CISCOCCNA网络工程师题库

CISCOCCNA网络工程师题库
CCNA题库
考试代号：640-802
考试时刻：英文110+30=140分钟
通过分数：825
题库版本：V104.4
鸿鹄论坛招募CCNA、CCNP答疑讲师
答疑地点：鸿鹄官方YY频道3660
鸿鹄大讲堂：://bbs.hh010 /thread-46172-1-1.html
CCNA题库战报交流QQ群：144288127 （500人超级群）
CCNA题库战报交流区：://bbs.hh010 /forum-261-1.html
1000 G视频教程免费下载：://bbs.hh010 /forum-228-1.html
CCNA（640-802）题库V104.4
CCNA（640-802）题库V104.4（情人节版）
CCNA 题库战报500人超级QQ群144288127
V104系列是官方的终结版本，以后可不能再出V105 V106 V108等等
CCNA 最新题库/最新战报公布区：://bbs.hh010 /forum-261-1.html
下载官方正版题库、看最新考试战报，请随时关注鸿鹄论坛://bbs.hh010
CCNA考试报名1900，详情请联系鸿鹄全国区十七名客服QQ 712023090-712023106
========================================
更新内容：
V104.1修正V104中错误题目，确定经典争议题目答案；
V104.2增加拖图题并可完美模拟考试，VCE题库增加中文注释；
V104.3针对思科CCNA考试变题，更新考试新增题目93Q,更新V104.2实验题；
V104.4增加全文中文注释，汇总V104.3九次更新，删除部分旧题目，为目前最新官方正版题库；
2011.8.1 增加每日新题，修订部分错误。

2020.2.14 情人节版
增加5道新题，分别是519、520、521、522、523题
修改176题、375题、443题、482题答案错误
修改59题、88题、453题、107题、270题注释错误
增加个别疑难拖图题注释，优化实验题
=============================================
QUESTION 1
When you are logged into a switch, which prompt indicates that you are in privileged mode? (当您登录到交换机，哪种提示说明你在特权模式？)
A. %
B. @
C. >
D. $
E. #
Answer: E
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
特权模式确实是#提示符
QUESTION 2
Which command shows system hardware and software version information?
(哪些命令显示系统硬件和软件的版本信息？)
A. show configuration
B. show environment
C. show inventory
D. show platform
E. show version
Answer: E
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
查看系统的软件和硬件信息使用的命令是show version
QUESTION 3
Cisco Catalyst switches CA T1 and CAT2 have a connection between them using ports FA0/13. An 802. 1Q trunk is configured between the two switches. On CAT1, VLAN 10 is chosen as native, but on CA T2 the native VLAN is not specified.What will happen in this scenario?
(思科Catalyst 交换机CAT1 和CAT2 有它们之间的连接使用端口FA0/13。

两个交换机之间用802.1Q中继配置，CAT1做为VLAN10的主机，但在CAT2 上的本地VLAN 未指定。

在这种情形下会发生什么？)
A. 802.1Q giants frames could saturate the link.
B. VLAN 10 on CAT1 and VLAN 1 on CA T2 will send untagged frames.
C. A native VLAN mismatch error message will appear.
D. VLAN 10 on CA T1 and VLAN 1 on CA T2 will send tagged frames.
Answer: C
Section: Chapter 10: VLAN
Explanation/Reference:
假如两边native不匹配的话.switch将报native不匹配的日志信息
QUESTION 4
Which command would correctly configure a serial port on a router with the last usable host address in the 192.216.32.32/29 subnet?
（哪个命令正确地将最后的可用主机地址，192.216.32.32/29 子网的路由器上配置的串行端口？）
A. Router(config-if)# ip address 192.216.32.38 255.255.255.240
B. Router(config-if)# ip address 192.216.32.39 255.255.255.224
C. Router(config-if)# ip address 192.216.32.63 255.255.255.248
D. Router(config-if)# ip address 192.216.32.39 255.255.255.248
E. Router(config-if)# ip address 192.216.32.63 255.255.255.248
F. Router(config-if)# ip address 192.216.32.38 255.255.255.248
Answer: F
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
192.216.32.32/29它的块大小为8掩码为255.255.255.248地址范畴为192.216.32.32-39 QUESTION 5
The network default gateway applying to a host by DHCP is 192.168.5.33/28. Which option is the valid IP address of this host?(应用到由DHCP 主机的网络默认网关是192.168.5.33\/28。

