CCNA640-802题库解析

《CCNA640-802题库解析》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、CCNA640-802题库解析–访问控制列表(ACL)·本文主要结合例题描述ACLs的作用和类型，基于网络过滤要求配置和应用ACLs。·Whataretworeasonsthatanetworkadministratorwoulduseaccesslists?(Choosetwo.)·A:tocontrolvtyaccessintoarouter·B:tocontrolbroadcasttrafficthrougharouter·C:tofiltertrafficasitpassesthrougharouter·D:to

2、filtertrafficthatoriginatesfromtherouter·E:toreplacepasswordsasalineofdefenseagainstsecurityincursions·CorrectAnswers:A,C·在路由器上设置访问控制列表的目的是：控制用户的访问和过滤通过路由器的流量.·Whatistheeffectofthefollowingaccesslistcondition?·access-list101permitip10.25.30.00.0.0.255any·A:permit

3、allpacketsmatchingthefirstthreeoctetsofthesourceaddresstoalldestinations·B:permitallpacketsmatchingthelastoctetofthedestinationaddressandacceptallsourceaddresses·C:permitallpacketsfromthethirdsubnetofthenetworkaddresstoalldestinations·D:permitallpacketsmatchingth

4、ehostbitsinthesourceaddresstoalldestinations·E:permitallpacketstodestinationsmatchingthefirstthreeoctetsinthedestinationaddress·CorrectAnswers:A·这是一个扩展的访问控制列表，他可以基于源和目的进行匹配，10.25.30.00.0.0.255匹配的是源地址凡是在这个范围的都被匹配了，而目的用的是any，表示任何。意思是从10.25.30.0/24的地址范围内的任何IP都可以访问任何

5、的网段。·Whatthreepiecesofinformationcanbeusedinanextendedaccesslisttofiltertraffic?(Choosethree.)·A:protocol·B:VLANnumber·C:TCPorUDPportnumbers·D:sourceswitchportnumber·E:sourceIPaddressanddestinationIPaddress·F:sourceMACaddressanddestinationMACaddress·CorrectAnswer

6、s:A,C,E·1.标准访问控制列表,针对源地址对流量进行过滤·2.扩展访问控制列表,针对源或者目标地址、协议、TCP或者UDP端口号对流量进行过滤·Refertotheexhibit.TheFMJmanufacturingcompanyisconcernedaboutunauthorizedaccesstothePayrollServer.TheAccounting1,CEO,Mgr1,andMgr2workstationsshouldbetheonlycomputerswithaccesstothePayrollSe

7、rver.Whattwotechnologiesshouldbeimplementedtohelppreventunauthorizedaccesstotheserver?(Choosetwo.)··A:accesslists·B:encryptedrouterpasswords·C:STP·D:VLANs·E:VTP·F:wirelessLANs·CorrectAnswers:A,D·首先根据不同的部门划分3个VLAN,office1shippingproduction.由于CEOMgr1mgr2属于不同的VLAN,因

8、此需要配置访问列表accesslists控制其它主机对PayrollServer的访问.·Anaccesslistwaswrittenwiththefourstatementsshowninthegraphic.Whichsingleaccessliststatementwillcombineallfourofthe