网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
在访问列表中，有一条规则如下：access-list 123 deny ip any 10.10.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）
A
检察源地址的所有bit位
B
检查目的地址的所有bit位
C
拒绝所有的源地址
D
允许255.255.255.255 0.0.0.0
参考答案
参考解析
解析：
暂无解析
更多 “单选题在访问列表中，有一条规则如下：access-list 123 deny ip any 10.10.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）A 检察源地址的所有bit位B 检查目的地址的所有bit位C 拒绝所有的源地址D 允许255.255.255.255 0.0.0.0” 相关考题
考题
(22)下面的访问控制列表中，()禁止所有TELNET访问子网10.10.1.0/24。A)access-list 15 deny udp any 10.10.1.0 255.255 255.0 eq 23B) access-list 115 deny tcp any 10.10.1.0 0.0.0.255 eq 23C)access-list 115 deny udp any 10.10.1.0 eq telnetD)access-list 15 deny telnet any 10.10.1.0 0.0.0.255 eq 23
考题
定义一个用于封禁ICMP协议而只允许转发166.129.130.0/24子网的ICMP数据包的访问控制列表，Cisco路由器的正确配置是( )。A) access-list 198 permit icmp 166.129.130.0 255.255.255.0 anyaccess-list 198 deny icmp any anyaccess-list 198 permit ip any anyB) access-list 198 permit icmp 166.129.130.0 0.0.0 255 anyaccess-list 198 deny icmp any anyaccess-list 198 permit ip any anyC) access-list 99 permit icmp 166.129.130.0 0.0.0 255 anyaccess-list 99 deny icmp any anyaccess-list 99 permit ip any anyD) access-list 100 permit icmp 166.129.130.0 0.0.0 255 anyaccess-list 100 pernut ip any anyaccess-list 100 deny icmp any any
考题
在Cisco路由器上，用扩展访问控制列表封禁IP地址为211.102.33.24的主机，正确的配置语句是______。A．access-list 99 deny ip host 211.102.33.24 any access-list 99 deny ip any host 211.102.33.24 access-list 99 permit ip any anyB．access-list 100 permit ip any any access-list 100 deny ip host 211.102.33.24 any access-list 100 deny ip any host 211.102.33.24C．access-list 199 deny ip host 211.102-33.24 any access-list 199 deny ip any host 211.102.33.24 access-list 199 permit ip any anyD．access-list 166 deny ip host 211.102.33.24 any access-list 166 permit ip any any
考题
拒绝转发所有IP地址进与出方向的、端口号为1434的UDP和端口号为4444的TCP数据包，下列正确的access-list配置是A）Router (config)#access-list 30 deny udp any any eq 1434Router (config)#access-list 30 deny tcp any any eq 4444Router (config)#access-list 30 permit ip any anyB）Router (config)#access-list 130 deny udp any any eq 1434Router (config)#access-list 130 deny tcp any any eq 4444Router (config)#access-list 130 permit ip any anyC）Router (config)#access-list 110 deny any any udp eq 1434Router (config)#access-list 110 deny any any tcp eq 4444Router (config)#access-list 110 permit ip any anyD）Router (config)#access-list 150 deny udp ep 1434 any anyRouter (config)#access-list 150 deny tcp ep 4444 any anyRouter (config)#access-list 150 permit ip any any
考题
定义一个用于封禁ICMP协议而只允许转发166.129.130.0/24子网的ICMP数据包的访问控制列表，Cisco路由器的正确配置是A．access-list 198 permit icmp 166.129.130.0 255.255.255.0 any access-list 198 deny icmp any any access-list 198 permit ip any anyB．access-list 198 permit icmp 166.129.130.0 0.0.0.255 any access-list 198 deny icmp any any access-list 198 permit ip any anyC．access-list 99 permit icmp 166.129.130:0 0.0.0.255 any access-list 99 deny icnip any any access-list 99 permit ip any anyD．access-list 100 permit icmp 166.129.130.0 0.0.0.255 any access-list 100 permit ip any any access-list 100 deny icmp any any
考题
（ 22 ）只封禁一台地址为 193.62.40.230 主机的 access-list 的正确配置是A ） access-list 110 permit ip any anyaccess-list 110 deny ip host 193.62.40.230 anyaccess-list 110 deny ip any host 193.62.40.230B ） access-list 110 deny ip host 193.62.40.230 anyaccess-list 110 deny ip any host 193.62.40.230access-list 110 permit ip any anyC ） access-list 110 deny ip host 193.62.40.230 anyaccess-list 110 deny ip any host 193.62.40.230D ） access-list 110 deny ip host 193.62.40.230 anyaccess-list 110 permit ip any anyaccess-list 110 deny ip any host 193.62.40.230
考题
