CISCO-CCNA网络工程师题库

CISCO-CCNA网络工程师题库培训大讲堂官方YY频道：3660mCCNA题库考试代号：640-802考试时间：英文110+30=140分钟通过分数：825题库版本：V104.4鸿鹄论坛招募CCNA、CCNP答疑讲师答疑地点：鸿鹄官方YY频道3660鸿鹄大讲堂：/thread-46172-1-1.htmlCCNA题库战报交流QQ群：144288127（500人超级群）CCNA题库战报交流区：/forum-261-1.html1000G视频教程免费下载：/forum-228-1.htmlCCNA（640-802）题库V104.4CCNA（640-802）题库V104.4（情人节版）CCNA题库战报500人超级QQ群144288127V104系列是官方的终结版本，以后不会再出V105V106V108等等CCNA最新题库/最新战报发布区：/forum-261-1.html下载官方正版题库、看最新考试战报，请随时关注鸿鹄论坛CCNA考试报名1900，详情请联系鸿鹄全国区十七名客服QQ712023090-712023106========================================更新内容：V104.1修正V104中错误题目，确定经典争议题目答案；V104.2增加拖图题并可完美模拟考试，VCE题库增加中文注释；V104.3针对思科CCNA考试变题，更新考试新增题目93Q,更新V104.2实验题；V104.4增加全文中文注释，汇总V104.3九次更新，删除部分旧题目，为目前最新官方正版题库；2011.8.1增加每日新题，修订部分错误。2012.2.14情人节版增加5道新题，分别是519、520、521、522、523题修改176题、375题、443题、482题答案错误修改59题、88题、453题、107题、270题注释错误增加个别疑难拖图题注释，优化实验题=============================================QUESTION1Whenyouareloggedintoaswitch,whichpromptindicatesthatyouareinprivilegedmode?(当您登录到交换机，哪种提示表明你在特权模式？)A.%B.@C.>D.$E.#Answer:ESection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:特权模式就是#提示符QUESTION2Whichcommandshowssystemhardwareandsoftwareversioninformation?(哪些命令显示系统硬件和软件的版本信息？)A.showconfigurationB.showenvironmentCISCO-CCNA网络工程师题库全文共142页，当前为第1页。C.showinventoryCISCO-CCNA网络工程师题库全文共142页，当前为第1页。D.showplatformE.showversionAnswer:ESection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:查看系统的软件和硬件信息使用的命令是showversionQUESTION3CiscoCatalystswitchesCAT1andCAT2haveaconnectionbetweenthemusingportsFA0/13.An802.1Qtrunkisconfiguredbetweenthetwoswitches.OnCAT1,VLAN10ischosenasnative,butonCAT2thenativeVLANisnotspecified.Whatwillhappeninthisscenario?(思科Catalyst交换机CAT1和CAT2有它们之间的连接使用端口FA0/13。两个交换机之间用802.1Q中继配置，CAT1做为VLAN10的主机，但在CAT2上的本地VLAN未指定。在这种情况下会发生什么？)A.802.1Qgiantsframescouldsaturatethelink.B.VLAN10onCAT1andVLAN1onCAT2willsenduntaggedframes.C.AnativeVLANmismatcherrormessagewillappear.D.VLAN10onCAT1andVLAN1onCAT2willsendtaggedframes.Answer:CSection:Chapter10:VLANExplanation/Reference:如果两边native不匹配的话.switch将报native不匹配的日志信息QUESTION4Whichcommandwouldcorrectlyconfigureaserialportonarouterwiththelastusablehostaddressinthe2/29subnet?（哪个命令正确地将最后的可用主机地址，2/29子网的路由器上配置的串行端口？）A.Router(config-if)#ipaddress840B.Router(config-if)#ipaddress924C.Router(config-if)#ipaddress348D.Router(config-if)#ipaddress948E.Router(config-if)#ipaddress348F.Router(config-if)#ipaddress848Answer:FSection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:2/29它的块大小为8掩码为48地址范围为2-39QUESTION5ThenetworkdefaultgatewayapplyingtoahostbyDHCPis3/28.WhichoptionisthevalidIPaddressofthishost?(应用到由DHCP主机的网络默认网关是3\/28。哪个选项是有效的主机IP地址？)A.5B.7C.0D.2E.4Answer:CSection:Chapter3:IPAddressingandVLSMExplanation/Reference:考点：考查VLSM3/28所在网段的范围是2--7/28A：超出范围CISCO-CCNA网络工程师题库全文共142页，当前为第2页。B：广播地址CISCO-CCNA网络工程师题库全文共142页，当前为第2页。C：正确D：网络号E：超出范围QUESTION6Whichtwoaddressescanbeassignedtoahostwithasubnetmaskof?(Choosetwo.){哪两个地址可以分配给与子网掩码的主机？