CCNA考试题库中英文翻译版及答案.doc

CCNA考试题库中英文翻译版及答案1[1]two.)1. Whataretworeasonsthatanetworkadministratorwoulduseaccesslists?(Choose1.出于哪两种理由，网络管理员会使用访问列表?A. tocontrolvtyaccessintoarouterA. 控制通过VTY访问路由器B. tocontrolbroadcasttrafficthrougharouterB. 控制广播流量穿越路由器2. 一个默认的帧中继WAN被分类为哪种物理网络类型？A. point-to-pointA. 点到点B. broadcastmulti-accessB. 广播多路访问C. nonbroadcastmulti-accessC. 非广播多路访问D. nonbroadcastmultipointD. 非广播多点E. broadcastpoint-to-multipointE. 广播点到多点Answer:Casquar3. Asingle802.11gaccesspointhasbeenconfiguredandinstalledinthecenterofAfewwirelessusersareexperiencingslowperformanceanddropswhilemostusersareoatpeakefficiency・Whatarethreelikelycausesofthisproblem?(Choosethree・)3.一个802.11接入点被部署在一个方形办公室的中央，当大多数用户在大流量传输数一些无线用户发现无线网络变得缓慢和出现丢包A. mismatchedTKIPencryptionB・nullSSIDC・cordlessphonesD・mismatchedSSIDE・metalfilecabinetsF・antennatypeordirectionAnswer:CEF4. Refertotheexhibit・Howmanybroadcastdomainsexistintheexhibitedtopology?根据下图，图中的拓扑中存在多少个广播域?VLANVLAN1VI.AM30VLAN401runKC.threeC.3A.oneA.1B.twoB.2D.fourD.4E. fiveE.5F. sixF.6Answer:C5. Refertotheexhibit.WhattwofactscanbedeterminedfromtheWLANdiagram?(Choosetwo.)5•根据下图，WLANdiagram决定了哪两个事实A. Theareaofoverlapofthetwocellsrepresentsabasicserviceset(BSS).A. 两个cells的overlap的区域描述了一个basicservicesetB. Thenetworkdiagramrepresentsanextendedserviceset(ESS).B. 网络描述了一个extendedservicesetC. Accesspointsineachcellmustbeconfiguredtousechannel1.C. 再每个CELL中的AP必须被配置成使用channel1D. Theareaofoverlapmustbelessthan10%oftheareatoensureconnectivity.D. 为了确保连通性,重叠区域必须小于10%E. ThetwoAPsshouldbeconfiguredtooperateondifferentchannels.E. 两个访问点应该被配置成工作在不同的频道Answer:BE6. Thecommandframe-relaymapip10.121.16.8102broadcastwasenteredontherouter.Whichofthefollowingstatementsistrueconcerningthiscommand?6•路由器上输入命令frame-relaymapip10.121.16.8102broadcast,以下选项正确的是？A. Thiscommandshouldbeexecutedfromtheglobalconfigurationmode.A. 该命令应该在全局配置模式下被执行B. TheIPaddress10.121.16.8isthelocalrouterportusedtoforwarddata.B. IP地址10.121.16・8是本地路由器用来转发数据的接口C. 102istheremoteDLCIthatwillreceivetheinformation.C. 102是远端的DLCI它将接受信息。

D. ThiscommandisrequiredforallFrameRelayconfigurations.D. 这个命令要求被配置为所有的帧中继配置E. Thebroadcastoptionallowspackets,suchasRIPupdates,tobeforwardedacrossthePVC.E. 这个广播选项允许数据包，例如rip更新信息，将会被转发通过PVC.Answer:E7. WhichtypeofattackischaracterizedbyafloodofpacketsthatarerequestingaTCPconnectiontoaserver?7. 哪种类型的攻击的特点是发大量的TCP请求连接数据包到服务器？A. denialofserviceA.拒绝服务B. bruteforceB.强制叠加C.reconnaissanceC.监听D.TrojanhorseD.木马Answer:A8. WhichofthefollowingareassociatedwiththeapplicationlayeroftheOSImodel?(Choosetwo.)8. 以下两个选项是工作在OSI模型的应用层的?A. pingB.TelnetC. FTPD.TCPE.IPAnswer:BC9. Refertotheexhibit.ThenetworkadministratorhascreatedanewVLANonSwitchlandaddedhostCandhostD.TheadministratorhasproperlyconfiguredswitchinterfacesFastEthernetO/13throughFastEthernetO/24tobemembersofthenewVLAN.However,afterthenetworkadministratorcompletedtheconfiguration,hostAcouldcommunicatewithhostB,buthostAcouldnotcommunicatewithhostCorhostD.Whichcommandsarerequiredtoresolvethisproblem?9. 网络管理员在交换机1上创建一个新VLAN并且将主机C和主机D加入到此VLAN中.管理员配置交换机接口FastEthernetO/13到FastEthernetO/24成为新VLAN成员.但是网络管理员完成配置以后，主机A可以和主机B通信，但是主机A不能和主机C或者主机D通信.哪个命令可以用来解决这个问题R.-iijterl*ip「oulfbC1.0IsHit&ullytoC加忑dlraei^c^aineciedtoFaO/13192.168.2.15Z24192.168.2.15/24192.168.3.15/24192.1683.H/24A. Router(config)#interfacefastethernet0/1.3Router(config-if)#encapsulationdot1q3Router(config-if)#ipaddress192.168.3.1255.255.255.0B. Router(config)#routerripRouter(config-router)#network192.168.1.0Router(config-router)#network192.168.2.0Router(config-router)#network192.168.3.0C. Switch1#vlandatabaseSwitch1(vlan)#vtpv2-modeSwitch1(vlan)#vtpdomainciscoSwitch1(vlan)#vtpserverD. Switch1(config)#interfacefastethernet0/1Switch1(config-if)#switchportmodetrunkSwitch1(config-if)#switchporttrunkencapsulationislAnswer:A10. Forsecurityreasons,thenetworkadministratorneedstopreventpingsintothecorporatenetworksfromhostsoutsidetheinternetwork.Whichprotocolshouldbeblockedwithaccesscontrollists?10. 出于安全考虑，网络管理员需要去防止外网主机PING内网，下面那个协议应该用accesscontrollists限制掉A. IPB.ICMPC. TCPD.UDPAnswer:B11. Whataretworecommendedwaysofprotectingnetworkdeviceconfigurationfilesfromoutsidenetworksecuritythreats?(Choosetwo.)11. 哪两种方法被推荐用来保守网络设备的配置文件不受外网的威胁A. AllowunrestrictedaccesstotheconsoleorVTYports.A. 允许unrestricted访问到console或VTY口B・Useafirewalltorestrictaccessfromtheoutsidetothenetworkdevices・B. 用防火墙去限制外网的网络设备访问C・AlwaysuseTelnettoaccessthedevicecommandlinebecauseitsdataisautomaticallyencrypted・C. 因为数据被自动加密，所以总是允许使用TELNET命令访问网络设备的命令行，D・UseSSHoranotherencryptedandauthenticatedtransporttoaccessdeviceconfigurations・D・使用SSH或其他加密、认证机制去访问设备的配置E・Preventthelossofpasswordsbydisablingpasswordencryption・E・为了避免丢失密码，所以不对密码进行加密(明文)Answer:BD12. Refertotheexhibit・TheaccesslisthasbeenconfiguredontheS0/0interfaceofrouterRTB。