You are the network&...

单项选择题X 纠错

You are the network administrator of a small Layer 2 network with 50 users. Lately， users have beencomplaining that the network is very slow. While troubleshooting， you notice that the CAM table of yourswitch is full， although it supports up to 12， 000 MAC addresses. How can you solve this issue and preventit from happening in the future？（）

A.Upgrade the switches
B.Configure BPDU guard
C.Configure VLAN access lists
D.Configure port security
E.Configure Dynamic ARP inspection

参考答案：

进入题库练习

单项选择题

Two routers configured to run BGP have been connected to a firewall， one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer， including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？（）

A. Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works， BGP will work， since telnet and BGP both use TCP to transport data.
B. Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them， BGP should work， since BGP uses IP to transport packets.
C. There is no way to make BGP work across a firewall without special configuration， so there is no simple test that will show you if BGP will work or not， other than trying to start the peering session.
D. There is no way to make BGP work across a firewall.

点击查看答案进入题库练习

多项选择题

You are the network administrator of a medium-sized company， and users are complaining that they cannotsend emails to some organizations. During your troubleshooting， you notice that your DNS MX record isblacklisted by several public blacklist filters. After clearing these listings for your IP address， and assumingthat your email server has the right virus protection in place， what are two possible solutions to prevent thisfrom happening in the future？（）

A.Change your Internet provider.
B.Change your public IP address.
C.Allow the email server to send traffic only to TCP port 25.
D.Put your email server in a DMZ.
E.Use a separate public IP address for your email server only.

点击查看答案进入题库练习

单项选择题

While deploying a new switch， you accidently connect ports 3/12 and 3/18 together， creating a loop. STP detected it and placed port 3/18 in blocking mode. Why did STP not place port 3/12 in blocking mode instead？（）

A. Port 3/12 was already up and forwarding before the loop was created.
B. Port priority is based on lowest priority and lowest port number.
C. You connected the wire on port 3/18 last.
D. None of the above， it is purely random.

点击查看答案进入题库练习

单项选择题

After applying a new ACL on a device， its CPU utilization rose significantly and many messages startingwith "%SEC-6-IPACCESSLOG" appeared on the Syslog server.What can be done to resolve this situation？（）

A.Increase memory allocation for ACLs.
B.Remove all entries from the ACL and use a single permit ip any any statement.
C.Remove the log keyword from each ACL entry.
D.Reboot the device after the ACL has been applied.

点击查看答案进入题库练习

单项选择题

You deployed new fibers in your network to replace copper spans that were too long. While reconnecting the network， you experienced network problems because you reconnected wrong fibers to wrong ports. What could you do to prevent this type of problem in the future， particularly when connecting and reconnecting fiber pairs？（）

A. Only use fiber in pairs.
B. Configure root guard on your switches.
C. Do not use fiber but use copper.
D. Configure UDLD to prevent one-way link conditions.

点击查看答案进入题库练习

单项选择题

Which feature would prevent guest users from gaining network access by unplugging an IP phone andconnecting a laptop computer？（）

A.IPSec VPN
B.SSL VPN
C.port security
D.port security with statically configured MAC addresses
E.private VLANs

点击查看答案进入题库练习

多项选择题

Refer to the exhibit. There are two sites connected across WAN links. All intersite and intrasite links always have the same routing metric. The network administrator sees only the top routers and links being used by hosts at both LAN A and LAN B. What would be two suggestions to load-balance the traffic across both WAN links？（）

A. Make HSRP track interfaces between the edge and core routers.
B. Replace HSRP with GLBP. 用GLBP替换HSRP
C. Add crossed intrasite links： R1-R4， R2-R3， R5-R8， and R6-R7.
D. Make R3 and R8 have lower HSRP priority than R1 and R7.
E. Replace HSRP with VRRP

点击查看答案进入题库练习

多项选择题

Your network is suffering from regular outages. After troubleshooting， you learn that the transmit lead of afiber uplink was damaged. Which two features can prevent the same issues in the future？（）

A.root guard
B.loop guard
C.BPDU guard
D.UDLD
E.BPDU skew detection

点击查看答案进入题库练习

单项选择题

Customer X has a hub-and-spoke Frame Relay network， with a central office and two branch offices （RemoteA and RemoteB）. Each location has only one physical link to the Frame Relay cloud and RemoteB has a router that is not a Cisco router. Since the installation， there is no connectivity between RemoteB and the central office. What is a possible solution to this issue？（）

A. Because Frame Relay IETF encapsulation is only configurable at interface level， you must use IETF encapsulation on all routers.
B. This is not a possible scenario. A dedicated Frame Relay link to RemoteB is mandatory at the central office.
C. The router at RemoteB must be replaced by a Cisco router.
D. Use Frame Relay IETF encapsulation on a per-VC basis on the central office router.
E. There is a problem in the Frame Relay cloud， because Cisco routers are compatible with IETF Frame Relay.

点击查看答案进入题库练习

单项选择题

For a router connected to two ISPs for redundancy， using IPSLA and static routing， how would youconfigure uRPF on the uplink interface？（）

A.ip verify unicast source reachable-via any
B.ip verify unicast reverse-path
C.ip verify unicast reverse-path loose
D.ip verify unicast reverse-path strict

点击查看答案进入题库练习