}A.B.C.55D.55E.Answer:BDSection:Chapter3:IPAddressingandVLSMExplanation/Reference:考点：考查VLSMA：网络号B/D：正确C：广播地址E：网络号QUESTION7Thenetworkadministratorhasaskedyoutocheckthestatusoftheworkstation'sIPstackbypingingtheloopbackaddress.Whichaddresswouldyoupingtoperformthistask?{网络管理员已要求您通过ping环回地址检查工作站的IP堆栈的状态。您要执行此任务将ping哪个地址？}A.B.C.D.Answer:BSection:Chapter3:IPAddressingandVLSMExplanation/Reference:考点：使用ping来检测主机的IP栈。ping实现。QUESTION8WorkstationAhasbeenassignedanIPaddressof4/28.WorkstationBhasbeenassignedanIPaddressof00/28.Thetwoworkstationsareconnectedwithastraight-throughcable.Attemptstopingbetweenthehostsareunsuccessful.Whattwothingscanbedonetoallowcommunicationsbetweenthehosts?(Choosetwo.){A工作站已分配IP地址为4\/28。B工作站已分配IP地址为00\/28。两台工作站与直通电缆连接。在主机之间ping不成功。允许在主机之间的通信，可以做两件事情？（选择两个）。}A.Replacethestraight-throughcablewithacrossovercable.B.Changethesubnetmaskofthehoststo/25.C.Changethesubnetmaskofthehoststo/26.D.ChangetheaddressofWorkstationAto5.E.ChangetheaddressofWorkstationBto11.Answer:ABSection:Chapter3:IPAddressingandVLSMExplanation/Reference:考点：同构设备使用交叉线，两端的IP需要在同一个子网。A：使用交叉线替换现有的直通线。正确。B：修改掩码为25位，正确。CISCO-CCNA网络工程师题库全文共142页，当前为第3页。C：修改掩码为26为，错误。不能使他们在同一个子网。CISCO-CCNA网络工程师题库全文共142页，当前为第3页。D/E：错误，都不能使他们在同一个子网。QUESTION9YourISPhasgivenyoutheaddress/29toassigntoyourrouter'sinterface.Theyhavealsogivenyouthedefaultgatewayaddressof.Afteryouhaveconfiguredtheaddress,therouterisunabletopinganyremotedevices.Whatispreventingtherouterfrompingingremotedevices?(您的ISP给你要分配给您的路由器接口地址\/29。他们还授予您是的默认网关地址。您已配置了地址后，路由器是无法ping任何远程设备。什么在阻碍pinging远程设备的路由器？)A.Thedefaultgatewayisnotanaddressonthissubnet.B.Thedefaultgatewayisthebroadcastaddressforthissubnet.C.TheIPaddressisthebroadcastaddressforthissubnet.D.TheIPaddressisaninvalidclassDmulticastaddress.Answer:BSection:Chapter3:IPAddressingandVLSMExplanation/Reference:考点：考查VLSM。/29所在网段的范围是：--/29A：默认网关不属于这个子网，错误B：默认网关是这个子网的广播地址，正确C：这个地址是子网的广播地址，错误D：这个地址是组播地址，错误。QUESTION10WhichcommandisusedtocopytheconfigurationfromRAMintoNVRAM?{哪个命令用于从RAM复制到NVRAM的配置}A.copyrunning-configstartup-configB.copystartup-config:running-config:C.copyrunningconfigstartupconfigD.copystartupconfigrunningconfigE.writeterminalAnswer:ASection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:QUESTION11WhichcommandisusedtoloadaconfigurationfromaTFTPserverandmergetheconfigurationintoRAM?(哪些命令用于从TFTP服务器加载配置或合并到RAM的配置？)A.copyrunning-config:TFTP:B.copyTFTP:running-configC.copyTFTP:startup-configD.copystartup-config:TFTP:Answer:BSection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:QUESTION12Asystemadministratortypesthecommandtochangethehostnameofarouter.WhereontheCiscoIFSisthatchangestored?A.NVRAMB.RAMC.FLASHD.ROME.PCMCIAAnswer:BCISCO-CCNA网络工程师题库全文共142页，当前为第4页。Section:Chapter4:IntroductiontoCiscoIOSCISCO-CCNA网络工程师题库全文共142页，当前为第4页。Explanation/Reference:running-config保存在RAM中startup-config保存在NVRAM中QUESTION13Whichcommandisusedtoconfigureadefaultroute?A.iprouteB.iprouteC.iprouteD.iprouteAnswer:DSection:Chapter6:IPRoutingExplanation/Reference:QUESTION14IfIProutingisenabled,whichtwocommandssetthegatewayoflastresorttothedefaultgateway?（如果启用了IP路由，哪两个命令设置网关的最后到默认网关？）