GB0-391 Constructing Secure optimized WANs v2.0 Exam Training Material

dumps2022-09-16T06:09:54+08:00

Constructing Secure optimized WANs v2.0 GB0-391 exam training material is online, which is helpful for you to earn H3CSE Routing & Switching certification. There are 50 single/multiple choice questions, judgment questions, and gap-filling questions in the real H3C GB0-391 exam, and you have 60 minutes to write the test. The required passing score for the GB0-391 exam is 600. Free Constructing Secure optimized WANs v2.0 GB0-391 exam training material is below.

Page 1 of 14

1. Which of the following statements about the access network is correct is _____

access into generally refers to the connection between the user and the network operator of the network close to the user central office

Compared with backbone network, access network is often the bottleneck of network transmission speed

access network typically includes a user transmission system, terminal multiplexers or network,

The access network can also be Ethernet

2. Among the control messages defined by the MPCP protocol, the one sent by the OLT is ______ .( Choose one or more )

GATE

Report

Register_Req

Register_Ack

3. The following statements about VLAN planning in the EPCNI network are correct: _____ ( choose one or more )

PSPV manner the same user for all services use the same one VLAN to be labeled, its implementation can not be guaranteed quality of service.

In PUPV mode, all users in the cell share the same business vlan id .

PUPSPV mode can accurately identify users and services, and each user’s business has a corresponding vlan id identification.

The deployment of PUPSPV mode requires equipment to support QinQ technology.

4. Compared with IPsec VPN , which of the following advantages does SSL VPN have ? ( Choose one or more )

No client

-free installation, maintenance-free client

speed of fast

High -fine-grained access control

5. Among the packets encapsulated by the GRE protocol, the payload protocol is the IPX protocol, and the bearer protocol is the IP protocol.The encapsulation sequence of the packet from the link layer to the payload data is the link layer ____GRE____ payload data.

lP , IPX

IPX , IP

IP , IP

IPX , IPX

6. Which of the following statements about PKI workflow is correct is ____ .

permit book application made by the entity

solid body status reviewed by the CA to complete

Certificate book by the RA issued

solid body needs to revoke the certificate CA application

7. Which of the following statements about IKE is correct is ____ .( Choose one or more )

The first phase of IKE exchange mode has main mode and quick mode

IKE SA is generated when the second phase of IKE is completed

The exchange of keys in both IKE modes requires authentication

IKE uses an asymmetric key algorithm when exchanging keys

8. The following description does not belong to SSL handshake protocol layer function are ____ .

Negative responsible for the establishment, maintenance SSL session

insurance certificate, reliable data transmission

isobutyl the normally turned off SSL connection

verify the integrity of the card data

9. On what device in the MPLS network does the MPLS forwarding medium voltage label ( PUSH ) operation occur ?

The packet enters the MPLS network at the LER on device

On all LSR devices in the middle of the MPLS network

The packet leaves the MPLS network address LER on device

On all devices of the MPLS network

10. The wrong description of the relationship between RT and RD is ____ .

with a VPN to RT value must RD same value

the RD value of their respective VPN of RT attributes Import Target property or Export Target a property list

same on a device different VPN of RD value and the RT attribute values can not be configured to be the same

Page 2 of 14

11. Which of the following information about the private network route learned from the remote end through the MP-BGP protocol will be recorded by the PE ?

RT Import Target attribute of the private network route

The private network label of the private network route

RD value of the private network route

12. The changes of MP-BGP protocol relative to BGP protocol include

The new increase MP REACH NLRI attribute

The new increase MP UNREACH NLRI attribute

The new increase Extended Communities attribute

new growth VPNv4 address family

13. What is correct about DOS attacks is ____ .

DOS attacks are aimed at reducing the ability of the attacked system to provide services

on to DOS attacks in the TCP FLOOD attack, you can use TCP proxy mechanism to defense

for at DOS attack in the FTP FLOOD attack can be taken to limit the number of connections per second to defense

on to DOS attacks can be controlled by configure access lists on a network device to defense

14. Which of the following are measurement standards for voice quality ?

MOS

PESQ

PQSM

PSQM

15. A company PBX via a T1 connection line to the telephone network operators, due to expansion of company size, needs to be able to meet the concurrent 50 -way voice calls, you need to re-apply for ____ root T1 line ? ( Fill in Arabic numerals )

16. In a VoIP network where calls are made through a gatekeeper , what will happen when the gatekeeper cannot determine the location information of the called terminal within its jurisdiction ?

The calling party replies to the gatekeeper rejection ( GRJ ) message

Reply to the caller with a location rejection ( LRJ ) message

Reply to the caller with a permission rejection ( ARJ ) message

to the answers are right

17. During the SIP UA registration process, a response message with a status code of 401 was received, stating that ____?

UA has been registered on the registration server normally

Table showing UA sends a request message packet server sets the field do not know, but it has been ignored server, UA still successfully registered

Table shows the server needs UA transmit authentication information, UA after receiving the response, it would Laid own authentication information registration request sent by a second server to register

Table shows UA request message sent by the server contains the fields do not know, registration failed

18. The following commands are configured on the S3610 switch:

qos map-table dotlp-ip

import 1 export4

import 2 export 5

interface Ethernet1/0/8

port link-mode bridge

port link-tpe trunk

port trunk permit vlan 1 4

qos trus t dotlp

interface Ethernet1/0/9

port link-mode bridge

port link-tpe trunk

port trunk permit vlan 1 4

qos gts an cir 65000 cbs 2000000

Then when the traffic is 40Mbps , the packets with the vlan id of 4 and the 802.1p priority are 1 , and the packets with the traffic of 40Mbps with the vlan id of 4 and the 802.1p priority of 2 enter at the same time from port E 1/0/8 , When forwarding from port E1/0/9 , which of the following statements is correct is ____ .( Choose one or more )

80Mbps packets are forwarded normally

Packet traffic shaping is 65Mbps for forwarding

Packets with 802.1p priority 1 have packet loss on the outgoing port E1/0/9

All packets with 802.1p priority 1 are stored out of port E1/0/9 and forwarded

Packets with 802.1p priority 2 have packet loss on outbound port E1/0/9

All packets with 802.1p priority 2 are forwarded on the outgoing port E1/0/9

portions partial misconfigured

19. Use the command on the MSR router:

dis qos wfq interface GigabitEthernet 0/1

Get the following information:

Interface: GigabitEthernet0/1

Output queue: ( Urgent queuing: Size/Length/Discards ) 0/100/0

Output queue: ( Protocol|queuing: Size/Length/Discards ) 0/500/0

Output queue: ( Weighted Fair queuing: Size/Length/Discarcds ) 1023/1024/52719

Hashed b DSCP

Hashed queues 1/2/64 ( Active/Max active/Total )

Then the correct one in the following statement is ____ .

end port using the WFQ queues, the weight type DSCP

end port using the WFQ queues, the weight of type IP priority

When the number of queues is active before 2

calendar history activated off the maximum number of queues is 2

team column a maximum length of 1024 , the current data hold chamber, and packet loss

20. In the MSR router configuration command is as follows:

acl number 2001

rule o permit source 19 2.168.2.0 0.0.0.255

acl number 2002

rule o permit source 192.168.3.0 0.0.0.255

acl number 2003

rule o permit source 192.168.0.0 0.0.0.255

#

traffic classifier 2 operator or

if-match acl 2001

if-match classifier 1

traffic classifier 1 operator and

if-match acl 2002

if-match acl 2003

#

traffic behavior 2

filter deny

#

qos polic 2

classifier 2 behavior 2

#

interface GigabitEthernet0/1

port link-mode route

ip address 192.168.1.1 255.255.255.0

qos appl polic 2 0utbound

When the source address are 192.168.2.2.192.168.3.2.192.168.0.2 packets from the port G0 / 1 forwarding outwardly, the following statement is correct ____ .

