CCNP与CCIE Security SCOR思科认证网络工程师题库3

CCNP/CCIESecuritySCOR题库3

QUESTION1

WhichfunctiondoesafabricedgenodeperforminanSD-Accessdeployment?

A.Connectsendpointstothefabricandforwardstheirtraffic.

B.Encapsulatesend-userdatatrafficintoLISP.

C.ConnectstheSD-AccessfabrictoanotherfabricorexternalLayer3networks.

D.Providesreachabilitybetweenbordernodesinthefabricunderlay.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION2

Refertotheexhibit.

Rl#shrun|beginlinecon

linecon0

exectimeout00

privilegelevel15

loggingsynchronous

stopbits1

lineauxo

exectimeout00

privilegelevel15

loggingsynchronous

stopbits1

linevty04

password7045802150C2E

login

linevty515

password7045802150C2E

login

1

end

Rl#shrun|includeaaa|enable

noaaanew-model

Rl#

WhichprivilegelevelisassignedtoVTYusers?

A.1

B.7

C.13

D.15

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION3

WhatisthedifferencebetweenaRIBandaFIB?

A.TheFIBispopulatedbasedonRIBcontent.

B.TheRIBmaintainsaminorimageoftheFIB.

C.TheRIBisusedtomakeIPsourceprefix-basedswitchingdecisions.

D.TheFIBiswhereallIProutinginformationisstored.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION4

WhichrequirementforanAnsible-managednodeistrue?

A.ItmusthaveanSSHserverrunning.

B.ItmustbeaLinuxserveroraCiscodevice.

C.Itmustsupportadhoccommands.

D.ItmusthaveanAnsibleTowerinstalled.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION5

AclientdevicefailstoseetheenterpriseSSID,butotherclientdevicesareconnectedtoit.

Whatisthecauseofthisissue?

A.TheclienthasincorrectcredentialsstoredfortheconfiguredbroadcastSSID.

B.ThehiddenSSIDwasnotmanuallyconfiguredontheclient.

C.ThebroadcastSSIDwasnotmanuallyconfiguredontheclient.

D.TheclienthasincorrectcredentialsstoredfortheconfiguredhiddenSSID.

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION6

WhichtwodescriptionsofFlexConnectmodeforCiscoAPsaretrue?(Choosetwo.)

A.APsthatoperateinFlexConnectmodecannotdetectrogueAPs.

B.Whenconnectedtothecontroller,FlexConnectAPscantunneltrafficbacktothecontroller.

C.FlexConnectmodeisafeaturethatisdesignedtoallowspecifiedCAPWAP-enabledAPstoexclude

themselvesfrommanagingdatatrafficbetweendentsandinfrastructure.

D.FlexConnectmodeisawirelesssolutionforbranchofficeandremoteofficedeployments.

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/wireless/controller/7-

2/configuration/guide/cg/cg_flexconnect.html

QUESTION7

WhichOSPFnetworktypesarecompatibleandallowcommunicationthroughthetwopeeringdevices?

A.point-to-multipointtononbroadcast

B.broadcasttononbroadcast

C.point-to-multipointtobroadcast

D.broadcasttopoint-to-point

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

Reference:/workbooks/ccna/configuring-ospf-network-types

QUESTION8

WhichNGFWmodeblocksflowscrossingthefirewall?

A.tap

B.inline

C.passive

D.inlinetap

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/en/us/support/docs/security/firepower-ngfw/200924-

configuring-firepower-threat-defense-int.html

QUESTION9

WhichstatementaboutroutetargetsistruewhenusingVRF-Lite?

A.Routetargetscontroltheimportandexportofroutesintoacustomerroutingtable.

B.WhenBGPisconfigured,routetargetsaretransmittedasBGPstandardcommunities.

C.Routetargetsallowcustomerstobeassignedoverlappingaddresses.

D.Routetargetsuniquelyidentifythecustomerroutingtable.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION10

HowdoesCiscoTrustSecenablemoreflexibleaccesscontrolsfordynamicnetworkingenvironmentsand

datacenters?

A.usesflexibleNetFlow

B.assignsaVLANtotheendpoint

C.classifiestrafficbasedonadvancedapplicationrecognition

D.classifiestrafficbasedonthecontextualidentityoftheendpointratherthanitsIPaddress

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/dam/en/us/products/collateral/security/identity-services-

engine7at_a_glance_c45-726831.pdf

QUESTION11

Refertotheexhibit.