(Choosetwo.)A.ipdefault-gatewayB.iprouteC.ipdefault-networkD.ipdefault-routeE.iprouteAnswer:CESection:Chapter6:IPRoutingExplanation/Reference:产生默认网关的两种方式ipdefault-networkiprouteQUESTION15WhichcommandwouldyouconfiguregloballyonaCiscorouterthatwouldallowyoutoviewdirectlyconnectedCiscodevices?(该命令将全局上配置使您可以直接查看的Cisco路由器连接Cisco设备吗？)A.enablecdpB.cdpenableC.cdprunD.runcdpAnswer:CSection:Chapter5:ManagingCiscoIOSExplanation/Reference:QUESTION16WhichcommandisusedtoseethepathtakenbypacketsacrossanIPnetwork?(哪些命令用于看到通过IP网络数据包所采取的路径？)A.showiprouteB.showrouteC.tracerouteD.traceiprouteAnswer:CSection:Chapter2:TCP/IPExplanation/Reference:哪条命令用于查看数据包转发所经过的路径A:查看路由表B：没有这条命令C：正确D：没这条命令CISCO-CCNA网络工程师题库全文共142页，当前为第5页。QUESTION17CISCO-CCNA网络工程师题库全文共142页，当前为第5页。Whichcommandisusedtodebugapingcommand?{哪些命令用于调试ping命令？}A.debugicmpB.debugipicmpC.debugtcpD.debugpacketAnswer:BSection:Chapter5:ManagingCiscoIOSExplanation/Reference:ping调用了icmp协议，而icmp数据包封装在ip包中。QUESTION18WhichcommanddisplaysCPUutilization?{哪个命令显示的CPU利用率呢？}A.showprotocolsB.showprocessC.showsystemD.showversionAnswer:BSection:Chapter5:ManagingCiscoIOSExplanation/Reference:查看CPU利用率。QUESTION19Whenconfiguringaserialinterfaceonarouter,whatisthedefaultencapsulation?{在配置一个串行接口的路由器，什么是默认的封装？}A.atm-dxiB.frame-relayC.hdlcD.lapbE.pppAnswer:CSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:缺省封装是HDLCQUESTION20Whatmustbesetcorrectlywhenconfiguringaserialinterfacesothathigher-levelprotocolscalculatethebestroute?{什么时，必须设置正确配置串行接口，以便更高级别的协议计算最佳路线？}A.bandwidthB.delayC.loadD.reliabilityAnswer:ASection:Chapter6:IPRoutingExplanation/Reference:为了使高层路由协议计算最佳路由，串口的什么东西必须被设置正确？在接口下，只有带宽是可以配置的。QUESTION21AcompanyimplementsvideoconferencingoverIPontheirEthernetLAN.Theusersnoticethatthenetworkslowsdown,andthevideoeitherstuttersorfailscompletely.Whatisthemostlikelyreasonforthis?{公司对他们的以太网LANip实现视频会议。用户注意网络变慢，和视频断断续续或完全失败。最有可能的原因是什么？}CISCO-CCNA网络工程师题库全文共142页，当前为第6页。A.minimumcellrate(MCR)CISCO-CCNA网络工程师题库全文共142页，当前为第6页。B.qualityofservice(QoS)C.modulationD.packetswitchingexchange(PSE)E.reliabletransportprotocol(RTP)Answer:BSection:Chapter9:SwitchingExplanation/Reference:考点：当网络中使用视频会议后发现网络非常慢，什么原因引起的？QoS：用于定制策略对不同流量进行控制。QUESTION22WhichlayerintheOSIreferencemodelisresponsiblefordeterminingtheavailabilityofthereceivingprogramandcheckingtoseeifenoughresourcesexistforthatcommunication?{OSI参考模型在哪一层负责确定接收程序的可用性和检查足够的资源，是否存在该通信？}A.transportB.networkC.presentationD.sessionE.applicationAnswer:ESection:Chapter1:IntroductionExplanation/Reference:哪一层确定的接收程序的可用性？应用层提供QUESTION23Datatransferisslowbetweenthesourceanddestination.ThequalityofservicerequestedbythetransportlayerintheOSIreferencemodelisnotbeingmaintained.Tofixthisissue,atwhichlayershouldthetroubleshootingprocessbegin?{数据传输速度慢的源和目标之间。不保持在OSI参考模型的传输层所要求的服务质量。要解决此问题，在哪一层应故障排除过程开始？}A.presentationB.sessionC.transportD.networkE.physicalAnswer:DSection:Chapter1:IntroductionExplanation/Reference:解决网络问题，先确保网络层通信。QUESTION24WhichprotocolsarefoundinthenetworklayeroftheOSIreferencemodelandareresponsibleforpathdeterminationandtrafficswitching?