Cisco인증 642-813시험취득 의향이 있는 분이 이 글을 보게 될것이라 믿고ITExamDump에서 출시한 Cisco인증 642-813덤프를 강추합니다. ITExamDump의Cisco인증 642-813덤프는 최강 적중율을 자랑하고 있어 시험패스율이 가장 높은 덤프자료로서 뜨거운 인기를 누리고 있습니다. IT인증시험을 패스하여 자격증을 취득하려는 분은ITExamDump제품에 주목해주세요.
우리의 덤프는 기존의 시험문제와 답과 시험문제분석 등입니다. ITExamDump에서 제공하는Cisco 642-813시험자료의 문제와 답은 실제시험의 문제와 답과 아주 비슷합니다. ITExamDump는 여러분이 한번에Cisco 642-813인증시험을 패스함을 보장 드립니다.
ITExamDump의 덤프선택으로Cisco 642-813인증시험에 응시한다는 것 즉 성공과 멀지 않았습니다. 여러분의 성공을 빕니다.
우리ITExamDump 에서 제공하는 학습가이드에는 IT전문가들이 만들어낸 시험대비 자료들과Cisco 642-813인증시험의 완벽한 문제와 답들입니다. 그리고 우리ITExamDump에서는 IT업계에서의 높은 신뢰감으로 여러분들한테 100%보장을 드립니다. 우리에 믿음을 드리기 위하여Cisco 642-813관련자료의 일부분 문제와 답 등 샘플을 무료로 다운받아 체험해볼수 있게 제공합니다.
목표가 있다면 목표를 향해 끊임없이 달려야 멋진 인생이 됩니다. 지금의 현황에 만족하여 아무런 노력도 하지 않는다면 언젠가는 치열한 경쟁을 이겨내지 못하게 될것입니다. IT업종에 종사중이시라면 다른분들이 모두 취득하는 자격증쯤은 마련해야 되지 않겠습니까? Cisco인증 642-813시험은 요즘 가장 인기있는 자격증 시험의 한과목입니다. IT업계에서 살아남으려면ITExamDump에서Cisco인증 642-813덤프를 마련하여 자격증에 도전하여 자기의 자리를 찾아보세요.
시험 번호/코드: 642-813
시험 이름: Cisco (Implementing Cisco IP Switched Networks)
지금 같은 세대에 많은 분들이 IT업계에 관심을 가지고 있습니다. 이렇게 인재가 많은 사회에서 IT관련인사들은 아직도 적은 편입니다. 면접 시에도 IT인증 자격증유무를 많이들 봅니다. 때문에 IT자격증이 많은 인기를 누리고 있습니다.이런 살아가기 힘든 사회에서 이런 자격증들 또한 취득하기가 넘 어렵습니다.Cisco 642-813인증시험 또한 아주 어려운 시험입니다. 많은 분들이 응시하지만 통과하는 분들은 아주 적습니다.
거침없이 발전해나가는 IT업계에서 자신만의 자리를 동요하지 않고 단단히 지킬려면Cisco인증 642-813시험은 무조건 패스해야 합니다. 하지만Cisco인증 642-813시험패스는 하늘에 별따기 만큼 어렵습니다. 시험이 영어로 출제되어 공부자료 마련도 좀 힘든편입니다. 여러분들의 고민을 덜어드리기 위해ITExamDump에서는Cisco인증 642-813시험의 영어버전 실제문제를 연구하여 실제시험에 대비한 영어버전Cisco인증 642-813덤프를 출시하였습니다.전문적인 시험대비자료이기에 다른 공부자료는 필요없이ITExamDump에서 제공해드리는Cisco인증 642-813영어버전덤프만 공부하시면 자격증을 딸수 있습니다.
642-813 덤프무료샘플다운로드하기: http://www.itexamdump.com/642-813.html
NO.1 Refer to the exhibit.
Assume that Switch_A is active for the standby group and the standby device has only the default HSRP
configuration. Which statement is true?
A. If port Fa1/1 on Switch_A goes down, the standby device takes over as active.
B. If the current standby device had the higher priority value, it would take over the role of active for the
HSRP group.
C. If port Fa1/1 on Switch_A goes down, the new priority value for the switch would be 190.
D. If Switch_A had the highest priority number, it would not take over as active router.
Answer: C
Cisco시험문제 642-813 dumps 642-813인증
NO.2 What does the global configuration command ip arp inspection vlan 10-12,15 accomplish?
