CISCOCCNA网络工程师题库
培训大讲堂官方YY 频道：3660m
CA题库
考试代号：640-802
考试时间：英文110+30=140分钟
通过分数：825
题库版本：V104.4
鸿鹄论坛招募CA、CP答疑讲师
答疑地点：鸿鹄官方YY频道3660
鸿鹄大讲堂：bbs.hh010./thread-46172-1-1.html
CA题库战报交流QQ群：144288127 （500人超级群）
CA题库战报交流区：bbs.hh010./forum-261-1.html
1000 G视频教程免费下载：bbs.hh010./forum-228-1.html
CA（640-802）题库V104.4
CA（640-802）题库V104.4（情人节版）
CA 题库战报500人超级QQ群144288127
V104系列是官方的终结版本，以后不会再出V105 V106 V108等等
CA 最新题库/最新战报发布区：bbs.hh010./forum-261-1.html
下载官方正版题库、看最新考试战报，请随时关注鸿鹄论坛bbs.hh010.
CA考试报名1900，详情请联系鸿鹄全国区十七名客服QQ 71202306
========================================
更新内容：
V104.1修正V104中错误题目，确定经典争议题目答案；
V104.2增加拖图题并可完美模拟考试，VCE题库增加中文注释；
V104.3针对思科CA考试变题，更新考试新增题目93Q,更新V104.2实验题；
V104.4增加全文中文注释，汇总V104.3九次更新，删除部分旧题目，为目前最新官方正版题库；
2011.8.1 增加每日新题，修订部分错误。
2012.2.14 情人节版
增加5道新题，分别是519、520、521、522、523题
修改176题、375题、443题、482题答案错误
修改59题、88题、453题、107题、270题注释错误
增加个别疑难拖图题注释，优化实验题
=============================================
QUESTION 1
When you are logged into a switch, which prompt indicates that you are in privileged mode? (当您登录到交换机，哪种提示表明你在特权模式？)
A. %
B.
C. >
D. $
E. #
Answer: E
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
特权模式就是#提示符
QUESTION 2
Which mand shows system hardware and software version information?
(哪些命令显示系统硬件和软件的版本信息？)
A. show configuration
B. show environment
C. show inventory
D. show platform
E. show version
Answer: E
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
查看系统的软件和硬件信息使用的命令是show version
QUESTION 3
Cisco Catalyst switches CA T1 and CAT2 have a connection between them using ports FA0/13. An 802. 1Qtrunk is configured between the two switches. On CAT1, VLAN 10 is chosen as native, but on CA T2 thenative VLAN is not specified.What will happen in this scenario?
(思科Catalyst 交换机CAT1 和CAT2 有它们之间的连接使用端口FA0/13。两个交换机之间用802.1Q中继配置，CAT1做为VLAN10的主机，但在CAT2 上的本地VLAN 未指定。在这种情况下会发生什么？)
A. 802.1Q giants frames could saturate the link.
B. VLAN 10 on CAT1 and VLAN 1 on CA T2 will send untagged frames.
C. A native VLAN mismatch error message will appear.
D. VLAN 10 on CA T1 and VLAN 1 on CA T2 will send tagged frames.
Answer: C
Section: Chapter 10: VLAN
Explanation/Reference:
如果两边native不匹配的话.switch将报native不匹配的日志信息
QUESTION 4
Which mand would correctly configure a serial port on a router with the last usable host address in the192.216.32.32/29 subnet?
（哪个命令正确地将最后的可用主机地址，192.216.32.32/29 子网的路由器上配置的串行端口？）
A. Router(config-if)# ip address 192.216.32.38 255.255.255.240
B. Router(config-if)# ip address 192.216.32.39 255.255.255.224
C. Router(config-if)# ip address 192.216.32.63 255.255.255.248
D. Router(config-if)# ip address 192.216.32.39 255.255.255.248
E. Router(config-if)# ip address 192.216.32.63 255.255.255.248
F. Router(config-if)# ip address 192.216.32.38 255.255.255.248
Answer: F
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
192.216.32.32/29它的块大小为8掩码为255.255.255.248地址X围为192.216.32.32-39 QUESTION 5
The network default gateway applying to a host by DHCP is 192.168.5.33/28. Which option is the valid IPaddress of this host?(应用到由DHCP 主机的网络默认网关是192.168.5.33\/28。哪个选项是有效的主机IP 地址？)
A. 192.168.5.55
B. 192.168.5.47
C. 192.168.5.40
D. 192.168.5.32
E. 192.168.5.14
Answer: C
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM
192.168.5.33/28所在网段的X围是192.168.5.32--192.168.5.47/28
A：超出X围
B：广播地址
C：正确
D：网络号
E：超出X围
QUESTION 6
Which two addresses can be assigned to a host with a subnet mask of 255.255.254.0? (Choose two.){哪两个地址可以分配给与子网掩码255.255.254.0 的主机？}
A. 113.10.4.0
B. 186.54.3.0
C. 175.33.3.255
D. 26.35.2.255
E. 17.35.36.0
Answer: BD
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM
A：网络号
B/D：正确
C：广播地址
E：网络号
QUESTION 7
The network administrator has asked you to check the status of the workstation's IP stack by pinging theloopback address. Which address would you ping to perform this task?
