2024年软件认证工程师考试-思科认证笔试历年真题荟萃含答案

2024年软件认证工程师考试-思科认证笔试历年真题荟萃含答案（图片大小可自由调整）第1卷一.参考题库(共30题)1.What is an ideal Cisco solution to protect a campus network and services from potential security breaches？（）A、Cisco Security Device ManagerB、Cisco Security AgentC、Cisco VPN ClientD、Cisco Intrusion Detection System2.Inthe7-layerOSImodel,whichlayerswitchingwilltakeplace?（）A、LayertwoB、LayerfourC、LayeroneD、Layerthree3.FDDI网络比令牌环网（IEEE802.5）更优越，主要体现在哪些方面？4.Thecommandframe-relaymapip102broadcastwasenteredontherouter.Whichofthefollowingstatementsistrueconcerningthiscommand（）。A、ThiscommandshouldbeexecutedfromtheglobalconfigurationmodeB、TheIPaddressisthelocalrouterportusedtoforwarddataC、102istheremoteDLCIthatwillreceivetheinformationD、ThiscommandisrequiredforallFrameRelayconfigurationsE、Thebroadcastoptionallowspackets,suchasRIPupdates,tobeforwardedacrossthePVC5.When do you need to configure the P1 interface？（）A、 whenever you have an upstream proxyB、 whenever you intend to deploy the L4TM in blocking modeC、 whenever you want to enable the WSA proxyD、 whenever you have a separate management VLAN orsubnetwork6.The wireless lan controller maintains up to how many controller crash files？（）A、20B、5C、15D、107.Whatarethreecommonreasonswhycustomersaresayingthattheyneedtoevolvetheirdatacenter?（）A、architecturesthatisinflexibleandinefficientB、desiretousethesamevenderfordesktopandserverdeploymentsC、selectingbest-performingvendorsforeachindividualcomponentD、existingequipmenthasreachedandoflifeE、increasingoperationalcostsofmanagingdatacentersF、demandamongusersforaccesstoinformationanytime,anywhere8.什么思科IOS特性，可以查明，是造成速度慢的网络性能的应用程序？（）A、 SNMPB、 NetflowC、 WCCPD、 IP SLA9.Spanning Tree Protocol IEEE 802.1s defines the ability to deploy which of these？ （）A、one global STP instance for all VLANsB、one STP instance for each VLANC、one STP instance per set of VLANsD、one STP instance per set of bridges10.Which of the following best defines the Cisco Lifecycle Services approach（）A、the minimum set of services that are needed to successfully deploy and manage technology solutionB、system design to help ensure selection of the most appropriate productsC、business requirements and investments as they pertain to asset lifecycle managementD、technology strategies and related product lifecycles that are required to ensure minimal risks and maximum return of investment11.Which three approaches can be used while migrating from an IPV4 addressing scheme to an IPV6 scheme？（）A、statically map IPV4 address to IPV6 addressesB、configuration IPv4 tunnels between IPV6 islandsC、use DHCPv6 to map IPV4 addresses to IPV6 addressesD、use proxying and translation to translate IPV6 packets into IPV4 packetsE、configure IPV6 directlyF、enable dual-stack routing12.BGP Administrative distance？13.Giventhenetworkdiagram,whichaddresswouldsuccessfullysummarizeonlythenetworksseen?（） A、/24B、/21C、/20D、/21E、Thesenetworkscannotbesummarized.14.Windows Server 2003/2008系统具有强大的网络服务功能，选用Windows Server 2003/2008操作系统构建一个中、小型局域网，请写出系统构建方案。 15.WhenisaswitchednetworkthatisrunningtheSpanningTreeProtocolconsideredtobefullyconverged?（）A、whenallswitcheshavethesameBIDastherootswitchB、whenallswitcheshavereceivedtheMACaddressofeachneighboringswitchC、wheneveryenabledswitchporthasbeenassignedauniqueidentifierD、wheneveryoperatingswitchportisineithertheblockingorforwardingstateE、whenallswitchesareineitherclient,server,ortransparentmode16.Which commands is necessary to permit SSH or Telnet access to a cisco switch that is otherwiseconfigured for these vty line protocols？