Packets with the source address of 192.168.2.2 are forwarded normally

Packets with source address 192.168.3.2 are forwarded normally

Packets with the source address of 192.168.0.2 are forwarded normally

three message by the flow are blocked

Page 3 of 14

21. The configuration commands on the MSR router are as follows :

acl number 2000

rul e o permit source 192.168.0.0 0.0.0.255

acl number 2002

rule o permit source 192.168.2.0 0.0.0.255

#

traffic classifier 2 0perator and

if-match acl 2002

traffic classifier l operator and

if-match acl 2000

##

interface GigbitEthernet0/1

port link-mode route

duplex full

speed 10

ip address 192.168.1.1 255.255.255.0

qos reserved-bandwidth pct 90

qos appl polic test outbound

When the traffic rates of packets with source addresses of 192.168.0.2 , 192.168.2.2 , and 192.168.3.2 are 4Mbps , 4Mbps , 5Mbps , and no other background traffic is forwarded from port G0/l .

The incorrect statement under the team is ____ .

The forwarding rate of packets with the source address of 192.168.0.2 is about 4Mbps

The forwarding rate of packets with the source address of 192.168.0.2 is about 3Mbps

The forwarding rate of packets with the source address of 192.168.0.2 is about 2.7Mbps

The forwarding rate of packets with the source address of 192.168.2.2 is about 4Mbps

The forwarding rate of packets with the source address of 192.168.2.2 is about 3Mbps

The forwarding rate of packets with the source address of 192.168.2.2 is about 2.7Mbps

22. Based on SOA network architecture to enterprise IT systems into which of the following levels ? ( Select one or more )

mesh network layer

will then layer

should application layer

base infrastructure layer

23. Based on SOA network architecture to enterprise IT systems into which of the following levels ? ( Select one or more )

shall by layer

business service layer

mesh network layer

service service layer

24. Based on SOA network architecture to enterprise IT systems into which of the following levels ? ( Select one or more )

the number of data layers

service service layer

business service layer

lP network layer

25. Which of the following statements about SOA and IToIP is correct is ____ .

SOA solutions to the requirements of IT infrastructure integration, unified web-based technology to build IT infrastructure platform.

SOA is based on the network, eliminates the information gap caused by heterogeneous systems, integrates various services such as storage, security, and multimedia, and realizes the componentization and resourceization of IT infrastructure.

The IToIP solution embodies the core idea of SO

IToIP allows flexible, fast and efficient construction of enterprise intelligent applications, and can quickly adapt to changes in enterprise business processes.

26. The following information about IToIP The mistake is ____ .

IToIP requires an IT system to be constructed with an IP network as the infrastructure .

various kinds of IT resources can easily share and use standard lP infrastructure, to achieve further integration of various technologies and applications of communications, computing, storage, networking and so on.

IToIP closely connects applications and infrastructure, greatly improving the operating efficiency of IT systems.

based on IToIP built IT system users can create a standard, compatibility, security, intelligent and manageable IT environments.

27. xz company requires to build its network based on modular enterprise network architecture.Company Z has 1 R&D base in Shenzhen and Xi'an , and an office building in Beijing and Shanghai ; it has offices with more than 50 people in 23 capital cities ; it has small offices with no more than 8 people in 200 small and medium-sized cities .There are usually more than 200 market and technical personnel on business trips at any given time .Company Z strictly prohibits employees from using the company network to visit websites that are not related to work.According to these circumstances, the network module that Z company should have is ____ .

Large type branch network

far away / distributed office network

Internet access

dedicated line / packet switched access

28. xz company requires to build its network based on modular enterprise network architecture. Z company in Shenzhen and Xi'an with 1 R & D base, with an office in Beijing and Shanghai ; at 23 with more than capital cities 50 person office ; the 200 has no more than smaller cities 8 people in a small office j There are usually more than 200 market and technical personnel on business trips at any given time .Due to environmental and cost issues, some offices cannot access the headquarters through dedicated lines or packet-switched wide area network connections.According to these circumstances, the network module that Z company should have is ____ .

Large type branch network

dedicated line / packet switched access

far away / distributed office network

VPN access into

29. XZ company requires to build its network based on the modular enterprise network architecture. Z company in Shenzhen and Xi'an each 1 R & D base ; save Beijing and Shanghai have an office building ; save 23 provincial capital cities with more than 50 people in the office ; the 200 has no more than smaller cities 8 small office person ; At any given time, there are usually more than 200 marketing and technical personnel on business trips, and some of them are often located in areas lacking Internet access and can only dial in to the headquarters through the telephone network.Due to environmental and cost issues, some offices cannot access the headquarters through dedicated lines or packet-switched wide area network connections.According to these circumstances, the network module that Z company should have is _____ .

Dial Number Access

An all-authentication

VPN access

large type branch network

30. The advantages of modular network architecture include ____ .( Choose one or more )

taken on behalf of the traditional hierarchical network model, to facilitate planning and deploying the network.

allowed to share data, resources and capacity among many different application functions or applications, participate in business processes.

Yun Xu dynamically invoked through open interfaces IT resources to achieve the standard, compatibility, security, intelligent and manageable IT environments.

for each module can be separately planning and deployment, network functions can be added or removed, and conducive to building a complex network module by way of additions and deletions.

