思科 微軟 IBM HP認證考古題PDF下載

免費GB0-183English考古庫Demo賞析

　
　
Exam : HuaWei GB0-183English
Title : HuaWei-3Com Certificated Network Engineer

1. Two routers are in back-to-back connection with the following configuration. Can they communicate with each other? ( )
[Router1]display current-configuration
#
sysname Router1
#
FTP server enable
#
l2tp domain suffix-separator @
#
fr switching
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0)*5WWQ=^Q`MAF4<<"TX$_S#6.N
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address dhcp-alloc
#
interface Ethernet0/1
ip address dhcp-alloc
#
interface Serial0/0
link-protocol fr
fr interface-type dce
#
interface Serial0/0.1 p2p
fr dlci 20
ip address 10.0.0.1 255.255.255.0
#
interface NULL0
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode none
user privilege level 3
#
return
[Router2]display current-configuration
#
sysname Router2
#
FTP server enable
#
l2tp domain suffix-separator @
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0)*5WWQ=^Q`MAF4<<"TX$_S#6.N
service-type telnet terminal
level 3
service-type ftp
#
interface Aux0
async mode flow
#
interface Ethernet0/0
ip address dhcp-alloc
#
interface Ethernet0/1
ip address dhcp-alloc
#
interface Serial0/0
clock DTECLK1
link-protocol fr
#
interface Serial0/0.1 p2p
fr dlci 20
ip address 10.0.0.2 255.255.255.0
#
interface NULL0
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode none
user privilege level 3
#
return
A. Yes
B. No
C. No decision can be made, for there is not enough information.
Answer: A

2. Which of the following is right about OSPF? ( )
A. It is fast in convergence.
B. It is loop-free, and supports variable-length subnet mask.
C. It supports equal-cost multipath and area division.
D. It supports authentication, and the protocol packets sending with multicast.
Answer: ABCD

3. To test the gateways that a packet will pass through from the source host to the destination, use the command ( ) in the H3C COMWARE command line.
A. ping
B. tracert
C. show path
D. display path
Answer: B

4. If the user data exceeds the Bc (committed burst ) in a frame relay network, the exceeding data will be dropped. ( )
A. True
B. False
Answer: B

5. What algorithm is adopted in PPP CHAP authentication? ( )
A. MD5
B. DES
C. RSA
D. SHA
Answer: A

6. Both the transport layer and the data link layer perform error check. ( )
A. True
B. False
Answer: A

7. Which layer of the OSI reference model implements encryption. ( )
A. Physical layer
B. Transport layer
C. Session layer
D. Presentation layer
Answer: D

8. RIP adopts ( ) as the transport protocol with the port number 520.
A. TCP
B. UDP
C. IP
D. PPP
Answer: B

9. Frame Relay adopts ( ) as the switching method.
A. Routing
B. Circuit switching
C. Fast switching
D. Packet switching
Answer: D

10. The H3C AR routers can be upgraded in different ways. Which of the following is not supported? ( )
A. Xmodem
B. FTP
C. TFTP
D. HGMP
Answer: D

11. The command to save the current configuration on the H3C router COMWARE 3.4 is ( ).
A. write
B. save
C. copy
D. reset
Answer: B

12. The TFTP port number is ( ).
A. TCP port 68
B. UDP port 68
C. TCP port 69
D. UDP port 69
Answer: D

13. Common routing protocols are ( ).
A. IPX
B. OSPF
C. RIP
D. IP
Answer: BC

14. The types of ACLs are identified with numbers. The range 4000-4999 refers to the ( ).
A. Interface-based ACL
B. Basic ACL
C. Advanced ACL
D. MAC-based ACL
Answer: D

15. A network protocol is a set of rules and conventions that prescribe how network devices inter-communicate. The communication parties shall understand and abide the protocol. ( )
A. True
B. False
Answer: A

16. Two routers are in back-to-back connection with the following configuration. Can they communicate with each other? ( )
[Router1] display current-configuration
#
sysname Router1
#
FTP server enable
#
l2tp domain suffix-separator @
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0)*5WWQ=^Q`MAF4<<"TX$_S#6.N
service-type telnet terminal
level 3
service-type ftp
local-user h3c
password simple h3c
service-type ppp
#
interface Aux0
async mode flow
#
interface Serial0/0
link-protocol ppp
ppp authentication-mode chap
ppp chap user h3c
ip address 10.0.0.1 255.255.255.0
#
interface NULL0
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode none
user privilege level 3
#
return
[Router2] display current-configuration
#
sysname Router2
#
FTP server enable
#
l2tp domain suffix-separator @
#
radius scheme system
#
domain system
#
local-user admin
password cipher .]@USE=B,53Q=^Q`MAF4<<"TX$_S#6.NM(0=0)*5WWQ=^Q`MAF4<<"TX$_S#6.N
service-type telnet terminal
level 3
service-type ftp
local-user h3c
password simple 3com
service-type ppp
#
interface Aux0
async mode flow
#
interface Serial0/0
clock DTECLK1
link-protocol ppp
ppp authentication-mode chap
ppp chap user h3c
ip address 10.0.0.2 255.255.255.0
#
interface NULL0
#
user-interface con 0
user-interface aux 0
user-interface vty 0 4
authentication-mode none
user privilege level 3
#
return
A. Yes
B. No
C. No decision can be made, for there is not enough information.
Answer: B

