CCNA考试题库中英文翻译版及答案.doc

CCNA考试题库中英文翻译版及答案111. What are two reasons that a network administrator would use access lists? (Choose two.)1.出于哪两种理由，网络管理员会使用访问列表? A. to control vty access into a routerA.控制通过VTY访问路由器B. to control broadcast traffic through a routerB.控制广播流量穿越路由器2.一个默认的帧中继WAN被分类为哪种物理网络类型?A. point-to-pointA.点到点B. broadcast multi-accessB.广播多路访问C. nonbroadcast multi-accessC.非广播多路访问D. nonbroadcast multipointD.非广播多点E. broadcast point-to-multipointE.广播点到多点Answer: C3. A single 802.11g access point has been configured and installed in the center of a squarA few wireless users are experiencing slow performance and drops while most users are oat peak efficiency. What are three likely causes of this problem? (Choose three.)3.一个802.11接入点被部署在一个方形办公室的中央，当大多数用户在大流量传输数一些无线用户发现无线网络变得缓慢和出现丢包A. mismatched TKIP encryptionB. null SSIDC. cordless phonesD. mismatched SSIDE. metal file cabinetsF. antenna type or directionAnswer: CEF4. Refer to the exhibit. How many broadcast domains exist in the exhibited topology?根据下图，图中的拓扑中存在多少个广播域?A. oneA.1B. twoB.2C. threeC.3D. fourD.4E. fiveE.5F. sixF.6Answer: C5. Refer to the exhibit. What two facts can be determined from the WLAN diagram? (Choose two.)5.根据下图，WLAN diagram决定了哪两个事实A. The area of overlap of the two cells represents a basic service set (BSS).A. 两个 cells的overlap的区域描述了一个basic service setB. The network diagram represents an extended service set (ESS).B. 网络描述了一个extended service setC. Access points in each cell must be configured to use channel 1.C. 再每个CELL中的AP必须被配置成使用channel 1D. The area of overlap must be less than 10% of the area to ensure connectivity.D. 为了确保连通性,重叠区域必须小于10%E. The two APs should be configured to operate on different channels.E. 两个访问点应该被配置成工作在不同的频道Answer: BE6. The command frame-relay map ip 10.121.16.8 102 broadcast was entered on the router.Which of the following statements is true concerning this command?6.路由器上输入命令frame-relay map ip 10.121.16.8 102 broadcast，以下选项正确的是?A. This command should be executed from the global configuration mode.A.该命令应该在全局配置模式下被执行B. The IP address 10.121.16.8 is the local router port used to forward data.B.IP地址10.121.16.8是本地路由器用来转发数据的接口C. 102 is the remote DLCI that will receive the information.C.102是远端的DLCI它将接受信息。D. This command is required for all Frame Relay configurations.D.这个命令要求被配置为所有的帧中继配置。E. The broadcast option allows packets, such as RIP updates, to be forwarded across the PVC.E.这个广播选项允许数据包，例如rip更新信息，将会被转发通过PVC.Answer: E7. Which type of attack is characterized by a flood of packets that are requesting a TCP connectionto a server?7.哪种类型的攻击的特点是发大量的TCP请求连接数据包到服务器?A. denial of serviceA.拒绝服务B. brute forceB.强制叠加C. reconnaissanceC.监听D. Trojan horseD.木马Answer: A8. Which of the following are associated with the application layer of the OSI model? (Choosetwo.)8.以下两个选项是工作在OSI模型的应用层的?A. pingB. TelnetC. FTPD. TCPE. IPAnswer: BC9. Refer to the exhibit. The network administrator has created a new VLAN on Switch1 and addedhost C and host D. The administrator has properly configured switch interfaces FastEthernet0/13 through FastEthernet0/24 to be members of the new VLAN. However, after the network administrator completed the configuration, host A could communicate with host B, but host A could not communicate with host C or host D. Which commands are required to resolve this problem? 9.网络管理员在交换机1上创建一个新VLAN并且将主机C和主机D加入到此VLAN中.管理员配置交换机接口FastEthernet0/13到FastEthernet0/24成为新VLAN成员.但是网络管理员完成配置以后,主机A可以和主机B通信,但是主机A不能和主机C或者主机D通信.