[SWA-Ethernet1/0/1]port hybrid vlan 10 tagged C.[SWA-Ethernet1/0/1]undoportlink-type [SWA-Ethernet1 /0/1 ]portlink-type
hybrid[SWA-Ethernet1/0/1]port hybrid pvid vlan 20 [SWA-Ethernet1/0/1]port hybrid vlan 10 tagged D.[SWA-Ethernet1/0/1]port link-type hybrid E.以上各项均不正确
Answer: ABC
41.交换机SWA的Ethernets端口配置如下： interface Ethernet 1/0/1 port link-type trunk
port trunk permit vlan 10 port trunk pvid vlan 20
现在要把交换机SWA的Ethernet1/0/1端口修改为Hybrid端口，PVID为VLAN20,且在发送VLAN20的
数据帧是不打标签，在发送VLAN 10的i据侦时打-签，则下面的配置过程正确的是 (选择一项
或多项）
A.[SWA-Ethernet1/0/1]port link-type access [SWA-Ethernet1/0/1]port access vlan 20 [SWA-Ethernet1/0/1]port link-type hybrid
[SWA-Ethernet1/0/1]port hybrid vlan 10 tagged B.[SWA-Ethernet1/0/1]portlink-type access [SWA-Ethernet1/0/1]port link-type hybrid [SWA-Ethernet1/0/1]port hybrid pvid vlan 20 [SWA-Ethernet1/0/1]port hybrid vlan 10 tagged C.[SWA-Ethernet1/0/1]undoportlink-type [SWA-Ethernet1 /0/1 ]portlink-type
hybrid[SWA-Ethernet1/0/1]port hybrid pvid vlan 20 [SWA-Ethernet1/0/1]port hybrid vlan 10 tagged D.[SWA-Ethernet1/0/1]port link-type hybrid E.以上各项均不正确 Answer: A
42.交换机SWA使用出厂缺省配置现在要把交换机SWA的Ethernet^端口配置为Trunk端口，PVID
为VLAN20,且允许VLAN10 下面的配置过程正确的是_ A.[SWA]vlan10 [SWA-vlan10]quit [SWA]vlan 20
[SWA-vlan20]port Ethernet 1/0/1 [SWA-vlan20]quit [SWA]interface Ethernet 1/0/1
[SWA-Ethernet1/0/1]port link-type trunk
11
[SWA-Ethernet1/0/1]port trunk permit vlan 10 B.[SWA]vlan10 [SWA-vlan10]quit [SWA]vlan 20 [SWA-vlan20]quit
[SWA]interface Ethernet 1/0/1
[SWA-Ethernet1/0/1]port access vlan 20 [SWA-Ethernet1/0/1]port link-type trunk [SWA-Ethernet1/0/1]port trunk permit vlan 10 C.[SWA]vlan10 [SWA-vlan10]quit [SWA]vian 20 [SWA-vlan20]quit
[SWA]interface Ethernet 1/0/1
[SWA-Ethernet1/0/1]port link-type trunk [SWA-Ethernet1/0/1]port trunk pvid vlan 20 [SWA-Ethernet1 /0/1 ]port trunk permit vlan 10 D.[SWA]interfaceEthernet 1/0/1 [SWA-Ethernet1/0/1]port link-type trunk [SWA-Ethernet1/0/1]port trunk pvid vlan 20 [SWA-Ethernet1/0/1]port trunk permit vlan 10 [SWA-Ethernet1/0/1]quit [SWA]vlan 10 [SWA-vlan10]quit[SWA]vlan 20 Answer: CD
43.园区网中实施网络安全管理措施时，如下哪些属于针对非法访问网络资源而部署的网络访问控制技术或 措施-
A.添加防火墙 B.部署端点准入防御 C.Portal认证
D.添加IAS设备(IllegalAccess System,非法访问系统） Answer: ABC
44.在如图所示的交换网络中，三台交换机都只有缺省VLAN1,三台交换机的互联端口都为Trunk,且允许
所有VLAN通过，三台交换机都开启了全局和端口的GVRP功能在交换机SVVA上创建了 VLAN10,在
交换机SWC上创建了 VLAN20,在三台交换机上査看各Trunk端口状态信息，下面显示正确的是
A.[SWA]display interface Ethernet 1/0/1 Ethernetl/0/1 current state: UP ...... PVID: 1
12
Mdi type: auto
Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10,20 VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q B.[SWB]display interface Ethernet 1/0/1 Ethernetl/0/1 current state: UP ...... PVID: 1 Mdi type: auto Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10,20 VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q C.[SWB]display interface Ethernet 1/0/2 Ethernetl/0/2 current state: UP ...... PVID: 1
