Designing for Cisco Internetwork Solutions (640-863 Exam)屬於Cisco CCDA認證考試
6. Which two statements best describe Cisco Wireless LAN Guest Access in a Cisco Unified Wireless
Network? (Choose two.)
A. Dedicated guest VLANs are extended throughout the network to the access points for path isolation.
B. Dedicated guest VLANs are only extended to the wireless controllers in the network to ensure path
isolation.
C. Dedicated guest access in the DMZ extends from the origination to the termination controllers without
dedicated guest VLANs.
D. Guest tunnels can originate and terminate on any wireless controller platform.
E. Guest tunnels have limitations on which wireless controllers can originate the tunnel.
F. Guest tunnels have limitations on which wireless controllers can terminate the tunnel.
Answer: CF
7. RST Corporation is planning to upgrade its current network. The chief technology officer has supplied a
topology diagram and an IP addressing scheme of the current network during an interview.RST has been
growing at about twenty percent per year. It has been difficult to maintain customer support at a
satisfactory level. Therefore, the RST board has met with and directed the chief technology officer to look
into network improvements.Which two items are most relevant in documenting RST’s business
requirements? (Choose two.)
A. projected growth estimates
B. network performance requirements
C. existing network topologies
D. improved customer support requirements
E. the IP addresses assigned by the ISP
Answer: AD
8. A customer has the following Enterprise Campus design requirements:
At least 10 Gbps of bandwidth
Network runs of up to 40km
No concern for transmission medium cost
Which transmission medium should you recommend to this customer?
A. shielded twisted pair
B. unshielded twisted pair
C. multimode fiber
D. single-mode fiber
E. wireless
Answer: D
9. Given a VoIP network with these attributes:
Codec: G.728
Bit rate: 16 Kbps
WAN Bandwidth: 256 Kbps
Packet Header: 6 bytes
Payload: 40 bytes
CRTP: YesHow many calls can be made?
A. 7 calls
B. 8 calls
C. 13 calls
D. 14 calls
Answer: C
10. A Cisco Self-Defending Network has been installed, but DoS attacks are still being directed at
e-commerce hosts. The connection rate at the Internet firewall was limited, but the problem persists. What
more can be done?
A. Move the servers to the DMZ.
B. Install all relevant operating system patches.
C. Block the servers’ TCP traffic at the Internet firewall.
D. Block the servers’ UDP traffic at the Internet firewall.
Answer: B

640-863 Exam 全稱Designing for Cisco Internetwork Solutions ，屬於Cisco CCDA認證考試

1. A Cisco security mechanism has the following attributes:
It is a sensor appliance
It searches for potential attacks by capturing and analyzing traffic
It is a “purpose-built device”
It is installed passively
It introduces no delay or overhead Which Cisco security mechanism is this?
A. IKE
B. PIX
C. HIPS
D. NIDS
E. HMAC
Answer: D
2. You design a network with the following network addresses:
192.168.168.0
192.168.169.0
192.168.170.0
192.168.171.0
192.168.172.0
192.168.173.0
192.168.173.0
192.168.174.0
192.168.175.0
Which route address is the best summary of these network addresses?
A. 192.128.0.0/24
B. 192.128.171.128/3
C. 192.128.168.0/21
D. 192.128.175.0/3
E. 192.128.0.0/16
Answer: C
3. Which two statements about IPv6 addresses are true? (Choose two.)
A. Leading zeros are required.
B. Two colons (::) are used to represent successive hexadecimal fields of zeros.
C. Two colons (::) are used to separate fields.
D. A single interface will have multiple IPv6 addresses of different types.
Answer: BD
4. Which Cisco security solution can quarantine and prevent non-compliant end stations from accessing
the network until they achieve security policy compliance?
A. Cisco Secure Connectivity
B. Adaptive Security Appliance
C. Access Control Server
D. Network Admission Control
E. Network Intrusion Prevention System
F. Cisco Security Monitoring, Analysis, and Response System
Answer: D
5. A manufacturing company has decided to add a website to enhance sales. The web servers in the
E-Commerce module must be accessible without compromising network security. Which two design
recommendations can be made to meet these requirements? (Choose two.)
A. Use private and public key encryption.
B. Move the E-Commerce servers to the WAN module.
C. Use intrusion detection on the E-Commerce server farm.
D. Limit the number of incoming connections to the E-Commerce module.
E. Place E-Commerce servers and application servers on isolated LANs (DMZs).
Answer: CE