（）A、transport type allB、transport output allC、transport preferred allD、transport input all17.计算机网络按作用范围（距离）可分为（）、（）和（）；18.Whiletryingtodiagnosearoutingprobleminthenetwork,youissueRIPdebuggingasdisplayedbelow: RtrA#debugiprip Ripprotocoldebuggingison RtrA# 1d05h:RIP:sendingv1updateto55viaFastEthernet0/0() 1d05h:RIP:buildupdateentries 1d05h:networkmetric1 1d05h:networkmetric2 1d05h:RIP:sendingv1updateto55viaSerial0/0() 1d05h:RIP:buildupdateentries 1d05h:networkmetric1 RtrA# 1d05h:RIP:receivedv1updatefromonSerial0/0 1d05h:in1hops 1d05h:192.168.0in16hops(inaccessible) Basedontheoutputoftheaboveexhibit,whichtwoofthefollowingstatementsaretrue?（）A、Apingtowillbesuccessful.B、RtrAhasthreeinterfacesthatwilltakepartintheRIPprocess.C、ThereareatleasttworoutersparticipatingintheRIPprocess.D、Apingtowillbesuccessful.19.简述调制解调器的主要功能。20.Refer to the exhibit. Based upon the output of show vlan on switch CAT2，  what can we conclude  about interfaces Fa0/13 and Fa0/14？ （） A、 that interfaces Fa0/13 and Fa0/14 are in VLAN 1B、 that interfaces Fa0/13 and Fa0/14 are downC、 that interfaces Fa0/13 and Fa0/14 are trunk interfacesD、 that interfaces Fa0/13 and Fa0/14have a domain mismatch with another switchE、 that interfaces Fa0/13 and Fa0/14have a duplex mismatch with another switch21.WhichmodeloftheCisco1800SeriesIntegratedServicesRouterisModular?（）A、1812B、1814C、1802D、1811E、184122.Which three protocols should be explicitly managed by using a CoPP policy on an Internet border router？（）A、SMTPB、ICMPC、BGPD、SSHE、RTPF、BitTorrentG、VTP23.Which of the following is not an essential prerequisite for AutoQoS to be correctly applied to aninterface？ （Choose all that apply.）（）A、The interface must be configured as a Multilink PPP interfaceB、The correct bandwidth should be configured on the interfaceC、A QoS policy must not be currently attached to the interfaceD、CEF must be enabledE、AutoQoS must be enabled globally before it can be enabled on the interfaceF、An IP address must be configured on the interface if its speed is equal to or less than 768 kbps24. 请参见图示。一台默认配置的交换机连接了四台主机。图示为主机A的ARP表。当主机A要向主机D发送IP数据包时会发生什么情况？（）A、主机A向主机D的MAC地址发送了一条ARP请求B、主机D向主机A发送了一条ARP请求C、主机A向交换机发出了数据包。交换机只向主机D发送了数据包，主机D随即响应D、主机A发出了广播 FF://FF://FF://FF://FF://FF。连接到交换机的所有其它主机都收到了该广播，主机D以其MAC地址作出响应25.请参见图示。管理员记录下一台以太网交换机的 CAM 表输出，内容如图所示。当该交换机收到图中底部所示的帧时，会进行什么操作？（） A、丢弃该帧B、将该帧从端口 2 转发出去C、将该帧从端口 3 转发出去D、将该帧转发出所有端口E、将该帧从除端口 3 以外的所有端口转发出去F、在转发表中将站点 00-00-3D-1F-11-05 添加到端口 226.Cisco自防御网络策略提供（）安全服务A、威胁控制和遏止B、安全通信C、安全策略D、运营控制和策略管理27.In IPCC Express 4.0, where is product licensing stored, and how can configured licenses be viewed?（）A、stored in local files, viewed in CRS License Update Utility  B、stored in LDAP, viewed in CRS Application Administration  C、stored in local files, viewed in CRS Application Administration  D、stored in LDAP, viewed in CRS License Update Utility  28.Threeaccessportshavebeeninstalledandconfiguredtoasmalloffice.Whattermdefinesthewirelesstopology?（）A、IBSSB、BSSC、ESSD、SSID29.WhenaDHCPserverisconfigured,whichtwoIPaddressesshouldneverbeassignabletohosts?