H3CSE-Routing & Switching GB0-391 Real Exam Questions and Answers FREE Updated on Dec 28, 2021
GB0-391 Ultimate Study Guide - TestPassKing
NEW QUESTION 88
MPLS penultimate hop technology reduces _______ packet forwarding complexity.
- A. down the number of the second jump on the public network equipment
- B. down the number of first-hop public network equipment
- C. pour the number of first and second hop hop public network equipment
- D. Private network equipment
Answer: B
NEW QUESTION 89
The frequency range of the baseband data signal used by common EoC technology is generally ____
- A. 110MHz~ 1000 MHz
- B. 5 ～ 65Mhz
- C. 0 ～ 30MHz
- D. 87MHz ～ 108MHz
Answer: C
NEW QUESTION 90
ASPF anti- firewall with features are ______ .
- A. by a strong session logging function
- B. can be detected transmission protocol information, it can be the source and destination addresses and ports, decided to TCP or UDP whether the packet into the internal network through a firewall.
- C. Root according invasive application layer connection based protocol state dynamically determine whether a packet is allowed to pass through the firewall to the internal network, so as to prevent malicious
- D. mention for untrusted sites of the Java Blocking ( the Java blocking ) function
Answer: A,B,C,D
NEW QUESTION 91
A secure network must meet - conditions
- A. entire network has a sound management system
- B. access into the Inte RN E t has adequate security system when
- C. Have sufficient encryption and anti-counterfeiting means when transmitting data on the Internet
- D. determined users within the network access security and legal security
Answer: A,B,C,D
NEW QUESTION 92
Use the command on the MSR router:
dis qos wfq interface GigabitEthernet 0/1
Get the following information:
Interface: GigabitEthernet0/1
Output queue: ( Urgent queuing: Size/Length/Discards ) 0/100/0
Output queue: ( Protocol|queuing: Size/Length/Discards ) 0/500/0
Output queue: ( Weighted Fair queuing: Size/Length/Discarcds ) 1023/1024/52719
Hashed b DSCP
Hashed queues 1/2/64 ( Active/Max active/Total )
Then the correct one in the following statement is ____ .
- A. When the number of queues is active before 2
- B. team column a maximum length of 1024 , the current data hold chamber, and packet loss
- C. end port using the WFQ queues, the weight type DSCP
- D. calendar history activated off the maximum number of queues is 2
- E. end port using the WFQ queues, the weight of type IP priority
Answer: B,C,D
NEW QUESTION 93
As shown in the figure, the configurations of the two security gateways are:
RTA
[RTA] ike peer 123
[RTA-ike-peer-123] pre-shared-ke simp le 123
[RTA-ike-peer-123] remote-address 10.2.1.2
[RTA-ike-peer-123] local-address 10.2.1.1
[RTA-ike-peer-123]quit
[RTA] ipsec proposal 1
[RTA-ipsec-proposal-1] quit
[RTA]acl number 3000
[RTA-acl-adv-3000] rule 0 permit ip source 10.1.1.0 0.255.255.255
[RTA]ipsec polic 1 1 isakmp
[RTA-ipsec-polic-isakmp-1-1] securit acl 3000
[RTA-ipsec-polic-isakmp-1-1] ike-peer 123
[RTA-ipsec-polic-isakmp-1-1] proposal 1
[RTA-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA] interface Serial 0/2/1
[RTA-Serial0/2/1] ip address 10.2.1.1 255.255.255.0
[RTA-Serial0/2/1]] ipsec polic 1
RTB:
[RTB] ike peer 123
[RTB-ike-peer-123] pre-shared-ke simple 123
[RTB-ike-peer-123] remote-address 10.2.1.1
[RTB-ike-peer-123] local-address 10.2.1.2
[RTB-ike-peer-123]quit
[RTB] ipsec proposal 1
[RTB-ipsec-proposal-1] quit
[RTB]acl number 3000
[RTB-acl-adv-3000] rule 0 permit ip source 10.3.1.0 0.255.255.255
[RTB]ipsec polic 1 1 isakmp
[RTB-ipsec-polic-isakmp-1-1] securit acl 3000
[RTB-ipsec-polic-isakmp-1-1] ike-peer 123
[RTB-ipsec-polic-isakmp-1-1] proposal 1
[RTB-ipsec-polic-isakmp-1-1] quit
[RTA] interface Ethernet 0/1/0
[RTA-Serial0/2/1] ip address 10.3.1.1 255.255.255.0
[RTB] interface Serial0/2/1
[RTB-Serial0/2/1] ip address 10.2.1.2 255.255.255.0
[RTB-Serial0/2/1] ipsec polic 1
This shows that ______ .
