《CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx》由会员分享，可在线阅读，更多相关《CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx（29页珍藏版）》请在课桌文档上搜索。
1、CCNP/CCIESecuritySCOR题库3QUESTION1WhichfunctiondoesafabricedgenodeperforminanSD-Accessdeployment?A. Connectsendpointstothefabricandforwardstheirtraffic.B. Encapsulatesend-userdatatrafficintoLISP.C. ConnectstheSD-AccessfabrictoanotherfabricorexternalLayer3networks.D. Providesreachabilitybetweenbordern
2、odesinthefabricunderlay.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION2Refertotheexhibit.RI#shrunbeginlineconlineconOexectimeoutOOprivilegelevel15loggingsynchronousstopbits1lineauxoexectimeoutOOprivilegelevel15loggingsynchronousstopbits1linevtyO4password7045802150C2Eloginlinev
3、ty515password7045802150C2EIosin1endRI#shrunincludeaaaenablenoaaanew-modelRI#WhichprivilegelevelisassignedtoVTYusers?A. 1B. 7C. 13D. 15CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION3WhatisthedifferencebetweenaRIBandaFIB?A. TheFIBispopulatedbasedonRIBcontent.B. TheRIBmaintainsa
4、minorimageoftheFIB.C. TheRIBisusedtomakeIPsourceprefix-basedswitchingdecisions.D. TheFIBiswhereallIProutinginformationisstored.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION4WhichrequirementforanAnsible-managednodeistrue?A. ItmusthaveanSSHserverrunning.B. ItmustbeaLinuxservero
5、raCiscodevice.C. Itmustsupportadhoccommands.D. ItmusthaveanAnsibleTowerinstalled.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION5AclientdevicefailstoseetheenterpriseSSID,butotherclientdevicesareconnectedtoit.Whatisthecauseofthisissue?A. Theclienthasincorrectcredentialsstoredfor
6、theconfiguredbroadcastSSID.B. ThehiddenSSIDwasnotmanuallyconfiguredontheclient.C. ThebroadcastSSIDwasnotmanuallyconfiguredontheclient.D. TheclienthasincorrectcredentialsstoredfortheconfiguredhiddenSSID.CorrectAnswerBSection:(none)ExplanationExpIanationZReference:QUESTION6WhichtwodescriptionsofFIexCo
7、nnectmodeforCiscoAPsaretrue?(Choosetwo.)A. APsthatoperateinFIexConnectmodecannotdetectrogueAPs.B. Whenconnectedtothecontroller,FIexConnectAPscantunneltrafficbacktothecontroller.C. FIexConnectmodeisafeaturethatisdesignedtoallowspecifiedCAPWAP-enabledAPstoexcludethemselvesfrommanagingdatatrafficbetwee
8、ndentsandinfrastructure.D. FIexConnectmodeisawirelesssolutionforbranchofficeandremoteofficedeployments.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:2/configuration/guide/cg/cg_flexconnect.htmlQUESTION7WhichOSPFnetworktypesarecompatibleandallowcommunicationthroughthetwopeer
9、ingdevices?A. point-to-multipointtononbroadcastB. broadcasttononbroadcastC. point-to-multipointtobroadcastD. broadcasttopoint-to-pointCorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:QUESTION8WhichNGFWmodeblocksflowscrossingthefirewall?A. tapB. inlineC. passiveD. inlinetapCorr
10、ectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:QUESTION9WhichstatementaboutroutetargetsistruewhenusingVRF-Lite?A. Routetargetscontroltheimportandexportofroutesintoacustomerroutingtable.B. WhenBGPisconfigured,routetargetsaretransmittedasBGPstandardcommunities.C. Routetargetsallowc
11、ustomerstobeassignedoverlappingaddresses.D. Routetargetsuniquelyidentifythecustomerroutingtable.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION10HowdoesCiscoTrustSecenablemoreflexibleaccesscontrolsfordynamicnetworkingenvironmentsanddatacenters?A.usesflexibleNetFIowB.assignsaVLA
