鸿鹄论坛_单选1-50

GNS3模拟 Linux Microcore ，PIX ，Juniper ，ASA ，IPS【模拟环境】我所使用的GNS3版本为0.7.4，如果低于这个版本，有些版本会缺少些选项无法支持。

GNS3官方下载地址：/download【Linux Microcore 】 一、配置1、下载所需要的文件（linux-microcore-2.10.img ）； 下载地址：/file/e60l5ch9#linux-microcore-2.10.img到2011-9-7已经更新到linux-microcore-3.8.2 官网下载：/gns-3/linux-microcore-3.8.2.img?download2、将下载好的文件统一存放，文件夹和文件名必须使用英文，GNS3不识别中文路径； 我这里将它统一存放到GNS3文件夹下，路径： G:\GNS3\Qemu\linux-microcore-2.10.img3、打开GNS3，编辑→首选项→Qemu→Qemu Host ；Un Re gi st er ed按以下内容输入：Identifier name ：Linux-MicroCore-2.10（自己填写名称，但不能是中文）Binary image ：G:\GNS3\Qemu\linux-microcore-2.10.img （image 路径，就是第2步的路径） RAM ：128（内存，默认是128）Number of NICs ：6（网卡数量，默认是6） NIC model ：e1000（网卡类型，默认是e1000） Qemu Options ：-no-acpi （手动输入，默认为空）这个版本显示Qemu 窗口，不能telnet ，目前linux-microcore-3.8.2.img 可以telnet 了。

需要的可以去gns3官网下载；高级用户：root 高级密码：root 普通用户：tc切换用户命令： su root/tclinux-microcore-3.8.2版本设置： Identifier name ：linux-microcore-3.8.2Binary image ：G:\GNS3\Qemu\linux-microcore-3.8.2.img RAM ：128（内存，默认是128） Number of NICs ：6 NIC model ：e1000Qemu Options ：-no-acpi console=ttyS0,38400n8 -vnc :1（可telnet 登陆，去掉-vnc :1后，运行时显示Qemu 控制台）Qemu 窗口为Linux 的控制台，默认是登陆的是普通模式 控制台修改用户密码：sudopasswd root //修改root 用户密码 su root //切换用户为roottelnet 密码修改先用tc 登陆，再修改root 密码用户密码：tc 高级用户：root高级用户密码：root(官网发布的密码，但一直提示不正确)输入完后，点击保存，下面列表中会出现，然后点Apply （应用）/OK （确定），这样Linux Microcore 2.10就配置完成。

鸿鹄测试中心ISTQB初级认证考试本试题为ISTQB模拟试题，一共40道单选题，每题1分，考试时间1小时。

1.你是负责某在线支付系统图形化界面测试的测试人员。

你参与了该图形化界面的代码评审，在评审过程中，发现代码语句将“总额人民币 RMB（）元”写成了“总额人民币RMD（）元”，即存在拼写错误。

根据 ISTQB 的术语定义，这个问题应该如何称呼最合适？ [单选题] *A.失效B.缺陷(正确答案)C.异常D.错误2.开发团队正在开发一款在线交易系统，你负责其中付款功能的组件测试。

下面关于测试付款功能的主要测试目标的描述，哪个是最恰当的？ [单选题] *A.发现缺陷(正确答案)B.增加对质量的信心C.为决策提供信息D.预防缺陷3.某研发团队正在开发一款高校教师信息管理系统，该系统采用 JAVA 语言开发，主要功能包括：教师信息的录入与增加、教师信息的修改、教师信息的查询、教师信息的删除等。

在时间和人员有限的情况下，测试团队在测试过程中尽可能多的去发现缺陷。

即使这样，该信息管理系统交付给客户之后，在前 3 个月的使用过程中，用户反馈了 50 个缺陷，而在测试过程中总共发现了 950 个缺陷。

项目经理对测试团队的测试有效性并不满意。

你认为下面哪个测试基本原则，最有助于减轻项目经理对测试团队的不满意？ [单选题] *A.测试可以显示缺陷的存在，不能证明系统不存在缺陷B.穷尽测试是不可能的(正确答案)C.杀虫剂悖论D.缺陷的集群效应4.ISTQB 定义的测试过程由 5 个不同的测试阶段组成，按照逻辑顺序排列正确的是哪一个?1. 测试出口准则评估和报告；2. 测试实现和执行；3. 测试分析和设计；4. 测试计划和控制；5. 测试结束活动。

[单选题] *A.4-3-2-5-1B. 4-3-2-1-5(正确答案)C. 3-2-5-4-1D. 3-2-4-1-55 .“确认并更新测试依据和测试用例间的双向可追溯性”。

