网友您好, 请在下方输入框内输入要搜索的题目:

题目内容 (请给出正确答案)

你需要创建一个标准访问控制列表用来拒绝主机172.16.198.94/19所在的子网,表示错误的有()。

  • A、access-list 10 deny 172.16.192.00.0.31.255
  • B、access-list 10 deny 172.16.0.00.0.255.255
  • C、access-list 10 deny 172.16.172.00.0.31.255
  • D、access-list 10 deny 172.16.188.00.0.15.255
  • E、access-list 10 deny 172.16.192.00.0.15.255

参考答案

更多 “你需要创建一个标准访问控制列表用来拒绝主机172.16.198.94/19所在的子网,表示错误的有()。A、access-list 10 deny 172.16.192.00.0.31.255B、access-list 10 deny 172.16.0.00.0.255.255C、access-list 10 deny 172.16.172.00.0.31.255D、access-list 10 deny 172.16.188.00.0.15.255E、access-list 10 deny 172.16.192.00.0.15.255” 相关考题
考题 (22)下面的访问控制列表中,()禁止所有TELNET访问子网10.10.1.0/24。A)access-list 15 deny udp any 10.10.1.0 255.255 255.0 eq 23B) access-list 115 deny tcp any 10.10.1.0 0.0.0.255 eq 23C)access-list 115 deny udp any 10.10.1.0 eq telnetD)access-list 15 deny telnet any 10.10.1.0 0.0.0.255 eq 23

考题 在Cisco路由器上,用扩展访问控制列表封禁IP地址为211.102.33.24的主机,正确的配置语句是______。A.access-list 99 deny ip host 211.102.33.24 any access-list 99 deny ip any host 211.102.33.24 access-list 99 permit ip any anyB.access-list 100 permit ip any any access-list 100 deny ip host 211.102.33.24 any access-list 100 deny ip any host 211.102.33.24C.access-list 199 deny ip host 211.102-33.24 any access-list 199 deny ip any host 211.102.33.24 access-list 199 permit ip any anyD.access-list 166 deny ip host 211.102.33.24 any access-list 166 permit ip any any

考题 拒绝转发所有IP地址进与出方向的、端口号为1434的UDP和端口号为4444的TCP数据包,下列正确的access-list配置是A)Router (config)#access-list 30 deny udp any any eq 1434Router (config)#access-list 30 deny tcp any any eq 4444Router (config)#access-list 30 permit ip any anyB)Router (config)#access-list 130 deny udp any any eq 1434Router (config)#access-list 130 deny tcp any any eq 4444Router (config)#access-list 130 permit ip any anyC)Router (config)#access-list 110 deny any any udp eq 1434Router (config)#access-list 110 deny any any tcp eq 4444Router (config)#access-list 110 permit ip any anyD)Router (config)#access-list 150 deny udp ep 1434 any anyRouter (config)#access-list 150 deny tcp ep 4444 any anyRouter (config)#access-list 150 permit ip any any

考题 只封禁一台IP地址为203.168.47.59主机的access-list的正确配置是(41) 。A.access-list 110permit ip any any access-list 110deny ip host 203.168.47.59 any access-list 110deny ip any host 203.168.47.59B.access-list 110deny ip host 203.168.47.59any access-list 110deny ip any host 203.168.47.59 access-list 110permit ip any anyC.access-list 110deny ip host 203.168.47.59 any access-list 110deny ip any host 203.168.47.59D.access-list 110deny ip host 203.168.47.59 any access-list 110permit ip any any access-list 110deny ip any host 203.168.47.59

考题 若要求路由器的某接口上只封禁ICMP协议,但允许159.67.183.0/24子网的ICMP数据包通过,那么使用的access-list命令是______。A.access-list 120 deny icmp 159.67.183.0 0.0.0.255 any access-list 120 permit ip any anyB.access-list 10 permit icmp 159.67.183.0 0.0.0.255 any access-list 10 deny icmp any any access-list 10 permit ip any anyC.access-list 99 permit icmp 159.67.183.0 0.0.0.255 any access-list 99 deny icmp any anyD.access-list 110 permit icmp 159.67.183.0 0.0.0.255 any access-list 110 deny icmp any any access-list 110 permit ip any any

考题 Cisco路由器执行show access-list命令显示如下一组控制列表信息:Standard IP acceSS list 30deny 127.0.0.0,wildcard bits 0.255.255.255deny 172.16.0.0,wiidcard bits 0.15.255.255permft any根据上述信息,正确的access-list配置是______。A) Router(config)#access-list 30 deny 127.0.0.0 255.255.255.0Router(config)#access-list 30 deny 172.16.0.0 255.240.0.0Router(config)#access-list 30 permit anyB) Router(config-std-nacl)#access-list 30 deny 127.0.0.0 0.255.255.255Router(config-std-nael)#access-list 30 deny 172.16.0.0 0.15.255.255Router(config-std-nacl)#access-list 30 permit anyC) Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255Router(config)#access-list 30 deny 172.16.0.0 0.15.255.255Router(config)#access-list 30 permit anyD) Router(config)#access-list 30 deny 127.0.0.0 0.255.255.255Router(config)#access-list 30 permit anyRouter(config)#access-list 30 deny 172.16.0.0 0.15.255.255A.B.C.D.

