admin管理员组

文章数量:1532464

文章目录

  • 一、编程
  • Python
    • Python;try/except
    • python;try...except;25
    • python,list;理解
    • python,list;理解
    • python; master and slave;no messaging;
    • Python;lock、target锁母;题目要阻止,所以要锁住目标running
    • script;关键是terminate终止;a value equal to 999等于999的值;
    • script;REST
    • script;需看;不选from;ncclient manager import导入ncclient管理器;nc客户经理导入;看报错,得烧腊manager的库,容易错选import manager,但是题中多次提到ncclient manager,所以还是ncclient manager import;
    • code;需看;ncclient connection;context;nc客户链接;
    • code;题目return是username,即为cisco
    • code;JSON;load();
    • Python code;需看;数字不用双引号,单词要双引号;0,'upTime';不要0,upTime;不要'family','upTime';不要family,upTime;
    • Python code;阶梯式+true;不要阶梯式+false
    • Python code;yyyymmdd;The code converts time to the yyyymmdd representation.代码将时间转换为yyyymmdd表示。yyyy是因为题目10000
    • Python code;BGP table;题目涉及的bgp
  • JSON
    • JSON记关键字题:respone.json;json dump;JWT;7.0(3)17(4);hps(hearder,payload,and signature);大写XML遇到就选,小写xml需要搭配别的词才选,如application/xml;
    • JSON语法题:数字不用双引号,单词要双引号“”;字符串(单词)双引号“”,并列的值用方括弧,逗号隔开;is是:;+是[ ]。
    • JSON format;数字不用双引号,单词要双引号;单词要有";0和'hostname';数字不用双引号,单词要双引号
    • JSON format;需看;不选json.loads;Respone.json;只需要看Respone之间的区别;
    • JSON format;json dump;dumps
    • JSON syntax;“Age”:75;字符串双引号,并列的值用方括弧,逗号隔开
    • JSON syntax;is是:;+是[ ]
    • JSON syntax;Persion接{ {
    • JSON syntax;结尾两{,没有/;难;没有括弧
    • JSON;3个逗号;并列的值用方括弧,逗号隔开
    • JSON;3个逗号和18;~~数字不用双引号~~ ,单词要双引号;冒号后数字要加双引号,中括号里数字不要加双引号;
    • JSON;print的[]里面的不需要";
    • JSON object;JWT
    • JSON object;dumps、d;难;双d
    • HTTP JSON;77;7.0(3)17(4);
    • JSON;hps;hearder,payload,and signature头、有效载荷和签名;头脖子手
    • JSON;xml;the accept header sent was application/xml发送的接收头是application/xml;;大写XML遇到就选,小写xml需要搭配别的词才选,如application/xml;
  • YANG
    • YANG记关键字题:有YANG就选,有CON就选(但是有object-oriented和CON,选object-oriented)(YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据);data structure;四个选项只有一个data就直接选,多个data就选data model/model data;两个 statements
    • YANG;需看;data structure;data;scalablity and consistency;
    • YANG;多需看;data model;太易错选via CLI;不选via CLI;阳数据模式;describing data models描述数据模型;YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据。
    • YANG;需看;strcture data;易错选NETCONF;object-oriented;
    • YANG;NETCONF;data model;YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据;这里也有大写XML,但不选;
    • YANG;NETCONF要YANG;不选REST;
    • YANG;多需看;两个con;NETCONF、it enforces configuration constraints.它强制配置约束;双con;
    • YANG;RESTCONF、NETCONF;两个CONF;YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据。
    • YANG;RESTCONF;YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据;这个就不选REST
    • YANG;两个statement;rpc statements、container statements;两个statements;取消就选XML;
    • 反常(YANG都选NETCONF,除了这个)YANG;不要NETCONF,structure data;it structures data in an object-oriented fashion to promte model reuse.它以面向对象的方式构造数据,以促进模型重用。It is a Cisco proprietary language that models NETCONF data.它是一种Cisco私有语言,用于对NETCONF数据建模。;YANG (Yet another Next Generation)是一种数据建模语言,用于定义通过NETCONF和RESTCONF等网络管理协议发送的数据。;data model;
  • NETCONF
    • NETCONF记关键字题:netconf与YANG一家,有就选:data model,不要data models;schema;~~大写XML遇到就选,~~ 小写xml需要搭配别的词才选,如application/xml;
    • NETCONF;data model,不要data models;not exist;
    • NETCONF;netconf-yang;
    • NETCONF;schema;show netconf schema | section rpc-reply
    • NETCONF;四个选项,只有一个否定,选否定;就选no;不要ssh限制
    • NETCONF;XML filter ~~;~~ ~~大写XML遇到就选,小写xml需要搭配别的词才选,如~~ application/xml;XML filter,application/xml;
  • 二、交换
  • VLAN
    • VLAN记关键字题:结尾带有over就选;
    • VLAN;monitor session 1 source vlan 10;看题可得monitor session 1 source 后接端口,不接vlan,所以error是后接vlan;
    • VLAN;inactive不活跃的;inactive state非活动状态
    • VLAN;RSPAN VLAN
    • VLAN;需看;工作没有达标,就要卷;override超量;结尾带有over就选
    • VLAN;intra-controller;内控;inter因特;;SD-Access选inter-xTR,wireless选inter-controller不选intra-controller,VLAN选intra-controller不选inter-controller;(Intra内部,inter模块间);
    • VLAN;GLBP、MHSRP(MG芒果);题目有gateway,答案有glbp,都有g;GM感冒
    • VLAN;不要forwarding,但要ip add
    • VLAN;需看;no traffic from=remove 110;
    • VLAN;需看;看图看题;题目要求是阻止vlan10;到SW3,就从SW3对面口设置
    • VLAN;难;tx、filter vlan 3;腾讯山
  • VXLAN
    • VXLAN记关键字题:2,3层分割用VNI,封装解封用VTEP;有de-encapsulate就选;
    • VXLAN;VNI;2,3层分割用VNI,封装解封用VTEP;VXLAN Network identifier;
    • VXLAN;VNID;2,3层segment用VNI/VXLAN,封装解封用VTEP;
    • VXLAN;VTEP;2,3层segment用VNI/VXLAN,封装解封用VTEP;
    • VXLAN;需看;不选VTEP;2,3层segment用VNI/VXLAN,封装解封用VTEP;
    • VXLAN;遇到encapsulate and de-encapsulate就选;VTEP为VXLAN Tunnel Endpoint;
    • VXLAN;遇到encapsulate and de-encapsulate就选;
    • VXLAN;需看;encapsulate;遇到Layer 2就选,多个Layer 2就选多的;IP-UDP;LAN是4094,VXLAN比LAN多很多;
    • VXLAN;多需看;不选Layer 2;遇到encapsulate and de-encapsulate就选,再加16 million;遇到Layer 2就选的反例;VTEPs、million;有Layer 3的,Layer 2不选;
  • Cisco SD-Access
    • Cisco SD-Access记关键字题:data plane选VXLAN、control plane选LISP(data VXLAN(DVD)、control LISP);fabric前面有co就选,除了manage endpoint;就两个有endpoing不选,而且两个前面的单词都是f开头,多个endpoint选manage,edge node对应connect endpoint、border node对应another fabric(edge边缘是连接终端;border边界是连接另一个fabric;边缘与边界的区别);control和fabric;overlay和access;
    • VXLAN
    • Cisco SD-Access;VXLAN;SD-Access的control plane是LISP;data plane是VXLAN(DVD)
    • Cisco SD-Access;VXLAN;SD-Access的control plane是LISP;data plane是VXLAN
    • Cisco SD-Access;VXLAN;SD-Access的control plane是LISP;data plane是VXLAN
    • Cisco SD-Access;VXLAN;SD-Access的control plane是LISP;data plane是VXLAN
    • Cisco SD-Access;反例LISP,不选VXLAN;SD-Access的control plane是LISP;data plane是VXLAN
    • Cisco SD-Access;data;data和plane的开头字面dp;data plane数据平面;data plane forwarding数据平面转发;SD-Access的control plane是LISP;data plane是VXLAN
    • fabric