哪个选项是有效的主机IP 地址？)
A. 192.168.5.55
B. 192.168.5.47
C. 192.168.5.40
D. 192.168.5.32
E. 192.168.5.14
Answer: C
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM
192.168.5.33/28所在网段的范畴是192.168.5.32--192.168.5.47/28
A：超出范畴
B：广播地址
C：正确
D：网络号
E：超出范畴
QUESTION 6
Which two addresses can be assigned to a host with a subnet mask of 255.255.254.0? (Choose two.){哪两个地址能够分配给与子网掩码255.255.254.0 的主机？}
A. 113.10.4.0
B. 186.54.3.0
C. 175.33.3.255
D. 26.35.2.255
E. 17.35.36.0
Answer: BD
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM
A：网络号
B/D：正确
C：广播地址
E：网络号
QUESTION 7
The network administrator has asked you to check the status of the workstation's IP stack by pinging the loopback address. Which address would you ping to perform this task?
{网络治理员已要求您通过ping 环回地址检查工作站的IP 堆栈的状态。

您要执行此任务将ping 哪个地址？}
A. 10.1.1.1
B. 127.0.0.1
C. 192.168.0.1
D. 239.1.1.1
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：使用ping来检测主机的IP栈。

ping 127.0.0.1实现。

QUESTION 8
Workstation A has been assigned an IP address of 192.0.2.24/28. Workstation B has been assigned an IP address of 192.0.2.100/28. The two workstations are connected with a straight-through cable. Attempts to ping between the hosts are unsuccessful. What two things can be done to allow communications between the hosts? (Choose two.)
{A 工作站已分配IP 地址为192.0.2.24\/28。

B 工作站已分配IP 地址为192.0.2.100\/28。

两台工作站与直通电缆连接。

在主机之间ping 不成功。

承诺在主机之间的通信，能够做两件情况？（选择两个）。

}
A. Replace the straight-through cable with a crossover cable.
B. Change the subnet mask of the hosts to /25.
C. Change the subnet mask of the hosts to /26.
D. Change the address of Workstation A to 192.0.2.15.
E. Change the address of Workstation B to 192.0.2.111.
Answer: AB
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：同构设备使用交叉线，两端的IP需要在同一个子网。

A：使用交叉线替换现有的直通线。

正确。

B：修改掩码为25位，正确。

C：修改掩码为26为，错误。

不能使他们在同一个子网。

D/E：错误，都不能使他们在同一个子网。

QUESTION 9
Your ISP has given you the address 223.5.14.6/29 to assign to your router's interface. They have also given you the default gateway address of 223.5.14.7. After you have configured the address, the router is unable to ping any remote devices. What is preventing the router from pinging remote devices?(您的ISP 给你要分配给您的路由器接口地址223.5.14.6\/29。

他们还授予您是223.5.14.7 的默认网关地址。

您已配置了地址后，路由器是无法ping 任何远程设备。

什么在阻碍pinging 远程设备的路由器？)
A. The default gateway is not an address on this subnet.
B. The default gateway is the broadcast address for this subnet.
C. The IP address is the broadcast address for this subnet.
D. The IP address is an invalid class D multicast address.
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM。

223.5.14.6/29所在网段的范畴是：223.5.14.0--223.5.14.7/29
A：默认网关不属于那个子网，错误
B：默认网关是那个子网的广播地址，正确
C：那个地址是子网的广播地址，错误
D：那个地址是组播地址，错误。