{网络管理员已要求您通过ping 环回地址检查工作站的IP 堆栈的状态。您要执行此任务将ping 哪个地址？}
A. 10.1.1.1
B. 127.0.0.1
C. 192.168.0.1
D. 239.1.1.1
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：使用ping来检测主机的IP栈。
ping 127.0.0.1实现。
QUESTION 8
Workstation A has been assigned an IP address of 192.0.2.24/28. Workstation B has been assigned an IPaddress of 192.0.2.100/28. The two workstations are connected with a straight-through cable. Attempts toping between the hosts are unsuccessful. What two things can be done to allow munications betweenthe hosts? (Choose two.)
{A 工作站已分配IP 地址为192.0.2.24\/28。B 工作站已分配IP 地址为192.0.2.100\/28。两台工作站与直通电缆连接。在主机之间ping 不成功。允许在主机之间的通信，可以做两件事情？（选择两个）。}
A. Replace the straight-through cable with a crossover cable.
B. Change the subnet mask of the hosts to /25.
C. Change the subnet mask of the hosts to /26.
D. Change the address of Workstation A to 192.0.2.15.
E. Change the address of Workstation B to 192.0.2.111.
Answer: AB
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：同构设备使用交叉线，两端的IP需要在同一个子网。
A：使用交叉线替换现有的直通线。正确。
B：修改掩码为25位，正确。
C：修改掩码为26为，错误。不能使他们在同一个子网。
D/E：错误，都不能使他们在同一个子网。
QUESTION 9
Your ISP has given you the address 223.5.14.6/29 to assign to your router's interface. They have alsogiven you the default gateway address of 223.5.14.7. After you have configured the address, the router isunable to ping any remote devices. What is preventing the router from pinging remote devices?(您的ISP 给你要分配给您的路由器接口地址223.5.14.6\/29。他们还授予您是223.5.14.7 的默认网关地址。您已配置了地址后，路由器是无法ping 任何远程设备。什么在阻碍pinging 远程设备的路由器？)
A. The default gateway is not an address on this subnet.
B. The default gateway is the broadcast address for this subnet.
C. The IP address is the broadcast address for this subnet.
D. The IP address is an invalid class D multicast address.
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考点：考查VLSM。
223.5.14.6/29所在网段的X围是：223.5.14.0--223.5.14.7/29
A：默认网关不属于这个子网，错误
B：默认网关是这个子网的广播地址，正确
C：这个地址是子网的广播地址，错误
D：这个地址是组播地址，错误。
QUESTION 10
Which mand is used to copy the configuration from RAM into NVRAM?
{哪个命令用于从RAM复制到NVRAM的配置}
A. copy running-config startup-config
B. copy startup-config: running-config:
C. copy running config startup config
D. copy startup config running config
E. write terminal
Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
QUESTION 11
Which mand is used to load a configuration from a TFTP server and merge the configuration intoRAM?(哪些命令用于从TFTP 服务器加载配置或合并到RAM 的配置？)
A. copy running-config: TFTP:
B. copy TFTP: running-config
C. copy TFTP: startup-config
D. copy startup-config: TFTP:
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
QUESTION 12
A system administrator types the mand to change the hostname of a router. Where on the Cisco IFS isthat change stored?
A. NVRAM
B. RAM
C. FLASH
D. ROM
E. PCMCIA
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
running-config保存在RAM中
startup-config保存在NVRAM中
QUESTION 13
Which mand is used to configure a default route?
A. ip route 172.16.1.0 255.255.255.0 0.0.0.0
B. ip route 172.16.1.0 255.255.255.0 172.16.2.1
C. ip route 0.0.0.0 255.255.255.0 172.16.2.1
D. ip route 0.0.0.0 0.0.0.0 172.16.2.1
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
QUESTION 14
If IP routing is enabled, which two mands set the gateway of last resort to the default gateway?（如果启用了IP 路由，哪两个命令设置网关的最后到默认网关？）(Choose two.)
A. ip default-gateway 0.0.0.0
B. ip route 172.16.2.1 0.0.0.0 0.0.0.0
C. ip default-network 0.0.0.0
D. ip default-route 0.0.0.0 0.0.0.0 172.16.2.1
E. ip route 0.0.0.0 0.0.0.0 172.16.2.1
Answer: CE
Section: Chapter 6: IP Routing
Explanation/Reference:
产生默认网关的两种方式
ip default-network
ip route
QUESTION 15
Which mand would you configure globally on a Cisco router that would allow you to view directlyconnected Cisco devices?(该命令将全局上配置使您可以直接查看的Cisco 路由器连接Cisco 设备吗？)
A. enable cdp
B. cdp enable
C. cdp run
D. run cdp
Answer: C
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
QUESTION 16
Which mand is used to see the path taken by packets across an IP network?
