Test
IENP - 1
Este test tiene tiempo límite, así que se abre en el reproductor de siempre.
Preguntas del test (60)
1The following options, the Agile Controller is part of the business highlights (multiselect)
- ABased on the three-tier GRE tunneling, business equipment networking, deployment location more flexible
- BThrough topological visualization of business choreography, configuration is simple, easy to manage
- CBusiness equipment additions and deletions, do not change the existing network forwarding routing, do not change the physical network topology
- DWithout manual maintenance, automatic analysis of the business choreography.
2In the following scenario, the scene of the guest access management that does not belong to the Agile Controller is
- ACustomer communication, visits and other involved in the enterprise network, access to corporate public resources or the Internet
- BOrdinary people access the Internet through a network provided by public world units
- CCustomers in the enterprise consumption, connect the enterprise network to visit the Internet
- DCompany employees travel to the branch, link the branch network to visit the company network.
3The main features of the VIM management module in NFV are resource discovery, resource allocation, resource management, and
- AResource scheduling
- BResource monitoring
- CRecycle
- DFault handling
4SDN main technical schools advocate SDN using hierarchical open architecture, then advocate, define the centralized architecture and Openflow is
- AONF
- BIEIF
- CETSI
- DITU
5To avoid TCP global synchronization, the available congestion avoidance mechanisms are (MULTISELECT)
- ARED
- BWRED
- CTAIL-DROP
- DWFQ
6Which of the following is the command to configure the SDN controller to listen for addresses
- AOpenflow listening-ip 1.1.1.1
- BSdn controller soure-address 1.1.1.1
- CController-ip 1.1.1.1
- DSdn listening-ip 1.1.1.1
7DHCP server is assigned to the client's dynamic IP address. Usually there is a certain lease term, then The description of the lease term is wrong
- AThe lease update timer is 50% of the total lease, and when the "lease update timer" expires, the DHCP client The IP address must be updated
- BThe re-bind timer is 87.5% of the total lease
- CIf the "re-bind timer" expires, but the client has not received a response from the server, Send a DHCP REQUEST message to the DHCP server to which the IP address was assigned until the total lease expires
- DDuring the lease period, if the client receives a DHCP NAK message, the client will immediately stop using this IP address, and return to the initialization state, re-apply for a new IP address
8NFV is often deployed in one of the following application environments (MULTISELECT)
- Adata center
- BNetwork node
- CUser access side
- DClient / server
9ASPF (Application Specific Packet Filter) is an application layer based on packet filtering, it will check the application layer protocol information and monitor the linked application layer protocol status and implement it through the ServerMap table. The special security mechanism. So on the ASPF and Server map table statement, the wrong is
- AASPF monitors the messages in the communication process
- BASPF dynamically creates and removes filtering rules
- CASPF through the Servermap table to dynamically allow multi-channel protocol data through
- DThe five-tuple Server-map entry implements a similar function to the session table
10Which of the following modules does not belong to the functional components within the NFV framework:
- AVIM
- BVNF
- CVNFM
- DOSS
11The role of the Agile Controller server does not include which of the following options：
- ABusiness Manager
- BBusiness controller
- CSecurity Situation Manager
- DBusiness Inspector
12As shown in the figure, MPLS LSPs are configured in the network and local LDP is implemented between SWA and SWB session, the following statement is correct:
- AConfigured correctly
- BThe two devices mpls lsr-id can not be configured the same
- Cdo not need to enable MPLS globally
- DDo not need to be able to MPLS on the port
13USG System Firewall The three elements of the Servermap table are not included
- Adestination ip
- Bdestination port
- Cprotocol
- Dsource ip
14In the interzone packet filtering, the following is the outbound direction of which option:
- ATrust->untrust
- BUntrust->trust
- CUntrust->dmz
- DTrust->Local
15The remote alert notification mode supported by eSight is included (MULTISELECT)
- AMAIL
- BVOICE MESSAGE
- CMESSAGE
- DWECHAT
16What kind of common configuration is supported by VXLAN? (MULTISELECT)
- AThrough the virtualization software configuration
- BConfigured via SDN controller
- CConfigured via SNMP protocol
- DAutomatic configuration
17For different needs, DHCP server supports multiple types of address allocation policies, which do not include
- AAutomatic allocation method
- BDynamic allocation
- CRepeat assignments
- DManual assignment
18The description of the LDP session setup process is correct (MULTISELECT)
- AThe two LSRs send hello messages to each other. The Hello message carries the transport address and the transmission address. The big side as a proactive party, initiated a TCP link
- BIf the hello message does not carry transpo this address, the purpose of the hello message ip address used to establish a TCP link, the destination IP address of the larger side as a sponsor initiated the establishment of TCP chain.
