Which two are uses of NAT？（）A、enabling network migrationsB、conserving public IP addressesC、allowing stateful packet inspectionD、preventing unauthorized connections from outside the network

第1题：

第2题：

Which two statements about static NAT translations are true？（）

• A、They are always present in the NAT table.
• B、They allow connection to be initiated from the outside.
• C、They can be configured with access lists， to allow two or more connections to be initiated from theoutside.
• D、They require no inside or outside interface markings because addresses are statically defined.

正确答案:A,B

第3题：

Which statements describes the remote sites in a Cisco Single-Site Secure Network Foundation solution with remote teleworkers？（）

• A、They are separate from the central site and use NAT to route through the Internet to the Central Site
• B、They are part of the VLANs at the Central Site； they are in the same subnets
• C、They use public IP Addresses that are routable through the Internet
• D、They are in separate subnets but are part of the private address space of the network

正确答案:D

第4题：

Which two are correct functions of the Cisco Anomaly Guard and Detector for preventing DDOS attacks？ （）

• A、 uses Netflow data for anomaly detections
• B、 builds baseline profilesof normal operating conditions， enablingrapid identification of unusual activity that indicates an attack
• C、 accept events inputs from different network devicesvia syslog， SDEE and SNMP
• D、 dynamic diversion redirects and cleans only traffic destined for targeted devices， allowing unaffectedtraffic toflow freely and ensuring business continuity
• E、 pushes ACLs to network devices to only block the malicious traffic
• F、 using topology and configuration awareness， events from different devices are correlatedand attacks mitgitations are performed at the optimal location

正确答案:B,D

第5题：

What are two uses of NAT？（）

• A、conserving public IP addresses
• B、allowing stateful packet inspection
• C、preventing unauthorized connections from outside the network
• D、allowing networks with overlapping private address space to communicate

正确答案:A,D

第6题：

Which of these statements is true of clientless end-user devices？（）

• A、They do not receive unique IP addresses
• B、RADIUS or LDAP is required in order to assign IP addresses
• C、They are assigned addresses from the internal DHCP pool
• D、Their traffic appears to originate from the originating host network

正确答案:A

第7题：

Physical and logical network diagrams are used for which of the following configuration management goals?（）

• A、Track DHCP distribution
• B、Compare MAC and IP addresses
• C、Document Internet access history
• D、Identity network devices

正确答案:D

第8题：

Which three functions are provided by the Junos OS for security platforms?（）(Choose three.)

• A、VPN establishment
• B、stateful ARP lookups
• C、Dynamic ARP inspection
• D、Network Address Translation
• E、inspection of packets at higher levels (Layer 4 and above)

正确答案:A,D,E

第9题：

You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a network address translation (NAT) router. The server has two network adapters and provides Internet access for the network.You need to prevent traffic on port 21 from being sent to the Internet. All other outbound traffic must be allowed.What should you do?（） 

• A、On the network adapter that is connected to the LAN, enable TCP/IP filtering. 
• B、On the network adapter that is connected to the Internet, enable TCP/IP filtering. 
• C、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the Services and Ports tab, and define a new service. 
• D、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the NAT/Basic Firewall tab, and define a new static packet filter.

正确答案:D

第10题：

第11题：

第12题：

第13题：

Which three functions are provided by JUNOS Software for security platforms？（）

• A、VPN establishment
• B、stateful ARP lookups
• C、Dynamic ARP inspection
• D、Network Address Translation
• E、inspection of packets at higher levels （Layer 4 and above）

正确答案:A,D,E

第14题：

Which two QoS classification and marking statements are true？ （）

• A、 In a Frame Relay network， delay sensitive traffic is tagged with the discard eligible （DE） bit.
• B、 In an MPLS network， the three most significant bits of the DSCP or the IP precedence of the IP packet are copied into the MPLS EXP field.
• C、 In an MPLS network， the MPLS EXP bits are used to identify up to 16 CoS values.
• D、 The differentiated services code point （DSCP） field consists of the first three bits of the IP precedence field in the header of an IP packet.
• E、 The 802.1Q standard uses a three bit field referred to as the user priority bits （PRI） to mark packets as belonging to a specific CoS.

正确答案:B,E

第15题：

Which two QoS classification and marking statements are true？（）

• A、 In a Frame Relay network， delay sensitive traffic is tagged with the discard eligible （DE） bit.
• B、 In an MPLS network， the three most significant bits of the DSCP or the IP precedence of the IP packet are copied into the MPLS EXP field
• C、 In an MPLS network， the MPLS EXP bits are used to identify up to 16 CoS values.
• D、 The differentiated services code point （DSCP） field consists of the first three bits of the IP precedence field in the header of an IP packet.
• E、 The 802.10 standard uses a three bitfield referred to as the user priority bits （PRI） to mark packets as belonging to a specific CoS.

正确答案:B,E

第16题：

A traditional router is better suited than a firewall device for which function？（）

• A、VPN establishment
• B、packet-based forwarding
• C、stateful packet processing
• D、Network Address Translation

正确答案:B

第17题：

Which two statements about static NAT translations are true？（）

• A、They are always present in the NATt able.
• B、They allow connection to be initiated from the outside.
• C、They can be configured with access lists，to allow two or more connections to be initiated from the outside.
• D、They require no inside or outside interface markings because addresses are statically defined.

正确答案:A,B

第18题：

Which of the following network appliances can BEST be described as allowing multiple servers toshare requests for a website through the same public IP address?（）

• A、VPN concentrator
• B、Content filter
• C、Load balancer
• D、Proxy server

正确答案:C

第19题：

Which of the following network devices uses NAT to convert private IP addresses into public IPaddresses?（）

• A、NAS
• B、Firewall
• C、Hub
• D、Bridge

正确答案:B

第20题：

Your network contains a server named Server1 that has the Routing role service installed. Server1 has two network connections. One network connection connects to the internal network. The other network connection connects to the Internet.All network connections connected to the internal network use private IP addresses. You install a Web server named Web1. Web1 hosts a secured Web site that only allows connections over TCP port 8281. Web1 is connected to the internal network.You need to ensure that the secure Web site can be accessed from the Internet.What should you do from the Routing and Remote Access console？（）

• A、Configure Routing Information Protocol (RIP), and then activate authentication on the RIP interface.
• B、Configure Routing Information Protocol (RIP), and then configure the incoming packet protocol settings on the RIP interface.
• C、Configure Network Address Translation (NAT), and then add a new service to the NAT interface.
• D、Configure Network Address Translation (NAT), and then enable the Secure Web Server (HTTPS) service on the NAT interface.

正确答案:C

第21题：

第22题：

第23题：