    • Cisco SD-Access;需看;易错选network segementation;fabric前面有co就选;track endpoint;需看;不选segmentation;control需endpoint和network;
    • Cisco SD-Access;fabric前面有co就选;不要for endpoint;another fabric;Layer 3 networks
    • Cisco SD-Access;fabric前面有co就选,再附加to;
    • Cisco SD-Access;多需看;有个选项是选access point..overlay;WLC是在fabric的外面;fabric前面有co就选,再附加WLC(WLC>access point) ;The WLC is connected outside of the fabric.WLC连接在织物的外部;part部分选ap,outside外部选WLC;需看;
    • Cisco SD-Access;fabric前面有co就选,再附加control;不要fabric enadpoint;nonfabric、control;难;~~border node~~ 、plane node;一个border,一个就control
    • Cisco SD-Access;多需看;题目device manage提示control;易错选edge node;fabric control;fabric control plane node;管理对应控制;manage对应control;endpoint容易误导选edge;关键是manage;
    • Cisco SD-Access;多需看;不是management就选control;wireless;wireless controller;WLC;resourc manage是wireless controller/WLC,device manage是control plane node;
    • 多需看;control plane node;数据库还是要control;网关才是edge;resourc manage是wireless controller/WLC,device manage是control plane node;
    • Cisco SD-Access;(反例)fabric前面有co也不选;manage endpoint;a mapping system
    • endpoint
    • Cisco SD-Access;需看;不选via;遇到dynamic就选;dynamic endopint;fabric前面无co不选;
    • Cisco SD-Access;需看;不选Layer 3;wired endpoint;fabric前面无co不选;
    • Cisco SD-Access;manage endpoint;a mapping system;(反例)fabric前面有co就选的反例;manage是最优先的;
    • Cisco SD-Access;需看;edge对应endpoint;connects endpoint;edge node对应connect endpoint、border node对应another fabric(edge边缘是连接终端;border边界是连接另一个fabric;边缘与边界的区别);fabric前面无co不选;
    • Cisco SD-Access;需看;provide endpoint;
    • Cisco SD-Access;endpoint前面有f不选;不要for endpoint;fabric前面有co就选;another fabric;Layer 3 networks
    • Cisco SD-Access;endpoint前面有f不选;不要fabric enadpoint;fabric前面有co就选,再附加control;nonfabric、control;难;~~border node~~ 、plane node
    • overlay
    • Cisco SD-Access;遇到overlay就选,除了其他有how xx;overlay network
    • Csico SD-access;需看;易混;access point和overlay;access、overlay;遇到overlay就选,除了其他有how xx;(fabric前面无co不选的反例);由于每个选择都是fabric前面没有co,所以引入access,overlay;part部分选ap,outside外部选WLC;需看;题目的access提示答案的access;
    • network
    • Cisco SD-Access;需看;易错选wireless environment;题目two system提示two network;two network;two;two network;fabric前面无co不选;
    • Cisco SD-Access;多需看;fusion leak;融合泄露;virtual network;user-defined;route leak路由泄露;fabric前面无co不选;
    • 其他
    • Cisco SD-Access;node、node;两个node;edge node、border node两个node
    • Cisco SD-Access;9100
    • Cisco SD-Access;xTR;inter-xTR;SD-Access选inter-xTR,wireless选inter-controller不选intra-controller,VLAN选intra-controller不选inter-controller;(Intra内部,inter模块间);
    • SDA;Identity Service Engine;ISE
  • LISP
    • LISP记关键字题:链接LISP到非LISP的是PETR、链接非LISP到LISP的是PITR(PETR是正,PITR是反;i是反);端点标识符(EIDs)是分配给终端主机。路由定位器(RLOCs)是分配给组成全局路由系统的设备(主要是路由器);two;dynamic;routing、endpoint;
    • LISP;需看;ETR=EID-to-RLOC的ETR;
    • LISP;需看;PETR;Proxy ETR=PETR;LISP到non-LISP用PETR,non-LISP到LISP用PITR;
    • LISP;Mr.PETR;PETR、MR;LISP到non-LISP用PETR,non-LISP到LISP用PITR;
    • LISP;PETR、ETR;egress tunnel router=ETR;proxy ETR、egress tunnel router代理ETR,出口隧道路由器;LISP到non-LISP用PETR,non-LISP到LISP用PITR;
    • LISP;不要PETR,要PITR;LISP到non-LISP用PETR,non-LISP到LISP用PITR;
    • LISP;需看;易错选长的map-request;decapsulate map-request解封请求;ITRs;题目resolver提示request(解析请求);decapsulate;to decapsulate map-request messages from ITRs and forward the messages to the MS.解封装来自ITRs的映射请求消息,并将消息转发给MS;
    • LISP;RLOC、EID;端点标识符(EIDs) —分配给终端主机。路由定位器(RLOCs)—分配给组成全局路由系统的设备(主要是路由器);
    • LISP;RLOC;端点标识符(EIDs) —分配给终端主机。路由定位器(RLOCs)—分配给组成全局路由系统的设备(主要是路由器);
    • LISP;需看;two,each;each,another;2,1;one for,another;each network node;不是遇到encapsulation就选;
    • LISP;需看;dynamic multipoint;易错选learn,next hop;OTP = multipoint tunnel;dynamic multipoint tunneling;
    • LISP;多需看;RLEI;routing、endpoint;Routing Locator路由标志、Endpoint Identifier端节点标识符
    • LISP;需看;control选LISP;DV;CL;
  • channel
    • channel记关键字:no span、guard;mode active;
    • port channel;active;遇到trunk就选,除了mode trunk;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;~~active>passive>trunk;~~ ~~mode active>mode passive>mode trunk;~~
    • port channel;active;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;passive+passive不通;
    • etherChannel;active;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;题目要求实LACP模式,即active+passive,但是S2配置了PAgP,所以需要改成active/passive;
    • etherChannel;active;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • etherchannel;需看;易错选active;选active反例;to trunk;遇到trunk就选,除了mode trunk;~~active>passive>trunk~~ ;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • channel-group;passive;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • etherchannel;auto/auto;双auto;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • port channel;desirable;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • port channel;desirable;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通;
    • port channel;desriable;active+active/passive,on+on,desirable+desireable/auto可以通,其他配合不通,尤其是auto+auto不通,需要改其中一个auto为desirable;遇到trunk就选,除了mode trunk,再附加dynamic(其实不要mode trunk已经可以得出正确答案了);SW2,trunk、dynamic desirable;
    • switchport;不选desirable;看图,发现f0/1是access,错误,需要更改为trunk;~~遇到trunk就选,除了mode trunk,再附加encap;switchport trunk encap dot1q;~~
    • port-channel;no span、guard;看图左上角;no spanning-tree bgpduguard enable
    • port-channel;需看;易混bpdufilter,看图;no span、guard;no spanning-tree bpduguard enable
    • etherchannel;遇到same就选;same protocol
    • etherchannel;遇到same就选,same protocol;configure the same EtherChannel protocol on both switches.在两台交换机上配置相同的EtherChannel协议。
    • etherChannel; match the parameter;
    • port channel;max-bundle;
    • port channel;incompatible不相容的;两端是mode desirable;
    • VTP;both;需看;看图确实两端vtp domain不同
    • VTP;1、pruning修剪;看图左上角;意见;vtp server配置vtp pruning,所有sw只转发相同vlan;