在 Cisco 路由器匕用扩展访问控制列表封禁 1P 地址为 211.102.33.24 的主机，正确的配置语句是A ）access-list 99 deny ip host 211.102.33.24 anyaccess-list 99 deny ip any host 211.102.33.24access-list 99 permit ip any anyB ）access-list 100 permit ip any anyaccess-list 100 deny ip host 211.102.33.24 anyaccess-list 100 deny ip any host 211.102.33.24C ）access-list 199 deny ip host 211.102.33.24 anyaccess-list 199 deny ip any host 211.102.33.24access-list 199 permit ip any anyD ）access-list 166 deny ip host 211.102.33.24 anyaccess-list 166 permit ip any any
考题
只封禁一台IP地址为203.168.47.59主机的access-list的正确配置是(41) 。A．access-list 110permit ip any any access-list 110deny ip host 203.168.47.59 any access-list 110deny ip any host 203.168.47.59B．access-list 110deny ip host 203.168.47.59any access-list 110deny ip any host 203.168.47.59 access-list 110permit ip any anyC．access-list 110deny ip host 203.168.47.59 any access-list 110deny ip any host 203.168.47.59D．access-list 110deny ip host 203.168.47.59 any access-list 110permit ip any any access-list 110deny ip any host 203.168.47.59
考题
要禁止内网中IP地址为198.168.46.8的PC访问外网，正确的ACL规则是(11)。A．access-list 1 permit ip 192.168.46.00.0.0.255 any access-list 1 deny ip host 198.168.46.8 anyB．access-list 1 permit ip host 198.168.46.8 any access-list 1 deny ip 192.168.46.00.0.0.255 anyC．access-list 1 deny ip 192.168.46.00.0.0.255 any access-list 1 permit ip host 198.168.46.8 anyD．access-list 1 deny ip host 198.168.46.8 any access-list 1 permitip 192.168.46.00.0.0.255 any
考题
只封禁一台地址为192.168.1.230主机的access-list正确配置是 (5) 。 A．access-list 110 permit中anyany access-list 110 deny中host 192.168.1.230 any access-list 110 deny ip anyhost 192.168.1.230B．access-list 110 deny中host 192.168.1.230 any access-list 110 deny中any host 192.168.1.230 access-list 110 permit ip anyanyC．access-list 110 deny ip host 192.168.1.230 any access-list 110 deny ip any host 192.168.1.230D．access-list 110 deny ip host 192.168.1.230 any access-list 110 permit ip anyany access-list 110 deny ip any host 192.168.1.230
考题
ACL默认执行顺序是(5)，在配置时要遵循(6)原则、最靠近受控对象原则、以及默认丢弃原则。(5)、(6)备选项(A)最大特权(B)最小特权(C)随机选取(D)自左到右(E)自上而下(F)自下而上=2．要禁止内网中IP地址为192.168.46.8的PC机访问外网，正确的ACL规则是(7).(A)access-list 1 permit ip 192.168.46.00.0.0.255 anyaccess-list 1 deny ip host 192.168.46.8 any(B)access-list 1 permit ip host 192.168.46.8 anyaccess-list 1 deny ip 192.168.46.00.0.0.255 any(C)access-list 1 deny ip 192.168.46.00.0.0.255 anyaccess-list 1 permit ip host 192.168.46.8 any(D)access-list 1 deny ip host 192.16.46.8 anyaccess-list 1 permit ip 192.168.46.00.0.0.255
考题
只封禁一台地址为193.62.40.230主机的access-list的正确配置是A．access-list 110 permit ip any any access-list 110 deny ip host 193.62.40.230 any access-list 110 deny ip any host 193.62.40.230B．access-list 110 deny ip host 193.62.40.230any access-list 110 deny ip any host 193.62.40.230 access-list 110 permit ip any anyC．access-list 110 deny ip host 193.62.40.230 any access-list 110 deny ip any host 193.62.40.230D．access-list 110 deny ip host 193.62.40.230 any access-list 110 permit ip any any access-list 110 deny ip any host 193.62.40.230
考题
计费服务器的ip地址在192.168.1.0/24子网内，为了保证计费服务器的安全，不允许任何用户telnet到该服务器，则需要配置的访问列表条目为：（）A、access-list 11 deny tcp 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any anyB、access-list 111 deny tcp any 192.168.1.0 eq telnet/access-list 111 permit ip any anyC、access-list 111 deny udp 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any anyD、access-list 111 deny tcp any 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any any
考题
要创建一个扩展命名访问控制列表cisco，仅允许HTTP流量进入网络196.15.7.0/24，下面命令是错误的有（）。A、ip access-list extended cisco permit tcp any 196.15.7.0 0.0.0.255 eq wwwB、ip access-list extended cisco deny tcp any 196.15.7.0 eq wwwC、ip access-list extended cisco permit 196.15.7.0 0.0.0.255 eq wwwD、ip access-list extended cisco permit ip any 196.15.7.0 0.0.0.255E、ip access-list extended cisco permit www 196.15.7.0 0.0.0.255
考题
