Huawei.Testking.H12-224.v2015-03-08.by_.DIANE (2)

Testking.H12-224 Testking.H12-224 5-0.629q Number: H12-224 Passing Score: 800 Time Limit: 120 min File Version: 7.0

H12-224 Huawei Certified Datacom Professional - Fast Certification – ENU 1. 100% Valid in US, UK, UK, Australia, India and and Emirates. All my friends in group have these same questions. questions. 2. This dumps is valid..the thing only required required to get the answers in the mind properly because they they use the technique by using same multiple answers answers so the candidate will got confuse a lot...so dont take hurry...take proper time to to questions and and answers.by this dumps..you can take 800+ with no doubt..also doubt..also try to practice drag and drop drop questions,good luck 3. More than than 80% questions questions are are from this dump dump :). 4. This vce is playing an an important role to pass pass the exams without without any complications. complications.

www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

Exam A QUESTION 1

On the MSTP network as shown in the figure, what is the role of the switch in MSTI 1 according to the configuration? A. B. C. D.

Root switch Slav Slave e switc switch h Non-ro Non-root ot switch switch None None of the the above above

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: appropriate. QUESTION 2


As shown in the figure, figure, which switch is the root switch according according to the configuration? configuration? A. B. C. D.

SWA SWB SWC None None of the the above above

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 3


On the RSTP network as shown in the figure, what RSTP operations will occur after the E1 port of SWB fails? (Select 3 Answers) A. B. C. D.

SWB deletes the MAC MAC address entries with the E1 port as the the destination interface. interface. The spanning tree is is recalculated and the the E2 port is elected as as the new root port. All the interfaces in forwarding state send send topology change notifications (TCNs) (TCNs) to notify other switches of the topology change. change. All the non-edge ports ports in forwarding state state send TCNs to notify notify other switches of the the topology change.

Correct Answer: ABD Answer: ABD


Section: (none) Explanation Explanation/Reference:

QUESTION 4 Which is the port state defined in RSTP? A. B. C. D.

Discarding Lear Learni ning ng Forwar Forwardin ding g All of the the abov above e

Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 5 RSTP has all functions that STP has and it is backward compatible with STP. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 6 RSTP adopts fast convergence mechanism. So, there is no Forward Delay interval in RSTP. A. True B. Fals False e


Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 7 Two switches are directly connected to each other and they are working in full duplex mode. By default, RSTP will consider the link between the switches as pointto-point link. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: sophisticated. QUESTION 8 In RSTP network environment, a port can be set as edge port when it is directly connected with terminal. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 9 Which of the following statements about RSTP and STP is true? A. STP has more port states than RSTP. B. The port roles used in RSTP is less than than the port roles used in STP.


C. Since RSTP adopts fast convergence convergence mechanism, it does not have Learning Learning state which is available in STP. D. Same as STP, the ports will enter into Listening Listening state once the RSTP has been enabled. Then, Then, the ports can receive BPDU and calculate the spanning spanning tree. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 10 In a switching network that runs RSTP, the topology change notification message will not be sent when the switch detects that the Alternate Port is failed. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: authentic answer. QUESTION 11 When the topology of a network running RSTP changes, what happens after the change? A. B. C. D.

Flooding on the entire entire network. The aging time of MAC address address entries is changed. Some MAC MAC address address entries entries are deleted. deleted. All of the the abov above e

Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 12


Which ports defined by RSTP cannot work in Forwarding state? (Select 2 Answers) A. B. C. D.

Root Port Design Designate ated d Port Port Backup Backup Port Port Altern Alternate ate Port Port

Correct Answer: CD Section: (none) Explanation Explanation/Reference: exact. QUESTION 13 On an RSTP network, when an edge port is in protected state, what operation is performed after the edge port receives BPDUs? A. B. C. D.

The edge port forwards forwards BPDUs. The edge edge port port discards discards BPDUs. BPDUs. The edge edge port port is shut shut down. down. The edge port obtains required information information from BPDUs.


QUESTION 14 In RSTP, the port status can be discarding and learning. Which statements about the port status are true? (Select 2 Answers) A. B. C. D.

The port in discarding discarding or learning state does does not forward data frames. The port in discarding state state does not learn MAC addresses. addresses. The port in learning state does not learn learn MAC addresses. addresses. All of the the abov above e

Correct Answer: AB Answer: AB



QUESTION 15

On the RSTP network as shown in the figure, what is the port role of SWC E0/1 according to the configuration? (Select 2 Answers) A. B. C. D.

Designated port Root Root por portt Altern Alternate ate port port Edge Edge port port

Correct Answer: AD Answer: AD Section: (none) Explanation Explanation/Reference:


QUESTION 16

As shown in the figure, figure, when the link between between SWC and LAND LAND is faulty, through which path are TCA BPDUs sent? A. B. C. D.

From SWA to SWB SWB From From SWB SWB to SWC SWC From From SWB SWB to SWA SWA From From SWC SWC to SWB SWB



QUESTION 17

As shown in the figure, figure, when the STP network runs properly, properly, which device does the designated port of of LANC reside? A. B. C. D.


Correct Answer: B Section: (none)


Explanation Explanation/Reference:

QUESTION 18 In STP configuration, which statement about BPDUs is true? A. B. C. D.

BPDUs cannot be sent sent from the designated designated port. BPDUs BPDUs can be sent only only from the designat designated ed port. BPDUs BPDUs can be sent sent from any port. port. None None of the the above. above.


QUESTION 19 On an STP network, after the network topology changes, which BPDUs are sent during flooding of topology change information on the entire network? A. B. C. D.

BPDUs with the TCN TCN flag BPDUs BPDUs with with the TCA flag BPDUs BPDUs with with the TC flag flag All of the the abov above e


QUESTION 20 After an STP switch switch starts, it considers considers itself as the root switch. switch. Which statements statements about BDPU parameter parameter setting are true? true? (Select 3 Answers) Answers) A. The switch is the designated designated root.


B. The design designated ated cost is 0. C. The switch switch is the designat designated ed bridge. bridge. D. The design designated ated port is is 0. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 21

On the STP network as shown in the figure, which device may be the blocked port belong to? A. SWA B. SWB C. SWC


D. None None of the the above above Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 22 QinQ provides a simplified Layer 2 VPN tunnel. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 23 Which statements about QinQ are true? (Select 2 Answers) A. QinQ saves VLANs on the public network. network. B. To avoid VLAN conflict, the customer customer must negotiate with the service provider provider before modifying the VLANs on its private network. network. C. hen the service service provider provider upgrad upgrades es the network, network, the configu configuratio rations ns on the user network network do not not need to be modified. modified. D. All of the the abov above e Correct Answer: AC Answer: AC Section: (none) Explanation Explanation/Reference:

QUESTION 24 Some vendors set the TPID value in the outer VLAN tag of QinQ packets to the non-protocol value.


To be compatible with these vendors' devices, the TPID value on Huawei switches is adjustable. Which is the default value of the TPID value on Huawei switches? A. B. C. D.

0x9200 0x91 0x9100 00 0x82 0x8200 00 0x81 0x8100 00


QUESTION 25 Which types of interfaces can be configured with selective QinQ? (Select 2 Answers) A. B. C. D.

Access interface Trunk Trunk inte interfa rface ce Hybrid Hybrid inter interfac face e dot1q-tunn dot1q-tunnel el interf interface ace

Correct Answer: BC Section: (none) Explanation Explanation/Reference:

QUESTION 26 The STP protocol can prevent broadcast storms caused by loops on the Layer 2 network. A. True B. Fals False e Correct Answer: A Answer: A Section: (none)



QUESTION 27 The STP protocol cannot prevent MAC address table flapping caused by loops on the Layer 2 network. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 28 Which are the port roles defined in STP? A. B. C. D.

Root Port Design Designate ated d Port Port Altern Alternate ate Port Port All of the the abov above e


QUESTION 29 How many port states are defined by STP? A. 3 B. 4 C. 5


D. 6 Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 30 Each STP switch has a unique switch ID. Which two entries does the switch ID contain? A. B. C. D.

Two-byte switch priority priority Six-byte Six-byte MAC address address Two-byte switch switch priority and six-byte MAC address address Six-byte switch switch priority and six-byte MAC address


QUESTION 31 On an STP network, before the interface status transits from non-forwarding to forwarding, how many Forward Delay intervals does the interface wait for? A. B. C. D.

2 3 4 5



QUESTION 32 If loop exists and STP is not enabled, the switch will not operate normally.

A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 33 Which of the following statements about STP Designated Port is true? A. B. C. D.

Each of the bridge can can have one Designated Designated Port only. Designated Port is responsible for forwarding forwarding packets to its connected connected network segments. segments. The only path leading leading to the Root Bridge is through Designated Designated Port. Designated Port forwards forwards the data packet packet from its corresponding corresponding switch to the Root Root Switch.



QUESTION 34 Which of the following statements about STP Designated Port is true? A. B. C. D.

Each of the bridge can can have one Designated Designated Port only. Designated Port is responsible for forwarding forwarding packets to its connected connected network segments. segments. The only path leading leading to the Root Bridge is through Designated Designated Port. Designated Port forwards forwards the data packet packet from its corresponding corresponding switch to the Root Root Switch.


QUESTION 35 Which of the following statements is not the advantage of STP? A. B. C. D.

STP can manage the the redundant links. When When the working link is down, network connectivity connectivity can be restored. restored. STP can prevent prevent loops loops STP can preven preventt broadcast broadcast storm storm STP can save save network network bandwi bandwidth dth


QUESTION 36 Which of the following standards defines STP? A. B. C. D.

802.1J 802. 802.1X 1X 802. 802.1D 1D 802. 802.1P 1P



QUESTION 37 STP elects ( ) A. B. C. D.

One bridge as the Root Root Bridge and another another one as the Backup Backup Root Bridge One bridge bridge as the the Root Root Bridge Bridge Two bridges bridges as the Root Root Bridge Bridge One Designate Designated d Bridge Bridge


QUESTION 38 STP distributes configuration message by sending BPDU packet to each other. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 39 In STP, BPDU packet is carried by ( ). A. IP packet


B. TCP TCP pac packe kett C. Ethern Ethernet et frame frame D. UDP UDP pack packet et Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 40 In a switching network that has been enabled with STP protocol, the priorities of all the switches are the same. The MAC address of switch1 is 00-e0-fc-00-00-40, MAC address of switch2 is 00- e0-fc-00-00-10, MAC address of switch3 is 00-e0-fc-00-00-20, and MAC address of switch4 is 00-e0-fc-00-00-80. Which of the switches will be elected as the Root Bridge? A. B. C. D.

Switch1 Swit Switch ch2 2 Swit Switch ch3 3 Swit Switch ch4 4


QUESTION 41 A switching network network has been enabled with with STP protocol. To To provide fast access speed to the file server server for most of the users, users, the switch that that is directly connected connected with file server is configured as the root bridge. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation


Explanation/Reference:

QUESTION 42 Which of the following statements about the link failure detection in STP protocol is not true? A. hen network topology is stable, the Designated Designated Port sends BPDU BPDU packet at every Hello Hello Time interval. B. hen network network topolo topology gy is stable, stable, BPDU packe packets ts will be transmitt transmitted ed periodic periodically. ally. C. hen the port does not receive receive new BPDU BPDU within a certain interval, interval, the old configuration configuration BPDU will time out and the link failure can be detected. D. The port sends Configuration BPDU BPDU at every Hello Time interval. When the link fails, fails, Configuration BPDU cannot be sent out. out. As a result, this port can detect he link failure. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 43 Which of the following statements about STP is not true? A. B. C. D.

STP can manage redundant redundant links. STP can block block redundant redundant links to eliminate eliminate loops loops STP can prevent temporary temporary loss of connectivity STP can make make LAN switch switch operate normally normally in a network network with loops loops

Correct Answer: C Section: (none) Explanation Explanation/Reference: QUESTION 44 According to OSI reference reference model, Layer Layer 2 LAN switch operates operates at ( ). A. Physical layer B. Data Data link link laye layer r


C. IP lay layer er D. Applic Applicati ation on layer layer Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 45 According to the STP STP protocol, a certain certain field in the BPDU identifies the root switch. switch. That is, if the BPDU BPDU sent by a switch switch contains this field, this switch is considered as the root switch. What is this field? A. B. C. D.

Root Identifier Root Root Path Path Cost Cost Bridge Bridge Identi Identifie fier r Port Port Identif Identifier ier


QUESTION 46 Which are the two parts in the port identifier of the uplink interface on a non-root switch? A. B. C. D.

1-bit port priority and and 1-bit port number 1-bit port port priority priority and 2-bit 2-bit port number number 2-bit port port priority priority and 1-bit 1-bit port number number 2-bit port port priority priority and 2-bit 2-bit port number number



QUESTION 47 In the network diagram, which switch will be selected as the root switch? A. B. C. D.



QUESTION 48 Which statements about the PVID on the access interface are true? (Select 3 Answers) A. B.

hen receiving a packet packet without the VLAN tag, the interface adds adds the VLAN tag to the the packet and sets the the VID in the tag to the default VLAN ID. hen receiving a packet with a VLAN tag, the interface compares compares the VLAN ID in the tag with the default VLAN VLAN ID. If they are the same, the interface interface forwards he packets; otherwise, the interface discards the packets. C. hen the interface interface sends a packet with a VLAN tag that contains the default VLAN ID, the system removes the VLAN tag of the packet, packet, and then forwards the packet. D. None None of the the above. above.

Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 49 Which statement about the hybrid interface is true? A. A hybrid interface can can only be connected to network device. B. A hybrid interfa interface ce can only be connec connected ted to host. host.


C. A hybrid interface interface can be connected to host or network network device. D. A hybrid interface interface cannot be be configured with with VLAN ID. ID. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 50 Which statement about MUX VLAN is false? A. B. C. D.

Principal VLAN Subord Subordina inate te VLAN VLAN Subordinat Subordinate e group group VLAN VLAN Gues Guestt VLAN VLAN


QUESTION 51 Which statements about the MUX VLAN configuration are true? (Select 2 Answers) [Quidway]vlan 10 [Quidway-vlan10]mux-vlan [Quidway-vlan10]subordinate [Quidway-vlan10]subordinate group 11 [Quidway-vlan10]subordinate [Quidway-vlan10]subordinate separate 12 A. VLAN 10 is the principal principal VLAN B. VLAN 11 11 is the principal principal VLAN VLAN C. VLAN 12 is the subord subordinate inate separat separate e VLAN Correct Answer: AC Answer: AC Section: (none)



QUESTION 52 When configuring VLAN mapping, you must set the priority of outer VLAN ID. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 53 The port isolation function can isolate the ports on the same switch. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 54 Which statements are false? A. B. C. D.

The VLAN mapping function is usually configured configured on the edge node of a public network. network. The VLAN mapping mapping function can save VLAN VLAN resources on a public network. VLAN mapping allows private networks networks on different VLANs to communicate communicate with each other over the ISP network. VLAN mapping allows allows only the private networks networks on the same VLAN to communicate communicate with each other.



QUESTION 55 Which statements about VLAN are true? (Select 3 Answers) A. The VLAN improves improves network security. Users Users on different VLANs VLANs cannot communicate communicate with each other. other. B. The VLAN improves network processing processing efficiency. Users on different different VLANs are separated from each other. other. Therefore, the size of a broadcast domain is reduced. C. Layer 2 forwarding is only based on destination destination MAC addresses, addresses, and is irrelevant to VLAN configuration. configuration. D. The VLAN technology technology is a management method that controls the communication between terminals. Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:

QUESTION 56 Which statements about the VLAN on S series switches are true? (Select 2 Answers) A. B. C. D.

The VLAN IDs on the the switch range from 1 to 4090. The switch switch has has a default default VLAN. VLAN. The priority value in the VLAN tag can be be changed on the switch. switch. A VLAN tag contains contains one one byte. byte.


QUESTION 57


If the customer requires high mobility and easy management, the staff of different departments can be added to different VLANs. In addition, these VLANs are located on different IP subnets. Which VLAN allocation mode can meet these requirements? A. B. C. D.

VLAN allocation based based on source IP addresses addresses VLAN allocation allocation based based on destination IP addresses addresses VLAN allocation based based on source IP addresses addresses and source MAC MAC addresses VLAN allocation based based on destination MAC MAC addresses and destination destination IP addresses addresses


QUESTION 58 Which statements about the access interface are true? (Select 3 Answers) A. Only the VLAN whose whose ID is the same as as the PVID of the access access interface are allowed allowed on the access interface. B. hen receivin receiving g an untagge untagged d frame, frame, the access access interface interface adds adds its own PVID PVID to the the frame. frame. C. The access interface interface sends only untagged frames to the the peer device. device. D. None None of the the above. above. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 59 Which statement about the trunk interface is true? A. B. C. D.

A trunk interface is always connected to hosts. "multiple" VLAN IDs can be set on a trunk trunk interface. The VLAN VLAN IDs can be the same same as or different from from the PVID. The trunk trunk interface interface cannot cannot have a PVID. PVID. If the trunk interface receives a packet with a VLAN VLAN not in the allowed VLAN list, the trunk interface broadcast broadcast the packet in the VLAN.

Correct Answer: B www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 60 Which statements about MUX VLAN are true? (Select 2 Answers) A. MUX VLAN contains contains a principal VLAN and and subordinate VLANs. VLANs. The principal VLAN VLAN and subordinate VLANs VLANs cannot communicate. communicate. B. MUX VLAN contains a principal VLAN VLAN and subordinate VLANs. The subordinate subordinate VLANs are classified into subordinate subordinate separate VLANs and subordinate subordinate group VLANs. The interfaces in the subordinate group VLAN can communicate with each other. C. The principal VLAN and subordinate subordinate VLANs can communicate. communicate. D. The interfaces of different subordinate subordinate separate VLANs can communicate communicate with each other, but cannot communicate communicate with the interfaces in the principal VLAN. VLAN. Correct Answer: BC Section: (none) Explanation Explanation/Reference:

QUESTION 61 Which statement is true? A. B. C. D.

The principal VLAN must be configured before subordinate VLANs. VLANs. The MUX VLAN VLAN function takes takes effect without without being enabled enabled on an interface. In MUX VLAN, a VLAN VLAN can function as both principal VLAN and subordinate VLAN. VLAN. The MUX VLAN VLAN can contain contain only one subordinate separate separate VLAN.


QUESTION 62 Which statement about ARP proxy is false?


A. B. C. D.

The ARP proxy, namely, namely, the gateway, sends sends ARP request for for the host. The MAC address in the ARP request packet is the the MAC address of the the host. The ARP proxy, namely, the gateway, gateway, sends ARP request for the host. The MAC address address in the ARP request packet is the MAC address of its own interface. interface. ARP proxy is is also called promiscuous ARP ARP or ARP hack. The ARP proxy allows the hosts on the networks networks with the same network ID to communicate with with each other.


QUESTION 63 Which statement is false? A. B. C. D.

The switch supports 1:1 VLAN mapping. mapping. The switch does does not support support N:1 VLAN mapping on an interface. The switch can can perform VLAN VLAN mapping for double-tagged packets. The switch can map the outer VLAN ID of packets to another another VLAN ID.


QUESTION 64 Which statement about VLAN is false? A. B. C. D.

A VLAN tag contains contains a 3-bit priority field. field. The priority value ranges from 0 to 7. ItIt is used for differentiated differentiated service forwarding. forwarding. The priority in the VLAN tag can be mapped to the internal internal priority of the switch, for differentiated service service forwarding. The priority in the VLAN tag can be changed on the the switch. The priority in the VLAN VLAN tag cannot be changed.

Correct Answer: D Section: (none)



QUESTION 65 Which statements are true? (Select 3 Answers) A. B. C. D.

The routing ARP proxy proxy allows the hosts on different physical networks of the same same network segment to to communicate with each other. The intra-VLAN ARP ARP proxy allows isolated isolated users on a VLAN to communicate with with each other. The inter-VLAN ARP proxy allows allows hosts on different VLANs to communicate communicate with each other through Layer 3. The inter-VLAN ARP proxy function function can't be enabled on the VLANIF interface of the super super VLAN to implement communication communication between sub-VLANs.


QUESTION 66 Which statement about VLAN mapping is true? A. B. C. D.

The interface configured configured with VLAN mapping mapping must be a hybrid hybrid interface. The same VLANs on on different interfaces cannot be mapped to to different VLANs. Different VLANs on the same interface can be mapped to the same VLAN. Any types of interfaces can be configured with VLAN mapping.


QUESTION 67 Which statement about port isolation configuration is false? A. Port isolation can be be used for Layer 2 isolation. isolation.


B. In port isolation mode, mode, ports are isolated at Layer 2 but can communicate communicate at Layer Layer 3 by default. C. Before the port isolation function takes takes effect on an interface, the port isolation function function must be enabled first. D. The port-isolate enable command can run in the system view. view. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 68 Which VLAN assignment methods are supported by the Huawei S9300? (Select 3 Answers) A. B. C. D.

Assigning VLANs based based on Layer 7 protocols protocols Assigning Assigning VLANs VLANs based based on protocol protocols s Assigning Assigning VLANs VLANs based based on IP subnets subnets Assigning Assigning VLANs VLANs based on MAC addresses addresses

Correct Answer: BCD Section: (none) Explanation Explanation/Reference:

QUESTION 69 Which statements about VLAN aggregation are true? (Select 3 Answers) A. B. C. D.

"multiple" VLANs (broadcast (broadcast domains) are are on the same physical physical network; therefore, therefore, different VLANs belong belong to the same subnet. subnet. VLAN aggrega aggregation tion can save save IP addresses. addresses. Only the super VLAN VLAN requires an IP address, address, but sub-VLANs sub-VLANs do not need. The VLAN that is used used to separate broadcast broadcast domains is called called super VLAN.



QUESTION 70 Which statement about VLAN mapping is false? A. B. C. D.

VLAN mapping is also also called VLAN translation. translation. VLAN mapping can implement translation translation between C-VLAN IDs IDs and S-VLAN IDs. IDs. VLAN mapping mapping can can be configur configured. ed. VLAN mapping means that a VLAN tag is added to packets. packets.


QUESTION 71 Which statement about the VLAN on a Layer 2 switch is true? A. B. C. D.

