A GRE tunnel is configured between a local and a remote site. Where should the service policy be applied to classify packets based on the pretunnel header? （）

A . 6to4 B . 6over4 C . ISATAP D . GRE

A . 5 seconds and 3 retries B . 10 seconds and 5 retries C . 10 seconds and 3 retries D . 20 seconds and 5 retries E . 5 seconds and 5 retrie

A .  4 bytes for both B .  4 bytes， and 8 bytes respectively C .  8 bytes for both D .  24 bytes for both

A . The command access-list 110 permit gre must be configured to specify which traffic will be encrypted. B . The command access-list 110 permit ip must be configured to specify which hosts can use the tunnel. C . The tunnel destination 172.17.63.18 command must be configured on the Tunnel0 interface. D . The tunnel mode gre command must be configured on the Tunnel0 interface. E . The tunnel source Ethernet1 command must be configured on the Tunnel0 interface. F . The tunnel source Tunnel0 command must be configured on the Tunnel0 interface.

A . The crypto ACL number B . The IPSEC mode （tunnel or transport） C . The GRE tunnel interface IP address D . The GRE tunnel source interface or IP address， and tunnel destination IP address E . The MTU size of the GRE tunnel interface

A . Tunnel接口处于UP状态，MTU为1467字节 B . Tunnel接口启动了Keepalive功能，一旦路由器30s内收不到对方发来的Keeplive报文，即认为隧道不可用 C . 隧道启动验证，没有启动校验 D . 隧道源端lP地址为10.1.11.1

A . 6to4 is a manual tunnel method B . Prepending a reserved IPv6 code to the hexadecimal representation of 192.168.0.1 facilitates6to4 tunneling C . Each 6to4 site receives a /48 prefix in a 6to4 tunnel D . 2002：：/48 is the address range specifically assigned to 6to4 E . Prepending 0x2002 with the IPv4 address creates an IPv6 address that is used in 6to4tunneling

A . tunnel protocol gre B . tunnel gre C . tunnel-protocol gre D . protocol gre

A . VPN tunnel authentication is part of the IKE specification.  B . VPN tunnel authentication does not control which end user can use the IPSec SA (VPN tunnel). C . User authentication is used to control access for a specific user ID, and can be used with or without a VPN tunnel for network access authorization.  D . 802.1X with EAP-TLS (X.509 certificates) can be used to authenticate an IPSec tunnel.

A . ip route 172.16.1.0 255.255.255.0 0.0.0.0 B . ip route 172.16.1.0 255.255.255.0 172.16.2.1 C . ip route 0.0.0.0 255.255.255.0 172.16.2.1 D . ip route 0.0.0.0 0.0.0.0 172.16.2.1

A . GRE can use transport mode and save up to twenty bytes per packet. B . The corporate network includes many discontinuous blocks of IP networks and requires split tunneling. C . The corporation's primary application is based on IP multicast. D . Without GRE, there is no means to detect a head-end failure. E . GRE would enable path MTU discovery.

A . keepalive 103 B . keepalive 3 10 C . keepalive-interval 10 D . keepalive-times 3

A . In a 6to4 tunnel， the first two bytes of the IPv6 address will be 0x2002 and the next four byteswill be the hexadecimal equivalent of the IPv4 address B . In a 6to4 tunnel， the IPv4 address 192.168.99.1 would be converted to the2002：1315：4463：1：：/64 IPv6 address C . In a 6to4 tunnel， the IPv4 address 192.168.99.1 would be converted to the 2002：c0a8：6301：：/48IPv6 address D . In a 6to4 tunnel， the first two bytes of the IPv6 address will be locally derived and the next twobytes will be the hexadecimal equivalent of the IPv4 address E . In a 6to4 tunnel， the IPv4 address 192.168.99.1 would be converted to the 2002：c0a8：6301：：/16IPv6 addre

A . No additional steps are required.  B . Add the appropriate source-interface command.  C . The router cannot access a server in the Enterprise Campus network.  D . The Teleworker Router does not have any client applications; therefore this type of request is not possible.

A . Dead Peer Detection （DPD） B . CDP C . isakmp keepalives D . GRE keepalive mechanism E . The hello mechanism of the routing protocol across the IPsec tunnel

A . allows dynamic routing over the tunnel B . supports multi-protocol （non-IP） traffic over the tunnel C . reduces IPsec headers overhead since tunnel mode is used D . simplifies the ACL used in the crypto map E . uses Virtual Tunnel Interface （VTI） to simplify the IPsec VPN configuratio

A . The crypto isakmp configuration is not correct. B . The crypto map configuration is not correct. C . The interface tunnel configuration is not correct. D . The network configuration is not correct; netw ork 172.16.1.0 is missing.

A . L2F tunnel B . L2TP tunnel C . GRE tunnel D . ISAKMP tunnel

A . The router will distribute IP addresses from pool 1 until its addresses are exhausted. Then therouter will begin distributing addresses from pool 2 B . The configuration is invalid because the DHCP options are global configuration commands C . The configuration is incomplete until the DHCP pools are bound to the appropriate interface orinterfaces D . The router will choose which pool to use based upon the interface the DHCP request wasreceived o

A. 2000::1311:11F F:FE11:1111 B. 2000::C0A5:101 C. 2000:C0A5:101:: D. 2000::5EFE:C0A5:101

是 否

A．tunnel的协议号为GRE B．GRE的校验和使能 C．tunnel的源ip地址 D．tunnel的目的ip地址

是 否