FCAPSFault Management ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ FConfiguration Management ‐‐‐‐‐‐‐ CAccounting Management ‐‐‐‐‐‐‐‐‐‐ AQuestion 2FCAPS–model defined by the International Organization for Standardization (ISO).ITIL–framework for it profTNM–network management model is the Telecommunications Standardization Sector’s (ITU-T) Cisco lifecycle–model is often referred to as the PPDIOO modelQuestion 3EEM .IP SLA‐‐‐‐‐‐‐‐‐‐‐‐‐‐ CLISDM .CNA‐‐‐‐‐‐‐‐‐‐‐‐‐‐ GUIFTP ,TFTP,SCP‐‐‐‐‐‐‐‐‐‐‐‐‐‐ BackupCLI（command-line interface，命令行界面）GUI（Graphical User Interface，图形用户界面）SDM（Security Device Manager）是Cisco公司提供的全新图形化路由器管理工具；EEM（Embeded Event Manager）是Cisco IOS的嵌入式事件管理器；1)FCAPS (network maintenance model defined by the ISO)F – FaultC – ConfigA – Accounting2) What happens when running the command: logging console warnings.1- ????2- warning, notification, error, debugging…3- just warning logging4- warning, critical, alert, emergenciesAnswer:warning, critical, alert, emergencies(Notice this line doesn’t have the word ―error‖)3) what will be alternative for:ip ftp username xxxxxxip ftp password yyyyyyAnswer:ip http client username xxxxxxip http client password yyyyyy4) Network Maintenance: Choose from the list 2 network maintaining types.Answer:Structured and Interrupt Driven5) access-list 199 permit tcp host 10.1.1.1 host 172.16.1.1access-list 199 permit tcp host 172.16.1.1 host 10.1.1.1debug ip packet 199What would be the output shown on the console?Only communication between host 10.1.1.1 and host 172.16.1.16) what will happen if u configure two router as NTP server (something like that )Answer:The router will choose the best reliable server and will synchronise with it.7) The interface is up and protocol is up. When do u get these messages.%LINEPROTO‐5‐UPDOWN: Line protocol on Interface FastEthernet0/14, changed state to up %LINKDOWN‐3‐SERIAL:Answer:“the first message is a severity 3 log message”8)Serial line is up,protocol is also up?But cdp neighbor not working?Answer:Data link layer.9）. What will happen if you configure 2 routers to be NTP servers?Answer ——– NTP preffered10）. FTP username password: something like a substitute/alternative for ftp username and ftp. I didn’t understand that question about FTP. They showed y ou this:ip ftp user ciscoip ftp password ciscoT1:ospf authentication1.Client is unable to ping R1’s serial interface from the client.Problem was disable authentification on R1, check where authentication is not given under router ospf of R1. (use ipv4 Layer 3)conf R1 was:interface Serial0/0.12 point-to-pointip address 10.1.1.1 255.255.255.252ip nat insideip ospf message-digest-key 1 md5 TSHOOTrouter ospf 1log-adjacency-changesnetwork 10.1.1.0 0.0.0.3 area 12default-information originate alwaysconf R2 was:interface Serial0/0.12 point-to-pointip address 10.1.1.2 255.255.255.252ip ospf authentication message-digestip ospf message-digest-key 1 md5 TSHOOTAnswer: on R1 need comand in router modearea 12 authentication message-digestAns1) R1Ans2) ipv4 OSPFAns3) ip ospf authentication message-digest command must be given on s0/0/0T2:HSRP TRACKHSRP: DSW1 does not become active.conf on dw1:track 1 ip route 10.1.21.128 255.255.0.0 metric thresholdthreshold metric up 1 down 2track 10 ip route 10.2.21.128 255.255.255.0 metric thresholdthreshold metric up 63 down 64interface Vlan10ip address 10.2.1.1 255.255.255.0standby 10 ip 10.2.1.254standby 10 priority 200standby 10 preemptstandby 10 track 1 decrement 60Answer: (use IPv4 Layer 3 Topology)On dsw 1 interface vlan 10 mode run:no standby 10 track 1 decrement 60standby 10 track 10 decrement 60(ip for track command not exact for real exam)Ans1) DSW1Ans2) HSRPAns3) delete the command with track 1 and enter the command with track 10.T3:BGP NeighborProblem: R1 is not able to ping 209.65.200.226.configuration on R1:router bgp 65001no synchronizationbgp log-neighbor-changesnetwork 209.65.200.224 mask 255.255.255.252neighbor 209.56.200.226 remote-as 65002no auto-summarycheck bgp neighborship. **** show ip bgp sum****The neighbor’s address in the neighbor command is wrong under router BGP. (use ipv4 Layer 3)Answer: need change on router mode on R1 neighbor 209.65.200.226Ans1) R1Ans2) BGPAns3) delete the wrong neighbor statement and enter the correct neighbor address in the neighbor command (change 209.56.200.226 to 209.65.200.226)T4:NAT ACLClient is not able to ping the web server, but the routers can ping the server. NAT problem. (use ipv4 Layer 3)problem on R1 Nat aclAnswer:add to acl 1 permit ip 10.2.1.0 0.0.0.255Ans1) R1Ans2) IP NATAns3) under NAT access list, enter the command permit 10.2.0.0 0.0.255.255T5:R1 ACLClient is not able to ping the server. Except for R1, no one else can ping the server. (use ipv4 Layer 3)Problem:on R1 acl blocking ipacl something like this:deny 10.2.1.0deny 10.1.4.0deny 10.1.1.0Answer: add permit 209.65.200.224 0.0.0.3command to R1′s ACLAns1) R1Ans2) IPv4 Layer3 SecurityAns3) Add permit 209.65.200.224 0.0.0.3 to R1′s ACLT6: VLAN filterClient 1 is not able to ping the server. Unable to ping DSW1(Use L2 Diagram).Vlan Access map is applied on DSW1 blocking the ip address of client 10.2.1.3Ans1) DSW1Ans2) Vlan access mapAns3)No vlan filter 10T7:Port SecurityClient 1 is not able to ping the serverSituation: Unable to ping DSW1(User layer 2).On ASW1 portsecurity mac 0000.0000.0001, interface in err-disable stateAnswer:on asw1 delele portsecurity & do on interfaces shutdown, no shutdownAns1)ASW1Ans2)Port securityAns3)On fa1/0/1 and fa1/0/2 do disable port security and do shut, no shut.T8:SWItchport vlan 10Client 1 is not able to ping the serverSituation: Unable to ping DSW1 & in port channel configuratioin of ASW1 vlan 10 is not allowed. (Use L2 Diagram)On ASW1, on interfaces fa0/1, fa0/2 switchport access vlan 1Answer: on ASW1 change switchport access vlan 1 to switchport access vlan 10Ans1)ASW1Ans2)Access vlanAns3)give command: interface range fa1/0/1-/2 switchport access vlan 10T9:Switchport trunk.cant ping to web server 209.65.200.241Situation: Unable to ping DSW1 & in port channel configuratioin of ASW1 vlan 10 is not allowed. (Use L2 Diagram)question was about EtherChanelclient can’t obtain ip address(169.x.x.x)on ASW1 trunks allow vlan 20,200Answ: on port channel 13, 23 disables all vlans and give switchport trunk allowed vlan 10,200 Ans1)ASW1Ans2)Switch to switch connectivityAns3)int range portchannel13,portchannel23switchport trunk allowed vlan noneswitchport trunl allowed vlan 10,200T10:Eigrp asClient 1 is not able to ping the serverSituation: Unable to ping R4 fast ethernet port from dsw1.Check ip eigrp neighbors from DSW1 you will not see R4 as neighbor.(use ipv4 Layer 3)On DSW1 & DWS2 the EIGRP AS number is 10 (router eigrp 10) but on R4 it is 1 (router eigrp 1)Answ: change router AS on R4 from 1 to 10Ans1) R4Ans2) IP4 EIGRPAns3) Change eigrp AS number from 1 to 10T11:eitrp to ospfClient 1 is not able to ping the serverSituation: Unable to ping serial interface of R4 from the clients.On R4 in router eigrp:redistribute ospf 1 route-map EIGRP_to_OSPFBUT route-map was named:route-map EIGRP->OSPFAnswer:change in router eigrp router-map nameAns1) R4Ans2) route redistributionAns3) change the name of the route-map under the router EIGRP or router OSPF process from ‘to’to ‘->’.T12:IPV6 ospfIPV6 loopback of R2 cannot be pinged from DSW1’s loopback.Situation: ipv6 ospf was not enabled on R2’s serial interface connecting to R3. (use ipv6 Layer 3) Answer:interface configuration mode:ipv6 ospf 6 area 12Ans1) R2Ans2) IPV6 ospfAns3) on the serial interface of R2, enter the command ipv6 ospf 6 area 0 (make sure to check the IPV6 topology before choose Answer 3 because the options look similar)Device Error DescriptionASW11. Access port not in VLAN 102. Port Channel not allowing VLAN 103. Port SecurityDSW1 1. HSRP track 102. VLAN filterR1 1. Wrong IP of BGP neighbor2. NAT – Access list3. Redistribute access-listR2 1. IPv6: enable OSPF2. OSPF AuthenticationR4 1. EIGRP – wrong AS2. Redistribute (―to‖ & -> )1、access vlan的vlan 给错了2、port-security导致端口被errdisable3、V ACL4、EIGRP的AS号配置错误5、OSPF的authentication有问题，6、OSPF到EIGRP的redistribut的route-map名字写过了7、NA T的inside pool没有包含client的网段8、BGP的neighbor ip写错了，209.65.200.226写成了209.56.200.2269、到ISP的出接口的ACL少了一条permit10、其中一台接入交换机的Trunk allowed的VLAN少了VLAN 1011、HSRP的track语句指定有问题12、IPV6,R2的其中一个接口没有enable IPV6 OSPF1 -IPv62 -OSPF3- OSPFv34 -Frame Relay5 – GRE6 – EtherChannel7 -RIPng8 -EIGRP9 -Redistribution10 -NTP11 -NAT12 -BGP13 -HSRP14-STP15-DHCP。