12、NtotheendpointC. classifiestrafficbasedonadvancedapplicationrecognitionD. classifiestrafficbasedonthecontextualidentityoftheendpointratherthanitsIPaddressCorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:engineZat_a_glance_c45-726831.pdfQUESTION11Refertotheexhibit.Rldebugipospfh
13、elloRlfdebugconditioninterfaceFa.0lCondition1SetRefertotheexhibitWhichstatementabouttheOPSFdebugoutputistrue?A. TheoutputdisplaysOSPFhellomessageswhichrouterRlhassentorreceivedonintrfaceFaOl.B. TheoutputdisplaysOSPFmessageswhichrouterRlhassentorreceivedonallinterfaces.C. TheoutputdisplaysOSPFmessage
14、swhichrouterRlhassentorreceivedoninterfaceFaOl.D. TheoutputdisplaysOSPFhelloandLSACKmessageswhichrouterRlhassentorreceived.CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION12WhichLISPinfrastructuredeviceprovidesconnectivitybetweennon-LISPsitesandLISPsitesbyreceivingnon-LISPtraff
15、icwithaLISPsitedestination?APnRBmapresoercmapSerVerDPETRCoITeCfAnSWeKASeCt-On:(none)EXP-anatonEXP-aCIaWOrVReferenCe-Referencettps:、/www2.scooom、c、en、us、td、docs、soct-ons、Enterpr-SRDatalcenteryDC-、50、L-SPmob三tyDC-IL-splHoStIMOb三tyL-SPmob=el2htm-QUEST-ON13Wh-Ch-WoProSCo-SareUSedW-thYANGdatamode2(ChooSe
16、-Wo)ATLSBRESTCoNFcSSHDNETCONFmHpsCoITeCtAnSWerBDSec-On:(none)EXP-anato,nEXParo-rReference-QUEST-ON14Wh-ChHTTPStarUSCOde-SrheCOlTeCrreSPOnSeforrequest:W一rhan-FICOITeCtPaSSWOrdapp=edSRESTAP-session?AHTTPStarUSCOd他2。B.HTTPStatUSCode-302cHTTPsrrusCode-401DHTTPSratUSCod曾504CorreCtAnSWer:CSection:(none)EX
17、P-anato,nExpIanationZReference:Reference:https:/developer.mozilla.org/en-US/docs/Web/HTTP/Status/401QUESTION15TheloginmethodisconfiguredontheVTYlinesofarouterwiththeseparameters. ThefirstmethodforauthenticationisTACACS IfTACACSisunavailable,loginisallowedwithoutanyprovidedcredentialsWhichconfigurati
18、onaccomplishesthistask?A.Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogintelnetgrouptacacs+noneaaasession-idcommonRl#shrunsectionvtylinevtyO4Rl#shrunincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacsaaasession-idcommonRl#shrunsectionVtylinevtyO4transportinpu
19、tnoneRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationloginVTYgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04password702050D480809Rl#shrunIincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04paSSWO
20、rd702050D480809Rl#shrunIincludeusernameRI#CorrectAnswerDSection:(none)ExplanationExpIanationZReference:QUESTION16WhichstatementaboutmulticastRPsistrue?A. RPsarerequiredonlywhenusingprotocolindependentmulticastdensemode.B. RPsarerequiredforprotocolindependentmulticastsparsemodeanddensemode.C. Bydefau
21、lt,theRPisneededperiodicallytomaintainsessionswithsourcesandreceivers.D. Bydefault,theRPisneededonlytostartnewsessionswithsourcesandreceivers.CorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:https:/www.cisco.eom/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/rps.h
22、tmlQUESTION17Toincreasetotalthroughputandredundancyonthelinksbetweenthewirelesscontrollerandswitch,thecustomerenabledLAGonthewirelesscontroller.WhichEtherChanneImodemustbeconfiguredontheswitchtoallowtheWLCtoconnect?A. ActiveB. PassiveC. OnD. AutoCorrectAnswerCSection:(none)ExplanationExpIanationZRef
