ccie笔试题库.pdf

Vendor : 350-001 Exam Code: CCIE-Routing and Switching Written exam (4.0) Exam Name: CISCO 分卷: A 1: What is the purpose of an explicit deny any statement at the end of an ACL? A.none, since it is implicit B.to enable Cisco IOS IPS to work properly; however, it is the deny all traffic entry that is actually required C.to enable Cisco IOS Firewall to work properly; however, it is the deny all traffic entry that is actually required D.to allow the log option to be used to log any matches E.to prevent sync flood attacks F.to prevent half-opened TCP connections Correct Answers: D Explanation: 2: Which of these is mandatory when configuring Cisco IOS Firewall? A.Cisco IOS IPS enabled on the untrusted interface B.NBAR enabled to perform protocol discovery and deep packet inspection C.a route map to define the trusted outgoing traffic D.a route map to define the application inspection rules E.an inbound extended ACL applied to the untrusted interface Correct Answers: E Explanation: 3: Which statement correctly describes the disabling of IP TTL propagation in an MPLS network? A.The TTL field from the IP packet is copied into the TTL field of the MPLS label header at the ingress edge LSR. B.TTL propagation cannot be disabled in an MPLS domain. C.TTL propagation is only disabled on the ingress edge LSR. D.The TTL field of the MPLS label header is set to 255. E.The TTL field of the IP packet is set to 0. Correct Answers: D Explanation: 4: Two routers configured to run BGP have been connected to a firewall, one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer, including the correct BGP session endpoint addresses and the correct BGP session hop-count limit (EBGP multihop). What is a good first test to see if BGP will work across the firewall? A.Attempt to TELNET from the router connected to the inside of the firewall to the router connected to t