- CThe active party sends an advertisement message, negotiates the relevant parameters of the LDP session, Including LDP protocol version, label distribution mode, keepalive keep timer value, maximum PDU length and label space, etc.
- DIf the passive party can accept the relevant parameters, send the initialzation message message and send it at the same time keepalive message to the active party.
19MITM attacks or IP / MACSpoofing attacks can lead to information leakage and other hazards, and in the network more common. In order to prevent MITM attacks or IP / MAC Spoofing attacks, what configuration method can you take.
- AConfigure the trust / untrusted interface
- BLimits the maximum number of MAC addresses allowed on the switch interface
- CEnable DHCP snooping to check the function of the CHADDR field in the DHCP REQUEST message
- DConfigure the DHCP snooping domain DAI or IPSG on the switch
20The description of the MAC address spoofing attack, which is wrong
- AMAC address spoofing attacks mainly use the switch Mac address learning mechanism
- BAn attacker can make the attack by send spoofing the source MAC address data frame to the switch
- CMAC address spoofing attacks cause the switch to learn the wrong mapping between the Mac address and the IP address
- DMAC address spoofing attack will led to the switch send the data to the attacker instead of sending to the correct destination
21which is the command for Configuring BFD associate with static default routes
- AIp route-static 0.0.0.0 0.0.0.0 10.0.12.2 bfd-session 1
- BIp route-static 0.0.0.00.0.0.010.0.12.2 track bfd-session 1
- CIp route-static 0.0.0.0 0.0.0.0 10.0.12.2 track 1
- DIp route-static 0.0.0.00.0.0.0 10.0.U.2 track session 1
22For all the interfaces enable BFD to associate with OSPF, we can use which command
- ABfd enable
- BBfd all-interface enable
- CALL-interface bfd enable
- DUndo BFD all-interface disable
23The following options do not belong to the OverlayVPN model
- AGRE
- BIPSec VPN
- CSSL VPN
- DL2TPVPN
24in the Agile Controller access control scenario, the following options on the RADIUS server and the client's role, which description is correct:
- AAgile Controller integrates all functions of the RADIUS server and the client
- BAgile Controller as a RADIUS server, the user terminal as a RADIUS client
- Cauthentication device <as an 802.1x switch> as a RADIUS server, the user terminal serves as a RADIUS client
- DAgile Controller as a RADIUS server, authentication device <such as 802.1x switch) RADIUS client
25In eSight, according to which conditions to set the alarm shielding rules (multiple choice)
- Aeffective time
- Beffective period
- Calarm source
- Dalarm
26The following description of the inter zone security policy for the firewall, the correct is:
- AInter-domain security policies are aligned in the order of arrangement, and the alignment is more advanced
- BInter-domain security policy matches ID number size; the smaller the number, the more priority
- CInter-domain security policy matches ID number size; the greater the number, the more priority
- Ddomain to the security policy in accordance with the serial number automatically arranged, when changing the order, the number also followed to change
27for which the configuration describes which is wrong:
- AConfigure the gigabitethernet0 / 0/1 interface as a trusted interface
- BIf the gigabitethernet0 / 0/1 interface receives a DHCP request packet with no suboption1 information of option82, the device generates option 82 and inserts it into the message
- CEnable DHCP snooping configuration can be used to prevent DHCP Server counterfeiters from attacking
- DEnable DHCP Snooping configuration can be used to prevent ARP bully attacks
28on the NAT address pool configuration command is as follows, then no-pat parameters of the correct meaning is:
- Adoes not do address translation
- Bfor port multiplexing
- Cdoes not convert source port
- Ddoes not convert the destination port
29the following options regarding Agile Controller accompanying business description is correct: (multiple choice)
- Abusiness administrator when configuring accompanied, should select the appropriate user authentication point and policy enforcement point.
- BIn the service, you can define the user class security group, this part of the security group mainly refers to a static network segment or server resources, their IP need to manually establish a binding with the security group
- CIn the business accompanying, through a matrix relationship to describe a security group (such as users> to another security group <For example, the server> access rights
- DIn the business accompanying, by specifying some VIP users belong to the security group forwarding priority, to protect this part of the network of people experience.