The CFI in the VLAN VLAN tag specifies whether whether the priority in the VLAN tag is valid. The VLAN tag tag is located in the Layer Layer 2 header of a packet. The CFI in the VLAN VLAN tag contains contains two two bits. A VLAN on the switch switch is a broadcast domain. domain. The broadcast domains are separated. separated.


QUESTION 72 Which statements about VLAN configuration are true? (Select 2 Answers) A. B. C. D.

You can enter the VLAN VLAN view at the same same time you create a VLAN. If you run undo vlan, the VLAN is invalid, but still exists. You do not not need to create the VLAN when you use it next time. You can configure a character string of VLAN VLAN description. The length of the character character string is not limited. If you do not enter the VLAN ID when running the display vlan vlan command, information about all VLANs VLANs will be displayed.



QUESTION 73 Which statement about the following configuration is true? port link-type hybrid port hybrid pvidvlan 2 port hybrid untagged vlan 2 port hybrid tagged vlan 3 A. The default VLAN of of the interface is VLAN VLAN 2. B. The port hybrid tagged vlan 3 command configures configures the VLAN for a hybrid interface. Frames Frames in the VLAN then pass through the hybrid interface interface in untagged mode. C. The port hybrid untagged untagged vlan 2 command command configures the VLAN VLAN for a hybrid interface. interface. Frames in the VLAN then pass through the hybrid interface in tagged mode. D. All of of the above. above. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 74 Which statements about VLAN mapping are true? (Select 2 Answers) A. B. C.

hen sending a frame from the local VLAN, VLAN, the switch replaces the VLAN tag in the frame with another VLAN tag. hen receiving receiving a frame frame from another another VLAN, VLAN, the switch switch replaces replaces the VLAN VLAN tag of the frame frame with the local local VLAN tag. tag. hen an interface interface receives a frame from another another VLAN, it does not replace the VLAN VLAN tag of the frame. The The interface replaces the VLAN VLAN tag of the frame with with another VLAN tag only when it sends a frame. D. The interface replaces the VLAN tag of only the the frame received from another VLAN, but does does not change the VLAN tag of the frame it sends out.

Correct Answer: AB Answer: AB www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn



Port isolation is a mechanism mechanism that controls controls the access between between switch interfaces. Port isolation is an isolation isolation mechanism at the physical physical layer. Port isolation prevents prevents the computers connected connected to different ports from accessing each other. Port isolation can be configured based based on VLANs.



The sub-VLANs are configured in the super super VLAN view. VLANs 1 to 4094 can be configured as a super VLAN. VLAN. The aggregate-vlan aggregate-vlan command is used to configure the super VLAN. A VLAN to be configured configured as a super VLAN VLAN cannot contain any any interface.

Correct Answer: ACD Answer: ACD Section: (none) Explanation Explanation/Reference:

QUESTION 77 Which statements about VLAN allocation are true? (Select 3 Answers)


A. B. C. D.

The IP subnet VLAN VLAN is used to send the packets from the specified specified network segment segment or IP address over over the specified VLAN. VLAN. The MAC address- or IP subnet-based VLAN VLAN is valid for only the untagged packets. packets. The protocol-based VLAN has a higher priority priority than the IP subnet-based subnet-based VLAN. The protocol-based VLAN indicates that service types on the network are bound to to VLANs.

Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:

QUESTION 78 Which is contained in the GVRP VLAN deregistration message? A. B. C. D.

Specified VLAN ID Specified Specified IP address address Specified Specified MAC address address Known Known port port number number


QUESTION 79 On a switch running GVRP, each interface is considered as a participant. The participants can exchange information. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 80 When the GVRP registration mode is FORBIDDEN, no VLAN can be created or registered on the interface. In addition, which VLANs are deregistered on the interface? A. B. C. D.

All VLANs except VLAN VLAN 1 All VLANs VLANs except except VLAN 4095 All All VLA VLANs Ns All VLANs except the VLAN specified specified by the user


QUESTION 81 Which are contained in a GARP participant? (Select 2 Answers) A. B. C. D.

GARP Application GARP Informat Information ion Propagatio Propagation n (GIP) GARP Informat Information ion Declaration Declaration (GID) (GID) Interf Interface ace LLC

Correct Answer: AC Answer: AC Section: (none) Explanation Explanation/Reference:

QUESTION 82 When the GVRP registration mode is FIXED, which statement is true? A. B. C. D.

VLANs can be manually manually created and registered registered on the interface, interface, and can also be dynamically dynamically registered registered and deregistered on the interface. VLANs cannot be manually created created and registered on the interface, but can be dynamically dynamically registered and deregistered deregistered on the interface. VLANs can be manually created and registered registered on the interface, but cannot be dynamically dynamically registered or deregistered on the interface. interface. VLANs cannot be manually created created and registered on the interface, and cannot cannot be dynamically registered or deregistered deregistered on the interface.



QUESTION 83 Which statements about the relationship between GVRP and GARP are true? (Select 2 Answers) A. B. C. D.

GVRP, GARP, and GMRP are the standards standards of the same type. type. GVRP and and GARP are defined defined by IEEE IEEE 802.1p. 802.1p. GVRP is based based on GARP, GARP, and is an application of GARP. GVRP is a new new definitio definition n of GARP. GARP.


QUESTION 84 GARP involves various messages. Besides JoinIn message and Leave message, which are also the GARP messages? (Select 3 Answers) A. B. C. D.

Notice Empt Empty y Join JoinEm Empt pty y Leav LeaveA eAll ll


QUESTION 85


As shown in the figure, figure, port 1 of switch A is configured with the Fixed mode, and other ports are configured configured with the Normal Normal mode. The trunk interfaces allow all VLANs. Which VLANs are registered on port 1 of switch C? (Select 3 Answers) A. B. C. D.

VLAN 1 VLAN VLAN 5 to to VLAN VLAN 10 10 VLAN VLAN 15 to to VLAN VLAN 20 VLAN VLAN 25 to to VLAN VLAN 30


QUESTION 86 If 802.1x authentication is enabled on an interface, MAC address authentication (enabled by the mac-authen enable command) and direct authentication (enabled by the direct-authen enable command) cannot be enabled on the interface.



QUESTION 87 Which are 802.1x authentication modes? (Select 2 Answers) A. B. C. D.

EAP relay mode Prox Proxy y mod mode e EAP terminatio termination n mode mode Remote Remote mode mode


QUESTION 88 Before configuring 802.1x services, you need to determine the configuration roadmap and prepare data. Which are general steps in the configuration roadmap? (Select 3 Answers) A. B. C. D.

Configure a Tftp server. server. Configure Configure an AAA authenticat authentication ion template. template. Configure Configure a domain domain.. Configure Configure 802.1x 802.1x authenticat authentication. ion.

Correct Answer: BCD Section: (none) Explanation



QUESTION 89 After detecting a user user with a new MAC address, the switch initiates an EAP authentication authentication request. IfIf the client does not respond and the MAC address bypass authentication is not configured, which statement is false? A. B. C. D.

If the client does not not respond after the number number of authentication authentication requests reaches a specified value, the the switch considers that that the client software is not installed. All permissio permissions ns of the user are are prohibited. prohibited. The user is allowed to access only the the isolated zone. zone. Detection is initiated again after a period of time.


QUESTION 90 The Layer 2 packet header in EAPoL packets is | DMAC | SMAC | TYPE | EAPOL | FCS |. Which statements are true? (Select 3 Answers) A. B. C. D.

The destination address address of packets is a specified MAC address. address. The destination address of packets packets is a unicast MAC address. EAPoL packets packets cannot be forwarded by switches. The source MAC address address of packets is the MAC address of the interface that sends sends packets.


QUESTION 91 The dot1x command is used to enable 802.1x authentication globally or on an interface. Which statements about the undo dot1x command are true? (Select 3 Answers)


A. B. C. D.

It is used to disable 802.1x authentication authentication globally. It will disconnect online online users from the interface; interface; therefore, use use the command with with caution. It is used to disable 802.1x 802.1x authentication authentication on an interface. interface. Ensure that there are no online users before you you run the undo dot1x command. Otherwise, Otherwise, running the undo dot1x command fails.


QUESTION 92 The dot1x authentication-method command is used to set the 802.1x authentication mode. Which is the most secure authentication mode? A. B. C. D.

PAP EAP CHAP EAPEAP-TT TTLS LS

Correct Answer: C Section: (none) Explanation Explanation/Reference: Topic 2, Volume B QUESTION 93 Which statements about guest VLAN configuration are true? (Select 3 Answers) A. B. C. D.

The guest VLAN must must be created before you configure the guest guest VLAN. The default VLAN of of the interface cannot cannot be configured as the the guest VLAN. Different interfaces interfaces can be configured with different guest VLANs. An interface can be configured configured with up to eight guest guest VLANs.

Correct Answer: ABC Answer: ABC Section: (none) Explanation



QUESTION 94 If you have run the dot1x port-method command with the port parameter specified (port-based 802.1x authentication), the maximum number of users on an interface changes to 1. In this case, which statements are true? (Select 2 Answers) A. B. C. D.

You can run the dot1x dot1x max-user command command to change the maximum maximum number of access access users. You cannot run the dot1x max-user command command to set the maximum maximum number of access access users. You need to run the undo dot1x port-method command, command, and then set the maximum number number of access users. All of the the abov above e


QUESTION 95 What is the function of DHCP Offer messages? A. DHCP Offer messages messages are broadcast by the client to detect the available server. B. DHCP Offer messages are sent by the server server to respond to the DHCP Discover messages messages sent by the client. Certain configuration configuration parameters are specified in he Offer messages. C. DHCP Offer messages are sent by the client client to apply to the server for configuration parameters, parameters, configuration confirmation, confirmation, or extension of the IP address lease. D. DHCP Offer messages are sent from the the server to the client. They contain configuration configuration parameters such as including the IP address. address. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 96 The option field in DHCP messages uses the CLV mode.



QUESTION 97 Which encapsulation mode is used for DHCP messages? A. B. C. D.

TCP encapsulation RTP encap encapsul sulati ation on UDP encaps encapsula ulatio tion n PPP encaps encapsula ulatio tion n


QUESTION 98 The option field in DHCP messages has a fixed length of four bytes. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 99


When the DHCP relay receives a DHCP request message in which the giaddr (gateway IP address) field is 0, how does the DHCP relay process the DHCP request message? A. B. C. D.

The DHCP relay fills fills its IP address in the the giaddr field and transmits transmits the DHCP request request message to the the DHCP server in unicast unicast mode. The DHCP relay fills its IP address in the giaddr field and transmits transmits the DHCP request message message in broadcast mode. The DHCP relay retains the value of the giaddr field field and transmits the DHCP request message message to the DHCP server in unicast mode. The DHCP relay retains the value of the giaddr field field and transmits the DHCP request message message in broadcast mode.


QUESTION 100 What is the sequence of applying for an IP address in DHCP? 1. The host sends a DHCP Request message to apply for an IP address. 2. The DHCP server replies with a DHCP Offer message. 3. The host sends a DHCP Discovery message to search for the DHCP server. 4. The DHCP server replies with a DHCP ACK message after receiving the DHCP Request message. A. B. C. D.

1-2-3-4 1-41-4-33-2 2 3-23-2-11-4 4 3-43-4-11-2 2


QUESTION 101 If the lease of a client IP address is not extended after 87.5% of the lease is reached, which message is used by the client to extend the IP address lease? A. DHCP Release broadcast broadcast message


B. DHCP Releas Release e unicast unicast message message C. DHCP Request Request broadc broadcast ast message message D. DHCP Reques Requestt unicast unicast message message Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 102 If only some devices on a network run MPLS (MPLS domain is encapsulated in the IP packet header), labels are generated only for direct routes of devices running MPLS. Labels are not generated for the routes originated from other devices running IP protocols. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 103 The core of the MPLS technology is label switching. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 104 What about all outgoing labels in the label forwarding table of a device for the same route with the same next hop?


A. They must be different. different. B. They must be the the same. same. C. They may be be the the same. same. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 105 What about all outgoing labels in the label forwarding table of a device for different routes with the same next hop? A. They must be different. different. B. They must be the the same. same. C. They may be be the the same. same. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 106 What is the POP action in MPLS? A. B. C. D.

The top label is removed removed from the MPLS label stack. The top label label is added to the the MPLS label label stack. The top label is replaced with another value. value. The top label label is replaced with the label label of another group.



QUESTION 107 MPLS is a switching standard defined by the IETF. Which devices exist on the MPLS network? (Select 2 Answers) A. B. C. D.

LSR LER Label distributi distribution on router router Label transmit transmit router router

Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 108 MPLS is a switching standard defined by the IETF. Which device adds or deletes labels? A. B. C. D.

Label distribution router router LER LSR Label transmit transmit router router


QUESTION 109 Which encapsulation mode is used for the MPLS protocol on an Ethernet network? A. B. C. D.

Packet mode Fram Frame e mod mode e Transp Transport ort mode mode Channe Channell mode mode


E. Pipe Pipe mode mode Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 110 Where is the MPLS label in a data frame? A. B. C. D.

Behind the Layer 3 header and before the the Layer 2 header Behind the Layer Layer 2 header and before the the Layer 3 header header In the the Layer Layer 3 header header Before Before the Layer Layer 2 header header


QUESTION 111 In which of the following modes can the Eudemon be working? (Select 3 Answers) A. B. C. D.

Routing mode Transp Transpare arent nt mode mode Compos Composite ite mode mode Transf Transfer er mode mode



QUESTION 112 The firewall can be working in routing mode, transparent mode, or composite mode. The default mode is the composite mode. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 113 Configuring a firewall to work in transparent mode does not change the network topology. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 114 The firewall does not use security rules to filter packets exchanged between interfaces in the same zone. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 115


Network address translation (NAT) translates only IP address information. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 116 IP unnumbered is to borrow an IP address from an interface. If an interface has multiple IP addresses, all its IP addresses will be borrowed and the primary address will continue after these IP addresses are borrowed. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 117 When two Eudemons are working in dual-system hot backup mode, their session tables are backed up in real time. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 118


How many default zones does the Eudemon supporting multi-instance have? A. B. C. D.

Two Thre Three e Four Five


QUESTION 119 Which of the following is the priority value of the DMZ on the Eudemon? A. B. C. D.

10 50 75 85


QUESTION 120 Users can change the priorities of default zones on the firewall as required. A. True B. Fals False e Correct Answer: B Section: (none) Explanation



QUESTION 121 What are the types of firewalls developed so far? (Select 3 Answers) A. B. C. D.

Packet filtering firewall firewall Proxy Proxy firewa firewall ll Anti-virus Anti-virus firewall firewall Statef Stateful ul firewall firewall


QUESTION 122 Which of the following firewalls is the most popular? A. B. C. D.

Packet filtering firewall firewall Statef Stateful ul firewa firewall ll Proxy Proxy firew firewall all Anti-virus Anti-virus firewall firewall


QUESTION 123 To enable an Eudemon in routing mode to work like a router, you need to assign IP addresses to interfaces and enable dynamic or static routing protocols on the Eudemon. A. True B. Fals False e



QUESTION 124 The Eudemon that is working in transparent mode detects processes data at Layer 2. Its interfaces are not configured with IP addresses. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 125 When an Eudemon is working in composite mode, some of its interfaces are configured with IP addresses (Layer 3 interfaces) and the other interfaces are not configured with IP addresses (Layer 2 interfaces). To enable dual-system hot backup on an Eudemon, you can configure the Eudemon to work in composite mode. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 126 Two Eudemons in dual-system hot backup can be working in Active-Active mode or Active- Standby mode. A. True B. Fals False e



QUESTION 127 The Eudemon supports load balancing between multiple uplinks. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 128 How many user-defined security zones at most are configured on an Eudemon? A. B. C. D.

3 4 5 6


QUESTION 129 Different virtual firewall instances on an Eudemon must be configured with the same security policy. A. True


B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 130 Virtual firewalls on the Eudemon are not allowed to access each other by default unless a security policy is specified. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 131 IP addresses added to the blacklist of the Eudemon cannot be deleted. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 132 You cannot set an aging time for the blacklist of the Eudemon. A. True B. Fals False e



QUESTION 133 The Eudemon generates a blacklist upon detecting an attack. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 134 The TCP SYN flood attack usually occurs during the TCP handshake process. How many handshakes are required to set up a TCP connection? A. B. C. D.

1 2 3 4


QUESTION 135 The Eudemon can control traffic and connections based on IP addresses. A. True


B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 136 What is the maximum number of security zones supported by the Eudemon? A. B. C. D.

256 128 32 16


QUESTION 137 Which of the following data traffic is incoming data traffic on the Eudemon? (Select 2 Answers) A. B. C. D.

Data traffic from a Trust zone to a demilitarized demilitarized zone (DMZ) Data traffic traffic from from an Untrust Untrust zone zone to a DMZ Data traffic traffic from from a Local zone to a Trust Trust zone Data traffic from from an Untrust Untrust zone to a Local zone

Correct Answer: BD Section: (none) Explanation Explanation/Reference:


QUESTION 138 Security policies for the firewall are applied to interzones but not to interfaces. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 139 The multi-channel protocol is used to establish at least two channels (sessions) for communications or services. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 140 ICMP packets are sent in a Smurf attack and UDP packets are sent in a Fraggle attack. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 141


The urgent pointer in the flag field of an IPv4 packet header is generally used for OOB data transmission. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 142 A firewall filters packets packets exchanged between between zones but does not filter packets exchanged exchanged between interfaces interfaces in the same zone. zone. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 143 Two Eudemons in dual-system hot backup mode can be working in Active-Active mode or Active-Standby mode. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 144 Two Eudemons in dual-system hot backup mode use Huawei Redundancy Protocol (HRP) to back up key information (such as configuration commands and


session status) between the active and standby devices. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 145 After an interface on on a firewall is added to a zone, the interface interface belongs to the zone. zone. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 146 Which of the following statements about the security policies for the Eudemon are true? (Select 2 Answers) A. B. C. D.

By default, a user in in the Local zone can access other zones. By default, a user in the Trust zone can access the the DMZ. By default, a user in in the Untrust zone cannot cannot access the Trust Trust zone. By default, a user in in a zone of the firewall firewall cannot access any other zone of the firewall. firewall.

Correct Answer: CD Section: (none) Explanation Explanation/Reference:


QUESTION 147 Which of the following statements about the zone priorities of the Eudemon are true? (Select 3 Answers) A. B. C. D.

The priority of the Local Local zone is 100. The priority priority of of the Trust Trust zone is 80. 80. The priority priority of of the Untrust Untrust zone zone is 5. The priorit priority y of the DMZ DMZ is 50. 50.


QUESTION 148 Status detection is an advanced communication filtering mechanism. It checks the application layer protocol and monitors the status of the connection-based application layer protocol. For all connections, the status information about each connection is maintained by ASPF and is used to dynamically determine whether to permit or deny data packets to firewalls. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 149 Which of the following statements about the firewall technology are true? (Select 3 Answers) A. B. C. D.

The network gateway gateway of the application layer checks application-layer application-layer data carried in packets passing through through the gateway. The network gateway for session status status detection checks session information information carried in packets only at the session layer. layer. During packet filtering, filtering, the session status status is checked and the whole data stream is is analyzed. Address proxy replaces IP addresses addresses and port numbers of hosts within the network network with the IP address and port number of the proxy device or router. router.



QUESTION 150 The NAT multi-instance function on the Eudemon independently maintains a NAT table for each instance to provide address translation services for instances. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 151 The IPSec function on the Eudemon supports NAT traversal. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 152 The NAT function enabled on the Eudemon does not greatly affect system performance. A. True B. Fals False e Correct Answer: A Answer: A



QUESTION 153 The Eudemon does not support port mapping. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 154 The blacklist function on the firewall can filter packets based on destination IP addresses. A destination IP address can be dynamically added to or deleted from the blacklist. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 155 In a Land attack, the source address and destination address of an SYN packet are both the IP address of the attacked object or a loopback address. A. True B. Fals False e Correct Answer: A Answer: A



QUESTION 156 Which of the following attacks are prevented after an IP address and MAC address are bound on the Eudemon? (Select 2 Answers) A. B. C. D.

IP address spoofing MAC address address spoofing spoofing DoS DoS atta attack ck DDoS DDoS attack attack


QUESTION 157 Which of the following solutions effectively defend against ARP attacks? (Select 3 Answers) A. B. C. D.

Binding a MAC address address and an IP address address Enabling the ARP attack protection protection function on a Huawei switching device Adding network segments to different different VLANs on a switch Enabling Enabling IP packet packet filtering filtering


QUESTION 158 Which of the following NAT functions are supported by the Eudemon? (Select 3 Answers)


A. B. C. D.

NAT/PAT IPv4 IPv4 to IPv6 IPv6 NAT NAT Bidirectio Bidirectional nal NAT NAT NAT serv server er


QUESTION 159 Which of the following attacks can Eudemon defend against? (Select 3 Answers) A. B. C. D.

SYN-Flood SQL SQL inj injec ectt Port Port Scan Scan Ping-D Ping-Deat eath h


QUESTION 160 Which of the following are performance parameters of the firewall? (Select 3 Answers) A. B. C. D.

Throughput Maximum Maximum number number of of interface interface Number Number of new connectio connections ns per second second Proces Process s delay delay

Correct Answer: ACD Answer: ACD Section: (none) Explanation



QUESTION 161 By which can an IP-based advanced ACL filter packets? (Select 5 Answers) A. B. C. D. E. F.

Source IP address and its subnet mask Destinati Destination on IP address address and its subnet subnet mask Protoc Protocol ol type type TCP or UDP UDP port port number number Priority Priority of of the data data packet packet Length Length of the data data packet packet

Correct Answer: Section: (none) Explanation Explanation/Reference: Answer: A, B, C, D, E QUESTION 162 Which of the following statements about NAT are true? (Select 3 Answers) A. B. C. D.

NAT is short for "network "network address translation". translation". NAT, also called address address proxy, is used for translation between between private and public network addresses. Hosts within the intranet can can access the extranet without using NAT. NAT can effectively effectively resolve the problem of IP address shortage.