Page 4 of 14

31. The following functions of the convergence layer are ____ .( Choose one or more )

owns a large number of interfaces, and for the final connected user computer

access into the security control

High -speed packet-switched

complex routing strategies complicated

32. The following belong to the core layer function is ____ .( Choose one or more )

owns a large number of interfaces, and for the final connected user computer.

access into the security control

High -speed packet-switched

will be the routing policy

33. The following are functions of the access layer ____ .( Choose one or more )

owns a large number of interfaces, and for the final connected user computer

access into the security control

High -speed packet-switched

complex routing strategies complicated

34. The advantages of the hierarchical network model include ___ .( Choose one or more )

by strong network scalability

provide high network throughput

drop low-end delay

will be to maintain the network of

35. Among the broadband access transmission media, the highest achievable transmission rate is ____ .

same coaxial cable

Copper quality UTP

no radio waves

optical fiber

electric power line

36. Among the following broadband access transmission media, the ones that are more suitable for covering remote areas without traditional communication lines include

same coaxial cable

Copper quality UTP

no radio waves

optical fiber

electric power line

37. Among the following fiber access methods, the highest degree of fiberization is

FTTC

FTTH

FTTB

FTTA

38. The following options belong to the co- side equipment is ____ .

access into the switch

access the server

cable modem

DSLAM

machine top box

39. The CPE in the following options is ____ .

access into the switch

access the server

Wide band router / modem

DSLAM

machine top box

cable mode m

40. Which of the following PPPoE packets may contain valid PPP Session-ID information ?

PADI ( PPPoE Active Discover Initiation )

PADO ( PPPoE Active Discover Offer )

PADR ( PPPoE-Active Discover Request )

PADS ( PFoPoE Active Discover Session-Confirmation )

PADT ( PPPoE Active Discover Ter minate )

Page 5 of 14

41. In the PPPoE negotiation process, which of the following PPPoE messages must contain Service-Name information ?

PADI ( PPPoE Active Discover Initiation )

PADO ( PPPoE Active Discover Offer )

PADR ( PPPoE Active Discover Request )

PADT ( PPPoE Active Discover Terminate )

42. In the PPPoE the PPP Session price segment, PPPoE Client and PPPoE server Ethernet data frames exchanged between an object MAC address may be ____ .

widely broadcast MAC address

Group multicast MAC address

The MAC address of the PPPoE client

The MAC address of the PPPoE server

43. Please order under PPPoE Client complementary set the correct parameters :

[HG] dialer-rule 1 ip permit

[HG] interface dialer 2

[HG-Dialer1] dialer user userl

[HG-Dialer1] dialer-group____1____

[HG-Dialer1] dialer bundle ____V___

[HG-Dialer1] ip address ppp-negotiate

[HG-Dialer1] ppp pap local-user user1 password simple pass1

[HG] interface ethernet 0/0

[HG-Ethernet0/0] pppoe-client dial-bundle-number 10

.1 , 10

44. In the Ethernet access application, the correct statement about the deployment of the access point AN and the aggregation equipment AGG at the edge of the operator's access network is ____ .

the AN taken when a switcher, three switches can team with respect to the end-user access to a higher density to achieve

When AN adopts a Layer 2 switch, it needs to support and deploy complex Layer 2 isolation and security features on AN and AGG

When AN adopts a three-layer switch, it is more helpful to control the scope of the broadcast domain than a two-layer switch

When AN uses a three-layer switch, the maximum number of user terminals that an AGG device can connect to will no longer be limited by the number of its own MAC address table entries

45. In PPPoE applications, the Ethernet MAC address of the access end is determined in the _____ phase of PPPoE .( Please fill in English )

Discovery

46. Ethernet 1000BASE-T cable uses a standard _____ most large transmission distance is ______ .

2 pairs of Category 5 UTP twisted pair, 100m

multi- mode fiber, 2000m

4 pairs of Category 3 UTP twisted pair, 100m

single -mode optical fiber, 5000m

4 pairs of Category 5 UTP twisted pair, 100m

2 pairs of STP twisted pair, 25m

47. The cable used in the Ethernet 1000BASE-LX standard is _______ The maximum transmission distance is ________ .

2 pairs of Category 5 UTP twisted pair, 100m

multi- mode fiber, 550m

4 pairs of Category 3 UTP twisted pair, 100m

single -mode optical fiber, 5000m

4 pairs of Category 5 UTP twisted pair, 100m

2 pairs of STP twisted pair, 25m

48. In a typical PPPoE network, both PPPoE Server and PPPoE Client are MSR routers.If you want PPPoE to work in permanent online mode, which of the following configurations are required ? ( Choose one or more ) .

the PPPoE Serve, R & lt on the configuration: [the RTA-virtual- Templatel] PPPoE -client-Number Dial-the bundle.1

Configure on PPPoE Client : [HG-Dialer l] pppoe-client dial-bundle-number l

Configure on PPPoE Client : [HG-Ethernet0/0] pppoe-client dial-bundle-number 1

Configure on PPPoE-Server : [RTA-Virtual-Templatel] pppoe- client dial -bundle-number l idle-timeout 65535

Configure on PPPoE Server : [RTA- EthernetO/O] pppoe-client dial-bundle-number 1

Configure on PPPoE Client : [HG-Dialerl] pppoe-client dial-bundle-number l idle -timeout O

49. In a typical PPPoE networking, PPPoE Server and PPPoE Client are for the MSR router, if you want PPPoE session idle 3 minutes after the automatic disconnection, which requires the following configuration ( choose the one or more ) .

Configure on PPPoE Server : [RTA-Virtual--Template1] pppoe-client dial-bundle-number l idle -timeout 180

Configure on PPPoE Client : [HG-Dialerl] pppoe-client dial-bundle-number l idle-timeout 3

Configure on PPPoE-Client : [HG-Dialerl] pppoe -client dial-bundle-number l idle-timeout 3

Configure on PPPoE-Server : [RTA-Virttual-Template1] pppoe-client dial-bundle-number l idle-timeout 3

Configure on PPPoE Server : [RTA-Ethernet0/0] pppoe-client dial-bundle-number l idle -timeout 180

Configure on PPPoE Client : [HG-Ethernet 0/0]pppoe-client dial-bundle-number l idle-timeout 180

50. In the EPON system, the port that the ONU device connects to the user is

OLT

ONU

NNI

UNI

Page 6 of 14

51. EPON ranging and delay compensation technology is the key to upstream channel multiplexing, which is mainly realized through the _____ process defined by MPCP .( Choose one or more )

Discovery Processing

Regis tration Processing

Report Processing

Gate Processing

52. There are a large number of two-way video and voice communication needs between branches and headquarters of a company, if you want to choose a broadband access to connect branch offices and headquarters, the following options are the most ideal of a _____ .