(哪些命令用于看到通过IP 网络数据包所采取的路径？)
A. show ip route
B. show route
C. traceroute
D. trace ip route
Answer: C
Section: Chapter 2: TCP/IP
Explanation/Reference:
哪条命令用于查看数据包转发所经过的路径
A:查看路由表
B：没有这条命令
C：正确
D：没这条命令
QUESTION 17
Which mand is used to debug a ping mand?
{哪些命令用于调试ping 命令？}
A. debug icmp
B. debug ip icmp
C. debug tcp
D. debug packet
Answer: B
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
ping调用了icmp协议，而icmp数据包封装在ip包中。
QUESTION 18
Which mand displays CPU utilization?
{哪个命令显示的CPU 利用率呢？}
A. show protocols
B. show process
C. show system
D. show version
Answer: B
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
查看CPU利用率。
QUESTION 19
When configuring a serial interface on a router, what is the default encapsulation?
{在配置一个串行接口的路由器，什么是默认的封装？}
A. atm-dxi
B. frame-relay
C. hdlc
D. lapb
E. ppp
Answer: C
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
缺省封装是HDLC
QUESTION 20
What must be set correctly when configuring a serial interface so that higher-level protocols calculate thebest route?
{什么时，必须设置正确配置串行接口，以便更高级别的协议计算最佳路线？}
A. bandwidth
B. delay
C. load
D. reliability
Answer: A
Section: Chapter 6: IP Routing
Explanation/Reference:
为了使高层路由协议计算最佳路由，串口的什么东西必须被设置正确？在接口下，只有带宽是可以配置的。
QUESTION 21
A pany implements video conferencing over IP on their Ethernet LAN. The users notice that the network slows down, and the video either stutters or fails pletely. What is the most likely reason forthis?
{公司对他们的以太网LAN ip 实现视频会议。用户注意网络变慢，和视频断断续续或完全失败。最有可能的原因是什么？}
A. minimum cell rate (MCR)
B. quality of service (QoS)
C. modulation
D. packet switching exchange (PSE)
E. reliable transport protocol (RTP)
Answer: B
Section: Chapter 9: Switching
Explanation/Reference:
考点：当网络中使用视频会议后发现网络非常慢，什么原因引起的？
QoS：用于定制策略对不同流量进行控制。
QUESTION 22
Which layer in the OSI reference model is responsible for determining the availability of the receivingprogram and checking to see if enough resources exist for that munication?
{OSI 参考模型在哪一层负责确定接收程序的可用性和检查足够的资源，是否存在该通信？}
A. transport
B. network
C. presentation
D. session
E. application
Answer: E
Section: Chapter 1: Introduction
Explanation/Reference:
哪一层确定的接收程序的可用性？
应用层提供
QUESTION 23
Data transfer is slow between the source and destination. The quality of service requested by the transportlayer in the OSI reference model is not being maintained. To fix this issue, at which layer should thetroubleshooting process begin?
{数据传输速度慢的源和目标之间。不保持在OSI 参考模型的传输层所要求的服务质量。要解决此问题，在哪一层应故障排除过程开始？}
A. presentation
B. session
C. transport
D. network
E. physical
Answer: D
Section: Chapter 1: Introduction
Explanation/Reference:
解决网络问题，先确保网络层通信。
QUESTION 24
Which protocols are found in the network layer of the OSI reference model and are responsible for pathdetermination and traffic switching?
{哪些协议在网络层OSI 参考模型中找到，负责路径测定和交通切换？}
A. LAN
B. routing
C. WAN
D. network
Answer: B
Section: Chapter 1: Introduction
Explanation/Reference:
OSI网络层中什么提供了路径选择和流量转发？
由路由协议提供。通过手工或者动态学习路由条目实现。
QUESTION 25
Which mand reveals the last method used to powercycle a router?
A. show reload
B. show boot
C. show running-config
D. show version
Answer: D
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
哪一个命令可以显示最近一次被用来重启路由器的方法？
QUESTION 26
Which three options are valid WAN connectivity methods? (Choose three.)
A. PPP
B. WAP
C. HDLC
D. MPLS
E. L2TPv3
F. ATM
Answer: ACF
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
哪三种封装属于WAN链路的?
A:点到点协议，正确
B：无线加密技术，错误
C:思科缺省封装格式，正确。
D：多协议标签转换，错误
E：隧道协议，错误
F：正确。
QUESTION 27
Refer to the exhibit. Which WAN protocol is being used?
A. ATM
B. HDLC
C. Frame Relay
D. PPP
Answer: C
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
由图中的红线可看到发送接受LMI信息。属于FR的数据包。
QUESTION 28
What is the difference between a CSU/DSU and a modem?
【一个CSU/DSU和调制解调器之间的区别是什么？】
A. A CSU/DSU converts analog signals from a router to a leased line; a modem converts analog signalsfrom a router to a leased line.
B. A CSU/DSU converts analog signals from a router to a phone line; a modem converts digital signalsfrom a router to a leased line.
C. A CSU/DSU converts digital signals from a router to a phone line; a modem converts analog signalsfrom a router to a phone line.
D. A CSU/DSU converts digital signals from a router to a leased line; a modem converts digital signalsfrom a router to a phone line.