（）A、networkorsubnetworkIPaddressB、broadcastaddressonthenetworkC、IPaddressleasedtotheLAND、IPaddressusedbytheinterfacesE、manuallyassignedaddresstotheclientsF、designatedIPaddresstotheDHCPserver30.OnaCiscoCatalyst4500Series,thefailLEDislitforoneifitstwopowersupplies.Whichcommandwouldyouusetocheckonthisproblem?（）A、ShowmoduleB、ShowerrdisabledetectC、ShowenvironmentD、Showdiagnosticcontent第1卷参考答案一.参考题库1.参考答案:D2.参考答案:A3.参考答案: FDDI802.5 光纤 100Mbps 可靠性规范 4B/5B编码 分布式时钟 令牌循环时间 发送后产生新令牌 屏蔽双绞线 4Mbps 无可靠性规范 差分曼彻斯特编码 集中式时钟 优先和保留位 接收完后产生新令牌4.参考答案:E5.参考答案:D6.参考答案:B7.参考答案:A,D,E8.参考答案:B9.参考答案:C10.参考答案:A11.参考答案:A,B,F12.参考答案: BGP has a distance bgp command that allows you to set different administrative distances for three route types： external，internal， and local. External route 20 Internal route 200 Local route 20013.参考答案:C14.参考答案: XXX小学校园网方案 该校拟订的局域网属中、小型局域网，网络系统选用Windows Server 2003/2008。系统由2台服务器承担，开设Intranet的Web、FTP等信息服务。根据校方的要求，设计如下： A.服务器S1为网络主域控制服务器，承担域协议管理、服务和全域用户管理。网络选用TCP/IP、NETBEUI混合协议方式，加载与之相关的协议服务；DNS、WINS、DHCP服务，使得网络具有良好的网络通讯能力，大大降低因网络地址查找的广播通讯，由于网络实施动态协议分配，减少站点协议配置工作量，并增加了网络用户数扩展功能。在S1上可加载数据库服务，提高网络数据应用和数据管理能力。 B.服务器S2为网络信息服务器，加载IIS，建立局域网内部Web、FTP服务，提高信息服务能力和安全。该服务器可加载邮件服务系统，开展与之相关的服务。 本学校校园网是一个典型的Intranet技术应用，网络系统与客户系统具有良好的亲缘关系，使得所有与Windows平台相关的应用系统如：OFFICE系统、.net、SOL等用于办公、教学、管理等随集随用，特别易于学校低成本高速度开发自己的应用系统。15.参考答案:D16.参考答案:D17.参考答案:局域网/LAN；城域网/MAN；广域网/WAN18.参考答案:A,C19.参考答案: （1）信号转换 （2）确保信源和信宿两端同步 （3）提高数据在传输过程中的抗干扰能力 （4）实现信道的多路复用20.参考答案:C21.参考答案:E22.参考答案:B,C,D23.参考答案:A,E24.参考答案:D25.参考答案:E26.参考答案:A,B,D27.参考答案:B28.参考答案:C29.参考答案:A,B30.参考答案:C第2卷一.参考题库(共30题)1.Which protocol does the RADIUS server use inside the secure tunnel of EAP-FAST to authenticatetheclient when one-time passwords are in use？（）A、GTCB、MD5C、MS-CHAP v2D、PAP2.Which is true when describing a connection replication in Cisco ACE？（）A、 It is not supported for SSL connections.B、 It is not supported for non-SSL connections.C、 It can only be configured manually.D、 It has a maximum limit of 50，000 replicated connections.3.Which two statements about the DiffServ QoS model are true？（）A、DiffServ requires RSVP to set up a path through the network to accommodate the requested QoS.B、Network traffic is identified by class， and the level of service is chosen for each class.C、The DiffServ model relies on a fairly simple mechanism to provide QoS over a wide range of equipment.D、RSVP enables the DiffServ model to provide end-to-end QoS.E、The DiffServ model is more scalable than the IntServ model.F、The flow-based approach of the DiffServ model is ideal for large scalable implementations such as the public Internet.4.You work as a network engineer for . You study the exhibit carefully. From the configuration shown，  what can be determined？（） Exhibit: A、The remaining secure MAC addresses will be dynamically learned， converted to sticky secure MAC addresses， and added to the running configuration.B、Since a voice VLAN is configured in this example， port security should be set for a maximum of 2.C、The sticky addresses will only be those manually configured MAC addresses enabled with the sticky keyword.D、A security violation will restrict the number of addresses to a maximum of 10 addresses per access VLAN and voice VLAN. The port will be shut down if more than 10 devices per VLAN attempt to access the port.5.AcompanyisinstallingIPphones.ThephonesandofficecomputersconnecttothesamedevicE.Toensuremaximumthroughputforthephonedata,thecompanyneedstomakesurethatthephonetrafficisonadifferentnetworkfromthatoftheofficecomputerdatatraffiC.Whatisthebestnetworkdevicetowhichtodirectlyconnectthephonesandcomputers,andwhattechnologyshouldbeimplementedonthisdevice?