check any of the bits in the source address
permit any wildcard mask for the address
accept any source address
check any bit in the destination address
permit 255.255.255.255 0.0.0.0
accept any destination
第1题:
用标准访问控制列表配置212.33.127.0/24子网主机登录到路由表,虚拟的配置是
A.Router(config)#access-list 10 permit 212.33.127.0 255.255.255.0 Router(config)#line vty 0 5 Router(config-line)#access-class 10 in
B.Router(config)#access-list 20 permit 212.33.127.0 0.0.0.255 Router(config)#line vty 0 5 Router(config-line)#access-class 20 in
C.Router(config)#access-list 99 permit 212.33.127.0 0.0.0.255 Router(config)#line vty 0 5 Router(config-line)#access-class 99 in
D.Router(config)#access-list 100 permit 212.33.127.0 0.0.0.255 Router(config)#line vty 0 5 Router(config-line)#access-class 100 in
第2题:
封禁ICMP协议,只转发212.78.170.166/27所在子网的所有站点的ICMP数据包,正确的access-list配置是______。
A) Router(config)#access-list 110 permit icmp 212.78.170.166 0.0.0.0 any
Router(config)#access-list 110 deny icmp any any
Router(config)#access-list 110 permit ip any any
B) Router(config)#access-list 110 permit icmp 212.78.170.0 255.255.255.224 any
Router(config)#access-list 110 permit ip any any
Router(config)#access-list 110 deny icmp any any
C) Router(config)#access-list 110 perimt iemp 212.78.170.0 0.0.0.255 any
Router(config)#access-list 110 deny icmp any any
Router(config)#access-list 110 permit ip any any
D) Router(config)#access-list 110 permit icmp 212.78.170.160 0.0.0.31 any
Router(config)#access-list 110 deny icmp any any
Router(config)#access-list 110 permit ip any any
A.
B.
C.
D.
第3题:
拒绝转发所有IP地址进与出方向的、端口号为1434的UDP和端口号为4444的TCP数据包,下列正确的access-list配置是
A)Router (config)#access-list 30 deny udp any any eq 1434
Router (config)#access-list 30 deny tcp any any eq 4444
Router (config)#access-list 30 permit ip any any
B)Router (config)#access-list 130 deny udp any any eq 1434
Router (config)#access-list 130 deny tcp any any eq 4444
Router (config)#access-list 130 permit ip any any
C)Router (config)#access-list 110 deny any any udp eq 1434
Router (config)#access-list 110 deny any any tcp eq 4444
Router (config)#access-list 110 permit ip any any
D)Router (config)#access-list 150 deny udp ep 1434 any any
Router (config)#access-list 150 deny tcp ep 4444 any any
Router (config)#access-list 150 permit ip any any
第4题:
A. Router(config-line)# access-class 10 in
B. Router(config-if)# ip access-class 23 out
C. Router(config-line)# access-group 15 out
D. Router(config-if)# ip access-group 110 in
E. Router(config-line)# access-list 150 in
F. Router(config-if)# ip access-list 128 out
第5题:
Look at the following configuration below and select the statements that are true.()RD2(config)router ospf 100RD2(config - router) distance 180 10.1.10.1 0.0.0.0 match - meRD2(config -router)!RD2(config - router) ip access - list standard match - meRD2(config - std - nacl) permit host 172.16.0.0
A. OSPF will have an AD of 180 for routes from 10.1.10.1 in the 172.16.0.0/16 range.
B. The neighbor RID is 10.1.10.1
C. OSPF will have an AD of 180 for all routes.
D. The local RID is 10.1.10.1
第6题:
用标准访问控制列表配置只允许212.33.127.0/24子网主机登录到路由表,正确的配置是______。
A.Router(config) #access-list 10 permit 212.33.127.0 255.255.255.0 Router(config) #line vty 0 5 Router(config-line) #access-class 10 in
B.Router(config) #access-list 20 permit 212.33.127.0 0.0.0.255 Router(config) #line vty 0 5 Router(config-line) #access-class 20 out
C.Router(config) #access-list 99 permit 212.33.127.0 0.0.0.255 Router(config) #line vty 0 5 Router(config-line) #access-class 99 in
D.Router(config) #access-list 100 permit 212.33.127.0 0.0.0.255 Router(config) #line vty 0 5 Router(config-line) #access-class 100 in
第7题:
Cisco路由器执行show access-list命令显示如下一组控制列表信息:
Standard IP acceSS list 30
deny 127.0.0.0,wildcard bits 0.255.255.255
deny 172.16.0.0,wiidcard bits 0.15.255.255
permft any
根据上述信息,正确的access-list配置是______。
A) Router(config)#access-list 30 deny 127.0.0.0 255.255.255.0
Router(config)#access-list 30 deny 172.16.0.0 255.240.0.0
Router(config)#access-list 30 permit any
B) Router(config-std-nacl)#access-list 30 deny 127.0.0.0 0.255.255.255
Router(config-std-nael)#access-list 30 deny 172.16.0.0 0.15.255.255
Router(config-std-nacl)#access-list 30 permit any
C) Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255
Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255
Router(config)#access-list 30 permit any
D) Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255
Router(config)#access-list 30 permit any
Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255
A.
B.
C.
D.
第8题:
Cisco路由器执行show access-list命令显示如下一组信息 Standard IP access list block deny 10.0.0.0, wildcardbits 0.255.255.255 log deny 172.16.0.0, wildcard bits 0.15.255.255 permit any 根据上述信息,正确的access-list配置是
A.Router (config) #access-list standard block Router (config-std-nacl) #deny 10.0.0.0 255.0.0.0 log Router (config-std-nacl) #deny 172.16.0.0 255.240.0.0 Router (config-std-nacl) #permit any
B.Router (config) #ip access-list standard block Router (config-std-nacl) #permit any Router (config-std-nacl) #deny 10.0.0.0 0.255.255.255 log Router (config-std-nacl) #deny 172.16.0.0 0.15.255.255
C.Router (config) #ip access-list standard block Router (config-std-nacl) #deny 10.0.0.0 255.0.0.0 log Router (config-std-nacl) #deny 172.16.0.0 255.240.0.0 Router (config-std-nacl) #permit any
D.Router (config) #ip access-list standard block Router (config-std-nacl) #deny 10.0.0.0 0.255.255.255 log Router (config-std-nacl) #deny 172.16.0.0 0.15.255.255 Router (config-std-nacl) #permit any
第9题:
Refer to the exhibits. Router B should advertise the network co nnected to the E0/0/0 interface to router A and block all other network advertisements. The IP routing table on router A indicates that it is not receiving this prefix from router B. What is the probable cause of the problem?()
A. An access list on router B is causing the 192.168.3.16/28 network to be denied
B. An access list on router B is causing the 192.168.3.32/28 network to be denied
C. The distribute list on router B is referencing a numbered access list that does not exist on router B
D. The d istribute list on router B is referencing the wrong interface
第10题:
On a newly installed router, the following access list is added to the HSSI interface for incoming traffic:Access-list 101 permit tcp any 10.18.10.0 0.0.0.255 eq tcpWhat is the effect of the "any" keyword in the above access list?()
A. check any of the bits in the source address
B. permit any wildcard mask for the address
C. accept any source address
D. check any bit in the destination address
E. permit 255.255.255.255 0.0.0.0
F. accept any destination