問題1
The following information about the AH ( the Authentication Header , Authentication Header ) and the ESP ( Encapsulating Securlt Paload , the Encapsulating Security Payload ) described right there ______ .( Choose one or more )
The following information about the AH ( the Authentication Header , Authentication Header ) and the ESP ( Encapsulating Securlt Paload , the Encapsulating Security Payload ) described right there ______ .( Choose one or more )
正確答案: A,B,D
問題2
The processing steps of the rules configured in CAR for packets are in order from front to back:
The processing steps of the rules configured in CAR for packets are in order from front to back:
正確答案: D
問題3
The four routers R1 , R2 , R3, and R4 are connected in sequence, and Loopback0 interfaces are created on R1 and R4 , and the interface addresses are 1.1.1.1 and 4.4.4.4 respectively.The four devices are configured with static routing protocols to ensure Loopback0 of R1 and R4 .The address is reachable, and a GRE Tunnel is established between R1 and R4 .Check the tunnel interface information on R1 as follows:
[R1]displa interface Tunnel O
Tunnelo current state: UP
Tunnelo current statle: UP
Line protocol current state: UP
Description: Tunnel 0 Interface
The Maximum transmit Unit is 1476
Internet Addess is 10.1.1 .1/30 Primar.
Encapsulation isTUNNEL aggregation ID not set
Tunnel source l.1.1.1 destination 4.4.4.4
Tunnel keeepalive disable
Tunnel protocol/transport GRE/IP.
GRE key disable
Checksumming of GRE packets disabled
Last 300 seconds input:.2 btes/secl 0 packet/sec.
Last 300 seconds output:..2 bytes/sec , 0 packets/sec.
15packets input 840bytes.
0 input error
27packets output , 1248btes
0 0utput error
At this time, if the interrupt R2 and R3 link between, the following statement is correct ____
The four routers R1 , R2 , R3, and R4 are connected in sequence, and Loopback0 interfaces are created on R1 and R4 , and the interface addresses are 1.1.1.1 and 4.4.4.4 respectively.The four devices are configured with static routing protocols to ensure Loopback0 of R1 and R4 .The address is reachable, and a GRE Tunnel is established between R1 and R4 .Check the tunnel interface information on R1 as follows:
[R1]displa interface Tunnel O
Tunnelo current state: UP
Tunnelo current statle: UP
Line protocol current state: UP
Description: Tunnel 0 Interface
The Maximum transmit Unit is 1476
Internet Addess is 10.1.1 .1/30 Primar.
Encapsulation isTUNNEL aggregation ID not set
Tunnel source l.1.1.1 destination 4.4.4.4
Tunnel keeepalive disable
Tunnel protocol/transport GRE/IP.
GRE key disable
Checksumming of GRE packets disabled
Last 300 seconds input:.2 btes/secl 0 packet/sec.
Last 300 seconds output:..2 bytes/sec , 0 packets/sec.
15packets input 840bytes.
0 input error
27packets output , 1248btes
0 0utput error
At this time, if the interrupt R2 and R3 link between, the following statement is correct ____
正確答案: A,B,D
問題4
In the MSR router configuration commands as follows:
qos pql 1 queue top queue-length 1024
qos pql 1 inbound-interface GigabitEthernet0/0 queue top
qos pql 1 protocol ip tcp 1000 queue top
qos pql 1 protocol ip tcp 1001 queue middle
qos pql 1 protocol ip tcp 1002 queue normal
qos pql 1 protocol ip tcp 1003 queue bottom
#
interface GigabitEthernet0/1
port link-mode route
ip address 192.168.1.1 255.255.255.0
qos lr outbound cir 10000 cbs 625000 ebs 0
qos pq pql 1
From the interface G0 / 0 into the only access port G0 / 1 forwarding traffic directed include the destination port, respectively 1000 , 1001 , 1002 and 1003 of the TCP packet flow rates of 5Mbps , the other port no flow, then the following statements is correct is ______ ( Choose one or more )
In the MSR router configuration commands as follows:
qos pql 1 queue top queue-length 1024
qos pql 1 inbound-interface GigabitEthernet0/0 queue top
qos pql 1 protocol ip tcp 1000 queue top
qos pql 1 protocol ip tcp 1001 queue middle
qos pql 1 protocol ip tcp 1002 queue normal
qos pql 1 protocol ip tcp 1003 queue bottom
#
interface GigabitEthernet0/1
port link-mode route
ip address 192.168.1.1 255.255.255.0
qos lr outbound cir 10000 cbs 625000 ebs 0
qos pq pql 1
From the interface G0 / 0 into the only access port G0 / 1 forwarding traffic directed include the destination port, respectively 1000 , 1001 , 1002 and 1003 of the TCP packet flow rates of 5Mbps , the other port no flow, then the following statements is correct is ______ ( Choose one or more )
正確答案: B,E
問題5
The following commands are configured on the MSR router:
acl number 3000
rule o permit ip source 100.0.10
acl number 3002
rule o permit ip source 100.0.0.0.0.0.0.255
interface GigabitEthemeto/1
port link -mode-route
jp.address 200.0.0.1255.255.255.0
qos gts acl 3002 cir 200 cbs 12500 ebs o queue-length50
qos gts acl 3000cir 100 cbs 6250 ebs o queue-length50
Then when the port G0/1 forwards packets with the source IP address of 100.0.0.1 in the outbound direction , which of the following statements is correct ( choose one or more )
The following commands are configured on the MSR router:
acl number 3000
rule o permit ip source 100.0.10
acl number 3002
rule o permit ip source 100.0.0.0.0.0.0.255
interface GigabitEthemeto/1
port link -mode-route
jp.address 200.0.0.1255.255.255.0
qos gts acl 3002 cir 200 cbs 12500 ebs o queue-length50
qos gts acl 3000cir 100 cbs 6250 ebs o queue-length50
Then when the port G0/1 forwards packets with the source IP address of 100.0.0.1 in the outbound direction , which of the following statements is correct ( choose one or more )
正確答案: B,C,F
問題6
The following statement about RED ( Random Early Detection ) is incorrect.
The following statement about RED ( Random Early Detection ) is incorrect.
正確答案: B,C,E
問題7
Which of the following is correct about the encryption algorithm?
Which of the following is correct about the encryption algorithm?
正確答案: A,B,C
問題8
Among the control messages defined by the MPCP protocol, the one sent by the ONU is
Among the control messages defined by the MPCP protocol, the one sent by the ONU is
正確答案: B,D,E
問題9
As shown in the figure, the configurations of the two security gateways are:
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simp le 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.255.255.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA] interface Serial 0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1]] ipsec polic 1
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.3.1.0 0.255.255.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.3.1.1 255.255.255.0
[RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1] ipsec polic 1
This shows that ______ .
As shown in the figure, the configurations of the two security gateways are:
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simp le 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.255.255.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA] interface Serial 0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1]] ipsec polic 1
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.3.1.0 0.255.255.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.3.1.1 255.255.255.0
[RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1] ipsec polic 1
This shows that ______ .
正確答案: C