You want to enhance the security within the LAN and prevent 

第1题：

You are responsible for increasing the security within the Company LAN. Of the following choices  listed below，  which is true regarding layer 2 security and mitigation techniques？ （）

• A、 Enable root guard to mitigate ARP address spoofing attacks.
• B、 Configure DHCP spoofing to mitigate ARP address spoofing attacks.
• C、 Configure PVLANs to mitigate MAC address flooding attacks.
• D、 Enable root guard to mitigate DHCP spoofing attacks.
• E、 Configure dynamic APR inspection （DAI） to mitigate IP address spoofing on DHCP untrusted  ports.
• F、 Configure port security to mitigate MAC address flooding  
• G、 None of the other alternatives apply

第2题：

You want to enhance the security within the LAN and prevent VLAN hopping.  What two steps can be taken to help prevent this？（）

• A、Enable BPD guard
• B、Disable CDP on ports where it is not necessary
• C、Place unused ports in a common unrouted VLAN
• D、Prevent automatic trunk configuration
• E、Implement port security

第3题：

第4题：

You are the administrator of your company’s network. Ten Windows 2000 Professional computers are located in the Research department. The computers contain highly confidential information. You want the 10 computers to be able to communicate with other Windows 2000 Professional computers on the network. However, you do not want them to communicate with computers that are not running Windows 2000, including those that are running Windows 95, Windows 98 and Windows NT.  You want to configure a security policy on each computer to ensure that the confidential information is secure. What should you do?（）

• A、Use Security Configuration and Analysis to import the Hisecws.inf security template file to modify the default security settings.
• B、Use security templates to create a security template file and import the security settings to modify the default security settings.
• C、Use the local computer policy to disable the access to this computer from the network option.
• D、Use Secedit.exe to reconfigure the computers’ default security settings to not allow anonymous access to the computers.

第5题：

You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）

• A、[edit interfaces]
• B、[edit security zones]
• C、[edit system services]
• D、[edit security interfaces]

第6题：

Which of the following should you enable to prevent a switch from forwarding packets with source  addresses that are outside an administratively defined group？ （）

• A、 DAI
• B、 STP
• C、 PVLAN
• D、 port security

第7题：

Which version of a view would you use if you just want a quick， easy view within your XPage？（）

• A、Data Table Control
• B、View Control
• C、Repeat Control
• D、Filter by category View Control

第8题：

第9题：

In which scenario will you use the Flashback Transaction Query feature？（）

• A、 when you want to restore an important table that is dropped from the Recycle Bin
• B、 when you want to obtain the SQL statements to undo the deletion of some important records from a table by a transaction
• C、when you want to restore a dropped user’s schema
• D、 when a row of a table is updated many times within a specific time period and you want all the versions of the row in the specified time period

第10题：

You have a combined Windows 2000 and Windows 98 network that contain sensitive data. You want to utilize as many new Windows 2000 security features as possible. You want to customize a security policy on each computer to ensure that data is kept confidential and secured. Allcomputers must still be able to communicate with each other over the network. What should you do？（）

• A、Use the security configuration and analysis console to improve the HISECWS security  template file.
• B、Use the local computer policy to disable the access this computer from the network option.
• C、Use SECEDIT to reconfigure the computer default security settings to not allow anonymous  access to the computer.
• D、Create a policy that excludes write access to the windows 2000 computers then apply the  policy to all non-windows 2000 computers.
• E、None of the above, Windows 9X systems cannot be secured using security template files.