CCNP&CCIE Security SCOR思科认证网络工程师题库3.docx

CCNP/CCIESecuritySCOR题库3QUESTION1WhichfunctiondoesafabricedgenodeperforminanSD-Accessdeployment?A. Connectsendpointstothefabricandforwardstheirtraffic.B. Encapsulatesend-userdatatrafficintoLISP.C. ConnectstheSD-AccessfabrictoanotherfabricorexternalLayer3networks.D. Providesreachabilitybetweenbordernodesinthefabricunderlay.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION2Refertotheexhibit.RI#shrunbeginlineconlineconOexectimeoutOOprivilegelevel15loggingsynchronousstopbits1lineauxoexectimeoutOOprivilegelevel15loggingsynchronousstopbits1linevtyO4password7045802150C2Eloginlinevty515password7045802150C2EIosin1endRI#shrunincludeaaaenablenoaaanew-modelRI#WhichprivilegelevelisassignedtoVTYusers?A. 1B. 7C. 13D. 15CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION3WhatisthedifferencebetweenaRIBandaFIB?A. TheFIBispopulatedbasedonRIBcontent.B. TheRIBmaintainsaminorimageoftheFIB.C. TheRIBisusedtomakeIPsourceprefix-basedswitchingdecisions.D. TheFIBiswhereallIProutinginformationisstored.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION4WhichrequirementforanAnsible-managednodeistrue?A. ItmusthaveanSSHserverrunning.B. ItmustbeaLinuxserveroraCiscodevice.C. Itmustsupportadhoccommands.D. ItmusthaveanAnsibleTowerinstalled.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION5AclientdevicefailstoseetheenterpriseSSID,butotherclientdevicesareconnectedtoit.Whatisthecauseofthisissue?A. TheclienthasincorrectcredentialsstoredfortheconfiguredbroadcastSSID.B. ThehiddenSSIDwasnotmanuallyconfiguredontheclient.C. ThebroadcastSSIDwasnotmanuallyconfiguredontheclient.D. TheclienthasincorrectcredentialsstoredfortheconfiguredhiddenSSID.CorrectAnswerBSection:(none)ExplanationExpIanationZReference:QUESTION6WhichtwodescriptionsofFIexConnectmodeforCiscoAPsaretrue?(Choosetwo.)A. APsthatoperateinFIexConnectmodecannotdetectrogueAPs.B. Whenconnectedtothecontroller,FIexConnectAPscantunneltrafficbacktothecontroller.C. FIexConnectmodeisafeaturethatisdesignedtoallowspecifiedCAPWAP-enabledAPstoexcludethemselvesfrommanagingdatatrafficbetweendentsandinfrastructure.D. FIexConnectmodeisawirelesssolutionforbranchofficeandremoteofficedeployments.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:2/configuration/guide/cg/cg_flexconnect.htmlQUESTION7WhichOSPFnetworktypesarecompatibleandallowcommunicationthroughthetwopeeringdevices?A. point-to-multipointtononbroadcastB. broadcasttononbroadcastC. point-to-multipointtobroadcastD. broadcasttopoint-to-pointCorrectAnswer:BSection:(none)ExplanationExpIanationZReference:Reference:QUESTION8WhichNGFWmodeblocksflowscrossingthefirewall?A. tapB. inlineC. passiveD. inlinetapCorrectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:QUESTION9WhichstatementaboutroutetargetsistruewhenusingVRF-Lite?A. Routetargetscontroltheimportandexportofroutesintoacustomerroutingtable.B. WhenBGPisconfigured,routetargetsaretransmittedasBGPstandardcommunities.C. Routetargetsallowcustomerstobeassignedoverlappingaddresses.D. Routetargetsuniquelyidentifythecustomerroutingtable.CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION10HowdoesCiscoTrustSecenablemoreflexibleaccesscontrolsfordynamicnetworkingenvironmentsanddatacenters?A.usesflexibleNetFIowB.assignsaVLANtotheendpointC. classifiestrafficbasedonadvancedapplicationrecognitionD. classifiestrafficbasedonthecontextualidentityoftheendpointratherthanitsIPaddressCorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:engineZat_a_glance_c45-726831.pdfQUESTION11Refertotheexhibit.RldebugipospfhelloRlfdebugconditioninterfaceFa.0lCondition1SetRefertotheexhibitWhichstatementabouttheOPSFdebugoutputistrue?A. TheoutputdisplaysOSPFhellomessageswhichrouterRlhassentorreceivedonintrfaceFaOl.B. TheoutputdisplaysOSPFmessageswhichrouterRlhassentorreceivedonallinterfaces.C. TheoutputdisplaysOSPFmessageswhichrouterRlhassentorreceivedoninterfaceFaOl.D. TheoutputdisplaysOSPFhelloandLSACKmessageswhichrouterRlhassentorreceived.CorrectAnswer:ASection:(none)ExplanationExpIanationZReference:QUESTION12WhichLISPinfrastructuredeviceprovidesconnectivitybetweennon-LISPsitesandLISPsitesbyreceivingnon-LISPtrafficwithaLISPsitedestination?APnRBmapreso<ercmapSerVerDPETRCoITeCfAnSWeKASeCt-On:(none)EXP-anatonEXP-aCIaWOrVReferenCe-Referencettps:、/www2.scooom、c、en、us、td、docs、soct-ons、Enterpr-SRDatalcenteryDC-、50、L-SPmob三ty'DC-IL-splHoStIMOb三ty'L-SPmob=el2htm-QUEST-ON13Wh-Ch-WoProSCo-SareUSedW-thYANGdatamode2(ChooSe-Wo)ATLSBRESTCoNFcSSHDNETCONFmHpsCoITeCtAnSWerBDSec-On:(none)EXP-anato,nEXParo-rReference-QUEST-ON14Wh-ChHTTPStarUSCOde-SrheCOlTeCrreSPOnSeforrequest:W一rhan-FICOITeCtPaSSWOrdapp=edSRESTAP-session?AHTTPStarUSCOd他2。B.HTTPStatUSCode-302cHTTPsrrusCode-401DHTTPSratUSCod曾504CorreCtAnSWer:CSection:(none)EXP-anato,nExpIanationZReference:Reference:https:/developer.mozilla.org/en-US/docs/Web/HTTP/Status/401QUESTION15TheloginmethodisconfiguredontheVTYlinesofarouterwiththeseparameters. ThefirstmethodforauthenticationisTACACS IfTACACSisunavailable,loginisallowedwithoutanyprovidedcredentialsWhichconfigurationaccomplishesthistask?A.Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogintelnetgrouptacacs+noneaaasession-idcommonRl#shrunsectionvtylinevtyO4Rl#shrunincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacs÷aaasession-idcommonRl#shrunsectionVtylinevtyO4transportinputnoneRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationloginVTYgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04password702050D480809Rl#shrunIincludeusernameRI#Rl#shrunincludeaaaaaanew-modelaaaauthenticationlogindefaultgrouptacacs+noneaaasession-idcommonRl#shrunsectionVtylinevty04paSSWOrd702050D480809Rl#shrunIincludeusernameRI#CorrectAnswerDSection:(none)ExplanationExpIanationZReference:QUESTION16WhichstatementaboutmulticastRPsistrue?A. RPsarerequiredonlywhenusingprotocolindependentmulticastdensemode.B. RPsarerequiredforprotocolindependentmulticastsparsemodeanddensemode.C. Bydefault,theRPisneededperiodicallytomaintainsessionswithsourcesandreceivers.D. Bydefault,theRPisneededonlytostartnewsessionswithsourcesandreceivers.CorrectAnswerDSection:(none)ExplanationExpIanationZReference:Reference:https:/www.cisco.eom/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/rps.htmlQUESTION17Toincreasetotalthroughputandredundancyonthelinksbetweenthewirelesscontrollerandswitch,thecustomerenabledLAGonthewirelesscontroller.WhichEtherChanneImodemustbeconfiguredontheswitchtoallowtheWLCtoconnect?A. ActiveB. PassiveC. OnD. AutoCorrectAnswerCSection:(none)ExplanationExpIanationZReference:Reference:https:/CommUQUESTION18WhichfeaturedoesCiscoTrustSecusetoprovidescalable,securecommunicationthroughoutanetwork?A. securitygrouptagACLassignedtoeachportonaswitchB. securitygrouptagnumberassignedtoeachuseronaswitchC. securitygrouptagnumberassignedtoeachportonanetworkD. securitygrouptagACLassignedtoeachrouteronanetworkCorrectAnswerBSection:(none)ExplanationExpIanationZReference:Reference:networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdfQUESTION19AnengineerconfiguresaWLANwithfasttransitionenabled.SomelegacyclientsfailtoconnecttothisWLAN.WhichfeatureallowsthelegacyclientstoconnectwhilestillallowingotherclientstousefasttransitionbasedontheirOUIs?A. overtheDSB. 802.11kC. adaptiveRD. 802.11vCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION21Anetworkadministratorisimplementingaroutingconfigurationchangeandenablesroutingdebugstotrackroutingbehaviorduringthechange.Theloggingoutputontheterminalisinterruptingthecommandtypingprocess.Whichtwoactionscanthenetworkadministratortaketominimizethepossibilityoftypingcommandsincorrectly?(Choosetwo.)A. Configuretheloggingsynchronousglobalconfigurationcommand.B. Configuretheloggingsynchronouscommandunderthevty.C. Increasethenumberoflinesonthescreenusingtheterminallengthcommand.D. Configuretheloggingdelimiterfeature.E. PresstheTABkeytoreprintthecommandinanewline.CorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION22WhichtwopiecesofinformationarenecessarytocomputeSNR?(Choosetwo.)A.transmitpowerB.noisefloorC.日RPD.RSSIE.antennagainCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:Reference:QUESTION23WhichstatementsareusedforerrorhandlinginPython?A. try/catchB. catchreleaseC. block/rescueD. try/exceptCorrectAnswer:DSection:(none)ExplanationExpIanationZReference:QUESTION24WhataretwobenefitsofvirtualizingtheserverwiththeuseofVMsinadatacenterenvironment?(Choosetwo.)A. reducedrackspace,power,andcoolingrequirementsB. smallerLayer2domainC. increasedsecurityD. speedydeploymentE. reducedIPandMACaddressrequirementsCorrectAnswer:ADSection:(none)ExplanationExpIanationZReference:QUESTION25WhichtwostepsarerequiredforacompleteCiscoDNACenterupgrade?(Choosetwo.)A. automationbackupB. systemupdateC. goldenimageselectionD. proxyconfigurationE. applicationupdatesCorrectAnswer:ABSection:(none)ExplanationExpIanationZReference:QUESTION26WhatisabenefitofdatamodelinglanguageslikeYANG?A. TheycreatemoresecureandefficientSNMPOIDs.B. Theyprovideastandardizeddatastructure,whichresultsinconfigurationscalabilityandconsistency.C. Theyenableprogrammerstochangeorwritetheirownapplicationswithinthedeviceoperatingsystem.D. TheymaketheCUsimplerandmoreefficient.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION27Refertotheexhibit.NameisBobJohnsonAgeis75isaliveFavoritefoodsare: Cereal Mustard OnionsWhatistheJSONsyntaxthatisformedfromthedata?A. Name:BobJohnson,Age:75,Alive:true,FavoriteFoods:Cereal,Mustard,OnionsB. “Name":uBobJohnson"t"Age"：75,"Alive":true,uFavoriteFoods":',Cerea,uMustard","Onions"C. ,Name,:*BobJohnson',Age,:75,'Alive,:True,TavoriteFoods':*Cerea,lMustard',Onions,D. uName'':"BobJohnson",uAgen:Seventyfive1,Alive":true,uFavoriteFoods":uCerea,uMustard","Onions"CorrectAnSWe匚BSection:(none)ExplanationExpIanationZReference:QUESTION28Basedonthisinterfaceconfiguration,whatistheexpectedstateofOSPFadjacency?Rl:interfaceGigabitEthernet0/1ipaddress192.0.2.1255.255.255.252ipospf1area0ipospfhello-interval2ipospfcost1endR2:interfaceGigabitEthernetO/1ipaddress192.0.2.2255.255.255.252ipospf1area0ipospfcost500endA. 