Answer: D
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
CSU/DSU一般是专线，MODEN是将模拟信号与数字信号转换
QUESTION 29
A network administrator must configure 200 switch ports to accept traffic from only the currently attachedhost devices. What would be the most efficient way to configure MAC-level security on all these ports?
A. Visually verify the MAC addresses and then telnet to the switches to enter the switchport-port securitymac-address mand.
B. Have end users their MAC addresses. Telnet to the switch to enter the switchport-port securitymac-address mand.
C. Use the switchport port-security MAC address sticky mand on all the switch ports that have enddevices connected to them.[有端设备连接到他们的所有交换机端口上使用交换机端口端口安全MAC 地址粘滞命令。]
D. Use show mac-address-table to determine the addresses that are associated with each port and thenenter the mands on each switch for MAC address port-security.
Answer: C
Section: Chapter 9: Switching
Explanation/Reference:
考点：有200台主机需要接入，采用什么方式来增强网络安全性？
A：先验证mac安全性，然后在交换机上绑定。错误，工作量太大
B：用户发送认证再在交换机上配置，错误，不科学。
C：使用port-security，正确。
D：错误，工作量太大。
QUESTION 30
When troubleshooting a Frame Relay connection, what is the first step when performing a loopback test?【帧中继连接故障排除时，执行环回测试时的第一步是什么？】
A. Set the encapsulation of the interface to HDLC.
B. Place the CSU/DSU in local-loop mode.
C. Enable local-loop mode on the DCE Frame Relay router.
D. Verify that the encapsulation is set to Frame Relay.
Answer: A
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
在对FR进行排错的时候，当做回环测试的时候，第一步如何处理？
A：讲接口配置成HDLC，正确，FR封装下无法正常ping自己端口
QUESTION 31
What occurs on a Frame Relay network when the CIR is exceeded?
A. All TCP traffic is marked discard eligible.
B. All UDP traffic is marked discard eligible and a BE is sent.
C. All TCP traffic is marked discard eligible and a BE is sent.
D. All traffic exceeding the CIR is marked discard eligible.
Answer: D
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
在FR网络中，当CIR超过时会发生什么情况？
D：所有超过的流量都丢弃。
QUESTION 32
What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)
A. They create split-horizon issues.
B. They require a unique subnet within a routing domain.
C. They emulate leased lines.
D. They are ideal for full-mesh topologies.
E. They require the use of NBMA options when using OSP
F.
Answer: BC
Section: Chapter 14: Wide Area Network (W AN)
Explanation/Reference:
帧中继点到点子接口的特点？
A：水平分割，错误。
B：每个子接口需要一个独立的网段，正确。
C：类似专线，正确。
D:全网互联是理想拓扑，错误。通常是hub-spoke
E：NBMA不支持OSPF，错误。
QUESTION 33
Refer to the exhibit. Addresses within the range 10.10.10.0/24 are not being translated to the
1.128.0/16range. Which mand shows if 10.10.10.0/24 are allowed inside addresses?
A. debug ip nat
B. show access-list
C. show ip nat translation
D. show ip nat statistics
Answer: B
Section: Chapter 8: NAT
Explanation/Reference:
那条命令可以看到10.10.10.0/24是否在允许转换X围
。允许的X围是通过ACL定义的。
A：打开NAT转换的debug信息，错误
B：查看acl信息，正确。
C：查看NAT转换表，错误。
D：查看静态NAT。错误
QUESTION 34
A wireless client cannot connect to an 802.11b/g BSS with a b/g wireless card. The client section of theaccess point does not list any active WLAN clients. What is a possible reason for this?
[一台带有b/g无线网上的无线客户机不能连接到一个8020.11b/g 的基站。客户端部分没有发现可用的无线局域网。这种情况是什么原因？]
A. The incorrect channel is configured on the client.
B. The client's IP address is on the wrong subnet.
C. The client has an incorrect pre-shared key.
D. The SSID is configured incorrectly on the client.
Answer: D
Section: Chapter 11: Wireless
Explanation/Reference:
客户端无法连接到无限接入点，查看不到可用的无线信号。这通常是SSID信号没有配置正确。
A：不正确的信道。错误
B：客户端的IP地址配置错误
C：客户端的共享key错误。
D：SSID配置不正确。
QUESTION 35
Which two features did WPAv1 add to address the inherent weaknesses found in WEP? (Choose two.)[哪两个功能WPAv1 没有添加地址找到wep 的固有弱点？（选择两个]
A. a stronger encryption algorithm
B. key mixing using temporal keys
C. shared key authentication
D. a shorter initialization vector
E. per frame sequence counters
Answer: BE
Section: Chapter 11: Wireless
Explanation/Reference:
考点：WPA1中增强哪两个在WEP中发现的弱点？WEP存在的隐患主要是依赖共享密钥A：更强的加密算法
B：混合使用的密钥
C：共享密钥认证
D：较短的初始化向量
E：一个帧一个序列计数器。
QUESTION 36
Which two wireless encryption methods are based on the RC4 encryption algorithm? (Choose two.)