QUESTION 163 Which of the following DDoS attacks can the Eudemon 1000E defend against? (Select 3 Answers)


A. B. C. D.

SYN flood UDP UDP floo flood d ICMP ICMP flo flood od SQL SQL flo flood od


QUESTION 164 Which of the following high availability (HA) features are supported by the Eudemon 1000E? (Select 2 Answers) A. B. C. D.

Dual-system hot backup backup Multi-sys Multi-system tem hot backup backup Dual-syst Dual-system em load balanc balancing ing Multi-sys Multi-system tem load load balancing balancing


QUESTION 165 Which of the following indicators are performance indicators of the Eudemon? (Select 3 Answers) A. B. C. D.

Throughput of large-sized large-sized or small-sized packets Number Number of the interf interface ace VPN perfo performa rmance nce Proces Process s delay delay

Correct Answer: ABD Answer: ABD Section: (none) Explanation



QUESTION 166 To process fragmented service packets on an NAT-enabled firewall, which of the following functions needs to be enabled? A. B. C. D.

Transparent fragment fragment transmission Fragme Fragment nt cache cache Fragment Fragment reassembly reassembly MTU MTU che check ck


QUESTION 167 In the scenario where packets are sent and received along different paths, which of the following functions needs to be disabled on the firewall? A. B. C. D.

Status detection Attack Attack defens defense e Packet Packet filte filterin ring g Status Status backup backup


QUESTION 168 Which of the following information do you check to directly identify a fault in the firewall if the data transmission is interrupted? A. Session table B. Log


C. Global Global statistics statistics about the firewal firewalll D. Alar Alarms ms Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 169 Assume that the traceroute traceroute test is used to detect the packet forwarding path and tracert packets have passed through the firewall. Which of the the following attack protection functions needs to be disabled to normally display the tracert result? A. B. C. D.

ICMP-redirect ICMP-u ICMP-unre nreach achabl able e Trac Tracer ertt Smur Smurf f


QUESTION 170 What is the recommended minimum delay for HRP preemption on the Eudemon? A. B. C. D.

120s 60s 10s 5s



QUESTION 171 Which of the following commands is used to display the detailed information about the Eudemon? A. B. C. D.

Display firewall statistic statistic system Display firewall session table raw both-direction both-direction Display Display firewall firewall session session table verbose verbose Display Display firewall firewall session session table detail detail


QUESTION 172 Which of the following technologies does the Eudemon use to defense against Anti-DDoS attacks? (Select 5 Answers) A. B. C. D. E. F.

TCP agent Source Source authenticati authentication on and detection detection Crc Crc che check ck Fingerprint identification (characteristics detection) Abnormal Abnormal session session detection detection Traffi Traffic c cont control rol

Correct Answer: Section: (none) Explanation Explanation/Reference: Answer: A, B, D, E, F QUESTION 173 What are the types of DDoS attacks? (Select 3 Answers) A. Attacks by special packets packets B. Scanni Scanning ng atta attack ck


C. Sniff Sniff attack attack D. Applicatio Application-lay n-layer er attack attack Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:

QUESTION 174 Which of the following attacks are DDoS attacks? (Select 4 Answers) A. B. C. D. E.

SYN flood SYN/AC SYN/ACK K floo flood d UDP UDP flo flood od FTP FTP atta attack ck HTTP HTTP get get flood flood

Correct Answer: ABCE Answer: ABCE Section: (none) Explanation Explanation/Reference:

QUESTION 175 QoS provides services of different qualities to meet various application requirements, including dedicated bandwidth, decreased packet loss ratio, short packet transmission delay, and decreased delay and jitter. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 176 The variation in packet delay is called jitter. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 177 The end-to-end delay is the sum of transmission delays, processing delays, and queuing delays along the packet forwarding path. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 178 The data transmission rate depends on the bandwidth. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 179 Packet loss occurs only on the packet receiver. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 180 Based on specific rules, traffic classification identifies packets having the same characteristics. Traffic classification is the prerequisite and basis for differentiated services. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 181 Congestion management provides means to manage and control traffic when traffic congestion occurs. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 182 The traditional packet loss policy uses the Tail-Drop method. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 183 QoS in best-effort service mode uses which of the following queue scheduling technology? A. FIFO B. FQ C. PQ D. RR Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 184 In DiffServ mode, before the application program sends packets, it needs to confirm that the network has reserved resources for packet transmission. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 185 The Per-Hop Behavior (PHB) defines the policy and priority applied to a packet when traversing a hop (such as a DS) in a DiffServ network. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: Topic 3, Volume C QUESTION 186 In traffic shaping, the packet whose transmission rate exceeds the rate limit will be discarded or re-marked. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 187 WFQ can effectively control the delay and jitter by means of configuring weights for different services. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 188 Congestion occurs when a link or node is carrying so much data that its quality of service deteriorates. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 189 Most fields in IP headers of packets in the same data flow are identical. You can compress these fields to improve the link transmission efficiency. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 190 Which of the following information in a packet can be marked or re-marked? A. B. C. D.

IP DSCP, IP precedence, precedence, and 802.1p information information IP source source and destinatio destination n addresses addresses MAC addres address s Any informa information tion in in the packet packet

Correct Answer: A Answer: A Section: (none) Explanation



QUESTION 191 Simple traffic classification can be performed based on which of the following information in VLAN packets? A. B. C. D.

DSCP IP preced precedenc ence e MPLX MPLX EXP EXP 802. 802.1p 1p


QUESTION 192 QoS includes which of the following aspects? (Select 3 Answers) A. B. C. D.

Transmission bandwidth bandwidth Transmissi Transmission on delay delay and jitter jitter Packet Packet loss loss rati ratio o Networ Network k security security


QUESTION 193 QoS can be performed in which of the following modes? (Select 3 Answers) A. Best-effort service B. Integr Integrate ated d servic service e C. Differenti Differentiated ated service service


D. Assured Assured forwardin forwarding g service service Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 194 Based on classification rules, traffic classification can be divided into which of the following types? (Select 2 Answers) A. B. C. D.

Simple traffic classification classification Complex Complex traffic traffic classific classification ation On-demand On-demand traffic traffic classificat classification ion Service Service traffic traffic classificat classification ion


QUESTION 195 Simple traffic classification can be performed based on which of the following information in IPv4 packets? (Select 2 Answers) A. B. C. D.

DSCP IP preced precedenc ence e EXP 802. 802.1p 1p



QUESTION 196 Which of the following technologies are available for traffic shaping? (Select 2 Answers) A. GTS B. LR C. CAR D. RED Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 197 In case of congestion, which of the following indexes will affect QoS? (Select 3 Answers) A. B. C. D.

Transmission delay Transmissi Transmission on jitter jitter Packet Packet loss loss rati ratio o Transmissi Transmission on distance distance


QUESTION 198 Simple traffic classification in QoS classifies packets based on the 5-tuple information, including the source IP address, source port number, protocol number, destination IP address, and destination port number. A. True B. Fals False e Correct Answer: B Section: (none)



QUESTION 199 Complex traffic classification matches packets with rules and then takes actions to matching packets. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 200 Which of the following statement about the jitter and delay is false? A. B. C. D.

The jitter depends on on the delay. The variation variation in packet packet delay delay is called jitter. jitter. The lower the delay is, the less the jitter is. The jitter jitter is independen independentt of the delay. delay.


QUESTION 201 Which of the following statement about QoS in DiffServ mode is false? A. The parameter field in the IP packet header header informs devices on the network of the QoS requirements of the application. B. Every device on the packet transmission transmission paths can learn the service request types by analyzing analyzing the IP packet header. C. Before sending packets, the application application program needs to confirm that the network network has reserved resources for packet packet transmission.


D. DiffServ DiffServ is a QoS solution solution based based on packets. packets. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 202 Which of the following statement about packet marking is false? A. B. C. D.

TheQosInfo field of the packet can be marked. marked. The DSCP and and IP precedence precedence fields of the IP packet can be marked. marked. The 802.1p field field of the VLAN packet can be marked. marked. The IP address address of the packet packet can be marked. marked.


QUESTION 203 Based on fields IP precedence, MPLS EXP, or 802.1p, packets can be classified into how many service types? A. B. C. D.

4 6 7 8



QUESTION 204 Which of the following queue scheduling technology can achieve better fairness? A. FQ B. PQ C. CQ D. RR Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 205 Which of the following statements about traffic policing are true? (Select 3 Answers) A. B. C. D.

Is used to limit the traffic transmission rate. rate. Is used used to color packets. packets. Caches packets whose transmission transmission rate exceeds exceeds the limit. Re-marks Re-marks packets packets with prioriti priorities. es.


QUESTION 206 Traffic shaping uses queues to cache traffic whose transmission rate exceeds the limit. Which of the following statement about traffic shaping is not true? A. Compared with traffic traffic policing, traffic shaping shaping is advanced in terms of caching burst burst traffic. B. ith traffi traffic c shaping, shaping, packets packets can can be transmitte transmitted d at an even even rate. rate. C. Caching packets in the queue increases the packet delay in case case of congestion. D. In case of congestion, congestion, traffic shaping causes causes the packet loss ratio to increase.



QUESTION 207 Traffic policing usually uses which of the following QoS technologies? A. GTS B. LR C. CAR D. RED Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 208 Which of the following link efficiency mechanism can be used to compress RTP and TCP packet headers? A. B. C. D.

IPHC LFI PPP All of the the abov above e


QUESTION 209 Which of the following statements about the jitter and delay are true? (Select 3 Answers)


A. B. C. D.

The end-to-end delay delay is the sum of transmission transmission delays, processing processing delays, and queuing queuing delays along the the packet forwarding path. The variation variation in packet packet delay delay is called jitter. jitter. The jitter depends on on the delay. The lower lower the delay, the less the jitter. The jitter jitter is independen independentt of the delay. delay.


QUESTION 210 Which of the following PHB types are defined in IETF DiffServ? (Select 3 Answers) A. B. C. D.

Default PH ClassClass-Sel Select ector or PHB Fast Forwarding Forwarding PHB Assured Assured Forwar Forwarding ding PHB


QUESTION 211 Which of the following are disadvantages of the traditional tail drop mechanism? (Select 3 Answers) A. B. C. D.

TCP global synchronization synchronization TCP starva starvatio tion n High Averag Average e Link Utilizat Utilization ion Packet Packet drop is not based based on priorities priorities

Correct Answer: ABD Answer: ABD Section: (none)



QUESTION 212 Which of the following packet drop policies can be applied to the congestion avoidance mechanism? (Select 3 Answers) A. Tail-drop B. RED C. RED D. FQ Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 213 Which of the following congestion avoidance mechanisms can be used to avoid global TCP synchronization? (Select 2 Answers) A. RED B. RED C. FIFO D. FQ Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 214 Which of the following are popular link efficiency mechanisms? (Select 2 Answers) A. IPHC


B. LFI C. HDLC D. PPP Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 215 In traffic policing using two token buckets, tokens are put into the CBS bucket at the committed information rate (CIR). The peak burst size (PBS) bucket is filled in only after the CBS bucket is full. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 216 Exhibit: Based on the DSCP field (first 6 bits of the ToS field), packets can be classified into how many types? A. B. C. D.

4 8 16 64



QUESTION 217 In addition to traffic rate limit, the CAR can mark packets with colors.If one token bucket & one- rate is used in traffic policing and the number of tokens is insufficient, packets are marked with which of the following color? A. B. C. D.

Red Green reen Yell Yellow ow Blue


QUESTION 218 In traffic policing using two token buckets & two-rate, when the CIR is set to 1 Mbit/s and the PIR is set to 2 Mbit/s, what is the maximum transmission rate for the traffic in green? A. B. C. D.

1 Mbit/s 2 Mbi Mbit/ t/s s 3 Mbit Mbit/s /s 4 Mbit Mbit/s /s


QUESTION 219 Complex traffic classification can be performed based on which of the following packet information? (Select 3 Answers) A. Packet priority B. Source Source and destinati destination on addresses addresses


C. Total Length Length of the the Packet Packet D. Source Source and destinatio destination n port numbers numbers Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:

QUESTION 220 Assume that there are four flows a, b, c, and d, the transmission transmission rate of each flow flow is 50 Mbit/s, and the the total bandwidth of of the interface for flow flow transmission is 100 Mbit/s. In the case of congestion, WFQ is available for flows a, b, c, and d, with the weight proportion being 1:2:3:4. Which of the following statement about the interface bandwidth allocated to each flow is true? A. B. C. D.

Interface bandwidths bandwidths allocated to flows a, a, b, c, and d are 10 Mbit/s, 20 Mbit/s, 30 Mbit/s, and 40 Mbit/s Mbit/s respectively. Interface bandwidths bandwidths allocated to flows a, a, b, c, and d are 50 Mbit/s, 50 Mbit/s, 0 Mbit/s, and 0 Mbit/s respectively. Interface bandwidths allocated allocated to flows a, b, c, and d are 40 Mbit/s, 30 Mbit/s, 20 Mbit/s, and 10 Mbit/s respectively. respectively. Flows a, a, b, c, and d are are discarded. discarded.


QUESTION 221 Assume that congestion congestion occurs on the outbound outbound interface, packet packet A is cached in the PQ, and packet B is cached in the WFQ, WFQ, which of the following following statement about packet scheduling is true? A. B. C. D.

Packet A is scheduled scheduled first. Packet Packet B is scheduled scheduled first. first. Packets A and and B are scheduled scheduled at the the same time. Packets Packets A and B are discard discarded. ed.




QUESTION 222 Assume that the following following WRED policies policies are used in QoS: The length of the queue for saving DSCP packets with the priority being AF21 ranges from 35 to 40. The length of the queue for saving DSCP packets with the priority being AF22 ranges from 30 to 40. The length of the queue for saving DSCP packets with the priority being AF23 ranges from 25 to 40. In the case of congestion, DSCP packets with which of the following priority value will be discarded first? A. B. C. D.

AF21 AF22 AF23 All the same same


QUESTION 223 Assume that there are four flows a, b, c, and d, the transmission transmission rate of each flow flow is 50 Mbit/s, and the the total bandwidth of of the interface for flow flow transmission is 100 Mbit/s. In the case of congestion, PQ is available for flow a. WFQ is available for flows b, c, and d, with the weight proportion being 1:2:3:4. Which of the following statement about the interface bandwidth allocated to each flow is true? (Select 2 Answers) A. B. C. D.

The interface bandwidth bandwidth allocated to flow a is 100 Mbit/s. The interface bandwidth allocated allocated to flow a is 50 Mbit/s. Mbit/s. The interface bandwidth allocated allocated to flows b is 10 Mbit/s and interface bandwidths allocated allocated to flows c and d are 20 Mbit/s each. The interface bandwidth allocated allocated to flows b is 25 Mbit/s and interface bandwidths allocated allocated to flows c and d are 12.5 Mbit/s each.



QUESTION 224 Assume that the WRED WRED policy for packets packets with the priority of AF21 is thaA. the length of the queue for saving packets ranges ranges from 35 to 40, and and the discarding percentage is 50%.When a packet with the priority being AF21 arrives, which of the following statements are true? (Select 3 Answers) A. B. C. D.

If the average length length of the queue is smaller smaller than 35, the packet packet is added to the queue. queue. If the length of the queue ranges between between 35 and 40, the packet packet may be discarded with a possibility of 50%. If the average length length of the queue is greater greater than 40, the packet packet is added to the queue. queue. If the average length length of the queue is greater greater than 40, the packet packet is discarded.


QUESTION 225 The interface IP address and virtual IP address configured for VRRP must not be identical. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 226 A VRRP virtual router router can have one or more IP addresses. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation



QUESTION 227 The virtual router uses a virtual MAC address but not the actual MAC address of the interface to respond to an ARP request. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 228 A VRRP backup group group is able to track the status of an interface. interface. If the interface configured with a VRRP VRRP backup group fails fails or any interface on on the router fails, the VRRP backup group provides a backup for the faulty interface. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 229 By using VRRP, the backup router in a VRRP backup group immediately becomes the master router after detecting a fault and instructs its attached hosts to perform a master/slave switchover accordingly. This ensures that services will recover within a short period of time. A. True B. Fals False e Correct Answer: B Section: (none)



QUESTION 230 Which of the following statements are correct regarding VRRP? A. B. C. D.

Only Master can process process the data packets packets sending to virtual router. Only Slave can can process the the data packets sending to virtual virtual router. Both Master and Slave can process the data data packets sending to the same virtual router to realize realize load balance. By default, only Master can process the data data packets sending to virtual router; but we can do some configuration configuration to make the Slave process the data data packets sending to virtual router.


QUESTION 231 Which of the following statements are correct regarding the function of VRRP? A. B. C. D.

VRRP can improve the reliability of default default gateway. VRRP increase increase the convergence speed of routing protocol. protocol. VRRP is mainly mainly used used for traffic traffic balance. balance. VRRP can provide one default gateway gateway for different network segments, it simplifies simplifies the gateway configuration for for PC.


QUESTION 232 Which of the following statements are correct regarding default gateway of PC in the network running VRRP?


A. B. C. D.

Configure only one gateway for the PC which which is the IP address address of Master. Configure only one gateway for the PC which which is the IP address address of virtual router. Configure two gateways gateways for the Pc which which are the IP addresses addresses of Master and Slave. Slave. Configure three gateways gateways for the PC which which are the IP addresses addresses of Master, Slave and virtual router.


QUESTION 233 Which of the following authentication modes does VRRP use? (Select 3 Answers) A. B. C. D.

No authentication Simple Simple text text password password MD5 CHAP


QUESTION 234 What is the legal virtual MAC address in VRRP? A. B. C. D.

01-01-5E-00-01-01 01-0001-00-5E5E-0000-0101-00 00 00-00-5E-0 00-00-5E-00-010-01-01 01 01-01-5E-0 01-01-5E-00-000-00-01 01

Correct Answer: C Section: (none) Explanation



QUESTION 235 Which of the following statements are correct regarding Master in VRRP? (Select 2 Answers)

A. B. C. D.

The router with highest highest priority will become become Master. The router with smallest smallest priority will become become Slave. The router with with highest priority priority may not always be Master. Master. The router with with smallest priority priority may not not always be Slave.


QUESTION 236 Which of the following statements are correct regarding priority in VRRP?


A. The IP address owner owner always uses 255 as its priority regardless regardless its config priority. priority. B. The IP address owner owner always uses 0 as its priority regardless regardless its config priority. C. e can configure configure the the priority priority as 0 to make make the router router never never attend attend the Master Master election election.. D. If a VRRP router changes from Master to Slave, Slave, it will send out a VRRP message with priority 0 in the network. network. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 237 Which of the following statements about the device state change is correct after failure in the intermediate link for transmitting VRRP heartbeats? A. B. C. D.

The status of the master master and salve devices devices remains unchanged. unchanged. Both the master master and slave devices enter the Master state. state. Both the master master and slave devices enter the Slave state. state. Both the master master and slave devices enter the Initial state. state.


QUESTION 238 Which of the following statements about the VRRP working process is false? A. B. C. D.

The router with the highest priority is elected elected as the master router. router. The master router sends sends gratuitous ARP packets to inform connected connected devices or hosts of its virtual MAC MAC address. If the master router fails, the backup router router with the highest priority is elected as the new master router. router. To ensure fast convergence, a backup backup router immediately becomes the master master router if the priority of the backup router is higher than the priority priority of the master router.

Correct Answer: D



QUESTION 239 Assume that the VRID VRID of a VRRP virtual virtual router is 100 and the virtual IP address of the virtual router is 192.168.1.1, which which of the following addresses addresses is the virtual MAC address of the virtual router? A. B. C. D.

00-00-5E-00-01-64 00-0000-00-5E5E-0000-0101-01 01 01-00-5E-0 01-00-5E-00-010-01-64 64 01-00-5E-0 01-00-5E-00-010-01-01 01


QUESTION 240 Which of the following addresses is the destination address of VRRP packets? A. B. C. D.

224.0.0.18 224. 224.0. 0.0. 0.19 19 224.0. 224.0.1.1 1.18 8 224.0. 224.0.1.1 1.19 9


QUESTION 241 Which of the following numbers is the protocol number of VRRP packets?


A. B. C. D.

112 113 114 115


QUESTION 242 Which of the following statements about the VRRP authentication is false? A. B. C. D.

VRRP provides no authentication. VRRP provides provides the simple simple text authenticati authentication. on. VRRP provides provides the MD5 MD5 authenticati authentication. on. VRRP provides provides the RSA RSA key authenticat authentication. ion.


QUESTION 243 RTA connected to a LAN by e0/0 whose IP address is 10.1.1.251 and network Mask is 255.255.255.0. Now create a virtual router with ID 1 and virtual IP address 10.1.1.254 on RTA. Which of the following commands are correct? A. B. C. D.

[RTA-Ethernet0/0]vrrpvrid [RTA-Ethernet0/0]vrrpvrid 1 virtual-ip 10.1.1.254 10.1.1.254 [RTA]vrrp [RTA]vrrpvrid vrid 1 virtual-ip virtual-ip 10.1.1.25 10.1.1.254 4 [RTA-Ethernet0/0]vrrpvrid [RTA-Ethernet0/0]vrrpvrid 1 virtual-ip 10.1.1.254 10.1.1.254 mask mask 255.255.255.0 255.255.255.0 [RTA]vrrpvrid 1 virtual-ip 10.1.1.254 mask 255.255.255.0 255.255.255.0

Correct Answer: A Answer: A www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 244 Ethernet0/0 of RTA and Ethernet0/0 of RTB connect to the same LAN, both are enabled with VRRP. Create a virtual router with ID 1 and virtual IP address 10.1.1.254. Which of the following commands can make RTB Master without modifying the priority of RTA? A. B. C. D.

[RTB-Ethernet0/0]vrrpvrid [RTB-Ethernet0/0]vrrpvrid 1 priority 200 [RTB-Ethernet0/0]vrrpvrid [RTB-Ethernet0/0]vrrpvrid 1 virtual-ip 10.1.1.254 priority 200 [RTB-Ethernet0/0]vrrpvrid [RTB-Ethernet0/0]vrrpvrid 1 force-master [RTB]vrrp [RTB]vrrpvrid vrid 1 force-mas force-master ter


QUESTION 245 Which of the following statements are correct regarding VRRP advertisement message? A. B. C. D.

