默认题库 - CCNP(642-813)

单选题

You are tasked with designing a security solution for your network. What information should be gathered prior to designing the solution？（）

A. IP addressing design plans so that the network can be appropriately segmented to mitigate potential network threats
B. a list of the customer requirements
C. detailed security device specifications
D. results from pilot network testing

查看答案

单选题

A standalone wireless AP solution is being installed into the campus infrastructure. The access points appear to boot correctly， however， wireless clients are not obtaining correct access. You verify that the local switch configuration connected to the access point appears as the following： interface ethernet 0/1 switchport access vlan 10 switchport mode access spanning-tree portfast mls qos trust dscp What is the most likely issue causing the problem？（）

A. QoS trust should not be configured on a port attached to a standalone A
B. QoS trust for switchport mode access should be defined as "cos".
C. switchport mode should be defined as "trunk" with respective Qo
D. switchport access vlan should be defined as "1".

查看答案

多选题

Which three statements are true about DAI？（）

A. DAI intercept all ARP packets on untrusted ports
B. DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP Snooping database.
C. DAI is used to prevent against a DHCP Snooping attack.
DAI forwards all ARP packets received on a trusted interface without any checks.
E. DAI forwards all ARP packets on untrusted ports.
F. DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.

查看答案

多选题

You need to configure the WLAN client utility on a new machine. Which two of the following are true regarding this utility？（）

A. The Aironet Desktop Utility （ADU） can be used to enable or disable the adapter radio and to configure LEAP authentication with dynamic WE
B. In Windows XP environment， a client adapter can only be configured and managed with the Microsoft Configuration Manager.
C. The Microsoft Wireless Configuration Manager can be configured to display the Aironet System Tray Utility （ASTU） icon in the Windows system tray.
D. The Cisco Aironet Desktop Utility （ADU） and the Microsoft Wirelss Configuration Manager can both be enabled at the same time to setup WLAN client cards.

查看答案

单选题

You suspect that a hacker may be performing a MAC address flooding attack somewhere within the network. Which description correctly describes a MAC address flooding attack？（）

A. The attacking device spoofs a source MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
B. Frames with unique， invalid destination MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space， and traffic is subsequently flooded out all ports.
C. The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device.
D. The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the source address found in the Layer 2 frames sent by the valid network device.
E. The attacking device spoofs a destination MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
Frames with unique， invalid source MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space， and traffic is subsequently flooded out all ports.
G. None of the other alternatives apply

查看答案

多选题

In order to enhance worker productivity， a Cisco wireless network has been implemented at all locations. Which three statements regarding WLAN are true？（）

A WLAN client will operate in half-duplex mode.
B. The Aironet 1230 access point is an example of an access point that operates solely as a lightweight access point.
C. Ad hoc mode allows mobile clients to connect directly without an intermediate A
D. WLANs are designed to share the medium and can easily handle an increased demand of channel contention.
E. A lightweight AP receives control and configuration from a WLAN controller to which it is associated.
F. Another term for infrastructure mode is independent service set （IBSS）.

查看答案

多选题

Which of the following are functions that are often provided by an ITSP but are not typically provided by the PSTN？（）

A. QoS
B. call setup and teardown
C. call routing
D. call supervision
E. audio signal compressio

查看答案

单选题

You administer a network that uses two routers， R1 and R2， configured as an HSRP group to provide redundancy for the gateway. Router R1 is the active router and has been configured as follows： R1#configure terminal R1（config）#interface fa0/0 R1（config-if）#ip address 10.10.0.5 255.255.255.0 R1（config-if）#standby 1 priority 150 R1（config-if）#standby preempt delay minimum 50 R1（config-if）#standby 1 track interface fa0/2 15 R1（config-if）#standby 1 ip 10.10.0.20 Which of the following describes the effect the standby preempt delay minimum 50 command will have on router R1？（）

A. The HSRP priority for router R1 will increase to 200.
B. Router R1 will become the standby router if the priority drops below 50.
C. The HSRP priority for router R1 will decrease to 50 points when Fa0/2 goes down.
D. Router R1 will wait 50 seconds before attempting to preempt the active router.

查看答案

多选题

Which two statements are true when the extended system ID feature is enabled？（）

A. The BID is made up of the bridge priority value（two bytes） and bridge MAC address （six bytes）.
B. The BID is made up of the bridge priority （four bits）， the system ID （12 bits）， and a bridge MAC address （48 bits）.
C. The BID is made up of the system ID （six bytes） and bridge priority value （two bytes）.
D. The system ID value is the VLAN ID （VID）.
E. The system ID value is a unique MAC address allocated from a pool of MAC addresses assigned to the switch or module.
F. The system ID value is a hex number used to measure the preference of a bridge in the spanning-tree algorithm.

查看答案

多选题

Which of the following statements is true about the 80/20 rule （Select all that apply）？（）

A. 20 percent of the traffic on a network segment should be local.
B. no more than 20 percent of the network traffic should be able to move across a backbone.
C. no more than 80 percent of the network traffic should be able to move across a backbone.
D. 80 percent of the traffic on a network segment should be local.

查看答案

You are tasked with designing a security solution for your network. What information should be gathered prior to designing the solution？（）

Which three statements are true about DAI？（）

You need to configure the WLAN client utility on a new machine. Which two of the following are true regarding this utility？ （）

You suspect that a hacker may be performing a MAC address flooding attack somewhere within the network. Which description correctly describes a MAC address flooding attack？（）

In order to enhance worker productivity， a Cisco wireless network has been implemented at all locations. Which three statements regarding WLAN are true？（）

Which of the following are functions that are often provided by an ITSP but are not typically provided by the PSTN？（）

Which two statements are true when the extended system ID feature is enabled？ （）

Which of the following statements is true about the 80/20 rule （Select all that apply）？（）

You need to configure the WLAN client utility on a new machine. Which two of the following are true regarding this utility？（）

Which two statements are true when the extended system ID feature is enabled？（）