免費下載GB0-183English考古庫Demo

Pass4Side提供最新的HCNE認證 GB0-183English考古庫，其全名為：(HuaWei-3Com Certificated Network Engineer). 在您決定是否購買之前 可以先下載GB0-183English考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-183English模擬測試題的下載鏈接

免費的GB0-183English考古庫PDF下載鏈接

免費GB0-183Chinese考古庫Demo賞析

　
　
Exam : HuaWei GB0-183Chinese
Title : HuaWei-3Com Certificated Network Engineer

1. 传输层和数据链路层都会负责差错校检（ ）
A. True
B. False
Answer: A

2. PPP 的 CHAP 认证采用了什么加密算法（ ）
A. MD5
B. DES
C. RSA
D. SHA
Answer: A

3. Quidway AR 系列路由器，可以用很多种方式进行升级，请问哪一种不是其支持的升级方法（ ）
A. xmodem
B. ftp
C. tftp
D. HGMP
Answer: D

4. Quidway 系列路由器 vrp 3.4 版本下保存当前配置的命令是（ ）
A. write
B. save
C. copy
D. reset
Answer: B

5. 在帧中继网络中，超过 Bc （承诺突发量）的用户数据一定会被丢弃。
A. True
B. False
Answer: B

6. RIP 使用（ ）作为传输协议，端口号 520 。
A. TCP
B. UDP
C. IP
D. PPP
Answer: B

7. 网络协议是为了使计算机网络中的不同设备能进行数据通信而预先制定的一套通信双方互相了解和共同遵守的格式和约定。
A. True
B. False
Answer: A

8. 在 OSI 七层参考模型中，可以完成加密功能的是（ ）
A. 物理层
B. 传输层
C. 会话层
D. 表示层
Answer: D

9. 访问控制列表的种类利用数字来标识，其中 4000~4999 表示（ ）
A. 基于接口的访问控制列表
B. 基本访问控制列表
C. 高级访问控制列表
D. 基于 MAC 地址的访问控制列表
Answer: D

10. TFTP 的端口号是（ ）
A. TCP 68
B. UDP 68
C. TCP 69
D. UDP 69
Answer: D

11. 帧中继采用（ ）作为交换方式。
A. 路由
B. 电路交换
C. 快速交换
D. 分组交换
Answer: D

12. 常见的路由协议有（ ）
A. IPX
B. OSPF
C. RIP
D. IP
Answer: BC

13. 两台路由器背靠背直连，配置如下，路由器之间是否能够通讯（ ）
A. 能
B. 不能
C. 信息不足，无法判断
Answer: A

14. 两台路由器背靠背直连，配置如下，路由器之间是否能够通讯（ ）
A. 能
B. 不能
C. 信息不足，无法判断
Answer: B

15. 下列关于 OSPF 的说法，哪些是正确的（ ）
A. 路由变化收敛速度快
B. 无路由自环，支持变长子网掩码
C. 支持等值路由和区域划分
D. 提供路由分级管理
E. 支持验证，支持以组播地址发送协议报文
Answer: ABCDE

16. 在 Quidway VRP 命令行中用哪个命令可以测试数据包从发送主机到目的地所经过的网关（ ）
A. ping
B. tracert
C. show path
D. display path
Answer: B

免費下載GB0-183Chinese考古庫Demo

Pass4Side提供最新的HCNE認證 GB0-183Chinese考古庫，其全名為：(HuaWei-3Com Certificated Network Engineer). 在您決定是否購買之前 可以先下載GB0-183Chinese考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-183Chinese模擬測試題的下載鏈接

免費的GB0-183Chinese考古庫PDF下載鏈接

免費H3CTE考古庫Demo賞析

　
　
Exam : H3C H3CTE
Title : H3C Certified Troubleshooting Expert
一、实验题

1.
要求
1 、总部运行ospf，总部和两个分部之间运行BGP，RT1和RT2运行IBGP使用loopback端口为接口地址。由于分部的的网络比较简单要求分部的路由发布到BGP中。
2、分部B到总部通过ipsec+tunnel的模式。IPsec 采用野蛮模式，只对业务流进行加密。
3、总部的ospf和BGP互相发布后会形成路由环路，RT1 和RT2通过 BGP协议
4、总部和分部A，正常情况下业务通过FR链路到分部A，OA流通过PPP线路到分部A
5、当FR链路不能用的时，业务流通过ppp链路到分部A，此时业务流和OA流都在 PPP链路。要在RT2和RT4上做QOS保证业务流1M 的带宽。通过CBQ,对进来的业务打dscp afc4的标记，在以太网进口上对业务流打标记，在出口上进行带宽保证
6、要求两个分部之间进行隔离，通过AS-path-acl进行网络隔离
7、分部A 通过vrrp实现，当fr链路断掉时候业务流，自动切换到ppp的链路上。总部通过bgp动态路由实现路由切换
8、通过 local-preference和MED两个参数实现业务流走FR，OA 流走PPP
9、RT2和RT4之间的ppp链路采用chap认证
10、总部和分部的bgp要求验证
11、为了保证总部路由不产生环路，要求在RT1＆RT2上通过BGP的preference
进行调整。
答案：
RT1: 1、RT1 与RT3 通过专线连接， 两端设备均为DTE， 无法建立连接，将RT1 设置为DCE 设备，在接口3/0 配置fr interface-type dce 。
2、RT1 加密访问控制列表3001 定义数据流量不准确， 本段业务网段地址为160.0.0.0/24， 分部B 业务网段为160.2.0.0/24，。具体参数如下：acl number 3001 rule 0 permit ip source 160.0.0.0 0.0.255.255 destination 160.2.0.0 0.0.255.255
　　rule 1 deny ip
3、RT1 IKE 采用野蛮方式，数据需要进行双向访问，RT1 没有配置远端接入地址，须配置RT5 的接入端地址作为局段地址
4、RT1 IKE 采用野蛮方式，使用网关名字进行协商，RT1 没有配置本段的网关名字， 需要配置。
ike local-name rt
5、RT1 没有在接口上应用安全策略组，在GRE 通道应用安全策略。interface Tunnel0 ipsec policy rt5
6、RT1 OSPF 进程1 中，区域0 宣告的网段，子网掩码配置不正确，导致无法建立正确的邻居关系。调整10.0.0.0 子网掩码为0.0.255.255
7、RT1 与RT2 之间使用LOOOPBACK 地址接口来建立IBGP 关系，使用LOOPBACK 地址作为接口地址以后存在1.1.1.1 与2.2.2.2 网络层上不通的问题，无法正常的建立邻居关系，可以通过OSPF 将LOOOPBACK 地址宣告出去，保证连通性。RT1： Ospf 1 Area 0 Network 1.1.1.1 0.0.0.0 RT2： Ospf 1 Area 0 Network 2.2.2.2 0.0.0.0
8、RT1 路由器没有配置EBGP 的认证，不能保证连接的安全性，需在TCP 连接时配置MD5 认证，修改如下：
Bgp 65000
peer 10.1.13.2 password simple h3c
peer 10.2.15.2 password simple h3c
路由器RT2 、RT3 、RT4 、RT5 需要做同样的验证配置。
9、策略路由配置错误，R1、R2 的业务网段本地优先级与开销相同，R2OA 网段没有进行流量匹配，不符合业务流通过FR 传输，OA 通过ppp 链路进行传输的要求。修改后策略如下：R1：
route-policy YEWU permit node 10
if-match acl 2001
apply local-preference 200
apply cost 50
route-policy YEWU permit node 20
if-match acl 2002
apply local-preference 100
apply cost 200
R2：
route-policy YEWU-OA permit node 10
if-match acl 2001
apply local-preference 100
apply cost 100
route-policy YEWU-OA permit node 20
if-match acl 2002
apply local-preference 200
apply cost 100
10、RT1 、RT2 的路径访问控制列表配置不正确， 无法实现分部只有总部进行通信的要求，而且路径访问控制列表在BGP 协议中中没有应用。配置如下：
RT1： ip as-path-acl 1 permit ^$
bgp 65000
peer as65002 as-path-acl 1 export
RT2：
ip as-path-acl 1 permit ^$
bgp 65000
peer as65001 as-path-acl 1 export
11、RT5IKE 需要采用野蛮方式， 使用网关名字进行协商，需要配置本端的网关名字。
12、RT5 加密访问控制列表定义数据流量不准确，而且与RT1 不是互为镜像关系，
acl number 3001 rule 0 permit ip source 160.2.0.0 0.0.255.255 destination 160.0.0.0 0.0.255.255 rule 1 deny ip
13、RT5 没有在接口上应用安全策略组，在GRE 通道应用安全策略。interface Tunnel0 ipsec policy rt1
14、RT2 与RT4 进行PPP 连接，配置本地用户名，服务类型为ppp，命令为local-user h3c service-type ppp RT3 上的错误：
1、配置e0/0.11 上的vrrp 优先级为120，vrrp vrid 11 priority 120
Switch2 错误： 1、创建vlan 11 、12
2、将trunk 口改为permit vlan all

免費下載H3CTE考古庫Demo

Pass4Side提供最新的TE認證 H3CTE考古庫，其全名為：(H3C Certified Troubleshooting Expert). 在您決定是否購買之前 可以先下載H3CTE考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費H3CTE模擬測試題的下載鏈接

免費的H3CTE考古庫PDF下載鏈接

免費GB0-540考古庫Demo賞析

　
　
Exam : H3C GB0-540
Title : H3C Certified Senior Engineer for Security – IPS

1. TippingPoint设备支持的网管设备只有SMS，其它网管设备不支持。
A. True
B. False
Answer: B

2. 攻击者向目标主机发送源地址和目的地址均为该主机地址的TCP SYN报文，并以此来达到攻击目的，这种攻击的名称是（ ）。
A. Smurf
B. Land
C. Fraggle
D. IP Spoofing
Answer: B

3. Smurf攻击为了达到攻击的目的，采用的攻击手段是（ ）。
A. 伪造一个SYN报文，其源地址是伪造的不存在的地址，向受害主机发起连接。
B. 向同一个子网的主机发送ICMP重定向报文，请求主机改变路由。
C. 发送ICMP应答请求报文，该请求的目的地址设置为受害网络的广播地址。
D. 利用那些在TCP/IP堆栈实现中信任IP碎片中的报文头所包含的信息来实现自己的攻击。
Answer: C

