CCNA考试题库中英文翻译版及答案

1、1. What are two reasons that a network administrator would use access lists? (Choose two.)1. 出于哪两种理由，网络管理员会使用访问列表A. to control vty access into a routerA.控制通过VTY访问路由器B. to control broadcast traffic through a routerB. 控制广播流量穿越路由器2. 一个默认的帧中继 WAN被分类为哪种物理网络类型A. P oint-to-pointA.点到点B. broadcast multi-acce

2、ssB. 广播多路访问C. nonbroadcast multi-accessC. 非广播多路访问D. nonbroadcast mult ipointD. 非广播多点E. broadcast po int-to-mult ipointE. 广播点到多点Answer: C3. A single 802.11g access po int has been configured and installed in the center of a squarA few wireless users are exp eriencing slow p erformance and drops while

3、 most users are oat p eak efficiency. What are three likely causes of this p roblem? (Choose three.)3. 个802.11接入点被部署在一个方形办公室的中央，当大多数用户在大流量传输数一些无线用户发现无线网络变得缓慢和出现丢包A. mismatched TKIP encry ptionB. null SSIDC. cordless p honesD. mismatched SSIDE. metal file cabinetsF. antenna type or directionAnswer: C

4、EF4. Refer to the exhibit. How many broadcast domains exist in the exhibited topo logy?根据下图,图中的拓扑中存在多少个广播域VLAN trunkVLAN 1VLAN 30VLAN 40A. oneA.1B. twoB.2C. threeC.：D. fourD.4E. fiveE.5F. sixF.6Answer: C5. Refer to the exhibit. What two facts can be determined from the WLAN diagram? (Choose two.)5.根

5、据下图，WLAN diagram决定了哪两个事实A. The area of overla p of the two cells rep resents a basic service set (BSS).A. 两个 cells 的 overlap 的区域描述了一个basic service setB. The network diagram rep resents an extended service set (ESS).B. 网络描述了一个 extended service setC. Access po ints in each cell must be configured to u

6、se channel 1.C.再每个CELL中的AP必须被配置成使用 channel 1D. The area of overla p must be less than 10% of the area to ensure connectivity.D.为了确保连通性，重叠区域必须小于10%E. The two APs should be configured to op erate on different channels.E.两个访问点应该被配置成工作在不同的频道Answer: BE6. The command frame-relay map ip 102 bro

7、adcast was entered on the router.Which of the following statements is true concerning this command?，以下选项正确的是？6.路由器上输入命令 frame-relay map ip 102 broadcastA. This command should be executed from the global configuration mode.A. 该命令应该在全局配置模式下被执行B. The IP address is the local rout

8、er port used to forward data.B.IP地址是本地路由器用来转发数据的接口C. 102 is the remote DLCI that will receive the information.C.102是远端的DLCI它将接受信息。D. This command is required for all Frame Relay configurations.D.这个命令要求被配置为所有的帧中继配置。E. The broadcast option allows packets, suchas RIP up dates,to be forwarded

9、 across the PVC.E.这个广播选项允许数据包，例如rip更新信息,将会被转发通过P VC.Answer: E7. Which type of attack is characterized by a floodof packets thatare requesting a TCP connectionto a server?7.哪种类型的攻击的特点是发大量的TCP请求连接数据包到服务器A. denial of serviceA.拒绝服务B. brute forceB. 强制叠加C. reconnaissanceC.监听D. Trojan horseD.木马Answer: Alay

10、er of the OSI model? (Choose8. Which of the following are associated with the applicationtwo.)8.以下两个选项是工作在 OSI模型的应用层的？A. P ingB. TelnetC. FTPD. TCPE. IPAnswer: BC9. Refer to theexhibit.The network administrator has created a new VLANon Switch1 and addedhostC and host D. The administrator has prop er

11、ly configured switch interfaces FastEthernet0/13through FastEthernet0/24 to be members of the new VLAN. However, after the network administrator compieted the configuration, host A could communicate with host B, but host A could not communicate with host C or host D. Which commands are required to r