RHCE Exam Guide考试时间:3.5hours考试类型:纯上机实验操作系统环境:RHEL5U4网络环境:172.24.0.0/16()受信任网域172.25.0.0/24()不受信任网域Yum服务器地址:/pub/Server注释:文章中所有提到的stationx,或者nisuserx都泛指您本机的工作站编号,例如,您的主机编号为station1,那么stationx,nisuserx在这里分别指station1,nisuser1及格分数线:CT满60分(包含60分),CE满60分(包含60分),视为考试全部通过,如果CT满60分及以上,而CE不满60分时,视为通过CT,如果CT不满60分,而CE部分达到60分以上,则视为考试失败。

关于考试结果:考试成绩一般会在考试后的当天晚上得出,然后由红帽总部的工作人员在最晚为三个工作日内以邮件的形式发送到您的邮箱里,请注意查收,不幸的是,有些邮件服务器会将这些邮件错认为垃圾邮件并将其过滤到垃圾邮件箱。

在3个美国工作日内没有收到考试结果的考生应该通过 /training/certification/comments.html与红帽公司联系。

证书校验:当您通过RHCE认证考试之后,您可通过/training/certification/verify网址并输入您的证书编号即可进行核对并落实您的证书是否有效RHCT部分:1.在进行考试之前,根用户的口令您和考官都未知,因此您首先需要取得根用户的权限方可进行之后的操作,先将根用户的口令重置,并设置为REDHAT2.接下来您需要适当的配置主机的TCP/IP信息之后方可连接至考试的服务器,以便用于获取考题,配置信息如下:IPADDR:172.24.0.xNETMASK:255.255.0.0GATEWAY:172.24.254.254DNS:172.24.254.2543.如果考题需要,请将您的主机名称设置为考题所需的配置,如stationx4.创建一个新的文件系统,大小为500MB,并挂载到/data目录中,要求开机后能够自动挂载,且挂载后文件系统支持QUOTA,ACL。