（）A、hubB、routerC、switchD、STPE、subinterfacesF、VLAN6.Refer to the exhibit.Explain how the routes in the table are being affected by the status change on interfaceEthernet0.（） A、The router is poisoning the routes and multicasting the new path costs via interface Ethernet1B、The router is receiving updates about unreachable networks from router that are connected to interface

Ethernet1C、The router is poisoning the routes and broadcasting the new path costs via interfaceEthernet1D、The router is requesting updates for these networks from routers that are connected to interfaceEtherne17.BGP best route selection process is based on path attributes.（）A、TrueB、False8.Nexus# conf t  Enter configuration commands， one per line. End with CNTL/Z.  Nexus（config）# interface Loopback10  % Permission denied  Nexus（config）# ？  no Negate a command or set its defaults  username Configure user information.  end Go to exec mode  exit Exit from command interpreter  What is the reason why this user is not able to enter configuration commands？（）A、 The user did not enter enable prior to going into configuration mode.B、 The software license installed on Nexus is Layer 2 only， which does not allow the creation of Layer 3 interfaces.C、 The user RBAC role is set to network-operator.D、 The user failed authentication and user access defaulted to read-only mode.E、 The AAA server is currently not responding.9.You work as a network technician at Certkiller .com. Please study the exhibit carefully. All of the computing devices shown are on the same logical network， as if they were all connected to the same switch. Which two features make this possible？（） A、PATB、802.1QC、Spanning-treeD、VLANsE、QoS10.A standalone wireless AP solution is being installed into the campus infrastructure. The access points appear to boot correctly， however， wireless clients are not obtaining correct access. You verify that the local switch configuration connected to the access point appears as the following：  interface ethernet 0/1  switchport access vlan 10  switchport mode access  spanning-tree portfast  mls qos trust dscp  What is the most likely issue causing the problem？（）A、QoS trust should not be configured on a port attached to a standalone AP.B、QoS trust for switchport mode access should be defined as "cos".C、switchport mode should be defined as "trunk" with respective QoS.D、switchport access vlan should be defined as "1".11.下列哪组交互式工具不可以同时作用于一物体上？（）A、交互式填充与交互式透明B、交互式透明与交互式阴影C、交互式调和与交互式透明D、交互式封套与交互式变形12.简述OSPFOE1和OE2的区别。13.Which two statements are true about Voice over IP （VoIP） packet delivery in a digital infrastructure？ （）A、 Packets can arrive out of order.B、 Packets must take the same path to the destination.C、 Once packets are received at the destination router， the router performs sampling to ensure the quality of the voice traffic.D、 Packets can experience varying delays across the network.E、 Packets containing voice samples are sequentially numbered by default， allowing for reordering upon arrival at the terminal router along the path.14.WhichtwostatementsaretrueaboutInternetGroupManagementProtocol(IGMP)snooping?