A. WEP
B. CCKM
C. AES
D. TKIP
E. CCMP
Answer: AD
Section: Chapter 11: Wireless
Explanation/Reference:
考点：哪两种无限加密技术依赖RC4
A:有线等效XX协议
B：英特尔开发一种协议
C：高级加密标准
D：暂时密钥集成协议
E:基于AES的加密方式
QUESTION 37
What are two characteristics of RIPv2? (Choose two.)
A. classful routing protocol
B. variable-length subnet masks
C. broadcast addressing
D. manual route summarization
E. uses SPF algorithm to pute path
Answer: BD
Section: Chapter 6: IP Routing
Explanation/Reference:
A：有类路由协议，错误
B：可变长度子网掩码，正确
C：采用广播地址更新，错误
D：手动路由汇总，正确
E:使用spf算法计算路径，错误。
QUESTION 38
Which two Ethernet fiber-optic modes support distances of greater than 550 meters?
A. 1000BASE-CX
B. 100BASE-FX
C. 1000BASE-LX
D. 1000BASE-SX
E. 1000BASE-ZX
Answer: CE
Section: Chapter 1: Introduction
Explanation/Reference:
A：最长距离25米
B：最长距离100米
C：最长距离3000米
D：最长距离550米
E：最长距离70千米
QUESTION 39
What two things will a router do when running a distance vector routing protocol? (Choose two.)
A. Send periodic updates regardless of topology changes.
B. Send entire routing table to all routers in the routing domain.
C. Use the shortest-path algorithm to the determine best path.
D. Update the routing table based on updates from their neighbors.
E. Maintain the topology of the entire network in its database.
Answer: AD
Section: Chapter 6: IP Routing
Explanation/Reference:
考点：考查距离矢量路由协议特性
A：周期性更新，正确
B：发送整个路由表到整个路由域，错误，只发送给邻居
C：使用SPF算法，错误
D：依靠邻居发送更新来更新路由表，正确
E：在数据库中维护整个网络的拓扑。错误
QUESTION 40
Refer to the exhibit. According to the routing table, where will the router send a packet destined for
10.1.5.65?
A. 10.1.1.2
B. 10.1.2.2
C. 10.1.3.3
D. 10.1.4.4
Answer: C
Section: Chapter 6: IP Routing
Explanation/Reference:
路由查找原则：最长掩码匹配原则。
QUESTION 41
Which mand shows if an access list is assigned to an interface?
A. show ip interface [interface] access-lists
B. show ip access-lists interface [interface]
C. show ip interface [interface]
D. show ip access-lists [interface]
Answer: C
Section: Chapter 7: Security
Explanation/Reference:
QUESTION 42
Refer to the exhibit. Which rule does the DHCP server use when there is an IP address conflict?
A. The address is removed from the pool until the conflict is resolved.
B. The address remains in the pool until the conflict is resolved.
C. Only the IP detected by Gratuitous ARP is removed from the pool.
D. Only the IP detected by Ping is removed from the pool.
E. The IP will be shown, even after the conflict is resolved.
Answer: A
Section: Chapter 5: Managing Cisco IOS
Explanation/Reference:
show ip dhcp conflict命令可以查看哪些ip地址在使用上有冲突。
有冲突的地址不再分配出去。
A：地址被删除直到冲突解决，正确
B:地址保留直到冲突解决，错误
C/D：答案片面。
E：当冲突解决后，地址会被显示。错误。
QUESTION 43
Refer to the exhibit. You are connected to the router as user Mike. Which mand allows you to see output from the OSPF debug mand?
A. terminal monitor
B. show debugging
C. show sessions
D. show ip ospf interface
Answer: A
Section: Chapter 6: IP Routing
Explanation/Reference:
A：让debug信息在终端上显示出来
B：没这条命令
C：查看会话信息。
D:查看启用了ospf的接口的相关信息。
QUESTION 44
Refer to the exhibit. If number 2 is selected from the setup script, what happens when the user runs setup
from a privileged prompt?
A. Setup is additive and any changes will be added to the config script.
B. Setup effectively starts the configuration over as if the router was booted for the first time.
C. Setup will not run if an enable secret password exists on the router.
D. Setup will not run, because it is only viable when no configuration exists on the router. Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
[0]不保存进入IOS命令配置模式
[1]不保存返回设置模式
[2]保存退出
A：设置和改动被保存到配置脚本
B：为有效地重新开始配置，如果路由器是第一次启动的配置。
C：如果配置了密码，设置不会运行
D：设置不可用，因为它只能在没有配置存在时才有效。
QUESTION 45
Refer to the exhibit. Which (config-router) mand will allow the network represented on the interface to
be advertised by RIP?
A. redistribute ethernet0
B. network ethernet0
C. redistribute 10.12.0.0
D. network 10.12.0.0
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
考点：怎么才能让接口通告RIP路由。
通告network网段实现。
QUESTION 46
Refer to the exhibit. What information can be gathered from the output?
A. One router is running RIPv1.
B. RIP neighbor is 224.0.0.9.
C. The network contains a loop.
D. Network 10.10.1.0 is reachable.
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
由图中可以看出本地已经存在10.10.1.0这条路由。
QUESTION 47
Refer to the exhibit. What type of connection would be supported by the cable diagram shown?