A. Thetwo FastEthernet interfaces will require NAT configured on two outside serial interfaces.B. Address translation on fa0/1 is not required for DMZ Devices to access the Internet.C.The fa0/1 IP address overlaps with the space used by s0/0.D. The fa0/1 IP address is invalid for the IP subnet on which it resides.E. Internet hosts may not initiate connections to DMZ Devices through the configuration that is shown. Answer: BE39. Refer to the exhibit. Two routers have just been configured by a new technician. All interfaces are up. However, the routers are not sharing their routing tables. What is the problem?A. Split horizon is preventing Router2 from receiving routing information from Router1.B. Router1 is configured for RIP version 2, and Router2 is configured for RIP version 1.C. Router1 has an ACL that is blocking RIP version 2.D. There is a physical connectivity problem between Router1 and Router2.E.Router1 is using authentication and Router2 is not.Answer: B40. A medium-sized company has a Class C IP address. It has two Cisco routers and one non-Cisco router. All three routers are using RIP version 1. The company network is using the block of 198.133.219.0/24. The company has decided it would be a good idea to split the network into three smaller subnets and create the option of conserving addresses with VLSM. What is the best course of action if the company wants to have40 hosts in each of the three subnets?A. Convert all the routers to EIGRP and use 198.133.219.32/27, 198.133.219.64/27, and198.133.219.92/27 as the new subnetworks.B. Maintain the use of RIP version 1 and use 198.133.219.32/27, 198.133.219.64/27, and198.133.219.92/27 as the new subnetworks.C. Convert all the routers to EIGRP and use 198.133.219.64/26, 198.133.219.128/26, and198.133.219.192/26 as the new subnetworks.D. Convert all the routers to RIP version 2 and use 198.133.219.64/26, 198.133.219.128/26, and198.133.219.192/26 as the new subnetworks.E. Convert all the routers to OSPF and use 198.133.219.16/28, 198.133.219.32/28, and 198.133.219.48/28 as the new subnetworks.F. Convert all the routers to static routes and use 198.133.219.16/28, 198.133.219.32/28, and198.133.219.48/28 as the new subnetworks.Answer: D41. Switch ports operating in which two roles will forward traffic according to the IEEE 802.1w standard?(Choose two.)A. alternateB. backupC. designatedD. disabledE. rootAnswer: CE42. Refer to the exhibit. Why has this switch not been elected the root bridge for VLAN1?A. It has more than one interface that is connected to the root network segment.B. It is running RSTP while the elected root bridge is running 802.1d spanning tree.C. It has a higher MAC address than the elected root bridge.D. It has a higher bridge ID than the elected root bridge.Answer: D43. Refer to the exhibit. At the end of an RSTP election process, which access layer switch port will assume the discarding role?A. Switch3, port fa0/1B. Switch3, port fa0/12C. Switch4, port fa0/11D. Switch4, port fa0/2E. Switch3, port Gi0/1F. Switch3, port Gi0/2Answer: C44. Refer to the exhibit. How many paths can the EIGRP routing process use to forward packets from HQ_Router to a neighbor router?A. two equal-cost pathsB. two unequal-cost pathsC. three equal-cost pathsD. three unequal-cost pathsE. four equal-cost pathsF. four unequal-cost pathsAnswer: F45. Select the action that results from executing these commands.Switch(config-if)# switchport port-securitySwitch(config-if)# switchport port-security mac-address stickyA. A dynamically learned MAC address is saved in the startup-configuration file.B. A dynamically learned MAC address is saved in the running-configuration file.C.A dynamically learned MAC address is saved in the VLAN database.D. Statically configured MAC addresses are saved in the startup-configuration file if frames from that address are received.E. Statically configured MAC addresses are saved in the running-configuration file if frames from that address are received.Answer: B46. Refer to the exhibit. This command is executed on 2960Switch:2960Switch(config)# mac-address-table static 0000.00aa.aaaa vlan 10 interface fa0/1Which two of these statements correctly identify results of executing the command? (Choose two.)A. Port security is implemented on the fa0/1 interface.B. MAC address 0000.00aa.aaaa does not need to be learned by this switch.C. Only MAC address 0000.00aa.aaaa can source frames on the fa0/1 segment.D. Frames with a Layer 2 source address of 0000.00aa.aaaa will be forwarded out fa0/1.E. MAC address 0000.00aa.aaaa will be listed in the MAC address table for interface fa0/1 only.Answer: BE47. Refer to the exhibit. The following commands are executed on interface fa0/1 of 2950Switch.2950Switch(config-if)# switchport port-security2950Switch(config-if)# switchport port-security mac-address sticky2950Switch(config-if)# switchport port-security maximum 1The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frameis received by 2950Switch? (Choose two.)A. The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.B.Only host A will be allowed to transmit frames on fa0/1.C. This frame will be discarded when it is received by 2950Switch.D. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.E. Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not beforwarded out fa0/1.F. Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will beforwarded out fa0/1.Answer: BD48. Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop connections for employees who visit the headquarters office. When large groups of employees come from other locations, the network administrator often finds that hubs have been connected to wall jacks in the conference area although the ports on the access layer switches were not intended to support multiple workstations. What action could the network administrator take to prevent access by multiple laptops through a single switch port and still leave the switch functional for its intended use?A. Configure static entries in the switch MAC address table to include the range of addresses used byvisiting employees.B. Configure an ACL to allow only a single MAC address to connect to the switch at one time.C. Use the mac-address-table 1 global configuration command to limit each port to one source MACaddress.D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address.E. Implement Port Security on all interfaces and use the port-security mac-address sticky command to limit access to a single MAC address.F. Implement Port Security at global configuration mode and use the port-security maximum 1 command to allow each switch only one attached hub.Answer: D49. Which of the following describes the roles of devices in a WAN? (Choose three.) A.A CSU/DSU terminates a digital local loop.B. A modem terminates a digital local loop.C. A CSU/DSU terminates an analog local loop.D. A modem terminates an analog local loop.E. A router is commonly considered a DTE device.F. A router is commonly considered a DCE device.Answer: ADE50. What are two characteristics of Telnet? (Choose two.)A. It sends data in clear text format.B. It is no longer supported on Cisco network devices.C. It is more secure than SSH.D. It requires an enterprise license in order to be implemented.E. It requires that the destination device be configured to support Telnet connections.Answer: AE51. What are two security appliances that can be installed in a network? (Choose two.)A. ATMB. IDSC. IOSD. IOXE. IPSF. SDMAnswer: BE52. Running both IPv4 and IPv6 on a router simultaneously is known as what?A. 4to6 routingB. 6to4 routingC. binary routingD. dual-stack routingE. NextGen routingAnswer: D53. What are three IPv6 transition mechanisms? (Choose three.)A. 6to4 tunnelingB. VPN tunnelingC. GRE tunnelingD. ISATAP tunnelingE. PPP tunnelingF. Teredo tunnelingAnswer: ADF54. Identify the four valid IPv6 addresses. (Choose four.)A. ::B. ::192:168:0:1C. 2000::D. 2001:3452:4952:2837::E. 2002:c0a8:101::42F. 2003:dead:beef:4dad:23:46:bb:101Answer: ABEF55. Which protocol should be used to establish a secure terminal connection to a remote network device? Select the best response.A. ARPB. SSHC. TelnetD. WEPE. SNMPv1F. SNMPv2Answer: B56. A single 802.11g access point has been configured and installed in the center of a square office. A few wireless users are experiencing slow performance and drops while most users are operating at peak efficiency. What are three likely causes of this problem? (Choose three.)A. mismatched TKIP encryptionB. null SSIDC. cordless phonesD. mismatched SSIDE. metal file cabinetsF. antenna type or directionAnswer: CEF57. A network administrator must configure 200 switch ports to accept traffic from only the currently attached host devices. What would be the most efficient way to configure MAC-level security on all these ports?A. Visually verify the MAC addresses and then telnet to the switches to enter the switchport-port security mac-address command.B. Have end users e-mail their MAC addresses. Telnet to the switch to enter the switchport-port securitymac-address command.C. Use the switchport port-security MAC address sticky command on all the switch ports that have end devices connected to them.D. Use show mac-address-table to determine the addresses that are associated with each port and then enter the commands on each switch for MAC address port-security.Answer: C58. Refer to the exhibit. What two facts can be determined from the WLAN diagram? (Choose two.)A. The area of overlap of the two cells represents a basic service set (BSS).B. The network diagram represents an extended service set (ESS).C. Access points in each cell must be configured to use channel 1.D. The area of overlap must be less than 10% of the area to ensure connectivity.E. The two APs should be configured to operate on different channels.Answer: BE59. Which two devices can interfere with the operation of a wireless network because they operate on similar frequencies? (Choose two.)A. copierB. microwave ovenC. toasterD. cordless phoneE. IP phoneF. AM radioAnswer: BD60. Which two statements describe characteristics of IPv6 unicast addressing? (Choose two.)A. Global addresses start with 2000::/3.B. Link-local addresses start with FE00:/12.C. Link-local addresses start with FF00::/10.D. There is only one loopback address and it is ::1.E. If a global address is assigned to an interface, then that is the only allowable address for the interface. Answer: AD61. Which two of these statements are true of IPv6 address representation? (Choose two.)A. There are four types of IPv6 addresses: unicast, multicast, anycast, and broadcast.B.A single interface may be assigned multiple IPv6 addresses of any type.C. Every IPv6 interface contains at least one loopback address.D. The first 64 bits represent the dynamically created interface ID.E. Leading zeros in an IPv6 16 bit hexadecimal field are mandatory.Answer: BC62. What are three basic parameters to configure on a wireless access point? (Choose three.)A. SSIDB. RTS/CTSC. AES-CCMPD. TKIP/MICE. RF channelF. authentication methodAnswer: AEF63. Which two of these statements regarding RSTP are correct? (Choose two.) A.RSTP cannot operate with PVST+.B. RSTP defines new port roles.。

