1. [单选题]“ipaccess-group”命令在接口上缺省的应用方向是什么"（）。
A. in
B. 具体取决于接口应用哪个访问控制列表
C. out
D. 无缺省值
2. [单选题]扩展IP访问权限表的表号范围是：()
A. 1—100
B. 1-99
C. 100-199
D. 800-899
3. [单选题]哪个ACL可允许主机10.220.158.10访问web服务器192.168.3.244()
A. access-list 101 permit tcp host 10.220.158.10 eq 80 host 192.168.3.224
B. access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
C. access-list 101 permit host 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
D. access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 eq 80
4. [单选题]A Ezonexam technician is troubleshooting connectivity problems between two routers that are directly connected through the serial line. The technician notices that the serial line is up but cannot see any neighbors displayed in the output of the show cdp neighbors command.In which OSI layer is the problem most likely occurring?
A. Physical
B. Data link
C. Network layer
D. Transport layer
E. Application layer
5. [多选题]The Ezonexam network administrator wants to ensure that only a single web server can connect to pot Fa0/1 on a catalyst switch. The server is plugged into the switch's Fast Eth. 0/1 port and the network administrator is about to bring the server online. What can the administrator do to ensure that only the MAC address of this server is allowed by switch port Fa0/1? (Choose two)
A. Configure port Fa0/1 to accept connections only from the static IP address of the server
B. Configure the MAC address of the server as a static entry associated with port Fa0/1
C. Employ a proprietary connector type on Fa0/1 that is incomputable with other host connectors
D. Configure port security on Fa0/1 to reject traffic with a source MAC address other than that of the server
E. Bind the IP address of the server to its MAC address on the switch to prevent other hosts from spoofing the server IP address
