A system administrator wants to configure 802.1X on an Ethernet switch to enable access to specific parts of the network based on group memberships.How can the administrator accomplish this goal?（）A、Configure roles based on departments and assign access b

第1题：

第2题：

Why would a network administrator configure port security on a switch?（）

• A、to prevent unauthorized Telnet access to a switch port
• B、to limit the number of Layer 2 broadcasts on a particular switch port
• C、to prevent unauthorized hosts from accessing the LAN
• D、to protect the IP and MAC address of the switch and associated ports
• E、to block unauthorized access to the switch management interfaces over common TCP ports

第3题：

A network administrator wants to control which user hosts can access the network based on their MAC address. What will prevent workstations with unauthorized MAC addresses from connecting to the network through a switch?（）

• A、BPDU
• B、Port security
• C、RSTP
• D、STP
• E、VTP
• F、Blocking mode

第4题：

When implementing 802.1X on Teleworker routers and using separate DHCP address pools for Teleworker and Home-user devices, traffic between devices can be restricted. How can you best accomplish this?（）

• A、Access Lists between the inside interface and loopback interface
• B、Context Based Access Control
• C、Dynamic Host Configuration Protocol
• D、Network Address translation

第5题：

An administrator replaces the network card in a web server. After replacing the network card some users can access the server but others cannot.  Which of the following is the FIRST thing the administrator should check？（）

• A、 Default gateway
• B、 The ports on the switch
• C、 Port security on the servers switch port
• D、 Ethernet cable

第6题：

A system administrator wants to control the HMC from their workstation. Microsoft Windows 2000 is running and the HMC graphical user interface is being used remotely. Which of the following actions will accomplish this task?（）

• A、Use any Windows 2000 to graphically access the HMC
• B、Load, install, and configure WebSM on the workstation
• C、Telnet to the HMC using Exceed or a GUI emulator product from the workstation
• D、Load, install, and configure OpenSSH or SSH on the workstation and access the HMC through the GUI interface

第7题：

Your company has Active Directory Certificate Services （AD CS） and Network Access Protection （NAP）  deployed on the network. You need to ensure that NAP policies are enforced on portable computers taht  use a wireless connection to access the network. What should you do？（）

• A、 Configure all access points to use 802.1X authentication
• B、 Configure all protable computers to use MS-CHAP v2 authentication
• C、 Use the Group Policy Management Console to access the wireless group policy settings， and enable the Prevent connections to ad-hoc networks option.
• D、 Use the Group Policy Management Console to access the wireless group policy settings， and disable the Prevent connections to infrastructure networks option.

第8题：

You are the administrator of a Windows 2000 network. You need to store secured files for your company’s Accounting and Legal departments on a Windows 2000 Professional computer. You want to accomplish the following goals：  • Enable users in both departments to access their own files from the network  • Enable users in the Accounting department to view the Legal department’s documents  • Prevent users in the Legal department from being able to view the Accounting department’s    documents  • Enable managers within the company to access and modify both the Accounting and the Legal   department’s files You take the following actions：   • Create two shared folders named Accounting and Legal  • Create three groups named Accounting， Legal， and Management  • Allow the Accounting group Modify permission on the Accounting folder  • Allow the Accounting group Read permissions on the Legal folders.  • Allow the Management group Modify permission on both the Accounting and Legal folders.   Which result or results do these actions produce？（）

• A、Users in both departments can access to their own files from the network.
• B、Users in the Accounting department can view the Legal department’s documents.
• C、Users in the Legal department cannot view the Accounting department’s documents.
• D、Company managers can access and modify both departments’ files.

第9题：

第10题：

第11题：

第12题：

第13题：

You are the network administrator of a small Layer 2 network with 50 users. Lately， users have been complaining that the network is very slow. While troubleshooting， you notice that the CAM table of your switch is full， although it supports up to 12，000 MAC addresses. How can you solve this issue and prevent it from happening in the future？（）

• A、Upgrade the switches
• B、Configure BPDU guard
• C、Configure VLAN access lists
• D、Configure port security
• E、Configure Dynamic ARP inspection

第14题：

A network administrator needs to configure port security on a switch.which two statements are true？（）

• A、The network administrator can apply port security to dynamic access ports
• B、The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
• C、The sticky learning feature allows the addition of dynamically learned addresses to the runningconfiguration.
• D、The network administrator can apply port security to EtherChannels.
• E、When dynamic mac address learning is enabled on an interface，the switch can learn new addresses，up to the maximum defined.

第15题：

The network administrator wants to enable an EtherChannel between two switches in "on" mode. The administrator connects the cables and enables the interfaces， but while configuring the EtherChannel in the first switch，a spanning-tree loop was detected. Which two of these procedures can avoid this problem？（）

• A、Configure the EtherChannel as "desirable" first.
• B、Assign all interfaces to the same VLAN.
• C、Disable PortFast on the interfaces in the EtherChannels.
• D、Disable all interfaces first.
• E、Fast Ethernet and Gigabit Ethernet ports cannot be assigned to the same EtherChannel.
• F、Fix cabling problems.

第16题：

You work as a network administrator at， You have been asked to configure 802.1x port-based authentication. You notice that the client workstation is not compatible with 802.1x port-based authentication.  What supported authentication server should be chosen？（）

• A、TACACS with LEAP extensions
• B、RADIUS with EAP extensions
• C、TACACS+
• D、LDAP

第17题：

An administrator replaces the network card in a web server. After replacing the network card some users can access the server but others cannot. Which of the following is the FIRST thing the administrator should check?（）

• A、Default gateway
• B、The ports on the switch
• C、Port security on the server's switch port
• D、Ethernet cable

第18题：

You have three classes of users on your network: employee, contractor, and IT administrator. You configure the Junos Pulse Access Control Service to assign roles to each user class and require that a specific wireless SSID be preconfigured for the Odyssey Access Client based on the role. Which configuration method should you use to satisfy this scenario?（）

• A、Create a "Settings Update file" in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".
• B、Configure a wired adapter and assign the required SSID under "User Roles" > "Agent" > "Odyssey Settings".
• C、Create a script in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".
• D、Create a "Preconfiguration file" in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".

第19题：

Your company has Active Directory Certificate Services （AD CS） and Network Access Protection （NAP） deployed on the network.You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network.  What should you do？（）

• A、Configure all access points to use 802.1X authentication.
• B、Configure all portable computers to use MS-CHAP v2 authentication.
• C、Use the Group Policy Management Console to access the wireless Group Policy settings， and enable the Prevent connections to ad-hoc networks option.
• D、Use the Group Policy Management Console to access the wireless Group Policy settings， and disable the Prevent connections to infrastructure networks option.

第20题：

Your company has active directory certificate services (AD CS) and network access protection (NAP) deployed on the network. You need to ensure that NAP policies are enforced on portable computers that use a wireless connection to access the network. What should you do?（）

• A、Configure all access points to use 802.1x authentication.
• B、Configure all protable computers to use MS-CHAP v2 authentication.
• C、Use the group policy management console to access the wireless group policy settings, and enable the prevent connections to ad-hoc network option.
• D、Use the group policy management console to access the wireless group policy settings, and disable the prevent connections to infrastructure networks option.

第21题：

第22题：

第23题：