23、erence:Reference:https:/CommUQUESTION18WhichfeaturedoesCiscoTrustSecusetoprovidescalable,securecommunicationthroughoutanetwork?A. securitygrouptagACLassignedtoeachportonaswitchB. securitygrouptagnumberassignedtoeachuseronaswitchC. securitygrouptagnumberassignedtoeachportonanetworkD. securitygrouptag
24、ACLassignedtoeachrouteronanetworkCorrectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdfQUESTION19AnengineerconfiguresaWLANwithfasttransitionenabled.SomelegacyclientsfailtoconnecttothisWLAN.Whichfeatureallowsthelegacyclientst
25、oconnectwhilestillallowingotherclientstousefasttransitionbasedontheirOUIs?A. overtheDSB. 802.11kC. adaptiveRD. 802.11vCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION21Anetworkadministratorisimplementingaroutingconfigurationchangeandenablesroutingdebugstotrackroutingbehaviorduri
26、ngthechange.Theloggingoutputontheterminalisinterruptingthecommandtypingprocess.Whichtwoactionscanthenetworkadministratortaketominimizethepossibilityoftypingcommandsincorrectly?(Choosetwo.)A. Configuretheloggingsynchronousglobalconfigurationcommand.B. Configuretheloggingsynchronouscommandunderthevty.
27、C. Increasethenumberoflinesonthescreenusingtheterminallengthcommand.D. Configuretheloggingdelimiterfeature.E. PresstheTABkeytoreprintthecommandinanewline.CorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION22WhichtwopiecesofinformationarenecessarytocomputeSNR?(Choosetwo.)A.transmi
28、tpowerB.noisefloorC.日RPD.RSSIE.antennagainCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:Reference:QUESTION23WhichstatementsareusedforerrorhandlinginPython?A. try/catchB. catchreleaseC. block/rescueD. try/exceptCorrectAnswer:DSection:(none)ExplanationExpIanationZReference:QUESTION24W
29、hataretwobenefitsofvirtualizingtheserverwiththeuseofVMsinadatacenterenvironment?(Choosetwo.)A. reducedrackspace,power,andcoolingrequirementsB. smallerLayer2domainC. increasedsecurityD. speedydeploymentE. reducedIPandMACaddressrequirementsCorrectAnswer:ADSection:(none)ExplanationExpIanationZReference
30、:QUESTION25WhichtwostepsarerequiredforacompleteCiscoDNACenterupgrade?(Choosetwo.)A. automationbackupB. systemupdateC. goldenimageselectionD. proxyconfigurationE. applicationupdatesCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION26WhatisabenefitofdatamodelinglanguageslikeYANG?A
31、. TheycreatemoresecureandefficientSNMPOIDs.B. Theyprovideastandardizeddatastructure,whichresultsinconfigurationscalabilityandconsistency.C. Theyenableprogrammerstochangeorwritetheirownapplicationswithinthedeviceoperatingsystem.D. TheymaketheCUsimplerandmoreefficient.CorrectAnswer:BSection:(none)Expl
32、anationExpIanationZReference:QUESTION27Refertotheexhibit.NameisBobJohnsonAgeis75isaliveFavoritefoodsare: Cereal Mustard OnionsWhatistheJSONsyntaxthatisformedfromthedata?A. Name:BobJohnson,Age:75,Alive:true,FavoriteFoods:Cereal,Mustard,OnionsB. “Name:uBobJohnsontAge：75,Alive:true,uFavoriteFoods:,Cere
33、a,uMustard,OnionsC. ,Name,:*BobJohnson,Age,:75,Alive,:True,TavoriteFoods:*Cerea,lMustard,Onions,D. uName:BobJohnson,uAgen:Seventyfive1,Alive:true,uFavoriteFoods:uCerea,uMustard,OnionsCorrectAnSWe匚BSection:(none)ExplanationExpIanationZReference:QUESTION28Basedonthisinterfaceconfiguration,whatistheexp