12、esolve this p roblem?9.网络管理员在交换机1上创建一个新 VLAN并且将主机C和主机D加入到此VLAN中.管理员配置交换机接口 FastEthernetO/13 到FastEthernetO/24 成为新VLAN成员.但是网络管理员完成配置以后，主机A可以和主机B通信，但是主机A不能和主机C或者主机D通信.哪个命令可以用来解决这个问题IR mJter w ip rcwM#C 1i$2J 68,1.0 124 IS diT«cilyi«d to F.1FaO/11FaO/11192-168.1,2/23忡3FaO/VLA NI 2AF30n4I Swit

13、ehl #192.16a.Z15 /24 192J68.Z15/245 /24 192.168J.16 /24A. Router(config)# interface fastethernet 0/1.3Router(config-if)# enca psulation dot1q 3Router(config-if)# ip address B. Router(config)# router ripRouter(config-router)# network Router(config-router

14、)# network Router(config-router)# network C. Switch1# vlan databaseSwitch1(vlan)# vtp v2-modeSwitch1(vlan)# vtp domain ciscoSwitch1(vlan)# vtp serverD. Switch1(config)# interface fastethernet 0/1Switch1(config-if)# switch port mode trunkSwitch1(config-if)# switch port trunk enc

15、a psulation islAnswer: A10. For security reasons, the network administrator needs to prevent pings intothe corporatenetworks from hosts outside the internetwork. Which protocolshould be blocked withaccess controllists?10.出于安全考虑，网络管理员需要去防止外网主机PING内网，下面那个协议应该用access controllists 限制掉A. IPB. IC MPC 1S2,

16、USS.2.0 <24 祐 dkectty corui>«ci«di toC. TCP D. UD PAnswer: B11. What are two recommended ways of protectingnetwork device configuration files from outside network security threats? (Choose two.)11.哪两种方法被推荐用来保守网络设备的配置文件不受外网的威胁A. Allow unrestricted access to the console or VTY ports.A.

17、 允许 unrestricted访问至U console 或 VTY口B. Use a firewall to restrict access from the outside to the network devices.B. 用防火墙去限制外网的网络设备访问C. Always use Telnet to access the device command line because its data is automatically encry pted.C. 因为数据被自动加密，所以总是允许使用TELNET命令访问网络设备的命令行,D. Use SSHor another encry pt

18、ed and authenticatedtrans portto access device configurations.D.使用SSH或其他加密、认证机制去访问设备的配置E. Prevent the loss of p asswords by disabling p assword encry ption.E.为了避免丢失密码，所以不对密码进行加密（明文）Answer: BD12. Refer to the exhibit. The access list has been configured on the S0/0 interface of router RTB in the outb

19、ound direction. Which two p ackets, if routed to the interface, will be denied?(Choose two.)12.根据下图，该access list被配置在路由器 RTB的S0/0接口上的OUT方向，哪两个数据包会被 DENY如果被路由到该接口上的话 ？SCO世详严192.168J5.33Faoi192.168J5J1192 J6B. 1132/79 192JG8.15.40 29Telnet Serveaccess-list 101 deny tc p 2 5 any eq te

20、lnetaccess-list 101 p ermit ip any anyA. source ip address: ; destination port: 21B. source ip address:, 7 destination port: 21C. source ip address:, 1 destination port: 21D. source ip address:, 6 destination port: 23E. source ip address: 6

21、; destination port: 23F. source ip address:, 9 destination port: 23Answer: DE13. What are two security app liances that can be installed in a network? (Choose two.)13.以下哪两个安全工具能被安装在一个网络里A. ATMB. IDSC. IOSD. IOXE. I PSF. SDMAnswer: BE14. Refer to the exhibit. Switch1 has just been restart

22、ed and has p assed the POST routine. HostA sends its initial frame to Host C. What isthe first thing the switchwill do as regards populatingthe switching table?14.根据下图，Switch1刚刚完成重启, 交换机首先会对 switching table并完成上电自检。Host A发送它的第一个侦到Host C ，做什么操作hSa祐0/4H也BA |f晳县舖利I Fa帕MAC QMd8A4?"E6T2IP-192.168.234

23、-aHosteHOStDIMAC000&jDBd5.2EE9IP-19I2J68.23J2A. Switch1 will add to the switching table.A. Switch1 会添加 至U switching table.B. Switch1 will add 2 to the switching table.B. Switch1 添加 2 至U switching table.C. Switch1 will add 000A.8A47.E612 to the sw

