1. In the DDos attack prevention, if through the service learning function, find that in the normal traffic there is no some service or the service flow is very small, then you can in the Anti-DDos device, respectively, use blocking or current limiting method to prevent attacks.

2. A business network is as follows, the server A can not access the server B, the administrator troubleshoots, finds that the server A can access the firewall A, but can not access the firewall B.

Which troubleshooting method does the administrator use?

3. As shown in the figure, the Eth-Trunk function is required to bind the interface. On the basis of this, if you need to implement the function that each interface achieves the load balancing packet by packet, then which of the following configuration command need to be added?

4. Dual hot standby network is shown in the following figure. VRRP group 1 and 2 join the VGMP management group, USG_A is master device and USG_B as is backup devices.

When USG_A is in the failure state such as power off, then the USG_B state switches from Slave to Master.

When the USG_A failure recovers, the status is re-switched to Master and the USG_B state remains the master.

What is the cause of the phenomenon?

5. Site to Site IPsec VPN negotiation failed, according to which of the following order should it check?

1. Network connectivity issues
2. View the IKE phase 1 security association establishment situation and related configuration
3. View the IKE phase 2 security association establishment situation and related configuration
4. Check whether the security ACLs on both ends are mirrored

6. Compare URPF strict mode and loose pattern; what is the following statement is not correct?

7. A company has just done a network cut, the old network equipment is off the line, the new network equipment is on the line. After business testing and found that most of the original business traffic can not work properly.

What is the quickest way to recover business that should the administrator do?

8. L2TP is a tunneling protocol that is set up to transparently transmits PPP packets between the user and the enterprise server. Which of the following features are included? (3 answers)

9. On the VRRP message, which of the following statements are correct? (Select 2 answers)

10. One network administrator against the large traffic data, when USG appear the situation out of memory or the CPU processing capability reaches the upper limit. In order to ensure that the forwarding packets do not carry the threat, the USG discards the traffic that exceeds the throughput of the device.

Which of the following commands can implement that function?