34、ectedstateofOSPFadjacency?Rl:interfaceGigabitEthernet0/1ipaddress192.0.2.1255.255.255.252ipospf1area0ipospfhello-interval2ipospfcost1endR2:interfaceGigabitEthernetO/1ipaddress192.0.2.2255.255.255.252ipospf1area0ipospfcost500endA. 2WAYDROTHERonbothroutersB. notestablishedC. FULLonbothroutersD. FLLBDR
35、onRlandFLLBDRonR2CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION29Refertotheexhibit.GO/OLinklGO/OSW2#showspanning-treeVlanoooiSpanningtreeenabledprotocolIeeeRootIDPriority32769Address5000.0005.0000Cost4Port1(GigabitEthernet0/0)HelloTime2secMaxAge20secForwardDelay15secBridgeIDP
36、riority32769(priority32769sys-id-ext1)Address5000.0006.0000HelloTime2secMaxAge20secForwardDelay15secAgingTime300secInterfaceRoleStsCostPrio.IibrTypeGi00GiO/lRootFWD4128.1P2pAltoBLW432.2P2p1.inklisacopperconnectionandLink2isafiberconnection.Thefiberportmustbetheprimaryportforallforwarding.Theoutputof
37、theshowspanning-treecommandonSW2showsthatthefiberportisblockedbyspanningtree.Anengineerentersthespanning-treeport-priority32commandonG0lonSW2,buttheportremainsblocked.WhichcommandshouldbeenteredontheportsthatareconnectedtoLink2toresolvetheissue?A. Enterspanning-treeport-priority4onSW2.B. Enterspanni
38、ng-treeport-priority32onSWl.C. Enterspanning-treeport-priority224onSWl.D. Enterspanning-treeport-priority64onSW2.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION30WhichJSONsyntaxisvalid?A,1,switch:name：*,distlt-interfaces*:gig,gig2,ugig3B.uswitch:/,namen:dist,/“interfaces/”:ugi
39、gl,ugig2,gig3C. “switch：name:udistl,“interfaces”:4,gig,gig2,ugig3D. switch:(name:,distl,interfaces:,gigl,gig2,gig31)CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION31A. WhataretwocommonsourcesofinterferenceforWi-Finetworks?(Choosetwo.)B. 1.EDlightsC. radarD. firealarmE. conventi
40、onalovenF. rogueAPCorrectAnswer:AESection:(none)ExplanationExpIanationZReference:QUESTION32WhenusingTLSforsyslog,whichconfigurationallowsforsecureandreliabletransportationofmessagestoitsdefaultport?Alogginghost10.2.3.4vrfmgmttransporttcpport514B. logginghost10.2.3.4vrfmgmttransportudpport514C. loggi
41、nghost10.2.3.4vrfmgmttransporttcpport6514D. logginghost10.2.3.4vrfmgmttransportudpport6514CorrectAnswerCSection:(none)ExplanationExpIanationZReference:Reference:https:/tools.ietf.org/html/rfc5425QUESTION33WhichbehaviorcanbeexpectedwhentheHSRPversionischangedfrom1to2?A. Nochangesoccurbecausethestandb
42、yrouterisupgradedbeforetheactiverouter.B. Nochangesoccurbecauseversion1and2usethesamevirtualMACOUI.C. EachHSRPgroupreinitializesbecausethevirtualMACaddresshaschanged.D. EachHSRPgroupreinitializesbecausethemulticastaddresshaschanged.CorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTIO
43、N34WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?A. HTTPB. SSHC. HTTPSD. TCPCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION35Refertothisoutput.RI#*Feb1437:09:53.129:%LINEPR0T0-5-UPD0WN:LineprotocolonInterfaceGigabitEthernetO/1,changedstatetoupWhatistheloggingseveritylevel?A. notificationB. emergencyC. criticalD. alertCorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION36Refertotheexhibit.Rl#showipbgpBGPtableversionis32,localrouterDis192.168.1