- A. any any party initiated SA negotiation can not succeed
- B. Only there from RTB to RTA launched the SA negotiation can succeed
- C. Only there from the RTA to RTB launch of SA negotiation can succeed
- D. either any party initiated SA negotiation can be successful
Answer: A
NEW QUESTION 94
BGP MPLS VPN on a network station of the public network equipment, displa mpls ldp lsp command command checks its label forwarding table, the following results described _______ .
[PE1] dis mpls ldp lsp
LDP LSP Information
----------------------------------- --------------- ----------------------- --------------------------- ------------
SN DestAddress/Mask In/OutLabel Next-Hop In/Out-Interface
-------------------------------------------------- ------------------------------- ------------------- -------------
1 1.1.1.1/32 3/NULL 127.0.0.1 Eth0/0/InLoop0
2 1.1.1.2/32 NULL/1024 100.0.0.2 ---------Eth0/0
3 1.1.1.3/32 NULL/3 100.0.0.2 ---------Eth0/0
- A. needle to 1.1.1.2/32 the FEC, the device is the penultimate hop
- B. needle of 1.1.1.2/32 the FEC, the label on the device 1024
- C. needle to 1.1.1.2/32 the FEC, the device is the penultimate hop
- D. needles of 1.1.1.2/32 the FEC, the label on the device 1024
Answer: C,D
NEW QUESTION 95
Which description is correct about L2TP VPN and SSL VPN?
- A. Both support Web access
- B. All need to install and maintain the client
- C. All support lP access mode
- D. are based on UDP encapsulation
Answer: C
NEW QUESTION 96
In the BGP MPLS VPN networking, the following description about the private network label and the public network label is correct _______ .
- A. The value of the public network label and the private network label carried in the message must be different
- B. well different label distribution protocol network and the private network tag label, the label is typically a public network LDP allocation protocol, and the label by the private network MP-BGP distribution protocol
- C. The public network label is dynamically allocated, while the private network label is statically allocated
- D. The format of the public network label is different from that of the private network label
Answer: B
NEW QUESTION 97
Which of the following components is made up of the DiffServ model ?
- A. DS domain ( Differentiated Service Domain )
- B. Non- DS domain
- C. edge border links and internal links
- D. the DS inner portions node ( the DS Interior Nodes )
- E. DS District ( Different Service Region )
- F. DS boundary nodes ( DS Boundar Nodes )
Answer: A,B,C,D,E,F
NEW QUESTION 98
The information displayed on the MSR router is as follows:
acl number 2000
rule 0 permit source 192.168.0.0 0.0.0.255
acl number 2002
rule 0 permit source 192.168.2.0 0.0.0.255
#
traffic classifier 2 operator and
if-match acl 2002
traffic classifier 1 operator and
if-match acl 2000
#
traffic behavior 2
queue af bandwidth pct 30
traffic behavior 1
queue ef bandwidth pct 30 cbs-ratio 25
#
qos polic test
classifier 1 behavior 1
classifier 2 behavior 2
#
interface GigabitEthernet0/1
port link-mode route
duplex full
speed 10
ip address 192.168.1.1 255.255.255.0
qos appl polic test outbound
When the traffic rate of the packets with the source addresses of 192.168.0.2 , 192.168.2.2 , and 192.168.3.2 are 4Mbps , 4Mbps , 6Mbps , and no other background traffic is forwarded from port G0/1_ .Then the following statement is incorrect is _____
- A. The forwarding rate of packets with the source address of 192.168.2.2 is about 4Mbps
- B. The forwarding rate of packets with the source address of 192.168.2.2 is about 2.4Mbps
- C. The forwarding rate of packets with the source address of 192.168.0.2 is about 4Mbps
- D. The forwarding rate of packets with the source address of 192.168.0.2 is about 2.4Mbps
- E. The forwarding rate of packets with the source address of 192.168.2.2 is about 3Mbps
- F. The forwarding rate of packets with the source address of 192.168.0.2 is about 3Mbps
Answer: B,D
NEW QUESTION 99
The interconnection between ordinary telephones , PBXs and other devices has a unified interface standard, including analog interfaces and digital interfaces.The following belong to the digital voice interface is ______ .