    • DTP;遇到dynamic就选,dynamic desirable;;遇到same就选;configure both interfaces in dynamic desirable DTP mode and ensure that the swithces are in the same VTP domain将两个接口配置为动态理想DTP模式,确保交换机处于同一个VTP域中
    • DTP;遇到dynamic就选,dynamic desirable
    • switchport;需看;两边的session 1要保持一致;遇到trunk就选,除了mode trunk,再附加g1/2(题目提及的抓包接口);
  • spanning-tree
    • spanning-tree记关键字题:1、primary、4096(114);特殊字符/、+;trunk root bpdufilter;priority后接0,16和32;
    • spanning-tree;1、primary、4096;114
    • spanning-tree;1、primary、4096
    • spanning-tree;遇到trunk就选,除了mode trunk;spanning-tree portfast trunk;有trunk就选
    • spanning-tree;需看;ro and or;易错选equal to 0;root;all access switch;guard and portfast向导和端口快速;gu and po;
    • spanning-tree;bpdufilter;题目没有提示要bpduguard就选
    • spanning-tree;/;shutdown/no shutdown
    • spanning-tree;+;PVST+
    • spanning-tree ;两个+;Rapid;PVST+;Rapid
    • spanning-tree;shutdown/no shutdown
    • spanning-tree;32;priority 32;看题,两边都32才能通
    • spanning-tree;需看;越小越优先,所以改小SW2的g1/3的端口优先级,这样流量就从SW2的g1/3到SW1;16、23;priority 16、SW2&g1/3;128是默认的,不选;PC1近SW1,要去SW2,就要调整SW2的;
    • spanning-tree;需看;两个vlan 1 priority 0;0、2、128;priority 0、cost 128;block=128
  • HSRP
    • HSRP记关键字题:preempt;07ac其他数字;RP;two;standby、hello备胎你好;
    • HSRP primary;preempt
    • HSRP primary;preempt
    • HSPR;07AC、10;HSRP group 16;10=16*1=16;不用算,反正最后数字跟group后数字不一样;
    • HSRP;07AC、25;HSRP group 37;最后一位是37的16进制为25=2*16+5,前面是07ac;不用算,反正最后数字跟group后数字不一样;
    • HSRP;需看;07.ACxx、track;07.ACxx、support tracking;
    • HSRP;需看;不选HSRPv2;1;HSRPv1;看题两端对称;
    • HSR;遇到same就选;P;RP;same device
    • HSRP;遇到same就选;遇到two就选,数字2不一定;same virtual IP address;
    • HSPR;需看;HSRP group和virtual MAC address;HSRP version;virtual MAC address;vMAC;
    • HSRP;local router to 10.1.1.1;在本地路由到10.1.1.1
    • HSRP;INIT、listen、speak;ILS;ISL;inlisp;监听空闲讲话者;I is我是
    • HSRP;standby、hello备胎你好;standby device、hello timer;
    • HSRP group;priority 110、version 2、300 preempt;缺省优先级是100,主用要大于100,所以是110;v2默认就是;肯定要有preempt;
  • VRRP
    • VRRP记关键字题:3 master highest priority version TTL GLBP
    • VRRP;多需看;没有抢占;想太多了;master;routing table;R1是priority 110,R2是默认100,所以R1是master
    • VRRP;vrrp x preempt;vrrp 10 preempt
    • VRRP;vrrp x preempt、decrement 10
    • VRRP;需看;为什么选priority 100;不要vrrp x preempt,因为也没定义priority是多少,要vrrp 5 priority 100;vrrp x ip 地址但没有子网掩码;
    • VRRP;highest priority,不是highest lo;priority肯定是越高越好;VRRP选highest不选lowest,IGMP选lowest不选highest;
    • VRRP;两个VRRP;versions、TTL
    • VRRP;路由器接近PC01的接口;两个G0/1
    • First Hop Redundancy Protocol;GLBP;
    • First Hop Redundancy Protocol;GLBP ;First Hop Redundancy Protcol第一跳冗余协议
    • FHRP;需看;容易与上面两道题混淆;取最大;3;不选GLBP;VRRP 3>GLBP;
  • standby
    • standy;preempt
    • standby;R1 preempt;图正上方;题目要求R1为active,所以要preempt,默认priority为100
    • standby;key-strings;图正上方
    • standby;active router、remain(没有配置抢占导致的)
    • standby;version 2、preempt、1000
  • IGMP
    • ICMP;DF;DF bit;
    • IGMP;需看;VRRP选highest不选lowest,IGMP选lowest不选highest;
    • ICMP;多需看;易错选source-interface;停止echo导致无法track;default route默认路由;
    • IGMP;需看;automatically;自动自动;
    • IGMP;v2,v1;大版本兼容小版本
    • IGMPv2;224.0.0.1
  • 三、路由
  • FIB;有路R才能转F
    • FIB:RIB;遇到same就选;only,best只有最好的;the same destination prefix相同的目的地前缀;
    • FIB:RIB;populated迁移;base基于;有路R才能转F
    • FIB:RIB;难;;C看定义就是错的;有路R才能转F
    • FIB;each packet;有FIB才有CEF;CEF use the FIB;cef利用两个,ps一个
  • OSPF
    • OSPF记关键字题:4 DF 尺码区域 默认广播,默认路由宣告,但不总是;只有琳琳区域0没光;没有建立广岛非广岛可通信;你好信息
    • OSPF;需看;不选p2p;default要broadcast;broadcast;缺省广播;默认广播;default要broadcast;
    • OSPF;同网段要p2p,不要broadcast;p2p;广播网络和非广播网络选择DR/BDR,点对点/多点不选择DR/BDR;
    • OSPF;同网段要p2p,不要broadcast;point-to-point;广播网络和非广播网络选择DR/BDR,点对点/多点不选择DR/BDR;
    • point-to-point;需看;3 point-to-point;
    • OSPF;no passive-interface;不选passive;题目要求要有邻居,所以需要去掉passive;
    • OSPF;passive;题目要without send,所以加passive;
    • OSPF;passive interface;
    • OSPF;需看;不选passive-interface;ip ospf 1 area 0,不要broadcast;ip ospf 1 area 0;区域0没关
    • OSPF;需看;易混D;broadcast to nobroadcast;广岛非广;广岛菲光;广播到非广播可通信;
    • OSPF;取最大数字;4;type 4;la s=太4
    • OSPF;取特殊缩写;DF;DF bit
    • OSPF;size;MTU size;没有遇到MTU就选;选mismatch MTU,不选MTU mismatch;选项只有一个MTU或MTU开头的不选;
    • OSPF;area;change;选mismatch MTU,不选MTU mismatch;选项只有一个MTU或MTU开头的不选;重新开始是mtu不通,图有提示区域改变
    • OSPF;需看;全0;20.1.1.2 0.0.0.0 area 0
    • OSPF;default-information originate默认路由宣告;缺省信息宣告,但不总是
    • OSPF;only g0/0;只有琳琳
    • OSPF;no established;没有建立;hello不同,领导不起;
    • OSPF;hello、f0/1;你好信息
    • OSPF;取最大数字;1、252;type 3 LSA,area,OSPF ;area 1 range 192.168.0.0 255.255.252.0;1,252
  • EIGRP
    • EIGRP题:末节区域可以泄露;EIGRP比OSPF非等价,多一点;OMP需要EIGRP和OSPF
    • EIGRP;Stub ;末节区域;leak stub末节区域可以泄露
    • EIGRP;EIGRP比OSPF多unequal-cost非等价
    • EIGRP;EIGRP比OSPF多unequal-cost非等价
    • EIGRP ;EIGRP有两个(or/and),OSPF只有一个(only);EIGRP有or/and,OSPF有only;bandwidth and delay
    • EIGRP;EIGRP有两个(or/and),OSPF只有一个(only);EIGRP有or/and,OSPF有only;EIGRP or、OSPF only
    • EIGRP;多需看;有两个load-balance;记住only if;only 6;6平;易错选by default;load、6;a path、6;a path、6 path;一路六路;EIGRP有6 unequal-cost,only
    • OMP;OSPF,EIGRP
  • BGP(看图注意对端地址remote-as也是对端AS号,比较慢,需要找出规律)
    • BGP记关键字题:有CHI选CHI,没CHI选MED猫耳朵(吃猫耳朵);看图注意对端地址remote-as也是对端AS号;
    • BGP;取最大数字;4、default撕膜;看图不走link1,走link2,动R4,设置大权力
    • BGP;要么调高出发点R2的preference,使得流量从它出发;
    • BGP:要么调高目的R4的prepend,使得流量都向它而去;
    • BGP;需看;100到200,因为只动R3,4,所以只能考虑将3的prepend提高,使得R1去不R3,只能通过R2到R4;
    • BGP;4、default;看图不走link1,走link2,动R4,设置大权力
    • BGP;MED;med猫耳朵;有CHI选CHI,没CHI选MED猫耳朵
    • BGP;不选MED,选CHI吃;Router-ID;
    • BGP;取最后值;last;拉山头
    • BGP;PREPEND;prepend预谋;force强迫,就出现了2;不要参杂别的MED猫耳朵;
    • BGP;看图注意对端地址remote-as也是对端AS号
    • BGP;看图注意对端地址remote-as也是对端AS号
    • BGP;看图正上方