{哪些协议在网络层OSI参考模型中找到，负责路径测定和交通切换？}A.LANB.routingC.WAND.networkAnswer:BSection:Chapter1:IntroductionExplanation/Reference:OSI网络层中什么提供了路径选择和流量转发？由路由协议提供。通过手工或者动态学习路由条目实现。CISCO-CCNA网络工程师题库全文共142页，当前为第7页。QUESTION25CISCO-CCNA网络工程师题库全文共142页，当前为第7页。Whichcommandrevealsthelastmethodusedtopowercyclearouter?A.showreloadB.showbootC.showrunning-configD.showversionAnswer:DSection:Chapter5:ManagingCiscoIOSExplanation/Reference:哪一个命令可以显示最近一次被用来重启路由器的方法？QUESTION26WhichthreeoptionsarevalidWANconnectivitymethods?(Choosethree.)A.PPPB.WAPC.HDLCD.MPLSE.L2TPv3F.ATMAnswer:ACFSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:哪三种封装属于WAN链路的?A:点到点协议，正确B：无线加密技术，错误C:思科缺省封装格式，正确。D：多协议标签转换，错误E：隧道协议，错误F：正确。QUESTION27Refertotheexhibit.WhichWANprotocolisbeingused?A.ATMB.HDLCC.FrameRelayD.PPPAnswer:CSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:由图中的红线可看到发送接受LMI信息。属于FR的数据包。QUESTION28WhatisthedifferencebetweenaCSU/DSUandamodem?【一个CSU/DSU和调制解调器之间的区别是什么？】A.ACSU/DSUconvertsanalogsignalsfromaroutertoaleasedline;amodemconvertsanalogsignalsfromaroutertoaleasedline.CISCO-CCNA网络工程师题库全文共142页，当前为第8页。B.ACSU/DSUconvertsanalogsignalsfromaroutertoaphoneline;amodemconvertsdigitalsignalsfromaroutertoaleasedline.CISCO-CCNA网络工程师题库全文共142页，当前为第8页。C.ACSU/DSUconvertsdigitalsignalsfromaroutertoaphoneline;amodemconvertsanalogsignalsfromaroutertoaphoneline.D.ACSU/DSUconvertsdigitalsignalsfromaroutertoaleasedline;amodemconvertsdigitalsignalsfromaroutertoaphoneline.Answer:DSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:CSU/DSU一般是专线，MODEN是将模拟信号与数字信号转换QUESTION29Anetworkadministratormustconfigure200switchportstoaccepttrafficfromonlythecurrentlyattachedhostdevices.WhatwouldbethemostefficientwaytoconfigureMAC-levelsecurityonalltheseports?A.VisuallyverifytheMACaddressesandthentelnettotheswitchestoentertheswitchport-portsecuritymac-addresscommand.B.Haveenduserse-mailtheirMACaddresses.Telnettotheswitchtoentertheswitchport-portsecuritymac-addresscommand.C.Usetheswitchportport-securityMACaddressstickycommandonalltheswitchportsthathaveenddevicesconnectedtothem.[有端设备连接到他们的所有交换机端口上使用交换机端口端口安全MAC地址粘滞命令。]D.Useshowmac-address-tabletodeterminetheaddressesthatareassociatedwitheachportandthenenterthecommandsoneachswitchforMACaddressport-security.Answer:CSection:Chapter9:SwitchingExplanation/Reference:考点：有200台主机需要接入，采用什么方式来增强网络安全性？A：先验证mac安全性，然后在交换机上绑定。错误，工作量太大B：用户发送邮件认证再在交换机上配置，错误，不科学。C：使用port-security，正确。D：错误，工作量太大。QUESTION30WhentroubleshootingaFrameRelayconnection,whatisthefirststepwhenperformingaloopbacktest?【帧中继连接故障排除时，执行环回测试时的第一步是什么？】A.SettheencapsulationoftheinterfacetoHDLC.B.PlacetheCSU/DSUinlocal-loopmode.C.Enablelocal-loopmodeontheDCEFrameRelayrouter.D.VerifythattheencapsulationissettoFrameRelay.Answer:ASection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:在对FR进行排错的时候，当做回环测试的时候，第一步如何处理？