1. [单选题]下面哪个操作可以使访问控制列表真正生效（）。
A. 将访问控制列表应用到接口上
B. 定义扩展访问控制列表
C. 定义多条访问控制列表的组合
D. 用access-list命令配置访问控制列表
2. [多选题]The Ezonexam network administrator wants to ensure that only a single web server can connect to pot Fa0/1 on a catalyst switch. The server is plugged into the switch's Fast Eth. 0/1 port and the network administrator is about to bring the server online. What can the administrator do to ensure that only the MAC address of this server is allowed by switch port Fa0/1? (Choose two)
A. Configure port Fa0/1 to accept connections only from the static IP address of the server
B. Configure the MAC address of the server as a static entry associated with port Fa0/1
C. Employ a proprietary connector type on Fa0/1 that is incomputable with other host connectors
D. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of the server
E. Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing the server IP address
3. [多选题]The Ezonexam network administrator issues the ping 192.168.2.5 command and successfully tests connectivity to a host that has been newly connected to the network. Which protocols were used during the test? (Choose two)
A. ARP
B. CDP
C. DHCP
D. DNS
E. ICMP
4. [单选题]路由器“路由模式”的提示符号是（）
B. (config)
C. (config-if)
D. (config-router)
5. [单选题]介质工作在OSI的哪一层（）
A. 物理层
B. 数据链路层(data link layer)
C. 网络层
D. 传输层
6. [单选题]为了禁止网络210.93.105.0ftp到网络223.8.151.0，允许其他信息传输，则能实现该功能的选项是：()
A. access-list 1 deny 210.93.105.0.0.0.0.0.0
B. access-list 100 deny tcp 210.93.105.0 0.0.0.255 223.8.151.0 0.0.0.255 eq ftp
C. access-list 100 permit ip any any
D. access-list 100 deny tcp 210.93.105.0 0.0.0.255 223.8.151.00.0.0.255 eq ftp access list 100 permit ip any any
7. [单选题]为了阻止交换机环路，交换机上所采用的技术为（）
A. 水平分割
B. 生成树协议
C. 触发更新
D. 地址学习
8. [单选题]标准访问控制列表应被放置的最佳位置是在（）。
A. 越靠近数据包的源越好
B. 越靠近数据包的目的地越好
C. 无论放在什么位置都行
D. 入接口方向的任何位置
9. [单选题]帧中继(frame relay)环境下，为了区分虚电路，应该使用的地址是（）
A. IP地址
B. MAC地址
C. DLCI
D. IPX地址
10. [单选题]下面对Cisco2621路由器和Cisco2501路由器描述中，错误的是（）
A. Cisco2621路由器的可扩展性优于Cisco2501路由器
B. Cisco2621是模块化路由器(module router)
C. Cisco2501上提供一个100Mbit/s的快速以太网端口
D. Cisco2501是固定端口的路由器