QUESTION 10
Which command is used to copy the configuration from RAM into NVRAM?
{哪个命令用于从RAM复制到NVRAM的配置}
A. copy running-config startup-config
B. copy startup-config: running-config:
C. copy running config startup config
D. copy startup config running config
E. write terminal
Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
QUESTION 11
Which command is used to load a configuration from a TFTP server and merge the configuration into RAM?(哪些命令用于从TFTP 服务器加载配置或合并到RAM 的配置？)
A. copy running-config: TFTP:
B. copy TFTP: running-config
C. copy TFTP: startup-config
D. copy startup-config: TFTP:
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
QUESTION 12
A system administrator types the command to change the hostname of a router. Where on the Cisco IFS is that change stored?
A. NVRAM
B. RAM
C. FLASH
D. ROM
E. PCMCIA
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
running-config储存在RAM中
startup-config储存在NVRAM中
QUESTION 13
Which command is used to configure a default route?
A. ip route 172.16.1.0 255.255.255.0 0.0.0.0
B. ip route 172.16.1.0 255.255.255.0 172.16.2.1
C. ip route 0.0.0.0 255.255.255.0 172.16.2.1
D. ip route 0.0.0.0 0.0.0.0 172.16.2.1
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
QUESTION 14
If IP routing is enabled, which two commands set the gateway of last resort to the default gateway?（假如启用了IP 路由，哪两个命令设置网关的最后到默认网关？）(Choose two.)
A. ip default-gateway 0.0.0.0
B. ip route 172.16.2.1 0.0.0.0 0.0.0.0
C. ip default-network 0.0.0.0
D. ip default-route 0.0.0.0 0.0.0.0 172.16.2.1
E. ip route 0.0.0.0 0.0.0.0 172.16.2.1
Answer: CE
Section: Chapter 6: IP Routing
Explanation/Reference:
产生默认网关的两种方式
ip default-network
ip route
QUESTION 15
Which command would you configure globally on a Cisco router that would allow you to view directly connected Cisco devices?(该命令将全局上配置使您能够直截了当查看的Cisco 路由器连接Cisco 设备吗？)
A. enable cdp
B. cdp enable
C. cdp run
D. run cdp
Answer: C
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
QUESTION 16
Which command is used to see the path taken by packets across an IP network?
(哪些命令用于看到通过IP 网络数据包所采取的路径？)
A. show ip route
B. show route
C. traceroute
D. trace ip route
Answer: C
Section: Chapter 2: TCP/IP
Explanation/Reference:
哪条命令用于查看数据包转发所通过的路径
A:查看路由表
B：没有这条命令
C：正确
D：没这条命令
QUESTION 17
Which command is used to debug a ping command?
{哪些命令用于调试ping 命令？}
A. debug icmp
B. debug ip icmp
C. debug tcp
D. debug packet
Answer: B
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
ping调用了icmp协议，而icmp数据包封装在ip包中。

QUESTION 18
Which command displays CPU utilization?
{哪个命令显示的CPU 利用率呢？}
A. show protocols
B. show process
C. show system
D. show version
Answer: B
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
查看CPU利用率。

QUESTION 19
When configuring a serial interface on a router, what is the default encapsulation?
{在配置一个串行接口的路由器，什么是默认的封装？}
A. atm-dxi
B. frame-relay
C. hdlc
D. lapb
E. ppp
Answer: C
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
缺省封装是HDLC
QUESTION 20
What must be set correctly when configuring a serial interface so that higher-level protocols calculate the best route?
{什么时，必须设置正确配置串行接口，以便更高级别的协议运算最佳路线？}
A. bandwidth
B. delay
C. load
D. reliability
Answer: A
Section: Chapter 6: IP Routing
Explanation/Reference:
为了使高层路由协议运算最佳路由，串口的什么东西必须被设置正确？在接口下，只有带宽是能够配置的。

QUESTION 21
A company implements video conferencing over IP on their Ethernet LAN. The users notice that the network slows down, and the video either stutters or fails completely. What is the most likely reason for this?
{公司对他们的以太网LAN ip 实现视频会议。