华为认证网络工程师–统一通信HCNA-UC 模拟考试1. 关于FXO和FXS端口，下列说法正确的是（）。

A． FXO端口用于连接模拟电话B． FXS端口可和FXS端口对接C．某办事处用一台IAD为10位员工提供电话服务，则可使用IAD上的FXS端口提供PSTN 出局D．模拟电话上接电话线的接口为FXO口2. 关于VoIP特点，描述正确的是（）。

A．传输媒介是PSTN网络，交换方式是电路交换，带宽利用率高B．传输媒介是IP网络，交换方式是分组交换，带宽利用率高C．传输媒介是IP网络，交换方式是分组交换，带宽利用率低D．传输媒介是PSTN网络，交换方式是电路交换，带宽利用率低3. 召开多方语音会议时，U1960通过什么单板提供会场？（）A. MTUB. ASIC. DTUD. SCU4. 下面哪几种情况需要占用MTU资源？（）A. IAD下用户通过PRA中继出局B. POTS用户通过PRA出局C. IP电话局内互通D. VU自动总机放音5. 如下关于U1900系列统一网关与传统PBX对接的说法正确的有（）。

A. 通常由E1对接B. AT0对接C. SIP对接D. BiCC对接6. IP电话可靠性体现在（）。

A. TLS信令加密B. HTTPS web访问C. SRTP媒体流加密D. 多SIP服务器注册7. 在U1900系列统一网关中，关于字冠、局向、局向选择码和中继的关系，下列说法正确的是（）。

A. 一个字冠只能对应一个局向选择码B. 一个局向选择码只能对应一个字冠C. 局向选择码和局向的对应关系是一对多D. 一个局向可对应多个不同类型的中继8. 在U1900系列统一网关配置字冠时，属性If4PSTN为no时作用是什么？（）A. 拨打该字冠不能出局B. 虚拟PBX中内部呼叫C. 外部pstn不能入局呼叫D. 拨打接入码9出局到PSTN的字冠中无需做号码转换，也可呼通局外电话。