24、itching table.C. Switch1 添加 000A.8A47.E612 至U switching table.D. Switch1 will add 000B.DB95.2EE9 to the switching table.D. Switchl 添加 000B.DB95.2EE9 至U switching table.Answer: C15. The user of Host1 wants to ping the DSLmodem/router at 54. Based on the Host1ARP table that is shown in the

25、exhibit, what will Host1 do?15.Host1的用户想PING DSL调制解调器/路由器的54 , ARP表如下图，Host1会怎么操作？SwitchHoMI.1DSLM»dein/R outerCbaip -aInterface： 5 0辺internet AdditssP hyfical AddressTypej92.1631.254O06O-Of-2eJ4c<SdymuiicA. send a unicast ARP p acket to the DSL modem/routerA.发送一个单播 ARP

26、包到DSL调制解调器/路由器B. send unicast ICMP p ackets to the DSL modem/routerB.发送一个单播ICMP包到DSL调制解调器/路由器C. send Layer 3 broadcast p ackets to which the DSL modem/router respo ndsC. 发送三层广播包到响应的DSL调制解调器/路由器D. send a Layer 2 broadcast that is received by Host2, the switch, and the DSL modem/router受到的2层广播帧D. 发送一个可

27、以被 Host2, the switch, and the DSL modem/routerAnswer: B16. Refer to the exhibit. What is the most efficient summarization that R1 can use to advertise its networks to R2?16.根据下图，R1能通告给R2的最有效的汇总是？172.17.0/24A. /22B. /21C. /22D. /24/24/24/

28、24E. /2528/25/24/24/24Answer: C17. Which sp read sp ectrum technology does the 802.11b standard define for op eration?17.哪种扩频技术是802.11B定义使用的A. IRB. DSSSC. FHSSD. DSSS and FHSSE. IR, FHSS, and DSSSAnswer: B18. Refer to the exhibit. Assume that all router i

29、nterfaces are op erational and correctly configured. In addition, assume that OSPF has been correctly configured on router R2. How will the default route configured on R1 affect the op eration of R2?R2上 OSPF配置正确，配置在 R1上18.根据下图，假设所有路由器接口都配置正确且正常工作，假设默认路由会怎么影响 R2的工作Usp J 11OSPF AreaO17Z16JW).1/3OSO/1S

30、W1S0)0R1 Routing Commands: ipfotleOAO10.0.0 seriaWiD roirter ospf 1 netwofh 17M6.100.0 O.C.OJ area 017I16J00.12827FdO/1Fa1D172.16.1,00.(426net 鼎 Of h 17116100,64 3 aiea 0 rwtwofh 172J6,100J2fl 10def曲町InfoMTMti m on gh kiteFaOn '172,16.0.00A. Any packet destined for a network that i

31、s not directly connected to router R1 willbe dropped.A.任何到达一个和路由器R1非直连的网络的数据包都会被丢弃B. Any p acket destined for a network that is not directly connected to router R2 will bedropped immediately.B.任何到达一个和路由器R2非直连的网络的数据包都会被丢弃C. Any P acket destined for a network that is not directly connected to router R

32、2 will bedropped immediately because of the lack of a gateway on R1.C.任何到达一个和路由器R2非直连的网络的数据包都会即时被丢弃，因为R1上缺少网关D. The networks directly connected to router R2 will not be able to communicate with the, 28, and 4 subnetworks.D.直连在 R2 上的网络将不能够和 , 172.16.100

33、.128, 4这些子网通讯E. Any p acket destined for a network that is not referenced in the routing table of routerR2 will be directed to R1. R1 will then send that packet back to R2 and a routing loop will occur.E.任何目的地没有在 R2的路由表中的数据包,R2将会定向到R1,R1会发送哪个数据包到 R2,这样路由环 路产生Answer: E19. A network interf

34、ace port has collision detection and carrier sensing enabled on a sharedtwisted p air network. From this statement, what is known about the network interface p ort?19.在一个共享的双绞线的网络上的接口上产生了冲突检测和载波侦听 接口你知道了什么.通过这个描述,关于这个网络A. This is a 10 Mb/s switch port.A.这是一个10 Mb/s的交换端口B. This is a 100 Mb/s switch p

