H3C Constructing Secure optimized WANs v2.0 認定 GB0-391 試験問題:

1. use IKE is IPSec provides auto-negotiation key exchange and create SA during the service, in the IKE defines which of the second phase of consultation kinds of IKE exchange mode ?

A) Fast speed mode ( New Group Mode )
B) Wild Man mode ( Aggressive Mode )
C) Main Mode ( the Main Mode )
D) channel information exchange mode ( Informational the Exchange Mode )

2. What is correct about DOS attacks is ____ .

A) DOS attacks are aimed at reducing the ability of the attacked system to provide services
B) for at DOS attack in the FTP FLOOD attack can be taken to limit the number of connections per second to defense
C) on to DOS attacks in the TCP FLOOD attack, you can use TCP proxy mechanism to defense
D) on to DOS attacks can be controlled by configure access lists on a network device to defense

3. Which of the following special requirements does the routing protocol run between PE and CE _______ .

A) PE and CE between If running OSPF routing protocol, requires PE on OSPF process number and CE on OSPF process number must be deployed to the same
B) IBGP routing protocol cannot be selected between PE and CE
C) The routing protocol running between PE and CE needs to be bound to the corresponding VPN on PE
D) A dynamic routing protocol must be run between PE and CE , and static routing cannot be configured

4. The private network label corresponding to the remote user's private network route learned by the PE equipment is assigned by which of the following equipment _______ .

A) of the end CE device
B) the travel P device
C) for end PE device
D) This end of PE is provided apparatus

5. The L2TP session information can be displayed through the ____ command .

A) display 12 tp status
B) display 12t p verbose
C) display 12tp tunnel
D) display 12tp session

質問と回答：