9. 关于U1900系列统一网关中SIP中继配置说法正确的有（）。

HCNA-StorageNumber: H13-611Passing Score: 800Time Limit: 120 minFile Version:Exam AQUESTION 1硬盘预拷贝技术的主要特点是（选择3个答案）A. 硬盘错误统计超过设定的阀值后，立即将数据从疑似故障盘中迁移到热备盘B. 降低重构事件发生的概率C. 提高系统的可靠性D. 会导致系统性能的降低Correct Answer: ABCSection: (none)ExplanationExplanation/Reference:QUESTION 2以下有关RAID 0的描述中，错误的是：A. RAID 0是无差错控制的条带化阵列B. RAID 0 的容量是各成员盘的容量之和C. RAID 0 至少要使用3块成员盘——最少2块盘D. RAID 0的数据是并行的写入到每个成员盘中Correct Answer: CSection: (none)ExplanationExplanation/Reference:QUESTION 3文件存储是块存储之上构建文件系统，采用目录-目录-- 文件的方式组织数据，不容易管理A. TrueB. False ——文件存储是在块存储之上构建了文件系统，采用目录--目录--文件的方式组织数据，更容易管理；Correct Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 4以下关于DAS和SAN的区别，描述不正确的是A. SAN使用FC或者iscsi协议，具有更好的可扩展性B. DAS和SAN均为外置存储，都非常易于实现存储资源共享——SAN不是外置存储的概念C. DAS主要应用于对外存储容量要求不高，服务器数量很少的中小型局域网D. SAN主要应用于关键数据库、集中存储、海量存储、备份、容灾等中高端存储应用环境Correct Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 5以下文件系统中，属于windows ，文件系统由（选择3个答案）A. FAT16B. FAT32C. NTFSD. NPS ——非文件系统Correct Answer: ABCSection: (none)ExplanationExplanation/Reference:QUESTION 6华为T系列V100R005存储阵列设备中，需要导入license才能使用的功能有（选择3个答案）A. 虚拟快照B. LUN映射——此为存储基本功能，不需要licenseC. 远程复制D. 分裂镜像Correct Answer: ACDSection: (none)ExplanationExplanation/Reference:QUESTION 7针对存储阵列控制器或硬盘框上额级联模块描述正确的是（选择2个答案）A. 硬盘框的级联模块用于实现硬盘框与控制框或硬盘框与硬盘框的通信B. 控制器上硬盘级联模块分为PRI级联模块和EXP级联模块——只有PRI和EXP级联端口的说法C. 级联模块PRI必须与级联端口EXP之间进行连接D. 华为存储阵列设备中通常来用的级联端口为FC端口——级联通过mini SAS线来级联控制器和硬盘框，PRI和EXP端口，非FC端口Correct Answer: ACSection: (none)ExplanationExplanation/Reference:QUESTION 8在redhat linux 5操作系统中，如果要将dev目录下的sdb5挂载到mnt目录下的sdb5，可以采用的命令是A. cat /dev/sdb5 /mnt/sdb5B. in /dev/sdb5 /mnt/sdb5C. mount /deb/sdb5/ mnt/sdb5 ——标准的Linux mount命令D. df /dev/sdb5 /mnt/sdb5Correct Answer: CSection: (none)ExplanationExplanation/Reference:QUESTION 9在主机内部应用环境中，一个数据读写IO一定会经过以下哪些环节（选择2个答案）A. FC HBA卡B. IO总线C. 网卡D. 存储介质Correct Answer: BD ——HBA卡、网卡只是IO通道的一部分Section: (none)ExplanationExplanation/Reference:QUESTION 10在华为T系列V100R005存储阵列中，通过ISM管理平台可以将一个启动器添加给多个主机【一个启动器只能添加给一个主机】A. TrueB. FasleCorrect Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 11在iSCSI通信中，Initiator 和target 建立连接后，initiator在操作系统中作为主设备控制整个工作过程——target才是主控端,initiator只是作为客户端连接工具A. TrueB. FasleCorrect Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 12在由3块磁盘组成的RAID 5中，如果在同一分条中写入两块数据成员盘中的数据分别是101 10110.，则校验盘应写入01100101 ——RAID5校验码采用与计算，相同为0，不同为1【101 10110 和进行与运算，结果正好为011 001 01】A. TrueB. FasleCorrect Answer: ASection: (none)ExplanationExplanation/Reference:QUESTION 13SCSI设备在经过总线仲裁获取了总线使用权后，利用SCSI体系结构传输层定义的协议在总线上选择目标设备，随后向该目标设备发送诸如读写命令——【SCSI传输流程是】——SCSI互联网层完成SCSI设备对总线的连接以及发送方和目标方的选择等功能；另外发送命令应为发送方，非SCSI设备A. TrueB. FalseCorrect Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 14RAID 组的工作状态中，不包括哪种状态A. RAID 组正常工作B. RAID 组降低C. RAID 组失效D. RAID 组重建——重建已经不属于工作状态了Correct Answer: DSection: (none)ExplanationExplanation/Reference:QUESTION 15在对象存储系统中，有关对象的描述错误的是A. 对象是对象存储的基本单位B. 对象包含了对象的数据本身，还包含了对象数据的属性C. 对象不维护自己的属性——数据对象都需要维护自己的属性D. 采用对象技术使数据分布更加灵活Correct Answer: CSection: (none)ExplanationExplanation/Reference:QUESTION 16根据对系统的保护程度可将容灾分为（选择3个答案）A. 业务级容灾B. 应用级容灾C. 数据级容灾D. 异地容灾——异地容灾只是属于容灾的一种方式ExplanationExplanation/Reference:QUESTION 17NAS引擎的作用包括（选择3个答案）A. 提供文件共享接口B. 提供与存储连接接口C. 提供NAS软件运行的硬件平台D. 提供大容量存储空间——这是存储的作用，非NAS独有Correct Answer: ABCSection: (none)ExplanationExplanation/Reference:QUESTION 18数据存储过程中，IO流程顺序正确的是A. 操作系统> 上层业务应用> 文件系统> 设备驱动> 存储设备B. 上层业务应用> 操作系统> 文件系统> 设备驱动> 存储设备——数据存储时正常流程描述C. 操作系统> 上层业务应用> 设备驱动> 文件系统> 存储设备D. 上层业务应用> 操作系统> 设备驱动> 文件系统> 存储设备Correct Answer: BSection: (none)ExplanationExplanation/Reference:QUESTION 19存储系统操作分级管理主要包括4个级别，分别为level 0 1 2 3 ，导致系统复位系统重启系统offline的操作属于哪一级A. level 0B. level 1C. level 2D. level 3 ——重启已经达以事故级别，已经造成了损失ExplanationExplanation/Reference:QUESTION 20以下查看redhat liunx 5操作系统版本的方法正确的是A. show versionB. find versionC. cat versionD. uname –a ——可以正常显示系统内核版本，32或64位等信息，实际上无法查看系统版本Correct Answer: DSection: (none)ExplanationExplanation/Reference:QUESTION 21在传统的计算机存储系统中，存储工作通常由计算机内置的硬盘来完成，针对传统的内置存储描述，以下描述正确的是（选择2个答案）A. 数据存储空间可靠性不足B. 存储空间利用率较高——存储阵列的特点C. 存储空间可扩展性好——存储阵列的特点D. 数据分散，不利于信息共享Correct Answer: ADSection: (none)ExplanationExplanation/Reference:QUESTION 22FC协议栈中的FC-2层定义了（选择2个答案）——FC协议有五层，其中FC-0定义承载介质类型，FC-1定义帧编码解码方式，FC-2定义分帧和流控机制，FC3定义通用服务，FC4定义上层协议到FC的映射A. 编码标准 FC-1B. 解码标准 FC-1C. 流控 FC-2D. 服务质量 FC-2Correct Answer: CDSection: (none)ExplanationExplanation/Reference:QUESTION 23在IP-SAN组网中，下列哪个设备通常作为iSCSI启动器A. 主机服务器——iSCSI启动器部署于主机上，通过initator客户端工具配置连接iSCSI存储的相应信息B. iSCSI磁盘阵列C. iSCSI磁带库D. 以太网交换机Correct Answer: ASection: (none)ExplanationExplanation/Reference:QUESTION 24iFCP协议具有以下哪几个特点(选择3个答案）A. iFCP协议为TCP/IP网络上的光纤通道设备提供光纤通信服务，实现端到端的IP连接B. iFCP协议位于TCP/IP协议和FC协议之间，可以起到连接着两种协议的网络的作用C. iFCP协议中FC设备的24位fabric地址被映射到一个唯一的IP地址上D. iFCP通过FC的底层传输层FC-2实现FC在IP网络上可靠传输——iFCP代替了FC的的底层传输层（FC-2），它使用TCP/IP在IP网络上进行可靠传输【注意是替代FC-2，不是通过FC-2传输】Correct Answer: ABCSection: (none)ExplanationExplanation/Reference:QUESTION 25以下关于IPMI的描述，错误的是A. IPMI是一个开放的标准，用户需要为使用该标准而支付额外的费用——不需要支付费用B. IPMI是为了管理给予intel架构中所使用的外围设备而采用的一种工业标标准C. IPMI的标准由英特尔、惠普、NEC 、美国戴尔电脑和supermicr等公司定制D. 用户可以利用IPMI监视服务器的健康特性，如温度、电压、风扇工作状态、电源状态等。

