Router A has an IP route entry with a purposeful CIDR block of 10001/32 and an outgoing interface of GigabitEthernetO/0/1. Now add the following configuration: acd number 2000 rule 10 permit source1001.10#traffic classifier test if-match acl 2000 # traffic behavior test remarkdscp cs3#traffic policy test classifier test behavior test# interfaceGigabitftherneto/0/1 ip address 1001212552552550 traffic-policy test outbound#assuming router A received a destination IP of 10001 Of packets, the following statements are correct:

If the packet source IP address is 1001.1, it can be forwarded while the DSCP field is marked as CS3

If the packet source IP address is 1001.2, it can be forwarded while the DSCP field remains unchanged

If the data packet source lIP address is 1001.2, it can be forwarded with the DSCP field marked CS3

If the packet source IP address is 1001.1, it can be forwarded while the DSCP field is marked as CS3

If the packet source IP address is 1001.2, it cannot be forwarded

If the packet source IP address is 1001.2, it can be forwarded while the DSCP field remains unchanged

If you have a Huawei switch running the STP protocol, and now connect the GO/O/17 interface and the GO/O/18 interface of the switch through a cable, then the scenario described below is correct ?( Single choice questions).

GO/0/18 interface will enter the Disking state

Both the G0/0/17 interface and the GO/0/18 interface enter the Forwarding state

Both the Go/0/17 interface and the G0/0/18 interface enter the Disccarding state

The Go/0/17 interface enters the Blocking state

The GO/0/18 interface will continuously change back and forth between the Listening state and the Learning state

GO/0/18 interface will enter the Disking state

Huawei's two switches SWA and SWB are connected together by 7 Ethernet cables, and static link clustering is configured, and the corresponding port on the switch SWA is Ethernet 1/0/1 ?Ethernet1/0/2?Ethernet 1/0/3?Ethernet 1/0/4?Ethernet 1/0/5, Ethernet1/0/6, Ethernet 1/0/7, configured in order of port if the switch SWA, SWB supports only 6 ports per aggregation group

With the same configuration of each port, the Ethernet 1/0/7 port is the aggregate group Unselecte port

In the case of consistent configuration of each port, Ethernet 1/0/6 port is an aggregate group Unselected port

In the case of consistent configuration of each port, the Ethernet1/0/1 port is an aggregate group Unselected port

With the same configuration of each port, the Ethernet 1/0/7 port is the aggregate group Unselecte port

With the same configuration of each port, SWA randomly selects one of the 7 ports as the aggregate group Unselecte port

??? aggregate ipv4-address { mask/masklength }[as-set lattribute-policy route-policy-namel ldetailsuppressedlorigin- policy routein policy-name2[suppress3policy route-policy-name3], multiple parameters can be used to influence summary routes and their results. The correct description about the command is ?( Multiple choice questions).

If As-set is configured, the A S_PATH of the aggregate route contains ass path information for all specific routes in case the route loop is blocked

If Origin-policy is configured, only detail routes that match Route-policy can participate in aggregation

If You configure The Interface-policy, you can change the properties of the aggregate route

If As-set is configured, the A S_PATH of the aggregate route contains ass path information for all specific routes in case the route loop is blocked

If Suppress-policy is configured, aggregate routes are also generated, and the if-match clause in Route-policy is used to pick suppressed detail routes. Detail routes that match Route-policy are still advertised to other BGP neighbors

If Origin-policy is configured, only detail routes that match Route-policy can participate in aggregation

If You configure The Interface-policy, you can change the properties of the aggregate route

What are the following statements about 8021x, RADIUS, and HWTACACS certification? ( Multiple choice questions).

Users can use 8021x authentication to access the network and complete identity authentication through RADIUS

RADIUS authentication and WTACACS authentication are mutually exclusive and cannot be twofactor authentication for the same user at the same time.

Users can use 8021x authentication to access the network and complete identity authentication through RADIUS

RADIUS authentication and WTACACS authentication are mutually exclusive and cannot be twofactor authentication for the same user at the same time.

RADIUS authentication and HWTACACS authentication can perform two-factor authentication for the same user at the same time, which is more secure.

RADIUS authentication is mutually exclusive with 8021x authentication.

The following statement about IPv6 Over VXLAN is wrong as ?( Single choice questions).

IPv6 Over VLANs do not generate ND table entries.

The tunnel between VXLAN Layer 2 and Layer 3 gateways is an IPv4 network.