RlItdebugipospfhello

Rl#debugconditioninterfaceFa.0\1

Condition1Set

RefertotheexhibitWhichstatementabouttheOPSFdebugoutputistrue?

A.TheoutputdisplaysOSPFhellomessageswhichrouterRIhassentorreceivedonintrfaceFaO/1.

B.TheoutputdisplaysOSPFmessageswhichrouterRIhassentorreceivedonallinterfaces.

C.TheoutputdisplaysOSPFmessageswhichrouterRIhassentorreceivedoninterfaceFaO/1.

D.TheoutputdisplaysOSPFhelloandLSACKmessageswhichrouterRIhassentorreceived.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION12

WhichLISPinfrastructuredeviceprovidesconnectivitybetweennon-LISPsitesandLISPsitesbyreceiving

non-LISPtrafficwithaLISPsitedestination?

A.PITR

B.mapresolver

C.mapserver

D.PETR

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/5-

0/LISPmobility/DCI_LISP_Host_Mobility/LISPmobile_2.html

QUESTION13

WhichtwoprotocolsareusedwithYANGdatamodels?(Choosetwo.)

A.TLS

B.RESTCONF

C.SSH

D.NETCONF

E.HTTPS

CorrectAnswer:BD

Section:(none)

Explanation

Explanation/Reference:

QUESTION14

WhichHTTPstatuscodeisthecorrectresponseforarequestwithanincorrectpasswordappliedtoaREST

APIsession?

A.HTTPStatusCode:200

B.HTTPStatusCode:302

C.HTTPStatusCode:401

D.HTTPStatusCode:504

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

Reference:/en-US/docs/Web/HTTP/Status/401

QUESTION15

TheloginmethodisconfiguredontheVTYlinesofarouterwiththeseparameters.

•ThefirstmethodforauthenticationisTACACS

•IfTACACSisunavailable,loginisallowedwithoutanyprovidedcredentialsWhichconfiguration

accomplishesthistask?A.

Rl#shrun|includeaaa

aaanew-model

aaaauthenticationlogintelnetgrouptacacs+none

aaasession-idcommon

Rl#shrun|sectionvty

linevty04

Rl#shrun|includeusername

RI#

Rl#shrun|includeaaa

aaanew-model

aaaauthenticationlogindefaultgrouptacacs+

aaasession-idcommon

Rl#shrun|sectionvty

linevty04

transportinputnone

RI#

Rl#shrun|includeaaa

aaanew-model

aaaauthenticationloginVTYgrouptacacs+none

aaasession-idcommon

Rl#shrun|sectionvty

linevty04

paSSWOrd702050D480809

Rl#shrun|includeusername

RI#

Rl#shrun|includeaaa

aaanew-model

aaaauthenticationlogindefaultgrouptacacs+none

aaasession-idcommon

Rl#shrun|sectionvty

linevty04

paSSWOrd702050D480809

Rl#shrun|includeusername

RI#

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

QUESTION16

WhichstatementaboutmulticastRPsistrue?

A.RPsarerequiredonlywhenusingprotocolindependentmulticastdensemode.

B.RPsarerequiredforprotocolindependentmulticastsparsemodeanddensemode.

C.Bydefault,theRPisneededperiodicallytomaintainsessionswithsourcesandreceivers.

D.Bydefault,theRPisneededonlytostartnewsessionswithsourcesandreceivers.

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

Reference:

https://www.cisco.eom/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/rps.html

QUESTION17

Toincreasetotalthroughputandredundancyonthelinksbetweenthewirelesscontrollerandswitch,the

customerenabledLAGonthewirelesscontroller.WhichEtherChannelmodemustbeconfiguredonthe

switchtoallowtheWLCtoconnect?

A.Active

B.Passive

C.On

D.Auto

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

Reference:/t5/wireless-mobility-documents/lag-link-aggregation/ta-

p/3128669

QUESTION18

WhichfeaturedoesCiscoTrustSecusetoprovidescalable,securecommunicationthroughoutanetwork?

