CCNP题库讲解汇编.doc

[题库讲解]CCNP 642-892 V3.95题库分析1 1．In the use of 802.1X access control, which three protocols are allowed through the switch port before authentication takes place? (Choose three.) A. STP B. CDP C. EAP MD5 D. TACACS+ E. EAP-over-LAN F. protocols not filtered by an ACL Answer: ABE解释一下：IEEE 802.1X认证成功之前，客户连接的端口在LAN上只允许传递可扩展的认证协议（EAPOL），CDP,和生成树的STP。只有认证成功后才可以传递正常的流量。2．Which protocol specified by RFC 2281 provides network redundancy for IP networks, ensuring that user traffic immediately and transparently recovers from first-hop failures in network edge devices or access circuits? A. STP B. IRDP C. ICMP D. HSRP Answer: D解释一下：RFC 2281中定义的是HSRP。 3．What will be the effect of applying the VLAN access map configuration on a switch? Router(config)# vlan access-map thor 10 Router(config-access-map)# match ip address net_10 Router(config-access-map)#action forward Router(config-access-map)#exit Router(config)# vlan filter thor vlan-list 12-16 A. All VLAN 12 through 16 IP traffic matching net_10 is forwarded and all other IP packets are dropped. B. IP traffic matching vlan-list 12-16 is forwarded and all other IP packets are dropped. C. IP traffic matching net_10 is dropped and all other IP packets are forwarded to VLANs 12 through 16. D. All VLAN 12 through 16 IP traffic is forwarded, other VLAN IP traffic matching net_10 is dropped. Answer: A解释一下：这是关于VLAN access map 的使用，这是针对vlan-list中的VLAN中的流量进行的过滤，只有在vlan access-map中定义的forward的流量才可以在vlan-list中规定的VLAN中通过。而vlan access-map中也有隐式deny any的语句。所以这个题中VLAN12到16中的IP流量只有匹配了net_10的流量才允许通过，其余的IP流量都被丢弃。4．Refer to the exhibit. The web servers WS_1 and WS_2 need to be accessed by external and internal users. For security reasons, the servers should not communicate with each other, although they are located on the same subnet. The servers do need, however, to communicate with a database server located in the inside network. What configuration will isolate the servers from each other? 4.jpg (19.38 KB) 2007-12-23 15: