判斷題

Acme is a small shipping company that has an existing enterprise network comprised of 2 
switches;DSW1 and ASW2. The topology diagram indicates their layer 2 mapping. VLAN 40 is a new VLAN that will be used to provide the shipping personnel access to the server. For security reasons, it is necessary to restrict access to VLAN 20 in the following manner: 
- Users connecting to ASW1’s port must be authenticate before they are given access to the network. -Authentication is to be done via a Radius server:
- Radius server host: 172.120.39.46
-Radius key: rad123 
- Authentication should be implemented as close to the host device possible. 
- Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24. 
- Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20. 
- Packets from devices in any other address range should be dropped on VLAN 20. 
- Filtering should be implemented as close to the server farm as possible. 
The Radius server and application servers will be installed at a future date. You have been tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.
 


您可能感興趣的試卷

你可能感興趣的試題

2.判斷題

Network topology exhibit: 
 


You work as a network administrator at . You study the network topology exhibit carefully. is a small 
company that has an existing enterprise network consisting of two switches named 1 and 2. The network topology schemata indicates their layer 2 mapping. VLAN 40 is a new VLAN that will be used to provide the shipping personnel access to the server. For security reasons, it is necessary to restrict access to VLAN 20 in the following manner: 
Users connecting to 1’s port must be authenticate before they are given access to the network. Authentication is to be done via a Radius server: 
Radius server host: 172.120.39.46 
Radius key: key 
Authentication should be implemented as close to the host device possible. 
Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24. 
Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20. 
Packets from devices in any other address range should be dropped on VLAN 20. Filtering should be implemented as close to the server farm as possible. 
The Radius server and application servers will be installed at a future date. You have been tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.

3.單項(xiàng)選擇題Which bridge ID belongs to switch 1? ()

A.32928 000d bd33 029b
B.24623 000f 34f5 039b
C.32928 000d bd03 029b
D.32768 000d bd33 029b
E.32769 000d 65db 01dd
F.32815 000d bd03 029b
G.None of the other alternatives apply

4.單項(xiàng)選擇題Which port state is interface Fa0/2 of switch 2 in for VLANs 1 and 160? ()

A.Listening
B.Learning
C.Disabled
D.Blocking
E.Forwarding
F.Discarding
G.None of the other alternatives apply

5.單項(xiàng)選擇題Which port role has interface Fa0/2 of switch 1 adopted for VLAN 47?()

A.Root port
B.Nondesigned port
C.Designated port
D.Backup port
E.Alternate port
F.None of the other alternatives apply

最新試題

Refer to the exhibit. Initially, LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link?()

題型:多項(xiàng)選擇題

Which two statements about the various implementations of STP are true?()

題型:多項(xiàng)選擇題

Refer to the exhibit. What does the command channel-group 1 mode desirable do? () 

題型:單項(xiàng)選擇題

Which two statements are true about BPDU port-guard and BPDU filtering?()

題型:多項(xiàng)選擇題

What will occur when a nonedge switch port that is configured for Rapid Spanning Tree does not receive a BPDU from its neighbor for three consecutive hello time intervals?()

題型:單項(xiàng)選擇題

Refer to the exhibit and the partial configuration of switch SW_A and SW_B. STP is configured on all switches in the network. SW_B receives this error message on the console port:00:06:34: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/5 (not half  duplex), with SW_A FastEthernet0/4 (half duplex) , with TBA05071417(Cat6K-B) 0/4 (half duplex). What would be the possible outcome of the problem?()

題型:單項(xiàng)選擇題

Refer to the exhibit. All network links are FastEthernet. Although there is complete connectivity throughout the network, Front Line users have been complaining that they experience slower network performance when accessing the server farm than the Reception office experiences. Based on the exhibit, which two statements are true?()

題型:多項(xiàng)選擇題

Based on the show spanning-tree vlan 200 output shown in the exhibit, which two statements about the STP process for VLAN 200 are true? ()

題型:多項(xiàng)選擇題

Refer to the exhibit. Which Virtual Router Redundancy Protocol (VRRP) statement is true about the roles of the master virtual router and the backup virtual router?()

題型:單項(xiàng)選擇題

During routine maintenance, G1/0/1 on DS1 was shutdown. All other interface were up. DS2 became the active HSRP device for Vlan101 as desired. However, after G1/0/1 on DS1 was reactivated. DS1 did not become the active HSRP device as desired. What need to be done to make the group for Vlan101 function properly ? ()

題型:單項(xiàng)選擇題