哪个命令可以用来解决这个问题A. Router(config)# interface fastethernet 0/1.3Router(config-if)# encapsulation dot1q 3Router(config-if)# ip address 192.168.3.1 255.255.255.0B. Router(config)# router ripRouter(config-router)# network 192.168.1.0Router(config-router)# network 192.168.2.0Router(config-router)# network 192.168.3.0C. Switch1# vlan databaseSwitch1(vlan)# vtp v2-modeSwitch1(vlan)# vtp domain ciscoSwitch1(vlan)# vtp serverD. Switch1(config)# interface fastethernet 0/1Switch1(config-if)# switchport mode trunkSwitch1(config-if)# switchport trunk encapsulation islAnswer: A10. For security reasons, the network administrator needs to prevent pings into the corporate networks from hosts outside the internetwork. Which protocol should be blocked with access control lists?10.出于安全考虑，网络管理员需要去防止外网主机PING内网，下面那个协议应该用access control lists 限制掉A. IPB. ICMPC. TCPD. UDPAnswer: B11. What are two recommended ways of protecting network device configuration files from outside network security threats? (Choose two.)11.哪两种方法被推荐用来保守网络设备的配置文件不受外网的威胁A. Allow unrestricted access to the console or VTY ports.A.允许unrestricted 访问到console或VTY口B. Use a firewall to restrict access from the outside to the network devices.B.用防火墙去限制外网的网络设备访问C. Always use Telnet to access the device command line because its data is automatically encrypted.C.因为数据被自动加密，所以总是允许使用TELNET命令访问网络设备的命令行，D. Use SSH or another encrypted and authenticated transport to access device configurations.D.使用SSH或其他加密、认证机制去访问设备的配置E. Prevent the loss of passwords by disabling password encryption.E.为了避免丢失密码，所以不对密码进行加密(明文)Answer: BD12. Refer to the exhibit. The access list has been configured on the S0/0 interface of router RTB in the outbound direction. Which two packets, if routed to the interface, will be denied? (Choose two.)12.根据下图，该access list被配置在路由器RTB的S0/0接口上的OUT方向，哪两个数据包会被DENY，如果被路由到该接口上的话?access-list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnetaccess-list 101 permit ip any anyA. source ip address: 192.168.15.5; destination port: 21B. source ip address:, 192.168.15.37 destination port: 21C. source ip address:, 192.168.15.41 destination port: 21D. source ip address:, 192.168.15.36 destination port: 23E. source ip address: 192.168.15.46; destination port: 23F. source ip address:, 192.168.15.49 destination port: 23Answer: DE13. What are two security appliances that can be installed in a network? (Choose two.)13.以下哪两个安全工具能被安装在一个网络里A. ATMB. IDSC. IOSD. IOXE. IPSF. SDMAnswer: BE14. Refer to the exhibit. Switch1 has just been restarted and has passed the POST routine. Host A sends its initial frame to Host C. What is the first thing the switch will do as regards populating the switching table?14.根据下图， Switch1刚刚完成重启， 并完成上电自检 。 Host A发送它的第一个侦到Host C ，交换机首先会对switching table做什么操作A. Switch1 will add 192.168.23.4 to the switching table.A. Switch1 会添加192.168.23.4 到switching table.B. Switch1 will add 192.168.23.12 to the switching table.B.Switch1 添加192.168.23.12到switching table.C. Switch1 will add 000A.8A47.E612 to the switching table.C. Switch1添加 000A.8A47.E612到 switching table.D. Switch1 will add 000B.DB95.2EE9 to the switching table.D.Switch1 添加000B.DB95.2EE9 到 switching table.Answer: C15. The user of Host1 wants to ping the DSL modem/router at 192.168.1.254. Based on the Host1 ARP table that is shown in the exhibit, what will Host1 do?15.Host1的用户想PING DSL调制解调器/路由器的 192.168.1.254，ARP表如下图，Host1会怎么操作?A. send a unicast ARP packet to the DSL modem/routerA.发送一个单播ARP包到DSL调制解调器/路由器B. send unicast ICMP packets to the DSL modem/routerB.发送一个单播ICMP包到DSL调制解调器/路由器C. send Layer 3 broadcast packets to which the DSL modem/router respondsC.发送三层广播包到响应的DSL调制解调器/路由器D. send a Layer 2 broadcast that is received by Host2, the switch, and the DSL modem/routerD.发送一个可以被Host2, the switch, and the DSL modem/router 受到的2层广播帧Answer: B16. Refer to the exhibit. What is the most efficient summarization that R1 can use to advertise its networks to R2?16.