QUESTION 141
IGMP group entries play an important role in multicast forwarding. An administrator runs a command to view information about a multicast entry. The information is as follows:

Given this, which of the following statements are true?

A. This entry is created when the device receives an IGMP Join message from a user.
B. Expires indicates the aging time of the IGMP group.
C. This entry can be used to construct the corresponding (S, G) entry.
D. 225.1.1.2 is the address of the group that the user joins

Correct Answer: ABCD
QUESTION 142
IPv6 is a second-generation network laver protocol and is also called IPng. Which of the following statements are true about the comparison between IPv6 and IPv4

A. IPv4 is not secure by design, whereas IPv6 supports end-to-end security.
B. An IPv6 address is much longer than an IPv4 address, and IPV6 provides more addresses.
C. The processing of IPv6 packet headers is more complex than that of IPv4 packet headers, but IPv6 provides new functions and higher scalability.
D. Both IPv6 and IPv4 support address autoconfiguration to enable hosts to automatically discover networks and obtain IP addresses.

Correct Answer: ABD
QUESTION 143
In IPv6, to communicate with a destination host, a host must obtain the link-layer address of the destination host through ARP.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 144
When receiving a packet that does not match any session table entry, the firewall discards the packet to prevent external attacks and ensure internal information security.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 145
Security policy is the core feature of firewalls. Only valid traffic that complies with security policies can be forwarded by firewalls. Which of the following statements are true about
security policy matching rules?

A. If a security policy contains multiple matching conditions, the relationship between them is AND.
B. When multiple security policy rules are configured, they are sorted in a list by configuration sequence by default. A security policy rule configured earlier is placed higher in the list and has a higher priority.
C. Multiple values can be configured for a single matching condition, and the values are logically ANDed.
D. The system has a default security policy named default, where all matching conditions are any and the default action is permit.

Correct Answer: AB
QUESTION 146
GRE is a Layer 2 VPN encapsulation technology that encapsulates packets of certain data link layer protocols so that the encapsulated packets can be transmitted over an IP network.

A. TRUF
B. FALSE

Correct Answer: B
QUESTION 147
When an SSH client accesses an SSH server for the first time and the SSH server’s public key is not configured on the SSH client, you can enable first-time authentication on the SSH client. This allows the SSH client to access the SSH server and saves the SSH server’s public key on the SSH client. In this way, the next time the SSH client accesses the SSH server, the SSH client can use the saved public key to authenticate the SSH server.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 148
When configuring VRRP, note that the virtual IP addresses of VRRP groups must be unique, but the interfaces in the same VRRP group can use different VRIDs.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 149
When creating a single-hop BFD session for the first time, bind the single-hop BFD session to the peer IP address and the local address. To modify a configured BFD session, delete it and create a new one.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 150
An enterprise administrator wants to configure single-hop BFD to implement fast detection of direct links. Which of the following configurations are mandatory?

A. Configure a multicast IP address for BFD.
B. Enable BFD globally.
C. Configure the local discriminator of a BFD session.
D. Configure the remote discriminator of a BFD session.

Correct Answer: ABD
QUESTION 151
As shown in the figure, VRRP is associated with a BFD session. When a backup device detects a fault through BFD, the backup device immediately assumes the master role after the Master_Down_Timer timer expires.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 152
BFD provides fast fault detection independent of media and routing protocols. To use this mechanism to detect link connectivity, devices at both ends must support this feature.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 153
NETCONF is a network configuration protocol that automates network configuration in a programmable manner, simplifying and accelerating network service deployment. Which of the following operations can be performed by using this protocol?

A. Modifying configurations
B. Restoring configurations
C. Deleting configurations
D. Backing up configurations

Correct Answer: ABCD
QUESTION 154
On a WLAN where an AC and APs are connected through a Layer 3 network, APs can obtain the AC IP address 10.100.30.10 from the Option field carried in the response packets sent by a DHCP server. (Enter only digits.)

Correct Answer: 43
QUESTION 155
A large enterprise wants to reduce the number of broadcast domains and assign the same VLAN and IP address to a STA each time it accesses the WLAN. To meet these requirements, you can configure the even VLAN assignment algorithm in a VLAN pool.

A. TRUE
B. FALSE

Correct Answer: B
QUESTION 156
The following figure shows the WLAN topology of a large enterprise, where the direct forwarding mode is used. Which of the following is the default data forwarding path after inter-AC Layer 3 roaming of a STA?

A. STA->FAP->FAC-> HAC -> HAP->HAC->SW1 -> Internet
B. STA->FAP ->FAC-> HAC-> HAP->SW1-> Internet
C. STA->FAP ->FAC->HAC ->SW1 -> Internet
D. STA ->FAP ->FAC ->SW2-> Internet

Correct Answer: C
QUESTION 157
A data center is a set of complex facilities including equipment rooms. Which of the following devices are involved in data center deployment?

A. Server
B. Switch
C. Storage
D. Firewall

Correct Answer: ABCD
QUESTION 158
In an OSPF process of a router, the import-route command can be used to import the routes of other OSPF processes.

A. TRUE
B. FALSE

Correct Answer: A
QUESTION 159
OSPF networks are classified into four types of networks by link layer protocol. In which of the following networks are all protocol packets multicast?

A. Broadcast
B. P2MP
C. NBMA
D. P2P

Correct Answer: A
QUESTION 160
On an office network of an enterprise, OSPF is enabled on two directly connected routers. During adjacency establishment, the state machine stays in the 2-way state. Which of the following statements are not possible causes?

A. The N-bit and E-bit of Hello packets are the same.
B. Area IDs are different.
C. Hello time values are different.
D. Router IDs conflict.

Correct Answer: ABC