IPv6 over VXLAN solves the problem of insufficient IP address resources for end tenants.

IPv6 Over VLANs do not generate ND table entries.

IPv6 over VXLAN means that the Overlay network of the VXLAN is an IPv6 network.

What are the following correct statements about MUX VLANs?( Multiple select).

The Principal VLAN can communicate with all VLANs within the MUX VLAN

Each Separate VLAN must be bound to a Principal VLAN

Each Group VLAN must be bound to a Principal VLAN

The Principal VLAN can communicate with all VLANs within the MUX VLAN

Each Separate VLAN must be bound to a Principal VLAN

Separate VLANs can communicate with all VLANs within a MUX VLAN

Each Group VLAN must be bound to a Principal VLAN

There is an existing switch running the RSTP protocol. If the network topology changes, what happens to the Layer 2 forwarding table that is automatically learned by the switch?

Table entries are dropped except for table entries related to edge ports and table entries related to ports that receive TC messages

Except for the table entry related to the edge port that is not deleted, all other table entries are deleted

Only table entries related to the port that received the TC message are dropped

If the aging time is set to 15 seconds, entries that exceed the aging time are deleted

Table entries are dropped except for table entries related to edge ports and table entries related to ports that receive TC messages

The advantages of building a campus network using stacking, clustering technology include which of the following?( Multi-select)

Improved network equipment and link utilization

Business disruption time is greatly reduced

Simplifies network management and reduces the complexity of network deployment planning

Improved network equipment and link utilization

It can effectively reduce network power consumption

Business disruption time is greatly reduced

Simplifies network management and reduces the complexity of network deployment planning

The correct description of the extended features of ISIS is ?

When the amount of information in the Link State Protocol data packet PDU to be released by ISIS is too large, the ISIS router will generate multiple LSP shards to carry more ISIS information.

ISIS can choose whether to authenticate incoming SNP and LSP packets

If there are other vendors' devices on the network and do not support the LSP sharding function, the sharding expansion mode must be configured as Model-1, otherwise the message will not be recognized by other vendors' devices.

When the amount of information in the Link State Protocol data packet PDU to be released by ISIS is too large, the ISIS router will generate multiple LSP shards to carry more ISIS information.

ISIS can choose whether to authenticate incoming SNP and LSP packets

If there are other vendors' devices on the network and do not support the LSP sharding function, the sharding expansion mode must be configured as Model-1, otherwise the message will not be recognized by other vendors' devices.

After you enable the LSP shard extension feature of your router, you can use it without restarting the ISIS process.

Regarding the difference between NSR and NSF, the correct one is?

NSF must rely on neighbor routers to complete

The NSR must rely on a neighbor router to complete

Both NSR and NSF require a neighbor router to complete

NSF must rely on neighbor routers to complete

NSF does not require a neighbor router to complete

Configuration under a certain interface: isis timer hello 5 level-2, the following statement is correct?

The level-2 hello packet send interval is 5s

The hello packets sent at level-1 and Leve1-2 are both 5s

The hello packets sent at level-1 are sent at 5s interval

The level-2 hello packet send interval is 5s

The CSNP packet sending interval for this interface Level-2 is 5S

Regarding the Stub region in the OSPF protocol, the following statement is correct.

Virtual connections cannot traverse the Stub region

Backbone zones cannot be configured as Stub zones

ASBR cannot exist in the Stub zone

Type7 LSA injection is not allowed in the Stub zone

Virtual connections cannot traverse the Stub region

Backbone zones cannot be configured as Stub zones

ASBR cannot exist in the Stub zone

Type7 LSA injection is not allowed in the Stub zone

Regarding the site in the BGP/MPLSIP VPN network architecture, the following description is correct?

Under no circumstances can different sites that belong to the same VPN use overlapping address spaces

Two geographically separated networks must belong to different sites

Terminals connected to the carrier network through the same CE may belong to different sites

A site is a set of IP systems, and a network of hosts cannot be called site

Under no circumstances can different sites that belong to the same VPN use overlapping address spaces

Two geographically separated networks must belong to different sites

Terminals connected to the carrier network through the same CE may belong to different sites

A site is a set of IP systems, and a network of hosts cannot be called site

In MPLSVPN, in order to distinguish between IPv4 prefixes that use the same address space, the RD value is added to the IPv4 address, and the following options are described correctly as ?

