下载
加入VIP
  • 专属下载特权
  • 现金文档折扣购买
  • VIP免费专区
  • 千万文档免费下载

上传资料

关闭

关闭

关闭

封号提示

内容

首页 CCNP.642-813.V200

CCNP.642-813.V200.pdf

CCNP.642-813.V200

ykklove
2012-08-21 0人阅读 举报 0 0 暂无简介

简介:本文档为《CCNP.642-813.V200pdf》,可适用于IT/计算机领域

CCNPVNumber:PassingScore:TimeLimit:minFileVersion:CCNP()题库V()CCNP题库战报人超级QQ群CCNP最新题库最新战报发布区:http:bbshhcomforumhtml下载官方正版题库、看最新考试战报请随时关注鸿鹄论坛http:bbshhcom全国唯一报名思科CCNA考试送思科真实设备试验http:bbshhcomthreadhtml==============================================更新内容:选择题拖图题题库已完美覆盖之前发布的Q新增HSRPcase实验题目==============================================ExamAQUESTIONWhichstatementistrueaboutRSTPtopologychangesAAnychangeinthestateoftheportgeneratesaTCBPDUBOnlynonedgeportsmovingtotheforwardingstategenerateaTCBPDUCIfeitheranedgeportoranonedgeportmovestoablockstate,thenaTCBPDUisgeneratedDOnlyedgeportsmovingtotheblockingstategenerateaTCBPDUEAnylossofconnectivitygeneratesaTCBPDUAnswer:BQUESTIONRefertotheexhibitWhichfourstatementsaboutthisGLBPtopologyaretrue(Choosefour)ARouterAisresponsibleforansweringARPrequestssenttothevirtualIPaddressBIfrouterAbecomesunavailable,routerBforwardspacketssenttothevirtualMACaddressofrouterACIfanotherrouterisaddedtothisGLBPgroup,therewouldbetwobackupAVGsDRouterBisinGLBPlistenstateERouterAalternatelyrespondstoARPrequestswithdifferentvirtualMACaddressesFRouterBtransitionsfromblockingstatetoforwardingstatewhenitbecomestheAVGAnswer:ABDEQUESTIONRefertotheexhibitWhichVRRPstatementabouttherolesofthemastervirtualrouterandthebackupvirtualrouteristrueARouterAisthemastervirtualrouter,androuterBisthebackupvirtualrouterWhenrouterAfails,routerBbecomesthemastervirtualrouterWhenrouterArecovers,routerBmaintainstheroleofmastervirtualrouterBRouterAisthemastervirtualrouter,androuterBisthebackupvirtualrouterWhenrouterAfails,routerBbecomesthemastervirtualrouterWhenrouterArecovers,itregainsthemastervirtualrouterroleCRouterBisthemastervirtualrouter,androuterAisthebackupvirtualrouterWhenrouterBfails,routerAbecomesthemastervirtualrouterWhenrouterBrecovers,routerAmaintainstheroleofmastervirtualrouterDRouterBisthemastervirtualrouter,androuterAisthebackupvirtualrouterWhenrouterBfails,routerAbecomesthemastervirtualrouterWhenrouterBrecovers,itregainsthemastervirtualrouterroleAnswer:BQUESTIONWhichdescriptioncorrectlydescribesaMACaddressfloodingattackATheattackingdevicecraftsARPrepliesintendedforvalidhostsTheMACaddressoftheattackingdevicethenbecomesthedestinationaddressfoundintheLayerframessentbythevalidnetworkdeviceBTheattackingdevicecraftsARPrepliesintendedforvalidhostsTheMACaddressoftheattackingdevicethenbecomesthesourceaddressfoundintheLayerframessentbythevalidnetworkdeviceCTheattackingdevicespoofsadestinationMACaddressofavalidhostcurrentlyintheCAMtableTheswitchthenforwardsframesdestinedforthevalidhosttotheattackingdeviceDTheattackingdevicespoofsasourceMACaddressofavalidhostcurrentlyintheCAMtableTheswitchthenforwardsframesdestinedforthevalidhosttotheattackingdeviceEFrameswithunique,invaliddestinationMACaddressesfloodtheswitchandexhaustCAMtablespaceTheresultisthatnewentriescannotbeinsertedbecauseoftheexhaustedCAMtablespace,andtrafficissubsequentlyfloodedoutallportsFFrameswithunique,invalidsourceMACaddressesfloodtheswitchandexhaustCAMtablespaceTheresultisthatnewentriescannotbeinsertedbecauseoftheexhaustedCAMtablespace,andtrafficissubsequentlyfloodedoutallportsAnswer:FQUESTIONRefertotheexhibitAnattackerisconnectedtointerfaceFaonswitchASWandattemptstoestablishaDHCPserverforamaninmiddleattackWhichrecommendation,iffollowed,wouldmitigatethistypeofattackAAllswitchportsintheBuildingAccessblockshouldbeconfiguredasDHCPtrustedportsBAllswitchportsintheBuildingAccessblockshouldbeconfiguredasDHCPuntrustedportsCAllswitchportsconnectingtohostsintheBuildingAccessblockshouldbeconfiguredasDHCPtrustedportsDAllswitchportsconnectingtohostsintheBuildingAccessblockshouldbeconfiguredasDHCPuntrustedportsEAllswitchportsintheServerFarmblockshouldbeconfiguredasDHCPuntrustedportsFAllswitchportsconnectingtoserversintheServerFarmblockshouldbeconfiguredasDHCPuntrustedportsAnswer:DQUESTIONRefertotheexhibitThewebserversWSandWSneedtobeaccessedbyexternalandinternalusersForsecurityreasons,theserversshouldnotcommunicatewitheachother,althoughtheyarelocatedonthesamesubnetHowever,theserversdoneedtocommunicatewithadatabaseserverlocatedintheinsidenetworkWhichconfigurationisolatestheserversfromeachotherATheswitchportsandaredefinedassecondaryVLANisolatedportsTheportsconnectingtothetwofirewallsaredefinedasprimaryVLANpromiscuousportsBTheswitchportsandaredefinedassecondaryVLANcommunityportsTheportsconnectingtothetwofirewallsaredefinedasprimaryVLANpromiscuousportsCTheswitchportsandandtheportsconnectingtothetwofirewallsaredefinedasprimaryVLANpromiscuousportsDTheswitchportsandandtheportsconnectingtothetwofirewallsaredefinedasprimaryVLANcommunityportsAnswer:AQUESTIONWhatdoesthecommandudldresetaccomplishAallowsaUDLDporttoautomaticallyresetwhenithasbeenshutdownBresetsallUDLDenabledportsthathavebeenshutdownCremovesallUDLDconfigurationsfrominterfacesthatweregloballyenabledDremovesallUDLDconfigurationsfrominterfacesthatwereenabledperportAnswer:BQUESTIONRefertotheexhibitDynamicARPInspectionisenabledonlyonswitchSWAHostAandHostBacquiretheirIPaddressesfromtheDHCPserverconnectedtoswitchSWAWhatwouldtheoutcomebeifHostBinitiatedanARPspoofattacktowardHostAAThespoofpacketsareinspectedattheingressportofswitchSWAandarepermittedBThespoofpacketsareinspectedattheingressportofswitchSWAandaredroppedCThespoofpacketsarenotinspectedattheingressportofswitchSWAandarepermittedDThespoofpacketsarenotinspectedattheingressportofswitchSWAandaredroppedAnswer:CQUESTIONWhichstatementistrueaboutLayersecuritythreatsAMACspoofing,inconjunctionwithARPsnooping,isthemosteffectivecountermeasureagainstreconnaissanceattacksthatuseDynamicARPInspectiontodeterminevulnerableattackpointsBDHCPsnoopingsendsunauthorizedrepliestoDHCPqueriesCARPspoofingcanbeusedtoredirecttraffictocounterDynamicARPInspectionDDynamicARPInspectioninconjunctionwithARPspoofingcanbeusedtocounterDHCPsnoopingattacksEMACspoofingattacksallowanattackingdevicetoreceiveframesintendedforadifferentnetworkhostFPortscannersarethemosteffectivedefenseagainstDynamicARPInspectionAnswer:EQUESTIONWhatdoestheglobalconfigurationcommandiparpinspectionvlan,accomplishAvalidatesoutgoingARPrequestsforinterfacesconfiguredonVLAN,,,orBinterceptsallARPrequestsandresponsesontrustedportsCintercepts,logs,anddiscardsARPpacketswithinvalidIPtoMACaddressbindingsDdiscardsARPpacketswithinvalidIPtoMACaddressbindingsontrustedportsAnswer:CQUESTIONRefertotheexhibitHostAhassentanARPmessagetothedefaultgatewayIPaddressWhichstatementistrueABecauseoftheinvalidtimersthatareconfigured,DSwdoesnotreplyBDSwreplieswiththeIPaddressofthenextAVFCDSwreplieswiththeMACaddressofthenextAVFDBecauseoftheinvalidtimersthatareconfigured,DSwdoesnotreplyEDSwreplieswiththeIPaddressofthenextAVFFDSwreplieswiththeMACaddressofthenextAVFAnswer:FQUESTIONWhataretwomethodsofmitigatingMACaddressfloodingattacks(Choosetwo)APlaceunusedportsinacommonVLANBImplementprivateVLANsCImplementDHCPsnoopingDImplementportsecurityEImplementVLANaccessmapsAnswer:DEQUESTIONRefertotheexhibitWhatinformationcanbederivedfromtheoutputAInterfacesFastEthernetandFastEthernetareconnectedtodevicesthataresendingBPDUswithasuperiorrootbridgeparameterandnotrafficisforwardedacrosstheportsAfterthesendingofBPDUshasstopped,theinterfacesmustbeshutdownadministratively,andbroughtbackup,toresumenormaloperationBDevicesconnectedtointerfacesFastEthernetandFastEthernetaresendingBPDUswithasuperiorrootbridgeparameter,buttrafficisstillforwardedacrosstheportsCDevicesconnectedtointerfacesFastEthernetandFastEthernetaresendingBPDUswithasuperiorrootbridgeparameterandnotrafficisforwardedacrosstheportsAftertheinaccurateBPDUshavebeenstopped,theinterfacesautomaticallyrecoverandresumenormaloperationDInterfacesFastEthernetandFastEthernetarecandidatesforbecomingtheSTProotport,butneithercanrealizethatroleuntilBPDUswithasuperiorrootbridgeparameterarenolongerreceivedonatleastoneoftheinterfacesAnswer:CQUESTIONWhatisonemethodthatcanbeusedtopreventVLANhoppingAConfigureACLsBEnforceusernameandpasswordcombinationsCConfigureallframeswithtwoQheadersDExplicitlyturnoffDTPonallunusedportsEConfigureVACLsAnswer:DQUESTIONWhyisBPDUguardaneffectivewaytopreventanunauthorizedrogueswitchfromalteringthespanningtreetopologyofanetworkABPDUguardcanguaranteeproperselectionoftherootbridgeBBPDUguardcanbeutilizedalongwithPortFasttoshutdownportswhenaswitchisconnectedtotheportCBPDUguardcanbeutilizedtopreventtheswitchfromtransmittingBPDUsandincorrectlyalteringtherootbridgeelectionDBPDUguardcanbeusedtopreventinvalidBPDUsfrompropagatingthroughoutthenetworkAnswer:BQUESTIONWhattwostepscanbetakentohelppreventVLANhopping(Choosetwo)APlaceunusedportsinacommonunroutedVLANBEnableBPDUguardCImplementportsecurityDPreventautomatictrunkconfigurationsEDisableCiscoDiscoveryProtocolonportswhereitisnotnecessaryAnswer:ADQUESTIONRefertotheexhibitAssumethatSwitchAisactiveforthestandbygroupandthestandbydevicehasonlythedefaultHSRPconfigurationWhichstatementistrueAIfportFaonSwitchAgoesdown,thestandbydevicetakesoverasactiveBIfthecurrentstandbydevicehadthehigherpriorityvalue,itwouldtakeovertheroleofactivefortheHSRPgroupCIfportFaonSwitchAgoesdown,thenewpriorityvaluefortheswitchwouldbeDIfSwitchAhadthehighestprioritynumber,itwouldnottakeoverasactiverouterAnswer:CQUESTIONWhenanattackerisusingswitchspoofingtoperformVLANhopping,howistheattackerabletogatherinformationATheattackingstationusesDTPtonegotiatetrunkingwithaswitchportandcapturesalltrafficthatisallowedonthetrunkBTheattackingstationtagsitselfwithallusableVLANstocapturedatathatispassedthroughtheswitch,regardlessoftheVLANtowhichthedatabelongsCTheattackingstationgeneratesframeswithtwoQheaderstocausetheswitchtoforwardtheframestoaVLANthatwouldbeinaccessibletotheattackerthroughlegitimatemeansDTheattackingstationusesVTPtocollectVLANinformationthatissentoutandthentagsitselfwiththedomaininformationtocapturethedataAnswer:AQUESTIONRefertotheexhibitGLBPhasbeenconfiguredonthenetworkWhentheinterfaceserialonrouterRgoesdown,howisthetrafficcomingfromHosthandledAThetrafficcomingfromHostandHostisforwardedthroughrouterRwithnodisruptionBThetrafficcomingfromHostisforwardedthroughrouterRwithnodisruptionHostsendsanARPrequesttoresolvetheMACaddressforthenewvirtualgatewayCThetrafficcomingfrombothhostsistemporarilyinterruptedwhiletheswitchovertomakeRactiveoccursDThetrafficcomingfromHostisforwardedthroughrouterRwithnodisruptionThetrafficfromHostisdroppedduetothedisruptionoftheloadbalancingfeatureconfiguredfortheGLBPgroupAnswer:AQUESTIONRefertotheexhibitDHCPsnoopingisenabledforselectedVLANstoprovidesecurityonthenetworkHowdotheswitchportshandletheDHCPmessagesAADHCPOFFERpacketfromaDHCPserverreceivedonPortsFaandFaisdroppedBADHCPpacketreceivedonportsFaandFaisdroppedifthesourceMACaddressandtheDHCPclienthardwareaddressdoesnotmatchSnoopingdatabaseCADHCPpacketreceivedonportsFaandFaisforwardedwithoutbeingtestedDADHCPRELEASEmessagereceivedonportsFaandFahasaMACaddressintheDHCPsnoopingbindingdatabase,buttheinterfaceinformationinthebindingdatabasedoesnotmatchtheinterfaceonwhichthemessagewasreceivedandisdroppedAnswer:CQUESTIONRefertotheexhibitandthepartialconfigurationonroutersRandRHSRPisconfiguredonthenetworktoprovidenetworkredundancyfortheIPtrafficThenetworkadministratornoticedthatRdoesnotbecomeactivewhentheRserialinterfacegoesdownWhatshouldbechangedintheconfigurationtofixtheproblemARshouldbeconfiguredwithanHSRPvirtualaddressBRshouldbeconfiguredwithastandbypriorityofCTheSerialinterfaceonrouterRshouldbeconfiguredwithadecrementvalueofDTheSerialinterfaceonrouterRshouldbeconfiguredwithadecrementvalueofAnswer:DQUESTIONWhichoptionalfeatureofanEthernetswitchdisablesaportonapointtopointlinkiftheportdoesnotreceivetrafficwhileLayerstatusisupABackboneFastBUplinkFastCLoopGuardDUDLDaggressivemodeEFastLinkPulseburstsFLinkControlWordAnswer:DQUESTIONWhichthreestatementsaboutroutedportsonamultilayerswitcharetrue(Choosethree)AAroutedportcansupportVLANsubinterfacesBAroutedporttakesanIPaddressassignmentCAroutedportcanbeconfiguredwithroutingprotocolsDAroutedportisavirtualinterfaceonthemultilayerswitchEAroutedportisassociatedonlywithoneVLANFAroutedportisaphysicalinterfaceonthemultilayerswitchAnswer:BCFQUESTIONRefertotheexhibitWhyareusersfromVLANunabletopingusersonVLANAEncapsulationontheswitchiswrongBTrunkingmustbeenabledonFaCThenativeVLANiswrongDVLANneedsthenoshutdowncommandEIProutingmustbeenabledontheswitchAnswer:BQUESTIONWhichthreestatementsaboutDynamicARPInspectionaretrue(Choosethree)AItdeterminesthevalidityofanARPpacketbasedonthevalidMACaddresstoIPaddressbindingsstoredintheDHCPsnoopingdatabaseBItforwardsallARPpacketsreceivedonatrustedinterfacewithoutanychecksCItdeterminesthevalidityofanARPpacketbasedonthevalidMACaddresstoIPaddressbindingsstoredintheCAMtableDItforwardsallARPpacketsreceivedonatrustedinterfaceafterverifyingandinspectingthepacketagainsttheDynamicARPInspectiontableEItinterceptsallARPpacketsonuntrustedportsFItisusedtopreventagainstaDHCPsnoopingattackAnswer:ABEQUESTIONAnetworkadministratorwantstoconfigurexportbasedauthentication,however,theclientworkstationisnotxcompliantWhatistheonlysupportedauthenticationserverthatcanbeusedATACACSwithLEAPextensionsBTACACSCRADIUSwithEAPextensionsDLDAPAnswer:CQUESTIONThefollowingcommandwasissuedonarouterthatisbeingconfiguredastheactiveHSRProuterstandbyipWhichstatementaboutthiscommandistrueAThiscommandwillnotworkbecausetheHSRPgroupinformationismissingBTheHSRPMACaddresswillbecacCTheHSRPMACaddresswillbecacDTheHSRPMACaddresswillbecacEThiscommandwillnotworkbecausetheactiveparameterismissingAnswer:BQUESTIONRefertotheexhibitThelinkbetweenswitchSWandswitchSWisconfiguredasatrunk,butthetrunkfailedtoestablishconnectivitybetweentheswitchesBasedontheconfigurationsandtheerrormessagesreceivedontheconsoleofSW,whatisthecauseoftheproblemAThetwoendsofthetrunkhavedifferentduplexsettingsBThetwoendsofthetrunkhavedifferentEtherChannelconfigurationsCThetwoendsofthetrunkhavedifferentnativeVLANconfigurationsDThetwoendsofthetrunkallowdifferentVLANsonthetrunkAnswer:CQUESTIONAcampusinfrastructuresupportswirelessclientsviaCiscoAironetAGSeries,,andaccesspointsWithDNSandDHCPconfigured,theandaccesspointsappeartobootandoperatenormallyHowever,theaccesspointsdonotseemtooperatecorrectlyWhatisthemostlikelycauseofthisproblemADHCPwithoptionBDHCPwithoptionCPoEDDNSEswitchportdoesnotsupportgigabitspeedsAnswer:CQUESTIONAstandalonewirelessAPsolutionisbeinginstalledintothecampusinfrastructureTheaccesspointsappeartobootcorrectly,butwirelessclientsarenotobtainingcorrectaccessYouverifythatthisisthelocalswitchconfigurationconnectedtotheaccesspoint:interfaceethernetswitchportaccessvlanswitchportmodeaccessspanningtreeportfastmlsqostrustdscpWhatisthemostlikelycauseoftheproblemAQoStrustshouldnotbeconfiguredonaportattachedtoastandaloneAPBQoStrustforswitchportmodeaccessshouldbedefinedas"cos"Cswitchportmodeshouldbedefinedas"trunk"withrespectiveQoSDswitchportaccessvlanshouldbedefinedas""Answer:CQUESTIONDuringtheimplementationofavoicesolution,whichtworequireditemsareconfiguredatanaccesslayerswitchthatwillbeconnectedtoanIPphonetoprovideVoIPcommunication(Choosetwo)AallowedcodecsBuntaggedVLANCauxiliaryVLANDCiscoUnifiedCommunicationsManagerIPaddressERSTPAnswer:BCQUESTIONWhichtwostatementsbestdescribeCiscoIOSIPSLA(Choosetwo)AonlyimplementedbetweenCiscosourceanddestinationcapabledevicesBstatisticsprovidedbysyslog,CLI,andSNMPCmeasuresdelay,jitter,packetloss,andvoicequalityDonlymonitorsVoIPtrafficflowsEprovidesactivemonitoringAnswer:CEQUESTIONWhichtwoitemsbestdescribeaCiscoIOSIPSLAresponder(Choosetwo)ArequiredatthedestinationtoimplementCiscoIOSIPSLAservicesBimprovesmeasurementaccuracyCrequiredforVoIPjittermeasurementsDprovidessecurityonCiscoIOSIPSLAmessagesviaLEAPorEAPFASTauthenticationErespondstooneCiscoIOSIPSLAoperationperportFstorestheresultingteststatisticsAnswer:BCQUESTIONWhichtwocharacteristicsapplytoCiscoCatalystSer

用户评价(0)

关闭

新课改视野下建构高中语文教学实验成果报告(32KB)

抱歉,积分不足下载失败,请稍后再试!

提示

试读已结束,如需要继续阅读或者下载,敬请购买!

文档小程序码

使用微信“扫一扫”扫码寻找文档

1

打开微信

2

扫描小程序码

3

发布寻找信息

4

等待寻找结果

我知道了
评分:

/50

CCNP.642-813.V200

VIP

在线
客服

免费
邮箱

爱问共享资料服务号

扫描关注领取更多福利