    • BGP;R1的日志有从10.10.10.1到(我的)10.120.10.1,所以R1的邻居是10.10.10.1;需看;10.10.1到120.10.1=R1到R2;
    • EBGP;需看;邻居活跃,本地尝试;TCP;TCP session;the local router;ET;题目active提示答案TCP;
    • EBGP;weight、local;weight,local preference,AS path,MED;权重,局部偏好,AS路径,MED;体重本地优先路径猫耳朵;重本;题本;提油;中油;
    • EBGP;看图
    • EBGP peering;看图注意对端地址remote-as也是对端AS号
    • EBGP peering;看图注意对端地址remote-as也是对端AS号
  • GRE
    • GRE记关键字题:via;MSS;tunnel itself>tunnel destination>tunnel source>tunnel mode
    • GRE;via
    • tunnel;53(5年模拟,3年高考)
    • GRE;MSS;选项只有一个MTU或MTU开头的不选;MSS=Maximum Segment Size最大分段长度是TCP协议中一个选项,对于收发双向有效。
    • GRE;TCP MSS、IP MTU;选项只有一个MTU或MTU开头的不选;
    • GRE;tunnel model;set;to the default;不选长句带MTU的;
    • GRE;需看;tunnel destination;
    • GRE;route flapping,route out路由震荡,路由out;tunnel destination,instability;不选tunnel mode;
    • GRE;tunnel destination,再附加tunnel itself;best;the best path;有tunnel itself
    • GRE;tunnel source loopback0;不选tunnel mode;看图配置与destination同网段
    • GRE;短C;C fragmented,不要without;the packet arrives on router C framented数据包到达路由器C
    • GRE;需看;删除所有,创建一个;短tunnel interface、all;all、transform-set
    • GRE;134;看图右上角
    • GRE;看图;不选.130是因为它是物理地址,题目要求tunnel地址;
  • VRF
    • VRF-lite;VRFmulti,single多,单;single device;不选Layer 2;vrf是三层的;
    • VRF-lite;需看;multi,single多,单、ISP over OSPF;两个customer;
    • VRF-Lite;import and export;of routes
    • VRF;default
    • VRF;wildcard;mask
    • VRF;需看;on PE1、PE1 will;route filtering;PE1,automatic自动;
    • VRF;config-if对应ip address、config-vrf对应address-family
    • VRF;命令的顺序和正确的vrf;R1的e0/0对应R2的e0/0,自己ospf network自己网段;
    • VRF;看图找对应关系;global和要访问的地址是要精准的;
  • NAT
    • NAT;进出进进进;
    • NAT;PAT;pat的p对应interface;不是dynamic就选;PAT和NAT;PN;
    • NAT;不选PAT;NAT Table>PAT;first;The first packet triggered NAT to add on entry to NAT table.第一个报文触发NAT,将一条表项添加到NAT表中。
    • NAT;209.165.200.225对应外网internet,就是f0/1;
    • NAT;254
  • IP
    • IP记关键字题:dual对应2;不安全的UDP才需要安全的SLA;看图左上角是in
    • IPv6;2;题目dual-stack双栈,需要2;dual对应2;不是取最大数字的,需要单独记忆
    • IPv6;6to4
    • IP SLA;选UDP:SLA,flow(选TCP:EBGP,logging,GRE);UDP;UDP jitter;UDP抖动;不安全的UDP才需要安全的SLA
    • IP SLA;2 transport,二角;independent、monitoring;2mo恶魔;2与active搭配;
    • IP SLA;incorrectly、missing;source、missing源密室;miss,source蜜源;
    • IP SLA;需看;选UDP:SLA,flow(选TCP:EBGP,logging,GRE);udp-echo
    • ip flow;需看;最短;0魔;00000;
    • ip flow-export;选UDP:SLA,flow(选TCP:EBGP,logging,GRE);UDP
    • ip prefix-list;R1、in;看图左上角是in
  • EEM
    • EEM记关键字题: before only exit process 6 none put msg exceed track down 仅在出口过程6前无放味精超标追踪
    • EEM;event none;
    • EEM;event none;
    • EEM;取最大数字;6;process 6
    • EEM;msg
    • EEM;display显示,put推;action put推动作,不选string;
    • EEM;track down追捕;event track 10 state down事件跟踪10状态下降;track、down;track 10 state down
    • EEM;exceed 75%超过75%;
    • EEM;sync yes意味结束,就要exit;exit status退出状态,不选string;
    • EEM;no yes;sync no skip yes;
    • EEM;before、only;before、letter Y;run before跑前,running configuration运行配置文件;
    • EEM;learn;
  • 四、安全
  • ACL
    • ACL记关键字题:扩展eacl的序号从100开始;established包括ACK;看图右上角是out
    • ACL;不10;no 10;理解;一开始就deny所有,玩啥呢
    • ACL;需看;不10,要100-199,不包括200;理解;except for http就是deny xx 80;扩展eacl的序号从100开始
    • ACL;不10,要110;110、established;established包括ACK
    • ACL;需看;易错选DF bit;ACK;要看题;established包括ACK
    • ACL;正确的反掩码写法;理解;
    • ACL;5 permit ip
    • ACL;需看;不选5 permit;access-list 100 ~~seq 5~~ permit ip host 172.20.10.1 any log;host不要5 permit;from 172.20.10.1=host 172.20.10.1 any;
    • ACL;需看;outbound不影响source;do not affect;router interface(router出现太多,不适合);
    • ACL;weekend、in;看图正上方in和weekend
    • ACL;23:59、in、深夜入眠;题目weekend要求答案有weekend,R3到R2,所以R1的g0/1是in方向;
    • ACL;多需看;易错选global address;两个addresses;inside local、inside source
    • ACL;先拒绝,后放行,不要it;排错法,不要It,不要先permit后deny;
    • ACL;多需看;选最多的in;反掩码、15、in、ssh;题目all要求是15个连接;
    • ACL;看图正上方,外网所以g0/3是出口;3(出)、over;难;g0/3、overload;题目all external所有外部,所以在出口g0/3部署
    • ACL;g0/0是入方向,那源地址就是0.5,目的是0.2
    • ACL;需看;不选deny any;看题;看图右上角是out;默认有deny any,有deny any都有陷阱;
    • ACL;需看;fa0/1;看图;
    • ACL;需看;It,eq;难:B与C易混;~~web server的inboud方向,所以目的是web server200.225~~ ;80和200.225是在一起的;
    • ACL;需看;排除mac地址的;
  • class-map
    • policy-map;一个show带policy-map,一个带两个acl;show policy-map control-plane,两个acl;
    • policy-map;show policy-map control-plane,两个acl;
    • policy-map;match-any
    • policy-map;match-any
    • policy-map;不是应该超过流量也是drop;input,transmit,transmit,drop;
    • policy-map;需看;any=all;易错选specified rate;All traffic;看图
    • policy-map;需看;traffic generated;handle genreate接生;
    • policy-map;难;control-plane
  • AAA
    • AAA记关键字题:if-authenticated;4 against;privilege 15;autocommand、username;local、local;特点都是比较特殊;
    • AAA;local group tacacs+=先local,后tacacs+;local,TACACS+;local和tacacs+,没有RADIUS的事情;
    • AAA;group tacacs+ local=先tacacs+,后local;此题难点在于radius local还是tacacs+ local;
    • AAA;group tacacs+ local=先tacacs+,后local;all other=tacacs+;为什么选tacacs+,不选radius,可能就是因为tacacs+是思科的亲儿子吧;
    • AAA;group radius local;AAA server=radius;题目first AAA,then local,首先AAA,然后local本地;
    • AAA;console group radius;authenticate=group radius;没有出现radius为啥要选;
    • AAA;group ISE-server local=先ISE,后本地用户;先default,后ISE local;从login和exec二选一,题目要求login;
    • AAA;login local;
    • AAA;Cisco
    • AAA;if-authenticated
    • AAA;4 against;不要through 4
    • AAA;privilege 15;common-criteria-policy;
    • AAA;atuocommand、username;自动命令用户名;哪里有CCNP,哪里就配autocommand
    • AAA;local、local;Local user、Local authentication
    • AAA;line con 0,login;0所以loging后面没有东西;
    • AAA;yang;
  • logging
    • logging;3是error;3E;刚好3和E是镜像
    • logging;5是notification通知;5n;污泥;忤逆;务农;5no务农;无no;无不;
    • logging;vty,line;vty,key;vty、TAB;command under the vty、command in a new line.
