口令可用于限制对 Cisco IOS 所有或部分内容的访问。请选择可以用口令保护的模式和接口。（选三项）

A . 系统ROM B . 启动配置文件 C . 系统映像文件 D . 配置寄存器值 E . 引导加载程序映像文件

A . requires the Basic or Advanced Signature Definition File B . uses the built-in signatures that come with the Cisco IOS image as backup C . supports SDEE，SYSLOG，and SNMP for sending Cisco IPS alerts D . uses Cisco IPS 5.x signature format

A . A．Ⅰ B . B．Ⅱ，Ⅲ C . C．Ⅰ，Ⅲ D . D．Ⅲ

A . Cisco IOS IPS enabled on the untrusted interface B . NBAR enabled to perform protocol discovery and deep packet inspection C . a route map to define the trusted outgoing traffic D . a route map to define the application inspection rules E . an inbound extended ACL applied to the untrusted interface

A . class-based policing is configured using the Modular QoS command-line （MQC） B . only the Frame Relay traffic-shaping （FRTS） mechanism can interact with a Frame Relay network， adapting to indications of Layer2 congestion in the WAN links C . Distributed Traffic Shaping （DTS） is configured with the police command under the policy map configuration D . both Frame Relay traffic shaping （FRTS） and virtual IP （VIP）-based Distributed Traffic Shaping （DTS） have the ability to mark traffic

A . VTY接口 B . 控制台接口 C . 以太网接口 D . 加密执行模式 E . 特权执行模式 F . 路由器配置模式

A . Ⅰ B . Ⅱ、Ⅲ C . Ⅰ、Ⅲ D . Ⅲ

A . show module B . show inventory C . show status D . show versio

A . It can be configured to block Java traffic. B . It can be configured to detect and prevent SYN-flooding denial-of-service （DoS） network attacks. C . It can only examine network layer and transport layer information. D . It can only examine transport layer and application layer information. E . The inspection rules can be used to set timeout values for specified protocols. F . The ip inspect cbac-name command must be configured in global configuration mode.

A . A、CDP B . B、HSRP C . C、TFTP D . D、TELNET

A . only implemented between Cisco source and destination-capable devices B . statistics provided by syslog， CLI， and SNMP C . measures delay， jitter， packet loss， and voice quality D . only monitors VoIP traffic flows E . provides active monitoring F . provides passive monitoring

A . show inventory B . show flash：filesys C . dir flash：include chassis D . show diag E . show controller

A . 0-99 B . 100-199 C . 200-299 D . 300-399

A . 1-99 B . 100-199 C . 200-299 D . 1300-1999 E . 2000-2699

A . RAM B . TFTP 服务器 C . NVRAM D . 设置例程 E . 闪存 F . 终端

A . enablepassword*** B . enablesecret*** C . username***password*** D . servicepassword-encryptio

A . The Cisco IOS image file will not be visible in the output from the show flash command. B . The show version command will not show the Cisco IOS image file location. C . When the router boots up， the Cisco IOS image will be loaded from a secured FTP location. D . The running Cisco IOS image will be encrypted and then automatically backed up to a TFTP server.

A . 正确 B . 错误

A . vtp v1-mode B . vtp v2-mode C . no vtp version D . no vtp version 2 E . vtp version 1

A . 相邻关系 B . 债权关系 C . 共有关系 D . 物权关系

(20) Catalyst 3500（Cisco IOS系统）中启用STP的命令格式是( )。 A) spanning-treevlan＜vlan＞ B) no spamung-tree vlan＜vlan＞ C) set spantree enable＜vlans＞ D) set spantree: disable＜vlans＞

A．I B．II、III C．I、III D．III