APON/BOPN

ADSL

EPON

53. Among the control messages defined by the MPCP protocol, the one sent by the ONU is _____ .( Choose one or more )

The GATE

Report

Register_Req

54. During the ONU registration process, the MPCP control message sent through the unicast channel includes _____ .( Choose one or more )

P through GATE

Report

Register_Req

Register_Ack

hair now GATE

55. In the ONU registration process, comprising L the LID ( the Logical Link ID , Logical Link Flags ) control message comprises information ____ .( Choose one or more )

P through GATE

Report

Register_Req

hair now GATE

56. In FIG illustrated EPON networking, the OLT to the network all the ONU ( the ONU1 to ONUn ) to transmit data, the following statements is correct is ____ .( Choose one or more )

Line Road 0 have all the ONU data

Line Road 1 on which all the ONU data

wire passage 2 is only to ONU2 data

Line Road 0 ~ n- downlink data is the same

57. When the link type of the ONU port is Access , its processing method for the upstream message is ____ .

only allowed without belt tag packets through, and packets add the default VLAN 's tag

Only the packets with the default VLAN tag are allowed to pass and go to the tag

for without receipt of the Tag message, add the default VLAN tag , to receive with tag packets forwarded directly

only allowed with a tag messages by

58. When the link type of the ONU port is Access , its processing method for downstream messages is ____ .

Only allow packets without tags to pass, and add the default VLAN tag to the packets

Only the packets with the default VLAN tag are allowed to pass and go to the tag

for without receipt of the Tag message, add the default VLAN Tag , to receive with Tag packets forwarded directly

Only allow tagged messages to pass

59. When the link type of the ONU port is Trunk , its processing method for upstream packets is _____ .

only allowed without Tag packets to pass through, and the packets add the default VLAN of Tag

Only allow the packets with the default LAN Tag to pass and go to the tag

for without receipt of the Tag message, add the default VLAN Tag ; for received with Tag packets forwarded directly

Only allow tagged messages to pass

60. When the link type of the ONU port is Trunk , its processing method for downstream messages is _____ .

only allowed without Tag packets to pass through, and the packets add the default VLAN of Tag

Only allow the packets with the default VLAN tag to pass and remove the tag

for without receipt of the Tag message, add the default VLAN Tag ; for received with Tag packets forwarded directly

Only allow tagged messages to pass

Page 7 of 14

61. In EPON applications, if the home gateway or switch on the user side is provided by the operator and unified VLAN management, then the VLAN operation mode on the UNI port should be configured as ____ .

VLAN tagging mode

VLAN transparent transmission mode

VLAN Translation Mode

VLAN Tag mode

62. Among the commonly used VLAN division methods of EPCN networks , which method uses the double-layer VLAN planning ?

PUPV

PSPV

PUPSPV

PSV

63. For an 860MHz HFC network with an optical node covering 1,000 households , when 64QAM modulation is used, the network bandwidth is all used for point-to-point services.The average household bandwidth is ____

7Mbps

5Mbps

3.5Mbps

12.5Mbps

10Mbps

64. The frequency range of the baseband data signal used by common EoC technology is generally ____

87MHz ～ 108MHz

0 ～ 30MHz

5 ～ 65Mhz

110MHz~ 1000 MHz

65. According to the industry standard of the People's Republic of China G/T 106-1999 "Technical Specifications for Cable TV Broadcasting Systems", the _____ frequency band is used to transmit traditional analog TV programs, digital TV programs and VOD .

87MHz ～ 108MHz

0 ～ 30MHz

5 ～ 65MHz

110MHz ～ 1000 MHz

66. Which of the following statements about EPCN are correct?

EPCN is a passive EoC technology.The user terminal is a passive device, and the system transmission loss tolerance is low, which limits its application scope to a certain extent.

EPCN is an active EoC technology, and the user terminal is an active device, thus avoiding the limitation of the network topology without passive EoC technology.

EPCN system main memory deployment coaxial cable distribution network portion of the network, the HFC backbone mainly EPON technology fit therewith.

EPCN conforms to HFC- based broadband access specifications such as DOCSIS 1.0/1.1/2.013.0 .

67. In the EPCN network as shown in the figure , when sending data from CLT to users 1 , 2 , 3 , which of the following statements is correct?

terminating end user 1 receives packet 1 , 2 , 3 , but it accepts only the packet 1 , the packet is discarded 2 and packages 3

CNU1 will only receive package 1

CNU1 will receive packets 1 , 2 , and 3 , but it will only send packet 1 to end user 1 , and discard packets 2 and 3

terminating end user 1 will only receive the packet 1

CNU1 will receive packages 1 , 2 , and 3 and send them all to the end user 1

68. Among the following DSL technologies, the highest transmission rate is

ADSL

ADSL2+

VDSL

SHDSL

HDSL

69. In the PPPoE application of ADSL , when the CPE side uses MSR router + ADSL Modem for networking, and the CO side DSLAM uses ATM for uplink, which interfaces need to be configured on the router on the CPE side ?

DSL interface

Yi Tai Ethernet port

Virtual-Ethernet

Virtua l-Template

dial number Interface

70. In ADSL of PPPoE applications, when the CPE side using MSR router + ADSL interface card for networking, CO.'S side DSLAM using ATM uplink time, deposit CPE needs to interface on the router which side ( irrespective CPE side LAN Connection ) ?

DSL interface

Yi Tai Ethernet port

Virtual-Ethernet

Virtual-Template

dial number Interface

Page 8 of 14

71. In the PPPoE application of ADSL , when the CPE side uses the MSR router + ADSL interface card for networking, and the CO side DSLAM uses ATM for uplink, which interfaces need to be PPPoE- related on the CO side centralized router ( PPPoE Server ) Configuration ?

ATM interface

Yi Tai Ethernet port

Virtual-Ethernet

Virtual-Template

dial number Interface

72. In ADSL of PPPoE applications, when the CPE side using MSR router + ADSL interface card for networking, co side DSLAM make use IP rows on the co centralized router side ( PPPoE Server ) need to be on which interfaces PPPoE relevant The configuration ?

ATM interface

Yi Tai Ethernet port

Virlual-Ethernet

Virtual-Template

dial number Interface

73. The frequency band used to transmit data in ADSL2+ is ____ .

20KHz ～ 1MHz

0 ～ 4 KHz

1.1MHz ～ 2_2MHz

20KHz ～ 2.2MHz

High in 10MHZ

74. Among the following ADSL standards, the one that does not need to use a splitter is ____ .( Choose one or more )

ITU 992.1

ITU 992.2

ITU 992.3

ITU 992.4

75. An operator hopes to deploy ADSL ( ADSL2 ) to kill the system in a community with relatively dense users and short transmission distance .Users do not require high bandwidth, and pay more attention to its economy and ease of installation and maintenance.

