All practice questions
2237 questions
A systems engineer is implementing high availability and link redundancy for a critical database host connected to two independent physical switches. The network architecture must support simultaneous active-active frame forwarding across both links for throughput aggregation while preventing Layer 2 loops, without utilizing vendor-proprietary physical stacking cables. Which TWO of the following configurations or technologies must be deployed together to achieve this redundancy design?
Select all that apply
Match each network logging mechanism or Syslog severity level on the left with its corresponding description or operational characteristic on the right.
Click a left item, then click its matching right item
Items
Matches
Match each centralized authentication protocol or access control framework component to its corresponding transport layer behavior, encryption boundary, or operational function.
Click a left item, then click its matching right item
Items
Matches
A network administrator needs to configure a wireless access point for a company office. Policy mandates that every employee must authenticate using their own unique corporate credentials managed by a centralized RADIUS server, rather than sharing a static password. Which wireless security mode should be configured on the access point?
A network technician is setting up a new network segment using the IP block . Following standard configuration guidelines, the default gateway will be assigned the last usable host IP address in the subnet. What is the last usable IPv4 host address in the network?
A client workstation connected to VLAN 45 () issues a Layer 2 broadcast `DHCPDISCOVER` packet () to obtain an IP configuration. The default gateway interface for VLAN 45 on the Layer 3 switch is configured with the IP address and an IP helper address pointing to a centralized DHCP server at . Which set of header and payload modifications will the Layer 3 switch perform on this packet before forwarding it across the routed core to the DHCP server?
A core router receives an IP packet destined for host address . The router's routing table contains the following matching entries:
| Type | Destination Subnet | Administrative Distance / Metric | Next-Hop Interface |
|---|---|---|---|
| Static | |||
| BGP | |||
| OSPF | |||
| RIPv2 |
Based on standard Layer 3 forwarding logic, to which next-hop IP address will the router forward the packet?
A network administrator is designing an IP addressing scheme for a new branch office location. The department requires static IP assignments for 60 user workstations, 2 IP phone gateways, and 2 redundant default gateway router interfaces. The administrator must assign the smallest possible subnet block from `10.150.0.0/16` that will successfully accommodate all required host devices. Which CIDR prefix and subnet mask should the administrator configure?
Match each switchport configuration scenario on the left with its corresponding IEEE 802.1Q frame processing behavior or operational link state on the right.
Click a left item, then click its matching right item
Items
Matches
During network maintenance, an administrator inspects a newly crimped Category 6 UTP cable that passes basic DC continuity testing but fails Gigabit performance certification due to severe Near-End Crosstalk (NEXT). Visual inspection reveals that the wire pairs were untwisted by approximately 5 centimeters (2 inches) prior to inserting them into the RJ-45 modular plug. Which of the following physical layer corrective actions should the administrator perform to resolve this issue?
An enterprise monitors its internal data center network using a passive Network Intrusion Detection System (NIDS) connected to a switch SPAN port. During a security incident, an attacker successfully exploits a vulnerability on a Linux target server by transmitting crafted TCP packets containing overlapping sequence numbers with conflicting data payloads (a TCP stream segmentation evasion attack). Although traffic reached the sensor, the NIDS failed to generate an alert because its stream reassembly engine interpreted the overlapping segments differently than the target server's IP/TCP protocol stack. Which of the following actions best addresses this detection failure while maintaining zero impact on network latency?
A network administrator is updating the telemetry and auditing configuration across core switch infrastructure to adhere to security compliance standards. The compliance policy mandates that all remote device management queries must provide cryptographic authentication and payload privacy, and that system log messages must be securely forwarded to a central server using a reliable, encrypted transport protocol. Which TWO of the following configurations should the administrator implement to satisfy these mandates? (Select TWO)
Select all that apply
A network engineering team is preparing to deploy a vendor-released maintenance patch to address a critical security vulnerability across multiple enterprise edge routers. To ensure network stability and adhere to standard change management procedures, which of the following operational steps should be completed prior to applying the patch to production hardware? (Select TWO.)
Select all that apply
A network security administrator is deploying a client-based SSL/TLS remote access VPN solution with host posture assessment and Multi-Factor Authentication (MFA). In what chronological order do the following operational steps occur during a successful client connection sequence from initial packet transmission to secure internal network access?
Drag items to arrange them in the correct order
A network technician is configuring a secure wireless network for a regional field office. Management mandates enhancing security beyond WPA2-Personal to protect against offline dictionary attacks and wireless management frame spoofing, but the site lacks the infrastructure required for centralized RADIUS authentication. Which TWO of the following features or protocols must be implemented to fulfill these requirements under WPA3-Personal?
Select all that apply
During a high-availability audit of a corporate network, a technician evaluates a VRRP pair where Router 1 (10.1.1.2) and Router 2 (10.1.1.3) share Virtual IP (VIP) 10.1.1.1. When Router 1 is powered off for maintenance, workstations on the local subnet immediately lose connectivity to remote networks despite Router 2 assuming the active master role. Troubleshooting reveals that workstations cannot reach their default gateway during the outage. What is the most likely root cause of this failure?
A network engineer attempts to configure a static route on a enterprise router using the destination IPv6 address 2001:db8:1000:1::0:100::5. Upon executing the command, the router CLI rejects the entry and displays a syntax error. Which of the following best explains why this IPv6 address representation is invalid?
A network administrator is configuring a new subnet assigned a CIDR prefix. What is the maximum number of usable host IP addresses that can be assigned to devices on this subnet?
A network technician is troubleshooting severe packet loss and link flapping on a 60-meter Category 6 UTP cable drop connecting a workstation to a access switch. A basic wiremap tester indicates that all eight conductors maintain correct end-to-end pin continuity with no open or short circuits. However, when testing the link with a Time-Domain Reflectometer (TDR), the device indicates a significant signal reflection and impedance anomaly at exactly 32 meters from the local patch panel. Which of the following physical cable conditions is the TDR identifying that the basic wiremap tester failed to detect?
Match each network attack type on the left with its corresponding technical mechanism or operational signature on the right.
Click a left item, then click its matching right item
Items
Matches