4. TippingPoint支持单设备管理LSM和企业级集中管理SMS两种管理架构。
A. True
B. False
Answer: A

5. 在SMS操作中，当TippingPoint检测到接入客户端的非法活动时，SMS进行基于策略的门限控制，SMS发送Trap到NMS或者根据配置执行相应的动作。
A. True
B. False
Answer: A

6. 使用Web方式登陆TippingPoint，每次最多只能同时登录一个用户。
A. True
B. False
Answer: B

7. TippingPoint的优势在于（ ）。
A. 对第二层到第七层实行全部的检查
B. 对存在的漏洞提供保护
C. 实现零时差攻击保护
D. 防止应用程序和操作系统损坏或宕机
E. 不必紧急实施为危险漏洞打补丁
Answer: ABCDE

8. 网络钓鱼的危害表现在（ ）。
A. 盗取用户的银行卡或者信用卡的帐户的密码，使用户遭受经济上的损失。
B. 产生大量的TCP办连接，使网络资源被大量消耗。
C. 大量占用网络带宽，使其他用户无法正常浏览网页。
D. 传播大量的病毒到网络上，造成其它设备无法正常使用。
Answer: A

9. Notification Contacts包括的组合有（ ）。
A. SMS + Remote system log + LSM
B. Remote System Log + Management Console
C. Management Console + SMS
D. LSM + Management Console + SMS
Answer: AB

10. 在CLI操作中，显示TippingPoint配置的命令是（ ）。
A. show config
B. dis config
C. dis configuration
D. show configurarion
Answer: D

11. 客户想下载最新的数字疫苗，可以从下列哪个网站获取？
A. www.huawei-3com.com
B. www.3com.com
C. www.huawei.com
D. www.tippingpoint.com
Answer: D

12. TippingPoint IPS对应用保护的过滤器分为哪几类？
A. Attack Pretection, Reconnaissance, Security Policy, Informational
B. Attack Pretection, Scan, Security Policy, Informational
C. Attack Pretection, Reconnaissance, Misuser&Abuse, Informational
D. Attack Pretectio, Scan, Security Policy, Misuser&Abuse
Answer: A

13. 对报文的源地址反查路由表，入接口与以该地址为目的地址的最佳出接口不同的IP报文被视为（ ）攻击。
A. IP Spoofing
B. Land
C. Fraggle
D. ICMP Redirect
Answer: A

14. 下面属于泛洪攻击的是（ ）。
A. ICMP-flood
B. UDP-flood
C. TCP-flood
D. SYN-flood
Answer: ABD

15. TippingPoint对BT下载进行限流，依靠的是TippingPoint的哪种保护功能？
A. 应用层保护
B. 基础设施保护
C. 性能保护
Answer: C

16. 下列选项中，属于DoS攻击的有（ ）。
A. TFN
B. Syn Flood
C. Land
D. ICMP Flood
Answer: ABCD

免費下載GB0-540考古庫Demo

Pass4Side提供最新的Others認證 GB0-540考古庫，其全名為：(Advanced Intrusion Prevention System Configuration). 在您決定是否購買之前 可以先下載GB0-540考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-540模擬測試題的下載鏈接

免費的GB0-540考古庫PDF下載鏈接

免費GB0-520考古庫Demo賞析

　
　
Exam : H3C GB0-520
Title : Building Secure Virtual Private Networks

1. 可提供数据加密功能的 IPSec 协议有（ ）。
A. AH
B. ESP
C. IKE
D. ISAKMP
Answer: B

2. PFS 之所以更安全，是因为每次协商出的 SPI 均不相同。
T. True
F. False
Answer: F

3. 只有将报文加密才能保证不被篡改，除此之外其他办法均无效。
T. True
F. False
Answer: F

4. SSL 版本正确的是（ ）。
A. SSL 1.0
B. SSL 2.0
C. SSL 3.0
D. TLS 3.0
Answer: ABC

5. DVPN 支持全动态地址，即使两个 Client 的 IP 地址都不是静态的，而是动态分配的，也可以自动建立 DVPN 隧道。
T. True
F. False
Answer: F

6. 为保证每个安全联盟所使用的密钥互不相关，每次建立安全联盟都要经过 DH 交换过程。
T. True
F. False
Answer: T

7. SecPath防火墙产品的 HT 加密卡不可以热插拔。
T. True
F. False
Answer: T

8. L2TP 隧道的建立是一个三次握手的过程，而 L2TP 会话的建立是一个四次握手的过程。
T. True
F. False
Answer: F

9. 网络通信对安全性的要求包括（ ）。
A. 一致性
B. 私密性
C. 完整性
D. 身份验证
Answer: BCD

10. AH 和 ESP 均可以穿越 NAT 。
T. True
F. False
Answer: F

11. 密钥长一倍，安全强度就提高一倍。
T. True
F. False
Answer: F

12. 若L2TP VPN接入方式形如"移动员工-PSTN-LAC-Internet-LNS-总部内网"，对这种接入方式，正确的说法有（ ）。
A. LAC 设备多由 ISP 提供； LNS 设备多由总部提供
B. 用户接入的 AAA 服务由 LAC 设备完成
C. 用户的最终授权和验证工作由 LNS 完成
D. L2TP 隧道由 LAC 发起，由 LNS 终结
E. PPP 通道最终建立在移动员工和 LAC 之间
Answer: ABCD