A：讲接口配置成HDLC，正确，FR封装下无法正常ping自己端口QUESTION31WhatoccursonaFrameRelaynetworkwhentheCIRisexceeded?A.AllTCPtrafficismarkeddiscardeligible.B.AllUDPtrafficismarkeddiscardeligibleandaBECNissent.C.AllTCPtrafficismarkeddiscardeligibleandaBECNissent.D.AlltrafficexceedingtheCIRismarkeddiscardeligible.Answer:DSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:在FR网络中，当CIR超过时会发生什么情况？D：所有超过的流量都丢弃。QUESTION32WhataretwocharacteristicsofFrameRelaypoint-to-pointsubinterfaces?(Choosetwo.)CISCO-CCNA网络工程师题库全文共142页，当前为第9页。A.Theycreatesplit-horizonissues.CISCO-CCNA网络工程师题库全文共142页，当前为第9页。B.Theyrequireauniquesubnetwithinaroutingdomain.C.Theyemulateleasedlines.D.Theyareidealforfull-meshtopologies.E.TheyrequiretheuseofNBMAoptionswhenusingOSPF.Answer:BCSection:Chapter14:WideAreaNetwork(WAN)Explanation/Reference:帧中继点到点子接口的特点？A：水平分割，错误。B：每个子接口需要一个独立的网段，正确。C：类似专线，正确。D:全网互联是理想拓扑，错误。通常是hub-spokeE：NBMA不支持OSPF，错误。QUESTION33Refertotheexhibit.Addresseswithintherange/24arenotbeingtranslatedtothe1.128.0/16range.Whichcommandshowsif/24areallowedinsideaddresses?A.debugipnatB.showaccess-listC.showipnattranslationD.showipnatstatisticsAnswer:BSection:Chapter8:NATExplanation/Reference:那条命令可以看到/24是否在允许转换范围。允许的范围是通过ACL定义的。A：打开NAT转换的debug信息，错误B：查看acl信息，正确。C：查看NAT转换表，错误。D：查看静态NAT。错误QUESTION34Awirelessclientcannotconnecttoan802.11b/gBSSwithab/gwirelesscard.TheclientsectionoftheaccesspointdoesnotlistanyactiveWLANclients.Whatisapossiblereasonforthis?[一台带有b/g无线网上的无线客户机不能连接到一个8020.11b/g的基站。客户端部分没有发现可用的无线局域网。这种情况是什么原因？]A.Theincorrectchannelisconfiguredontheclient.B.Theclient'sIPaddressisonthewrongsubnet.C.Theclienthasanincorrectpre-sharedkey.D.TheSSIDisconfiguredincorrectlyontheclient.Answer:DSection:Chapter11:WirelessExplanation/Reference:客户端无法连接到无限接入点，查看不到可用的无线信号。这通常是SSID信号没有配置正确。A：不正确的信道。错误B：客户端的IP地址配置错误C：客户端的共享key错误。D：SSID配置不正确。QUESTION35WhichtwofeaturesdidWPAv1addtoaddresstheinherentweaknessesfoundinWEP?(Choosetwo.)[哪两个功能WPAv1没有添加地址找到wep的固有弱点？（选择两个]A.astrongerencryptionalgorithmB.keymixingusingtemporalkeysCISCO-CCNA网络工程师题库全文共142页，当前为第10页。C.sharedkeyauthenticationCISCO-CCNA网络工程师题库全文共142页，当前为第10页。D.ashorterinitializationvectorE.perframesequencecountersAnswer:BESection:Chapter11:WirelessExplanation/Reference:考点：WPA1中增强哪两个在WEP中发现的弱点？WEP存在的隐患主要是依赖共享密钥A：更强的加密算法B：混合使用的密钥C：共享密钥认证D：较短的初始化向量E：一个帧一个序列计数器。QUESTION36WhichtwowirelessencryptionmethodsarebasedontheRC4encryptionalgorithm?(Choosetwo.)A.WEPB.CCKMC.AESD.TKIPE.CCMPAnswer:ADSection:Chapter11:WirelessExplanation/Reference:考点：哪两种无限加密技术依赖RC4A:有线等效保密协议B：英特尔开发一种协议C：高级加密标准D：暂时密钥集成协议E:基于AES的加密方式QUESTION37WhataretwocharacteristicsofRIPv2?(Choosetwo.)A.classfulroutingprotocolB.variable-lengthsubnetmasksC.broadcastaddressingD.manualroutesummarizationE.usesSPFalgorithmtocomputepathAnswer:BDSection:Chapter6:IPRoutingExplanation/Reference:A：有类路由协议，错误B：可变长度子网掩码，正确C：采用广播地址更新，错误D：手动路由汇总，正确E:使用spf算法计算路径，错误。QUESTION38WhichtwoEthernetfiber-opticmodessupportdistancesofgreaterthan550meters?A.1000BASE-CXB.100BASE-FXC.1000BASE-LXD.1000BASE-SXE.1000BASE-ZXAnswer:CESection:Chapter1:IntroductionExplanation/Reference:A：最长距离25米CISCO-CCNA网络工程师题库全文共142页，当前为第11页。B：最长距离100米CISCO-CCNA网络工程师题库全文共142页，当前为第11页。