    • logging;tcp、6514;tcp和最大数字
    • logging;tcp、1024;tcp和最大数字
  • QoS(选的缩写词太多)
    • QoS记关键字题:有S就选;多选选动词带s的;FIFO;WRED;Low;above;marking;QQTDF
    • QoS;QoS;Platinum;change the QoS level to Platinum.将QoS级别更改为白金。
    • QoS;ToS;the ToS field in the Layer 3 header.第3层头中的ToS字段;3t3天;
    • QoS;ToS、DSCP;QTD;其他的;奇特的;其他店
    • QoS;需看;saturation;under interface saturation conditions.在界面饱和条件下;~~all network~~ ;
    • QoS;0
    • QoS;需看;FIFO;QF起飞;IO进出;
    • QoS;WRED被;QW请问;题目decrease对应WRED;
    • QoS;Low;Low Larency Queuing.低透明度排队;QL起来;
    • QoS;多需看;bu and qu;above;buffer and queue;
    • QoS;需看;drop,source;exceeds,close;exceed source超远;
    • QoS;需看;jitter,loss;excess,loss;jitter,bandwidth-related;
    • QoS;marking
    • internal marking,QoS Group
  • SSO
    • SSO;需看;易错选temporarily froward;forward;control and forward;along;known routes
    • SSO;需看;sso是在第三层的;sso=synchronization的sso;3、in order to;S与3形似;3 in3进;取最大数字;
    • Cisco Catalyst switch;SSO
  • VTY
    • VTY;1
    • VTY;local;本地ssh;only secure=input (only) ssh;
    • VTY;多需看;难;干扰项多,需要记住default、none;根据题目,误判C的概率大;without any=none
    • VTY;排除法,看题中确认exec-timeout正确格式
    • VTY;题目是涉及console,所以需要line con 0的password 0 cisco123
  • A
    • ansible;SSH;running;It must have an SSH server running.它必须有一个SSH服务器正在运行。
    • ansible;多需看;易错选bus;salt minion眼睛;YAML;minion小黄人;SaltStack is constructed with minion,whereas Ansible is constructed with YAML.SaltStack是用minion构建的,而Ansible是用YAML构建的。
    • ansible;需看;push;push和pull;ansible是推的,chef是拉的;puppet是pull,因为chef属于puppet,所以chef也是pull;
    • authentication;target;target 192 168.100.82的URI;看图,只有100.82没有up
    • authenticate;secret 9;
    • agent-based;mater and slave主人和奴隶;Agentless tools require no messaging systems between master and slaves.无代理工具在主从之间不需要消息传递系统。
    • AMP4E;ran、email;ransomware勒索软件,email phishing钓鱼邮件
    • adjacency;2对1、peer对2;The R2 interface is configured as Level 1 only,and the Peer router interface is configured as Level 2 only.R2接口只配置Level 1, Peer路由器接口只配置Level 2。
    • Air Time efficiency时间效率;QAM、bandwidth、spatial;dcn;开头data、channel、number;rate速率、bandwidth带宽、number数量;CND;道路两旁两棵树:channel信道,data树,number树;
  • 五、无线
  • WLAN
    • WLAN记关键字题:R;string;local WLC;RADIUS server;P2P
    • WLAN;R;adaptive R 自适应率
    • WLAN;local WLC
    • WLAN;多需看;string;text string 文本串;ASCII是字符串;
    • WLAN;需看;2r儿;RADIUS server;TACACS是专属思科,还是选择范围大的RADIUS;
    • WLAN;遇到P2P就选;
  • WLC
    • WLC记关键字题:四个选项只有一个mobility,直接选,多个就选多的那个;On;3;each;sensor;interface specified;register the LAP;when;AC;omnidirectional;-CAPWAP-;less;new;易混需要不虚no和virtual、MAC和98;多选命令是server和client、动作要移除和禁止remove和disable;
    • WLC;mobility;configure mobility groups配置移动组
    • WLC;mobility;wireless controller
    • WLC;mobility;Mobility Express流动性表达
    • WLC;两个mobility比一个好;when;MAC;use the mobility MAC when the mobility peer is configured.配置移动对等体时使用移动MAC。
    • WLC;On;LAC少了P所以用on
    • WLC;;需看;选最大数字;3;Layer 3 intercontroller第三层控制器
    • WLC;多需看;易错选join request;each;单个和每个unicast,each;each WLC;unicast discovery request to each WLC.单播发现请求到每个WLC;题目multiple WLC变成each WLC;
    • WLC;sensor;sensor mode传感器模式
    • WLC;AC10;混;AC10=0*16^0 + 1*16^1+C*16^2+A*16^3=44048
    • WLC;-CAPWAP-;CISCO-CAPWAP-CONTROLLER
    • WLC;less severity messages不那么严重的信息
    • WLC;需看;assign分配;AP分配给主控制器;all new全新;混;all new APs
    • WLC;interface specified错误的接口规定;specified on the WLAN
    • WLC;register the LAP登记LAP;不选Layer2,是不是有3影响的;不选Layer2+Layer3;
    • WLC;not、vritual;混;混,不是选两个mobility,而且not v ip;NVIP;
    • WLC;server、client;服务顾客
    • WLC;骂酒吧;MAC、9800;MAC on the 9800;混;mobility MAC on the 9800 WLC
    • WLC;2I和2D;remove 2、disable DFS(去2弟);remove、disable;UNII-2、Disable DFS;
    • WLC;presence存在;point present;店村;不选hypertocation;
  • wireless
    • wireless记关键字题:eap;load;RSSI;tireless;inter-controller;tireless eap load RSSI inter-controller孜孜不倦的eap负载RSSI内部控制器;SD-Access选inter-xTR,wireless选inter-controller不选intra-controller,VLAN选intra-controller不选inter-controller;(Intra内部,inter模块间);
    • wireless;eap;两个eap
    • wireless;多需看;易错选dynamic transmit;遇到balancing就选;load;aggressive load balancing积极的负载均衡
    • wireless;RSSI;需看;小区cell和rssi
    • wireless;tireless;排除法,不选wireless;receded;The value of how strong a tireless signal is receded,measured in dBm.不倦信号减弱的强度值,以dBm为单位。;tireless
    • wireless;需看;看between后接词,wireless选inter,acess选intra;inter-controller;Inter-controller模块间通信控制器;SD-Access选inter-xTR,wireless选inter-controller不选intra-controller,VLAN选intra-controller不选inter-controller;(Intra内部,inter模块间);
    • wireless;update;两个update;foreign entry国外条目
  • AP
    • AP记关键字题:43网;DHCP43;-capwap-;dynamic;primed;monitor;omnidirectional;continue;(omnidirectional dynamic monitor continue primed 全方位动态监控继续启动)。多选:power、minimum;local、switch;local、FlexConnect;remote、FlexConnect APs;(最小能源、本地交换机、本地Flex连接、远地Flex连接AP)
    • AP;需看;43
    • AP;43;DCHP option
    • AP;43、subnet;43、local;
    • AP;43、router;43、ip helper-address
    • AP;-capwap-;cisco-capwap-controller.domain