A. PC to router
B. PC to switch
C. server to router
D. router to router
Answer: B
Section: Chapter 1: Introduction
Explanation/Reference:
从图中可以看出这是一条直通线。同构设备使用交叉线，异构设备使用直通线。
B：直通线
AC/D同构设备使用交叉线
QUESTION 48
Refer to the exhibit. What type of connection would be supported by the cable diagram shown?
A. PC to router
B. PC to switch
C. server to switch
D. switch to router
Answer: A
Section: Chapter 1: Introduction
Explanation/Reference:
QUESTION 49
Which two statements describe the Cisco implementation of VLANs? (Choose two.)
A. VLAN 1 is the default Ethernet VLAN.
B. CDP advertisements are only sent on VLAN 1002.
C. By default, the management VLAN is VLAN 1005.
D. By default, the switch IP address is in VLAN 1005.
E. VLAN 1002 through 1005 are automatically created and cannot be deleted.
Answer: AE
Section: (none)
Explanation/Reference:
考点：考查vlan知识点。
A：缺省都存在vlan1，端口都属于vlan1，正确
B：CDP信息只发送到vlan1002，错误，vlan1002是fddi网络的vlan号。
C：缺省情况交换机IP配置在vlan1005，错误，vlan1005trnet网络的vlan号。缺省在vlan1里面。
D：vlan1002-1005自动生成并不能被删除，正确，他们都是被保留的特殊vlan。QUESTION 50
Refer to the exhibit. What can be determined about the router from the console output?
A. No configuration file was found in NVRAM.
B. No configuration file was found in flash.
C. No configuration file was found in the PCMCIA card.
D. Configuration file is normal and will load in 15 seconds.
Answer: A
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
启动时缺省读取保存在NVRAM里面的配置文件。提示进入对话模式，说明没有保存配置文件。
QUESTION 51
Refer to the exhibit. What can be determined from the output?
A. 192.168.1.2 is local to the router.
B. 192.168.3.1 is local to the router.
C. 192.168.1.2 will age out in less than 1 minute.
D. 192.168.3.1 has aged out and is marked for deletion.
Answer: B
Section: Chapter 4: Introduction to Cisco IOS
Explanation/Reference:
age下面- 代表是本地端口
QUESTION 52
Refer to the exhibit. Which mand would allow the translations to be created on the router?
A. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 19
B. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 19
C. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 18
D. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 18
Answer: A
Section: Chapter 8: NAT
Explanation/Reference:
准确汇总掩码是21，答案中没有，退而求其次选19.
mynats为地址池的名字，prefix-length 表示掩码的长度。prefix-length 19表示掩码为255.255.224.0
QUESTION 53
Refer to the exhibit. An administrator pings the default gateway at 10.10.10.1 and sees the output as
shown. At which OSI layer is the problem?
A. data link layer
B. application layer
C. access layer
D. session layer
E. network layer
Answer: E
Section: Chapter 2: TCP/IP
Explanation/Reference:
ping调用icmp，ping不通是网络层的原因。
QUESTION 54
Refer to the exhibit. Which value will be configured for Default Gateway of the Local Area Connection?
A. 10.0.0.0
B. 10.0.0.254
C. 192.223.129.0
D. 192.223.129.254
Answer: B
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
10.0.0.1--10.0.0.254里面除了10.0.0.249外任意一个。
QUESTION 55
Refer to the exhibit. The user at Workstation B reports that Server A cannot be reached. What is preventing Workstation B from reaching Server A?
A. The IP address for Server A is a broadcast address.
B. The IP address for Workstation B is a subnet address.
C. The gateway for Workstation B is not on the same subnet.
D. The gateway for Server A is not on the same subnet.
Answer: D
Section: Chapter 6: IP Routing
Explanation/Reference:
131.1.123.24/27所在网络X围为：131.1.123.0-31/27。很明显网关131.1.123.33不再X围内。QUESTION 56
Refer to the exhibit. What does the (*) represent in the output?
A. Packet is destined for a local interface to the router.
B. Packet was translated, but no response was received from the distant device.
C. Packet was not translated, because no additional ports are available.
D. Packet was translated and fast switched to the destination.
Answer: D
Section: Chapter 8: NAT
Explanation/Reference:
由图中提示信息可以看出，源为10.10.0.2已经有个一个转换，所以后续的数据包快速转发。QUESTION 57
Refer to the exhibit. What mand sequence will enable PA T from the inside to outside network?
A. (config) ip nat pool isp-net 1.2.4.2 netmask 255.255.255.0 overload
B. (config-if) ip nat outside overload
C. (config) ip nat inside source list 1 interface ethernet1 overload
D. (config-if) ip nat inside overload
Answer: C
Section: Chapter 8: NAT
Explanation/Reference:
overload是配置PA T的关键字
QUESTION 58
Refer to the exhibit. What will happen to HTTP traffic ing from the Internet that is destined for 172.16.12.10 if the traffic is processed by this ACL?