A. validates outgoing ARP requests for interfaces configured on VLAN 10, 11, 12, or 15
B. intercepts all ARP requests and responses on trusted ports
C. intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings
D. discards ARP packets with invalid IP-to-MAC address bindings on trusted ports "Pass
Answer: C
Cisco인증 642-813 642-813 642-813 pdf
NO.3 Refer to the exhibit.
Host A has sent an ARP message to the default gateway IP address 10.10.10.1. Which statement is true?
A. Because of the invalid timers that are configured, DSw1 does not reply.
B. DSw1 replies with the IP address of the next AVF.
C. DSw1 replies with the MAC address of the next AVF.
D. Because of the invalid timers that are configured, DSw2 does not reply.
E. DSw2 replies with the IP address of the next AVF.
F. DSw2 replies with the MAC address of the next AVF.
Answer: F
Cisco 642-813 642-813 642-813덤프
NO.4 Refer to the exhibit.
Which VRRP statement about the roles of the master virtual router and the backup virtual router is true?
A. Router A is the master virtual router, and router B is the backup virtual router. When router A fails,
router B becomes the master virtual router. When router A recovers, router B maintains the role of master
virtual router.
B. Router A is the master virtual router, and router B is the backup virtual router. When router A fails,
router B becomes the master virtual router. When router A recovers, it regains the master virtual router
role.
C. Router B is the master virtual router, and router A is the backup virtual router. When router B fails,
router A becomes the master virtual router. When router B recovers, router A maintains the role of master
virtual router.
D. Router B is the master virtual router, and router A is the backup virtual router. When router B fails,
router A becomes the master virtual router. When router B recovers, it regains the master virtual router
role.
Answer: B
Cisco덤프 642-813 642-813인증
NO.5 Refer to the exhibit.
Which four statements about this GLBP topology are true? (Choose four.)
A. Router A is responsible for answering ARP requests sent to the virtual IP address.
B. If router A becomes unavailable, router B forwards packets sent to the virtual MAC address of router A.
C. If another router is added to this GLBP group, there would be two backup AVGs.
D. Router B is in GLBP listen state.
E. Router A alternately responds to ARP requests with different virtual MAC addresses.
F. Router B transitions from blocking state to forwarding state when it becomes the AVG.
Answer: ABDE
Cisco자격증 642-813 642-813 642-813
NO.6 Which statement is true about Layer 2 security threats?
A. MAC spoofing, in conjunction with ARP snooping, is the most effective counter-measure against
reconnaissance attacks that use Dynamic ARP Inspection to determine vulnerable attack points.
B. DHCP snooping sends unauthorized replies to DHCP queries.
C. ARP spoofing can be used to redirect traffic to counter Dynamic ARP Inspection.
D. Dynamic ARP Inspection in conjunction with ARP spoofing can be used to counter DHCP snooping
attacks.
E. MAC spoofing attacks allow an attacking device to receive frames intended for a different network host.
F. Port scanners are the most effective defense against Dynamic ARP Inspection.
Answer: E
Cisco최신덤프 642-813최신덤프 642-813 642-813시험문제 642-813 642-813
NO.7 What does the command udld reset accomplish?
A. allows a UDLD port to automatically reset when it has been shut down
B. resets all UDLD enabled ports that have been shut down
C. removes all UDLD configurations from interfaces that were globally enabled
D. removes all UDLD configurations from interfaces that were enabled per-port
Answer: B
Cisco자격증 642-813 dump 642-813 642-813
NO.8 Refer to the exhibit.
GLBP has been configured on the network. When the interface serial0/0/1 on router R1 goes down, how
is the traffic coming from Host1 handled?
A. The traffic coming from Host1 and Host2 is forwarded through router R2 with no disruption.
B. The traffic coming from Host2 is forwarded through router R2 with no disruption. Host1 sends an ARP
request to resolve the MAC address for the new virtual gateway.
C. The traffic coming from both hosts is temporarily interrupted while the switchover to make R2 active
occurs.
D. The traffic coming from Host2 is forwarded through router R2 with no disruption. The traffic from Host1
is dropped due to the disruption of the load balancing feature configured for the GLBP group.
Answer: A
Cisco 642-813자격증 642-813 642-813 642-813 642-813
NO.9 What two steps can be taken to help prevent VLAN hopping? (Choose two.)
A. Place unused ports in a common unrouted VLAN.
B. Enable BPDU guard.
C. Implement port security.
D. Prevent automatic trunk configurations.
E. Disable Cisco Discovery Protocol on ports where it is not necessary.
Answer: AD
Cisco자료 642-813덤프 642-813덤프 642-813
NO.10 Refer to the exhibit.
An attacker is connected to interface Fa0/11 on switch A-SW2 and attempts to establish a DHCP server
for a man-in-middle attack. Which recommendation, if followed, would mitigate this type of attack?
A. All switch ports in the Building Access block should be configured as DHCP trusted ports.
B. All switch ports in the Building Access block should be configured as DHCP untrusted ports.
C. All switch ports connecting to hosts in the Building Access block should be configured as DHCP trusted
ports.
D. All switch ports connecting to hosts in the Building Access block should be configured as DHCP
untrusted ports.
E. All switch ports in the Server Farm block should be configured as DHCP untrusted ports.
F. All switch ports connecting to servers in the Server Farm block should be configured as DHCP
untrusted ports.
Answer: D
Cisco 642-813최신덤프 642-813 642-813
NO.11 Why is BPDU guard an effective way to prevent an unauthorized rogue switch from altering the
spanning-tree topology of a network?
A. BPDU guard can guarantee proper selection of the root bridge.
B. BPDU guard can be utilized along with PortFast to shut down ports when a switch is connected to the
port.
C. BPDU guard can be utilized to prevent the switch from transmitting BPDUs and incorrectly altering the
root bridge election.
D. BPDU guard can be used to prevent invalid BPDUs from propagating throughout the network.
Answer: B
Cisco기출문제 642-813 642-813 642-813자료 642-813 642-813
NO.12 Refer to the exhibit.
What information can be derived from the output?
A. Interfaces FastEthernet3/1 and FastEthernet3/2 are connected to devices that are sending BPDUs
with a superior root bridge parameter and no traffic is forwarded across the ports. After the sending of
BPDUs has stopped, the interfaces must be shut down administratively, and brought back up, to resume
normal operation.
B. Devices connected to interfaces FastEthernet3/1 and FastEthernet3/2 are sending BPDUs with a
superior root bridge parameter, but traffic is still forwarded across the ports.
C. Devices connected to interfaces FastEthernet3/1 and FastEthernet3/2 are sending BPDUs with a
superior root bridge parameter and no traffic is forwarded across the ports. After the inaccurate BPDUs
have been stopped, the interfaces automatically recover and resume normal operation.
D. Interfaces FastEthernet3/1 and FastEthernet3/2 are candidates for becoming the STP root port, but
neither can realize that role until BPDUs with a superior root bridge parameter are no longer received on
at least one of the interfaces.
Answer: C
Cisco 642-813기출문제 642-813
NO.13 Which statement is true about RSTP topology changes?
A. Any change in the state of the port generates a TC BPDU.
B. Only nonedge ports moving to the forwarding state generate a TC BPDU.
C. If either an edge port or a nonedge port moves to a block state, then a TC BPDU is generated.
D. Only edge ports moving to the blocking state generate a TC BPDU.
E. Any loss of connectivity generates a TC BPDU.
Answer: B
Cisco 642-813 642-813
NO.14 What is one method that can be used to prevent VLAN hopping?
A. Configure ACLs.
B. Enforce username and password combinations.
C. Configure all frames with two 802.1Q headers.
D. Explicitly turn off DTP on all unused ports.
E. Configure VACLs.
Answer: D
Cisco자료 642-813 642-813 642-813 642-813
NO.15 When an attacker is using switch spoofing to perform VLAN hopping, how is the attacker able to gather
information?
A. The attacking station uses DTP to negotiate trunking with a switch port and captures all traffic that is
allowed on the trunk.
B. The attacking station tags itself with all usable VLANs to capture data that is passed through the switch,
regardless of the VLAN to which the data belongs.
C. The attacking station generates frames with two 802.1Q headers to cause the switch to forward the
frames to a VLAN that would be inaccessible to the attacker through legitimate means.