    • AP;-capwap-;cisco-capwap-controller.local
    • AP;多需看;易错选hole;dynamic channel动态信道;dynamic;dynamic channel;channel要channel;
    • AP;primed;joining;primed WLC;不选Layer 2;
    • AP;需看;monitor rogue监控流氓;不选local;
    • AP;需看;自主;forward continue转发继续;lose connectivity失去联系;lose;continue;forwarding continues when the AP loses connectivity to the WLC.当AP失去与WLC的连接时,转发继续。;forwarding continues
    • AP;需看;power和rate功率和速率;tra和rat;记错了MHZ,minimum;power、minimum;reduce AP transmit power、increase minimum mandatory data rate.降低AP发射功率,提高最低强制数据速率。
    • AP:local,edge本源;edge、local;fabric access point织物接入点;local mode本地方式,edge switch边缘交换机;
    • AP;local、FlexConnect;FlexConnect、Local;LC两次;
    • AP;需看;两个controller,两个office;remote、FlexConnect APs;FlexConnect APs、remote;branch office and remote office;controller,controller;office,office;
    • AP;多需看;PEAP;不选EAP-FAST;与下面选项可以结合记忆;FAST=MS-CHAPv2;
  • antenna
    • antenna图像识别题:Yagi八木多角一突出(引向器越多方向越尖锐)、patch贴片饼形、dipole偶极双臂、omnidirectional全方向便宜用于学校&办公室;角度:Yagi<patch<omnidirectional;EIRP和RSSI之争:题目有antenna选EIRP,题目有SNR选RSSI;
    • antenna记关键字题:EIRP、db
    • antenna;Yagi;引向器越多,方向越尖锐、增益越高
    • antenna;Yagi;无线连接;引向器越多,方向越尖锐、增益越高
    • antenna;Yagi;引向器越多,方向越尖锐、增益越高
    • antenna;patch antenna接线天线;饼状的定向天线,适用于覆盖单层小型办公室、小型商店及其他接入点不能放在中央的室内地点。贴片天线产生半球覆盖面,从安装点传播,传播范围在30度至180度之间。
    • antenna;dipole;dipole偶极;双臂特点
    • antenna;omnidirectional;omnidirectional antenna全向天线;学校&办公室
    • antenna;omnidirectional;omnidirectional antenna;学校&办公室;全向天线在通信系统中一般应用距离近,覆盖范围大,价格便宜。
    • antenna;omnidirectional;omnidirectional全方向的;学校&办公室
    • antenna;需看;when,when;coverage新闻报道;when;就不要only;provide the required coverage提供所需的保险;
    • SRN;需看;dBm;millwatt是dBm的m;
    • SNR;需看;SNR涉及全拼的noise floor和RSSI;EIRP和RSSI之争:题目有antenna选EIRP,题目有SNR选RSSI(又有S又有R);RSSI、nosie floor
    • EIRP;需看;cable和EIRP;不选signal-to-noise;EIRP,loss;loss;antenna cable loss.天线电缆损耗;
    • EIRP;需看;cable和EIRP;power提示eirp;EIRP和RSSI之争:题目有antenna选EIRP,题目有SNR选RSSI;A选E,S选S;
    • EIRP;cable和EIRP;
    • SNR;db;db是SNR信噪比的单位;dbm是求SNR的参数的单位;
  • dBm计算
    • dBm计算;xdBm-ydBm=x-ydb=信噪比;90-75=15;
    • dBm计算;xdBm-ydBm=x-ydb=信噪比;85-67=18;
    • dBm计算;取最小数字;13;
    • dBm计算;取最小数字;13
    • dBm计算;取最小数字;6;6dBm;dBm=10*log10(xmW/1mW)=10*log10(75),因为lg100=2,所以lg75<2,选项只有6
    • dBm计算;最最小数字;6;
    • SNR;需看;最丑的数字;网络语音是25,数据应用是20;91-67=24;94-69=25;89-68=21;90-66=24;
    • SNR;网络语音是25,数据应用是20;
    • SNR;网络语音是25,数据应用是20;
  • Wi-Fi
    • Wi-Fi记关键字题:Orthogonal;mirrored fish;rogue radar;rogue radar orthogonal mobility mirrored fish流氓雷达正交机动镜像鱼
    • Wi-Fi;Uplink and Downlink(X and Y组合);Orthogonal;UD;Uplink and Downlink Orthogonal Frequency Division Multiple Access.上行和下行正交频分多路访问。
    • Wi-Fi;wall、fish壁鱼;mirrored fish鲸鱼;mirrored wall、fish tank镜子墙,鱼缸
    • Wi-Fi;radar、rogue;两个r;rogue radar流氓雷达; AP雷达,流氓AP
    • Wi-Fi;需看;WPA2、802.1x;两个2;
  • 802.1x
    • 802.1X;遇到via就选,除了802.1X不选via;
    • 802.1x
    • AP;不选802.1X,选SAE;
    • Cisco EAP-FAST;RADIUS;fast不需要证书验证
  • SSID
    • SSID;需看;WPA2是2层的,Web才是3层的;Web Policy:Web服务策略框架;Sb
    • SSID;需看;看不到SSID;hidden;hidden SSID:隐藏SSID;The hidden SSID was not manually configured on the client.客户端没有手动配置隐藏SSID。处理步骤;
    • SSID;需看;802.3;802.3,VXLAN;
  • CLI
    • CLI;DNS;需看;DNS和query;
    • RF;~~遇到slow就选?~~ ;quickly,slowly;快慢;
    • RSSI;两个RF signal;50%一半,10 time10倍;需看;不是1/2和2倍;
  • 六、应用
  • HTTP
    • HTTP;succeeded;The command succeeded in deleting the object.日志含义删除对象成功。
    • HTTP;hearder
    • HTTP;难;第二句permit tcp
    • HTTP;需看;200;取最大数字的反例;
    • HTTP;结尾是G0/0 80;
    • HTTP;要两个crypto pki;难;crypto、enrollment、crypto
  • R
    • REST:REST API的S提示答案HTTPS的S,safe的s,SSL的S,hash的s,token的s,SCrypt的S,API的I提示答案401的1;
    • REST API;API的提示401的1;401;API的提示401的1
    • REST API;API的提示401的1;401;HTTP Status Code 401
    • REST API;需看;API是网络接口,需要https;REST的S,提示HTTPS的S;HTTPS
    • REST API;REST的S提示safe的s;defaults
    • REST API;BBC;SCrypt;RBKDF2,BCrypt,and SCrypt;SB;BBC;
    • RESI API;多需看;易错选TACACACS+;其实这个TACACACS+就是错的;SSL、hash
    • REST API;token;access tokens
    • API;firewall;web application firewalls Web应用防火墙;不选Layer 3;
    • RESTCONF;需看;NF和NG;易错选HTTP and HTTPS;NGINX;It is provided using NGINX acting as a proxy web server.它是使用NGINX作为代理web服务器提供的。
    • RESTCONF;需看;PATCH、HEAD;铁头;patch补丁;不选push,pull;
    • RP;需看;又only又new;start new session;only to start;易错选sparse mode and dense mode;
    • PIM;需看;SPT;source S;
    • RP;PIM-SM;tree;The RP is the multicast that is the root of the PIM-SM shared multicast distribution tree.RP是PIM-SM共享组播分布树的根组播。
    • PIM;SA;specific;MSDP SA;
    • PIM:需看;sparse稀疏和mulit多;sparse、multicast;sm;sparse,pull;PIM的p是spare,M是multicast;
    • RPF;需看;有三个m;mroutes、MBGP;~~两个都是常见词前面加了m~~ ;static静态M;静默;
    • RSPAN;需看;;special VLAN type特殊vlan类型;
  • Cisco SD-WAN
    • Cisco SD-WAN记关键字题:vManage为 single plane of management的组件,vBond为Orchestration plane的组件(虚拟纽带是编排平面的组件),vSmart为control plane运行OMP(vSmart和OMP都有m);distribute、vEdge;control;forward;BFD;TLS;define;Colo;overlay;virtual;allow、simplify;
    • vBond(出现vBond,vSmart,vManage时,除了题目有manage外,其他都选vBond)