（）A、IGMPsnoopingandCiscoGroupMembershipProtocol(CGMP)canbeusedsimultaneouslyonaswitch.B、IGMPsnoopingandCiscoGroupMembershipProtocol(CGMP)weredevelopedtohelpLayer3switchesmakeintelligentforwardingdecisionsontheirown.C、IGMPsnoopingexaminesIGMPjoin/leavemessagessothatmulticasttrafficisforwardedonlytohoststhatsentanIGMPmessagetowardtherouter.D、IGMPsnoopingisanIPmulticastconstrainingmechanismforLayer2switches.E、IGMPsnoopingisenabledwiththeipmulticast-routingglobalconfigurationcommand.15.The Company is rolling out Cisco’s Architecture for Voice， Video and Integrated Data （AVVID）.   Which of the following choices represent the fundamental intelligent network services in Cisco’s  AVVID？ （）A、 Quality of Service （QoS）B、 Intelligent platformsC、 Mobility and scalabilityD、 SecurityE、 High availability16.WWW最初是由（）实验室研制的。A、CERNB、AT&TC、ARPAD、MicrosoftInternetLab17.网络管理员是Cisco路由器上配置访问控制列表，允许来自只的网络，，和主机。哪个结合是最好的完成任务，当两个ACL语句？（）A、 access-list 10 permit ip  55.255B、 access-list 10 permit ip  55.255C、 access-list 10 permit ip  .255D、 access-list 10 permit ip  .255E、 access-list 10 permit ip  .255F、 access-list 10 permit ip  18.网络管理员不能建立一个telnet会话与指定路由器。失败的原因是什么？（） A、A级5没有设置口令B、该VTY口令丢失C、控制台密码丢失D、一个ACL阻止Telnet访问19.WhichcommandisusedtoloadaconfigurationfromaTFTPserverandmergetheconfigurationintoRAM？（）A、copyrunning-config:TFTP:B、copyTFTP:running-configC、copyTFTP:startup-configD、copystartup-config:TFTP:20.WhichCiscocollaborationproductlinewillreduceTCO.Improvetheuserexperienceandproductivity,andincreasebusinessrelevance?（）A、customercareB、conferencingC、messagingD、telepresenceE、IPcommunications21.DRAGDROP 22.Router NetworkTut is configured as shown below： Given the above configuration， which statement is true？（）A、This device is configured as a PPPoE clientB、This device is configured as a PPPoA clientC、This device is configured as RFC 1483/2684bridgeD、This device is configured an an aggregation router23.Anetworkadministratorneedstoforceahigh-performanceswitchthatislocatedintheMDFtobecometherootbridgeforaredundantpathswitchednetwork.Whatcanbedonetoensurethatthisswitchassumestheroleasrootbridge（）。A、Establishadirectlinkfromtheswitchtoallotherswitchesinthenetwork.B、AssigntheswitchahigherMACaddressthantheotherswitchesinthenetworkhave.C、Configuretheswitchsothatithasalowerprioritythanotherswitchesinthenetwork.D、Configuretheswitchforfull-duplexoperationandconfiguretheotherswitchesforhalf-duplexoperation.E、ConnecttheswitchdirectlytotheMDFrouter,whichwillforcetheswitchtoassumetheroleofrootbridge.24.Cisco provides two enhancements to 802.11 security which protect a WEP key from exploits. Which two technologies provide these security enhancements？ （）A、802.1XB、Cisco Temporal Key Integrity Protocol （CKIP）C、Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling （EAP-FAST）D、Cisco Message Integrity Check （CMIC）E、One-Time Passwords （OTP）F、Advanced Encryption Standard （AES）25.Which of the following statements is correct regarding a hybridcrypto system？（）A、 uses symmetric crypto for keys distributionB、 uses symmetric crypto for proof of originC、 uses symmetric crypto for fast encrypted/decryptionD、 uses asymmetric crypto for message confidentialityE、 uses symmetric crypto to transmit the asymmetric keys that is thenused to encrypt a session26.网络安全中，脆弱性是指网络系统中（）的弱点。27.During which phase of the steps to success methodology for Cisco SMB security solutions would the Network Readiness Assessment be used to assess the readiness