Based on the above requirements, when choosing ADSL ( ADSL2 ) standard, the ideal is ____ .( Choose one or more )

ITU 992.1

ITU 992.2

ITU 992.3

ITU 992.4

76. The theoretical transmission rate of ADSL data is related to which of the following options ?

Line Road activate consultations

Number of sub- carrier channels

modulation system rate

Sub- carrier channel rate

77. The VPI/VCI parameters of ADSL connection are negotiated and determined in ____ .

Line Road activate

DMT modulation

Jian Li low-level link VCC

PPPoE negotiation

78. Common VPI/VCI values in ADSL applications include ____ .( Choose one or more )

0/30

0/35

0/32

0/16

79. Which of the following statements about the improvement of ADSL2 relative to ADSL is correct: ( Choose one or more )

The frequency band of ADSL2 is twice that of ADSL

At the same transmission rate, ADSL2 can transmit longer distances than ADSL

Compared with ADSL, ADSL2 adds a new operating mode

ADSL can support flexible bandwidth binding function, such as IMA ( Inverse Multiplexing forATM , ATM inverse multiplexing )

80. Among the following VPN technologies, those belonging to the third layer VPN are ____ .( Choose one or more )

L2TP VPN

BGP/MPLS VPN

VLL

IPSec VPN

Page 9 of 14

81. The following VPN technology, belonging to the second layer of VPN are ____ .( Choose one or more )

VPLS

VLL

GRE VPN

IPSec VPN

82. Which of the following VPN technologies are suitable for enterprise employees to remotely access the enterprise private network through the Internet ? ( Choose one or more )

SSL VPN

L2TP VPN

GRE VPN

BGP/MPLS VPN

83. Which of the following VPN technologies are suitable for corporate employees on business trips to remotely access the corporate network through the Internet ?

BGP/MPLS VPN

GRE VPN

SSL VPN

VLL

84. The incorrect description of L2TP VPN and GREVPN is ____ .( Choose one or more )

all point to point VPN

Both support tunnel verification

Both support dynamic address acquisition

are based on UDP encapsulation

85. About L2TP VPN and GRE VPN are correct is ____ .( Choose one or more )

all point to point VPN

Both support tunnel verification

All belong to L3 VPN ( Laer 3 VPN , Layer 3 VPN ) technology

are based lP package

86. Which description is correct about L2TP VPN and SSL VPN?

All need to install and maintain the client

Both support Web access

All support lP access mode

are based on UDP encapsulation

87. What is incorrect about the description of L2TP VPN and SSL VPN?

have no need to install, maintain client

Both support Web access

All support lP access mode

are based on TCP package

88. According to the different network levels, VPN can be divided into the following types

Intranet VPN

Internet VPN

Layer2 VPN

Layer3 VPN

89. According to different operating modes, VPN can be divided into the following types____ .

Intranet VPN

Internet VPN

CPE-Based VPN

Network-Based VPN

90. The following of GRE VPN and BGP / MPLS VPN correctly described ____ .

Both can separate the address space

both point to point tunnel

GRE VPN can separate address space, BGP/MPLS VPN cannot separate address space

GRE VPN cannot separate address space, BGP/MPLS VPN can separate address space

Page 10 of 14

91. Hereinafter GREVPN and BGP / MPLS VPN described above are correct ____ .

Both can separate the address space

both point to point tunnel

GREVPN does not separate address space, BGP/MPLS VPN can separate address space

GRE VPN can provide advanced security such as data encryption, but BGP/MPLS VPN cannot provide such security.

92. Which of the following descriptions about GRE is wrong ? ( Choose one or more )

bearing carrier IP header to UDP port number 47 identifies the GRE header

GRE uses the Ethernet protocol type Ox0800 to identify the payload packet as IP

GRE VPN is limited to the transmission of unicast data

using IP overIP the GRE encapsulation, public network and the private network interface address may coincide

93. Which of the following descriptions about GRE are correct ? ( Choose one or more )

bearing carrier lP head is lP protocol number 47 identifies the GRE header

the GRE with the Ethernet protocol type 0 x0806 identified load package for lP

GRE VPN can transmit multicast data

adopted using IP over IP of GRE encapsulation, the public network and private network interfaces may not coincide with the address

94. Which of the following descriptions about GRE are correct ? ( Choose one or more )

bearing carrier IP header to UDP port number 47 identifies the GRE header

GRE uses the Ethernet protocol type Ox0800 to identify the payload packet as IP

GRE VPN can transmit multicast data

adopted using IP over IP of GRE encapsulation, public network and the private network interface address may coincide

95. Execute the displa interface tunnel command on a router to display the information of the GRE tunnel interface as follows:

<Router> displa interface Tunnel O

Tunnelo current state: UP

Line protocol current state: UP

Description: Tunnelo Interface

The Maximum Transmit Unit is 1476

Internet Address is 192.1.2.1/24 Primar

Encapsulation is TUNNEL , agg regation ID not set

Tunnel source 10.1.11.1 , destination 10.1.13.1

Tunnel keepalive enable , Period ( 10 s ) , Retries ( 3 )

Tunnel protocol/transport GRE/IP

GRE ke disabled

Checksumming of GRE packets disabled

Last 300 seconds input: 0 btes/sec , 0 packets/sec

Last 30 0 seconds output: 0 btes/sec , 0 packets/sec

4 packets input , 72 btes

0 input error

1 packets output , 24 btes

0 0utput error

It can be known from the above information.( Choose one or more )

The tunnel interface is in the UP state, and the MTU is 1476 bytes

The Keeplive function is enabled on the tunnel interface .Once the router does not receive the Keeplive message from the other party within 30s , the tunnel is considered unavailable.Although the tunnel interface is still in the UP state, the tunnel interface is a static route for the outgoing interface Will disappear from the routing table ;

tunnel channel does not start verification, verification can not start

tunnel channel source lP address 192.1.1.1

96. On a router perform row displa'interface tunnel explicit shown GRE tunnel interface as follows :

<Router>displa interface Tunnel 0

Tunnelo current statle: UP

Line protocol current state: UP

Description: Tunnel 0 Interface

T he Maximum transmit Unit is 1476

Internet Addess is 192.1.1.1/24 Primar.

Encapsulation isTUNNELT aggregation ID not- et

Tunnel source l0.1.11.1 destination 10.1.13.1

Tunnel keeepalive enable Period ( 10 s ) , Retries ( 3 )

Tunnel protocol/transport GRE/IP.

GRE key disable

Checksumming of GRE packets disabled

Last 300 seconds input:.0 btes/secl 0 packet/sec.

Last 300 seconds output:..0 bytes/sec , 0 packets/sec.

4 packets input 72bytes.