用户注意网络变慢，和视频断断续续或完全失败。

最有可能的缘故是什么？}
A. minimum cell rate (MCR)
B. quality of service (QoS)
C. modulation
D. packet switching exchange (PSE)
E. reliable transport protocol (RTP)
Answer: B
Section: Chapter 9: Switching
Explanation/Reference:
考点：当网络中使用视频会议后发觉网络专门慢，什么缘故引起的？
QoS：用于定制策略对不同流量进行操纵。

QUESTION 22
Which layer in the OSI reference model is responsible for determining the availability of the receiving program and checking to see if enough resources exist for that communication? {OSI 参考模型在哪一层负责确定接收程序的可用性和检查足够的资源，是否存在该通信？}
A. transport
B. network
C. presentation
D. session
E. application
Answer: E
Section: Chapter 1: Introduction
Explanation/Reference:
哪一层确定的接收程序的可用性？
应用层提供
QUESTION 23
Data transfer is slow between the source and destination. The quality of service requested by the transport layer in the OSI reference model is not being maintained. To fix this issue, at which layer should the troubleshooting process begin?
{数据传输速度慢的源和目标之间。

不保持在OSI 参考模型的传输层所要求的服务质量。

要解决此问题，在哪一层应故障排除过程开始？}
A. presentation
B. session
C. transport
D. network
E. physical
Answer: D
Section: Chapter 1: Introduction
Explanation/Reference:
解决网络问题，先确保网络层通信。

QUESTION 24
Which protocols are found in the network layer of the OSI reference model and are responsible for path determination and traffic switching?
{哪些协议在网络层OSI 参考模型中找到，负责路径测定和交通切换？}
A. LAN
B. routing
C. WAN
D. network
Answer: B
Section: Chapter 1: Introduction
Explanation/Reference:
OSI网络层中什么提供了路径选择和流量转发？
由路由协议提供。

通过手工或者动态学习路由条目实现。

QUESTION 25
Which command reveals the last method used to powercycle a router?
A. show reload
B. show boot
C. show running-config
D. show version
Answer: D
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
哪一个命令能够显示最近一次被用来重启路由器的方法？
QUESTION 26
Which three options are valid WAN connectivity methods? (Choose three.)
A. PPP
B. WAP
C. HDLC
D. MPLS
E. L2TPv3
F. ATM
Answer: ACF
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
哪三种封装属于WAN链路的?
A:点到点协议，正确
B：无线加密技术，错误
C:思科缺省封装格式，正确。

D：多协议标签转换，错误
E：隧道协议，错误
F：正确。

QUESTION 27
Refer to the exhibit. Which WAN protocol is being used?
A. ATM
B. HDLC
C. Frame Relay
D. PPP
Answer: C
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
由图中的红线可看到发送同意LMI信息。

属于FR的数据包。

QUESTION 28
What is the difference between a CSU/DSU and a modem?
【一个CSU/DSU和调制解调器之间的区别是什么？】
A. A CSU/DSU converts analog signals from a router to a leased line; a modem converts analog signals from a router to a leased line.
B. A CSU/DSU converts analog signals from a router to a phone line; a modem converts digital signals from a router to a leased line.
C. A CSU/DSU converts digital signals from a router to a phone line; a modem converts analog signals from a router to a phone line.
D. A CSU/DSU converts digital signals from a router to a leased line; a modem converts digital signals from a router to a phone line.
Answer: D
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
CSU/DSU一样是专线，MODEN是将模拟信号与数字信号转换
QUESTION 29
A network administrator must configure 200 switch ports to accept traffic from only the currently attached host devices. What would be the most efficient way to configure MAC-level security on all these ports?
A. Visually verify the MAC addresses and then telnet to the switches to enter the switchport-port security mac-address command.
B. Have end users e-mail their MAC addresses. Telnet to the switch to enter the switchport-port security mac-address command.
C. Use the switchport port-security MAC address sticky command on all the switch ports that have end devices connected to them.[有端设备连接到他们的所有交换机端口上使用交换机端口端口安全MAC 地址粘滞命令。

