The statement “The company forecasts sales of $20,000 and profit of $2,000 for the first 12 months of operations” is best characterized as a ____（）

A .  GLBP and VRRP allow for MD5 authentication， whereas HSRP does not. B .  HSRP allows for multiple upstream active links being simultaneously used， whereas GLBP  does not. C .  GLBP allows for router load balancing of traffic from a network segment without the different  host IP configurations required to achieve the same results with HSRP. D .  Unlike HSRP and VRRP， GLBP allows automatic selection and simultaneous use of multiple  available gateways. E .  GLBP allows for router load balancing of traffic from a network segment by utilizing the creation  of multiple standby groups.

A .  ARP spoofing attacks are attempts to redirect traffic to an attacking host by encapsulating a  false 802.1Q header on a frame and causing traffic to be delivered to the wrong VLAN. B .  ARP spoofing attacks are attempts to redirect traffic to an attacking host by sending an ARP  message with a forged identity to a transmitting host. C .  MAC address flooding is an attempt to force a switch to send all information out every port byoverloading the MAC address table. D .  ARP spoofing attacks are attempts to redirect traffic to an attacking host by sending an ARP  packet that contains the forged address of the next hop router. E .  MAC address flooding is an attempt to redirect traffic to a single port by associating that port  with all MAC addresses in the VLAN.

A . Routing should occur at the access layer ifvoice VLANs are utilized. Otherwise， routing should occur at the distribution layer. B . Routing should always be performed at the distribution layer. C . VLANs should be localized to a switch. D . VLANs should be localized to a single switch unlessvoice VLANs are being utilized. E . Routing should not be performed between VLANs located on separate switches.

A .  Attacks are prevented by utilizing the port-security feature. B .  An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the  802.1q encapsulation. C .  Configuring an interface with the switchport mode dynamic command will prevent VLAN  hopping. D .  An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q  encapsulation. E .  Configuring an interface with the "switchport mode access" command will prevent VLAN  hopping.

A .  The processing of 802.11 data and management protocols and access point capabilities is  distributed between a lightweight access point and a centralized WLAN controller. B .  LWAPP advertises its WDS capability and participates in electing the best WDS device for the  wireless LAN. C .  LWAPP aggregates radio management forward information and sends it to a wireless LAN  solution engine. D .  LWAPP authenticates all access points in the subnet and establishes a secure communication  channel with each of them. E .  None of the other alternatives apply

A .  To verify the MST configuration， the show pending command can be used in MST configuration  mode. B .  When RSTP and MSTP are configured； UplinkFast and BackboneFast must also be enabled. C .  All switches in the same MST region must have the same VLAN-to-instance mapping， but  different configuration revision numbers. D .  All switches in an MST region， except distribution layer switches， should have their priority  lowered from the default value 32768. E .  An MST region is a group of MST switches that appear as a single virtual bridge to adjacent  CST and MST regions. F .  Enabling MST with the "spanning-tree modemst" global configuration command also enables  RSTP.

A .  In the autonomous access point solution， control is provided by the WLAN controller. B .  In the lightweight access point solution， WLAN management is provided by the WLAN Control  System （WCS）. C .  In the autonomous access point solution， control is provided by the WDS （Wireless Domain  Services）. D .  Cisco Aironet autonomous access points cannot be supported by the Cisco Unified Wireless  Network. E .  Ii the lightweight access point solution， WLAN management is provided by the WLAN Solution  Engine （WLSE）. F .  Cisco Aironet lightweight access points cannot be supported by the Cisco Unified Wireless  Network.

A .  Real-time frame exchange is accomplished within the access point. B .  The control traffic between the client and the access point is encapsulated with the LWAPP.  C .  Authentication， security， and mobility are handled by the access point. D .  Data traffic between the client and the access point is encapsulated with LWAPP. E .  None of the other alternatives apply

A .  An access point will search for a controller using a broadcast address if using LWAPP Layer 2  and a unicast address if using LWAPP Layer 3 mode. B .  If multiple wireless controllers are detected by an access point， the controller with the fewest  associated access points is chosen to associate with. C .  In order to associate in Layer 3 mode， the access point must have been preconfigured with an  IP address. D .  Once an access point associates with a controller in LWAPP Layer 3 mode， it receives an IP  address from the controller. E .  An access point first searches for a controller in LWAPP Layer 2 mode. If the search is not  successful， the access point then attempts to locate a controller in LWAPP Layer 3 mode. F .  If multiple wireless controllers are detected by an access point， all of them will be used and  traffic will be load balanced.

A .  MAC spoofing attacks allow an attacking device to receive frames intended for a different  network host. B .  Port scanners are the most effective defense against dynamic ARP inspection. C .  MAC spoofing, in conjunction with ARP snooping, is the most effective counter-measure against reconnaissance attacks that use dynamic ARP inspection (DAI) to determine vulnerable  attack points. D .  Dynamic ARP inspection in conjunction with ARP spoofing can be used to counter DHCP  snooping attacks. E .  DHCP snooping sends unauthorized replies to DHCP queries. F .  ARP spoofing can be used to redirect traffic to counter dynamic ARP inspection. G .  None of the other alternatives apply.