0 input error

1 packets output , 24 btes

0 0utput error

From the above information, we can know ____ .( Choose one or more )

The tunnel interface is in the UP state, and the MTU is 1467 bytes

The Keepalive function is enabled on the Tunnel interface .Once the router fails to receive the Keeplive packets from the other party within 30s , the tunnel is considered unavailable

tunnel track start validation, verification does not start

tunnel channel source lP address of 10.1.11.1

97. Which of the following descriptions about GRE VPN configuration is correct is ____ .( Choose one or more )

with home GRE VPN when, regardless of static routing or dynamic routing, the Tunnel interfaces should start Keepalive function, to detect the actual work of the tunnel interface

Tunnel source address and a destination address uniquely identifies an interface of a tunnel, at the ends of the tunnel Tunnel source address and destination address from the interface must be the same

After the keepalive function is enabled on the tunnel interface , by default, once the router fails to receive the keepalive message from the other party for three times , the tunnel is considered unavailable

lack of provincial case, the Tunnel Interface packet encapsulation mode as GRE

98. Which of the following descriptions about GREVPN configuration is incorrect is ____ .( Choose one or more )

with home GRE VPN , if static routing, the Tunnel interfaces should start Keeplive function to detect the actual work on the tunnel interface, if using dynamic routing, you can not start Keeplive function

tunnel source address and a destination address uniquely identifies an interface of a tunnel, the tunnel at both ends of the device of Tunrel source address and destination address from the interface must be the same

After the Keeplive function is enabled on the Tunnel interface , by default, once the router fails to receive the Keeplive packet from the other party three times , the tunnel is considered unavailable

lack of provincial case, the Tunnel Interface packet encapsulation mode is not GRE

99. Among the packets encapsulated by the GRE protocol, the payload protocol is the IPX protocol, and the bearer protocol is the IP protocol.The encapsulation sequence of the packet from the link layer to the payload data is ____ .

link channel layer IP GRE IPX carrier bearing data

link channel layer IPX GRE IP payload data

link channel layer GRE IP IPX carrier bearing data

link channel layer GRE IPX IP payload data

100. The four routers R1 , R2 , R3, and R4 are connected in sequence, and Loopback0 interfaces are created on R1 and R4 , and the interface addresses are 1.1.1.1 and 4.4.4.4 respectively.The four devices are configured with static routing protocols to ensure Loopback0 of R1 and R4 .The address is reachable, and a GRE Tunnel is established between R1 and R4 .Check the tunnel interface information on R1 as follows:

[R1]displa interface Tunnel O

Tunnelo current state: UP

Tunnelo current statle: UP

Line protocol current state: UP

Description: Tunnel 0 Interface

The Maximum transmit Unit is 1476

Internet Addess is 10.1.1 .1/30 Primar.

Encapsulation isTUNNEL aggregation ID not set

Tunnel source l.1.1.1 destination 4.4.4.4

Tunnel keeepalive disable

Tunnel protocol/transport GRE/IP.

GRE key disable

Checksumming of GRE packets disabled

Last 300 seconds input:.2 btes/secl 0 packet/sec.

Last 300 seconds output:..2 bytes/sec , 0 packets/sec.

15packets input 840bytes.

0 input error

27packets output , 1248btes

0 0utput error

At this time, if the interrupt R2 and R3 link between, the following statement is correct ____

Rl on -Tunnel interface remains UP state

The status of the Tunnel interface on R1 is Down

The IP address of the Tunnel interface of R4 should be 10.0.0.2.

The source IP of the Tunnel interface of R4 is 4.4.4.4 , and the destination IP is 1.1.1.1

Page 11 of 14

101. The four routers R1 , R2 , R3, and R4 are connected in sequence, and Loopback0 interfaces are created on R1 and R4 , and the interface addresses are 1.1.1.1 and 4.4.4.4 respectively.The four devices are configured with dynamic routing protocols to ensure Loopback0 of R1 and R4 .The address is reachable, and a GRE Tunnel is established between R1 and R4 .Check the tunnel interface information on R1 as follows:

[R1]displa interface Tunnel 0

Tunnelo current state: UP

Line protocol cu rrent state: UP

Description: Tunnelo Interface

The Maximum Transmit Unit is 1476

Internet Address is 10.0.0.1/30 Primar

Encapsulation is TUNNEL , aggregation ID not set

Tunnel source l.1.1.1 , destination 4.4.4.4

Tunnel keepalive disable

Tunnel protocol/transp ort GRE/IP

GRE ke disabled

Checksumming of GRE packets disabled

Last 300 seconds input: 2 btes/sec , 0 packets/sec

Last 300 seconds output: 2 btes/sec , 0 packets/sec

15 packets input , 840 btes

0 input error

27 packets output , 1248 btes

0 0utput error

At this time, if the link between R2 and R3 is interrupted , the following statement is correct.

Rl on Tunnel interface remains UP state

The status of the Tunnel interface on R1 is Down

The source IP of the Tunnel interface of R4 is 1.1.1.1 , and the destination IP is 4.4.4.4

The IP address of the Tunnel interface of R4 should be 10.0.0.2.

102. In the GRE encapsulation of IP over IP , the hexadecimal value of the Protocol Tpe field of the GRE header is Ox____ .( Fill in 16 hexadecimal digits )

0800

103. In the GRE encapsulation of IP over IP , IP uses the protocol number ____ to mark the GRE header.

104. The three routers are shown in the figure .A GRE tunnel is created between Routerl and RouLer3 .The configuration commands for the three routers are :

Routerl:

[Router1]interface Serial 0/2/0

[Router1-Serial0/2/0]ip address 10.1.1.1 24

ERouter1]interface loopback 0

[Router1-LoopBack0]ip addre ss 1.1.1.1 32

[Router1]interface Tunnel 0

[Router1-Tunnel0]source 10.1.1.1

[Router1-Tunnel0]destination 20.1.1.2

[Routerl-Tunnel0]ip address 100.1.1.1 24

[Router1]ospf

IRouter1-ospf-1]area 0

IRouter1-ospf-1-area-0.0.0.0]network 10.1.1.1 0.0.0.255

[Router1]ip route-static 3.3.3.3 32 100.1.1.2

Router2:

[Router2]interface Serial 0/2/0

[Router2-Serial0/2/0]ip address 10.1.1.2 24

[Router2]interface Serial 0/2/1

[Router2-Serial0/2/0]ip address 20.1.1.1 24

[Router2]ospf

IRouter1-ospf-1]area 0

IRouter1-ospf-1-area-0.0.0.0]network 10.1.1.2 0.0.0.255

IRouter1-ospf-1-area-0.0.0.0]network 20.1.1.1 0.0.0.255

Router3:

[Router3]interface Serial 0/2/0

[Router3-Serial0/2/0]ip address 20.1.1.2 24

[Router3]interface loopback 0

[Router3-LoopBack0]ip address 3.3.3.3 32

[Router3]interface Tunnel 0

[Router3-Tunnel0]source 20.1.1.2

[Router3-Tunnel0]destination 1 0.1.1.1

[Router3-Tunnel0]ip address 100.1.1.2

[Router3]ospf

[Router3-ospf-l]area 0

[Router3-ospf-l-area-0.0.0.0] network 20.1.1.2 0.0.0.255

[Router3]ip route-static l.1.1.1 32 100.1.1.1

Use the command ping-a 1.1.1.1 3.3.3.3 on Router 1 to check the connectivity, and 100% receive ICMP reply packets.

