Cisco网院第四学期-final1

1WhichIPaddressandwildcardmaskcombinationcanbeusedinanACLstatementtomatchthe172.16.0.0/30network?172.16.0.00.0.0.1172.16.0.00.0.0.3172.16.0.00.0.0.7172.16.0.0255.255.255.2522Anadministratorlearnsofane-mailthathasbeenreceivedbyanumberofusersinthecompany.Thise-mailappearstocomefromtheofficeoftheadministrator.Thee-mailaskstheuserstoconfirmtheiraccountandpasswordinformation.Whichtypeofsecuritythreatdoesthise-mailrepresent?crackingphishingphreakingspamming3AnetworkadministratorisinstructingatechnicianonbestpracticesforapplyingACLs.Whichsuggestionshouldtheadministratorprovide?NamedACLsarelessefficientthannumberedACLs.StandardACLsshouldbeappliedclosesttothecorelayer.ACLsappliedtooutboundinterfacesarethemostefficient.ExtendedACLsshouldbeappliedclosesttothesourcethatisspecifiedbytheACL.4Refertotheexhibit.Accesscontrollist10isappliedinboundtotheFa0/0interfaceofrouterR1.Howwillincomingtrafficbefiltered?AllinboundtraffictointerfaceFa0/0willbedenied.AllinboundtraffictointerfaceFa0/0ofrouterR1exceptthatfromthe192.168.1.0/24networkwillbedenied.AllinboundtraffictointerfaceFa0/0ofrouterR1exceptthatfromthe192.168.1.0/24networkwillbeallowed.AllinboundandoutboundtrafficmovingthroughinterfaceFa0/0willbeallowed.5Whichnetworkcomponenthastheprimaryfunctionofdetectingandloggingattacksmadeagainstthenetwork?CiscoSecurityAgentantivirussoftwarescannerintrusiondetectionsystemintrusionpreventionsystem6Refertotheexhibit.ThelinkbetweentheCTRLandBR_1routersisconfiguredasshownintheexhibit.WhyaretheroutersunabletoestablishaPPPsession?Theclockratemustbe56000.Theusernamesaremisconfigured.TheIPaddressesareondifferentsubnets.Theclockrateisconfiguredonthewrongendofthelink.TheCHAPpasswordsmustbedifferentonthetworouters.Interfaceserial0/0/0onCTRLmustconnecttointerfaceserial0/0/1onBR_1.7Refertotheexhibit.Thecorporatenetworkthatisshownhasbeenassignednetwork172.16.128.0/19foruseatbranchofficeLANs.IfVLSMisused,whatmaskshouldbeusedforaddressinghostsatBranch4withminimalwastefromunusedaddresses?/19/20/21/22/23/248WhenconfiguringaFrameRelayconnection,whatisthepurposeofInverseARP?toassignaDLCItoaremotepeertodisablepeerrequestsfromdetermininglocalLayer3addressestonegotiateLMIencapsulationsbetweenlocalandremoteFrameRelaypeerstocreateamappingofDLCItoLayer3addressesthatbelongtoremotepeers9WhichtwoprotocolsincombinationshouldbeusedtoestablishalinkwithsecureauthenticationbetweenaCiscoandanon-Ciscorouter?(Choosetwo.)HDLCPPPSLIPPAPCHAP10Refertotheexhibit.Whichdatatransmissiontechnologyisbeingrepresented?TDMPPPHDLCSLIP11Refertotheexhibit.WhichstatementistrueabouttheFrameRelayconnection?TheFrameRelayconnectionisintheprocessofnegotiation.AcongestioncontrolmechanismisenabledontheFrameRelayconnection.The“ACTIVE”statusoftheFrameRelayconnectionindicatesthatthenetworkisexperiencingcongestion.OnlycontrolFECNandBECNbitsaresentovertheFrameRelayconnection.Nodatatraffictraversesthelink.12WhichsecuritysolutionhastheresponsibilityofmonitoringsuspiciousprocessesthatarerunningonahostandthatmightindicateinfectionofTrojanhorseapplications?antivirusapplicationoperatingsystempatchesintrusionpreventionsystemCiscoAdaptiveSecurityAppliance13Refertotheexhibit.Alldevicesareconfiguredasshownintheexhibit.PC1isunabletopingthedefaultgateway.Whatisthecauseoftheproblem?Thedefaultgatewayisinthewrongsubnet.STPhasblockedtheportthatPC1isconnectedto.PortFa0/2onS2isassignedtothewrongVLAN.S2hasthewrongIPaddressassignedtotheVLAN30interface.14Whichtwostatementsaretrueaboutcreatingandapplyingaccesslists?(Choosetwo.)Oneaccesslistperport,perprotocol,perdirectionispermitted.Accesslistentriesshouldfilterintheorderfromgeneraltospecific.Statementsareprocessedsequentiallyfromtoptobottomuntilamatchisfound.TheterminboundreferstotrafficenteringthenetworkfromtherouterinterfacewheretheACLisapplied.StandardACLsshouldbeappliedclosesttothesourcewhileextendedACLsshouldbeappliedclosesttothedestination.15Whataretwomaincomponentsofdataconfidentiality?(Choosetwo.)checksumdigitalcertificatesencapsulationencryptionhashing16Refertotheexhibit.AnetworkadministratoristryingtobackuptheIOSsoftwareonR1totheTFTPserver.Hereceivestheerrormessagethatisshownintheexhibit,andcannotpingtheTFTPserverfromR1.Whatisanactionthatcanhelptoisolatethisproblem?Usecorrectsourcefilenameinthecommand.VerifythattheTFTPserversoftwareisrunning.MakesurethatthereisenoughroomontheTFTPserverforthebackup.CheckthatR1hasaroutetothenetworkwheretheTFTPserverresides.17WhichadditionalfunctionalityisavailableonaninterfacewhentheencapsulationischangedfromHDLCtoPPP?flowcontrolerrorcontrolauthenticationsynchronouscommunication18Whatistheresultwhenthecommandsecuritypasswordsmin-length8isenteredintoarouter?Allnewpasswordsarerequiredtobeaminimumof8charactersinlength.Allcurrentpasswordsarenowrequiredtobeaminimumof8charactersinlength.Enablepasswordsmustbeatleast8charactersbutlinepasswordsareunaffected.Nothingwillhappenuntilthecommandservicepassword-encryptionisentered.Thenallfuturepasswordsmusthaveaminimumof8characters.19Refertotheexhibit.Whatstatementistrueaboutthecorerouterdevi