VRRP has two kinds kinds of advertisement message, message, one is sent by Master, the other is sent by Slave. VRRP has one one kind of advertisement message message which is sent by Master. VRRP has one kind of advertisement message message which is sent by Slave. VRRP has two kinds of advertisement advertisement message, one is used for Master election, the other other one is used in stable network after Master election. election.


QUESTION 246 Which of the following statements are correct regarding MAC address of VRRP packet? (Select 2 Answers)


A. B. C. D.

The destination MAC MAC is broadcast MAC address. The destinati destination on MAC is multicast multicast MAC address. address. The source source address address is virtual MAC address address.. The source address address is physical physical MAC address address of Master. Master.


QUESTION 247 Which of the following statements about the mVRRP backup group is false?


A. B. C. D.

Multiple service VRRP VRRP backup group can be bound to one mVRRP mVRRP backup group. An mVRRP backup group can serve as a service service VRRP backup group and thus be bound to another another mVRRP backup group. One service VRRP backup group can be bound to only one mVRRP mVRRP backup group. group. After multiple service VRRP backup backup groups are bound to an mVRRP backup group, group, the mVRRP backup group determines determines the status of all the service VRRP backup groups by sending VRRP packets. This can reduce the number of VRRP packets to be sent and improve the packet processing efficiency.


QUESTION 248 Which of the following statements about VRRP are true? (Select 3 Answers) A. VRRP is a redundancy redundancy protocol designed for a multicast- or broadcast-capable broadcast-capable LAN LAN such as the Ethernet. Ethernet. VRRP ensures that that traffic is switched switched to another


router when the next-hop router for a host on the LAN fails. This guarantees the reliability and non-stop forwarding of services. B. In VRRP, two virtual router ID and a virtual IP address address need to be configured on a router to generate a virtual MAC address. address. A virtual router is formed. C. Hosts on a network can communication communication with a virtual router without knowing any information information about physical routers on the network. network. D. A virtual router consists of a master router and several several backup routers. The master router router forwards packets. When the master router router fails, a backup router akes over as the master router. Correct Answer: ACD Answer: ACD Section: (none) Explanation Explanation/Reference:

QUESTION 249 Which of the following statements about VRRP are true? (Select 3 Answers) A. VRRP determines the the roles of routers (master (master or backup) in a virtual router based on their priorities. B. If a backup router works in non-preemption non-preemption mode and has a higher priority than the masterrouter, masterrouter, it will become the master router unless the master master router fails. C. After a backup router in preemption mode mode receives a VRRP packet from the master router, router, it compares its priority with the priority carried carried in the VRRP packet. If its priority is higher than the priority of the master router, it preempts to be the master router; if not, it remains in the backup state. D. If two routers competing for the master router router have the same priority, the router with a higher interface interface IP address becomes the master router. router. Correct Answer: ACD Answer: ACD Section: (none) Explanation Explanation/Reference:

QUESTION 250 Which of the following statements about the master router in a VRRP backup group are true? (Select 3 Answers) A. B. C. D.

It regularly sends VRRP VRRP packets. It uses a virtual MAC MAC address to respond respond to ARP requests sent sent from a virtual IP address. It forwards an IP packet packet whose destination destination MAC address is a physical MAC address. address. It changes to the Backup Backup state if the priority priority carried in the received received packet is greater greater than its own priority. priority.

Correct Answer: ABD Answer: ABD Section: (none) www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 251 Which of the following statements about a backup router in a VRRP backup group are true? (Select 3 Answers) A. B. C. D.

It receives VRRP packets packets from the master master router and determines determines whether the master master router is functioning functioning properly. It does not respond to the ARP requests sent from a virtual IP address. It forwards an IP packet packet whose destination destination MAC address is a virtual MAC address. address. It discards an IP packet packet whose destination destination IP address is a virtual virtual IP address.


QUESTION 252 Which of the following statements about VRRP fast switchover are true? (Select 3 Answers)


A.

hen VRRP is used to track a BFD or EFM EFM session, if a tracked tracked BFD or EFM session session status changes, the BFD or EFM module module notifies the VRRP VRRP module of he change. After that, the VRRP module implements a rapid master/backup switchover. B. A VRRP backup group can monitor a peer BFD session, session, a link BFD session, and a normal BFD session session at the same time. In addition, it can monitor the interface status. C. hen the status of a BFD session detected by a VRRP backup group changes, the master/slave master/slave switchover switchover of routers routers in the VRRP backup group occurs by changing priorities of the master and slave routers. D. A VRRP backup group can monitor several several BFD sessions at the same time. The status changes changes of these BFD sessions affect each other. other.



QUESTION 253 Which of the following statements about the mVRRP backup group are true? (Select 3 Answers)

A. An mVRRP backup group can be b ound to other service VRRP VRRP backup groups. B. An mVRRP backup group cannot be bound bound to multiple service VRRP backup groups groups but can function as a service VRRP group to be bound to another another mVRRP group. C. After a VRRP backup group member is bound bound to an mVRRP backup group, the state machine machine of the VRRP backup group member becomes becomes dependent. That is, the VRRP backup group member deletes the protocol timer, and no longer sends or receives packets, and implements its state machine by directly copying he status of the mVRRP backup group. D. A VRRP backup group group member can be bound bound to only one mVRRP mVRRP backup group. Correct Answer: ACD Answer: ACD



QUESTION 254 Which of the following statements about a backup router in a VRRP backup group are true? (Select 3 Answers) A. B. C. D.

It receives VRRP packets packets from the master master router and determines determines whether the master master router is functioning functioning properly. It responds to to the ARP requests sent from a virtual virtual IP address. It discards an IP packet packet whose destination destination MAC address is a virtual MAC address. address. It discards an IP packet packet whose destination destination IP address is a virtual virtual IP address.


QUESTION 255 The reliability of a product or a system is generally evaluated with the two indicators of Mean Time to Repair (MTTR) and Mean Time Between Failures (MTBF). A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 256 Availability identifies identifies the utility of a system. system. The availability of the system increases increases if the MTBF decreases decreases or the MTTR increases. A. True B. Fals False e



QUESTION 257 The formula for calculating the MTTR is: MTTR = Fault detection time + Board replacement time + System initialization time + Link recovery time + Route convergence time + Forwarding recovery time. The smaller the addends are, the smaller the MTTR is and the higher the device availability is. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 258 None Stop Forwarding (NSF) is an important high availability (HA) technology. It ensures the normal data forwarding even in the case of a fault in the control plane of the router, protecting key services on the network from interruption. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 259 None Stop Forwarding (NSF) is an important HA technology. It keeps neighbor relationships unchanged even in the case of a fault in the control plane of the router, protecting key services on the network from interruption.


A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 260 The NSF function takes effect only after the GR function is enabled on two directly connected routers that use static routes for communication between users in different network segments. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 261 During the GR of dynamic routing protocols (such as OSPF and BGP) neighbor relationships remain unchanged. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 262 BFD (a fast detection technology) enabled on a device quickly identifies a fault and reports the fault to the appropriate protocol module after detecting a master/ slave switchover on the neighboring device. This causes the protocol module to quit the GR. As such, BFD and GR cannot be used together.



QUESTION 263 BFD is a common fast detection technology. It implements the fast switchover function only when collaborating with other fast switchover technologies. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 264 BFD detects the link status immediately after a BFD session is set up. If BFD parameters are modified or deleted at one end of the BFD session, the other end will consider such a modification or deletion as a fault and services will be then affected. Therefore, exercise caution when modifying or deleting BFD parameters. parameters. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 265 BFD packets are classified into control packets and echo packets.



QUESTION 266 A BFD session is set up following the three-way three-way handshake during which parameters parameters for the BFD session session are negotiated. After the BFD session session is set up, modifying the detection time parameters does not take effect. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 267 When a local BFD session in the Init state receives packets with the Stat field being Down, the local BFD session changes its status to Down. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 268 When recovering from a fault, the active link in a Smart Link group remains blocked and traffic is not switched back to it. In this way, traffic keeps stable.



QUESTION 269 The dynamic LACP requires devices at both ends to exchange protocol packets, while the static LACP does not require so. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 270 If the Open message sent from a BGP speaker has the GR capability field but no field, the BGP speaker has no backup forwarding table. Such a BGP speaker functions as only the GR helper to help its neighbors complete the GR process. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 271 After the session is re-established between between the BGP GR helper helper and its neighbor, original forwarding entries entries are deleted.



QUESTION 272 Which of the following is not the BFD fault detection mode? A. B. C. D.

Asynchronous mode Dema Demand nd mod mode e Echo Echo mode mode Peer Peer mode mode


QUESTION 273 Which LSA is used by OSPF to implement GR? A. B. C. D.

Type-3 LSA Type Type-5 -5 LSA LSA Type Type-9 -9 LSA LSA Type Type-1 -10 0 LSA



QUESTION 274 BFD control packets are encapsulated in UDP packets for transmission. Which of the following is the destination port number for single-hop BFD control packets? A. B. C. D.

3784 4784 5784 6784


QUESTION 275 Which of the following BFD versions is supported in VRP 5.7? A. B. C. D.

Version 0 Vers Versio ion n1 Vers Versio ion n2 Vers Versio ion n3


QUESTION 276 Which of the following statements about different detection intervals at both ends of a BFD session is true? A. B. C. D.

The BFD session can can be set up and the greater detection interval interval is used after negotiation. negotiation. The BFD session can can be set up and the smaller detection interval interval is used after negotiation. negotiation. The BFD session can can be set up and each each end sends detection detection packets at its own interval. The BFD sessio session n cannot cannot be set up.



QUESTION 277 Which of the following statements about the refreshing mechanism in the case of link switchover in a Smart Link group is false? A. MAC and ARP entries entries are refreshed automatically automatically against traffic. traffic. B. The Smart Link Link group uses uses a new link link to send Flush packets. C. hen the active active link link recovers recovers from from a fault, Flush Flush packets packets are are sent to to refresh refresh entries. entries. D. hen recovering from a fault, the active link link remains blocked blocked and traffic traffic is not switched switched back to it. In this way, traffic keeps keeps stable. Correct Answer: C Section: (none) Explanation Explanation/Reference: Topic 4, Volume D QUESTION 278 Which of the following statements about the Monitor Link group is false? A. B. C. D.

A Monitor Link group group has uplink and downlink downlink interfaces. A Monitor Link Link group has one uplink interface and several several downlink interfaces. In a Monitor Link group, the status of the downlink interface interface changes in accordance with the status status of the uplink interface. The Smart Link Link group can only serve as a downslink interface. interface.


QUESTION 279


Which of the following statements about the Smart Link group is false? A. A Smart Link group has two interfaces at at most. The two interfaces interfaces if configured are are an active interface interface and a standby interface. interface. B. Among the two interfaces in a Smart Link group, group, one is in the active state and the other one in the standby state in normal situations. situations. C. hen the active interface goes down, the Smart Smart Link group group automatically blocks it and and changes the status of the standby interface to active. D. hen the active active interfac interface e recovers recovers from from a fault, fault, traffic traffic will be switche switched d back to it immed immediatel iately. y. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 280 Assume that the VRID VRID of a VRRP virtual virtual router is 100 and the virtual IP address of the virtual router is 192.168.1.1, which which of the following addresses addresses is the virtual MAC address of the virtual router? A. B. C. D.

00-00-5E-00-01-64 00-0000-00-5E5E-0000-0101-01 01 01-00-5E-0 01-00-5E-00-010-01-64 64 01-00-5E-0 01-00-5E-00-010-01-01 01


QUESTION 281 Which of the following are characteristics of a high availability network? (Select 2 Answers) A. B. C. D.

Faults seldom occur. occur. Services can be quickly restored when when a fault fault occurs. Faults Faults never never occur. occur. Services can only be manually manually restored when a fault occurs.

Correct Answer: AB Answer: AB www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 282 Which of the following statements about the reliability requirement level are true? (Select 3 Answers) A. B. C. D.

Faults seldom occur occur in the system software software or hardware. System System functions functions are affected affected by faults. faults. System functions functions are affected by faults but can rapidly recover. recover. System functions can be ensured by using using redundancy design, switchover switchover policy, and high success rate in switchover. switchover.


QUESTION 283 Which of the following are end-to-end link protection modes? (Select 3 Answers) A. B. C. D.

1: 1 M: N N: 1 1+1


QUESTION 284 In VRP 5.7, which of the following dynamic protocols support GR? (Select 3 Answers)


A. B. C. D.

MPLS LDP/RSVP IS-I IS-IS/ S/OS OSPF PF BGP MSTP


QUESTION 285 Which of the following statements about BFD are true? (Select 3 Answers) A. B. C. D.

It cannot be used to detect MPLS networks. networks. It provides low-load and short-duration detection detection for paths between between adjacent forwarding forwarding engines. It provides a unified mechanism for detecting detecting all types of media media and BFD-supporting BFD-supporting protocols. It is a bidirectional bidirectional detection detection mechanis mechanism. m.


QUESTION 286 Which of the following statements about the setup of a BFD session are true? (Select 3 Answers) A. A BFD session can be set up in either static static or dynamic mode. mode. B. A static BFD session is set up by manually configuring configuring BFD session parameters and delivering delivering requests for setting up a BFD session. session. BFD session parameters include the local and remote discriminators. C. A dynamic BFD session session is set up by dynamically dynamically allocating local local discriminators. D. Static and dynamic BFD BFD sessions are not differentiated. Correct Answer: ABC Answer: ABC Section: (none) Explanation www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 287 Which of the following statements about BFD Echo packets are true? (Select 2 Answers) A. B. C. D.

The Echo packet format format is not defined in BFD. The Echo Echo packet packet format format is defined defined in BFD. BFD. Echo packets packets use UDP UDP destination destination port number 3785. Echo packets packets use UDP UDP destination destination port number 3784.


QUESTION 288 Which of the following statements about BFD control packets are true? (Select 3 Answers) A. B. C. D.

A BFD control packet packet is encapsulated in a UDP packet for transmission. transmission. Authentication Authentication fields in a BFD BFD control packet are optional. BFD detection detection is not not available available in VRP 5.7. 5.7. Echo packets packets use UDP UDP destination destination port number 3784. Echo packets packets use UDP UDP destination destination port number 3785.


QUESTION 289 Which of the following statements about the BFD asynchronous mode are true? (Select 2 Answers) A. The local system regularly regularly sends BFD control control packets, and the the remote system detects detects the BFD control control packets sent from the local system. B. The local system system detects the the BFD control control packets sent sent by itself.


C. If one system does not receive any BFD packets packets from its peer within a detection period, it advertises advertises a session Down event. D. Each system confirms its connections connections with other systems in a particular method. method. After a BFD session is set up, BFD control packets are are no longer sent. Correct Answer: AC Answer: AC Section: (none) Explanation Explanation/Reference:

QUESTION 290 Which of the following statements about the BFD demand mode are true? (Select 2 Answers) A. B. C. D.

The local system periodically periodically sends BFD control packets, and and the remote system detects the BFD control control packets sent from from the local system. The local system system detects the the BFD control control packets sent sent by itself. If one system does not receive any BFD packets packets from its peer within a detection period, it advertises advertises a session Down event. Each system confirms its connections connections with other systems in a particular method. method. After a BFD session is set up, BFD control packets are are no longer sent.


QUESTION 291 Which of the following statements about the BFD echo function are true? (Select 3 Answers) A. B. C. D.

The local system sends sends a series of BFD Echo packets, and the the remote system loops loops the packets back through its forwarding forwarding channel. If the local system receives several consecutive consecutive Echo packets, packets, it advertises a session session Down event. The echo function can can work together with with the asynchronous or or demand detection mode. mode. The echo function can can take the place of fault detection by sending sending BFD control packets. packets.



QUESTION 292 Which of the following statements about a Smart Link group are true? (Select 3 Answers) A. Smart Link group consists consists of a maximum of two interfaces. Where Where there are two interfaces, one is an active interface, and the other a standby interface. B. Of the two interfaces interfaces in a Smart Link group, group, one is active, and and the other is standby. standby. C. hen an active interface goes Down, the Smart Smart Link group group automatically blocks it and and changes the status of the standby interface to active. D. hen an active interfa interface ce recovers, recovers, the standby standby interface interface is blocked blocked and traffic traffic is switched switched back to the active interface interface.. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 293 Which of the following statements about Flush packets in a Smart Link group are true? (Select 3 Answers) A. B. C. D.

A Smart Link group sends Flush packets to instruct other devices devices to update the address address table. Flush packets packets use IEEE IEEE 802.3 encapsulat encapsulation. ion. The destination MAC address of Flush Flush packets is an unknown unicast address, address, which is used to distinguish protocols. The destination MAC address of Flush Flush packets is a special multicast address, which which is used to distinguish protocols.


QUESTION 294 When links are switched in a Smart Link group, which of the following mechanisms can be used to refresh MAC and ARP entries? (Select 3 Answers) A. B. C. D.

MAC and ARP entries entries are refreshed automatically automatically with respect respect to traffic. The Smart Link Link group uses uses a new link link to send Flush packets. MAC entries are refreshed after the aging aging time expires. expires. ARP entries are refreshed after the aging aging time expires



QUESTION 295 Which of the following statements about link aggregation are true? (Select 3 Answers) A. B. C. D.

Link aggregation binds binds a group of physical physical interfaces together as a logical interface to increase the bandwidth bandwidth and reliability. Link aggregati aggregation on complies complies with IEEE 802.3az 802.3az.. The logical link formed by bundling multiple multiple physical links together is called a link aggregation aggregation group (LAG) or a trunk. Active and inactive interfaces exist exist in link aggregation. Active interfaces forward forward data, whereas inactive interfaces interfaces do not.


QUESTION 296 Which of the following statements about link aggregation are true? (Select 3 Answers) A. Link aggregation can can be performed in manual manual load balancing or or LACP mode. In manual manual loading balancing balancing mode, LACP is enabled; enabled; in LACP mode, mode, LACP is enabled too. B. In manual load balancing balancing mode, all active active member interfaces forward data and perform perform load balancing. C. In static LACP mode, the creation of the Eth-Trunk Eth-Trunk and the addition of member interfaces interfaces to the Eth-Trunk are performed manually. manually. Compared with link aggregation in manual load balancing mode, active interfaces in static LACP mode are selected by sending LACP Data Units (LACPDUs). D. In dynamic LACP mode, the creation of the Eth-Trunk, Eth-Trunk, the addition of member interfaces, interfaces, and the selection of active interfaces interfaces are performed based on LACP negotiation. Correct Answer: BCD Section: (none) Explanation Explanation/Reference:


QUESTION 297 Which of the following statements about LACP are true? (Select 2 Answers) A. It complies with IEEE IEEE 802.3az. B. A device enabled with with LACP exchanges Link Aggregation Control Control Protocol Data Units Units (LACPDUs) with with its peer. C. Devices at both ends ends determine the active active interface according to the interface priority priority of the active device. device. Correct Answer: BC Section: (none) Explanation Explanation/Reference:

QUESTION 298 Which of the following can speed up OSPF fast convergence? (Select 2 Answers) A. B. C. D.

Configuring dynamic BFD for OSPF Adjusting the interval at which which OSPF calculation calculation is performed performed Configuring the interval at which which an LSA are retransmitted retransmitted Configuring the maximum number number of external LSAs in the LSDB


QUESTION 299 When the GR Restarter performs the active/standby switchover, the neighbor performs which of the following operations when detecting that a TCP disconnection? (Select 3 Answers) A. Keeping the routing tables of various address address families advertised advertised by the GR Restarter Restarter during negotiation, negotiation, marking entries in these tables with stale stale tags, and starting a stale timer B. Starting Starting a restart restart timer. timer. C. Clearing all routing entries and forwarding forwarding entries related to the GR restarter if the GR restarter restarter fails to re-establish the BGP connection connection with the neighbor after he restart timer expires.


D. Remaining the neighbor neighbor relationship unchanged. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 300 A device can be assigned assigned an IP address 192.168.13.175, with with the mask being 255.255.255.240. 255.255.255.240. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 301 How many Class C networks does the summarized route 192.168.134.0/22 cover? A. B. C. D.

2 4 8 16


QUESTION 302 The IP address 0.0.0.0 indicates ( ).


A. B. C. D.

Network address Broadcast address address of specially designated designated network network segment All networ networks ks Broadcast address address of all nodes nodes of local network segment segment


QUESTION 303 What is the network address for 190.233.27.13/16? A. B. C. D.

190.0.0.0 190. 190.23 233. 3.0. 0.0 0 190.23 190.233.2 3.27.0 7.0 190.23 190.233.2 3.27.1 7.1


QUESTION 304 Which of the following address types are reserved for multicast use? A. B. C. D.

Class A Clas Class sB Clas Class sE Clas Class sD

Correct Answer: D Section: (none) Explanation



QUESTION 305 Which is the default network mask length of 219.25.23.56? A. B. C. D.

8 16 24 32


QUESTION 306 What is the maximum bits of a Class B address can be used for subnet? A. B. C. D.

8 14 16 22


QUESTION 307 The subnet mask of a class A address is 255.255.240.0, how many bits are used to divide subnet? A. 4 B. 5


C. 9 D. 12 Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 308 What is the maximum bits of a Class C address can be used for subnet? A. B. C. D.

6 8 12 14


QUESTION 309 How many hosts are available per subnet if apply a /21 mask to the class B network? A. B. C. D.

510 512 1022 2046



QUESTION 310 For a network like 175.25.128.0/19, the mask value is? A. B. C. D.

255.255.0.0 255.25 255.255.2 5.224. 24.0 0 255.25 255.255.2 5.24.0 4.0 Different Different based based on the address address type


QUESTION 311 The network 154.27.0.0 without any subnet can support( ) hosts? A. B. C. D.

254 1024 65,5 65,534 34 16,777 16,777,20 ,206 6


QUESTION 312 One class B network 155.16.0.0, the mask is 255.255.255.192. then subnet quantity available is ( ) , the host quantity in every subnet at most is ( ) A. B. C. D.

512 126 1024 1024 64 1024 1024 62 256 256 254 254


E. 192 192 254 254 Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 313 For network segment 192.168.2.16/28, how many hosts it can hold at most? A. B. C. D. E.