全面的三层交换机配置实例(带命令解释)三层交换机比较全面的三层交换机配置实例(带命令解释哟!)Enable //进入私有模式Configure terminal //进入全局模式service password-encryption //对密码进行加密hostname Catalyst 3550-12T1 //给三层交换机定义名称enable password 123456. //enable密码Enable secret 654321 //enable的加密密码（应该是乱码而不是654321这样）Ip subnet-zero //允许使用全0子网（默认都是打开的）Ip name-server 172.16.8.1 172.16.8.2 //三层交换机名字Catalyst 3550-12T1对应的IP地址是172.16.8.1Service dhcp //提供DHCP服务ip routing //启用三层交换机上的路由模块ExitVtp mode server //定义VTP工作模式为sever模式Vtp domain centervtp //定义VTP域的名称为centervtpVlan 2 name vlan2 //定义vlan并给vlan取名（如果不取名的话，vlan2的名字应该是vlan002）Vlan 3 name vlan3Vlan 4 name vlan4Vlan 5 name vlan5Vlan 6 name vlan6Vlan 7 name vlan7Vlan 8 name vlan8Vlan 9 name vlan9Exitinterface Port-channel 1 //进入虚拟的以太通道组1switchport trunk encapsulation dot1q //给这个接口的trunk封装为802.1Q的帧格式switchport mode trunk //定义这个接口的工作模式为trunkswitchport trunk allowed vlan all //在这个trunk上允许所有的vlan通过Interface gigabitethernet 0/1 //进入模块0上的吉比特以太口1switchport trunk encapsulation dotlq //给这个接口的trunk封装为802.1Q的帧格式switchport mode trunk //定义这个接口的工作模式为trunkswitchport trunk allowed vlan all //在这个trunk上允许所有的vlan通过channel-group 1 mode on //把这个接口放到快速以太通道组1中Interface gigabitethernet 0/2 //同上switchport trunk encapsulation dotlqswitchport mode trunkswitchport trunk allowed vlan allchannel-group 1 mode onport-channel load-balance src-dst-ip //定义快速以太通道组的负载均衡方式（依*源和目的IP 的方式）interface gigabitethernet 0/3 //进入模块0上的吉比特以太口3switchport trunk encapsulation dotlq //给trunk封装为802.1Qswitchport mode trunk //定义这个接口的工作模式为trunkswitchport trunk allowed vlan all //允许所有vlan信息通过interface gigabitethernet 0/4 //同上switchport trunk encapsulation dotlqswitchport mode trunkswitchport trunk allowed vlan allinterface gigbitethernet 0/5 //同上switchport trunk encapsulation dotlqswitchport mode trunkswitchport trunk allowed vlan allinterface gigbitethernet 0/6 //同上switchport trunk encapsulation dotlqswitchport mode trunkswitchprot trunk allowed vlan allinterface gigbitethernet 0/7 //进入模块0上的吉比特以太口7Switchport mode access //定义这个接口的工作模式为访问模式switchport access vlan 9 //定义这个接口可以访问哪个vlan（实际就是分配这个接口到vlan）no shutdownspanning-tree vlan 6-9 cost 1000 //在生成树中，vlan6-9的开销定义为10000interface range gigabitethernet 0/8 – 10 //进入模块0上的吉比特以太口8,9,10 switchport mode access //定义这些接口的工作模式为访问模式switchport access vlan 8 //把这些接口都分配到vlan8中no shutdownspanning-tree portfast //在这些接口上使用portfast（使用portfast以后，在生成树的时候不参加运算，直接成为转发状态）interface gigabitethernet 0/11 //进入模块0上的吉比特以太口11switchport trunk encapsulation dotlq //给这个接口封装为802.1Qswitchport mode trunk //定义这个接口的工作模式为trunkswitchport trunk allowed vlan all //允许所有vlan信息通过interface gigabitethernet 0/12 //同上switchport trunk encapsulation dotlqswitchport mode trunkswitchport trunk allowed vlan allinterface vlan 1 //进入vlan1的逻辑接口（不是物理接口，用来给vlan做路由用）ip address 172.16.1.7 255.255.255.0 //配置IP地址和子网掩码no shutdownstandby 1 ip 172.16.1.9 //开启了冗余热备份（HSRP），冗余热备份组1，虚拟路由器的IP地址为172.16.1.9standby 1 priority 110 preempt //定义这个三层交换机在冗余热备份组1中的优先级为110，preempt是用来开启抢占模式interface vlan 2 //同上ip address 172.16.2.252 255.255.255.0no shutdownstandby 2 ip 172.16.2.254standby 2 priority 110 preemptip access-group 101 in //在入方向上使用扩展的访问控制列表101interface vlan 3 //同上ip address 172.16.3.252 255.255.255.0no shutdownstandby 3 ip 172.16.3.254standby 3 priority 110 preemptip access-group 101 ininterface vlan 4 //同上ip address 172.16.4.252 255.255.255.0no shutdownstandby 4 ip 172.16.4.254standby 4 priority 110 preemptip access-group 101 ininterface vlan 5ip address 172.16.5.252 255.255.255.0no shutdownstandby 5 ip 172.16.5.254standby 5 priority 110 preemptip access-group 101 ininterface vlan 6ip address 172.16.6.252 255.255.255.0no shutdownstandby 6 ip 172.16.6.254standby 6 priority 100 preemptinterface vlan 7ip address 172.16.7.252 255.255.255.0no shutdownstandby 7 ip 172.16.7.254standby 7 priority 100 preemptinterface vlan 8ip address 172.16.8.252 255.255.255.0no shutdownstandby 8 ip 172.16.8.254standby 8 priority 100 preemptinterface vlan 9ip address 172.16.9.252 255.255.255.0no shutdownstandby 9 ip 172.16.9.254standby 9 priority 100 preemptaccess-list 101 deny ip any 172.16.7.0 0.0.0.255 //扩展的访问控制列表101 access-list 101 permit ip any anyInterface vlan 1 //进入vlan1这个逻辑接口Ip helper-address 172.16.8.1 //可以转发广播（helper－address的作用就是把广播转化为单播，然后发向172.16.8.1）Interface vlan 2Ip helper-address 172.16.8.1Interface vlan 3ip helper-address 172.16.8.1interface vlan 4ip helper-address 172.16.8.1interface vlan 5ip helper-address 172.16.8.1interface vlan 6ip helper-address 172.16.8.1interface vlan 7ip helper-address 172.16.8.1interface vlan 9ip helper-address 172.16.8.1router rip //启用路由协议RIPversion 2 //使用的是RIPv2，如果没有这句，则是使用RIPv1network 172.16.0.0 //宣告直连的网段exitip route 0.0.0.0 0.0.0.0 172.16.9.250 //缺省路由，所有在路由表中没有办法匹配的数据包，都发向下一跳地址为172.16.9.250这个路由器line con 0line aux 0line vty 0 15 //telnet线路（路由器只有5个，是0-4）password 12345678 //login密码loginendcopy running-config startup-config 保存配置来源: 中国系统集成论坛原文链接：/thread-3598-1-8.html。

