A network engineer wants to allow a temporary entry for a re

第1题：

第2题：

第3题：

第4题：

A network engineer wants to allow a temporary entry for a remote user with a specific usename and password so that the user can access the entire network over the internet.which ACL can be used?（）

• A、reflexive
• B、extended
• C、standard
• D、dynamic

第5题：

Which three practices are important to the implementation of a DiffServ QoS architecture？（）

• A、 Because services are allocated throughout the network before the transmission of data begins， traffic classes can be guaranteed QoS services.
• B、 Traffic classes are marked with Layer 2 markings to allow for more granularity in identifying traffic classes.
• C、 Traffic classes are marked with Layer 3 markings to allow them to traverse different network types without loss of QoS information.
• D、 Traffic classes allow networks to provide proper QoS treatment of packets without applications having to request services.
• E、 Based upon the network capabilities， QoS markings are placed on packets as needed throughout the network to allow for proper QoS treatment of packets.
• F、 QoS markings are placed on packets as close to the network edge as possible to allow distribution and core devices to determine QoS actions as quickly as possible.

第6题：

第7题：

IP routing protocols， such as OSPF and Enhanced EIGRP， are used primarily in network designs that contain entry and exit points to the network from service providers. What is a common trait of IP routing  protocols？（）  

• A、 They add needed overhead in smaller deployments.
• B、 They are essential for optimum and redundant forwarding.
• C、 They are used primarily in larger network designs，to support different networks and single entry and  exit points.
• D、 They are usually necessary in smaller deployments.

第8题：

第9题：

You work as a network engineer for the company， you want to configure two BGP speakers to form an EBGP session across a firewall. On the engineer’s network， the firewall always permits TCP sessions that are initiated from the inside network （the network attached to the inside interface of the firewall）. What prerequisite is there for enabling BGP to run on this network？（）

• A、EBGP multihop will need to be configured for this to work.
• B、This should work with normal BGP peering， with no additional configuration on the BGP speakers or the firewall.
• C、The BGP protocol port must be opened on the firewall
• D、There is no way to make BGP work across a firewall.

第10题：

Which two statements are true about the Cisco Classic （CBAC） IOS Firewall set？（）

• A、It can be used to block bulk encryption attacks
• B、It can be used to protect against denial of service attacks
• C、Traffic originating from the router is considered trusted， so it is not inspected
• D、Based upon the custom firewall rules， an ACL entry is statically created and added to theexisting ACL permanently
• E、Temporary ACL entries that allow selected traffic to pass are created and persist for theduration of the communication session