a Layer 2 frame from a Layer 3 packetD. to establish a priority system to determine which device gets to transmit firstE. to allow communication between different devices on the same networkF. to allow detection of a
35、 remote device when its physical address is unknownAnswer: AEExplanation/Reference:考点：考查mac地址的作用。A：在二层唯一确定一台设备，正确B：是设备在不同的网络中通信，错误，不同网络通信需要通过IP地址确定。C：区别二层和三层帧，错误。D：确定设备的优先级，错误。没有这个功能。E：是同一网络的不同设备可以通信，正确F：当不知道远程设备的物理地址时可以查询，错误。不能跨网段。QUESTION 98As a frame leaves a Layer 3 device, the Layer 2 encapsula
36、tion information is changed from what it waswhen it entered the device. For what two reasons can this happen? (Choose two.)A. The data is moving from 10BASE-TX to 100BASE-TX.B. The WAN encapsulation type has changed.C. The data format has changed from analog to digital.D. The source and destination
37、hosts are in the same subnet.E. The source and destination MAC addresses have changed.Answer: BEExplanation/Reference:考点：数据包转发过程。当数据包离开三层设备时，二层封装哪些信息改变了。A：从10M网络到100M网络，错误。带宽改变不会改变数据包封装。B：广域网封装改变，正确。如从HDCL变成PPPC：数据格式从模拟型号变成数据信号，错误，物理层的信号方式变化不会影响二层数据格式。D：错误。E：原蜜 MAC改变，正确。QUESTION 99Which two statemen
38、ts are true regarding EIGRP? (Choose two.)A. Passive routes简 单 的 说 就 是 ： 能 被 路 由 器 路 由的 协 议 。 例 如 ： IP、 IPX、 APPLE TALK等 are in the process of being calculated by DUAL.B. EIGRP supports VLSM, route summarization, and routing update authentication.C. EIGRP exchanges full routing table information wit
39、h neighboring routers with every update.D. If the feasible successor has a higher advertised distance than the successor route, it becomes theprimary route.E. A query process is used to discover a replacement for a failed route if a feasible successor is notidentified from the current routing inform
40、ation.Answer: BEExplanation/Reference:A：被动路由在路由进程中由dual计算，错误。B：至此VLSM，路由汇总，认证，正确C：每次更新都发送全部的路由信息，错误，增量更新。D：如果可行后继路由器有一个比后继路由器高的通告距离，它会成为主路由条目，错误。E：如果不存在 FS，使用查询进程去发现替代失效的路由信息，正确。What is an appropriate use of a default route?A. to provide routing to a local web serverB. to provide routing from an ISP
41、 to a stub networkC. to provide routing that will override the configured dynamic routing protocolD. to provide routing to a destination that is not specified in the routing table and which is outside the localnetworkAnswer: DExplanation/Reference:考点：考查缺省路由的特点A：提供路由到本地web服务器，错误B：提供从ISP到末节网络的路由，错误C：提
42、供优先于动态路由协议的路由，错误。根据最长匹配原则，缺省路由最后才匹配。D：正确QUESTION 103Refer to the exhibit. A junior network engineer has prepared the exhibited configuration file. What twostatements are true of the planned configuration for interface fa0/1? (Choose two.)A. The two FastEthernet interfaces will require NAT configured
43、 on two outside serial interfaces.B. Address translation on fa0/1 is not required for DMZ Devices to access the Internet.C. The fa0/1 IP address overlaps with the space used by s0/0.D. The fa0/1 IP address is invalid for the IP subnet on which it resides.E. Internet hosts may not initiate connection
44、s to DMZ Devices through the configuration that is shown.Answer: BEExplanation/Reference:DMZ使用公网地址，不需要做 NAT，图中 ACL第二条错将 DMZ做了 NAT，因此造成不能访问QUESTION 111Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporateheadquarters network. The switches provide two to
45、 three jacks per conference room to host laptopconnections for employees who visit the headquarters office. When large groups of employees come fromother locations, the network administrator often finds that hubs have been connected to wall jacks in theconference area although the ports on the acces
46、s layer switches were not intended to support multipleworkstations.What action could the network administrator take to prevent access by multiple laptops through a singleswitch port and still leave the switch functional for its intended use?A. Configure static entries in the switch MAC address table
47、 to include the range of addresses used byvisiting employees.B. Configure an ACL to allow only a single MAC address to connect to the switch at one time.C. Use the mac-address-table 1 global configuration command to limit each port to one source MACaddress.D. Implement Port Security on all interface
48、s and use the port-security maximum 1 command to limit portaccess to a single MAC address.E. Implement Port Security on all interfaces and use the port-security mac-address sticky command tolimit access to a single MAC address.F. Implement Port Security at global configuration mode and use the port-
49、security maximum 1 commandto allow each switch only one attached hub.Answer: DExplanation/Reference:考点：考查交换机端口安全。题目想实现限制一个端口只接入一台设备。A：配置静态mac地址表。错误。无法达到限制效果。B：配置ACL允许同一个时刻仅一个mac地址连接到交换机。错误。C：在全局配置模式使用mac-address-table命令限制每个端口一个源mac地址。错误，无法实现。D：在所有端口使用port security和maximum 1限制一个端口允许一个mac地址，正确。E：部署port security和port-security mac-address sticky命令，错误，无法实现。F：在所有端口使用port security和maximum 1限制一个端口允许一个hub，错误，一个hub下面可以接多台PC。Running both IPv4 and IPv6 on a router simultaneously is known as what?A. 4to6 routingB. 6to4 routingC. binary routingD. dual-stack routingE. NextGen routingAnswer: DEx