In the above process, the following description of the various routers to process packets of data, is correct ____ .( Choose one or more )

Router 1 performs GRE encapsulation of ICMP Echo Request packets

Router2 performs lP packet forwarding

Router2 performs GRE decapsulation of ICMP Echo Request packets

Router3 performs GRE encapsulation of ICMP Echo Reply packets

105. The three routers are shown in the figure .A GRE tunnel is created between Routerl and Router3 .The configuration commands for the three routers are:

Router1 :

[Routerl]interface Serial 0/2/0

[Routerl-Serial0/2/0]ip address 10.1.1.1 24

[Routerl]interface loopback 0

[Routerl-LoopBack0]ip address l.1.1.1 32

[Routerl]interface Tunnel 0

[Routerl-Tunnel0 ]source 10.1.1.1

[Routerl-Tunnel0]destination 20.1.1.2

[Routerl-Tunnel0]ip address 100.1.1.1 24

[Routerl]ospf

[Routerl-ospf-l]area 0

[Routerl-ospf-l-area-0.0.0.0] network 1 0.1 .1 .1 0.0.0.255

[Routerl]ip route-static 3.3.3.3 32 100.1.1.2

Router2:

[Router2]interface Serial 0/2/0

[Router2-Serial0/2/0]ip address 10.1.1.2 24

[Router2]interface Serial 0/2/1

[Router2-Serial0/2/1]ip address 20.1.1.1 24

[Router2]ospf

[Router2-ospf-l]area 0

[Router2-ospf-l-area-0.0.0.0] network 10.1.1.2 0.0.0.255

[Router2-ospf-l-area-0.0.0.0] network 20.1.1.1 0.0.0.255

Router3:

[Router3]interface Serial 0/2/0

[Router3-Serial0/2/0]ip address 20.1.1.2 24

[Router3]interface loopback 0

[Router3-Loop Back0]ip address 3.3.3.3 32

[Router3]interface Tunnel 0

[Router3-Tunnel0]source 20.1.1.2

[Router3-Tunnel0]destination 10.1.1.1

[Router3-Tunnel0]ip address 100.1.1.2

[Router3]ospf

[Router3-ospf-l]area 0

[Router3-ospf-l-area-0.0.0.0] network 20.1.1.2 0.0.0.255

[Router3]ip route-static l.1.1.1 32 100.1.1.1

Use the command ping-a 1.1.1.1 3.3.3.3 on the Router to check the connectivity, l00% received icmp reply packets.

In the process of upward progress, the following describes the processing of data packets by each router.The correct one is _____ .( Choose one or more )

Router .1 for ICMP Echo Request packet GRE decapsulates

Router .1 for ICMP Echo reply message packets GRE encapsulation

Router2 performs GRE decapsulation of ICMP Echo Request packets

Router3 for ICMP Echo reply message packets GRE encapsulation

106. The three routers shown in FIG., In Routerl and Router3 between creating built GRE tunnel , three routers are configured to :

[Routerl]interface Serial 0/2/0

[Routerl-Serial0/2/0]ip address 10.1.1.1 24

[Routerl]interface loopback 0

[Routerl-LoopBack0]ip address l.1.1.1 32

[Routerl]interface Tunnel 0

[Routerl-Tunnel0]source 1 0.1.1.1

[Routerl-Tunnel0]destination 20.1.1.2

[Routerl-Tunnel0]ip address 100.1.1.1 24

[Routerl]ospf

[Routerl-ospf-l]area 0

[Routerl-ospf-l-area-0.0.0.0]network 10.1.1.1 0.0.0.255

[Routerl-ospf-l-area-0.0.0.0]network l.1.1.1 0.0.0.0

Router2:

[Router2]interface Serial 0/2/0

[Router2-Serial0/2/0]ip address 10.1.1.2 24

[Router2]interface Serial 0/2/1

[Router2-Serial0/2/1]ip address 20.1.1.1 24

[Router2]ospf

[Router2-ospf-l]area 0

[Router2-ospf-l-area-0.0.0.0] network 10.1.1.2 0.0.0.255

[Router2-ospf-l-area-0.0.0.0] network 20.1.1.1 0.0.0.255

Router3:

[Router3]interface Serial 0/2/0

[Router3-Serial0/2/0]ip address 20.1.1.2 24

[Router3-Serial0/2/0]quit

[Router3]interface loopback 0

[Router3-Loop Back0]ip address 3.3.3.3 32

[Router3]interface Tunnel 0

[Router3-Tunnel0]source 20.1.1.2

[Router3-Tunnel0]destination 10.1.1.1

[Router3-Tunnel0]ip address 100.1.1.2

[Router3]ospf

[Router3-ospf-l]area 0

[Router3-ospf-l-area-0.0.0.0] network 20.1.1.2 0.0.0.255

[Router3-ospf-l-area-0.0.0.0]network 3.3.3.3 0.0.0.0

Use the command ping-a 1.1.1.1 3.3.3.3 on the Router to check the connectivity, l00% received icmp reply packets.

In the process of upward progress, the following describes the processing of data packets by each router.The correct one is _____ .( Choose one or more )

Routerl for ICMP Echo Request packet GRE decapsulates

Routerl performs IP packet forwarding

Router3 performs packet forwarding

Router3 for ICMP Echo repl message packets GRE encapsulation

107. In the GRE Tunnel interface view, configure the sending period of Keeplive packets to 10s , and determine the number of transmissions of Keeplive packets required for tunnel interruption to 3 , and the command is ____ .

keepalive 10 3

keepalive 3 10

keepalive-interval 10

keepalive-times 3

108. In the GRE Tunnel interface view, the complete command to configure the tunnel encapsulation mode to GRE is

tunnel protocol gre

tunnel gre

t unnel-protocol gre

protocol gre

109. In the L2TP networking, there are three ways for LNS to authenticate users: proxy authentication, mandatory CHAP authentication and LCP renegotiation.The highest priority is ____ .

on behalf of the agent authentication

Strong system CHAP authentication

LCP renegotiation

All the same

110. In L2TP networking, what are the authentication methods for users by LNS?

on behalf of the agent authentication

Strong system CHAP authentication

IPCP renegotiation

LCP renegotiation

Page 12 of 14

111. The L2TP tunnel information can be displayed through the ____ command .

display 12tp tunnel

display l2tp session

display l2tp status

display 12tp verbos

112. The L2TP session information can be displayed through the ____ command .

display 12tp tunnel

display 12tp session

display 12 tp status

display 12t p verbose

113. The following statements about the client, LAC and LNS in L2TP are correct _____ .

customer client at the same time as LNS

a th LAC simultaneously with the plurality of LNS to establish a connection

customer client can at the same time as the LAC

LAC can act as LNS at the same time

114. As the client, the PC uses the client LAC mode to establish an L2TP tunnel through the iNode and the LNS , and prompts that the acquisition of the lP is overtime.The possible cause of this problem is ____ .( Choose one or more )

Incorrect username and password on iNode

Tunnel interface verification fails

IP address pool configuration error

LNS to LAC authentication fails

115. In L2TP VPN in, the LAC ( the L2TP Access Concentrator , the L2TP Access Concentrator ) received from the remote system transmitted to the server side lP after the data packet, that the packet will be sent to the respective packages L the NS ( the L2TP the Network Server , L2TP network server ) , the encapsulation format of the data packet transmitted between LAC and LNS is

Private network data packet L2TP header PPP header UDP header Public network lP header

Private network data packet PPP header UDP header L2TP header Public network lP header

Private network data packet PPP header L2TP header UDP header Public network lP header

Private network data packet PPP header UDP header Public network lP header L2TP header

116. In the L2TP networking, configure the command to force the CHAP verification between the LNS and the client to be ____ .

