单项选择题

Two routers configured to run BGP have been connected to a firewall， one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer， including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？（）

A. Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works， BGP will work， since telnet and BGP both use TCP to transport data.
B. Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them， BGP should work， since BGP uses IP to transport packets.
C. There is no way to make BGP work across a firewall without special configuration， so there is no simple test that will show you if BGP will work or not， other than trying to start the peering session.
D. There is no way to make BGP work across a firewall.

<上一题目录下一题>

热门试题

多项选择题Youarethenetworkadministratorofamedium-sizedcompany，andusersarecomplainingthattheycannotsendemailstosomeorganizations.Duringyourtroubleshooting，younoticethatyourDNSMXrecordisblacklistedbyseveralpublicblacklistfilters.AfterclearingtheselistingsforyourIPaddress，andassumingthatyouremailserverhastherightvirusprotectioninplace，whataretwopossiblesolutionstopreventthisfromhappeninginthefuture？（）

A.Change your Internet provider.
B.Change your public IP address.
C.Allow the email server to send traffic only to TCP port 25.
D.Put your email server in a DMZ.
E.Use a separate public IP address for your email server only.

单项选择题Whiledeployinganewswitch，youaccidentlyconnectports3 12and3 18together，creatingaloop.STPdetecteditandplacedport3 18inblockingmode.WhydidSTPnotplaceport3 12inblockingmodeinstead？（）

A. Port 3/12 was already up and forwarding before the loop was created.
B. Port priority is based on lowest priority and lowest port number.
C. You connected the wire on port 3/18 last.
D. None of the above， it is purely random.

单项选择题AfterapplyinganewACLonadevice，itsCPUutilizationrosesignificantlyandmanymessagesstartingwith %SEC-6-IPACCESSLOG appearedontheSyslogserver.Whatcanbedonetoresolvethissituation？（）

A.Increase memory allocation for ACLs.
B.Remove all entries from the ACL and use a single permit ip any any statement.
C.Remove the log keyword from each ACL entry.
D.Reboot the device after the ACL has been applied.

单项选择题Youdeployednewfibersinyournetworktoreplacecopperspansthatweretoolong.Whilereconnectingthenetwork，youexperiencednetworkproblemsbecauseyoureconnectedwrongfiberstowrongports.Whatcouldyoudotopreventthistypeofprobleminthefuture，particularlywhenconnectingandreconnectingfiberpairs？（）

A. Only use fiber in pairs.
B. Configure root guard on your switches.
C. Do not use fiber but use copper.
D. Configure UDLD to prevent one-way link conditions.

单项选择题WhichfeaturewouldpreventguestusersfromgainingnetworkaccessbyunplugginganIPphoneandconnectingalaptopcomputer？（）

A.IPSec VPN
B.SSL VPN
C.port security
D.port security with statically configured MAC addresses
E.private VLANs