《真实TT解题环境》TT解题模拟环境：/web/learning/le3/le2/le37/le10/tshoot_demo.html 注意：点开某个TT，做完三个选择后点击“done”则完成此题，此题也同时被锁定为不可更改的红色。

在某个TT中随时点击“abort”则跳过此题，后续可以继续完成。

《立体万金油》记住关键现象，以show run为主判断。

不确认的可以和其他TT的配置比较。

《TT解题详解》第一部分：找到两个“明显提示HSRP&IPv6”一．找题干中“HSRP”，标号题号（对应V200的Q20-22）Hsrp--sh run看到standby条目（在找答案选项的时候，不确认的可以看看），show standby brief--看到状态没有up！！答案：1. DSW12. HSRP3. Under the interface vlan 10 configuration delete the standby 10 track 1 decrement 60 command and enter the standby 10 track 10 decrement 60 command.解释：由特定路由条目的metric值来决定track项目的down或up，从而触发对standby的priority值减小或增加。

此题中，可能没有到达10.1.21.128/16网段的路由，所以trace1的metric肯定大于2，那么vlan10关联了track1的DSW1-vlan10的HSRPPriority=200-60=140，则HSRP-active就变成了DSW2。

当vlan10关联了track10时，由于10.2.21.128/255.255.255.0是R4-lo0，所以track10的metric小于63，那么track10为up状态，DSW1-vlan10的priority=200，DSW1为active。