In the L2TP-group view, configure the command mandator-chap

In the global view, configure the command mandator-chap

In the L2TP-group view, configure the authentication-mode mandator-chap command

In the L2TP-group view, configure the command mandator chap

117. In the L2TP networking, the command for configuring LNS to perform mandatory LCP renegotiation authentication for users is ____ .

In the L2TP-group view, configure mandator-lcp

Configure manclator-lcp in the global view

Configure authentication-mode mandator-lcp in the L2TP-group view

In the L2TP-group view, configure mandator lcp

118. The main functions of LNS and LAC in L2TP components are ____ .( Choose one or more )

LNS will L2TP encapsulate the message received from the remote system ( Remote system ) and send it to LAC

LNS and LAC jointly maintain L2TP tunnels

LAC can exist on a remote system

LNS can exist on the remote system

119. The main functions of LNS and LAC in L2TP components are ____ .( Choose one or more )

LAC L2TP encapsulates the message received from the remote system and sends it to LNS

The L2TP tunnel is mainly maintained by the LAC

LAC and LNS can be the same device

LAC and LNS are the end points of L2TP sessions

120. Which of the following descriptions about L2TP tunnel ( Tunnel ) and L2TP session ( Session ) are correct is ____ .( Choose one or more )

with one pair of LNS and LAC can only be established between a L2TP tunnel

with one pair of LNS and LAC can establish one or more between the L2TP tunnel

L2TP session can be carried out before L2TP tunnel is established

The L2TP session must be carried out after the L2TP tunnel is established

Page 13 of 14

121. Which of the following descriptions about L2TP tunnel ( Tunnel ) and L2TP session ( Session ) are correct is ____ .( Choose one or more )

will identify the session ( the Session ID ) is not the same message can reuse the same tunnel

will identify the session ( the Session ID ) is not the same message can not reuse the same tunnel

L2TP session can be carried out before L2TP tunnel is established

The L2TP session must be carried out after the L2TP tunnel is established

122. When a PPP frame is encapsulated by adding an L2TP header, it will be marked with the correct Tunnel ID and Session ID to identify its tunnel and session attributes.The Tunnel ID ( tunnel identifier ) in the L2TP header is assigned by ____ , and the Session ID ( session identifier ) is assigned by ____ .

This end LAC , the local LAC

The opposite end LNS , the opposite end LNS

This end of the LAC , the peer LNS

to end the LNS , the local LAC

123. The PC uses the iNode VPN client to establish L2TP tunnels and sessions with network equipment , which belongs to the ____ topology of L2TP .

customer households LAC mode

the far end launch mode

alone stand LAC mode

LAC launch mode

124. An employee of a company often travels on business.In order to facilitate access to company resources, which of the following L2TP access and authentication methods should he use____

alone stand L2TP mode

passenger door LAC mode

LAC certification

LNS certification

125. The ZLB ( Zero-Length Bod ) message is a control message with only an L2TP header, and its function is to serve as an explicit response to ensure reliable delivery of the control message.

In the following four cases, LNS does not send ZLB message to LAC as a response: ____ .

the LNS received LAC transmit the CDN ( Call-Disconnect- Notif , call disconnection notification ) after the message

After LNs receive the ICCN ( Incoming-Call-Connectea , call connected ) message sent by LAC

After the LNS receives the Hello control message sent by the LAC

LNS receives StopCCN ( scop-Control-Connection-Notiflcation ) sent by LAC ; after the message

126. In the basic configuration of L2TP in independent LAC mode, the correct description of the local name of the tunnel is ____ .

In the system view, use the Tunnel name name command to configure the local tunnel name

In the L2TP group view, use the Tunnel name name command to configure the local tunnel name

default case considered, the name of a tunnel for the name of the system

default case considered, the name of a tunnel is empty

127. In the basic configuration of L2TP in independent LAC mode , the description of the name of the local end of the tunnel is correct.

In the L2TP group view, use the Tunnel name name command to configure the local tunnel name

In the system view, use the Tunnel-name name command to configure the local tunnel name

default case considered, the name of a tunnel for the name of the system

default case considered, the name of a tunnel is empty

128. In the basic configuration of L2TP in independent LAC mode , the description of the tunnel verification function is correct.

tunnel track verification request only by LAC initiated

tunnel channel request can be verified by the LNS initiated

lack of provincial cases, tunnel authentication is disabled

lack of provincial cases, tunnel authentication is enabled.

129. In the basic configuration of L2TP in independent LAC mode , the description of the tunnel verification function is correct.

tunnel channel request can be verified by the LAC initiated

tunnel channel request can not be verified by the LNS initiated

lack of provincial cases, tunnel authentication is disabled

lack of provincial cases, tunnel authentication is enabled.

130. The following statements about PKI workflow are correct.

permit book application made by the entity

solid body identity reviewed by RA completed

Certificate book by the CA issued

solid body needs to revoke the certificate RA application

Page 14 of 14

131. In the process of issuing the digital certificate application in the void, the PKI ( Public Infrastructure Ke , public key systems ) role of the various components were _____ .

real body wishes to obtain a digital certificate, first of all to RA ( Registration Authority ) apply, RA after the audit entity identity, the identity of the entity and the public key information is sent to a digital signature to the CA ( Certificate Authority )

After the CA verifies the digital signature, it agrees to the entity's application and issues a certificate for the entity

The CA sends the issued certificate to the LDAP server to provide directory browsing services

real- time body want to revoke the certificate, the RA ( Registration Authority ) submit an application

132. The following belongs to the asymmetric key algorithm is ____ .

RSA

DSA

DES

133. The following are symmetric key algorithms

RSA

DSA

DES

AES

134. Configure PKI domain trusted CA ( certification authority as ) H3CCA , and configured the registration server URL for the CA . h3c . com commands respectively for the ____ .

In PKI domain view, configure ca.identifier H3CCA

In PKI domain view, configure CErtificate identifier-H3CCA

In the PKI domain view, arranged CERTIFICATE CA Request UR

h3c . com

Configure CErtificate url ca in the PKI domain view . h3c . com

GB0-391 Constructing Secure optimized WANs v2.0 Exam Training Material

GB0-391 Constructing Secure optimized WANs v2.0 Exam Training Material

Share this post

Leave a Reply Cancel reply