考题 只封禁一台地址为192.168.1.230主机的access-list正确配置是 (5) 。 A.access-list 110 permit中anyany access-list 110 deny中host 192.168.1.230 any access-list 110 deny ip anyhost 192.168.1.230B.access-list 110 deny中host 192.168.1.230 any access-list 110 deny中any host 192.168.1.230 access-list 110 permit ip anyanyC.access-list 110 deny ip host 192.168.1.230 any access-list 110 deny ip any host 192.168.1.230D.access-list 110 deny ip host 192.168.1.230 any access-list 110 permit ip anyany access-list 110 deny ip any host 192.168.1.230

考题 Which of the following access list statements would deny traffic from a specifichost?() A. Router(config)# access-list 1 deny 172.31.212.74 anyB. Router(config)# access-list 1 deny 10.6.111.48 hostC. Router(config)# access-list 1 deny 172.16.4.13 0.0.0.0D. Router(config)# access-list 1 deny 192.168.14.132 255.255.255.0E. Router(config)# access-list 1 deny 192.168.166.127 255.255.255.255

考题 Which one of the access control list statements below will deny all telnet connections to subnet 10.10.1.0/24?() A. access-list 15 deny telnet any 10.10.1.0 0.0.0.255 eq 23B. access-list 115 deny udp any 10.10.1.0 eq telnetC. access-list 15 deny tcp 10.10.1.0 255.255.255.0 eq telnetD. access-list 115 deny tcp any 10.10.1.0 0.0.0.255 eq 23E. access-list 15 deny udp any 10.10.1.0 255.255.255.0 eq 23

考题 只封禁一台地址为193.62.40.230主机的access-list的正确配置是A.access-list 110 permit ip any any access-list 110 deny ip host 193.62.40.230 any access-list 110 deny ip any host 193.62.40.230B.access-list 110 deny ip host 193.62.40.230any access-list 110 deny ip any host 193.62.40.230 access-list 110 permit ip any anyC.access-list 110 deny ip host 193.62.40.230 any access-list 110 deny ip any host 193.62.40.230D.access-list 110 deny ip host 193.62.40.230 any access-list 110 permit ip any any access-list 110 deny ip any host 193.62.40.230

考题 用标准访问控制列表禁止非法地址192.168.0.0/16的数据包进出路由器的正确配置是______。A.access-list 110 deny 192.168.0.0 0.0.255.255 access-list 110 permit anyB.access-list 10 deny 192.168.0.0 255.255.0.0 access-list 10 permit anyC.access-list 50 permit any access-list 50 deny 192.168.0.0 0.0.255.255D.access-list 99 deny 192.168.0.0 0.0.255.255 access-list 99 permit any

考题 下面格式是正确的标准访问控制列表有()。A、access-list standard 172.16.4.13B、access-list 2 deny 172.16.4.13 0.0.0.0C、access-list 101 deny 172.16.4.13 0.0.0.0D、access-list 199 deny 172.16.4.13 255.255.255.255

考题 Which one of the access control list statements below will deny all telnet connections to subnet 10.10.1.0/24?()A、access-list 15 deny telnet any 10.10.1.0 0.0.0.255 eq 23B、access-list 115 deny udp any 10.10.1.0 eq telnetC、access-list 15 deny tcp 10.10.1.0 255.255.255.0 eq telnetD、access-list 115 deny tcp any 10.10.1.0 0.0.0.255 eq 23E、access-list 15 deny udp any 10.10.1.0 255.255.255.0 eq 23

考题 计费服务器的ip地址在192.168.1.0/24子网内,为了保证计费服务器的安全,不允许任何用户telnet到该服务器,则需要配置的访问列表条目为:()A、access-list  11 deny  tcp 192.168.1.0   0.0.0.255 eq telnet/access-list 111 permit ip any anyB、access-list  111 deny  tcp any  192.168.1.0   eq telnet/access-list 111 permit ip any anyC、access-list  111 deny udp 192.168.1.0   0.0.0.255 eq telnet/access-list 111 permit ip any anyD、access-list  111 deny  tcp any  192.168.1.0   0.0.0.255 eq telnet/access-list 111 permit ip any any