A .  Voice carrier stream utilizes Real-Time Transport Protocol (RTP) to carry the audio/media  portion of the VoIP communication.   B .  Voice traffic data flow involves large volumes of large packets.   C .  Because a packet loss involves a small amount of data, voice traffic is less affected by packet  losses than traditional data traffic is.   D .  Voice packets are encapsulated in TCP segments to allow for proper sequencing during  delivery.  E .  Voice packets are very sensitive to delay and jitter.&e

A .  Control traffic between an access point and a controller is encrypted within LWAPP. B .  Data traffic between an access point and a controller is encrypted within LWAPP. C .  Layer 3 mode packets are transmitted in TCP frames. D .  Data traffic between an access point and a controller is encapsulated within LWAPP. E .  VLAN tagging and QoS markings are applied at the access point.

A .  An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the  802.1q encapsulation. B .  Configuring an interface with the "switchport mode dynamic" command will prevent VLAN  hopping. C .  Attacks are prevented by utilizing the port-security feature. D .  Configuring an interface with the "switchport mode access" command will prevent VLAN  hopping. E .  An end station attempts to redirect VLAN traffic by broadcasting multiple ARP requests.

A .  In ad hoc mode， the Independent Basic Service Set （IBSS） is a framework in which mobile  clients connect directly without an intermediate access point. B .  In Infrastructure mode， the Basic Service Set （BSS） is a framework in which mobile clients use  a single access point for connecting to each other or to wired network resources. C .  In Infrastructure mode， the Extended Services Set （ESS） is a framework in which two or more  Basic Service Sets are connected by a common distribution system （DS）. D .  In Infrastructure mode， the Independent Basic Service Setet （IBSS） is a framework in which  mobile clients connect directly without an intermediate access point. E .  In ad hoc mode， the Basic Service Set （BSS） is a framework in which mobile clients use a  single AP for connecting to each other or to wired network resources. F .  In ad hoc mode， the Extended Services Set （ESS） is a framework in which two or more Basic  Service Sets are connected by a common distribution system （DS）

A .  1. Access point sends probe request .2. Client sends probe response.3. Client initiates  association.4. Access point accepts association.5. Client adds access point MAC address to  association table. B .  1. Client sends probe request.2. Access point sends probe response.3. Client initiates  association.4. Access point accepts association.5. Access point adds client MAC address to  association table. C .  1. Client sends probe request.2. Access point sends probe response.3. Access point initiates  association.4. Client accepts association.5. Access point adds client MAC address to association  table. D .  1. Access point sends probe request .2. Client sends probe response.3. Client initiates  association.4. Access point accepts association.5. Access point adds client MAC address to  association table. E .  1. Client sends probe request.2. Access point sends probe response.3. Client initiates  association.4. Access point accepts association.5. Client adds access point MAC address to  association table. F .  None of the other alternatives apply.

A .  The trunk link belongs to a specific VLAN. B .  Multiple trunk links are used to connect multiple end user devices. C .  A trunk link only supports native VLAN. D .  Trunk links use 802.10 to identify a VLAN. E .  The native VLAN of the trunk link is the VLAN that the trunk uses for untagged packets.

A .  It supports eight different data rates. B .  It is fully backward compatible with 802.11b C .  It provides the same network throughput with 802.11b clients， 802.11g clients， or a mixed  environment where both clients are present. D .  It is only compatibly with the 11 Mbps 802.11b transfer rate. E .  It has three non-overlapping channels in its channel options.

A .  A VRRP group has one active and one or more standby virtual routers. B .  A VRRP group has one master and one or more backup virtual routers. C .  A VRRP group has one master and one redundant virtual router. D .  None of the other alternatives apply

A . The "mls qos" global configuration command must be entered before configuring AutoQoS. B . CEF must be enabled. C . The "no auto qos voip" command is used to disable Cisco AutoQos and revoke all  configurations generated by Cisco AutoQos. D . CDP must be enabled. E . SNMP must be enabled.

A .  DAI can be performed on ingress ports only. B .  DAI can be performed on both ingress and egress ports. C .  DAI is supported on access ports， trunk ports， EtherChannel ports， and private VLAN ports.   D .  DAI should be enabled on the root switch for particular VLANs only in order to secure the ARP  caches of hosts in the domain. E .  DAI should be configured on all access switch ports as untrusted and on all switch ports connected to other switches as trusted. F .  DAI is supported on access and trunk ports only.

是 否

A、Houses built by the company for sale to customers B、A building owned by the company and leased out to tenants C、A building the company owns and uses to house its administrative activities