13. SecPath系列安全网关支持多种 VPN 业务，其中能提供数据机密性的是（ ）。
A. L2TP VPN
B. IPSec VPN
C. SSL VPN
D. GRE VPN
Answer: BC

14. 在 SSL 协议中，一个加密套件包括（ ）。
A.密钥交换算法
B.加密算法
C. HMAC 算法
D. SHA 算法
Answer: ABC

15. IPSec 的配置中规定，一个接口上只能应用一个安全策略组，一个安全策略组中可包括多条策略。
T. True
F. False
Answer: T

16. 下面不属于 SSL 握手消息的是（ ）。
A. ClientHello
B. Alert
C. ChangeCipherSpec
D. ApplicationData
Answer: BCD

免費下載GB0-520考古庫Demo

Pass4Side提供最新的Others認證 GB0-520考古庫，其全名為：(Building Secure Virtual Private Networks). 在您決定是否購買之前 可以先下載GB0-520考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-520模擬測試題的下載鏈接

免費的GB0-520考古庫PDF下載鏈接

免費GB0-500考古庫Demo賞析

　
　
Exam : H3C GB0-500
Title : Implementing Secure Firewalls

1. SecPath防火墙的ASPF作为改进的状态检测安全技术，支持以下哪些应用协议检测？
A. PPTP
B. HTTP
C. TFTP
D. FTP
Answer: ABD

2. TACL主要用于匹配一个会话中的所有返回的报文，可以为某一应用返回的报文在防火墙的外部接口上建立一个临时的返回通道。
T. True
F. False
Answer: T

3. 下列哪些功能是无法通过Web网管进行配置的？
A. GRE 相关配置
B. L2TP相关配置
C. PPPoE相关配置
D. 网页过滤相关配置
Answer: AC

4. SecPath500F防火墙可以实现（ ）个MIM接口扩展。
A. 0
B. 1
C. 2
D. 3
Answer: C

5. 在SYN Flood攻击防范命令中可以设置（ ）。
A. enable
B. ip
C. zone
D. blacklist
E. max-rate
F. tcp-proxy
Answer: ABCEF

6. IP Spoofing攻击的手段是（ ）。
A. 伪造IP地址
B. 窃取密码
C. 窃听IP通信
D. 攻击IP协议栈
Answer: A

7. 邮件的收件人过滤可配置的收件人地址长度最大值为（ ）。
A. 64
B. 128
C. 256
D. 512
Answer: B

8. 下列防火墙技术中，能够实现单向访问控制的有（ ）。
A. 应用层状态检测
B. 内容过滤
C. 地址转换
D. 攻击防范
Answer: AC

9. 利用HWTACACS协议认证与授权分离的特性，可以使用RADIUS进行认证，而使用HWTACACS进行授权。
T. True
F. False
Answer: T

10. ACL可以应用于整机或指定接口上，过滤数据包。除此之外，ACL还可以用于（ ） 。
A. QoS中，对数据流量进行分类；
B. DCC中，用来规定触发拨号的条件；
C. NAT中；
D. 报文转发，提高转发速度。
Answer: ABC

11. 以下哪些攻击需要配置域统计。
A. ICMP Flood
B. SYN Flood
C. UDP Flood
D. ARP Flood
Answer: ABC

12. 随着网络技术的普及，网络攻击行为出现得越来越频繁。目前，Internet上常见的安全威胁分为以下几类：非法使用，拒绝服务，信息盗窃，数据篡改等。
T. True
F. False
Answer: T

13. 以下关于安全区域描述不正确的是（ ）。
A. 不同安全区域的安全级别可以相同
B. 一个接口可以添加到多个安全区域中
C. 一个安全区域中可以添加无限个接口
D. Inloopback0接口可以添加到任何安全区域中
Answer: ABCD

14. 下列哪些属于防火墙的必备技术？
A. 网络隔离及访问控制
B. 攻击防范
C. 地址转换
D. 应用层状态检测
E. 身份认证
F. 内容过滤
G.安全管理
Answer: ABCDEFG

15. SecPath系列防火墙可以工作在多种模式下, 在（ ）下, 防火墙通过二层对外连接，所有接口无IP地址。
A. 路由模式
B. 透明模式
C. 混合模式
D. 攻击防范模式
Answer: B

16. 防火墙主要关注边界安全，提供防止常见网络层攻击的特性。SecPath防火墙发现下列哪些网络攻击行为后，可能不会丢弃其报文？
A. IP Spoofing
B. WinNuke
C. IP-Sweep
D. TearDorp
Answer: C

免費下載GB0-500考古庫Demo

Pass4Side提供最新的Others認證 GB0-500考古庫，其全名為：(Implementing Secure Firewalls). 在您決定是否購買之前 可以先下載GB0-500考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-500模擬測試題的下載鏈接

免費的GB0-500考古庫PDF下載鏈接

免費GB0-323English考古庫Demo賞析

　
　
Exam : HuaWei GB0-323English
Title : Constructing Enterprise-level Switching Networks

1. VLAN can be defined based on ( ).
A. IP addresses
B. Network layers
C. MAC addresses
D. Ports
Answer: ACD

2. Which of the following is correct about the PIM Hello message? ( ):
A. The Hello message is sent periodically to all PIM routers in multicast group 224.0.0.13 to establish PIM neighbourship.
B. The Hello message is used to select the DR on the multi-access network.
C. As the IGMP message, the Hello message is used to maintain the relationship between interfaces and host members.
D. When IGMP V1 is adopted on the interface, the Hello message is used to select the DR as the IGMP V1 querier.
Answer: ABD