16 8 15 14 7


QUESTION 314 A company reserves reserves the network segment segment 172.29.100.0/26 for for some remote small-scale small-scale sites and each each site has 5 IP devices devices to connect to this network segment. Which of the following VLSM masks can be used to provide minimum number of hosts to meet such a requirement? A. B. C. D.

/27 /28 /29 /30



QUESTION 315 If the network address 172.29.100.0/16 is subnetted, which of the following valid VLSM subnets can be obtained? A. B. C. D.

172.29.100.8/28 172.29 172.29.10 .100.3 0.32/2 2/28 8 172.29.100 172.29.100.60/2 .60/28 8 172.29.100 172.29.100.104/ .104/28 28


QUESTION 316 A router receives a data packet, with the the destination address being 195.26.17.4. Which subnet is this address in? A. B. C. D.

195.26.0.0/21 195.26 195.26.16 .16.0/ .0/20 20 195.26 195.26.8. .8.0/2 0/22 2 195.26 195.26.20 .20.0/ .0/22 22


QUESTION 317 The address space 172.28.100.0/24 is currently used. If the subnet mask 172.28.100.0/30 is used to divide this address space into several subnets serving WAN links, how many subnets in total can the address space be divided into? A. 30 B. 64 C. 126


D. 254 Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 318 A Class C network needs to be divided into five subnets and each subnet needs to to contain a maximum of 20 hosts. Which of the following subnet subnet masks is used? A. B. C. D.

255.255.255.192 255.25 255.255.2 5.255. 55.240 240 255.25 255.255.2 5.255. 55.224 224 255.25 255.255.2 5.255. 55.248 248


QUESTION 319 Which of the following statements about VLSM characteristics are true? (Select 2 Answers) A. B. C. D.

VLSM supports both both IPv4 and IPv6. VLSM supports supports overlapp overlapped ed address address ranges. ranges. VLSM provides more more proper route summarization summarization information in the routing table. VLSM allows a subnet to be divided into smaller subnets. subnets.



QUESTION 320 A network administrator administrator needs to construct construct a small-scale network network containing only 22 hosts and the ISP ISP assigns only one public public IP address as the the egress address. Which of the following addresses can be used by the network administrator to plan the network? A. B. C. D.

10.11.12.16/28 172.31 172.31.25 .255.1 5.128/ 28/27 27 192.16 192.168.1 8.1.0/ .0/28 28 209.165.20 209.165.202.128 2.128/27 /27


QUESTION 321 Which of the following IP addresses are network addresses? (Select 2 Answers) A. B. C. D.

64.104.3.7/28 192.16 192.168.1 8.12.6 2.64/2 4/26 6 192.135.12 192.135.12.191/ .191/26 26 198.18 198.18.12 .12.16 .16/28 /28


QUESTION 322 What are the advantages of subnet division? (Select 2 Answers) A. B. C. D.

Isolating broadcast traffic Improving Improving network network QoS Increasin Increasing g the IP address address usage usage Improving Improving network network reliabil reliability ity



QUESTION 323 Routes 172.1.12.0/24, 172.1.13.0/24, 172.1.14.0/24, 172.1.14.0/24, and 172.1.15.0/24 can be summarized into route 172.1.8.0/21. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 324 Assume that the subnet subnet mask is 255.255.255.248. 255.255.255.248. Which of the following addresses addresses are valid host addresses? addresses? (Select 3 Answers) Answers) A. B. C. D.

192.168.200.87 196.12 196.123.1 3.142. 42.190 190 223.16 223.168.2 8.210. 10.100 100 220.10 220.100.1 0.100. 00.154 154


QUESTION 325 Which of the following addresses can be used on a public network? (Select 2 Answers) A. 172.30.0.1/16


B. 127.25 127.254.1 4.11.1 1.15/1 5/16 6 C. 172.15 172.15.12 .12.7/ .7/16 16 D. 193.16 193.168.1 8.10.4 0.4/16 /16 Correct Answer: CD Section: (none) Explanation Explanation/Reference:

QUESTION 326 Which of the following rules should a network administrator obey when the network administrator uses the VLSM technology to plan subnets? (Select 3 Answers) A. B. C. D.

A subnet is composed composed of all summarized routes. A subnet can address a host or be further subnetted. subnetted. The Update message message of a routing protocol protocol in use must carry subnet mask information. information. The summarized networks must have the same high-order bit.


QUESTION 327 A company has four four departments. Department Department A has 80 PCs, PCs, Departments B and and C both have 20 PCs, PCs, and Department D has 30 PCs. Assuming Assuming the IP address 192.168.1.0/x is used, which of the following statements are true if the VLSM technology is used to divide subnets? (Select 2 Answers) A. B. C. D.

Plan subnet 192.168.1.0/25 192.168.1.0/25 for Department Department A. The range of host addresses is 1 to to 126. Plan subnet 192.168.1.128/27 192.168.1.128/27 for Department Department B. The range of of host addresses is 129 129 to 159. Plan subnet 192.168.1.160/27 192.168.1.160/27 for Department Department C. The range of of host addresses is 161 161 to 190. Plan subnet 192.168.1.192/27 192.168.1.192/27 for Department Department D. The range of of host addresses is 192 192 to 222.

Correct Answer: AC Answer: AC Section: (none) Explanation



QUESTION 328 OSPF supports the combination of a group of network segments. Such a group is also called an area. In other words, an area is a set of network segments. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 329 Different network segments can be in the same OSPF area and the same network segment can be in different OSPF areas. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 330 OSPF supports two authentication modes: area authentication and interface authentication. The two authentication modes cannot be configured at the same time. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 331 Each router running OSPF has a router ID. A router ID is a 32-bit integer and uniquely identifies a router. Hence, even of routers in different ASs, the router IDs must be different. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 332 The most remarkable characteristic of OSPF is that OSPF supports the link-state algorithm. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: right answer. QUESTION 333 OSPF directly runs over the IP protocol. Its IP protocol number is 89. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 334 If the Router Priority of a router is set to 0, this router cannot be elected as a DR or a BDR. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 335 On a non-broadcast network, OSPF has two operating modes: NBMA and P2MP. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 336 By default, the cost of an OSPF interface is related to interface bandwidth. The algorithm for calculating the cost is: bandwidth-reference/bandwidth. bandwidth-reference/bandwidth. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 337 A Router ID is optional optional in the OSPF configuration. configuration. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: 100% fit answer. QUESTION 338 The value of ospfdr-priority ranges from 0 to 255 and the default value is 64. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 339 A broadcast and an NBMA network, each each having two or more more routers, must both have a DR and a BDR. BDR. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 340 Which of the following network or link type is not the basic network or link type defined in OSPF? A. B. C. D.

P2P P2MP Broa Broadc dcas astt Virtua Virtuall link link


QUESTION 341 The vlink-peer command is used to specify a peer IP address for setting up a virtual link. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 342 Different types of networks cannot establish an adjacency in the Full state. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 343 On a broadcast network or an NBMA network, not all neighbors need to set up adjacencies. Therefore, the concept about the adjacency is applicable to only the broadcast network or the NBMA network. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 344 When two routers exchange LSDB information by exchanging DD packets, a master/slave relationship is established between the two routers. The router with a larger router ID is the master. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 345 If both the ospf cost and bandwidth-reference commands are configured on an interface, the value set in the ospf cost command is used as the cost of the interface. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation



QUESTION 346 The bandwidth-reference parameter is measured in Mbit/s. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 347 Which statement about OSPF is false? A. The router with a higher higher Router Priority also has a higher DR election priority. B. hen two routers routers have have the same Router Router Prioriti Priorities, es, the router router with a larger larger Router Router ID has a higher higher DR election election priority. priority. C. If a DR fails, the BDR BDR automatically takes takes over as the DR and and a new BDR is elected. elected. D. If a BDR fails, the DR will not take over as the BDR and awaits the fault recovery recovery of the BDR. No new BDR will be elected. Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 348 Which of the following statements about OSPF authentication are false? (Select 2 Answers) A. B. C. D.

Entering a password password in cipher text is allowed. allowed. The ospf authentication-mode authentication-mode md5 1 huawei command and the ospf authentication-mode authentication-mode md5 1 plain huawei command command have the same function. If passwords are configured for both an area and and an interface, the password configured configured for the area is used. The ospf authentication-mode authentication-mode simple huawei command and the ospf authentication-mode authentication-mode simple plain plain huawei command have the same function. function.



QUESTION 349 Which of the following statements about route summary are true? (Select 2 Answers) A. Advertise is the default default parameter of the abr-summary command. command. If neither advertise advertise nor not- advertise advertise is specified in the abr-summary abr-summary command, command, advertise is used. B. Not-advertise is the default parameter parameter of the abr-summary command. command. If neither advertise nor not-advertise not-advertise is specified in the abr-summary command, command, notadvertise is used. C. The abr-summary abr-summary command is is run in the OSPF view. D. The asbr-summary asbr-summary command is run in the the OSPF view. view. Correct Answer: AD Answer: AD Section: (none) Explanation Explanation/Reference:

QUESTION 350 Which of the following statements about a neighbor state machine is true? A. B. C. D.

The Attempt state appears only on an NBMA NBMA network or a broadcast broadcast network. The Attempt state appears only on an NBMA NBMA network or a P2MP P2MP network. LSR packets can be sent in the Exchange Exchange state. The Full state indicates indicates that LSDB synchronization synchronization is complete. complete. No LSDB information information will be exchanged. exchanged.



QUESTION 351 The NBMA mode requires all the routers in the network to be fully connected; otherwise, it does not function. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 352 What are the OSPF message types? (Select 4 Answers) A. B. C. D. E.

Hello Database Database Descriptio Description n Link State State Reques Requestt Link Link State State Update Update Link State State Advertis Advertisement ement

Correct Answer: ABCD Answer: ABCD Section: (none) Explanation Explanation/Reference:

QUESTION 353 Which statement about OSPF is false? A. Hello packets are used used to discover and maintain maintain neighbor relationships. relationships. On a broadcast broadcast network or an NBMA network, Hello Hello packets can also be used to elect a DR and a BDR. B. DD packets describe summary summary LSDB information information by carrying carrying LSA headers. headers. C. The intervals at which two routers send Hello Hello packets must be consistent; otherwise, otherwise, a neighbor relationship cannot be established established between them. D. DD packets contain headers of all LSAs for periodic LSDB synchronization synchronization between between OSPF neighbors.



QUESTION 354 Which statements about OSPF packets are true? (Select 3 Answers) A. B. C. D.

Hello packets can be be sent after OSPF is is enabled on an interface. interface. LS Request packets are sent sent only after an adjacency is is established. LS Update packets contain detailed LSA information for LSDB LSDB synchronization. LS Update packets packets are sent sent only after an adjacency is established.


QUESTION 355 Which of the following statements about state transition are true? (Select 3 Answers) A. B. C. D.

The neighbor state machine transitions from from the Loading state state to the Full state if a LoadingDone event occurs. The neighbor state machine transitions from from the Exstart state state to the Full state if a NegotiationDone event event occurs. The neighbor state machine transitions transitions from the Exchange state to the Full state if an ExchangeDone ExchangeDone event occurs. The neighbor state machine transitions transitions from the Exchange state to the Loading Loading state if an ExchangeDone event occurs.


QUESTION 356 Which of the following statements are true? (Select 3 Answers)


A. B. C. D.

The neighbor state machine can transition transition from the Down state state to the Exchage state. state. The neighbor state machine can transition transition from the Down state state to the Init state. The neighbor state machine can transition transition from the Init state to the Exstart state. The neighbor state machine can transition transition from the Init state to the 2-Way state.


QUESTION 357 An OSPF neighbor neighbor relationship fails to be established and the the display ospf error command output is as as follows. Which of the following is the probable cause? A. B. C. D.

Router IDs conflict. Area IDs are are mismatc mismatched. hed. Network Network masks are are inconsisten inconsistent. t. Authentica Authentication tion types are inconsisten inconsistent. t.


QUESTION 358 An OSPF neighbor neighbor relationship fails to be established and the the display ospf error command output is as as follows. Which of the following is the possible cause? A. B. C. D.


Correct Answer: D www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn



Router IDs conflict. Area IDs are are mismatc mismatched. hed. Network Network masks are are inconsisten inconsistent. t. Authentica Authentication tion passwords passwords are inconsiste inconsistent. nt.





QUESTION 361


An OSPF neighbor neighbor relationship fails to be established and the the display ospf error command output is as as follows. Which of the following is the possible cause? A. B. C. D.



QUESTION 362 Which of the following statements are correct regarding Network LSA in OSPF network? (Select 2 Answers) A. B. C. D.

Network LSA is generated generated by ABR. Only the router which which connects NBMA or or Broadcast Network may generate Network Network LSA. DR uses Network LSA LSA to describe routers routers that have established established adjacency relation relation with it in the network. network. Network Network LSA is flooded flooded in the whole whole AS.


QUESTION 363 Which of the followings are OSPF packet type? (Select 3 Answers) A. B. C. D. E.

LSA LS Requ Reques estt LSP LS Upda Update te LS Ack Ack


Correct Answer: BDE Section: (none) Explanation Explanation/Reference:

QUESTION 364 Which of the following elements together uniquely identify a LSA? (Select 3 Answers) A. B. C. D.

LS type Link Link sta state te ID ID Advertisin Advertising g Router Router LS Sequence Sequence number number


QUESTION 365 Which of the following statements are correct regarding how OSPF detects old and duplicate LSAs? (Select 3 Answers) A. The smaller the sequence sequence number,the more more recent the LSA. B. The smaller smaller the LS age, age, the more recent recent the LSA. LSA. C. hen router router generate generates s a new LSA at at the first first time, it will will use 0x8000 0x80000001 0001 as the the sequence sequence number number.. D. An LSA can be flushed flushed from routing domain domain by setting its LSA LSA age to Maxage. Correct Answer: BCD Section: (none) Explanation Explanation/Reference:

QUESTION 366


ABRs of a Stub area area do not flood Type-5 Type-5 and Type-4 LSAs to the Stub area. Therefore, Therefore, the Stub area area does not have the external AS routing capability. capability. ABRs of the the Stub area advertise a default route to the stub area to guide packet forwarding to the external of the AS. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 367 The ABR in a Totally Stubby area will not advertise Type-3, Type-4, and Type-5 LSAs to the Totally Stubby area. Instead, the ABR will advertise a default route to the Totally Stubby area to guide forwarding of packets destined for other areas. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 368 Different from a Stub area, an NSSA supports Type-5 LSAs. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 369 Only Router-LSAs and Network-LSAs are involved in intra-area route calculations. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 370 ABRs advertise link link status information about connected non-backbone non-backbone areas to the the backbone area. The The backbone area then advertises the routing routing information to other non-backbone areas. Link status information about the backbone area cannot be advertised to non-backbone areas. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 371 What is the link ID of an ASBR-Summary-LSA? ASBR-Summary-LSA? A. B. C. D.

OSPF Router ID of of an LSA's originator Port IP address address of the DR on the described network network segment Address Address of the destination destination network network segment segment Router Router ID of the destina destination tion ASBR ASBR




QUESTION 372 Which of the following Statement is false?

A. B. C. D.

The OSPF Router ID of the local router is 1.1.1.1. The OSPF OSPF Router ID of the the neighbor neighbor is 2.2.2.2. 2.2.2.2. The OSPF Router ID of the neighbor is larger and thus the neighbor neighbor acts as a DR. DR. The local local router router acts as as slave. slave.


QUESTION 373 Which of the following statements about Stub areas is false? A. B. C. D.

An AS-external-LSA cannot be advertised advertised to a Stub area. The ABR in the Stub Stub area generates a default default route to guide forwarding of packets packets destined for other areas. areas. A Transit area area cannot be configured as a Stub area. area. Any area can can be configured configured as a Stub area. area.

Correct Answer: D Section: (none) Explanation www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 374 Which of the following statements about Stub areas is false? A. B. C. D.

The difference between between a Stub area and a Totally Stubby area area is that the Totally Stubby area cannot contain contain summary-LSAs. summary-LSAs. The ABR in the Stub Stub area generates a default default route to guide forwarding of packets packets destined for other area. area. A Transit area area cannot be configured as a Stub area. area. Any Stub area area can be configured configured as a Totally Stubby Stubby area.


QUESTION 375 Which of the following statements is false? A. B. C. D.

A Router-LSA is used used to describe the local local link status information information of a router. A Network-LSA is used to describe the link status status information of a broadcast network or an NBMA NBMA network segment. A virtual link is a virtual virtual adjacency in the backbone area (Area (Area 0). An AS-External-LSA AS-External-LSA describes describes how to reach an ASBR.


QUESTION 376 Which of the following statements is false? A. An ABR maintains an LSDB for each area. area. There are many LSDBs on an ABR. B. The metric of an ASE ASE LSA can be specified specified when an external external route is imported. The The default value is 1. 1.


C. The external routing information information carries a Tag label for transmitting additional additional information of the route. It is commonly used in a routing routing policy. The default value of the Tag label is 0. D. The Link State ID in in an ASBR-Summary-LSA ASBR-Summary-LSA is the Router ID of the ASBR. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 377 Which of the following statements about NSSA commands is false? A. B. C. D.

If the default-route-advertise default-route-advertise parameter is set, a Type-7 default default route is generated. generated. The no-import-route parameter parameter is used to prevent the importing of AS external external routes in the form of Type-7 LSAs into an NSSA. The no-summary parameter parameter is used to prevent prevent the advertisement advertisement of Type-3 and Type-4 Type-4 LSAs in an area. area. The set-n-bit parameter parameter indicates that an an N-bit will be set in a DD packet.

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: Topic 5, Volume E QUESTION 378 Which of the following statements is false? A. B. C. D.

Each OSPF router uses only one Router-LSA Router-LSA to describe the status of local links in an area. Link types described by a Router-LSA include include P2P, P2MP, TransNet, TransNet, and StubNet. StubNet. A Network-Summary-LSA Network-Summary-LSA describes the metric of the route from an ABR to a destination destination network segment. Routing information can be exchanged exchanged between a backbone area and a non-backbone non-backbone area but cannot be exchanged between between two non-backbone areas.



QUESTION 379 Which of the following LSAs are flooded within a single area? (Select 3 Answers) A. B. C. D.

Router LSA Netw Networ ork k LSA LSA Summar Summary y LSA AS Exte Externa rnall LSA LSA


QUESTION 380 Which of the following statements about an AS-External-LSA are true? (Select 3 Answers) A. B. C. D.

The Link State ID field field specifies the network network segment address address for an advertised destination. destination. The Advertising Router field specifies specifies the Router Router ID of an ASBR. The Net mask field specifies the network network mask of an advertised advertised destination. The Link State ID and Advertising Router Router fields are used together to uniquely identify an ASAS- External-LSA.


QUESTION 381 Which of the following statements are false? (Select 3 Answers) A. B. C. D.

An ASBR-Summary-LSA ASBR-Summary-LSA describes the route to an ASBR and and is flooded within an an AS. An ASE-LSA describes describes the route to an external AS and is flooded flooded to an external AS. An AS-External-LSA AS-External-LSA does not not belong to any specific area. area. The metric of a Type-1 Type-1 external route is the AS external metric metric only.



QUESTION 382 Which of the following statements is false? A. The metric of a Type-1 Type-1 external route is the sum of the AS internal internal metric (metric (metric to reach an ASBR) and the AS external external metric (metric from the ASBR to the destination network). B. The metric of of a Type-2 external route is only the AS external metric. C. The metric of an external external route is the sum sum of the AS external external metric and the AS internal metric. D. The prerequisite for setting Forwarding Forwarding Address to a non-zero value is that the next hop of the external external route imported into OSPF is within the OSPF OSPF routing area. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 383 The ABR of an NSSA will not advertise Type-4 and Type-5 LSAs to an NSSA but can import external routes into the NSSA. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 384 Which of the following statements are correct regarding intra-area route calculation of OSPF? (Select 2 Answers)


A. B. C. D.

Every OSPF router only uses one Router Router LSA to describe local local active link state for for one area. Every OSPF uses more than one Router Router LSA to describe local local active link state for for one area. One Router Router LSA only only describes describes one link. link. One Router Router LSA describe describes s more than than one link.


QUESTION 385 In OSPF, the process of calculating shortest path tree can be divided into two phases, calculate Transit node first, then calculate Stub network. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 386 In the process of calculating SPF tree, the cost from a node to root node equals to metric listed in the Router LSA generated by the node. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 387 In OSPF protocol, which of the following elements are used to describe one link? (Select 3 Answers) A. B. C. D.

Link ID Data Networ Network k Mask Mask Metr Metric ic


QUESTION 388 OSPF uses SPF algorithm to calculate SPF tree according to topology. What is the node of the SPF tree? A. B. C. D.

Router Router Router and networ network k segment segment Port and and network network segme segment nt Router Router and port port


QUESTION 389 In OSPF protocol, which of the following elements are used by Network LSA to describe broadcast network segment or NBMA network segment? (Select 3 Answers) A. B. C. D.

Link ID Net Net mas mask k Attached Attached Router Router list list Metr Metric ic



QUESTION 390 Type 2-external routes always take precedence over Type 1-external routes. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 391 The import-route limit command is used to set the maximum number of external routers that can be imported into an OSPF process. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 392 Which of the connection types that Router LSA can describe? (Select 3 Answers) A. Point-to-point B. Star C. Tran Transi sitt


D. Virtua Virtuall link link Correct Answer: ACD Answer: ACD Section: (none) Explanation Explanation/Reference:

QUESTION 393 In OSPF area, RTA and RTB interconnect through FE interface. which of the following commands can be used to configure the link cost between RTA and RTB as 10? (Select 2 Answers) A. B. C. D.

Use command "ospf cost 10" on two routers routers Use command command "ospf "ospf cost cost 5" on two routers routers Use command "bandwidth-reference "bandwidth-reference 500" on two routers to change change bandwidth-reference bandwidth-reference value Use command "bandwidth-reference "bandwidth-reference 1000" 1000" on two routers to change change bandwidth-reference bandwidth-reference


QUESTION 394 In OSPF protocol, which of the following statements are incorrect regarding Link ID of Router LSA? (Select 2 Answers) A. B. C. D.

