CCNA考试题库中英文翻译版及答案5

 11. What are two recommended ways of protecting network device configuration files from outside network security threats? (Choose two.)

　　11.哪两种方法被推荐用来保守网络设备的配置文件不受外网的威胁

　　A. Allow unrestricted access to the console or VTY ports.

　　A.允许unrestricted 访问到console或VTY口

　　B. Use a firewall to restrict access from the outside to the network devices.

　　B.用防火墙去限制外网的网络设备访问

　　C. Always use Telnet to access the device command line because its data is automatically encrypted.

　　C.因为数据被自动加密，所以总是允许使用TELNET命令访问网络设备的命令行，

　　D. Use SSH or another encrypted and authenticated transport to access device configurations.

　　D.使用SSH或其他加密、认证机制去访问设备的配置

　　E. Prevent the loss of passwords by disabling password encryption.

　　E.为了避免丢失密码，所以不对密码进行加密(明文)

　　Answer: BD

 

12. Refer to the exhibit. The access list has been configured on the S0/0 interface of router RTB in the outbound direction. Which two packets, if routed to the interface, will be denied? (Choose two.)

　　12.根据下图，该access list被配置在路由器RTB的S0/0接口上的OUT方向，哪两个数据包会被DENY，如果被路由到该接口上的话?

        access-list 101 deny tcp 192.168.15.32 0.0.0.15 any eq telnet

　　access-list 101 permit ip any any

　　A. source ip address: 192.168.15.5; destination port: 21

　　B. source ip address:, 192.168.15.37 destination port: 21

　　C. source ip address:, 192.168.15.41 destination port: 21

　　D. source ip address:, 192.168.15.36 destination port: 23

　　E. source ip address: 192.168.15.46; destination port: 23

　　F. source ip address:, 192.168.15.49 destination port: 23

　　Answer: DE

13. What are two security appliances that can be installed in a network? (Choose two.)

　　13.以下哪两个安全工具能被安装在一个网络里

　　A. ATM　B. IDS

　　C. IOS　　D. IOX

　　E. IPS　　F. SDM

　　Answer: BE