A.securitygrouptagACLassignedtoeachportonaswitch

B.securitygrouptagnumberassignedtoeachuseronaswitch

C.securitygrouptagnumberassignedtoeachportonanetwork

D.securitygrouptagACLassignedtoeachrouteronanetwork

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/dam/en/us/solutions/collateral/borderless-

networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdf

QUESTION19

AnengineerconfiguresaWLANwithfasttransitionenabled.Somelegacyclientsfailtoconnecttothis

WLAN.

Whichfeatureallowsthelegacyclientstoconnectwhilestillallowingotherclientstousefasttransition

basedontheirOUIs?

A.overtheDS

B.802.11k

C.adaptiveR

D.802.11V

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

QUESTION21

Anetworkadministratorisimplementingaroutingconfigurationchangeandenablesroutingdebugsto

trackroutingbehaviorduringthechange.Theloggingoutputontheterminalisinterruptingthecommand

typingprocess.Whichtwoactionscanthenetworkadministratortaketominimizethepossibilityoftyping

commandsincorrectly?(Choosetwo.)

A.Configuretheloggingsynchronousglobalconfigurationcommand.

B.Configuretheloggingsynchronouscommandunderthevty.

C.Increasethenumberoflinesonthescreenusingtheterminallengthcommand.

D.Configuretheloggingdelimiterfeature.

E.PresstheTABkeytoreprintthecommandinanewline.

CorrectAnswer:AB

Section:(none)

Explanation

Explanation/Reference:

QUESTION22

WhichtwopiecesofinformationarenecessarytocomputeSNR?(Choosetwo.)

A.transmitpower

B.noisefloor

C.EIRPD.RSSI

E.antennagain

CorrectAnswer:AB

Section:(none)

Explanation

Explanation/Reference:

Reference:/t5/wireless-mobility-documents/snr-rssi-eirp-and-free-

space-path-loss/ta-p/3128478

QUESTION23

WhichstatementsareusedforerrorhandlinginPython?

A.try/catch

B.catch/release

C.block/rescue

D.try/except

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

QUESTION24

WhataretwobenefitsofvirtualizingtheserverwiththeuseofVMsinadatacenterenvironment?(Choose

two.)

A.reducedrackspace,power,andcoolingrequirements

B.smallerLayer2domain

C.increasedsecurity

D.speedydeployment

E.reducedIPandMACaddressrequirements

CorrectAnswer:AD

Section:(none)

Explanation

Explanation/Reference:

QUESTION25

WhichtwostepsarerequiredforacompleteCiscoDNACenterupgrade?(Choosetwo.)

A.automationbackup

B.systemupdate

C.goldenimageselection

D.proxyconfiguration

E.applicationupdates

CorrectAnswer:AB

Section:(none)

Explanation

Explanation/Reference:

QUESTION26

WhatisabenefitofdatamodelinglanguageslikeYANG?

A.TheycreatemoresecureandefficientSNMPOIDs.

B.Theyprovideastandardizeddatastructure,whichresultsinconfigurationscalabilityandconsistency.

C.Theyenableprogrammerstochangeorwritetheirownapplicationswithinthedeviceoperatingsystem.

D.TheymaketheCLIsimplerandmoreefficient.

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION27

Refertotheexhibit.

NameisBobJohnson

Ageis75

isalive

Favoritefoodsare:

,Cereal

•Mustard

,Onions

WhatistheJSONsyntaxthatisformedfromthedata?

A.{Name:BobJohnson,Age:75,Alive:true,FavoriteFoods:[Cereal,Mustard,Onions]}

B.{"Name"："BobJohnson","Age"：75,"Alive"：true,"FavoriteFoods":["Cereal”

"Mustard","Onions"]}

C,{'Name':lBobJohnson',‘Age':75,'Alive':True,'FavoriteFoods':Cereal'

,Mustard','Onions'}

D.{“Name"："BobJohnson",“Age”：Seventyfive,"Alive":true,"FavoriteFoods'*:["Cereal"

"Mustard","Onions"]}

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION28

Basedonthisinterfaceconfiguration,whatistheexpectedstateofOSPFadjacency?