3. Which of the following is right about the GARP application? ( )
A. The switches in a network domain automatically share the VLAN information and multicast group configuration information.
B. The whole switching network can be monitored precisely through a switch.
C. The changed VLAN or multicast group configuration will be advertised to the whole switching network dynamically, thus reducing the maintenance cost and improving the reliability.
D. Plug-and-play of VLANs and multicast groups are implemented.
Answer: ABCD

4. The length of PAUSE MAC control frame defined in IEEE802.3x is ( ).
A. 16 bytes
B. 32 bytes
C. 64 bytes
D. 96 bytes
Answer: C

5. On the H3C switch, VRRP can be used to implement ( ).
A. Gateway backup of the LAN
B. Gateway backup of the WAN
C. Load balance
D. Port monitoring for improving network reliability
Answer: ACD

6. IGMP is a signaling protocol between hosts and the router, which defines the mechanism to establish and maintain the multicast membership between hosts and the router. ( )
A. True
B. False
Answer: A

7. In STP, it is suggested to modify the value of Max Age indirectly through setting the network diameter. ( )
A. True
B. False
Answer: A

8. Which of the following statements is right about 802.1x ports? ( )
A. 802.1x supports the port-based authentication only.
B. The ports of authenticator fall into controlled ports and uncontrolled ports.
C. Uncontrolled ports always forward bi-directionally whether the authentication is passed or not.
D. Controlled ports transmit EAPOL protocol packets only.
Answer: BC

9. On the H3C S middle-end/low-end switches, STP is enabled by default. ( )
A. True
B. False
Answer: B

10. The reason why RSTP can implement fast restoration of the network is that ( ).
A. RSTP reduces the delay from the Blocking state to the Forwarding state.
B. The port will enter the Forwarding state immediately if the old Root port turn in the Blocking state and the remote end of the new Root port is in the Forwarding state.
C. A non-edge Designated port needs only one handshake with the downstream bridge to transfer from the Blocking state to the Forwarding state quickly.
D. Soon after the bridge is started, the edge port enters the Forwarding state without delay.
Answer: ABCD

11. Which of the following methods cannot be used to configure H3C middle-end and low-end switches? ( )
A. Console
B. Xmodem
C. Telnet
D. Dial-up with Modems
Answer: B

12. Which of the following statements is correct? ( )
A. igmp timer query seconds is used to set the interval of the query packet sending on the switch.
B. igmp timer query seconds is used to set the maximum response time in the query packet.
C. igmp max-response-time seconds is used to set the maximum response time in the query packet.
D. igmp timer other-querier-present seconds is used to set the timeout time of the snooping querier on the switch.
Answer: ACD

13. 801D defines the Disabled state of STP. Which of the following is correct about the port in the Disabled state? ( )
A. It does not receive/send any packet.
B. It does not receive/forward data. It receives but does not send BPDUs, and does not learn addresses.
C. It does not receive/forward data. It receives and forwards BPDUs, and does not learn addresses.
D. It does not receive/forward data. It receives and forwards BPDUs. It begins to learn addresses.
E. It receives or forwards data. It receives and forwards BPDUs. It begins to learn addresses.
Answer: A

14. Multicast protocols fall into group member management protocols and multicast routing protocols. Which of the following is a group member management protocol? ( )
A. GVRP
B. GMRP
C. IGMP
D. PIM
Answer: C

15. SwitchA is an H3C S Layer-2 switch. PC1, PC2 and PC3 connect to E0/1, E0/2 and E0/3 of SwitchA. The three ports belong to VLAN 10, VLAN 20 and VLAN 30 respectively. A server connects to port G1/1 of the switch, which belongs to VLAN100. The PCs are required to isolate from each other, and the PCs shall be able to access the server. After completing the configuration, which of the following statements is right about the switch ports? ( )
A. E0/1 is an access port, with the PVID VLAN 10.
B. E0/2 is a hybrid port, with the Untagged VLAN ID 100, and the Tagged VLAN ID 10.
C. E0/2 is a Hybrid port, with the Untagged VLAN IDs 20 and100, and the Tagged VLAN ID none.
D. G1/1 is a Hybrid port, with the Untagged VLAN IDs 10, 20, and 30, and the Tagged VLAN ID 100.
Answer: C

16. STP is a routing protocol.
A. True
B. False
Answer: B

免費下載GB0-323English考古庫Demo

Pass4Side提供最新的HCSE認證 GB0-323English考古庫，其全名為：(Constructing Enterprise-level Switching Networks). 在您決定是否購買之前 可以先下載GB0-323English考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-323English模擬測試題的下載鏈接

免費的GB0-323English考古庫PDF下載鏈接

免費GB0-363English考古庫Demo賞析

　
　
Exam : HuaWei GB0-363English
Title : Designing Enterprise-level Networks

1. The superiority of OSPF to RIP includes ( ).
A. Variable long subnet mask
B. Multicasting update
C. Protocol packet authentication
D. No routing loop
E. Fast convergence
Answer: DE

