All practice questions

Match each IEEE 802.1Q trunking component or configuration parameter on the left with its correct operational behavior or definition on the right.

An enterprise network topology consists of four switches operating standard IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) using default path costs ($1\text{ Gbps} = 4$, $100\text{ Mbps} = 19$).

- Switch-R is configured with a bridge priority of 4096 (MAC address `00:11:22:33:44:55`).
- Switch-X, Switch-Y, and Switch-Z all maintain the default bridge priority of 32768.
- Switch-X connects to Switch-R via a $1\text{ Gbps}$ trunk link.
- Switch-Y connects to Switch-R via a $100\text{ Mbps}$ trunk link.
- Switch-Y also connects to Switch-X via a $1\text{ Gbps}$ trunk link.

Assuming all links are operational and STP convergence is complete, which statement accurately describes the Root Port selection and port status on Switch-Y?

A workstation on a remote branch subnet initializes network communications and requires an IP address assignment from a centralized DHCP server located across a routed WAN link. Place the chronological steps of the DHCP Relay forwarding process in the correct sequence from initial client packet creation to the reception of the initial offer.

A network administrator needs to deploy several network-attached printers across multiple subnets. The printers must consistently maintain the same IP addresses for administrative routing and access control purposes, but the administrator wants to manage all IP configuration settings from a central server rather than manually configuring static entries on each physical device. Which IP addressing service feature should the administrator configure to satisfy these requirements?

An enterprise edge router receives advertisements for the destination prefix $10.20.0.0/16$ from three distinct routing sources: an eBGP session (Administrative Distance $20$), an OSPF area (Administrative Distance $110$), and a floating static route configured with an Administrative Distance of $130$. Currently, the router installs the eBGP route into its routing table. The network operations team requires all traffic bound for $10.20.0.0/16$ to prefer the internal OSPF path under normal operating conditions, while maintaining the eBGP path as an automatic secondary backup if OSPF fails. Which configuration change directly achieves this objective without modifying network subnets or prefixes?

A network administrator is connecting a wireless access point (AP) to switch port GigabitEthernet 1/0/5. The AP transmits management traffic untagged on VLAN 100, while wireless user traffic on the 'Guest' SSID is transmitted with an 802.1Q tag for VLAN 200. The switch port is currently operating with default 802.1Q trunk settings, where VLAN 1 is the default native VLAN. Which interface configuration command must be executed on Switch GigabitEthernet 1/0/5 so that untagged management frames are correctly processed on VLAN 100?

A network administrator is inspecting an IEEE 802.1Q trunk link between two switches, `SW-CAMPUS-01` and `SW-CAMPUS-02`. The configuration of interface GigabitEthernet0/1 on `SW-CAMPUS-01` is:

text
interface GigabitEthernet0/1
switchport mode trunk
switchport trunk native vlan 50
switchport trunk allowed vlan 10,20,30,50

The configuration of interface GigabitEthernet0/1 on `SW-CAMPUS-02` is:

text
interface GigabitEthernet0/1
switchport mode trunk
switchport trunk native vlan 1
switchport trunk allowed vlan 10,20,30,50

A workstation connected to an access port on `SW-CAMPUS-01` in VLAN 50 transmits an unencapsulated Ethernet broadcast frame destined across the trunk link. Which of the following best describes how `SW-CAMPUS-02` will handle this frame upon arrival at its GigabitEthernet0/1 interface?

While inspecting a packet capture file on a network monitoring station, a system administrator isolates an outbound HTTPS request generated by a client host. Which of the following correctly describes the encapsulation sequence and resulting Protocol Data Units (PDUs) as the application data travels down the protocol stack from Layer 4 to Layer 2?

A network engineer is designing a core infrastructure interconnecting five datacenter switches. The design must provide maximum fault tolerance and link redundancy without relying on an intermediate core hub. Which TWO of the following statements correctly describe the physical requirements and operational characteristics of implementing a full-mesh topology in this scenario?

A network administrator is establishing stateless inbound Access Control List (ACL) rules on an internal gateway router to allow remote network infrastructure monitoring and log aggregation. The management policy mandates that managed switches send encrypted log events via Secure Syslog (Syslog-TLS) to a central server while concurrently synchronizing system clocks with a dedicated internal time server. Which combination of transport layer protocols and destination port numbers must be permitted on the router to support both Secure Syslog and Network Time Protocol (NTP) traffic?

