单选题For security reasons, the network administrator needs to prevent pings into the corporate networks from hosts outside the internetwork. Which protocol should be blocked with access control lists（）。A IPB ICMPC TCPD UDP

第1题：

第2题：

What are two reasons that a network administrator would use access lists (Choose two.)（）。

• A、to control vty access into a router
• B、to control broadcast traffic through a router
• C、to filter traffic as it passes through a router
• D、to filter traffic that originates from the router
• E、to replace passwords as a line of defense against security incursions

第3题：

Which network technology addresses these customer business needs: shrinking budgets and IT staffs, more complex networks, and an increased need for network security?（）

• A、Optical network
• B、Storage-area network (SAN)
• C、Content delivery network (CDN)
• D、Network management

第4题：

Refer to the exhibit. A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.Which two of these changes are necessary for SwitchA to meet the requirements? （）

• A、Port security needs to be globally enabled.
• B、Port security needs to be enabled on the interface.
• C、Port security needs to be configured to shut down the interface in the event of a violation.
• D、Port security needs to be configured to allow only one learned MAC address.
• E、Port security interface counters need to be cleared before using the show command.
• F、The port security configuration needs to be saved to NVRAM before it can become active.

第5题：

Which network technology addresses these customer business needs: shrinking budgets and IT staffs, more complex networks, and an increased need for network security?（）

• A、Optical network
• B、Network management
• C、Storage-area network (SAN)
• D、Content delivery network (CDN)

第6题：

An administrator replaces the network card in a web server. After replacing the network card some users can access the server but others cannot.  Which of the following is the FIRST thing the administrator should check？（）

• A、 Default gateway
• B、 The ports on the switch
• C、 Port security on the servers switch port
• D、 Ethernet cable

第7题：

An administrator needs to configure a server to restrict mail traffic to an application server for security reasons.  Which of the following techniques can be used to manage this？（）

• A、 PAT
• B、 ACLs
• C、 Subnet masking
• D、 Port blocking

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

A user complains that the network printer is not printing.  The system administrator knows there is a print queue for the network printer and needs to check on the queue.  Which command is run?（）

• A、 netstat 
• B、 lpstat 
• C、 telinit 
• D、 prtconf 

第14题：

A network administrator needs to configure port security on a switch.which two statements are true？（）

• A、The network administrator can apply port security to dynamic access ports
• B、The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
• C、The sticky learning feature allows the addition of dynamically learned addresses to the runningconfiguration.
• D、The network administrator can apply port security to EtherChannels.
• E、When dynamic mac address learning is enabled on an interface，the switch can learn new addresses，up to the maximum defined.

第15题：

A network administrator needs to configure port security on a switch.which two statements are true?（）

• A、The network administrator can apply port security to dynamic access ports
• B、The network administrator can configure static secure or sticky secure mac addresses in the voice vlan.
• C、The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
• D、The network administrator can apply port security to EtherChannels.
• E、When dynamic mac address learning is enabled on an interface,the switch can learn new addresses,up to the maximum defined.

第16题：

What are two reasons that a network administrator would use access lists? (Choose two.) （）。

• A、to control vty access into a router  
• B、to control broadcast traffic through a router  
• C、to filter traffic as it passes through a router  
• D、to filter traffic that originates from the router  
• E、to replace passwords as a line of defense against security incursions 

第17题：

There are many reasons why customers lack sufficient security measures on the network. Which two reasons for insufficient security are typical of the customers today?（）

• A、the use of hosted email services eliminating the need for local security
• B、the perceived costs of security solutions
• C、the lack of risk analysis
• D、the lack of threats to their network
• E、the belief that free security tools are sufficient
• F、the desire to avoid unnecessary technologies

第18题：

An administrator replaces the network card in a web server. After replacing the network card some users can access the server but others cannot. Which of the following is the FIRST thing the administrator should check?（）

• A、Default gateway
• B、The ports on the switch
• C、Port security on the server's switch port
• D、Ethernet cable

第19题：

A System p administrator needs to set the default password length for all users to six characters.  Which of the following files needs to be edited to accomplish this （）

• A、/etc/security/limits
• B、/etc/security/mkuser.sys
• C、/etc/security/priv
• D、/etc/security/user

第20题：

第21题：

第22题：

第23题：

第24题：