2. The security services in the Open System Interconnection security architecture include ( ) and anti-DoS.
1) Authentication
2) Access control
3) Data privacy service
4) Data integrity service
A. 1) and 2)
B. 1), 2) and 3)
C. 2) and 4)
D. 1), 2), 3) and 4)
Answer: D

3. In an MSTP region, all switches must support the MSTP. There is not such a switch that supports RSTP or STP only.
A. True
B. False
Answer: A

4. On the basis of the port-based dynamic NAT, GRE can work properly after NAT traversal.
A. True
B. False
Answer: B

5. Which of the following port states is/are defined in both STP and RSTP? ( )
A. Disabled
B. Blocking
C. Listening
D. Learning
E. Forwarding
Answer: DE

6. Which of the following descriptions about dynamic routing protocol is correct? ( )
A. The fundamentals of RIPng are the same as those of RIP, but RIPng speeds up convergence compared with RIP.
B. The packet format of OSPFv3 is the same as that of OSPF, but OSPFv3 can support IPv6.
C. MBGP is the unique EGP routing protocol in the IPv6 network.
D. IS-IS supports multiple protocols so that it can support IPv6 without any modification.
Answer: C

7. Which of the following descriptions about the BGP route aggregation is correct? ( )
A. It advertises the aggregation route only.
B. It cannot aggregate routes and advertises the original routes only.
C. It can advertise the aggregation route and the original routes.
D. The original AS-Path attribute is changed during route aggregation.
Answer: C

8. To transit a SOHO network to IPv6, we should ( ).
A. Choose an appropriate tunnel technology to access the IPv6 Internet according to the access mode provided by the ISP
B. Use the dual-stack technology to enable all the hosts to access IPv6 and IPv4 network concurrently
C. Use 6to4 technology to access the IPv6 Internet if the ISP does not provide any IPv6 access
D. Use the 6PE technology to access the IPv6 Internet if the ISP provides 6PE access
Answer: AC

9. if the data link layer protocol in the OSPF P2P network is PPP, two OSPF routers whose interface addresses are in different subnets can still establish adjacency and learn the routing information correctly.
A. True
B. False
Answer: A

10. Which of the following descriptions about QoS is/are correct? ( )
A. Traffic policing can be applied on the inbound or outbound interfaces.
B. Traffic shaping can be applied on the inbound or outbound interfaces.
C. Congestion management and queue scheduling can be applied on the inbound or outbound interfaces.
D. RED and WRED are used to avoid TCP global synchronization.
Answer: AD

11. PIM-SM may not need RP.
A. True
B. False
Answer: B

12. To prevent route spoofing, it is preferred to set the OSPF enabled interface that is connected to the users intranet to the Silent state and enable MD5 authentication.
A. True
B. False
Answer: B

13. Which is the encapsulation format used in ADSL dial-up access initiated from PC? ( )
A. IPoA
B. IPoEoA
C. PPPoA
D. PPPoEoA
Answer: D

14. In a Layer 2 switching network, if only IGMP Snooping is enabled on the switch, what will happen? ( )
A. Multicast fails.
B. Multicast works properly, but IGMP Snooping cannot correctly record the member port information.
C. Multicast works properly, and IGMP Snooping can correctly record the member port information.
D. IGMP Snooping will work properly if IGMP Spoofing is enabled.
Answer: A

15. Which of the following is/are correct about data link layer backup? ( )
A. The PPP MP can provide automatic backup and load balancing among the links in a bundle.
B. The dial-watch continuously sends ICMP packets to detect whether the peer is reachable.
C. IEEE 802.3ad can provide automatic backup and load balancing among the links in a bundle.
D. The RPR uses the probe packet at the data link layer to realize self-healing in case of link failure.
Answer: AD

16. The common security equipment includes the Firewall, Intrusion Detection System (IDS) and Intrusion Prevention System (IPS). The IDS serves as the gateway and is deployed on the path of main service traffic, while the Firewall and IPS are deployed on the bypass.
A. True
B. False
Answer: B

免費下載GB0-363English考古庫Demo

Pass4Side提供最新的HCSE認證 GB0-363English考古庫，其全名為：(Designing Enterprise-level Networks). 在您決定是否購買之前 可以先下載GB0-363English考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-363English模擬測試題的下載鏈接

免費的GB0-363English考古庫PDF下載鏈接

免費GB0-283English考古庫Demo賞析

　
　
Exam : HuaWei GB0-283English
Title : Constructing Enterprise-level Routing Networks

1. A BGP router receives a new route from its EBGP peer, which of the following descriptions is correct? ( )
A. The router will immediately send the route to its BGP peers.
B. The router will look up this route in its routing table. If the route is not recorded in the routing table, it will send the route to its BGP peers.
C. The router will check the sent routes information. If it never sends such a route, it will send the route to its BGP peers.
D. The router will check the sent routes information. If it has sent such a route, it will not send the route to its BGP peers.
Answer: C

2. Which of the following descriptions about OSPF STUB area is wrong? ( )
A. A backbone area cannot be configured as STUB area and a virtual link cannot pass through a STUB area.
B. It is unnecessary to configure this attribute on all routers in a STUB area.
C. There is no ASBR in a STUB area.
D. After an area is configured as STUB area, the Type 3 LSA of other areas can be propagated in this area.
Answer: B