- A. E1
- B. FXS
- C. FXO
- D. T1
Answer: B,C
NEW QUESTION 100
The configuration commands on the MSR router are as follows:
acl number 2003
rule 0 permit source 192.168.0.0 0.0.0.255
#
traffic classifier 1operator or
if-match acl 2003
#
traffic behavior 1
filter den
#
qos polic 1
classifier 1behavior 1
#
interface GigabitEthernet0/1
port link-mode route
ip address 192.168.1.1 255.255.255.0
qos appl polic 2 outbound
Then, when the packets with the source addresses of 192.168.2.2 and 192.168.0.2 are forwarded from port G0/1 , the following statement is incorrect: ______
- A. Packets with the source address of 192.168.2.2 are forwarded normally
- B. Forwarding of packets with the source address of 192.168.0.2 is blocked
- C. Forwarding of packets with the source address of 192.168.2.2 is blocked
- D. Packets with the source address of 192.168.0.2 are forwarded normally
Answer: A,B
NEW QUESTION 101
The private network label corresponding to the remote user's private network route learned by the PE equipment is assigned by which of the following equipment _______ .
- A. for end PE device
- B. the travel P device
- C. of the end CE device
- D. This end of PE is provided apparatus
Answer: A
NEW QUESTION 102
What is correct about DOS attacks is ____ .
- A. for at DOS attack in the FTP FLOOD attack can be taken to limit the number of connections per second to defense
- B. DOS attacks are aimed at reducing the ability of the attacked system to provide services
- C. on to DOS attacks can be controlled by configure access lists on a network device to defense
- D. on to DOS attacks in the TCP FLOOD attack, you can use TCP proxy mechanism to defense
Answer: A,B,D
NEW QUESTION 103
The information displayed on the MSR router is as follows:
acl number 2000
rule 0 permit source 192.168.0.0 0.0.0.255
acl number 2002
rule 0 permit source 192.168.2.0 0.0.0.255
#
traffic classifier 2 operator and
if-match acl 2002
traffic classifier 1 operator and
if-match acl 2000
#
traffic behavior 2
queue af bandwidth pct 30
traffic behavior 1
queue ef bandwidth pct 30 cbs-ratio 25
#
qos polic test
classifier 1 behavior 1
classifier 2 behavior 2
#
interface GigabitEthernet0/1
port link-mode route
duplex full
speed 10
ip address 192.168.1.1 255.255.255.0
qos appl polic test outbound
When the traffic rate of the packets with the source addresses of 192.168.0.2 , 192.168.2.2 , and 192.168.3.2 are 4Mbps , 4Mbps , 6Mbps , and no other background traffic is forwarded from port G0/1_ .
Then the following statement is correct _____
- A. The forwarding rate of packets with the source address of 192.168.2.2 is about 4Mbps
- B. The forwarding rate of packets with the source address of 192.168.0.2 is about 4Mbps
- C. The forwarding rate of packets with the source address of 192.168.2.2 is about 3Mbps
- D. The forwarding rate of packets with the source address of 192.168.2.2 is about 1.5Mbps
- E. The forwarding rate of packets with the source address of 192.168.0.2 is about 1.5Mbps
- F. The forwarding rate of packets with the source address of 192.168.0.2 is about 3Mbps
Answer: C,F
NEW QUESTION 104
If the user incorrectly configures the packet filtering strategy and filters all UDP packets, what will happen to the call in the H.323 network ?
- A. that a call will be discontinued in Q.931 stage
- B. Does not affect calls between terminals
- C. that a call will be discontinued in H.245 stage
- D. that a call will be discontinued in RAS stage
Answer: D
NEW QUESTION 105
XZ company requires to build its network based on the modular enterprise network architecture. Z company in Shenzhen and Xi'an each 1 R & D base ; save Beijing and Shanghai have an office building ; save 23 provincial capital cities with more than 50 people in the office ; the 200 has no more than smaller cities 8 small office person ; At any given time, there are usually more than 200 marketing and technical personnel on business trips, and some of them are often located in areas lacking Internet access and can only dial in to the headquarters through the telephone network.Due to environmental and cost issues, some offices cannot access the headquarters through dedicated lines or packet-switched wide area network connections.According to these circumstances, the network module that Z company should have is _____ .
- A. An all-authentication
- B. VPN access
- C. Dial Number Access
- D. large type branch network
Answer: B,C
NEW QUESTION 106
To clear the secure tunnel established by ike , which of the following commands should be used ?
- A. reset ike tunnel
- B. reset ipsec sa
- C. reset ike
- D. reset ike sa
Answer: D
NEW QUESTION 107
......
Ultimate Guide to Prepare GB0-391 Certification Exam for H3CSE-Routing & Switching: https://www.testpassking.com/GB0-391-exam-testking-pass.html