Question 1

Hackers often obtain the login permissions of system administrators through various attacks. Which of the following measures can be taken to enhance the security of administrator accounts?(Select all that apply)

Options :

A :

Periodically check whether unnecessary administrator accounts exist in the system. If such accounts exist, delete them to reduce the attack surface.

B : Encrypt passwords before transferring them. Whenever possible, transfer passwords by email.

C : Assign exclusive accounts for administrators with different maintenance roles to avoid account sharing.

D :

To ensure security and make the password easier to remember, you can set the password to be valid for a long time.

Answer: A,C

Question 2

VRRP is implemented based on thepriority and preemption functionsof VRRP routers.Which of the following statements is false about the VRRP solution?

Options :

A :

When preemption is enabled, a backup device preempts the master role if it has a higher priority than the current master.

B :

When preemption is disabled, a backup device does not preempt the master role even if it has a higher priority than the current master, provided that the current master is working properly.

C :

The master periodically sends VRRP Advertisement packets in the VRRP group to advertise its configurations such as the priority.

D :

Even if the VRRP device is the IP address owner, it still needs to participate in the election and does not directly transition to the Master state when receiving a message indicating that the interface goes Up.

Answer: D

Question 3

Which of the following attributes must be carried when BGP sends route update messages?

Options :

A : MED

B : Next_Hop

C : AS_Path

D : Local_Preference

Answer: B,C

Question 4

TheAS_Pathattribute is an importantBGP attributeused for route selection. Which of the following statements aretrueabout this attribute?

Options :

A : When a route is advertised to an IBGP peer, the AS_Path remains unchanged.

B : This attribute can be used to prevent BGP routing loops.

C : This attribute is a well-known discretionary attribute that must be identified by all BGP routers.

D : BGP ignores AS_Confed_Sequence and AS_Confed_Set when calculating the AS_Path length.

Answer: A,B,D

Question 5

On an OSPF network, an algorithm is used to prevent loops within an area, but loops may occur between areas. Therefore, OSPF defines a loop prevention mechanism for inter-area routes. Which of the following statements are true about the loop prevention mechanism?

Options :

A : Inter-area routes cannot be directly transmitted between non-backbone areas.

B : All non-backbone areas must be directly connected to area 0.

C : Inter-area routes need to be forwarded through area 0.

D :

An ABR cannot inject Type 3 LSAs that describe routes to a network segment in an area back to thesame area.

Answer: A,B,C,D