30MPLS has the concept of forwarding equivalence class (FEC-Forwarding Equivalence Class), then FEC cannot be based on which of the following criteria?
- Afragment offset
- Bdestination address
- Capplication protocol
- Dservice category
31in the LDP session establishment process will experience openSent state, when the openSent state receives Initialization Message. Then send KeepAlive Message, its state will be moved to:
- AInitialized
- BOpenrec
- COperational
- DNon-existent
32The VPN configuration on a device is as follows, which is the description of the configuration command, which is correct? :
- AThis command is configured on the client device's CE device
- BRoute-distinguisher 1: 1 indicates that the RD value is 1: 1. RD does not have to be globally unique
- CVpn-target 1: 1 export-extcommunity Indicates that the VPN's Export Target is 1: 1
- DVpn-target 2: 2 export-extcommunity The export target for VPN is 2: 2. Import Target can only set on
33the following options, on the RT description which is correct: (multiple choice)
- AEach VPN instance associates one or more pairs of VPN Target attributes to control the advertisement and reception of VPN routing information between sites.
- BRT can be divided into two types of VPN target attributes: Export Target and Import Target
- CExport Target and the Import Target settings are independent of each other, and can set multiple values, can be flexible VPN access control
- DRT value is advertised to the neighbor through the Update message in the form of BGP extended community attributes
34LDF is a protocol for the distribution of labels, and there are a variety of message types, which are used to announce and maintain the presence of an LSR in the network:
- ADiscovery message
- BSession message
- CAdvertisement message
- DNotification message
35the data collection method is divided into (multiple choice)
- Aoptical splitter physical acquisition
- Bthrough port mirroring
- CNMS centralized collection
- Dautomatic acquisition
36In the network shown below, to achieve the remote LAP session between SWA and SWC, the following statement is correct:
- AThe configuration in the figure is already possible
- Bneed to configure the direct connection to establish TCP link
- CYou need to create a remote peer and then specify the Isr-id of the peer
- DSpecifies the Isr-id of the peer in system view
37SDN basic work process which includes the following steps? (multiple choice)
- Atopology information collection
- Bnetwork element resource information collection
- CForwarding information collection
- Dto generate internal switching routes
38the following statement on the packet in the QoS, the wrong are:
- Arouter in the receipt of data packets, may be because the CPU is busy, no way to deal with data packets, resulting in packet loss
- Bwhen the packet is scheduled to queue, it may be because the queue is filled and lead to packet loss
- Cpackets are transmitted on the link, it may be lost due to link failure and other reasons
- Dpacket loss is generally caused by the delay, when the queue is full, the general use of discard packets
39according to IP Precedence, MPLS EXP 802.2.1P information, the message can be divided into how many business types?
- A2
- B4
- C6
- D8
40in the MPL5 system, the label is released in two ways, named (multiple choice)
- Afree way
- Bindependent way
- Cconservative way
- Dorderly way
41Which of the following is the primary goal of managing the network? (Multiple choice)
- Aensures that the network user receives the desired network service quality and technical service information
- BReduced equipment removal costs
- Cto reduce the number of years of network equipment, and extend the service cycle
- Dhelps network engineers face complex network data and ensure that data is available
42for IPv4 packets, we can according to the message what information to carry out simple traffic classification? (Multiple choice)
- ADSCP information
- BIP Precedence information
- CTraffic Class
- D802.1p information
43the following description of the function of traffic off the passenger, the correct is: (multi-election) :
- Acannot be colored for packets
- Bcoloring the message
- Ccaches packets that exceed the traffic limit
- Dcannot cache packets that exceed the traffic limit
44In contrast to traffic policing, traffic shaping introduces queues to cache traffic that exceeds the limit. For traffic shaping, the following description incorrect is:
- Atraffic regulation, traffic shaping has a better anti-burst capability
- Btraffic shaping can send packets at a relatively uniform rate
- Cdue to the introduction of the queue, when congestion occurs, the message delay is relatively increased
- Dvoice service is more suitable for traffic shaping, rather than traffic policing.
45In the MPLS VPN network, when packets are forwarded, they are encapsulated with two MPLS labels. The following options describe the two-layer label. The error is: (multiple choice):
- AMPLSVPN outer label becomes private network label, inner label becomes public network label
- BMPLS VPN is assigned by the LDP protocol or statically. The inner layer label is assigned by the peer MP-BGP.