]
D. Use show mac-address-table to determine the addresses that are associated with each port and then enter the commands on each switch for MAC address port-security.
Answer: C
Section: Chapter 9: Switching
Explanation/Reference:
考点：有200台主机需要接入，采纳什么方式来增强网络安全性？
A：先验证mac安全性，然后在交换机上绑定。

错误，工作量太大
B：用户发送邮件认证再在交换机上配置，错误，不科学。

C：使用port-security，正确。

D：错误，工作量太大。

QUESTION 30
When troubleshooting a Frame Relay connection, what is the first step when performing a loopback test?【帧中继连接故障排除时，执行环回测试时的第一步是什么？】
A. Set the encapsulation of the interface to HDLC.
B. Place the CSU/DSU in local-loop mode.
C. Enable local-loop mode on the DCE Frame Relay router.
D. Verify that the encapsulation is set to Frame Relay.
Answer: A
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
在对FR进行排错的时候，当做回环测试的时候，第一步如何处理？
A：讲接口配置成HDLC，正确，FR封装下无法正常ping自己端口
QUESTION 31
What occurs on a Frame Relay network when the CIR is exceeded?
A. All TCP traffic is marked discard eligible.
B. All UDP traffic is marked discard eligible and a BECN is sent.
C. All TCP traffic is marked discard eligible and a BECN is sent.
D. All traffic exceeding the CIR is marked discard eligible.
Answer: D
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
在FR网络中，当CIR超过时会发生什么情形？
D：所有超过的流量都丢弃。

QUESTION 32
What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)
A. They create split-horizon issues.
B. They require a unique subnet within a routing domain.
C. They emulate leased lines.
D. They are ideal for full-mesh topologies.
E. They require the use of NBMA options when using OSP
F.
Answer: BC
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
帧中继点到点子接口的特点？
A：水平分割，错误。

B：每个子接口需要一个独立的网段，正确。

C：类似专线，正确。

D:全网互联是理想拓扑，错误。

通常是hub-spoke
E：NBMA不支持OSPF，错误。

QUESTION 33
Refer to the exhibit. Addresses within the range 10.10.10.0/24 are not being translated to the
1.128.0/16 range. Which command shows if 10.10.10.0/24 are allowed inside addresses?
A. debug ip nat
B. show access-list
C. show ip nat translation
D. show ip nat statistics
Answer: B
Section: Chapter 8: NAT
Explanation/Reference:
那条命令能够看到10.10.10.0/24是否在承诺转换范畴。

承诺的范畴是通过ACL定义的。

A：打开NAT转换的debug信息，错误
B：查看acl信息，正确。

C：查看NAT转换表，错误。

D：查看静态NAT。

错误
QUESTION 34
A wireless client cannot connect to an 802.11b/g BSS with a b/g wireless card. The client section of the access point does not list any active WLAN clients. What is a possible reason for this?
[一台带有b/g无线网上的无线客户机不能连接到一个8020.11b/g 的基站。

客户端部分没有发觉可用的无线局域网。

这种情形是什么缘故？]
A. The incorrect channel is configured on the client.
B. The client's IP address is on the wrong subnet.
C. The client has an incorrect pre-shared key.
D. The SSID is configured incorrectly on the client.
Answer: D
Section: Chapter 11: Wireless
Explanation/Reference:
客户端无法连接到无限接入点，查看不到可用的无线信号。

这通常是SSID信号没有配置正确。

A：不正确的信道。

错误
B：客户端的IP地址配置错误
C：客户端的共享key错误。

D：SSID配置不正确。

QUESTION 35
Which two features did WPAv1 add to address the inherent weaknesses found in WEP? (Choose two.)[哪两个功能WPAv1 没有添加地址找到wep 的固有弱点？（选择两个]
A. a stronger encryption algorithm
B. key mixing using temporal keys
C. shared key authentication
D. a shorter initialization vector
E. per frame sequence counters
Answer: BE
Section: Chapter 11: Wireless
Explanation/Reference:
考点：WPA1中增强哪两个在WEP中发觉的弱点？WEP存在的隐患要紧是依靠共享密钥A：更强的加密算法
B：混合使用的密钥
C：共享密钥认证
D：较短的初始化向量
E：一个帧一个序列计数器。