In Point-to-Point link link type, Link ID is the neighbor's Interface IP address. InTransNet link type, type, Link ID is the network network address of TransNet TransNet network segment. segment. InStubNet link type, type, Link ID is the network network address of Stub network. network. In Virtual link type, Link ID is the neighbor's neighbor's Router ID of virtual virtual link.



QUESTION 395 OSPF uses SPF algorithm to calculate SPF tree according to topology. Which of the following statements are correct regarding SPF tree node? (Select 2 Answers) A. B. C. D.

The node on SPF tree tree indicates router and and port. There are two two types of SPF tree node node Transit node node and Stub node. The router node node on SPF tree is one type of Stub nodes. The router node node on SPF tree is one type of Transit Transit nodes.


QUESTION 396 An Autonomous System System (AS) is a set of of routers under a single single technical administration, administration, using the same same routing policy. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 397 In BGP, which type of message is periodically exchanged between BGP peers to maintain a BGP peer relationship? A. B. C. D.

Open Hell Hello o RouteRoute-ref refres resh h Keep Keepal aliv ive e

Correct Answer: D Section: (none)



QUESTION 398 BGP peers are automatically discovered by exchanging multicast packets. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 399 In which state have BGP peers not established any connection and not initiated a connection request? A. B. C. D.

Established Open OpenSe Sent nt Acti Active ve Idle


QUESTION 400 Only one BGP process can be configured on a router. A. True B. Fals False e



QUESTION 401 The router ID configured in the system view takes precedence over the router ID configured in the BGP view. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 402 A failure in establishing establishing a BGP peer relationship relationship can be addressed addressed by checking the the TCP connectivity and BGP peer configurations. configurations. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 403 Which statement about BGP is false? A. BGP runs over TCP. TCP. B. BGP is an enhanced enhanced distance-vector distance-vector routing protocol. protocol. C. BGP uses uses port port number number 189.


D. BGP is an inter-AS inter-AS routing routing protocol protocol.. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 404 Which command must be configured to establish a BGP peer relationship between indirectly connected EBGP peers? A. B. C. D.

Peer connect-interface connect-interface Peer Peer validvalid-ttl ttl-ho -hops ps Peer Peer igno ignore re Peer Peer ebgp-m ebgp-maxax-hop hop


QUESTION 405 In transit AS, why do core routers run BGP? A. B. C. D.

Eliminate route loops loops Ensure data packets can be be transmitted to the external external destination addresses addresses Optimize Optimize network network within within an AS AS Ensure Ensure only only one export export



QUESTION 406 Which method is used to establish session between the BGP peers? A. B. C. D.

Telnet Send Send Hello Hello packe packett UDP TCP


QUESTION 407 BGP is an exterior gateway protocol which runs among ASs. It focuses on routes control and selection of optimal routes rather than discovery and calculation of routes. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 408 Which one of the statements describes the relationship between BGP and AS correctly? A. B. C. D.

BGP only runs between between ASs, and can not not run within an AS. BGP is an EGP running running between ASs, and IGP runs within an AS such as OSPF,RIP OSPF,RIP and IS- IS. BGP builds up network network topology by exchanging exchanging link-state information information among Ass. BGP can can not run run between between Ass. Ass.

Correct Answer: B Section: (none)



QUESTION 409 What is private AS number? A. B. C. D.

65410-65535 1-64 1-6451 511 1 6451264512-655 65535 35 6451164511-655 65535 35


QUESTION 410 Which TCP port is used by BGP? A. B. C. D.

520 89 179 180


QUESTION 411 Which of the statements describes the way BGP update routes? A. Broadcasts all of the the routes periodically


B. Update all of the routes using multicast address address periodically periodically C. Only update the changed routes routes and the new routes D. Update Update routes when when BGP peer peer requests requests Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 412 In BGP, performing MD5 authentication between BGP peers can protect them from DoS attacks. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 413 How does a BGP router process the received route whose next hop is unreachable? A. The BGP router sends sends an error message message to the router that has has sent the Update message. message. B. The BGP router accepts this route and adds adds it to the BGP routing table. This route, however, is neither neither preferred nor added to the IP routing table for packet packet forwarding. C. The BGP router router refuse refuses s this route. route. D. The BGP router accepts this route and adds adds it to the BGP routing table. This route can participate in route route selection and may be selected as the optimal route route to be added to the IP routing table for packet forwarding. Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 414 Once a BGP connection is established, a BGP Speaker advertises all the optimal routes in the BGP routing table to its BGP peer. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 415 Whatever changes occur in the BGP routing table, a BGP Speaker advertises all the optimal routes in the BGP routing table to its BGP peer. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 416 Which command can trigger the advertisement of BGP routes without interrupting a BGP connection? A. B. C. D.

Reset bgp Refresh Refresh bgp bgp all external external Refresh Refresh bgp all interna internall RR-f RR-fil ilte ter r

Correct Answer: B Section: (none) Explanation



QUESTION 417 IGP routes can be installed into the BGP routing table by running either the network or import- route command. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 418 In the VRP, by default, a BGP router automatically retransmits an Update packet to its BGP peer after the outbound routing policy of the BGP peer changes. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 419 In the VRP, by default, a BGP router does not automatically send a Refresh packet to request its BGP peer to retransmit an Update packet after the inbound routing policy of the BGP peer changes. A. True B. Fals False e Correct Answer: B Section: (none) Explanation



QUESTION 420 Which of the following BGP filters can be used to set route attributes? A. B. C. D.

Ip-prefix RouteRoute-pol policy icy As-pat As-path-f h-file iler r Community Community-filt -filter er


QUESTION 421 In the VRP, by default, the routes imported by BGP are not automatically summarized. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 422 Based on BGP route selection rules, a local route that is automatically summarized takes precedence over a local route that is manually summarized. A. True B. Fals False e Correct Answer: B



QUESTION 423 Which parameters are optional for configuring a BGP peer? (Select 2 Answers) A. B. C. D.

IP address Desc Descri ript ptio ion n Pass Passwo word rd AS-n AS-num umbe ber r


QUESTION 424 Which types of packets are supported by BGP? (Select 3 Answers) A. B. C. D.

Hello Notifi Notificat cation ion Upda Update te RouteRoute-ref refres resh h


QUESTION 425 A BGP finite state machine has the following following states: Active


OpenConfirm Idle Establish OpenSent What is the state transition sequence in which the BGP peer relationship is established? A. B. C. D.

Idle-OpenSent-OpenConfirmActive-Esta Idle-OpenSent-OpenConfirmActive-Establish blish Idle-Active-OpenSent-OpenConfirm-Est Idle-Active-OpenSent-OpenConfirm-Establish ablish Active-Idle-OpenSent-OpenConfirm-Est Active-Idle-OpenSent-OpenConfirm-Establish ablish Idle-Active-OpenConfirm-OpenSent-Est Idle-Active-OpenConfirm-OpenSent-Establish ablish


QUESTION 426 If the hold timers in the Open messages sent from BGP Peer A and Peer B are 180s and 90s respectively, what is the interval at which Keepalive messages are sent after Peer A and Peer B have established a BGP peer relationship? A. B. C. D.

180s 90s 60s 30s


QUESTION 427 In the BGP routing table, if there are two BGP routes with the same destination address but different next hops, which statement about the two BGP routes is true? A. Both BGP routes are are advertised to other other BGP peers.


B. Only the optimal route route selected from the two BGP routes is advertised to other BGP BGP peers. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 428 When the import-route command is used to import routes to BGP, which statement is false? A. B. C. D.

The import-route command command can import IGP IGP routes, direct routes, routes, and static routes routes to BGP. A process ID must be specified if OSPF routes, or RIP routes routes are imported to BGP. BGP. By default, the the Origin attribute attribute of imported imported routes is IGP. Routing policies can be used to filter the routes imported from other routing protocols. protocols.


QUESTION 429 Which statement is true if MD5 authentication is configured during the configuration of a BGP peer? A. B. C. D.

All the routers in the the same AS must use the same MD5 password. password. A pair of BGP peers must must use the same MD5 password. All BGP peers peers of a router router must use the same MD5 MD5 password. Every BGP peer of a router router must use use a unique MD5 password.



QUESTION 430 Which methods can be used to import local routes to BGP? (Select 2 Answers) A. B. C. D.

Run the network command. command. Receive Receive routes routes from from peers. peers. Run the summary summary automat automatic ic command. command. Run the the import import comma command. nd.


QUESTION 431 BGP is an inter-AS routing protocol. Which statements about BGP are true? (Select 3 Answers) A. B. C. D.

BGP adopts a reliable reliable transmission protocol. protocol. BGP supports supports automatic automatic peer peer discovery. discovery. BGP supports supports incremen incremental tal route update. update. BGP supports supports various various routing routing policies. policies.


QUESTION 432 Which statements about prerequisites to establishing a BGP peer relationship are true? (Select 2 Answers) A. B. C. D.

BGP peers have been been manually configured. configured. A TCP connection connection has been been established between two neighboring routers. routers. BGP peers peers have exchanged routing information. information. MD5 authentication authentication has been configured configured on BGP peers.



QUESTION 433 Which statements about BGP route advertisement are true? (Select 2 Answers) A. B. C. D.

All BGP routes learned learned from BGP peers are advertised to other other BGP peers. Only the routes routes learned from from an IGP are advertised to other BGP BGP peers. By default, the routes routes learned from IBGP IBGP peers are not advertised advertised to other IBGP peers. Only the optimal optimal routes are are advertised to to other BGP peers.


QUESTION 434 Which of the following conditions must be met for importing routes to BGP by using the network command? (Select 2 Answers) A. B. C. D.

The routes are optimal optimal in the IP routing table. The routes do do not need to match the specified mask length. The routes match the specified mask mask length. The routes routes are are IGP routes routes..


QUESTION 435 Using the peer connect-interface command to establish "multiple" peer relationships between two routers connected through "multiple" links is recommended.



QUESTION 436 Which parameters are carried in a BGP Open message? (Select 3 Answers) A. B. C. D. E.

Local AS number BGP BGP ID Keepal Keepalive ive timer timer Holder Holder timer timer Curren Currentt peer stat status us


QUESTION 437 When a TCP connection works properly, what is the status of the BGP peer relationship if the peer AS number configured for a BGP router is inconsistent with the AS number of its BGP BGP peer? A. B. C. D.

Idle Acti Active ve Open OpenSe Sent nt Esta Establ blis ish h




QUESTION 438 Assume that a TCP TCP connection works properly, properly, and the peer peer AS number configured configured for a BGP router is different from the AS number of its BGP BGP peer. During the establishment of a BGP session, the BGP router exchanges routing information with its peer, and finds that its peer AS number is different from the AS number of the peer. Therefore, the BGP router sends a Notification message to the peer, indicating that the establishment of a BGP session fails. Which message can be identified by the Error Code field in the Notification message? A. B. C. D.

Route-refresh Open Keep Keepal aliv ive e Upda Update te


QUESTION 439 Which statements about the process of establishing a BGP peer relationship are true? (Select 3 Answers) A. B. C. D.

There may be two TCP TCP connections during during the establishment establishment of the BGP peer relationship. relationship. If two TCP connections are established established between BGP peers, one connection connection functions as the primary connection, connection, and the other as the backup connection. If two TCP connections connections are established between BGP peers, peers, one TCP connection connection is torn down. If there are "multiple" TCP connections connections between BGP peers, BGP keeps the TCP connection connection initiated by the peer with a greater BGP router router ID.


QUESTION 440 In a route-policy, which BGP attributes can be invoked by if-match clauses? (Select 3 Answers)


A. B. C. D.

Local-Preference AS-P AS-Pat ath h MED Comm Commun unit ity y


QUESTION 441 In a route-policy, which BGP attributes can be used to define apply clauses? (Select 3 Answers) A. B. C. D.

Local-Preference Tag Orig Origin in AS-P AS-Pat ath h


QUESTION 442 Which statements about the AS number range are true? (Select 3 Answers) A. B. C. D.

If 2-byte AS numbers numbers are supported, a private private AS number ranges ranges from 32768 to 65535. 65535. If 2-byte AS numbers numbers are supported, a private private AS number ranges ranges from 64512 to 65535. 65535. If 2-byte AS numbers numbers are supported, an AS number ranges from from 1 to 65535. If 4-byte AS numbers are supported, a 4-byte 4-byte AS number is in the x.y format. Here, "x" and "y" are integers ranging ranging from 1 to 65535 and 0 to 65535 respectively.

Correct Answer: BCD Section: (none) Explanation www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 443 Assume that the following following commands are are run to configure BGP: BGP: timerkeepalive 30 hold 90 peer 1.1.1.2 timer keepalive 10 hold 30 Which statements about the configurations are true? (Select 2 Answers) A. B. C. D.

The global configuration configuration is preferred. Therefore, Therefore, the timer values values for peer 1.1.1.2 are "keepalive 30 hold hold 90." The peer configuration configuration is preferred. Therefore, Therefore, the timer values values for peer 1.1.1.2 are are "keepalive 10 hold 30." The smaller one between the global and peer peer timer values is used. Therefore, the timer values values of peer 1.1.1.2 is "keepalive 10 hold 30". The default configuration is "timer keepalive keepalive 60 hold 180." Therefore, peer 1.1.1.2 1.1.1.2 can detect connection faults faster than than the default configuration.


QUESTION 444 Based on BGP route selection rules, the route with the lowest Local-Preference is preferred. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 445 Based on BGP route selection rules, the route with the smallest MED value is preferred.



QUESTION 446 Which BGP attribute is usually used to determine the path along which data flows enter an AS? A. B. C. D.

Router ID Next Nextho hop p Local-Pre Local-Preferen ference ce MED


QUESTION 447 Which of the BGP attributes are Well-known mandatory attributes? (Select 3 Answers) A. B. C. D. E. F.

ORIGIN AS_P AS_PAT ATH H NEXT NEXT_H _HOP OP MED LOCA LOCAL_ L_PR PREF EF COMM COMMUN UNIT ITY Y




QUESTION 448 Which of the BGP attributes is Optional transitive attribute? A. B. C. D. E. F.

ORIGIN AS_P AS_PAT ATH H NEXT NEXT_H _HOP OP MED LOCA LOCAL_ L_PR PREF EF COMM COMMUN UNIT ITY Y


QUESTION 449 Which of the BGP attributes will not be advertised to other neighbor AS? A. B. C. D.

LOCAL_PREF AS_P AS_PAT ATH H COMM COMMUN UNIT ITY Y ORIG ORIGIN IN


QUESTION 450 Which of the attributes must exist in the BGP Update messages? (Select 3 Answers)


A. B. C. D.

LOCAL_PREF NEXT NEXT_H _HOP OP ORIG ORIGIN IN AS_P AS_PAT ATH H


QUESTION 451 By default, what are the LOCAL_PREF and PREFERRED-VALUE in VRP system? A. B. C. D.

0,32768 100, 100,0 0 255, 255,10 100 0 3276 32768, 8,0 0


QUESTION 452 Which of the followings is used to avoid route loops in BGP? A. B. C. D.

Use ORIGIN attribute attribute to record route origin origin Use AS_PATH attribute to record record all ASs during a route passing from the local area to the destination destination in a certain order Use NEXT_HOP NEXT_HOP attribute to record next hop hop of the route route Use MED attribute attribute to influence influence export selection selection of other other AS




QUESTION 453 What is the function of well-known community attribute NO_EXPORT_SUBCONFED NO_EXPORT_SUBCONFED in BGP? A. B. C. D.

Routes received carrying carrying this value cannot cannot be advertised outside outside the confederation Routes received carrying this value cannot be be advertised to to any BGP peers Routes received carrying carrying this value cannot cannot be advertised to any any EBGP peers All above above statemen statements ts are wrong wrong


QUESTION 454 What kind of the BGP attributes does AS-Path attribute belong to ? (Select 2 Answers) A. B. C. D.

Mandatory Tran Transi siti tive ve Opti Option onal al Non-tr Non-trans ansiti itive ve


QUESTION 455 Which of the following statements are correct regarding BGP attribute? (Select 2 Answers) A. Till now, there are 16 BGP attributes B. BGP attribute attribute can can be extended extended to 256 types types


C. ell-known ell-known discreti discretionary onary attribu attribute te may not be included included in each each BGP update update message, message, such such as Origin attribu attribute te D. AS_PATH is an Optional Transitive attribute Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 456 Which of the following statements belong to BGP COMMUNITY attribute ? (Select 3 Answers) A. B. C. D.

NO_EXPORT NO_ADV NO_ADVIER IERTIS TISE E LOCAL_EXP LOCAL_EXPORT_ ORT_SUBC SUBCONFE ONFED D NO_BRO NO_BROADC ADCAST AST


QUESTION 457 The Origin attribute of the BGP route that is imported by using the network command is IGP. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 458


The BGP Community attribute is a well-known mandatory attribute. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 459 Which following BGP attribute can used to define a set of prefixes with the same characteristics? A. B. C. D.

Origin Next Nextho hop p Comm Commun unit ity y MED


QUESTION 460 Based on BGP route selection rules, how are Origin attributes listed in descending order of priority? A. B. C. D.

EGP > IGP > Incomplete Incomplete IGP > Incomplete Incomplete > EGP EGP Incomplete Incomplete > EGP > IGP IGP > EGP > Incomplet Incomplete e




QUESTION 461 What is the Origin attribute of the BGP route that is imported by using the import-route command? A. B. C. D.

IGP EGP Incomp Incomplet lete e Unkn Unknow own n


QUESTION 462 If a router receives two BGP routes (M and N) that contain the following attributes,

Which route is the optimal route based on BGP route selection rules? A. The optimal route is route M because its AS_Path is shorter than that of route N. B. The optimal route is route N because its MED value is smaller smaller than that of route M. C. The optimal optimal route is determine determined d randomly. randomly. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 463 Which type of BGP route will be added to the BGP routing table? A. B. C. D.

All BGP routes learned learned from peers Only the routes routes learned learned from from IBGP peers peers Only the routes routes learned learned from from EBGP peers peers Only optimal optimal routes routes


QUESTION 464 How does the route Community attribute set by routing policies affect route selection? A. The Community attribute attribute directly affects route selection, because because it must be compared compared in route selection. selection. B. The Community attribute does not not affect route selection, because it is a non-transitive non-transitive attribute and cannot be transmitted transmitted between routers. C. The Community attribute indirectly indirectly affects route selection. Routes Routes are classified by the Community attribute. attribute. Different route attributes such as the LocalLocalPreference and MED can be set for routes in different communities, which affects route selection. Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 465 Which BGP attributes are optional in a BGP Update packet? (Select 2 Answers) A. B. C. D.

Origin Next Nextho hop p Local-Pre Local-Preferen ference ce MED



QUESTION 466 Which statements about BGP well-known mandatory attributes are true? (Select 3 Answers) A. B. C. D.

ell-known mandatory attributes must be identified identified by all BGP routers. ell-known ell-known mandatory mandatory attributes attributes must be be transmit transmitted ted betwee between n BGP peers. peers. ell-known ell-known mandator mandatory y attributes attributes are optiona optionall in an Update packet, packet, and and can be carried carried in an Update Update packet packet as needed. needed. ell-known ell-known mandatory mandatory attributes attributes must be be carried carried in in an Update Update packet. packet.


QUESTION 467 Which statements about the Local-Preference attribute are true? (Select 2 Answers) A. Based on BGP route route selection rules, the Local-Preference attribute attribute has a lower priority priority than the Preferred-Value Preferred-Value attribute. This means that BGP BGP compares Local-Preference attributes of routes after comparing Preferred-Value attributes of them. B. The Local-Preference Local-Preference attribute of a BGP route defaults to 0. C. The Local-Preference Local-Preference attribute is used to to select an exit point from the local AS for for data flows. D. Based on BGP route selection rules, the Local-Preference Local-Preference attribute has a lower lower priority than the MED attribute. This means means that BGP compares LocalPreference attributes of routes after comparing MED attributes of them. Correct Answer: AC Answer: AC Section: (none) Explanation Explanation/Reference:


QUESTION 468 Which BGP attribute is not a well-known mandatory attribute? A. B. C. D.

Origin Next Nextho hop p AS-P AS-Pat ath h MED


QUESTION 469 Which attributes are well-known community attributes? (Select 3 Answers) A. B. C. D.

NO_EXPORT (0xFFFFFF01) (0xFFFFFF01) NO_ADVER NO_ADVERTISE TISE (0xFFF (0xFFFFFF02 FFF02)) NO_EXPOR NO_EXPORT_SUB T_SUBCONF CONFED ED AS(2Byte): AS(2Byte):Numb Number(2B er(2Byte) yte)


QUESTION 470 Which statements about BGP route selection rules are true? (Select 3 Answers) A. B. C. D.

BGP first ignores routes routes with unreachable unreachable next hops. A summarized route takes precedence over a non-summarized non-summarized route. IBGP routes take precedence precedence over EBGP routes. routes. If other conditions of of routes are the same, same, the route with the shortest Cluster_List Cluster_List is preferred.



QUESTION 471 Which BGP attributes can be used to prevent routing loops? (Select 3 Answers) A. B. C. D.

Originator_ID Aggr Aggreg egat ator or Cluste Cluster_L r_List ist AS-P AS-Pat ath h


QUESTION 472 Which of the following BGP routing policies can be used to filter routes? (Select 2 Answers) A. B. C. D.