- CBy default, the outer label is ejected before the packet is forwarded to the last hop device
- DThe outer label is used to correctly send packets to the responding VPN on the PE
46The description of VRRP wrong is:
- AThe router in the VHRP group selects the master according to the priority
- BMaster router by sending free ARP packets, will be their own virtual MAC address to connect with the connected device or host
- CIf the master router fails, the backup router in the virtual router will re-elect the new master according to the priority.
- DBecause the priority range is 1-255, the priority value of the VRRP advertisement packet is 0 when the backup device is 0. Backup will discard the packet without any processing.
47The QoS service model includes: (multiple choice)
- ABest-Effort Service Model
- BIntegrated Service model
- CDifferentiated Service model
- DFIFO Service model
48In the MPLS network shown in the figure, the following description is correct: (multiple choice)
- AThe switch uses a direct connection to establish a TCP connection
- BThe neighbor's neighbor lDP ID is the port IP address
- CThe neighbor's neighbor lDP ID is the neighbor's MPLS Isr-id
- DThe switch uses Isr-id to establish a TCP connection
49The description of the default security zone for the security firewall of the USG system is correct
- Adefault security zone can be deleted
- Bdefault security zone can modify the security level
- CThe default security zone cannot be deleted, but the security level can be modified
- Ddefault security zone has 4
50Which of the following data flows are not Outbound in the firewall interdomain security policy?
- AData flow from the DMZ zone to the Untrust zone
- BData flow from the Trust zone to the DMZ zone
- CData flow from the Trust zone to the Untrust zone
- DData flow from the DMZ zone to the local area
51Configure the remote port mirroring function on the Huawei router to implement the remote port mirroring packets that can be transmitted to the monitoring device through the Layer 3 IP network. The commands are:
- AMirror-sever destination-ip 10.1.0.1 source-ip 192.168.1.1
- BMonitor-sever destination-ip 10.1.0.1 source-ip 192.168.1.1
- CObserve-sever destination-ip 10.1.0.1 source-ip 192.168.1.1
- Dsever destination-ip 10.1.0.1 source-ip 192.168.1.1
52Which of the following messages is usually unicast when the client requests an IP address through DHCP and assigns an IP address to the DHCP server? (Multiple choice):
- ADHCP OFFER
- BDHCP REQUEST
- CDHCP DISCOVER
- DDHCPACK
53VXLAN's broadcast domain is called:
- Abroadcast domain
- Bexchange domain
- Cbridge domain
- DVLAN domain
54The following options, the Agile controller on the guest account application description is wrong:
- Acan be created by the administrator
- Bcan be created by employees who have guest access rights
- Ccan be created by the receptionist
- Dcan be registered by the visitors themselves
55For the description of Network Address Port Translation (NAPT) and Conversion Only Network Address (No-PAT), the following statement is correct:
- Aafter NAPT conversion, for external users, all messages will only come from the same IP address
- BNo-PAT only supports transport layer protocol conversion
- CNAT only supports protocol address translation at the network layer
- DNo-PAT supports protocol address translation at the network layer
56The following options describe the business plan concept of the Agile Controller correctly: (multiple choice)
- AIn the service configuration, the User Control List refers to the rules defined for the user-level ACL control, the source security group, the destination security group, and the port number of the packet.
- BArranging equipment refers to the orderly guidance of the business flow of equipment, generally refers to the switch
- CService equipment refers to the equipment introduced by the layout of the business flow of security business processing equipment, including fire prevention equipment, anti-virus equipment and Internet behavior control equipment
- DThe service chain refers to the service data processed by the GRE tunnel
57Which of the following attacks does not belong to the network layer attack?
- AIP spoofing attacks
- BSmurf attack
- CARP bully attack
- DICMP attack
58LDP is a protocol specifically developed for label distributors with a variety of message types, the messages used to generate, change, and delete FEC tag mappings are:
- ADiscovery message
- BSession Message
- CAdvertisement Message
- DNotification message
59for the firewall's default security zone Trust and Untrust statement, the correct are: (multiple choice)
- AFrom the Trust zone, visit the Untrust zone is in the outbound direction
- BFrom the Trust zone, visit the Untrust zone for the inbound direction
- CTrust's security level is 85
- DThe security level for D Untrust is 50
60In the Diff-Serv network, the maximum number of values that can be defined with DSCP is:
- A3
- B6
- C8
- D64
Información
- Descripción
- IENP Test sobre IENP - 1, creado por Jorge Aguilar el 06/07/2020.
- Autor
- Jorge Aguilar
- Idioma
- English
- Visitas
- 1
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test