H3C GB0-372-ENU 問題集

質問 1：
A customer's network has deployed 802.1X. The customer hopes to control the authorization status of the port by configuring the access control mode of the port configuration to auto. Which of the following descriptions of the auto mode is incorrect? (Multiple choice)
A. The initial state of the port in this mode is the authorized state
B. In this mode, the initial state only allows EAP-TLS message sending and receiving
C. The initial state of the port in this mode is unauthorized
D. In this mode, the initial state only allows EAPOL messages to be sent and received
正解：A,B

質問 2：
Regarding the compatibility configuration of MSTP, which of the following is correct? (Multiple choice)
A. Since different vendors have different keys, different summary results may be obtained even if the VLAN instance mappings are the same.
B. When switches from different manufacturers communicate with each other through MSTP, as long as the domain name, revision level, and VLAN instance mapping are configured exactly the same, the switches can be guaranteed to belong to the same MST region.
C. H3C switches can achieve MSTP interoperability with switches from other manufacturers by configuring summary snooping.
D. When digest snooping is configured, the H3C switch will use the same hash algorithm and key as the peer vendor when performing digest calculations.
正解：A,C

質問 3：
Which of the following descriptions about secure management networking are correct?
A. Hardware firewall mounted on the gateway
B. Traffic between firewalls and load balancers is directly interconnected through the secure intranet without going through a gateway
C. Hardware load balancing is mounted on the gateway
D. Security devices and gateways communicate with each other through VXLAN
正解：C

質問 4：
The following command is configured on a device: [sysname] port-security enable Which of the following is an incorrect description of the function and meaning of this configuration?
(Multiple choice)
A. The purpose of this configuration is to enable the device to learn the legal destination MAC address to achieve network management
B. This configuration enables the port security feature
C. The function implemented by this configuration can only control the access of unauthorized devices to the network by detecting the destination MAC address in the data frame.
D. The function implemented by this configuration can only control the access of unauthorized devices to the network by detecting the source MAC address in the data frame.
正解：A,C

質問 5：
Which of the following descriptions of the snmp-agent command are correct? (Multiple choice)
A. When the snmp-agent command is executed, if the local-engineid is not specified, the system will automatically calculate the local-engineid
B. The nmp-agent command contains local-engine in the configuration file, so you cannot use the copy method to configure the smmp of multiple devices in the same management domain.
C. The local-engineid automatically calculated by the snmp-agent command is unique, so it is recommended to keep the automatically calculated local-engineid unchanged without manually specifying it.
D. The local-engineid automatically calculated by the snmp-agent command may be repeated, so it is recommended to manually configure the local-engineid to keep the local-engineid of the device in the SNMP management domain unique.
正解：A,B,C

質問 6：
Regarding the STP port status, which of the following is correct? (Multiple choice)
A. When the port is in the Listening state, it will receive configuration BPDUs and perform calculations, but will not send configuration BPDUs.
B. Regardless of the role the port ultimately determines, the time it stays in the Listening state and the Learning state is the length of one Forward Delay.
C. When the port is in the Listening state or the Learning state, if the port role changes to an Alternate port, the port state will directly change to Blocking.
D. When the port is in the Learning state, it starts learning MAC addresses but does not forward data.
正解：B,D

質問 7：
When SSH users use public key authentication, which of the following descriptions of key configuration are correct? (Multiple choice)
A. You can copy and paste the client's host public key to the server.
B. The client's RSA host private key needs to be configured on the server
C. The client needs to specify the RSA private key corresponding to the host public key for the SSH user
D. You cannot copy and paste the client's host private key to the server.
正解：A,C

質問 8：
Which of the following addresses is not an IPv4 multicast address?
A. 242.255.255.250
B. 232.255.255.255
C. 239.255.255.255
D. 224.0.0.13
正解：A