D. The attacking station uses VTP to collect VLAN information that is sent out and then tags itself with the
domain information to capture the data.
Answer: A
Cisco최신덤프 642-813 dumps 642-813 dump 642-813 dumps
NO.16 Refer to the exhibit.
The web servers WS_1 and WS_2 need to be accessed by external and internal users. For security
reasons, the servers should not communicate with each other, although they are located on the same
subnet. However, the servers do need to communicate with a database server located in the inside
network. Which configuration isolates the servers from each other?
A. The switch ports 3/1 and 3/2 are defined as secondary VLAN isolated ports. The ports connecting to
the two firewalls are defined as primary VLAN promiscuous ports.
B. The switch ports 3/1 and 3/2 are defined as secondary VLAN community ports. The ports connecting to
the two firewalls are defined as primary VLAN promiscuous ports.
C. The switch ports 3/1 and 3/2 and the ports connecting to the two firewalls are defined as primary VLAN
promiscuous ports.
D. The switch ports 3/1 and 3/2 and the ports connecting to the two firewalls are defined as primary VLAN
community ports.
Answer: A
Cisco덤프 642-813덤프 642-813
NO.17 Refer to the exhibit.
Dynamic ARP Inspection is enabled only on switch SW_A. Host_A and Host_B acquire their IP addresses
from the DHCP server connected to switch SW_A. What would the outcome be if Host_B initiated an ARP
spoof attack toward Host_A ?
A. The spoof packets are inspected at the ingress port of switch SW_A and are permitted.
B. The spoof packets are inspected at the ingress port of switch SW_A and are dropped.
C. The spoof packets are not inspected at the ingress port of switch SW_A and are permitted.
D. The spoof packets are not inspected at the ingress port of switch SW_A and are dropped.
Answer: C
Cisco 642-813 642-813기출문제 642-813 pdf 642-813
NO.18 Refer to the exhibit.
DHCP snooping is enabled for selected VLANs to provide security on the network. How do the switch
ports handle the DHCP messages?
A. A DHCPOFFER packet from a DHCP server received on Ports Fa2/1 and Fa2/2 is dropped.
B. A DHCP packet received on ports Fa2/1 and Fa2/2 is dropped if the source MAC address and the
DHCP client hardware address does not match Snooping database.
C. A DHCP packet received on ports Fa2/1 and Fa2/2 is forwarded without being tested.
D. A DHCPRELEASE message received on ports Fa2/1 and Fa2/2 has a MAC address in the DHCP
snooping binding database, but the interface information in the binding database does not match the
interface on which the message was received and is dropped.
Answer: C
Cisco자격증 642-813 642-813인증 642-813자격증
NO.19 What are two methods of mitigating MAC address flooding attacks? (Choose two.)
A. Place unused ports in a common VLAN.
B. Implement private VLANs.
C. Implement DHCP snooping.
D. Implement port security.
E. Implement VLAN access maps
Answer: DE
Cisco자격증 642-813 642-813 642-813 642-813기출문제
NO.20 Which description correctly describes a MAC address flooding attack?
A. The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking
device then becomes the destination address found in the Layer 2 frames sent by the valid network
device.
B. The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking
device then becomes the source address found in the Layer 2 frames sent by the valid network device.
C. The attacking device spoofs a destination MAC address of a valid host currently in the CAM table. The
switch then forwards frames destined for the valid host to the attacking device.
D. The attacking device spoofs a source MAC address of a valid host currently in the CAM table.
The switch then forwards frames destined for the valid host to the attacking device.
E. Frames with unique, invalid destination MAC addresses flood the switch and exhaust CAM table space.
The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is
subsequently flooded out all ports.
F. Frames with unique, invalid source MAC addresses flood the switch and exhaust CAM table space.
The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is
subsequently flooded out all ports.
Answer: F
Cisco덤프 642-813인증 642-813 642-813
ITExamDump는ITExamDump의Cisco인증 642-813덤프자료를 공부하면 한방에 시험패스하는것을 굳게 약속드립니다. ITExamDump의Cisco인증 642-813덤프로 공부하여 시험불합격받으면 바로 덤프비용전액 환불처리해드리는 서비스를 제공해드리기에 아무런 무담없는 시험준비공부를 할수 있습니다.
댓글 없음:
댓글 쓰기