考题 你需要创建一个标准命名访问控制列表cisco用来拒绝主机172.16.198.94/19所在的子网,表示错误的有()。A、ip access-list standard cisco deny 172.16.192.0 0.0.31.255B、ip access-list standard cisco deny 172.16.0.0 0.0.255.255C、ip access-list standard cisco deny 172.16.172.0 0.0.31.255D、ip access-list standard cisco deny 172.16.188.0 0.0.15.255E、ip access-list standard cisco deny 172.16.192.0 0.0.15.255

考题 下面能够表示“禁止129.9.0.0网段中的主机访问202.38.16.0网段内的WEB服务器”的访问控制列表是()A、access-list 101 deny tcp 129.9.0.00.0.255.255202.38.16.00.0.0.255 eq wwwB、access-list 100 deny tcp 129.9.0.00.0.255.255202.38.16.00.0.0.255 eq 53C、access-list 100 deny udp 129.9.0.00.0.255.255202.38.16.00.0.0.255 eq wwwD、access-list 99 deny ucp 129.9.0.00.0.255.255202.38.16.00.0.0.255 eq 80

考题 Access-list 1 deny 172.16.10.1是建立一个标准的访问控制列表。

考题 下列语句中,()是标准ACL。A、access-list 50 deny 192.168.1.1 0.0.0.255B、access-list 110 deny ip any anyC、access-list 2500 deny tcp any host 192.168.1.1 eq 22D、access-list 101 deny tcp any host 192.168.1.1

考题 创建一个标准访问控制列表用来拒绝网络192.168.160.0到192.168.191.0内的主机,下面表达式正确的是()。A、access-list 10 deny 192.168.160.0 255.255.240.0B、access-list 10 deny 192.168.160.0 0.0.191.255C、access-list 10 deny 192.168.160.0 0.0.31.255D、access-list 10 deny 192.168.0.0 0.0.31.255

考题 Which of the following access list statements would deny traffic from a specifichost?()A、Router(config)# access-list 1 deny 172.31.212.74 anyB、Router(config)# access-list 1 deny 10.6.111.48 hostC、Router(config)# access-list 1 deny 172.16.4.13 0.0.0.0D、Router(config)# access-list 1 deny 192.168.14.132 255.255.255.0E、Router(config)# access-list 1 deny 192.168.166.127 255.255.255.255

考题 访问列表是路由器的一种安全策略,你决定用一个标准ip访问列表来做安全控制,以下为标准访问列表的例子为:()A、access-list  standart 192.168.10.23B、access-list  10 deny  192.168.10.23 0.0.0.0C、access-list  101 deny  192.168.10.23  0.0.0.0D、access-list  101 deny  192.168.10.23  255.255.255.255

考题 以下的访问控制列表中,()禁止所有Telnet访问子网10.10.1.0/24。A、access-list 15deny telnet any 10.10.1.0  0.0.0.255 eq 23B、access-listl  l5 denyu卸any l0.10.1.0 eq telnetC、access-list 115deny tcp any 10.10.1.0  0.0.0.255 eq 23D、access-list 15deny udp any 10.10.1.0  255.255.255.0 eq 23

考题 创建一个标准命名访问控制列表cisco用来拒绝网络192.168.160.0到192.168.191.0内的主机,下面表达式正确的是()。A、ip access-list standard cisco deny 192.168.160.0 255.255.240.0B、ip access-list standard cisco deny 192.168.160.0 0.0.191.255C、ip access-list standard cisco deny 192.168.160.0 0.0.31.255D、ip access-list standard cisco deny 192.168.0.0 0.0.31.255

考题 下列哪一条命令可以阻塞一网段的RIP广播报文?()A、access-list 101 deny tcp any 255.255.255.255B、access-list 101 deny udp any any eq 520C、access-list 101 deny udp any any eq 53D、access-list 10 deny udp any 255.255.255.255

考题 哪个选项代表了标准的IP ACL?()A、 access-list 50 deny 192.168.1.1 0.0.0.255B、 access-list 110 permit ip any anyC、 access-list 2500 deny tcp any host 192.168.1.1 eq 22D、 access-list 101 deny tcp any host 192.168.1.1

考题 Which item represents the standard IP ACL?()A、access-list 50 deny 192.168.1.10.0.0.255B、access-list 110 permitip any anyC、access-list 2500 deny tcp any host 192.168.1.1eq22D、access-list 101 deny tcp any host 192.168.1.1

考题 多选题你需要创建一个标准访问控制列表用来拒绝主机172.16.198.94/19所在的子网,表示错误的有()。Aaccess-list 10 deny 172.16.192.00.0.31.255Baccess-list 10 deny 172.16.0.00.0.255.255Caccess-list 10 deny 172.16.172.00.0.31.255Daccess-list 10 deny 172.16.188.00.0.15.255Eaccess-list 10 deny 172.16.192.00.0.15.255