C：最长距离3000米D：最长距离550米E：最长距离70千米QUESTION39Whattwothingswillarouterdowhenrunningadistancevectorroutingprotocol?(Choosetwo.)A.Sendperiodicupdatesregardlessoftopologychanges.B.Sendentireroutingtabletoallroutersintheroutingdomain.C.Usetheshortest-pathalgorithmtothedeterminebestpath.D.Updatetheroutingtablebasedonupdatesfromtheirneighbors.E.Maintainthetopologyoftheentirenetworkinitsdatabase.Answer:ADSection:Chapter6:IPRoutingExplanation/Reference:考点：考查距离矢量路由协议特性A：周期性更新，正确B：发送整个路由表到整个路由域，错误，只发送给邻居C：使用SPF算法，错误D：依靠邻居发送更新来更新路由表，正确E：在数据库中维护整个网络的拓扑。错误QUESTION40Refertotheexhibit.Accordingtotheroutingtable,wherewilltheroutersendapacketdestinedfor5?A.B.C.D.Answer:CSection:Chapter6:IPRoutingExplanation/Reference:路由查找原则：最长掩码匹配原则。QUESTION41Whichcommandshowsifanaccesslistisassignedtoaninterface?A.showipinterface[interface]access-listsB.showipaccess-listsinterface[interface]C.showipinterface[interface]D.showipaccess-lists[interface]Answer:CSection:Chapter7:SecurityExplanation/Reference:QUESTION42Refertotheexhibit.WhichruledoestheDHCPserverusewhenthereisanIPaddressconflict?A.Theaddressisremovedfromthepooluntiltheconflictisresolved.B.Theaddressremainsinthepooluntiltheconflictisresolved.C.OnlytheIPdetectedbyGratuitousARPisremovedfromthepool.D.OnlytheIPdetectedbyPingisremovedfromthepool.E.TheIPwillbeshown,evenaftertheconflictisresolved.Answer:ASection:Chapter5:ManagingCiscoIOSExplanation/Reference:showipdhcpconflict命令可以查看哪些ip地址在使用上有冲突。有冲突的地址不再分配出去。A：地址被删除直到冲突解决，正确B:地址保留直到冲突解决，错误CISCO-CCNA网络工程师题库全文共142页，当前为第12页。C/D：答案片面。CISCO-CCNA网络工程师题库全文共142页，当前为第12页。E：当冲突解决后，地址会被显示。错误。QUESTION43Refertotheexhibit.YouareconnectedtotherouterasuserMike.WhichcommandallowsyoutoseeoutputfromtheOSPFdebugcommand?A.terminalmonitorB.showdebuggingC.showsessionsD.showipospfinterfaceAnswer:ASection:Chapter6:IPRoutingExplanation/Reference:A：让debug信息在终端上显示出来B：没这条命令C：查看会话信息。D:查看启用了ospf的接口的相关信息。QUESTION44Refertotheexhibit.Ifnumber2isselectedfromthesetupscript,whathappenswhentheuserrunssetupfromaprivilegedprompt?A.Setupisadditiveandanychangeswillbeaddedtotheconfigscript.B.Setupeffectivelystartstheconfigurationoverasiftherouterwasbootedforthefirsttime.C.Setupwillnotrunifanenablesecretpasswordexistsontherouter.D.Setupwillnotrun,becauseitisonlyviablewhennoconfigurationexistsontherouter.Answer:ASection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:[0]不保存进入IOS命令配置模式[1]不保存返回设置模式[2]保存退出A：设置和改动被保存到配置脚本B：为有效地重新开始配置，如果路由器是第一次启动的配置。C：如果配置了密码，设置不会运行D：设置不可用，因为它只能在没有配置存在时才有效。QUESTION45Refertotheexhibit.Which(config-router)commandwillallowthenetworkrepresentedontheinterfacetobeadvertisedbyRIP?A.redistributeethernet0B.networkethernet0C.redistributeD.networkAnswer:DSection:Chapter6:IPRoutingExplanation/Reference:考点：怎么才能让接口通告RIP路由。通告network网段实现。QUESTION46Refertotheexhibit.Whatinformationcanbegatheredfromtheoutput?A.OnerouterisrunningRIPv1.B.RIPneighboris.C.Thenetworkcontainsaloop.D.Networkisreachable.Answer:DSection:Chapter6:IPRoutingCISCO-CCNA网络工程师题库全文共142页，当前为第13页。CISCO-CCNA网络工程师题库全文共142页，当前为第13页。由图中可以看出本地已经存在这条路由。