你需要创建一个标准命名访问控制列表cisco用来拒绝主机172.16.198.94/19所在的子网，表示错误的有（）。A、ip access-list standard cisco deny 172.16.192.0 0.0.31.255B、ip access-list standard cisco deny 172.16.0.0 0.0.255.255C、ip access-list standard cisco deny 172.16.172.0 0.0.31.255D、ip access-list standard cisco deny 172.16.188.0 0.0.15.255E、ip access-list standard cisco deny 172.16.192.0 0.0.15.255
考题
A network administrator wants to add a line to an access list that will block only Telnet access by the hosts on subnet 192.168.1.128/28 to the server at 192.168.1.5. What command should be issued to accomplish this task?（）A、access-list 101 deny tcp 192.168.1.128 0.0.015 192.168.1.5 0.0.0.0 eq 23 access-list 101 permit ip any anyB、access-list 1 deny tcp 192.168.1.128 0.0.0.15 host 192.168.1.5 eq 23 access-list 1 permit ip any anyC、access-list 1 deny tcp 192.168.1.128 0.0.0.255 192.168.1.5 0.0.0.0 eq 21 access-list 1 permit ip any anyD、access-list 101 deny tcp 192.168.1.128 0.0.0.240 192.168.1.5 0.0.0.0 eq 23 access-list 101 permit ip any anyE、access-list 101 deny ip 192.168.1.128 0.0.0.240 192.158.1.5 0.0.0.0 eq 23 access-list 101 permit ip any anyF、access-list 101 deny ip 192.168.1.128 0.0.0.15 192.168.1.5 0.0.0.0 eq 23 access-list 101 permit ip any any
考题
在访问列表中，有一条规则如下：access-list 131 permit ip any 192.168.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）A、检察源地址的所有bit位B、检查目的地址的所有bit位C、允许所有的源地址D、允许255.255.255.255 0.0.0.0
考题
访问列表是路由器的一种安全策略，你决定用一个标准ip访问列表来做安全控制，以下为标准访问列表的例子为：（）A、access-list standart 192.168.10.23B、access-list 10 deny 192.168.10.23 0.0.0.0C、access-list 101 deny 192.168.10.23 0.0.0.0D、access-list 101 deny 192.168.10.23 255.255.255.255
考题
要限制源地址为10.0.0.16到10.0.0.31之间的网络主机访问目标地址，则访问列表ACL配置语句为： router（Config）#ip access-list 99 deny（） router（Config）#ip access-list 99（）any
考题
在访问列表中，有一条规则如下：access-list 123 deny ip any 10.10.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）A、检察源地址的所有bit位B、检查目的地址的所有bit位C、拒绝所有的源地址D、允许255.255.255.255 0.0.0.0
考题
以下的访问控制列表中，（）禁止所有Telnet访问子网10．10．1．0／24。A、access-list 15deny telnet any 10.10.1.0 0.0.0.255 eq 23B、access-listl l5 denyu卸any l0.10.1.0 eq telnetC、access-list 115deny tcp any 10.10.1.0 0.0.0.255 eq 23D、access-list 15deny udp any 10.10.1.0 255.255.255.0 eq 23
考题
以下那一条语句是标准ACL（）A、access-list 50 deny 192.168.1.1 0.0.0.255B、access-list 110 deny ip any anyC、access-list 2500 deny tcp any host 192.168.1.1 eq 22D、access-liet 101 deny tcp any host 192.168.1.1
考题
哪个选项代表了标准的IP ACL？（）A、 access-list 50 deny 192.168.1.1 0.0.0.255B、 access-list 110 permit ip any anyC、 access-list 2500 deny tcp any host 192.168.1.1 eq 22D、 access-list 101 deny tcp any host 192.168.1.1
考题
Which item represents the standard IP ACL?（）A、access-list 50 deny 192.168.1.1 0.0.0.255B、access-list 110 permit ip any anyC、access-list 2500 deny tcp any host 192.168.1.1 eq 22D、access-list 101 deny tcp any host 192.168.1.1
考题
单选题计费服务器的ip地址在192.168.1.0/24子网内，为了保证计费服务器的安全，不允许任何用户telnet到该服务器，则需要配置的访问列表条目为：（）A
access-list 11 deny tcp 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any anyB
access-list 111 deny tcp any 192.168.1.0 eq telnet/access-list 111 permit ip any anyC
access-list 111 deny udp 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any anyD
access-list 111 deny tcp any 192.168.1.0 0.0.0.255 eq telnet/access-list 111 permit ip any any
考题
单选题在访问列表中，有一条规则如下：access-list 131 permit ip any 192.168.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）A
检察源地址的所有bit位B
检查目的地址的所有bit位C
允许所有的源地址D
允许255.255.255.255 0.0.0.0
考题
单选题在访问列表中，有一条规则如下：access-list 123 deny ip any 10.10.10.0 0.0.0.255 eq ftp 在该规则中，any的意思是表示：（）A
检察源地址的所有bit位B
检查目的地址的所有bit位C
拒绝所有的源地址D
允许255.255.255.255 0.0.0.0
考题
填空题要限制源地址为10.0.0.16到10.0.0.31之间的网络主机访问目标地址，则访问列表ACL配置语句为： router（Config）#ip access-list 99 deny（） router（Config）#ip access-list 99（）any
热门标签
最新试卷