根据下图，R1能通告给R2的最有效的汇总是?A. 172.1.0.0/22B. 172.1.0.0/21C. 172.1.4.0/22D. 172.1.4.0/24172.1.5.0/24172.1.6.0/24172.1.7.0/24E. 172.1.4.0/25172.1.4.128/25172.1.5.0/24172.1.6.0/24172.1.7.0/24Answer: C17. Which spread spectrum technology does the 802.11b standard define for operation?17.哪种扩频技术是802.11B定义使用的A. IRB. DSSSC. FHSSD. DSSS and FHSSE. IR, FHSS, and DSSSAnswer: B18. Refer to the exhibit. Assume that all router interfaces are operational and correctly configured. In addition, assume that OSPF has been correctly configured on router R2. How will the default route configured on R1 affect the operation of R2?18.根据下图，假设所有路由器接口都配置正确且正常工作，假设R2上OSPF配置正确，配置在R1上默认路由会怎么影响R2的工作A. Any packet destined for a network that is not directly connected to router R1 will be dropped.A.任何到达一个和路由器R1非直连的网络的数据包都会被丢弃B. Any packet destined for a network that is not directly connected to router R2 will be dropped immediately.B.任何到达一个和路由器R2非直连的网络的数据包都会被丢弃C. Any packet destined for a network that is not directly connected to router R2 will be dropped immediately because of the lack of a gateway on R1.C.任何到达一个和路由器R2非直连的网络的数据包都会即时被丢弃，因为R1上缺少网关D. The networks directly connected to router R2 will not be able to communicate with the 172.16.100.0, 172.16.100.128, and 172.16.100.64 subnetworks.D. 直连在 R2 上的网络将不能够和 172.16.100.0, 172.16.100.128, 172.16.100.64 这些子网通讯E. Any packet destined for a network that is not referenced in the routing table of router R2 will be directed to R1. R1 will then send that packet back to R2 and a routing loop will occur.E.任何目的地没有在R2的路由表中的数据包,R2将会定向到R1,R1会发送哪个数据包到R2,这样路由环路产生Answer: E19. A network interface port has collision detection and carrier sensing enabled on a shared twisted pair network. From this statement, what is known about the network interface port?19.在一个共享的双绞线的网络上的接口上产生了冲突检测和载波侦听.通过这个描述,关于这个网络接口你知道了什么A. This is a 10 Mb/s switch port.A.这是一个10 Mb/s的交换端口B. This is a 100 Mb/s switch port.B.这是一个100Mb/s 的交换端口C. This is an Ethernet port operating at half duplex.C.这是一个工作在半双工模式下的以太口D. This is an Ethernet port operating at full duplex.D.这是一个工作在全双工模式下的以太口E. This is a port on a network interface card in a PC.E.这是一个PC机上网卡上的一个接口Answer: C20. Refer to the topology and router configuration shown in the graphic. A host on the LAN is accessing an FTP server across the Internet. Which of the following addresses could appear as a source address for the packets forwarded by the router to the destination server?20.根据下图显示的拓扑结构和路由器配置，一个在该LAN上的主机正在通过INTERNET访问一个FTP 服务器。下列地址中哪个可以作为路由器发送到该目的服务器的数据包的源地A. 10.10.0.1B. 10.10.0.2C. 199.99.9.33D. 199.99.9.57E. 200.2.2.17F. 200.2.2.18Answer: D21. A company is installing IP phones. The phones and office computers connect to the same device. To ensure maximum throughput for the phone data, the company needs to make sure that the phone traffic is on a different network from that of the office computer data traffic. What is the best network device to which to directly connect the phones and computers, and what technology should be implemented on this device? (Choose two.)21.一个公司正在安装IP 电话。电话和办公室电脑连接到同个设备上，为了保证电话数据的最大传输量，公司需要确定电话流量是和办公室电脑的数据流量不是在同一个网络上。以下哪个是最好的网络设备，用来直连到电话和电脑，并且，哪种技术应该被配置在该设备上A. hubB. routerC. switchD. STPE. subinterfacesF. VLANAnswer: CF22. Refer to the exhibit. Which statement describes DLCI 17?22.根据下图，那个选项描述了DLCI 17A. DLCI 17 describes the ISDN circuit between R2 and R3.A.DLCI 17描述了R2和R3之间的ISDN线路B. DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1.B.DLCI 17描述了一条在R2上的PVC，不能用在R3和R1上C. DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3.C.DLCI 17 是R2使用的二层地址，用来描述一条到R3的PVCD. DLCI 17 describes the dial-up circuit from R2 and R3 to the service providerD.DlDLCI17描述了一条从R2 R3到服务提供商拨号网络Answer: C23. Which routing protocol by default uses bandwidth and delay as metrics?23.