    • Cisco SD-WAN;vBond;vBond虚拟纽带为Orchestration plane编排平面;
    • Cisco SD-WAN;vBond;vBond为Orchestration plane;vBond协调器承担了将vSmart和vManage控制器信息列表分发到WAN Edge路由器的附加责任。
    • Cisco SD-WAN;多需看;易错选govern data;少了perform;vBond;WAN Edge,vSmart and vBond;vBond协调器承担了将vSmart和vManage控制器信息列表分发到WAN Edge路由器的附加责任。
    • STUN server;需看;vBond;onb=bon;
    • Cisco SD-WAN;不要vBond,要vManage;vManage为 single plane of management,vBond为Orchestration plane,vSmart为control plane运行OMP;
    • Cisco SD-WAN;OMP;vSmart为control plane运行OMP
    • Cisco SD-WAN;需看;聪明控制要安全;易错选manage;smart要security;security infromation;distribute、vEdge;security information;fabric前面有co就选,不适用SD-WAN(反例)[SD-Access规则不适用于SD-WAN]
    • control
    • Cisco SD-WAN;control;control plane;题目有vSmart和OMP,就选control;vManage为 single plane of management,vBond为Orchestration plane,vSmart为control plane运行OMP;聪明控制;
    • Cisco SD-WAN;多需看;control;题目有vSmart和OMP,就选control;the control plane;vsmart controller=manages the control;vsmart作用:管理控制平面,分发安全信息;
    • Cisco SD-WAN;多需看;OMP中的P是prefix的p,O是control的O;control、network;attribute、policy;题目有vSmart和OMP,就选control;广告配置;
    • Cisco SD-WAN;需看;vSmart跟OMP,其他都是BFD;BFD>OMP;与下面的OMP易混;quality要BFD,不要OMP;
    • Cisco SD-WAN;需看;易错选OMP;monitor要BFD,不要OMP;
    • NSF;多需看;不选BFD;题目forward=NSF的Forward;NSF>BFD;BFD主要涉及link;3层是NSF;
    • BFD;多需看;IS-IS,one second;
    • Cisco SD-WAN;OMP;vSmart为control plane运行OMP
    • Cisco SD-WAN;需看;TLS;安全控制要握手;
    • Cisco SD-WAN;需看;TLS;DTLS;安全控制要握手
    • Cisco SD-WAN;how routing;
    • Cisco SD-WAN;需看;遇到overlay就选,除了其他有how xx;router;SD-WAN overlay;出现两个SDWAN;onb=bon;
    • Cisco SDN-WAN;Colo;Colocation主机托管;
    • Cisco SD-WAN;data forward;遇到overlay就选,除了其他有how xx;不要SDWAN overlay(因为没有-),要forward;specific;specific VPNs
    • Cisco SD-WAN;需看;govern data forwarding;data forward;SD-WAN fabric,+forwarding;govern data
    • Cisco SD-WAN;isolation and segmentation;隔离和分段;traffic isolation;virtualized;segmentation分割;不适用fabric前面无co不选(反例)[SD-Access规则不适用于SD-WAN]
    • Cisco SD-WAN;policy、standalone监控集成;allow,simplify endpoint,~~improve endpoint~~ ;real,~~endpoint~~ ;application-aware、simply endpoint
  • Cisco DNA(否定选项多)
    • Cisco DNA记关键字题:网络设备↔(southbound API)控制器↔(northbound API)SDN应用;northbound:REST、business、automation;southbound:network device;location Postman Editor login network print Policy for cat9.地址邮差编辑登录网络打印策略为了救猫。 API NFS CDP LLDP IP ISE SDK
    • bound(northbound:REST、business;southbound:network device;)
    • Cisco DNA Center;northbound
    • Cisco DNA Center;多需看;易错选northbound,southbound;悲伤north,business;CDC是应用,只与北方和商务有关;northbound、outcome;northbound API、outcome
    • Cisco DNA Northbound APIs;北上网络intent;不要RESTCONF;不要network device,要network infrastructure网路架构;automation;
    • Cisco DNA southbound APIs;多需看;易错选D;要选端的network devices;南下设备decive;network device;simplifies management简化管理;simplifies management of network devices.简化网络设备管理。
    • Cisco DNA southbound APIs;network device;interface between the controller and the network devices.控制器与网络设备之间的接口;网络设备↔(southbound API)控制器↔(northbound API)SDN应用;
    • 否定
    • Cisco DNA Center;string、incorrect;网址要地址,不能是域名;与下题易混
    • Cisco DNA Center;method、incorrect;不是string,incorrect;
    • Cisco DNA Center;not exist;does ont exist
    • Cisco DNA Center;no exist;no existing infrastructure没有现有的基础设施
    • Cisco DNA Center;多需看;workflow工作流;不选provision;不适用fabric前面有co就选;unclaim无人认领,因为设备没有标识;unclaim,assign;not been;workflow;not been assigned;
    • Cisco DNA Center;需看;发现蛇;ICMP、SNMP(两个M);ICMP、UDP 162;
    • Cisco DNA Center;需看;用户无事,中心受影响;connectivity、collect;~~unaffect~~ 、unable;两个una;
    • Cisco DNA Center;需看;系统和应用;update、update;system update、application updates;两个update
    • 其他
    • Cisco DNA Center;API;intent-based;intent-based APIs
    • Cisco DNA Center;Editor;Template Editor模板编辑器
    • Cisco DNA Center;SDK;需看;
    • Cisco DNA Center;登录网络打印;login、network、print;登录网络打印;难;不要for
    • Cisco DNA Center;network device;不要all endpoint,provisioning;provisioning;多个种类就是好;
    • Cisco DNA center;Postman
    • Cisco DNA Center;需看;11NFS、remote;要么share共享,要么放远端
    • Cisco DNA Center;需看;不选Provision;Policy政策;
    • Cisco DNA Center;需看;不选NETCONF;CDP、LLDP、IP;开头首字母ACL;
    • Cisco DNA Center;Identity Services Engine;遇到ISE就选
    • Cisco DNA Center;location;by location依照位置
    • Cisco DNA REST;for cat9为了救猫;incorrect credentials for cat9000-1cat9000-1的凭据不正确
  • hypervisor
    • hypervisor记关键字题:题目有vritualization,就选hypervisor;directly要搭配w;有2选2(Layer2、Type-2),除了only(选hardward);有X选X,不是XVLAN;1无2系(义乌儿媳,义务儿戏)
    • Type 1 hypervisor;hardware+OS;directly、without;type 1有自己的系统,不依赖其他系统,直接运行在物理硬件上,type 2依赖其他系统。
    • Type 1 hypervisor;需看;hardware+OS;directly、own;directly+and+includes ;type 1有自己的系统,不依赖其他系统,直接运行在物理硬件上,type 2依赖其他系统,运行在虚拟机上。
    • Type 2 hypervisor;多需看;不要只看选项,易错选scalability;hardware+OS;OSs;Type-1 hypervisor不需要依赖传统操作系统如Windows,macOS跟linux,例如vmware esxi,有点是轻巧,占用系统资源低,而Type-2 hypervisor需要依赖传统操作系统,例如vmware workstation,Windows10/server 2016/2019自带的hyper-V;;type 1有自己的系统,不依赖其他系统,直接运行在物理硬件上,type 2依赖其他系统,运行在虚拟机上;