2WAYDROTHERonbothroutersB. notestablishedC. FULLonbothroutersD. FLLBDRonRlandFLLBDRonR2CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION29Refertotheexhibit.GO/OLinklGO/OSW2#showspanning-treeVlanoooiSpanningtreeenabledprotocolIeeeRootIDPriority32769Address5000.0005.0000Cost4Port1(GigabitEthernet0/0)HelloTime2secMaxAge20secForwardDelay15secBridgeIDPriority32769(priority32769sys-id-ext1)Address5000.0006.0000HelloTime2secMaxAge20secForwardDelay15secAgingTime300secInterfaceRoleStsCostPrio.IibrTypeGi00GiO/lRootFWD4128.1P2pAltoBLW432.2P2p1.inklisacopperconnectionandLink2isafiberconnection.Thefiberportmustbetheprimaryportforallforwarding.Theoutputoftheshowspanning-treecommandonSW2showsthatthefiberportisblockedbyspanningtree.Anengineerentersthespanning-treeport-priority32commandonG0lonSW2,buttheportremainsblocked.WhichcommandshouldbeenteredontheportsthatareconnectedtoLink2toresolvetheissue?A. Enterspanning-treeport-priority4onSW2.B. Enterspanning-treeport-priority32onSWl.C. Enterspanning-treeport-priority224onSWl.D. Enterspanning-treeport-priority64onSW2.CorrectAnswer:BSection:(none)ExplanationExpIanationZReference:QUESTION30WhichJSONsyntaxisvalid?A,1,switch":"name"：*,distl"t-interfaces'*:"gig,"gig2",ugig3"B.uswitch:/,namen:"dist,/“interfaces/”:ugigl",ugig2",gig3"C. “switch"："name":udistl",“interfaces”:4,gig,"gig2",ugig3"D. 'switch':('name':,distl,'interfaces':,gigl,'gig2',gig31)CorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION31A. WhataretwocommonsourcesofinterferenceforWi-Finetworks?(Choosetwo.)B. 1.EDlightsC. radarD. firealarmE. conventionalovenF. rogueAPCorrectAnswer:AESection:(none)ExplanationExpIanationZReference:QUESTION32WhenusingTLSforsyslog,whichconfigurationallowsforsecureandreliabletransportationofmessagestoitsdefaultport?Alogginghost10.2.3.4vrfmgmttransporttcpport514B. logginghost10.2.3.4vrfmgmttransportudpport514C. logginghost10.2.3.4vrfmgmttransporttcpport6514D. logginghost10.2.3.4vrfmgmttransportudpport6514CorrectAnswerCSection:(none)ExplanationExpIanationZReference:Reference:https:/tools.ietf.org/html/rfc5425QUESTION33WhichbehaviorcanbeexpectedwhentheHSRPversionischangedfrom1to2?A. Nochangesoccurbecausethestandbyrouterisupgradedbeforetheactiverouter.B. Nochangesoccurbecauseversion1and2usethesamevirtualMACOUI.C. EachHSRPgroupreinitializesbecausethevirtualMACaddresshaschanged.D. EachHSRPgroupreinitializesbecausethemulticastaddresshaschanged.CorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION34WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?A. HTTPB. SSHC. HTTPSD. TCPCorrectAnswerCSection:(none)ExplanationExpIanationZReference:QUESTION35Refertothisoutput.RI#*Feb1437:09:53.129:%LINEPR0T0-5-UPD0WN:LineprotocolonInterfaceGigabitEthernetO/1,changedstatetoupWhatistheloggingseveritylevel?A. notificationB. emergencyC. criticalD. alertCorrectAnswerASection:(none)ExplanationExpIanationZReference:QUESTION36Refertotheexhibit.Rl#showipbgpBGPtableversionis32,localrouterDis192.168.1