QUESTION 36
Which two wireless encryption methods are based on the RC4 encryption algorithm? (Choose two.)
A. WEP
B. CCKM
C. AES
D. TKIP
E. CCMP
Answer: AD
Section: Chapter 11: Wireless
Explanation/Reference:
考点：哪两种无限加密技术依靠RC4
A:有线等效保密协议
B：英特尔开发一种协议
C：高级加密标准
D：临时密钥集成协议
E:基于AES的加密方式
QUESTION 37
What are two characteristics of RIPv2? (Choose two.)
A. classful routing protocol
B. variable-length subnet masks
C. broadcast addressing
D. manual route summarization
E. uses SPF algorithm to compute path
Answer: BD
Section: Chapter 6: IP Routing
Explanation/Reference:
A：有类路由协议，错误
B：可变长度子网掩码，正确
C：采纳广播地址更新，错误
D：手动路由汇总，正确
E:使用spf算法运算路径，错误。

QUESTION 38
Which two Ethernet fiber-optic modes support distances of greater than 550 meters?
A. 1000BASE-CX
B. 100BASE-FX
C. 1000BASE-LX
D. 1000BASE-SX
E. 1000BASE-ZX
Answer: CE
Section: Chapter 1: Introduction
Explanation/Reference:
A：最长距离25米
B：最长距离100米
C：最长距离3000米
D：最长距离550米
E：最长距离70千米
QUESTION 39
What two things will a router do when running a distance vector routing protocol? (Choose two.)
A. Send periodic updates regardless of topology changes.
B. Send entire routing table to all routers in the routing domain.
C. Use the shortest-path algorithm to the determine best path.
D. Update the routing table based on updates from their neighbors.
E. Maintain the topology of the entire network in its database.
Answer: AD
Section: Chapter 6: IP Routing
Explanation/Reference:
考点：考查距离矢量路由协议特性
A：周期性更新，正确
B：发送整个路由表到整个路由域，错误，只发送给邻居
C：使用SPF算法，错误
D：依靠邻居发送更新来更新路由表，正确
E：在数据库中爱护整个网络的拓扑。

错误
QUESTION 40
Refer to the exhibit. According to the routing table, where will the router send a packet destined for
10.1.5.65?
A. 10.1.1.2
B. 10.1.2.2
C. 10.1.3.3
D. 10.1.4.4
Answer: C
Section: Chapter 6: IP Routing
Explanation/Reference:
路由查找原则：最长掩码匹配原则。

QUESTION 41
Which command shows if an access list is assigned to an interface?
A. show ip interface [interface] access-lists
B. show ip access-lists interface [interface]
C. show ip interface [interface]
D. show ip access-lists [interface]
Answer: C
Section: Chapter 7: Security
Explanation/Reference:
QUESTION 42
Refer to the exhibit. Which rule does the DHCP server use when there is an IP address conflict?
A. The address is removed from the pool until the conflict is resolved.
B. The address remains in the pool until the conflict is resolved.
C. Only the IP detected by Gratuitous ARP is removed from the pool.
D. Only the IP detected by Ping is removed from the pool.
E. The IP will be shown, even after the conflict is resolved.
Answer: A
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
show ip dhcp conflict命令能够查看哪些ip地址在使用上有冲突。

有冲突的地址不再分配出去。

A：地址被删除直到冲突解决，正确
B:地址保留直到冲突解决，错误
C/D：答案片面。

E：当冲突解决后，地址会被显示。

错误。

QUESTION 43
Refer to the exhibit. You are connected to the router as user Mike. Which command allows you to see
output from the OSPF debug command?
A. terminal monitor
B. show debugging
C. show sessions
D. show ip ospf interface
Answer: A
Section: Chapter 6: IP Routing
Explanation/Reference:
A：让debug信息在终端上显示出来
B：没这条命令
C：查看会话信息。