35、ort.B.这是一个100Mb/s的交换端口C. This is an Ethernet port op erating at half duplex.C. 这是一个工作在半双工模式下的以太口D. This is an Ethernet port op erating at full duplex.D. 这是一个工作在全双工模式下的以太口E. This is a port on a network interface card in a PC.E. 这是一个PC机上网卡上的一个接口Answer: C20. Refer to the topo logy and router configurat

36、ion shown in the grap hic. A host on the LAN is accessing an FTP server across the Internet. Which of the following addresses could app ear asa source address for the p ackets forwarded by the router to the destination server?20.根据下图显示的拓扑结构和路由器配置，一个在该LAN上的主机正在通过 INTERNET访问一个FTP服务器。下列地址中哪个可以作为路由器发送到该

37、目的服务器的数据包的源地jnteffac* SerfihIp address J0022.182&5 266262Ip nat3ut«ld«jnteirfac* F»tEthem*lDIp10.100.1 25£ 265 2660ip nat i n tide«p«ed autoi2anrtTSr 20022 阴0 FaO; 10 10 0 1,24Ip nit pool ttst 199.99 90199 99.9 6225&266266 224ip nX tourct list i poolittft10.10.0

38、 0悄 route OO.OlO 0 0.00 200.22.17Iiacossllftt 11 pvrmit lOJOOG 0 0.0255A. B. C. 3D. 7E. 7F. 8Answer: D21. A comp any is installing IP p hones. The p hones and office compu ters connect to the same device. To ensure maximum through put for the p

39、 hone data, the comp any needs to make sure that the p hone traffic is on a different network from that of the office compu ter data traffic. What is the best network device to which to directly connect the p hones and comp uters, and what technology should be impi emented on this device? (Choose tw

40、o.)为了保证电话数据的最大传输 以下哪个是最好的网络设备,21. 一个公司正在安装IP电话。电话和办公室电脑连接到同个设备上, 量，公司需要确定电话流量是和办公室电脑的数据流量不是在同一个网络上。用来直连到电话和电脑，并且，哪种技术应该被配置在该设备上A. hub B. routerC. switchD. STPE. subinterfacesF. VLANAnswer: CF22. Refer to the exhibit. Which statement describes DLCI 17?22.根据下图，那个选项描述了DLCI 17DLCI 叫DLCI nDLCR9 DLCI 21A.

41、 DLCI 17 describes the ISDN circuit between R2 and R3.A.DLCI 17描述了 R2和R3之间的ISDN线路B. DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1.B.DLCI 17描述了一条在 R2上的PVC不能用在 R3和R1上C. DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3.C.DLCI 17 是R2使用的二层地址，用来描述一条到R3的PVCD. DLCI 17 describ

42、es the dial-up circuit from R2 and R3 to the service p roviderD.DIDLCI17描述了一条从R2 R3到服务提供商拨号网络Answer: C23. Which routing p rotocol by default uses bandwidth and delay as metrics?23.哪个路由协议默认用带宽和延迟作为metrics值A. RIPB. BGPC. OSPF D. EIGR PAnswer: D24. Refer to the out put from the show running-config comm

43、and in the exhibit. What should the administrator do to allow the workstations connected to the FastEthernet 0/0 interface to obtain an IP address?24.根据下图中展示的show running-config命令的结果。网络管理员该如何做才能允许工作站连接到FastEthernet 0/0接口去获得一个IP地址R1 -ABC# show running-config Current configuration: version 121 hoslnam

44、e ABC ip subnet-zeroip name-server 19216.1,1ip cfticp excluded-address 10.90.20U ip dhcp pool ABC.DHCPMtwork 255 255.255.0defetil-router 1IO.90.201Jdns-servtr 192.31.7 J 52int凸怡g FastEthernet 0X3 no ip direded-broadcast ip nat insideinterface Seri a II0/0description to IISP circuit ID ALDS

45、1 -456AX474M0ip address 19：.317.38 255,52ip nat outsideiip nat linside sotrce lisf T4 interface sciial 0/0 overload ip classlessip route 0,0 0 Q 0 00.0 192.31 73?access-lJSt 14 permit 10 90 201,0 0 0,0 255A. App ly access-gro up 14 to interface FastEthernet 0/0.A. 在接口 FastEthernet 0/0 应