A security analyst is investigating a potential incident involving a server assigned the IP address $10.80.35.138/26$. What is the broadcast IPv4 address of the subnet to which this server belongs?

A Layer 2 switch receives an Ethernet frame on Port 2, which is an access port assigned to VLAN 15. The source MAC address $0011.AA22.BB33$ is not currently listed in the switch's CAM table. The destination MAC address $0033.CC44.DD55$ is already present in the CAM table and associated with Port 7, an access port also assigned to VLAN 15. Port 10 is an access port assigned to VLAN 30, and Port 20 is configured as an 802.1Q trunk port carrying VLAN 15 and VLAN 30.

Which TWO of the following actions will the switch perform upon processing this frame? (Select TWO.)

A network administrator is configuring a newly created VLAN dedicated to VoIP phones. The router interface handling this subnet is configured with the network block $172.16.45.128/27$. What is the maximum number of usable host IP addresses that can be assigned to end devices within this subnet?

A network administrator needs to apply a critical vendor security update to the organization's core infrastructure routers. In what order should the administrator execute the patch management lifecycle steps from first to last?

A network security administrator is deploying a site-to-site IPsec VPN tunnel between a branch office and central headquarters across an ISP connection where the branch router sits behind a network device performing Port Address Translation (PAT). Initial testing using Authentication Header (AH) in transport mode fails to pass traffic, whereas switching the configuration to Encapsulating Security Payload (ESP) in tunnel mode with NAT-Traversal (NAT-T) enabled allows full connectivity. Which of the following technical mechanisms explains why AH fails across a PAT-enabled device while ESP with NAT-T functions successfully?

A network security team is deploying an extended stateless IPv4 Access Control List (ACL) on an egress router interface filtering traffic between an internal database server ($10.50.10.25/24$) and external application servers ($172.16.100.0/24$). The application servers initiate database connections to TCP port $5432$ (PostgreSQL), and the database server is configured to send automated diagnostic alerts to an external syslog server at $172.16.100.50$ listening on UDP port $514$. Which TWO configuration entries or operational requirements must be implemented on the stateless egress ACL to guarantee bidirectional application communication and outbound alerting? (Select TWO.)

Remote workers attempting to connect to an enterprise network using an IPsec IKEv2 remote access client report that authentication succeeds, but no internal network resources are accessible and tunnel data transmission fails immediately after connection setup. The edge network security monitoring tool shows that Phase 1 (IKE) negotiations complete successfully over UDP port 500, but Encapsulating Security Payload (ESP) packets sent during Phase 2 are silently dropped by the remote users' Small Office/Home Office (SOHO) routers performing Port Address Translation (PAT). Which of the following configuration changes will resolve this connectivity issue while maintaining secure, encrypted communications?

An IT administrator investigating unexpected latency on a voice-over-IP (VoIP) network segment notices that host traffic destined for the default gateway IP address ($10.20.4.1$) is being redirected through an unauthorized host with MAC address `02:AB:C1:23:45:67`. Inspection of network captures reveals continuous unsolicited Gratuitous Address Resolution Protocol (GARP) frames originating from IP address $10.20.4.88$, associating its own physical address with $10.20.4.1$. Which of the following network attack types is actively occurring on this segment?

During a security incident investigation on an enterprise local area network, network monitoring tools record a high volume of traffic originating from a host connected to switch port Fa0/12. Analysis reveals that the host flooded the switch with thousands of Ethernet frames containing randomized source MAC addresses, completely filling the switch Content Addressable Memory (CAM) table. Immediately following this flood, analysts observe that confidential unicast traffic intended for a specific internal database server is being replicated and sent out all active ports on the VLAN. Which of the following statements accurately describe the underlying mechanics of this network attack and the appropriate Layer 2 countermeasures? (Select TWO)

An administrator is auditing an enterprise network's device monitoring architecture to satisfy compliance guidelines. The policy mandates that all SNMP telemetry and event notifications transmitted between network switches and the central management station must enforce both sender identity verification and full packet payload encryption. Which of the following SNMPv3 security levels must be configured on the devices to meet these audit requirements?