首页 > 题库 > 200-301

高级CCNA 200-301练习测试与真实考试模拟，思科认证网络助理资格认证 | 思博网络

通过思博网络的优质练习测试以及真实的考试模拟，为200-301级别的CCNA考试做好准备。我们的平台提供了丰富的资源，包括各种考试题库和样题。这些资源的设计都旨在帮助学员更好地掌握网络方面的理论知识和实践技能。参加模拟考试，以模拟真实的考试环境，从而提升你的应试能力。请深入浏览我们丰富的考试资料，以熟悉与考试相关的路由器与交换机配置知识。理解理论性内容同样非常重要。我们的历年真题和答案能够帮助你更加深入地掌握这些知识。通过我们的在线历年真题和考试模拟系统，您可以模拟考试环境，从而更好地进行考试练习。请信任思博网络，他们能够提供一流的考试备考资源，帮助您成功获得CCNA认证。

问题 #1

In which two places can thresholding settings be configured? (Choose two.)

A. on each IPS rule

B. globally, within the network analysis policy

C. globally, per intrusion policy

D. on each access control rule

E. per preprocessor, within the network analysis policy

正确答案：AB

问题 #2

Which object type supports object overrides?

A. time range

B. security group tag

C. network object

D. DNS server group

正确答案：C

问题 #3

Which two conditions are necessary for high availability to function between two Cisco FTD devices? (Choose two.)

A. The units must be the same version

B. Both devices can be part of a different group that must be in the same domain when configured within the FMC.

C. The units must be different models if they are part of the same series.

D. The units must be configured only for firewall routed mode.

E. The units must be the same model.

正确答案：C

问题 #4

A network security engineer must replace a faulty Cisco FTD device in a high availability pair. Which action must be taken while replacing the faulty unit?

A. Shut down the Cisco FMC before powering up the replacement unit.

B. Ensure that the faulty Cisco FTD device remains registered to the Cisco FMC.

C. Unregister the faulty Cisco FTD device from the Cisco FMC

D. Shut down the active Cisco FTD device before powering up the replacement unit.

正确答案：AB

问题 #5

Which two OSPF routing features are configured in Cisco FMC and propagated to Cisco FTD? (Choose two.)

A. OSPFv2 with IPv6 capabilities

B. virtual links

C. SHA authentication to OSPF packets

D. area boundary router type 1 LSA filtering

E. MD5 authentication to OSPF packets

正确答案：B

问题 #6

A network engineer implements a new Cisco Firepower device on the network to take advantage of its intrusion detection functionality. There is a requirement to analyze the traffic going across the device, alert on any malicious traffic, and appear as a bump in the wire How should this be implemented?

A. Specify the BVl IP address as the default gateway for connected devices.

B. Enable routing on the Cisco Firepower

C. Add an IP address to the physical Cisco Firepower interfaces.

D. Configure a bridge group in transparent mode.

正确答案：C

问题 #7

An organization has a Cisco FTD that uses bridge groups to pass traffic from the inside interfaces to the outside interfaces. They are unable to gather information about neighbouring Cisco devices or use multicast in their environment. What must be done to resolve this issue?

A. Create a firewall rule to allow CDP traffic.

B. Create a bridge group with the firewall interfaces.

C. Change the firewall mode to transparent.

D. Change the firewall mode to routed.

正确答案：C

问题 #8

Which command-line mode is supported from the Cisco Firepower Management Center CLI?

A. privileged

B. user

C. configuration

D. admin

正确答案：D

问题 #9

Which interface type allows packets to be dropped?

A. passive

B. inline

C. ERSPAN

D. TAP

正确答案：D

问题 #10

Which two packet captures does the FTD LINA engine support? (Choose two.)

A. Layer 7 network ID

B. source IP

C. application ID

D. dynamic firewall importing

E. protocol

正确答案：DE

问题 #11

Which group within Cisco does the Threat Response team use for threat analysis and research?

A. Cisco Deep Analytics

B. OpenDNS Group

C. Cisco Network Response

D. Cisco Talos

正确答案：BC

问题 #12

Which command is run on an FTD unit to associate the unit to an FMC manager that is at IP address 10.0.0.10, and that has the registration key Cisco123?

A. configure manager local 10.0.0.10 Cisco123

B. configure manager add Cisco123 10.0.0.10

C. configure manager local Cisco123 10.0.0.10

D. configure manager add 10.0.0.10 Cisco123

正确答案：D

查看更多题库 »