Ip-prefix Reflec Reflect-c t-clie lient nt RouteRoute-pol policy icy Next-h Next-hopop-loc local al


QUESTION 473 Which statements about the MED attribute are true? (Select 3 Answers)


A. Based on BGP route route selection rules, the MED attribute takes takes precedence over the the AS_Path, Preferred-Value, Preferred-Value, Local-Preference, Local-Preference, and Origin attributes. attributes. B. The MED attribu attribute te of a BGP route default defaults s to 100. C. By default, BGP compares MED attributes attributes of only the routes from the same AS. If the compare-different-as-med compare-different-as-med command command is configured, BGP can compare the the MED attributes of the routes from different ASs. D. By default, if the MED value of a BGP route is not specified, specified, the value 0 is used. If the bestroute med-none-as-maximum med-none-as-maximum command is configured, configured, the maximum MED value 4294967295 is used. Correct Answer: ACD Answer: ACD Section: (none) Explanation Explanation/Reference:

QUESTION 474 An ACL is used to match routing information information or data packet addresses so as to filter filter out the unmatched unmatched routing information information or data packets. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 475 The system can perform ACL rule matching only based on the configuration order of rules. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:


QUESTION 476 An IP-prefix-filter is used to filter IP prefixes prefixes and data packets. packets. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 477 Generally, the performance of an IP-prefix-filter is higher than that of an ACL. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: Topic 6, Volume F QUESTION 478 Default routes between routers are a low-cost solution. This is because using default routes requires less system resources than maintaining a complete routing table. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 479 The acl[ number ] acl-number [ match-order { auto | config ] command is used to configure an ACL. In this command, acl-number specifies the number of an ACL. For an advanced ACL, what is the range of its acl-number? A. B. C. D.

1000 to 3999 2000 2000 to to 2999 2999 3000 3000 to to 3999 3999 0 to to 100 1000 0


QUESTION 480 Route filtering can filter not only routing information but also link-status information. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 481 For link-status routing protocols, filtering routes in the inbound direction actually cannot block the transmission of link-status information. The filtering effect is that routes cannot be injected into the local routing table but neighbors can still receive complete route status information and calculate complete routes. A. True B. Fals False e Correct Answer: A Answer: A



QUESTION 482 All routing protocols protocols can deliver default routes, supporting both both forcible delivery and and non- forcible delivery. delivery. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 483 The default-route originate command in the RIP protocol is used to advertise a default RIP route to peers. By using this command, which of the following attributes can be set for the default route? A. B. C. D.

Tag Cost Inte Interf rfac ace e Next Nextho hop p


QUESTION 484 An ACL is a series of orderly rules composed composed of permit | deny deny clauses. Which of the following attributes attributes cannot be used for for defining an ACL rule? rule? A. Source address


B. Destinati Destination on address address C. Port Port number number D. AS-P AS-Pat ath h Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 485 Which of the following routes matches this ACL filter? "acl number 2001 rule 0 permit source 1.1.0.0 0" A. B. C. D.

1.1.1.1/32 1.1. 1.1.1. 1.0/ 0/24 24 1.1.0. 1.1.0.0/1 0/16 6 1.0. 1.0.0. 0.0/ 0/8 8


QUESTION 486 What does the IP-prefix-filter "ipip-prefix test index 10 deny 0.0.0.0 0 less-equal 32" mean? A. B. C. D.

Matching only default default routes Matchi Matching ng all rout routes es Denying Denying only default default routes routes Denying Denying all routes routes




QUESTION 487 Which of the following route selection mechanisms can adopt user-defined policies to determine data forwarding paths flexibly based on ACLs or packet lengths? A. B. C. D.

AS-path-filter IP-p IP-pre refi fix x RouteRoute-pol policy icy Policy-ba Policy-based-r sed-route oute


QUESTION 488 Which of the following statements about costs of routing protocols is false? A. Because different routing routing protocols have the same basis for calculating calculating route costs, costs, it is recommended to adopt automatic cost cost converting in route route importing. B. Because different routing protocols protocols have different bases for calculating calculating route costs, it is recommended to perform manual manual configuration for cost converting converting in route importing. C. Costs of OSPF routes routes is generally based based on bandwidth and therefore therefore OSPF cost value ranges is wide. wide. D. Costs of RIP routes are generally based on hops and therefore therefore the RIP cost value range is narrow. Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: QUESTION 489 Which of the following routing protocols support import-route? (Select 3 Answers) A. OSPF B. RIP


C. BGP D. Stat Static ic Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 490 Which of the following tools cannot be used for route filtering? A. B. C. D.

Filter-policy IP-p IP-pre refi fix x RouteRoute-pol policy icy Policy-ba Policy-based-r sed-route oute


QUESTION 491 Which of the following routes match this ACL filter? (Select 2 Answers) "acl number 2001 rule 0 permit source 1.1.1.0 0.0.254.255" A. B. C. D.

1.1.1.1/32 1.1. 1.1.2. 2.1/ 1/32 32 1.1.3. 1.1.3.1/3 1/32 2 1.1.4. 1.1.4.1/3 1/32 2



QUESTION 492 Which of the following route prefixes match this IP-prefix-filter? (Select 3 Answers) "ipip-prefix test index 10 permit 10.0.0.0 16 greater-equal 24 less-equal 28" A. B. C. D.

10.0.1.0/23 10.0 10.0.1 .1.0 .0/2 /24 4 10.0.1 10.0.1.0/ .0/25 25 10.0.1 10.0.1.0/ .0/28 28


QUESTION 493 If the peer default-route-advertise command is used to advertise a default BGP route to peers, how will this operation affect the local BGP routing table? A. B. C. D.

An inactive default route will be generated generated in the local BGP routing routing table and this route will not be delivered delivered to the IP routing routing table. An active default route will be generated in the local local BGP routing table and this route will be delivered to the IP routing routing table. The local BGP routing table will not be affected affected and no default route will be generated in the local BGP routing routing table. A default route will be generated in the local BGP routing routing table and whether to deliver this route to the IP routing table table depends on route selection results.


QUESTION 494 Which of the following protocols support default route advertisement by using commands? (Select 3 Answers) A. B. C. D.

RIP OSPF BGP Stat Static ic



QUESTION 495 If a BGP peer is configured with "multiple" route selection tools for route filtering, which of the following statements are true? (Select 2 Answers) A. B. C. D.

The routes received from the BGP peer are matched first with with IP-prefix and then with route- policy. The routes received from the BGP peer are matched first with with route-policy and then then with IP- prefix. The routes sent to the BGP peer are matched matched first with IP-prefix IP-prefix and then with route-policy. route-policy. The routes sent to the BGP peer are matched matched first with route-policy route-policy and then with with IP-prefix.


QUESTION 496 What are the functions of route filtering? (Select 3 Answers) A. B. C. D.

Avoids sub-optimal routes generated in route route importing. Avoids Avoids routing routing loops. loops. Affects route selection by changing route attributes. Implements accurate accurate route importing importing and controls controls route advertisement. advertisement.


QUESTION 497


Which of the following methods are supported by OSPF for delivering default routes? (Select 3 Answers) A. B. C. D.

Delivery by an ABR Delivery Delivery by an an Backbone Backbone Router Router Forcib Forcible le delivery delivery Non-forcib Non-forcible le delivery delivery


QUESTION 498 Which of the following route selection tools can be used in "multiple" routing protocols, be configured with matching conditions, and be composed of if-match and apply clauses? A. B. C. D.

AS-path-filter IP-p IP-pre refi fix x RouteRoute-pol policy icy Community Community-filt -filter er


QUESTION 499 If different routing protocols run on different networks and these networks need to share routing information, route importing can be used. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation



QUESTION 500 Which of the following statements about comparison between ACL and IP-Prefix are true? (Select 2 Answers) A. B. C. D.

Both ACL and IP-Prefix IP-Prefix can be used for route filtering Both ACL and and IP-Prefix can can be used for data packet packet filtering ACL can be used for data packet filtering and route filtering, filtering, but IP-Prefix can only be used for route filtering filtering IP-Prefix can be used for data packet filtering filtering and route filtering, but ACL can only be used for route filtering filtering


QUESTION 501 Which of the following statements about ACL type are true? (Select 3 Answers) A. B. C. D.

ACL consists of basic basic ACL, advanced ACL ACL and interface-based interface-based ACL ACL ranging from 2000 to 2999 belongs to advanced ACL ACL ACL ranging from 3000 to 3999 belongs to advanced ACL ACL Advanced ACL can be used to match either either destination address address or source address


QUESTION 502 Which of the following route entries matches ACL 2001 that is defined below? 1.0.0.0/8 ,1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, ,1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 ACL 2001: Basic ACL 2001, 1 rule Acl's step is 5 www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn

rule 0 permit source 1.2.1.0 0.0.254.255 A. B. C. D.

1.2.3.0/24,1.2.4.0/24, 1.2.3.0/24,1.2.4.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8. 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 0/24 1.0.0.0/8, 1.2.0.0/16,1.2.3.0/24,1 1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, .2.4.0/24, 1.2.5.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 .0/24 1.2.3.0/2 1.2.3.0/24,1.2 4,1.2.5.0/ .5.0/24,1 24,1.2.7. .2.7.0/24 0/24 1.2.0.0/16,1.2.4.0/24,1.2.6.0/24,1.2.8.0/ 1.2.0.0/16,1.2.4.0/24,1.2.6.0/24,1.2.8.0/24 24


QUESTION 503 Which of the following route entries matches ACL 2001 that is defined below? 1.0.0.0/8 ,1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, ,1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 ACL 2001: Basic ACL 2001, 1 rule Acl's step is 5 rule 0 permit source 1.2.0.0 0.0.254.255 A. B. C. D.

1.2.3.0/24,1.2.4.0/24, 1.2.3.0/24,1.2.4.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8. 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 0/24 1.0.0.0/8 ,1.2.0.0/16,1.2.3.0/24,1 ,1.2.0.0/16,1.2.3.0/24,1.2.4.0/24, .2.4.0/24, 1.2.5.0/24, 1.2.5.0/24, 1.2.6.0/24,1.2.7.0/24,1.2.8 1.2.6.0/24,1.2.7.0/24,1.2.8.0/24 .0/24 1.2.3.0/2 1.2.3.0/24,1.2 4,1.2.5.0/ .5.0/24,1 24,1.2.7. .2.7.0/24 0/24 1.2.0.0/16,1.2.4.0/24,1.2.6.0/24,1.2.8.0/ 1.2.0.0/16,1.2.4.0/24,1.2.6.0/24,1.2.8.0/24 24


QUESTION 504 Which of the following route entries match IP-Prefix defined below? (Select 2 Answers) ipip-prefix test index 10 permit 192.168.0.0 16 greater-equal 24 less-equal 28 A. 192.168.1.0/24


B. 192.10 192.10.2. .2.0/2 0/24 4 C. 192.16 192.168.3 8.3.0/ .0/25 25 D. 192.16 192.168.4 8.4.0/ .0/30 30 Correct Answer: AC Answer: AC Section: (none) Explanation Explanation/Reference:

QUESTION 505 The route selection tool route-policy can filter and set BGP attributes based on pre-defined conditions. Therefore, this tool is commonly used to define policies for BGP peers and often used in route generation. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 506 When importing routes discovered by other routing protocols, a routing protocol may need to import only the routes that meet the conditions and set attributes of the imported routes to meet the requirement of the protocol. In such a case, a route-policy can be created. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 507


Policy-based routing and routing policy affect the forwarding of data packets in different ways: A routing policy mainly mainly controls packet forwarding. According According to the routing policy, policy, packets can be forwarded forwarded with no need to use a routing table; table; policy-based routing mainly controls the importing, advertising, and receiving of routing information so as to affect the forwarding of data packets. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 508 The configurations of the defined route-policy Set-cost are as follows: ipip-prefix 1 permit 10.1.0.0 16 route-policy Set-cost permit node 10 if-matchip-prefix 1 apply cost 300 route-policy Set-cost permit node 20 apply cost 200 Which of the following statements is true? A. B. C. D.

The route 10.1.0.0/16 10.1.0.0/16 matches node 10 and its cost is set to 300. The route 10.1.0.0/16 10.1.0.0/16 matching node 10 also matches node 20 20 subsequently and its its cost is finally set to to 200. Costs of of all routes routes will be set set to 200. All routes that that fail to match match node 10 will be denied. denied.


QUESTION 509 One route-policy may have several nodes and each node has a node ID. Each node may have "multiple" if-match and apply clauses. Which of the following


statements are true? (Select 2 Answers) A. B. C. D.

Different nodes are in an OR relationship. relationship. Different Different nodes nodes are in an AND relation relationship. ship. If-match clauses under a node are in an AND relationship. relationship. If-match clauses under a node are in an OR relationship.


QUESTION 510 Which of the following is not supported by policy-based route for specifying the data forwarding path? A. B. C. D.

Source address Port Port num numbe ber r Destinati Destination on address address Packet Packet length length


QUESTION 511 The unicast and multicast technologies are both outstanding in solving the problem of one source and "multiple" destinations for efficient P2MP data transmission. A. True B. Fals False e Correct Answer: B Section: (none) Explanation



QUESTION 512 The IGMP protocol runs between a host and its directly connected multicast router. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 513 Which of the following statements regarding IP address 224.0.0.1 are correct? (Select 2 Answers) A. B. C. D.

It is a multicast IP address. It is a private private IP address. address. It represents represents all all the hosts and and routers. routers. It represent represents s all the router routers. s.


QUESTION 514 How many multicast IP addresses can be represented by the same multicast MAC address? A. B. C. D.

1 23 32 24



QUESTION 515 How many bits of the multicast MAC address are used for multicast IP address mapping? A. B. C. D.

24 22 25 23


QUESTION 516 Which of the following protocols are multicast routing protocol? (Select 3 Answers) A. B. C. D.

DVMRP PIMPIM-DM DM OSPF PIMPIM-SM SM


QUESTION 517 Which of the following commands is used to display check information of IGMP enabled interface?


A. B. C. D.

[Quidway]showipigmp [Quidway]showipigmp interface [Quidway]d [Quidway]displa isplayigmp yigmp interface interface [Quidway]s [Quidway]showi howipigmp pigmp [Quidway]d [Quidway]displa isplayip yip interface interface


QUESTION 518 Which of the following commands is used to display the IGMP routing table? A. B. C. D.

Display igmp group Display Display igmp interface interface Display Display igmp igmp routing-t routing-table able Displa Display y igmp igmp


QUESTION 519 Which of the following is the multicast distribution tree maintained by PIM-DM? A. B. C. D.

SPT CBT RPT STP

Correct Answer: A Answer: A Section: (none)



QUESTION 520 In IPv4, which of the following is the SSM address range allocated by the IANA? A. B. C. D.

232.0.0.0/24 225. 225.0. 0.0. 0.0/ 0/8 8 232.0. 232.0.0.0 0.0/8 /8 239.0. 239.0.0.0 0.0/8 /8


QUESTION 521 Which of the following problems can be solved by IGMP Snooping? A. B. C. D.

Receiver hosts support support only IGMPv2 but but the SSM model is used used on the network. A large number of receiver hosts exist on the network network and a router receives large quantities of IGMP IGMP Report messages. Multicast data packets are broadcast on Layer 2 devices. devices. Validity Validity of IGMP Report Report messag messages. es.


QUESTION 522 In PIM-DM, which of the following messages needs to be sent by a downstream interface when the downstream interface recovers recovers to the forwarding state from the prune state?


A. B. C. D.

Join Asse Assert rt Prun Prune e Graft raft


QUESTION 523 Which of the following routers can initiate SPT switchover on a PIM-SM network? (Select 2 Answers) A. B. C. D.

Last-hop router Intermedi Intermediate ate router router RP Source Source's 's DR


QUESTION 524 Which of the following messages exist only in PIM-SM? (Select 2 Answers) A. B. C. D.

Join/Prune Asse Assert rt Boot Bootst stra rap p Regi Regist ster er

Correct Answer: CD Section: (none) Explanation



QUESTION 525 Which of the following statements about the Reverse Path Forwarding (RPF) mechanism are true? (Select 2 Answers) A. B. C. D.

Multicast RPF does not depend on unicast unicast routing. All multicast multicast protocols protocols adopt the RPF mechanism. A router discards the the received multicast packets if the packets packets fail the RPF check. check. The RPF mechanism has two functions: functions: 1. It prevents multicast routing loops; loops; 2. It avoids forwarding redundant multicast multicast data packets.


QUESTION 526 How does an IGMP router maintain group memberships on the network? (Select 2 Answers) A. The router maintains maintains a timer for each group group membership. If the the router receives a Report message from a receiver host, it refreshes the timer of of the group membership of this host; if the router does not receive any Report message from a receiver host before the timer expires, it deletes the group membership of his host. B. The router periodically sends Query Query messages. After a receiver host receives receives the Query message, the receiver host sends sends a Report message. C. A receiver host periodically periodically sends a Report message. D. The router deletes a group membership only when it receives a Leave message for for this group. Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 527 Which of the following statements about multicast MAC addresses are true? (Select 3 Answers)


A. The high-order 24 bits bits of a multicast MAC MAC address are 0x01005e 0x01005e and the low-order low-order 23 bits of a multicast multicast MAC address are the same as the low-order low-order 23 bits of a multicast IP address. B. One multicast MAC address maps 32 IP multicast addresses. addresses. C. Multicast MAC addresses are used used at the link layer to identify receivers that are in the same multicast multicast group. D. One multicast MAC address maps only one IP multicast multicast address. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 528 Which of the following protocols support the multicast ASM model? (Select 2 Answers) A. B. C. D.

PIM-SM and IGMPv2 IGMPv2 PIM-SS PIM-SSM M and IGMPv IGMPv3 3 BGP and OSPF OSPF PIM-DM PIM-DM and and IGMPv IGMPv2 2


QUESTION 529 Which of the following multicast protocols can generate multicast distribution trees? A. B. C. D.

MBGP MSDP IGMP PIM

Correct Answer: D Section: (none) Explanation www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 530 What are the differences between the IGMP versions? (Select 2 Answers) A. B. C. D.

IGMPv1/v2 cannot elect queriers but IGMPv3 IGMPv3 can. In IGMPv2/v3, members members can actively leave leave groups, whereas in IGMPv1 members cannot actively leave leave groups. IGMPv1/v2 do not support the SSM model model but IGMPv3 IGMPv3 supports. IGMPv1/v2 do not support group-specific group-specific Query messages but but IGMPv3 supports.


QUESTION 531 What are the functions of an IGMPv2 Query message? (Select 3 Answers) A. B. C. D.

A router sends IGMPv2 IGMPv2 Query messages messages to collect group memberships memberships of receiver receiver hosts. A router sends sends IGMPv2 Query Query messages to elect a querier. If a router can periodically periodically send IGMPv2 Query messages, it indicates that the router router runs properly. Based on IGMPv2 Query messages, messages, receiver hosts can obtain the address of a querier querier and unicast Report messages to the querier. querier.


QUESTION 532 Which of the following statements about RPs are true? (Select 3 Answers) A. Different group addresses addresses on a PIM-SM network can correspond correspond to different RPs. RPs. B. An RP is the root of of an RPT. RPT.


C. An RP is elected elected out of of BSRs. BSRs. D. All routers on on a PIM-SM network must know the location location of RPs. Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:

QUESTION 533 Which of the following statements about DR are true? (Select 3 Answers) A. B. C. D.

In DR election, among among the routers of the same DR priority, the the router with the lowest lowest IP address is elected. elected. A source's DR is responsible for sending Register messages messages to an RP. RP. A receiver's DR is responsible responsible for sending Join messages to a multicast source or an RP. An Assert winner on on a shared network segment segment may not be a DR.


QUESTION 534 Which of the following situations will occur after multicast load balance is configured? (Select 3 Answers) A. B. C. D.

If there are no equal-cost equal-cost unicast routes, routes, multicast load balance balance will fail to function. function. If group address-based load splitting splitting is used, balanced entry distribution over over equal-cost routes cannot be ensured because because of hash algorithm limitations. limitations. Balanced entry distribution over over equal-cost routes can be ensured as long as multicast multicast load balance is configured. In multicast load splitting, traffic may not not be balanced among equal-cost routes. routes. This is because multicast load balance is based based on multicast entries but not based on multicast data packets.



QUESTION 535 Which of the following statements about a multicast distribution tree are true? (Select 3 Answers) A. B. C. D.

Multicast distribution distribution trees are classified into two types: SPT and RPT. The PIM-SM protocol can generate both RPTs and SPTs. The PIM-SSM PIM-SSM protocol can generate only SPTs. The PIM-DM protocol can generate both RPTs and SPTs. SPTs.


QUESTION 536 The preceding information is generated after a router receives a Report message from group 225.0.0.1 through Ethernet 6/1/0.

Which type of Report message will not be processed by the router?


A. B. C. D.

IS_IN ALLO ALLOW W BLOC BLOCK K TO_I TO_IN N


QUESTION 537 IGMP interface group report information Ethernet6/1/1(40.1.1.1): Total 1 IGMP Group reported Group: 232.0.0.1 UptimE.00:00:22 Expires: off Last reporter: 40.1.1.3 Last-member-query-counter: Last-member-query-counter: 0 Last-member-query-timer-expiry: Last-member-query-timer-expiry: off Group modE.include Version1-host-present-timer-expiry: Version1-host-present-timer-expiry: off Version2-host-present-timer-expiry: Version2-host-present-timer-expiry: off Source list: SourcE.20.1.1.56 UptimE.00:00:22 Expires: 00:05:08 Last-member-query-counter: Last-member-query-counter: 3 Last-member-query-timer-expiry: Last-member-query-timer-expiry: 00:00:01 SourcE.20.1.1.57 UptimE.00:00:22 Expires: 00:00:17 Last-member-query-counter: Last-member-query-counter: 3 Last-member-query-timer-expiry: Last-member-query-timer-expiry: 00:00:01 The preceding information shows the entry status of an IGMP interface on Ethernet 6/1/1 on a router. Assume IGMP sends sends the group-and-source-specific group-and-source-specific Query message. message. Which of the the following statements statements is true?


A. IGMP respectively sends two messages: messages: The source carried in one of the messages messages is 20.1.1.56 with the S flag bit not set; set; the source carried in the other message is 20.1.1.57, with the S flag bit set to 1. B. IGMP respectively sends two messages: messages: The source carried in one of the messages messages is 20.1.1.56 with the S flag bit set to 1; the source carried in the other message is 20.1.1.57, with the S flag bit not set. C. IGMP sends one message message carrying two sources 20.1.1.56 and and 20.1.1.57, with the S flag bit set to 1. D. IGMP sends one message message carrying two sources 20.1.1.56 and and 20.1.1.57, with the S flag bit not set. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 538 Which of the following routers have multicast routing entries even when there is no receiver on the network? (Select 2 Answers) A. B. C. D.