Mdi type: auto Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10,20 VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q D.[SWC]display interface Ethernet 1/0/1 Ethernetl/0/1 current state: UP ...... PVID: 1
Mdi type: auto
Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10,20 VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q Answer: A
45.在如图所示的交换网络中，三台交换机都只有缺省VLAN 1,三台交换机的互联端口都为Trunk,且允许
所有VLAN通过，三台交换机都开启了全局和端口的GVRP功能在交换机SVVA上创建了 VLAN10,在
交换机SWC上创建了 VLAN20,在三台交换机上査看各Trunk端口状态信息，下面显示正确的是
(选择一项或多项）
13
A.[SWA]display interface Ethernet 1/0/1 Ethernetl/0/1 current state: UP ...... PVID: 1
Mdi type: auto
Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10
VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q B.[SWB]display interface Ethernet 1/0/1 Ethernet1/0/1 current state: UP ...... PVID: 1
Mdi type: auto Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10
VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q C.[SWB]display interface Ethernet 1/0/2 Ethernet1/0/2 current state: UP ...... PVID: 1
Mdi type: auto
Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10
VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q D.[SWC]display interface Ethernet 1/0/1 Ethernet1/0/1 current state: UP ...... PVID: 1
Mdi type: auto Link delay is 0(sec) Port link-type: trunk
VLAN passing: 1 (default vlan), 10
VLAN permitted: 1 (default vlan), 2-4094 Trunk port encapsulation: IEEE 802.1q
Answer: B
46.在图示的组网模型中，配置完成后，发现用户认证失败，那么该故障可能的原因是 A.RADIUSServer上没有配置该用户名
B.RADIUSClient上没有指定缺省域
C.RADIUSServer与RAD旧s Client之间的报文共享密钥不一致 D.RADIUSServer与RAD旧s Client之间的网线没有连接
14
Answer: ABCD
47.交换机SWA上启用了GVRP,设置了 Hold定时器的值为100厘秒，现在要修改其他定时器的值，下列配置正确的是
A.[SWA-Ethernet1/0/1]garptimer join 50 B.[SWA-Ethernet1/0/1]garp timer join 200 C.[SWA-Ethernet1/0/1]garptimer leave 400 D. [SWA]garp timer leaveall 415 Answer: BC
48.如果交换机的某个端口下同时开启了基于端口的VLAN、基于MAC地址的VLAN、基于协议的VLAN
和基于IP子网的VLAN,则缺省情况下，VLAN将按照顺序进行匹配 A.端口VLAN?MAC VLAN?协议 VLAN?IP 子网 VLAN B.端口VLAN?IP 子网 VLAN?-K>iy VLAN?MAC VLAN C.MACVLAN?端口 VLAN?协议 VLAN^^ 子网 VLAN D.MACVLAN? 子网 VLAN?协议端口VLAN Answer:D
49.如下哪些报文是TACACS+的认证报文- A.start B.Request C.Rsponse D.Continue Answer: AD
50.下面哪种划分VLAN的方法具有当用户物理位置移动时，即从一个交换机换到其他的交换机时，VLAN
不用重新配置的优点-（选择一项或多项） A.基于端口的VLAN B.基于MAC地址的VLAN C.基于协议的VLAN D.基于IP子网的VLAN Answer: BCD
51.关于根桥保护，以下说法正确的有
A.没有配置根桥保护时，根桥收到优先级更高的BPDU会失去根桥的地位
B.配置根桥保护后，端口收到了优先级高的BPDU,这些端口的状态将被设置为Listening不再 转发报文
C.端口会经历从Listening状态到Fonwarding状态的转变，在此期间如果端口没有收到更优的BPDU 时，端口会恢复原来的转发状态 D.根桥保护在端口视图配置 Answer: B
15