D:查看启用了ospf的接口的相关信息。

QUESTION 44
Refer to the exhibit. If number 2 is selected from the setup script, what happens when the user runs setup
from a privileged prompt?
A. Setup is additive and any changes will be added to the config script.
B. Setup effectively starts the configuration over as if the router was booted for the first time.
C. Setup will not run if an enable secret password exists on the router.
D. Setup will not run, because it is only viable when no configuration exists on the router. Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
[0]不储存进入IOS命令配置模式
[1]不储存返回设置模式
[2]储存退出
A：设置和改动被储存到配置脚本
B：为有效地重新开始配置，假如路由器是第一次启动的配置。

C：假如配置了密码，设置可不能运行
D：设置不可用，因为它只能在没有配置存在时才有效。

QUESTION 45
Refer to the exhibit. Which (config-router) command will allow the network represented on the interface to
be advertised by RIP?
A. redistribute ethernet0
B. network ethernet0
C. redistribute 10.12.0.0
D. network 10.12.0.0
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
考点：如何才能让接口通告RIP路由。

通告network网段实现。

QUESTION 46
Refer to the exhibit. What information can be gathered from the output?
A. One router is running RIPv1.
B. RIP neighbor is 224.0.0.9.
C. The network contains a loop.
D. Network 10.10.1.0 is reachable.
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
由图中能够看出本地差不多存在10.10.1.0这条路由。

QUESTION 47
Refer to the exhibit. What type of connection would be supported by the cable diagram shown?
A. PC to router
B. PC to switch
C. server to router
D. router to router
Answer: B
Section: Chapter 1: Introduction
Explanation/Reference:
从图中能够看出这是一条直通线。

同构设备使用交叉线，异构设备使用直通线。

B：直通线
AC/D同构设备使用交叉线
QUESTION 48
Refer to the exhibit. What type of connection would be supported by the cable diagram shown?
A. PC to router
B. PC to switch
C. server to switch
D. switch to router
Answer: A
Section: Chapter 1: Introduction
Explanation/Reference:
QUESTION 49
Which two statements describe the Cisco implementation of VLANs? (Choose two.)
A. VLAN 1 is the default Ethernet VLAN.
B. CDP advertisements are only sent on VLAN 1002.
C. By default, the management VLAN is VLAN 1005.
D. By default, the switch IP address is in VLAN 1005.
E. VLAN 1002 through 1005 are automatically created and cannot be deleted.
Answer: AE
Section: (none)
Explanation/Reference:
考点：考查vlan知识点。

A：缺省都存在vlan1，端口都属于vlan1，正确
B：CDP信息只发送到vlan1002，错误，vlan1002是fddi网络的vlan号。

C：缺省情形交换机IP配置在vlan1005，错误，vlan1005trnet网络的vlan号。

缺省在vlan1里面。

D：vlan1002-1005自动生成并不能被删除，正确，他们差不多上被保留的专门vlan。

QUESTION 50
Refer to the exhibit. What can be determined about the router from the console output?
A. No configuration file was found in NVRAM.
B. No configuration file was found in flash.
C. No configuration file was found in the PCMCIA card.
D. Configuration file is normal and will load in 15 seconds.
Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
启动时缺省读取储存在NVRAM里面的配置文件。

提示进入对话模式，说明没有储存配置文件。

QUESTION 51
Refer to the exhibit. What can be determined from the output?
A. 192.168.1.2 is local to the router.
B. 192.168.3.1 is local to the router.
C. 192.168.1.2 will age out in less than 1 minute.
D. 192.168.3.1 has aged out and is marked for deletion.
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
age下面- 代表是本地端口
QUESTION 52
Refer to the exhibit. Which command would allow the translations to be created on the router?
A. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 19
B. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 19
C. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 18
D. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 18
Answer: A
Section: Chapter 8: NAT
Explanation/Reference:
准确汇总掩码是21，答案中没有，退而求其次选19.
mynats为地址池的名字，prefix-length 表示掩码的长度。

prefix-length 19表示掩码为255.255.224.0
QUESTION 53
Refer to the exhibit. An administrator pings the default gateway at 10.10.10.1 and sees the output as
shown. At which OSI layer is the problem?
A. data link layer
B. application layer
C. access layer
D. session layer
E. network layer
Answer: E
Section: Chapter 2: TCP/IP
Explanation/Reference:
ping调用icmp，ping不通是网络层的缘故。

