最新的Cisco 640-554免費考試真題

問題1

Which aaa accounting command is used to enable logging of the start and stop records for user terminal sessions on the router?

A. aaa accounting connection start-stop tacacs+

B. aaa accounting system start-stop tacacs+

C. aaa accounting exec start-stop tacacs+

D. aaa accounting commands 15 start-stop tacacs+

E. aaa accounting network start-stop tacacs+

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

The host A Layer 2 port is configured in VLAN 5 on switch 1, and the host B Layer 2 port is configured in VLAN 10 on switch 1. Which two actions you can take to enable the two hosts to communicate with each other? (Choose two.)

A. Configure switched virtual interfaces.

B. Connect the hosts directly through a router.

C. Connect the hosts directly through a hub.

D. Configure inter-VLAN routing.

正確答案: A,D

說明：（僅 Fast2test 成員可見）

問題3

How are Cisco IOS access control lists processed?

A. Permit ACL entries are matched first before the deny ACL entries.

B. The best match ACL is matched first.

C. Standard ACLs are processed first.

D. The global ACL is matched first before the interface ACL.

E. ACLs are matched from top down.

正確答案: E

說明：（僅 Fast2test 成員可見）

問題4

Which type of NAT is used where you translate multiple internal IP addresses to a single global, routable IP address?

A. dynamic PAT

B. policy NAT

C. static NAT

D. dynamic NAT

E. policy PAT

正確答案: A

說明：（僅 Fast2test 成員可見）

問題5

Which single Cisco IOS ACL entry permits IP addresses from 172.16.80.0 to 172.16.87.255?

A. permit 176.16.80.0 255.255.252.0

B. permit 172.16.80.0 255.255.248.0

C. permit 172.16.80.0 0.0.7.255

D. permit 172.16.80.0 0.0.248.255

E. permit 172.16.80.0 255.255.240.0

F. permit 172.16.80.0 0.0.3.255

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

When configuring SSL VPN on the Cisco ASA appliance, which configuration step is required only for Cisco AnyConnect full tunnel SSL VPN access and not required for clientless SSL VPN?

A. IP address pool

B. connection profile

C. SSL VPN interface

D. user authentication

E. group policy

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

What must be configured before Secure Copy can be enabled?

A. TFTP

B. AAA

C. FTP

D. SSH

正確答案: B

問題8

With which two NAT types can Cisco ASA implement address translation? (Choose two.)

A. twice NAT

B. network object NAT

C. double NAT

D. destination NAT

E. source NAT

正確答案: A,B

問題9

Which Cisco product can help mitigate web-based attacks within a network?

A. Email Security Appliance

B. Identity Services Engine

C. Adaptive Security Appliance

D. Web Security Appliance

正確答案: D

問題10

On which protocol number does Encapsulating Security Payload operate?

A. 47

B. 06

C. 51

D. 50

正確答案: D

說明：（僅 Fast2test 成員可見）

問題11

Which technology is the most effective choice for locally mirroring ports to support data investigation for a single device at the data layer?

A. SPAN

B. RSPAN

C. ERSPAN

D. RMON

正確答案: A

問題12

Which statement best represents the characteristics of a VLAN?

A. A VLAN can only connect across a LAN within the same building.

B. A VLAN is a logical broadcast domain that can span multiple physical LAN segments.

C. Ports in a VLAN will not share broadcasts amongst physically separate switches.

D. A VLAN provides individual port security.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題13

What is a possible reason for the error message?

A. The router is a new device on which the aaa new-model command must be applied before continuing.

B. The command is invalid on the target device.

C. The command syntax requires a space after the word "server".

D. The router is already running the latest operating system.

正確答案: A

問題14

Which three protocols are supported by management plane protection? (Choose three.)

A. EIGRP

B. HTTPS

C. OSPF

D. SMTP

E. SNMP

F. SSH

正確答案: B,E,F

最新的Cisco Implementing Cisco IOS Network Security (IINS v2.0) - 640-554免費考試真題

聯系我們

站內鏈接

最新更新