    • Type 2 hypervisor; OS,OS;
    • Type 2 hypervisor; VM OS;
    • Type 1 hypervisor;遇到Layer 2就选,除了后接access,;2;virtual network;Layer 2;Layer 2 topologies;2层拓扑,2层交换
    • hypervisor;;需看;2 hypervisor;2by;provid、Layer2;2by;2拜高堂;Layer2 switch、by the hypervisor;type 1有自己的系统,不依赖其他系统,直接运行在物理硬件上,type 2依赖其他系统,运行在虚拟机上。
    • Type 2 hypervisor;2;Type-2 hypervisor需要依赖传统操作系统,例如vmware workstation,Windows10/server 2016/2019自带的hyper-V;type 1有自己的系统,不依赖其他系统,直接运行在物理硬件上,type 2依赖其他系统,运行在虚拟机上;
    • hypervisor;~~2~~ ;hardware;a hypervisor and physical server hardware.管理程序和物理服务器硬件。;既要有软件,也要有硬件
    • Type 1 hypervisor;需看;node;第一句+and;排除法,不选结尾physical server;
    • Type 1 hypervisor;Hyper-V、ESX;Microsoft Hyper-V、VMware ESX;大VX
    • Type 1 hypervisor;Citrix XenServer思杰虚拟化服务器
    • Type 2 hypervisor;already;already installed os;installed as an application on an already installed operating system.作为应用程序安装在已经安装的操作系统上。
    • hypervisor;需看;错选bandwidth,需选processor;MPS;memory记忆力、processor处理器、storage 存储;
    • hypervisor;bata bus;vCPU;bus;bus;
    • Type 2 hypervisor; Problem;entrie system;
    • virtualization;多需看;vSwitch;communication通信靠交换机;易错选hypervisor,不选单独的hypervisor;
    • virtualization;hypervisor
    • virtualization;hypervisor
    • virtual machine;多需看;on hypervisor,不要without hypervisor;
    • virtual manchine;多需看;without to buy;
    • virtualizing;多需看;space,speedy;快速减少;
    • virtual machine;需看;no down=live;live migration实时迁移;
    • VM;多需看;易错选live migrate;Adjust>Live;limit;res,res;不选live migration;long-stand要limit;no down要live migration;
    • virtual machine;多需看;Layer 2;vSwitch;
  • infrastructure;On-premise&Cloud
    • infrastructure;需看;lower,不要less;易错选less;不选code;code不选,cool选;
    • infrastructure;需看;less,不要lower;code不选,cool选;
    • infrastructure;3E;刚好镜像相反3和E
    • infrastructure;多需看;遇到Layer 2就选,除了后接access;route;routed access;接手路由
    • infrastructure;需看;易错选virtualization;efficient scalability有效的可伸缩性;scal就选;
  • firewall(选带有in的)
    • firewall;intrusion;不选Layer 3;不选Layer 4;provides intrusion prevention.提供入侵防御功能。
    • firewall;需看;双in,双ion;instrusion;integrated intrusion prevention、application-level inspeion集成入侵防御,应用层检测
    • firewall;需看;inline
  • NetFlow(reduce,两个reduce,两个can,exporter)
    • NetFlow;需看;reduce、reduce;meomry,number记忆数量;
    • NetFlow;reduce;需看;不选but;memory reduce减少记忆;
    • NetFlow;需看;进出追踪;两个track;两个can;需看;易错选all ingress;
    • NetFlow;需看;exporter;
    • NetFlow;多需看;易错选TrustSec;Threat;没有单选TrustSec;
  • cloud(resource和cost资源和花费)
    • cloud deployment;cost,resource;两个resource;cloud cost云计算成本,cloud resource云资源映射
    • cloud deployment;cost;lower,on-prem deployment
  • SPAN(看图)
    • SPAN;incompietety
    • SPAN;received on VLANs 10,11 and 12
    • ERSPAN;10.10.10.10
    • ERSPAN ;难;destination、ip ~~destination~~ address;4 mon,再附加ip address 10.10.0.1;源目不地;
  • Cisco
    • Stealthwatch;watch,awareness;多需看;易错选malware;选最多s的;awareness;user,device用户、设备;
    • Cisco Cyber Threat;需看;要watch才能analysis;选最多s的;stealth;Cisco Stealth watch system.思科隐形手表系统;watch手表;
    • Cisco ISE;ISE比较自私,self自我;self-signed certificate自我签证的认证
    • Cisco ISE;ISE比较自私,third-party第三方;trust、ISE;install a trusted third-party certificate on the Cisco ISE.请在Cisco ISE上安装受信任的第三方证书。
    • Cisco TrustSec;trust信任each user;security group tag number assigned to each user on a switch.交换机上分配给每个用户的安全组标签号。
    • Cisco TrustSec;需看;trust信任endpoint;rather than;contextual上下文;
    • Cisco Express Forwarding;two table;~~and~~ ;
    • Cisco Express Forwarding;需看;两对比选长的;the source and destination、in the adjacency table;
    • Cisco Express Forwarding;prefix-based
    • Cisco hardware;多需看;易错选only if;core>only;best transmission;core for;
    • Cisco MPLS TE tunnel;Cisco MPLS TE tunnel
    • Cisco IOS;Priority优先事项;
    • Cisco StackWise Virtual environment;多需看;易错选control and forwarding;commom提示答案cm;control and management管理控制
    • Cisco EDR;containment;learn;E想到3,3in;
    • Cisco AMP;Malicious;AM MA;
    • Cisco StackWise Virtual domain;SVL interface
    • Cisco NGFW;cluster集群;需看;不选tap;scala灵活靠cluster双活;
    • Cisco Center;需看;center和site中心和站点;in select被选;
  • T
    • NTP;stratum;stratum层
    • NTP;需看;加密接受;
    • NTP;需看;access encrypt接受加密;encrypt access加密接受;
    • BFD;需看;local3;奔三;没有second,1,3;
    • NSF;多需看;不选BFD;题目forward=NSF的F;
    • OSI;需看;MACsec;二层是mac;
    • Independent Multicast;需看;不选5second;unicast,multicast;
    • DNS;多需看;~~resolve URL解析url~~ ;send a broadcast mesage;
    • DNS;broadcast;resolve;
    • DNS;需看;lookup对应query;up对qu;~~attempt to~~ query a DNS;不选resolve URL;
    • mDNS;需看;苹果tv靠m骂DNS;
    • zero-trust;需看;0信任;不选control plane;management plane就选过一次;
    • TCAM;多需看;MAC居然也在TCAM;根据拖图题,应该是错的;
    • VSS;多需看;single point of management;
    • WLC;多需看;same mobility domain;易错选mobility ,mobility

前言:
一、遇到x就选:
遇到某个关键字就直接选,但是要特别留意反例,如果反例太多,就没有归类的价值了。目前有的规律如下:遇到same就选;
二、有特点:

  1. 鉴于REST出现70次,不选REST的真的有点过分了;


一、编程

Python

理解题:try/except;list

Python;try/except

本文标签: CCIE