A. Traffic will be dropped per line 30 of the ACL.
B. Traffic will be accepted per line 40 of the ACL.
C. Traffic will be dropped, because of the implicit deny all at the end of the ACL.
D. Traffic will be accepted, because the source address is not covered by the ACL.
Answer: C
Section: Chapter 7: Security
Explanation/Reference:
ACL匹配规则：
自上而下匹配，一旦匹配则终止，没有匹配到的丢弃。
题目给的172是目的地址，表中ACL中172是源地址
QUESTION 59
Refer to the exhibit. Which statement describes the effect that the Router1 configuration has on devices in
the 172.16.16.0 subnet when they try to connect to SVR-A using Telnet or SSH?
A. Devices will not be able to use Telnet or SSH.
B. Devices will be able to use SSH, but not Telnet.
C. Devices will be able to use Telnet, but not SSH.
D. Devices will be able to use Telnet and SSH.
Answer: B
Section: Chapter 7: Security
Explanation/Reference:
题目考查的是ACL用法，首先我们看图示
F0/0 是in方向，eq应该放在目的主机的后面，源主机是随机端口发出访问
f0/1也设置为out方向，只能控制返回的数据，这里eq应该放在源主机也就是SVR-A的后面
所以list 100中10生效，20 无效。list 101中10生效，20无效。
最后默认都拒绝，所以只允许ssh。
QUESTION 60
What are three advantages of VLANs? (Choose three.)
A. VLANs establish broadcast domains in switched networks.
B. VLANs utilize packet filtering to enhance network security.
C. VLANs provide a method of conserving IP addresses in large networks.
D. VLANs provide a low-latency internetworking alternative to routed networks.
E. VLANs allow access to network services based on department, not physical location.
F. VLANs can greatly simplify adding, moving, or changing hosts on the network.
Answer: AEF
Section: Chapter 10: VLAN
Explanation/Reference:
A：VLAN在交换网络中建立广播域，正确
B：利用VLAN的数据包过滤，增强网络的安全性。错误，没有这个特性。
C：提供了在大型网络中的保护IP地址的方法。错误。
D：提供低延迟互联网络替代路由网络。错误
E：vlan允许基于逻辑划分的网络访问，不是物理位置。正确。
F：VLAN可以大大简化添加，移动或更改网络上的主机。正确。
QUESTION 61
An administrator would like to configure a switch over a virtual terminal connection from locations outside
of the local LAN. Which of the following are required in order for the switch to be configured from a remote
location? (Choose two.)
A. The switch must be configured with an IP address, subnet mask, and default gateway.
B. The switch must be connected to a router over a VLAN trunk.
C. The switch must be reachable through a port connected to its management VLAN.
D. The switch console port must be connected to the Ethernet LAN.
E. The switch management VLAN must be created and have a membership of at least one switch port.
F. The switch must be fully configured as an SNMP agent.
Answer: AC
Section: Chapter 9: Switching
Explanation/Reference:
要想远程管理VLAN，1、交换机配置IP，2、路由可达。
QUESTION 62
Which of the following host addresses are members of networks that can be routed across the public
Internet? (Choose three.)
A. 10.172.13.65
B. 172.16.223.125
C. 172.64.12.29
D. 192.168.23.252
E. 198.234.12.95
F. 212.193.48.254
Answer: CEF
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
考查公有IP地址的X围。
10.0.0.0/8-10.255.255.255/8
172.16.0.0/16--172.31.255.255/16
192.168.0.0/24-192.168.255.255/24
除了上面的外都是公有IP。
QUESTION 63
Given a subnet mask of 255.255.255.224, which of the following addresses can be assigned to network
hosts? (Choose three.)
A. 15.234.118.63
B. 92.11.178.93
C. 134.178.18.56
D. 192.168.16.87
E. 201.45.116.159
F. 217.63.12.192
Answer: BCD
Section: Chapter 3: IP Addressing and VLSM
Explanation/Reference:
QUESTION 64
Which of the following are benefits of VLANs? (Choose three.)
A. They increase the size of collision domains.
B. They allow logical grouping of users by function.
C. They can enhance network security.
D. They increase the size of broadcast domains while decreasing the number of collision domains.
E. They increase the number of broadcast domains while decreasing the size of the broadcast domains.
F. They simplify switch administration.
Answer: BCE
Section: Chapter 10: VLAN
Explanation/Reference:
考查VLAN的特点
A：增加冲突域的大小，错误
B：允许逻辑划分网段，正确
C：增强网络安全，正确。不同vlan不能直接通信。
D：当减少冲突域时增加广播域的大小。错误
E：减少广播域的大小时增加了广播域个数。正确。
F:简化交换机管理。答非所问。
QUESTION 65
Which router IOS mands can be used to troubleshoot LAN connectivity problems? (Choose three.)
A. ping
B. tracert
C. ipconfig
D. show ip route
E. winipcfg
F. show interfaces
Answer: ADF
Section: Chapter 6: IP Routing
Explanation/Reference:
A：测试连通性
D：查看是否有路由
F：查看接口是否可用
QUESTION 66
Refer to the exhibit. After HostA pings HostB, which entry will be in the ARP cache of HostA to support this
transmission?
A.
B.
C.
D.
E.
F.