QUESTION47Refertotheexhibit.Whattypeofconnectionwouldbesupportedbythecablediagramshown?A.PCtorouterB.PCtoswitchC.servertorouterD.routertorouterAnswer:BSection:Chapter1:IntroductionExplanation/Reference:从图中可以看出这是一条直通线。同构设备使用交叉线，异构设备使用直通线。B：直通线AC/D同构设备使用交叉线QUESTION48Refertotheexhibit.Whattypeofconnectionwouldbesupportedbythecablediagramshown?A.PCtorouterB.PCtoswitchC.servertoswitchD.switchtorouterAnswer:ASection:Chapter1:IntroductionExplanation/Reference:QUESTION49WhichtwostatementsdescribetheCiscoimplementationofVLANs?(Choosetwo.)A.VLAN1isthedefaultEthernetVLAN.B.CDPadvertisementsareonlysentonVLAN1002.C.Bydefault,themanagementVLANisVLAN1005.D.Bydefault,theswitchIPaddressisinVLAN1005.E.VLAN1002through1005areautomaticallycreatedandcannotbedeleted.Answer:AESection:(none)Explanation/Reference:考点：考查vlan知识点。A：缺省都存在vlan1，端口都属于vlan1，正确B：CDP信息只发送到vlan1002，错误，vlan1002是fddi网络的vlan号。C：缺省情况交换机IP配置在vlan1005，错误，vlan1005trnet网络的vlan号。缺省在vlan1里面。D：vlan1002-1005自动生成并不能被删除，正确，他们都是被保留的特殊vlan。QUESTION50Refertotheexhibit.Whatcanbedeterminedabouttherouterfromtheconsoleoutput?A.NoconfigurationfilewasfoundinNVRAM.B.Noconfigurationfilewasfoundinflash.C.NoconfigurationfilewasfoundinthePCMCIAcard.D.Configurationfileisnormalandwillloadin15seconds.Answer:ASection:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:启动时缺省读取保存在NVRAM里面的配置文件。提示进入对话模式，说明没有保存配置文件。QUESTION51Refertotheexhibit.Whatcanbedeterminedfromtheoutput?A.islocaltotherouter.B.islocaltotherouter.C.willageoutinlessthan1minute.D.hasagedoutandismarkedfordeletion.CISCO-CCNA网络工程师题库全文共142页，当前为第14页。Answer:BCISCO-CCNA网络工程师题库全文共142页，当前为第14页。Section:Chapter4:IntroductiontoCiscoIOSExplanation/Reference:age下面-代表是本地端口QUESTION52Refertotheexhibit.Whichcommandwouldallowthetranslationstobecreatedontherouter?A.ipnatpoolmynats54prefix-length19B.ipnatoutsidemynats54prefix-length19C.ipnatpoolmynats54prefix-length18D.ipnatoutsidemynats54prefix-length18Answer:ASection:Chapter8:NATExplanation/Reference:准确汇总掩码是21，答案中没有，退而求其次选19.mynats为地址池的名字，prefix-length表示掩码的长度。prefix-length19表示掩码为QUESTION53Refertotheexhibit.Anadministratorpingsthedefaultgatewayatandseestheoutputasshown.AtwhichOSIlayeristheproblem?A.datalinklayerB.applicationlayerC.accesslayerD.sessionlayerE.networklayerAnswer:ESection:Chapter2:TCP/IPExplanation/Reference:ping调用icmp，ping不通是网络层的原因。QUESTION54Refertotheexhibit.WhichvaluewillbeconfiguredforDefaultGatewayoftheLocalAreaConnection?A.B.54C.D.54Answer:BSection:Chapter3:IPAddressingandVLSMExplanation/Reference:--54里面除了49外任意一个。QUESTION55Refertotheexhibit.TheuseratWorkstationBreportsthatServerAcannotbereached.WhatispreventingWorkstationBfromreachingServerA?A.TheIPaddressforServerAisabroadcastaddress.B.TheIPaddressforWorkstationBisasubnetaddress.C.ThegatewayforWorkstationBisnotonthesamesubnet.D.ThegatewayforServerAisnotonthesamesubnet.Answer:DSection:Chapter6:IPRoutingExplanation/Reference:4/27所在网络范围为：-31/27。很明显网关3不再范围内。