QUESTION 54
Refer to the exhibit. Which value will be configured for Default Gateway of the Local Area Connection?
A. 10.0.0.0
B. 10.0.0.254
C. 192.223.129.0
D. 192.223.129.254
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
10.0.0.1--10.0.0.254里面除了10.0.0.249外任意一个。

QUESTION 55
Refer to the exhibit. The user at Workstation B reports that Server A cannot be reached. What is preventing Workstation B from reaching Server A?
A. The IP address for Server A is a broadcast address.
B. The IP address for Workstation B is a subnet address.
C. The gateway for Workstation B is not on the same subnet.
D. The gateway for Server A is not on the same subnet.
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
131.1.123.24/27所在网络范畴为：131.1.123.0-31/27。

专门明显网关131.1.123.33不再范畴内。

QUESTION 56
Refer to the exhibit. What does the (*) represent in the output?
A. Packet is destined for a local interface to the router.
B. Packet was translated, but no response was received from the distant device.
C. Packet was not translated, because no additional ports are available.
D. Packet was translated and fast switched to the destination.
Answer: D
Section: Chapter 8: NAT
Explanation/Reference:
由图中提示信息能够看出，源为10.10.0.2差不多有个一个转换，因此后续的数据包快速转发。

QUESTION 57
Refer to the exhibit. What command sequence will enable PAT from the inside to outside network?
A. (config) ip nat pool isp-net 1.2.4.2 netmask 255.255.255.0 overload
B. (config-if) ip nat outside overload
C. (config) ip nat inside source list 1 interface ethernet1 overload
D. (config-if) ip nat inside overload
Answer: C
Section: Chapter 8: NAT
Explanation/Reference:
overload是配置PA T的关键字
QUESTION 58
Refer to the exhibit. What will happen to traffic coming from the Internet that is destined for
172.16.12.10 if the traffic is processed by this ACL?
A. Traffic will be dropped per line 30 of the ACL.
B. Traffic will be accepted per line 40 of the ACL.
C. Traffic will be dropped, because of the implicit deny all at the end of the ACL.
D. Traffic will be accepted, because the source address is not covered by the ACL.
Answer: C
Section: Chapter 7: Security
Explanation/Reference:
ACL匹配规则：
自上而下匹配，一旦匹配则终止，没有匹配到的丢弃。

题目给的172是目的地址，表中ACL中172是源地址
QUESTION 59
Refer to the exhibit. Which statement describes the effect that the Router1 configuration has on devices in
the 172.16.16.0 subnet when they try to connect to SVR-A using Telnet or SSH?
A. Devices will not be able to use Telnet or SSH.
B. Devices will be able to use SSH, but not Telnet.
C. Devices will be able to use Telnet, but not SSH.
D. Devices will be able to use Telnet and SSH.
Answer: B
Section: Chapter 7: Security
Explanation/Reference:
题目考查的是ACL用法，第一我们看图示
F0/0 是in方向，eq应该放在目的主机的后面，源主机是随机端口发出访问
f0/1也设置为out方向，只能操纵返回的数据，那个地点eq应该放在源主机也确实是SVR-A 的后面
因此list 100中10生效，20 无效。

list 101中10生效，20无效。

最后默认都拒绝，因此只承诺ssh。

QUESTION 60
What are three advantages of VLANs? (Choose three.)
A. VLANs establish broadcast domains in switched networks.
B. VLANs utilize packet filtering to enhance network security.
C. VLANs provide a method of conserving IP addresses in large networks.
D. VLANs provide a low-latency internetworking alternative to routed networks.
E. VLANs allow access to network services based on department, not physical location.
F. VLANs can greatly simplify adding, moving, or changing hosts on the network.
Answer: AEF
Section: Chapter 10: VLAN
Explanation/Reference:。