46、用 access-group 14B. Add access-list 14 p ermit any any to the access list configuration.B. 在 access-list 14中添加I access-list 14 permit any anyC. Configure the IP address of the FastEtherent 0/0 interface to. C. 配置 FastEtherent 0/0 接口的 IP 地址为 D. Add an interface descri ption to t

47、he FastEthernet 0/0 interface configuration.D.为接口 FastEthernet 0/0添加一个接口描述Answer: C25. Refer to the exhibit. The networks connected to router R2 have been summarized as a /21 route and sent to R1. Which two packet destination addresses will R1 forwardto R2? (Choose two.)25.根据下图，网络连接到路由器

48、R2被汇总为一条/21的路由，并发给 R1。哪两个数据包目的地址R1会转发给R20th和 NffwoiksA. 60B. 1C. D. 55E. F. 5Answer: BE26. Two routers named Atlanta and Brevard are connected by their serial interfaces as shown in the exhibit, but there is n

49、o data connectivity between them. The Atlanta router is known to have a correct configuration. Given the p artial configurations shown in the exhibit, what is the p roblem on the Brevard router that is causing the lack of connectivity?26.如下图，两个路由器(Atlanta 和Brevard)用串口连接起来。但是他们之间没有数据传输，已知AtlantaAtlan

50、ta配置正确，下图给出部分配置，路由器Brevard上导致该问题的原因是BievsifllSOAtta 111 a# filiiow inletiac&s sOScrblO IS ii,p. line protocol is upHaidw<ife is HDCISZO'Internet address 192,16&,10.121MTU 1500 b/T诗.BW1M4 Kbit iBHabifiTy 255255Encapsulation HDLQ loopback not setKeepdive set |10 sec*Qtevaitd# show bviet

51、faces siSen占 11 i$ up, lh)c protocol k 訂p Kudwre is KDG457Q InteriteUddress kMTU 1500 bytes. IBW SGOOO Kbit relidblFty 255-255Encapstilation HDLC, loopback not setKeepalive wt (10 $«c)A. A loop back is not set.A.没有设置loopback命令B. The IP address is incorrect.B.IP地址不正确C. The subnet mask is incorre

52、ct.C.子网掩码不正确D. The serial line enca psulations are inco mp atible.D.串行链路封装不正确E. The maximum transmission unit (MTU) size is too large.E.最大传输单元（MTU）设置得太大F. The bandwidth setting is inco mp atible with the connected interface.F. 带宽设置和直连的接口不匹配Answer: B27. Refer to the exhibit. Which switch p rovides th

53、e sp anning-tree designated port role for the network segment that services the p rinters?27.根据下图，哪个交换机为打印机提供了生成树中的指定端口角色SwflchlPl叫10%MAC 00lfl.7lbc<.732)占吏易Distribution! LaytrSwitchP rioriiy 81512MAC 00107kcc732dSwikJd Priorhy 3276S MAC0010.7hccJ333Piioiiiy 32768MAC 00107b(cJM7PiihleBAccess Laye

54、rA. Switch1B. Switch2C. Switch3D. Switch4Answer: C28. Refer to the exhibit. Switch-1 needs to send data to a host with a MAC address of 00b0.d056.efa4. What will do with this data?28.根据下图，Switch-1需要往一台 MAC地址为00b0.d056.efa4的主机发数据，Switch-1会如何处理这些数据？Switch-Il# show mac address-tableDynamic Addresses Co

55、unt3Secure Addresses (User-defined) Count: 0Static Addresses Usepdefined) Count 0System Seff Addresses Count:41Total Mac addresses50Non-static Address TableDestination Address Address Type VLAN Destination Portb-s - ZbZ LI 三 ZZi III M -i EOClOJOdeO e289Dynamic1FastEthemetO/l0010.7b00 1540Dynamic2FasOhemetO/3OlO.YbOO 1545Dynamic2FastEthemetO/2A. Switch-1 will drop the data because it does not have an entry for that MAC address.A. Switch-1会丢弃该数据，因为它没有该MAC地址条目B. Switch-1 wi