最新的CCNA認證 200-601考試題庫

問題1

Given a ring topology, which loop prevention mechanism provides the fastest reconvergence time after a link failure?

A. Rapid Per-VLAN Spanning Tree Protocol

B. Spanning Tree Protocol

C. Multiple Spanning Tree Protocol

D. Resilient Ethernet Protocol

正確答案: D

問題2

Which option best describes the ProfiNET Discovery and Configuration Protocol (DCP)?

A. Is only supported in Conformance Class B and C devices

B. Can be used to override both static and dynamically (DHCP/BOOTP) assigned IP addresses

C. Uses the ProfiNET-IRT communication class

D. Cannot be used to reset a device to factory defaults

正確答案: B

問題3

Given the CIA triad elements, which ensures first that the data is encrypted and secure, second that the data is trustworthy, and third that the data is accessible by those who need it?

A. ACI

B. ICA

C. CAI

D. CIA

正確答案: D

問題4

Refer to the exhibit.

The control system depicted in the exhibit uses VLAN 300 for all of its device ports and
PVST is enabled on each switch to switch connection. L2SW4 was inserted between
L2SW3 and L2SW5. Links FO2 and FO3 were added and FO1 was disconnected.
Prior to the installation of L2SW4, PanelView was able to communicate with PLC#1. After the change, PLC#1 and PanelView are still able to communicate but neither PLC#1 or
PanelView are able to communicate with I/O #1.
L2SW4# show run interfaces FastEthernet 1/1
description I/O#1
switchport access vlan 300
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
L2SW4# show interfaces trunk
Port Mode Encapsulation Status Native vlan Gi1/1 on 802.1q trunking 1 Gi1/2 on 802.1q trunking 1 Port Vlans allowed on trunk Gi1/1 1,3-9, 301-305,400 Gi1/2 1,3-9, 301-305,400
Port Vlans allowed and active in management domain Gi1/1 1,3-9, 301-305,400 Gi1/2 1,3-
9 , 301-305,400 Port Vlans in spanning tree forwarding state and not pruned Gi1/1 1,3-9,
3 01-305,400 Gi1/2
Based on the output from the switch, what is preventing I/O#1 from communicating with
PLC#1 and PanelView?

A. BPDU guard has error-disabled interface FastEthernet 1/1 on LWSW4

B. Interface FastEthernet 1/1 on LWSW4 should be configured as a trunk port

C. The trunks connecting L2SW4 to L2SW3 and L2SW5 don't allow VLAN 300 traffic

D. The trunks connecting L2SW4 to L2SW3 and L2SW5 have the wrong encapsulation type

正確答案: C

問題5

Which in-depth approach is used when deploying defense in an industrial zone?

A. Collect log files at a central location for easy back-up and encryption to provide privacy.

B. Use PLCs and control systems from multiple vendors in such a way that the process will become resilient for failures of one vendor.

C. Deploy two factor authentications for all operators which need to login remote while working from home.

D. Create multiple zones in the industrial zone and protect / inspect traffic between the zones with firewalls and intrusion monitors.

正確答案: D

問題6

Refer to the exhibit.

You are required to implement traffic segmentation in the network. See the table for relevant device details:
L2SW4, L2SW5, and L2SW6 are connected to L3SW1 with 802.1Q trunks with VLAN 191 and VLAN 398 allowed on the trunk.
You have the following information from L3SW1:
L3SW1# show run interfaces
interface Vlan1
no ip address
shutdown
!
interface Vlan2
ip address 10.2.2.2 255.255.255.248
!
interface Vlan191
ip address 10.10.27.126 255.255.255.192
!
interface Vlan200
ip address 10.20.20.1 255.255.255.248
!
interface Vlan398
ip address 10.15.153.1 255.255.255.0
L3SW1# show ip route
*** Output Omitted ***
10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks
C 10.2.2.1/29 is directly connected, Vlan2
C 10.10.27.64/26 is directly connected, Vlan191
C 10.15.153.0/24 is directly connected, Vlan398
C 10.20.20.0/29 is directly connected, Vlan200
S 10.200.200.0/24 [1/0] via 10.20.20.2
S* 0.0.0.0/0 [1/0] via 10.2.2.1
You are required to implement a configuration that will meet the following connectivity requirements:
* The Administrator's Station must have full access to PanelView
* PanelView should have limited access, based on specific TCP ports, to PLC#1 and I/O#1
* The Administrator's Station should have no access to PLC#1 and I/O#1
* PLC#1 and I/O#1 should be able to communicate with each other on any port
Which action will allow you to meet the connectivity requirements?