RI:

interfaceGigabitEthernet0/1

ipaddress52

ipospf1area0

ipospfhello-interval2

ipospfcost1

end

R2:

interfaceGigabitEthernetO/1

ipaddress52

ipospf1area0

ipospfcost500

end

A.2WAY/DROTHERonbothrouters

B.notestablished

C.FULLonbothrouters

D.FULL/BDRonRIandFULL/BDRonR2

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION29

Refertotheexhibit.

GO/OLinklGO/O

GO/1Link2GO/1

SW2

SW2#showspanning-tree

VLAN0001

Spanningtreeenabledprotocolieee

RootIDPriority32769

Address5000.0005.0000

Cost4

Port1(GigabitEthernet0/0)

HelloTime2secMaxAge20secForwardDelay15sec

BridgeIDPriority32769(priority32769sys-id-ext1)

Address5000.0006.0000

HelloTime2secMaxAge20secForwardDelay15sec

AgingTime300sec

InterfaceRoleStsCostPrio.librType

GiO/ORootFWD4128.1P2p

GiO/1AltoBLW432.2P2p

LinklisacopperconnectionandLink2isafiberconnection.Thefiberportmustbetheprimaryportfor

allforwarding.Theoutputoftheshowspanning-treecommandonSW2showsthatthefiberportis

blockedbyspanningtree.Anengineerentersthespanning-treeport-priority32commandonGO/1on

SW2,buttheportremainsblocked.

WhichcommandshouldbeenteredontheportsthatareconnectedtoLink2toresolvetheissue?

A.Enterspanning-treeport-priority4onSW2.

B.Enterspanning-treeport-priority32onSW1.

C.Enterspanning-treeport-priority224onSW1.

D.Enterspanning-treeport-priority64onSW2.

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION30

WhichJSON

syntaxisvalid?

A.{“switch"：“name”：“distl"，“interfaces":["gigl",“gig2”，“gig3”]}

B.{/"switch/":{/"name/"：“distl"，/“interfaces/"：[“gigl”，“gig2"，ugig3"]}}

C.{“switch"：{"name":"distr,“interfaces"：["gigV,“gig2”，“gig3”]}}

D.{'switch':('name':'distl','interfaces':['gigl',lgig2',lgig3'])}

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION31

WhataretwocommonsourcesofinterferenceforWi-Finetworks?(Choosetwo.)

A.LEDlights

B.radar

C.firealarm

D.conventionaloven

E.rogueAP

CorrectAnswer:AE

Section:(none)

Explanation

Explanation/Reference:

QUESTION32

WhenusingTLSforsyslog,whichconfigurationallowsforsecureandreliabletransportationofmessages

toitsdefaultport?

Alogginghostvrfmgmttransporttcpport514

B.logginghostvrfmgmttransportudpport514

C.logginghostvrfmgmttransporttcpport6514

D.logginghostvrfmgmttransportudpport6514

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

Reference:/html/rfc5425

QUESTION33

WhichbehaviorcanbeexpectedwhentheHSRPversionischangedfrom1to2?

A.Nochangesoccurbecausethestandbyrouterisupgradedbeforetheactiverouter.

B.Nochangesoccurbecauseversion1and2usethesamevirtualMACOUI.

C.EachHSRPgroupreinitializesbecausethevirtualMACaddresshaschanged.

D.EachHSRPgroupreinitializesbecausethemulticastaddresshaschanged.

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

QUESTION34

WhichprotocoldoesRESTAPIrelyontosecurethecommunicationchannel?

A.HTTP

B.SSH

C.HTTPS

D.TCP

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

QUESTION35

Refertothisoutput.

RI#*Feb1437:09:53,129:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceGigabitEthernetO/1,

changedstatetoupWhatistheloggingseveritylevel?

A.notification

B.emergency

C.critical

D.alert

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION36

Refertotheexhibit.

Rl#showipbgp

BGPtableversionis32,localrouterIDis

Statuscodes:Ssuppressed,ddamped,hhistory,*valid,>best,i-internal,

rRIB-failure,SStale,mmultipath,bbackup-path,fRT-Filter,

xbest-extemaLaadditional-path,cRIB-compressed?

Origincodes:i-IGP?e-EGP,?-incomplete

RPKIvalidationcodes:Vvalid.Iinvalid,NNotfound

NetworkNextHopMetricLocPrfWeightPath

*880J064517i

*48080064516i

*006451564515i

*>3276864513i

*8006451464514i

WhichIPaddressbecomestheactivenexthopfor/24whenfails?