QUESTION56Refertotheexhibit.Whatdoesthe(*)representintheoutput?A.Packetisdestinedforalocalinterfacetotherouter.B.Packetwastranslated,butnoresponsewasreceivedfromthedistantdevice.C.Packetwasnottranslated,becausenoadditionalportsareavailable.D.Packetwastranslatedandfastswitchedtothedestination.CISCO-CCNA网络工程师题库全文共142页，当前为第15页。Answer:DCISCO-CCNA网络工程师题库全文共142页，当前为第15页。Section:Chapter8:NATExplanation/Reference:由图中提示信息可以看出，源为已经有个一个转换，所以后续的数据包快速转发。QUESTION57Refertotheexhibit.WhatcommandsequencewillenablePATfromtheinsidetooutsidenetwork?A.(config)ipnatpoolisp-netnetmaskoverloadB.(config-if)ipnatoutsideoverloadC.(config)ipnatinsidesourcelist1interfaceethernet1overloadD.(config-if)ipnatinsideoverloadAnswer:CSection:Chapter8:NATExplanation/Reference:overload是配置PAT的关键字QUESTION58Refertotheexhibit.WhatwillhappentoHTTPtrafficcomingfromtheInternetthatisdestinedfor0ifthetrafficisprocessedbythisACL?A.Trafficwillbedroppedperline30oftheACL.B.Trafficwillbeacceptedperline40oftheACL.C.Trafficwillbedropped,becauseoftheimplicitdenyallattheendoftheACL.D.Trafficwillbeaccepted,becausethesourceaddressisnotcoveredbytheACL.Answer:CSection:Chapter7:SecurityExplanation/Reference:ACL匹配规则：自上而下匹配，一旦匹配则终止，没有匹配到的丢弃。题目给的172是目的地址，表中ACL中172是源地址QUESTION59Refertotheexhibit.WhichstatementdescribestheeffectthattheRouter1configurationhasondevicesinthesubnetwhentheytrytoconnecttoSVR-AusingTelnetorSSH?A.DeviceswillnotbeabletouseTelnetorSSH.B.DeviceswillbeabletouseSSH,butnotTelnet.C.DeviceswillbeabletouseTelnet,butnotSSH.D.DeviceswillbeabletouseTelnetandSSH.Answer:BSection:Chapter7:SecurityExplanation/Reference:题目考查的是ACL用法，首先我们看图示F0/0是in方向，eq应该放在目的主机的后面，源主机是随机端口发出访问f0/1也设置为out方向，只能控制返回的数据，这里eq应该放在源主机也就是SVR-A的后面所以list100中10生效，20无效。list101中10生效，20无效。最后默认都拒绝，所以只允许ssh。QUESTION60WhatarethreeadvantagesofVLANs?(Choosethree.)A.VLANsestablishbroadcastdomainsinswitchednetworks.B.VLANsutilizepacketfilteringtoenhancenetworksecurity.C.VLANsprovideamethodofconservingIPaddressesinlargenetworks.D.VLANsprovidealow-latencyinternetworkingalternativetoroutednetworks.E.VLANsallowaccesstonetworkservicesbasedondepartment,notphysicallocation.F.VLANscangreatlysimplifyadding,moving,orchanginghostsonthenetwork.Answer:AEFSection:Chapter10:VLANExplanation/Reference:CISCO-CCNA网络工程师题库全文共142页，当前为第16页。A：VLAN在交换网络中建立广播域，正确CISCO-CCNA网络工程师题库全文共142页，当前为第16页。B：利用VLAN的数据包过滤，增强网络的安全性。错误，没有这个特性。C：提供了在大型网络中的保护IP地址的方法。错误。D：提供低延迟互联网络替代路由网络。错误E：vlan允许基于逻辑划分的网络访问，不是物理位置。正确。F：VLAN可以大大简化添加，移动或更改网络上的主机。正确。QUESTION61AnadministratorwouldliketoconfigureaswitchoveravirtualterminalconnectionfromlocationsoutsideofthelocalLAN.Whichofthefollowingarerequiredinorderfortheswitchtobeconfiguredfromaremotelocation?(Choosetwo.)A.TheswitchmustbeconfiguredwithanIPaddress,subnetmask,anddefaultgateway.B.TheswitchmustbeconnectedtoarouteroveraVLANtrunk.C.TheswitchmustbereachablethroughaportconnectedtoitsmanagementVLAN.D.TheswitchconsoleportmustbeconnectedtotheEthernetLAN.E.TheswitchmanagementVLANmustbecreatedandhaveamembershipofatleastoneswitchport.F.TheswitchmustbefullyconfiguredasanSNMPagent.Answer:ACSection:Chapter9:SwitchingExplanation/Reference:要想远