On a PE device, each VPN instance corresponds to an RD value, and the RD value must be unique on the same PE device

RD can be used to control the publication of VPN routing information

On a PE device, each VPN instance corresponds to an RD value, and the RD value must be unique on the same PE device

RD is encapsulated in the Update message as an extended community attribute of BGP during delivery

After the PE receives an IPv4 route from CE, it adds an RD to the route to IPv4 that translates to a globally unique VPN-IPv4 route and publishes it on the public network

The following statement about the application of BFD is correct?

The one-arm echo function refers to the detection of the connectivity of the forwarding link through the loopback operation of the BFD packet

BFD multi-hop detection means that BFD can detect arbitrary paths between two systems that may span many hops or overlap in some parts

BFD and OSPF linkage is to associate BFD and OSPF, and notify OSPF through BFD's rapid sensing of link failures, thereby speeding up OSPF Response to changes in network topology

BFD single-hop detection refers to the IP connectivity detection of two direct-connected systems

The one-arm echo function refers to the detection of the connectivity of the forwarding link through the loopback operation of the BFD packet

BFD multi-hop detection means that BFD can detect arbitrary paths between two systems that may span many hops or overlap in some parts

BFD and OSPF linkage is to associate BFD and OSPF, and notify OSPF through BFD's rapid sensing of link failures, thereby speeding up OSPF Response to changes in network topology

BFD single-hop detection refers to the IP connectivity detection of two direct-connected systems

Use ping-ax-cY-sZ-vpn-instance M 105162, which has the meaning of

IcMP request for the ping, message size Z (without IP and ICMP headers)

The source IP address of the ping packet is X

The ping belongs to the VPN instance M

IcMP request for the ping, message size Z (without IP and ICMP headers)

The source IP address of the ping packet is X

The ping belongs to the VPN instance M

The address resolution feature for NDP in the following description is incorrect?

When sending a neighbor request packet, the source addressóis set as the link-local address

of the local interface Two types of ICMPv6 messages,

are used in the address resolution process, neighbor request and neighbor advertisement Address resolution implements the ability to resolve from IPv6 addresses to link-layer addresses

When sending a neighbor request packet, the destination address must be the multicast address of the neighbor's requested node

The following description of the TTL in the MPLS Header is correct:

A TTL that acts like an IP header and is used to prevent message loops

Control of upstream devices for label distribution

For the description of firewall security zones, the following statement is correct?

Different interfaces of the firewall can belong to the same security zone

The same interface of a firewall can belong to different security zones

Different security zones of the firewall, the priority can be the same

The built-in security zone of the Firewall can be deleted

Different interfaces of the firewall can belong to the same security zone

The MAC address of a PC is 5489-98FB-65D8 The administrator wants this PC to get the specified P address 1921681.11/24 from the DHCP server So the administrator-configured command should be,

dhcp server static-bind ip-address 1921681. 11 mac- address 5489-98FB-65D8

dhcp static-bind ip address 1921681.11 mac- address 5489-98FB-65D8

dhcp static-bind ip address 1921681.11 24 mac- address 5489-98FB-65D8

dhcp server static -bind ip address 1921681.112552552550 mac-address 5489-98FB-65D8

dhcp server static-bind ip-address 1921681. 11 mac- address 5489-98FB-65D8

What's wrong about vrrp timers is ?

By default, the time period for VRRP advertisement messages is 2 seconds

By default, the VRRP preemption delay is I seconds

MASTER DOWN = (3*ADVER_ INTERVAL) + Skew_ time

By default, the time period for VRRP advertisement messages is 2 seconds

By default, the VRRP preemption delay is I seconds

Although the STP protocol can solve the loop problem, it affects the quality of user communication due to the slow convergence of the network topology. RSTP has made many improvements to STP, which of the following is not an improvement of RSTP to STP?

If a port does not receive a configuration BPDU sent by the upstream device for 4 consecutive Hello Time, the device considers the negotiation with this neighbor to fail

In addition to the 3 port states, RSTP vice adds 2 new port roles

Non-root switches running RSTP send configuration BPDUs at intervals specified by Hello Timer, a behavior that is entirely autonomous for each device

RSTP port state specification is divided according to whether the port forwards user traffic and learns the MAC address, reducing the original 5 port states to 3

If a port does not receive a configuration BPDU sent by the upstream device for 4 consecutive Hello Time, the device considers the negotiation with this neighbor to fail