哪个路由协议默认用带宽和延迟作为metrics值A. RIPB. BGPC. OSPFD. EIGRPAnswer: D24. Refer to the output from the show running-config command in the exhibit. What should the administrator do to allow the workstations connected to the FastEthernet 0/0 interface to obtain an IP address?24.根据下图中展示的show running-config命令的结果。网络管理员该如何做才能允许工作站连接到FastEthernet 0/0接口去获得一个IP地址A. Apply access-group 14 to interface FastEthernet 0/0.A.在接口FastEthernet 0/0应用access-group 14B. Add access-list 14 permit any any to the access list configuration.B.在access-list 14中添加access-list 14 permit any anyC. Configure the IP address of the FastEtherent 0/0 interface to. 10.90.201.1C.配置FastEtherent 0/0接口的IP地址为10.90.201.1D. Add an interface description to the FastEthernet 0/0 interface configuration.D.为接口FastEthernet 0/0添加一个接口描述Answer: C25. Refer to the exhibit. The networks connected to router R2 have been summarized as a 192.168.176.0/21 route and sent to R1. Which two packet destination addresses will R1 forward to R2? (Choose two.)25.根据下图，网络连接到路由器R2被汇总为一条192.168.176.0/21的路由，并发给R1。哪两个数据包目的地址R1会转发给R2A. 192.168.194.160B. 192.168.183.41C. 192.168.159.2D. 192.168.183.255E. 192.168.179.4F. 192.168.184.45Answer: BE26. Two routers named Atlanta and Brevard are connected by their serial interfaces as shown in the exhibit, but there is no data connectivity between them. The Atlanta router is known to have a correct configuration. Given the partial configurations shown in the exhibit, what is the problem on the Brevard router that is causing the lack of connectivity?26.如下图，两个路由器(Atlanta 和 Brevard)用串口连接起来。但是他们之间没有数据传输，已知Atlanta配置正确，下图给出部分配置，路由器Brevard上导致该问题的原因是A. A loopback is not set.A.没有设置loopback命令B. The IP address is incorrect.B.IP地址不正确C. The subnet mask is incorrect.C.子网掩码不正确D. The serial line encapsulations are incompatible.D.串行链路封装不正确E. The maximum transmission unit (MTU) size is too large.E.最大传输单元(MTU)设置得太大F. The bandwidth setting is incompatible with the connected interface.F.带宽设置和直连的接口不匹配Answer: B27. Refer to the exhibit. Which switch provides the spanning-tree designated port role for the network segment that services the printers?27.根据下图，哪个交换机为打印机提供了生成树中的指定端口角色?A. Switch1B. Switch2C. Switch3D. Switch4Answer: C28. Refer to the exhibit. Switch-1 needs to send data to a host with a MAC address of 00b0.d056.efa4. What will do with this data?28.根据下图，Switch-1需要往一台MAC地址为00b0.d056.efa4的主机发数据，Switch-1会如何处理这些数据?A. Switch-1 will drop the data because it does not have an entry for that MAC address.A. Switch-1会丢弃该数据，因为它没有该MAC地址条目B. Switch-1 will flood the data out all of its ports except the port from which the data originated.B.Switch-1会防洪该数据到所有的接口，除了该数据的源接口C. Switch-1 will send an ARP request out all its ports except the port from which the data originated.C.Switch-1会发送ARP请求到所有的接口，除了该数据的源接口D. Switch-1 will forward the data to its default gateway.D.Switch-1会往默认网关发送该数据Answer: B29. In the implementation of VLSM techniques on a network using a single Class C IP address,which subnet mask is the most efficient for point-to-point serial links?29.在使用VLSM技术的网络中使用一个C类的IP地址，以下哪个子网掩码在点对点串行链路中是最不浪费地址空间的?A. 255.255.255.0B. 255.255.255.240C. 255.255.255.248D. 255.255.255.252E. 255.255.255.254Answer: D30. Refer to the exhibit. Why would the network administrator configure RA in this manner?30.根据下图，网络管理员如此配置的RA的原因是?A. to give students access to the InternetA.让students访问InternetB. to prevent students from accessing the command prompt of RAB.阻止students访问RA的命令提示符C. to prevent administrators from accessing the console of RAC.阻止管理员访问RA的控制台D. to give administrators access to the InternetD.