A. Deploy an inbound ACL on interface VLAN 191 to control the traffic from the Administrator's Station and PanelView to PLC#1 and I/O#1

B. Put interface VLAN 191 and interface VLAN 398 into different Virtual Routing and Forwarding (VRF) instances on L3SW1

C. Implement an ACL on Firewall1 to control the traffic flow between VLAN 191 and VLAN 398

D. No change is required, the traffic is already limited appropriately by the VLAN segmentation

正確答案: A

問題7

Refer to the exhibit.

A new device, PanelView, has been added to the network. See the table for device details:
All devices are able to ping their default gateway and all other devices except PanelView.
PanelView can only ping its default gateway.
After the administrator has done some investigation they have discovered the following information:
L3SW1# show run interface
interface Vlan1
no ip address
shutdown
!
interface Vlan191
ip address 10.10.27.125 255.255.255.192
ip helper-address 165.28.96.96
ip helper-address 165.28.32.235
no ip redirects
standby 191 ip 10.10.27.126
standby 191 priority 120
standby 191 preempt delay minimum 90
no ip route-cache
!
interface Vlan398
ip vrf forwarding mosaic
ip address 10.15.153.203 255.255.255.0
ip helper-address 10.15.154.252
ip helper-address 10.1.0.252
standby 98 ip 10.15.153.202
standby 98 priority 120
standby 98 preempt delay minimum 90
!
interface Vlan399
ip vrf forwarding mosaic
ip address 10.15.154.203 255.255.255.0
ip helper-address 10.1.0.252
ip helper-address 10.1.1.252
standby 99 ip 10.15.154.254
standby 99 priority 120
standby 99 preempt delay minimum 90
!
L3SW1# show ip route connected
1 0.0.0.0/8 is variably subnetted, 1149 subnets, 17 masks
C 10.10.27.64/26 is directly connected, Vlan191
C 10.10.31.254/32 is directly connected, Loopback1
What is preventing PanelView from pinging the other endpoints in the network?

A. Firewall1 is blocking pings from PanelView to the other endpoints

B. An access list on L3SW1 is blocking pings from PanelView to the other endpoints

C. SVI 191 is in a different routing instance than SVI 398 and SVI 399

D. Routing isn't enabled on L3SW1 for SVI 398 and SVI 399

正確答案: C

問題8

To correctly integrate a Cisco Industrial Ethernet switch into a ProfiNET management system such as SIMATIC STEP 7 or TIA Portal, which is a mandatory action?

A. Enable SNMP on the switch

B. Enable Quality of Service (QoS) and ensure the management station interface is trusted

C. The General Station Description (GSD) file must be uploaded from the switch to the management system.

D. Configure an IP address on the ProfiNET VLAN interface

正確答案: C

問題9

Refer to the exhibit.

CIP Implicit messages from I/O#1 are being marked IP DSCP 47 by the endpoint and this marking is trusted by L2SW4. L2SW4 is configured to map DSCP 47 to output queue 1 threshold 1. You have received feedback that some of these messages are not being received. Executing the show mls interface GigabitEthernet statistics command on L2SW4 results in:
L2SW4# show mls interface GigabitEthernet 1/1 statistics
< output omitted>
output queues dropped:
queue: threshold1 threshold2 threshold3
queue 0 0 0 0
queue 1 309232345 450 0
queue 2 300 10 0
queue 3 91 0 0
Repeating this command results in the counters incrementing for queue 1 threshold 1.
What are two options for reducing the packet loss on this interface while preserving the end-to-end DSCP marking? (Choose two)

A. Configure I/O#1 to mark this traffic with a different DSCP that is mapped to a less congested queue

B. Increase the buffer allocation for input queue 1

C. Change the egress queue map on L2SW4 to map this traffic to a less congested queue

D. Alter the service policy to police to a higher CIR

E. Increase the buffer allocation for output queue 1

正確答案: C,E

最新的Cisco Managing Industrial Networks for Manufacturing with Cisco Technologies - 200-601免費考試真題

最新更新

站內鏈接

聯系我們