3. The ASBR imports four external routes, 192.168.0.0/24, 192.168.1.0/24, 192.168.2.0/24 and 192.168.0/24. These routes are aggregated to one route 192.168.0.0/22 by the ABR. Which routes will the ABR redistribute to the other areas? ( )
A. One aggregation route
B. The four original routes
C. One aggregation route and the four original routes
D. None
Answer: B

4. The multicast address used by OSPF is ( ).
A. 224.0.0.5
B. 224.0.0.6
C. 224.0.0.9
D. 224.0.0.10
Answer: AB

5. When a BGP Speaker advertises the imported IGP routes to the IBGP neighbor, the AS-Path value is the local AS number.
A. True
B. False
Answer: B

6. As shown in the figure, Area 1 is an NSSA area and RouterD is the ABR of the area. The configuration on RouterD is as follows:
ospf 1
area 0.0.0.1
network 10.45.0.0 0.0.0.255
nssa default-route-advertise
#
area 0.0.0.0
network 4.4.4.4 0.0.0.0
network 10.34.0.0 0.0.0.255
Which of the following descriptions about the above network diagram and configuration is correct? ( )
A. RouterD redistributes a Type 7 LSA for a default route in Area 1. RouterE and RouterF can receive this LSA.
B. RouterD redistributes a Type 5 LSA for a default route in Area 1. RouterE and RouterF can receive this LSA.
C. RouterC can receive a Type 5 LSA for a default route redistributed by RouterD.
D. None of the above
Answer: A

7. What is the meaning of the BGP command aggregate 10.110.0.0 255.255.0.0 suppress-policy test ? ( )
A. Advertise the aggregation route only
B. Advertise the aggregation route and all the aggregated routes
C. Advertise the aggregation route and some aggregated routes that meet the filtering conditions
D. Advertise the aggregated routes only,
Answer: C

8. Which of the following descriptions about BGP route aggregation is/are correct? ( )
A. Route aggregation is to aggregate routes of all segments into one or more aggregation routes so as to reduce the size of routing table.
B. If the keyword detail-suppressed is added to the BGP summary command, only the aggregation routes are advertised.
C. BGP route aggregation takes effect on the route imported through the network command only.
D. BGP route aggregation takes effect on the route imported through the import command only.
Answer: AB

9. Compared with IPv4, the IPv6 address is extended to ( ).
A. 128 bits
B. 164 bits
C. 64 bits
D. 256 bits
Answer: A

10. Which of the following descriptions about the IPSec Security Association (SA) is/are correct? ( )
A. The data security service provided by IPSec is realized through SAs.
B. One SA is a unidirectional logical connection between two IPSec peers.
C. The inbound data flow and outbound data flow are respectively processed by the inbound SA and outbound SA.
D. SAs can be set up by the means of manual configuration or automatic negotiation.
Answer: ABCD

11. CAR is realized at the IP layer so that it can only limit the traffic of IP packets. Compared with CAR, LR can limit all the traffic passing through the physical interface.
A. True
B. False
Answer: A

12. Which of the following descriptions about route aggregation in OSPF is/are wrong? ( )
A. The ABR can automatically summarize routes without manual configuration.
B. Aggregation can be made only on the ABR.
C. The router serving as the ABR and the ASBR concurrently cannot summarize routes.
D. The ASBR can summarize all external routes.
Answer: ABCD

13. Which of the following descriptions about route import is/are correct? ( )
A. A routing protocol can import the routes discovered by other routing protocols to enrich its routing information.
B. While importing routes from a routing protocol to another, we can define a route-policy to filter out the unexpected routes.
C. In the process of route importing, it is necessary to specify a metric for the imported route if the target routing protocol cannot directly use the metric of the source routing protocol.
D. Bi-directional importing indicates that two routing protocols import the routes from each other. It may cause routing loop.
Answer: ABCD

14. Which of the following descriptions about queue is correct? ( )
A. WFQ discarding mechanism is Tail Drop on each queue, the same as CQ.
B. WFQ classifies data flow by using ACL.
C. CBWFQ is an improvement of WFQ using the same basic scheduling as WFQ.
D. LLQ will first check the low-latency queue and take packets from the queue. Only when there is no packet in the low-delay queue, it will take the packets from other queues. In addition, it uses other mechanisms to avoid starving to death of the queues.
Answer: D

15. Which of the following descriptions about QoS at the access, convergence and core layers is/are correct? ( )
A. QoS is implemented identically in the access, convergence and core layers.
B. Packets are classified and marked in the access layer.
C. No QoS mechanism should be configured in the access layer.
D. Usually, the queuing mechanism (such as CBQ) and the congestion avoidance mechanism (such as WRED) should be used in the convergence layer.
Answer: BD

16. The BGP mandatory attributes include ( ).
A. Origin
B. AS-Path
C. Next-hop
D. MED
E. Local-preference
F. Community
Answer: ABC

免費下載GB0-283English考古庫Demo

Pass4Side提供最新的HCSE認證 GB0-283English考古庫，其全名為：(Constructing Enterprise-level Routing Networks). 在您決定是否購買之前 可以先下載GB0-283English考古庫的部分演示. Pass4side是全球唯一提供所有IT認證考試考古庫demo免費下載的廠商 ，以下為免費GB0-283English模擬測試題的下載鏈接

免費的GB0-283English考古庫PDF下載鏈接