让administrators访问InternetE. to prevent students from accessing the InternetE.阻止students访问InternetF. to prevent students from accessing the networkF.阻止students 访问Admin 的网络Answer: B31. Which two values are used by Spanning Tree Protocol to elect a root bridge? (Choose two.)31.那两个值被生成树协议用来选举根桥A. amount of RAMB. bridge priorityC. IOS versionD. IP addressE. MAC addressF. speed of the linksAnswer: BE32.根据下图，图中两个设备是网络中仅有的CISCO设备，两个设备间的串行链路的掩码255.255.255.252,在下面的答案中，哪三个是正确的?A. The Manchester serial address is 10.1.1.1.A.Manchester的串行链路的地址为10.1.1.1B. The Manchester serial address is 10.1.1.2.B.Manchester的串行链路的地址为10.1.1.2C. The London router is a Cisco 2610.C.London路由器是CISCO 2610D. The Manchester router is a Cisco 2610.D.London路由器是CISCO 2610E. The CDP information was received on port Serial0/0 of the Manchester router.E.路由器Manchester 的Serial0/0端口收到CDP信息F. The CDP information was sent by port Serial0/0 of the London router.F.路由器London的Serial0/0端口收到CDP信息Answer: ACE33. While troubleshooting a network connectivity problem, a technician observes steady link lights on both the workstation NIC and the switch port to which the workstation is connected.However, when the ping command is issued from the workstation, the output message Request timed out. is displayed. At which layer of the OSI model does the problem most likely exist?33. 在进行网络连接排错的时候,一种技术员注意到工作站网卡和交换机连接工作站的接口的灯常亮.当在工作站使用PING命令的时候,出现的信息是Request timed out那OSI最有可能存在问题A. the session layerA.会话层B. the protocol layerB.协议层C. the data link layerC.数据链路层D. the access layerD.访问层E. the network layerE.网络层F. the application layerF.应用层Answer: E34. A network administrator has configured two switches, named London and Madrid, to use VTP. However, the switches are not sharing VTP messages. Given the command output shown in thegraphic, why are these switches not sharing VTP messages?34.一个网络管理员配置了两台交换机London 和Madrid，让它们使用VTP。但是，两台交换机之间没有共享VTP信息，根据下图，回答交换机之间没有分享VTP信息的原因A. The VTP version is not correctly configured.A.VTP版本配置错误B. The VTP operating mode is not correctly configured.B.VTP工作模式配置错误C. The VTP domain name is not correctly configured.C.VTP域名配置错误D. VTP pruning mode is disabled.D.VTP的pruning mode 被禁止了E. VTP V2 mode is disabled.E.VTP的V2 mode 被禁止了F. VTP traps generation is disabled.F.VTP traps generation 被禁止了Answer: C35. In order to allow the establishment of a Telnet session with a router, which set of commands must be configured?35.为了允许建立一个TELNET会话，以下那个命令集必须被配置?A. router(config)# line console 0router(config-line)# enable password ciscoB. router(config)# line console 0router(config-line)# enable secret ciscorouter(config-line)# loginC. router(config)# line console 0router(config-line)# password cisco router(config-line)# loginD. router(config)# line vty 0router(config-line)# enable password ciscoE. router(config)# line vty 0router(config-line)# enable secret ciscorouter(config-line)# loginF. router(config)# line vty 0router(config-line)# password ciscorouter(config-line)# loginAnswer: F36. Host 1 is trying to communicate with Host 2. The e0 interface on Router C is down. Which of the following are true? (Choose two.)36.Host 1 正在试图和Host 2 联系。 Router C 的 e0 接口是down的 ，以下选项正确的是?A. Router C will use ICMP to inform Host 1 that Host 2 cannot be reached.A.Router C会使用ICMP通知Host 1 “Host 2无法到达”B. Router C will use ICMP to inform Router B that Host 2 cannot be reached.B.Router C会使用ICMP通知Host 1 “Host 2无法到达”C. Router C will use ICMP to inform Host 1, Router A, and Router B that Host 2 cannot be reached.C.Router C会使用ICMP通知Host 1 ，Router A 和 Router B “Host 2无法到达”D. Router C will send a Destination Unreachable message type.D.Router C 会发送一个“Destination Unreachable”的消息类型E. Router C will send a Router Selection message type.E.Rou