A.192,168.101.10

B.192,168.101.14

C.192,168.101.6

D.192,168.101.18

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

QUESTION37

WhichPAgPmodecombinationpreventsanEtherChannelfromforming?

A.auto/desirable

B.desirable/desirable

C.desirable/auto

D.auto/auto

CorrectAnswer:D

Section:(none)

Explanation

Explanation/Reference:

Reference:/cisco-certified-network-associate-ccna/etherchannel-pagp-

and-lacp-modes.php

QUESTION38

IfaVRRPmasterrouterfails,whichrouterisselectedasthenewmasterrouter?

A.routerwiththelowestpriority

B.routerwiththehighestpriority

C.routerwiththehighestloopbackaddress

D.routerwiththelowestloopbackaddress

CorrectAnswer:B

Section:(none)

Explanation

Explanation/Reference:

QUESTION39

WhichQoScomponentaltersapackettochangethewaythattrafficistreatedinthenetwork?

A.policing

B.classification

C.marking

D.shaping

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

QUESTION40

Refertotheexhibit.

AssumingthatRIisaCErouter,whichVRFisassignedtoGi0/0onRI?

A.defaultVRF

B.VRFVPN_A

C.VRFVPN_B

D.managementVRF

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION41

Refertotheexhibit

GeneralSecurityQoSAdvancedPolicyMapping

Layer2Layer3AAAServers

FastTransition

FastTransition口

ProtectedManagementFrame

PMFSsabled▼

WPA+WPA2Parameters

WPAPolicyB

WPA2Policy-AES0

AuthenticationKeyManagement

802.1XEnable

CCKMEnable

PSK区Enable

FT802.IXEnable

FTPSK1Enable

PSKFormatASCII▼

BasedontheconfigurationinthisWLANsecuritysetting,whichmethodcanaclientusetoauthenticateto

thenetwork?

A.textstring

B.usernameandpassword

C.RADIUStoken

D.certificate

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION42

WhichtwomechanismsareavailabletosecureNTP?(Choosetwo.)

A.IPsec

B.IPprefixlist-based

C.encryptedauthentication

D.TACACS-basedauthentication

E.IPaccesslist-based

CorrectAnswer:CE

Section:(none)

Explanation

Explanation/Reference:

Reference:/c/dam/en/us/td/docs/ios-xml/ios/bsm/configuration/xe-

3se/3650/bsm-xe-3se-3650-book.html

QUESTION43

WhichtechnologyprovidesasecurecommunicationchannelforalltrafficatLayer2oftheOSImodel?

A.SSL

B.CiscoTrustSec

C.MACsec

D.IPsec

CorrectAnswer:C

Section:(none)

Explanation

Explanation/Reference:

QUESTION44

Refertotheexhibit.

ExtendedIPaccesslistEGRESS

10permitip.55any

i

<OutputOmitted>

i

interfaceGigabitEthemet0/0

ipaddress25

ipaccess-groupEGRESSout

duplexauto

speedauto

media-typeij45

Anengineermustblockalltrafficfromaroutertoitsdirectlyconnectedsubnet/24.The

engineerappliesaccesscontrollistEGRESSintheoutbounddirectionontheGigabitEthernetO/Ointerface

oftherouter.However,theroutercanstillpinghostsonthe/24subnet.

Whichexplanationofthisbehavioristrue?

A.Accesscontrolliststhatareappliedoutboundtoarouterinterfacedonotaffecttrafficthatissourced

fromtherouter.

B.Afteranaccesscontrollistisappliedtoaninterface,thatinterfacemustbeshutandnoshutforthe

accesscontrollisttotakeeffect.

C.OnlystandardaccesscontrollistscanblocktrafficfromasourceIPaddress.

D.Theaccesscontrollistmustcontainanexplicitdenytoblocktrafficfromtherouter.

CorrectAnswer:A

Section:(none)

Explanation

Explanation/Reference:

QUESTION45

WhichtwomethodsareusedbyanAPthatistryingtodiscoverawirelessLANcontroller?(Choosetwo.)

A.CiscoDiscoveryProtocolneighbor

B.queryingotherAPs

C.DHCPOption43

D.broadcastingonthelocalsubn