Answer: D
Section: Chapter 2: TCP/IP
Explanation/Reference:
此题考查的是pc的arp表，不要和包的目的地址、源地址弄混了。
在以太网寻址的时候，依靠的事MAC地址，每一个网段都需要寻找到自己的下一条（gateway）以自己的
MAC作为source gateway的mac作为destination封装Frame，然后将Frame转发出去，但是数据包是不会进
行变化的，也就是packet的头部信息不会发生改变。所以IPXX的source和des地址是不会变更的
QUESTION 67
Which two topologies are using the correct type of twisted-pair cables? (Choose two.)
A.
B.
C.
D.
E.
Answer: DE
Section: Chapter 1: Introduction
Explanation/Reference:
线缆问题，使用双绞线的设备。相同设备用crossover不同设备用cut-thought线缆。console 使用的事rollor线
缆
QUESTION 68
Which of the following are true regarding bridges and switches? (Choose two.)
A. Bridges are faster than switches because they have fewer ports.
B. A switch is a multiport bridge.
C. Bridges and switches learn MAC addresses by examining the source MAC address of each frame
received.
D. A bridge will forward a broadcast but a switch will not.
E. Bridges and switches increase the size of a collision domain.
Answer: BC
Section: Chapter 9: Switching
Explanation/Reference:
考查网桥和交换机的区别
A：网桥比交换机更快速，因为他们有更少的端口。错误
B：交换机是一个多端口网桥。正确
C：通过检查数据包的source mac学习mac地址，正确
D：网桥转发广播包，但交换机不转发。错误
E：网桥和交换机增加冲突域的大小，错误。
QUESTION 69
What are some of the advantages of using a router to segment the network? (Choose two.)
A. Filtering can occur based on Layer 3 information.
B. Broadcasts are eliminated.
C. Routers generally cost less than switches.
D. Broadcasts are not forwarded across the router.
E. Adding a router to the network decreases latency.
Answer: AD
Section: Chapter 1: Introduction
Explanation/Reference:
A：可以基于层三的信息过滤数据。
B：广播被淘汰。错误
C：路由器的价格一般比交换机少。错误
D：广播不会穿越路由器，正确。
E:增加路由器后减少延迟。错误。
QUESTION 70
Which of the following statements are true regarding bridges and switches? (Choose 3.)
A. Switches are primarily software based while bridges are hardware based.
B. Both bridges and switches forward Layer 2 broadcasts.
C. Bridges are frequently faster than switches.
D. Switches have a higher number of ports than most bridges.
E. Bridges define broadcast domains while switches define collision domains.
F. Both bridges and switches make forwarding decisions based on Layer 2 addresses.
Answer: BDF
Section: Chapter 9: Switching
Explanation/Reference:
A：交换机基于软件，网桥基于硬件，错误。都是基于硬件
B：都转发二层广播包，正确
C：网桥比交换机快速。错误。
D：交换机比网桥具有更多的端口，正确。
E：网桥定义广播域，交换机定义冲突域，错误。
F:基于二层地址转发数据。正确
QUESTION 71
Which characteristics are representative of a link-state routing protocol? (Choose three.)
A. provides mon view of entire topology
B. exchanges routing tables with neighbors
C. calculates shortest path
D. utilizes event-triggered updates
E. utilizes frequent periodic updates
Answer: ACD
Section: Chapter 6: IP Routing
Explanation/Reference:
链路状态路由协议有协议特点？
A:提供查看拓扑的命令，正确。show ip ospf database
B：邻居之间交换路由信息，错误。交换LSA
C：计算最短路径，正确。
D：利用触发更新，正确
E：利用周期更新，错误。
QUESTION 72
Which of the following statements describe the network shown in the graphic? (Choose two.)
A. There are two broadcast domains in the network.
B. There are four broadcast domains in the network.
C. There are six broadcast domains in the network.
D. There are four collision domains in the network.
E. There are five collision domains in the network.
F. There are seven collision domains in the network.
Answer: AF
Section: Chapter 1: Introduction
Explanation/Reference:
路由器一个端口一个广播域
交换机一个端口一个冲突域
集线器一个冲突域。左边是集线器，右边是交换机。
QUESTION 73
Use the output from the router shown in the graphic above to determine which of the following are correct.
(Choose two.)
A. Router John uses a link-state routing protocol.
B. Router John will receive routing updates on the Serial0/0 interface.
C. Router John will receive routing updates on the Serial0/1 interface.
D. Router John will send routing updates out the Serial0/0 interface.
E. Router John will send routing updates out the FastEthernet0/0 interface.
F. Router John will send routing updates out the Serial0/1 interface.
Answer: BD
Section: Chapter 6: IP Routing
Explanation/Reference:
由图中几处画红线的地方可知只有s0/0发送和接受路由信息。
QUESTION 74
A national retail chain needs to design an IP addressing scheme to support a nationwide network. The
pany needs a minimum of 300 sub-networks and a maximum of 50 host addresses per subnet. Working with only one Class B address, which of the following subnet masks will support an appropriate
addressing scheme? (Choose two.)
A. 255.255.255.0
B. 255.255.255.128
C. 255.255.252.0