Source's DR Receiv Receiver er rout router er Intermedi Intermediate ate router router RP


QUESTION 539 RTA is a source's DR and RTB is an RP. A multicast source sends multicast data to RTA but RTB cannot find any information about the multicast source (registered by using the PIM Register message). Why? (Select 3 Answers) A. B. C. D.

RTB has no unicast unicast routes to RTA. RTA fails fails to learn learn RP informati information. on. RTA has no no unicast unicast routes routes to RTB. RTB. The RP learne learned d by RTA RTA is not RTB. RTB.



QUESTION 540 VLANs isolate broadcast domains, eliminates broadcast storms, and enhances information security. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 541 Before establishing a network, we must create VLANs. The users that do not need to communicate with each other should be added to the same VLAN for isolation. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 542 Which types of interfaces are supported by Huawei switches after the VLAN function is configured? (Select 3 Answers) A. Access interface B. Trunk Trunk inte interfa rface ce C. Hybrid Hybrid inter interfac face e


D. Dialer Dialer interf interface ace Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 543 Which interface is connected to the user-side interface? A. B. C. D.

Access interface Trunk Trunk inte interfa rface ce Hybrid Hybrid inter interfac face e All of the the abov above e


QUESTION 544 A VLAN can be regarded regarded as a ( ) A. B. C. D.

collision domain broadc broadcast ast domai domain n managemen managementt domain domain congestion congestion domain domain



QUESTION 545 Which of the following technologies can reduce the scale of broadcast domain? A. B. C. D.

VLAN Trun Trunk k RARP STP


QUESTION 546 Divide the network by using VLAN can ( ). (Select 2 Answers) A. B. C. D.

Support more network network layer protocols Restrict Restrict the scope scope of broadcast broadcast domain domain Increase Increase the collis collision ion Guarantee Guarantee the securi security ty


QUESTION 547 The link that connects a PC to a switch is ( ). A. B. C. D.

Access Link Trun Trunk k Lin Link k Hybrid Hybrid Link Link ISL ISL Link Link



QUESTION 548 What is the function for the command "InterfaceVlan-interface Vlan-ID"? A. B. C. D.

Create a VLAN Create Create or enter VLAN VLAN interfac interface e view Configure Configure a VLAN VLAN for port port Config Configure ure PVID PVID


QUESTION 549 Layer 3 switch has layer 2 capability as well as layer 3 routing capability. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 550 What is the range of VLAN IDs? A. 1~1000


B. 0~40 0~4095 95 C. 0~40 0~4096 96 D. 1~40 1~4096 96 Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 551 Which bits in a VLAN tag indicates 802.1Q? A. B. C. D.

0x9100 0x88 0x8808 08 0x81 0x8100 00 0x88 0x8800 00


QUESTION 552

As shown in the figure, figure, SWA and SWB are two switches. Which Which statements are true? (Select 3 Answers) Answers)


A. B. C. D.

Port0/3 can be an access access interface Port0/3 Port0/3 can be be a hybrid hybrid interfac interface e Port0/3 Port0/3 can be a trunk trunk interface interface None None of the the above above


QUESTION 553 How many types of topology change messages are defined in RSTP? A. B. C. D.

1 2 3 4

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: New Questions FormA QUESTION 554 Which of the following statements is false? A. B. C. D.

A Router-LSA describes describes the local link state state information of a router. A Network-ISA describes describes the link state information of a broadcast broadcast network or an NBMA network segment. segment. A virtual link is a virtual virtual adjacency in the backbone area (Area (Area 0). An AS-external-ISA AS-external-ISA describes the means to reach an ASBR. ASBR.

Correct Answer: D www.vceplus.com - Website designed to help IT pros advance their careers - Born to Learn


QUESTION 555 An IP address 192.168.13.175 192.168.13.175 with the subnet mask 255.255.255.2 255.255.255.2 can be assigned assigned to a device. A. TRUE B. FALS FALSE E Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 556 Which of the following statements is true regarding the function of VRRP? A. B. C. D.

VRRP can improve default gateway reliability. reliability. VRRP increases increases the routing protocol protocol convergence convergence speed. VRRP is mainly mainly used used for traffic traffic balance. balance. VRRP can provide one default gateway gateway for different network segments, simplifying simplifying the PC gateway configuration. configuration.


QUESTION 557 MPLS is a switching standard defined by the IETF. Which of the following devices exist on the MPLS network? (Select 2 answers) A. LSR B. LER


C. Label distributi distribution on router router D. Label transmit transmit router router Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 558 Which type of BGP route can be added to the BGP routing table? A. B. C. D.

All BGP routes learned learned from peers Only the routes routes learned learned from from IBGP peers peers Only the routes routes learned learned from from EBGP peers peers Only optimal optimal routes routes


QUESTION 559 Which of the following describes the relationship between BGP and AS? A. B. C. D.

BGP only runs between between ASs, and cannot cannot run within an AS. BGP is an EGP used used by ASs to exchange exchange routing information information with other ASs. BGP builds network topologies by exchanging exchanging link-state information information between ASs. ASs. BGP cannot cannot run run between between ASs. ASs.



QUESTION 560 VLANs isolate broadcast domains, eliminate broadcast storms, and enhance data security. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 561 Which of the following statements regarding RPs are true? (Select 3 answers) A. B. C. D.

Different group addresses addresses on a PIM-SM network corresponds to different RPs. An RP is the root of of an RPT. RPT. An RP is elected elected out of of BSRs. BSRs. All routers on a PIM-SM PIM-SM network must automatically discover discover the location of RPs. RPs.


QUESTION 562 BGP is an exterior gateway protocol which runs between ASs. It focuses on the control of route propagation and selection of optimal routes rather than discovery and calculation of routes. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation



QUESTION 563 The USG supports load balancing between multiple uplinks. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 564 Which of the following route selection tools is used in multiple routing protocols, can be configured with match conditions, and consists of if-match and apply clauses? A. B. C. D.

AS-path-filter IP-p IP-p ref ref ix ix C RouteRoute-pol policy icy Community Community-filt -filter er


QUESTION 565 What is the maximum number of hosts that a network segment 192.168.2.16/28 can support? A. 16 B. 8 C. 15


D. 14 E. 7 Correct Answer: D Section: (none) Explanation Explanation/Reference:

QUESTION 566 OSPF supports two authentication modes: area authentication and interface authentication. These two modes cannot be configured at the same time. A. TRUE B. FALS FALSE E Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 567 A OSPF network may be structured, or or subdivided into routing routing areas. Such routing routing areas are a set of network segments. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 568 For label switched packets that contain the same source and destination address and are transmitted via the same interface, the label switch path 0 A. Must be different.


B. Must Must be the same. same. C. May be the the same same.. Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 569 How many default zones does the USG supporting multi-instance have? A. B. C. D.

Two Thre Three e Four Five


QUESTION 570 Which of the following is the port state defined by RSTP? A. B. C. D.

Discarding Lear Learni ning ng Forwar Forwardin ding g All of the the abov above e



QUESTION 571 The most remarkable characteristic of OSPF is that it can support the link-state algorithm. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 572 An IP network can provide various packet packet forwarding services. services. Users are concerned concerned about which of the the following during packet packet forwarding? (Select (Select 3 answers) A. B. C. D.

Throughput Dela Delay y Cost Loss Loss of packet packet


QUESTION 573 To which attribute type does the BGP AS-Path attribute belong? A. ell -known Mandatory B. ellell-kn know own n Disc Discre reti tion onar ary y C. Optional Optional Transitive Transitive D. Optional Optional Non-tr Non-transi ansitive tive Correct Answer: A Answer: A Section: (none)



QUESTION 574 Which of the following is the address range assigned by IANA for SSM service in IPv4? A. B. C. D.

232.0.0.0/24 225. 225.0. 0.0. 0.0/ 0/8 8 232.0. 232.0.0.0 0.0/8 /8 239.0. 239.0.0.0 0.0/8 /8


QUESTION 575 How many multicast IP addresses can be represented by an IP multicast MAC address? A. B. C. D.

1 23 32 24


QUESTION 576 The option field in a DHCP message uses the CLV mode. A. TRUE


B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 577 Which statements regarding the PVID on the access interface are true? (Select 3 answers) A. If a packet without VLAN tag is received, received, the interface adds a VLAN tag to the packets packets and sets the VID VID as the default VLAN VLAN ID. B. If a packet with VLAN tag is received, the interface interface compares the VLAN ID in the tag with the default VLAN ID. If they are are the same, the interface forwards the packets; otherwise, the interface discards the packets. C. hen the interface interface sends a packet with a VLAN tag that contains the default VLAN ID, the system removes the VLAN tag of the packet, packet, and then forwards the packet. D. PVID on access interface interface is set to 1 by default and cant changed. changed. Correct Answer: ABC Answer: ABC Section: (none) Explanation Explanation/Reference:

QUESTION 578 What are the advantages of subnetting? (Select 2 answers) A. B. C. D.

Isolating broadcast traffic Improving Improving network network Q0S Increasin Increasing g the IP address address usage usage Improving Improving network network reliabil reliability ity



QUESTION 579 What are the functions of route filtering? (Select 3 answers) A. B. C. D.

Avoids sub-optimal routes generated during during route import. Avoids Avoids routing routing loops. loops. Affects route selection by changing route attributes. Implements accurate accurate route importing importing and controls controls route advertisement. advertisement.


QUESTION 580 Which of the following statements is NOT an advantage of STP? A. B. C. D.

STP can establish redundant links as a backup if the initial link link fails. STP can prevent prevent loops loops STP can prevent prevent broadcas broadcastt storms STP can save save network network bandwi bandwidth dth


QUESTION 581 Which of the following is the priority value of the DMZ on the USG? A. B. C. D.

10 50 75 85



QUESTION 582 Which of the following are multicast routing protocols? (Select 3 answers) A. B. C. D.

DVMRP PIMPIM-DM DM F OS OSPF F PIMPIM-SM SM


QUESTION 583 By default, the cost of an OSPF interface is calculated based on the bandwidth. The formula to calculate the cost is reference bandwidth/interface bandwidth. bandwidth. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 584 When an edge port is in the protected state on an RSTP network, which of the following operations is performed by the edge port immediately after receiving BPDUs?


A. B. C. D.

The edge port forwards forwards BPDUs. The edge edge port port discards discards BPDUs. BPDUs. The edge edge port port is shut shut down. down. The edge port obtains required information information from BPDUs.


QUESTION 585 How many hosts are available per subnet if you apply a /21 mask to the class B network? A. B. C. D.

510 512 1022 2046


QUESTION 586 What is the maximum number of bits that can be used for subnetting, when the network address is a Class C address? A. B. C. D.

6 8 12 14




QUESTION 587 A 32-bit MPLS header header consists of a 20-bit 20-bit label used for packet packet forwarding, a 3-bit 3-bit EXP field that identifies identifies the IP packet priority, a 1-bit bottom-of-stack bottom-of-stack flag that identifies the last label, and an 8- bit ITL field. Which statement about the ITL field is true? A. B. C. D.

It is used to prevent prevent packet forwarding loops, loops, similar to the TTL TTL field in an IP header. header. It is used used for label label manage management. ment. It specifies the upstream upstream device in label distribution It contro controls ls the the LSR. LSR.


QUESTION 588 What is the network address for the IP address 190.233.27.13/16? A. B. C. D.

190.0.0.0 190. 190.23 233. 3.0. 0.0 0 190.23 190.233.2 3.27.0 7.0 190.23 190.233.2 3.27.1 7.1


QUESTION 589 Which of the following attacks are prevented after an IP address and MAC address are bound on the USG? (Select 2 answers) A. IP address spoofing


B. MAC address address spoofing spoofing C. DoS DoS atta attack ck D. DDoS DDoS attack attack Correct Answer: AB Answer: AB Section: (none) Explanation Explanation/Reference:

QUESTION 590 Which switching technology reduces the size of broadcast domain? A. B. C. D.

VLAN Trun Trunk k RARP STP


QUESTION 591 Which of the following statements are true regarding VRRP? A. B. C. D.

Only the Master can can process the data packets packets being sent to the the virtual router. Only the Slave can process the data packets packets being sent to the the virtual router. Both Master and Slave can process the data data packets being sent to the same virtual router to realize realize load balance. By default, only the Master can process the data data packets being sent to the virtual router; but certain certain configurations can make the Slave process process the data packets being sent to the virtual router.




QUESTION 592 The Internet Group Management Protocol (IGMP) runs between hosts and their immediately neighboring multicast routers. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 593 RSTP has all functions of STP and it is backwards compatible with STP. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 594 Congestion management provides a means to manage and control traffic when traffic congestion occurs. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:


QUESTION 595 ACL rules are matched matched based on the configured configured order only. A. TRUE B. FALS FALSE E Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 596 According to the OSI OSI reference model, Layer 2 LAN switch operates at Q. A. B. C. D.

physical layer data data link link laye layer r networ network k layer layer applic applicati ation on layer layer


QUESTION 597 Which of the following routes matches the ACL filter given below? "ad number 2001 rule 0 permit source 1.1.0.0 0" A. 1.1.1.1/32 B. 1.1. 1.1.1. 1.0/ 0/24 24


C. 1.1.0. 1.1.0.0/1 0/16 6 D. 1.0. 1.0.0. 0.0/ 0/8 8 Correct Answer: C Section: (none) Explanation Explanation/Reference:

QUESTION 598 On a STP network, which of the following BPDUs are sent during flooding of information throughout the network due to STP topology change? A. B. C. D.

BPDUs with the TCN TCN flag BPDUs BPDUs with with the TCA flag BPDUs BPDUs with with the TC flag flag All of the the abov above e


QUESTION 599 The "import-route limit" command is used to set a maximum number of imported routes that can be imported into an OSPF routing process. A. TRUE B. FALS FALSE E Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 600


Dividing a network using VLANs can (). (Select 2 answers) A. B. C. D.

Support more network network layer protocols Restrict Restrict the scope scope of broadcast broadcast domains domains Increase Increase the number number of collision collision domains domains Guarantee Guarantee data data securit security y


QUESTION 601 Which of the following protocols support the multicast ASM service model? (Select 2 answers) A. B. C. D.

PIM-SM and IGMPv2 IGMPv2 PIM-SS PIM-SSMan MandIG dIGMpv Mpv3 3 BGP and OSPF OSPF PIM-DM PIM-DM and and IGMPv IGMPv2 2


QUESTION 602 You cannot set an aging time for the blacklist of the USG. A. TRUE B. FALS FALSE E Correct Answer: B Section: (none) Explanation



QUESTION 603 Which of the following statements regarding VLAN configuration are true? (Select 2 answers) A. B. C. D.

You can enter the VLAN VLAN view and create create a VLAN at the same same time. Running undo VLAN invalidates invalidates the VLAN but the VLAN still exists. You do not need to recreate recreate the VLAN to use it. You can configure a description string of VLAN. The length of of the string is unlimited. unlimited. If the VLAN ID is not entered when running the display display VLAN command, all information about about the VLAN will be displayed.


QUESTION 604 How many bits of the MAC address space is available for mapping IP multicast addresses? A. B. C. D.

24 22 25 23


QUESTION 605 An OSPF neighbor neighbor relationship fails to establish and the OSPF OSPF error information is displayed as follows. follows. Which of the following following is most likely the cause?



A. B. C. D.



QUESTION 606 To provide services of different qualities, you can classify services based on such packet information as the packet priority, source IP address, destination IP address, and port number. Which of the following QoS technology can be used to service classification? A. B. C. D.

Traffic policing Traffi Traffic c shapi shaping ng Complex Complex traffic traffic classificat classification ion Congestion Congestion manageme management nt


QUESTION 607 Which of the following are factors that affect QoS? (Select 3 Answers) A. B. C. D.

Bandwidth Cost Jitt Jitter er Loss Loss of packet packet

Correct Answer: ACD Answer: ACD



QUESTION 608 IP network can provide various packet forwarding service, the service demands that users care during packet forwarding include . (Select 3 Answers) A. B. C. D.

Throughput Dela Delay y Cost Loss Loss of packet packet


QUESTION 609 IP QoS models include:(Select 3 Answers) A. B. C. D.

Best-Effort Integr Integrate ated d Servic Service e Differenti Differentiated ated Service Service FIFO FIFO Serv Service ice


QUESTION 610 QoS can provide different quality of service according to different demands, which of the following are functions of QoS? (Select 3 Answers)


A. B. C. D.

Providing private bandwidth bandwidth for users Reducing Reducing cost cost of the network network Congestion Congestion manageme management nt and avoidance avoidance Specifying Specifying priori priority ty of packets packets


QUESTION 611 The IP packet has a special field to mark the QoS. For example, the last 6 bits in the ToS field of an IPv4 packet mark the DSCP value. A. True B. Fals False e Correct Answer: B Section: (none) Explanation Explanation/Reference:

QUESTION 612 The Committed Access Rate (CAR) technology uses the token bucket (TB) to control traffic. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 613


Traffic shaping usually buffers packets that need to be dropped by traffic policing by means of buffer and token bucket. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 614 If an MSTP switch detects that the neighboring switch works in RSTP mode, which mode does the MSTP switch work? A. B. C. D.

STP mode RSTP RSTP mode mode MSTP MSTP mode mode All of the the abov above e


QUESTION 615 Which problems on a single spanning tree network can be solved by MSTP? (Select 3 Answers) A. B. C. D.

Traffic forwarding paths paths in some VLANs are faulty. Traffic Traffic cannot cannot be load load balanced. balanced. The second second best path path problem problem may occur. occur. The network network reliability reliability cannot cannot be improved.




QUESTION 616

According to the figure, figure, what is the status status of Ethernet1/0/13 in MSTI 1? A. B. C. D.

Forwarding Disc Discar ardi ding ng Lear Learni ning ng None None of the the above above

Correct Answer: B Section: (none) Explanation Explanation/Reference: exact answer. QUESTION 617 In RSTP, which statements about the alternate port and backup port are true? (Select 2 Answers)


A. B. C. D.

The alternate port is is a backup of the root root port. The backup port is a backup of the designated port. The switch that the backup port belongs to is not the designated designated switch on the network segment segment connected to the interface. The switch that the alternate port belongs belongs to is the designated switch on the network segment segment connected to the interface.


QUESTION 618 According to the MSTP MSTP protocol, each MST instance calculates calculates an independent spanning spanning tree by using using the RSTP algorithm. algorithm. A. True B. Fals False e Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference:

QUESTION 619 The following is the command output on a root switch of an MSTP region. How many switches are located in the MSTP region? A. B. C. D.

Less than 10 Less Less tha than n 20 Less Less than than 30 Less Less than than 40



QUESTION 620 On the RSTP network with STP devices, which packets does an RSTP switch use to notify the STP switches of the topology change? A. B. C. D.

RSTP BPDUs with the TC flag STP BPDUs BPDUs with the the TCN flag RSTP BPDUs BPDUs with with the TCA flag flag STP BPDUs BPDUs with with the TCA TCA flag flag

Correct Answer: B Section: (none) Explanation Explanation/Reference: valid. QUESTION 621 What are the same fields in RSTP BPDUs and STP BPDUs? (Select 2 Answers)

A. TCN


B. TC C. TCA D. All of the the abov above e Correct Answer: BC Section: (none) Explanation Explanation/Reference:

QUESTION 622 What is the function of the client IP address field in DHCP messages? A. B. C. D.

It is used by the client client in bound, renew, or rebinding state to respond to ARP request request packets. It specifies the the IP address allocated by the the DHCP server server to a client. client. It specifies the next server address used in the BootStrap BootStrap and is contained in DHCP Offer or DHCP DHCP ACK messages. It specifies specifies the DHCP DHCP relay relay address. address.

Correct Answer: A Answer: A Section: (none) Explanation Explanation/Reference: answer is corrected. QUESTION 623 Which fields does the DHCP binding table contain? (Select 3 Answers) A. B. C. D.

MAC address rout route e tabl table e IP address address lease time Interface Interface and VLAN



QUESTION 624 An address needs to be allocated to a host host connected to the network temporarily or a group of IP addresses addresses need to be allocated allocated to the hosts that that do not require permanent IP addresses. Which address allocation mode does the DHCP server use? A. B. C. D.

Automatic allocation Dynami Dynamic c allocati allocation on Manual Manual allocation allocation All of the the abov above e


QUESTION 625 What are the similarities of DHCP and BOOTP? (Select 2 Answers) A. B. C. D.

They work in client/server client/server model. They work work in static address address allocation allocation mode. mode. They can dynamically obtain DNS DNS addresses. addresses. They use the the same packet packet structure structure..


QUESTION 626 Which messages are sent from the client to the server? (Select 3 Answers) A. DHCP NAK B. DHCP DHCP REQUES REQUEST T C. DHCP DHCP DISCO DISCOVER VER


D. DHCP DHCP RELE RELEASE ASE Correct Answer: BCD Section: (none) Explanation Explanation/Reference:

QUESTION 627 When a client applies for an IP address through DHCP, which message is the unicast message? A. B. C. D.

DHCP OFFER DHCP DHCP REQUES REQUEST T DHCP DHCP DISCO DISCOVER VER None None of the the above above


QUESTION 628 What are the functions of DHCP snooping? (Select 3 Answers) A. B. C. D.

Defend against DoS attacks initiated by changing the CHADDR CHADDR field Defend Defend against against bogus DHCP DHCP server attacks attacks Defend Defend against Packet Packet Sniffer Mitigati Mitigation on Defend against man-in-the-middle attacks and IP/MAC IP/MAC spoofing attacks



QUESTION 629 Which statements about DHCP snooping are true? (Select 3 Answers) A. The DHCP snooping snooping binding table contains contains dynamic binding entries entries and static binding binding entries. B. DHCP snooping distinguishes distinguishes the trusted interface and untrusted interfaces interfaces and discards DHCP Reply messages messages from untrusted interfaces. interfaces. C. The static binding table is manually configured configured on the inbound interface and the aging time time can also be manually set. D. hen DHCP snooping snooping is used at Layer 2, the interface information can be obtained for for the binding table even if the Option 82 function is not configured. Correct Answer: ABD Answer: ABD Section: (none) Explanation Explanation/Reference:


Huawei.Testking.H12-224.v2015-03-08.by_.DIANE (2)

Recommend Documents