All practice questions

A network technician is tasked with creating documentation for a newly installed equipment cabinet in a telecommunications room. Which of the following specifications belong specifically in a rack diagram? (Select TWO.)

An organization uses Open Shortest Path First (OSPF) as its primary interior gateway routing protocol to maintain connectivity to a remote branch office. A network administrator needs to implement a backup path using a static route over a secondary leased line. The backup path must remain inactive in the routing table under normal operations and automatically take over only if the OSPF path fails. Which configuration strategy satisfies this requirement?

A system administrator is preparing to deploy IPv6 across a corporate local area network and is verifying basic IPv6 addressing standards and migration mechanisms. Which of the following statements regarding IPv6 addressing and deployment are correct? (Select TWO.)

A network analyst is reviewing security baseline configurations across enterprise infrastructure servers. Match each network protocol on the left with its corresponding default transport protocol, port number, and primary operational function on the right.

A network administrator is configuring firewall security rules between a Layer 3 router acting as a DHCP relay agent and a centralized DHCP server located at $10.10.10.250$. Workstations on a remote host VLAN generate broadcast DHCP lease requests that the router receives, but the relay agent fails to deliver the unicast requests to the DHCP server because firewall policies block the traffic. Which transport protocol and destination port combination must be permitted on the firewall for the relay agent to successfully forward client requests to the DHCP server?

An ON-site network technician is investigating a physical link failure between a wall outlet in a conference room and a switch located in the building's telecommunications closet. The technician needs to identify the precise wire pinouts, color coding standards, patch panel terminal punch-downs, and wall jack labeling schemes used for that specific horizontal cable run. Which of the following network documentation artifacts should the technician consult?

A enterprise network engineer is auditing a high-availability server cluster spanning two intermediate distribution frames (IDFs). During a simulated power failure on IDF-1, the secondary dual-homed database server lost network connectivity despite being physically connected to an uninterruptible power supply (UPS) in IDF-2. Upon investigation, the engineer discovers that the server's secondary network interface card (NIC) was patched into an unconfigured access port on a switch powered by a non-redundant PDU circuit, while the primary NIC was documented on VLAN 100 with 802.1Q trunking. To systematically rectify the physical layout, cable path, equipment mounting height, and logical subnet boundaries to prevent recurrence, which combination of documentation artifacts must the engineer update?

A network security administrator is selecting a centralized AAA protocol for managing corporate switches and firewalls. Organization security policies dictate that administrative sessions must use a connection-oriented transport protocol and encrypt the complete packet payload, including the header and body. Which protocol meets all specified requirements?

A network administrator receives a critical zero-day vulnerability advisory affecting the operating system of two enterprise core switches configured as a high-availability active/standby pair. Applying the software patch requires a full reboot of the updated switch. To mitigate operational risk, preserve service uptime, and ensure rollback capability during this emergency maintenance, which of the following procedures represents the correct workflow for deploying the patch?

A network security administrator is tasked with deploying a solution to protect internal web servers from malicious payload attacks. The deployment requirements specify that the device must inspect passing packet payloads in real time and actively drop malicious packets before they reach the destination hosts. Which of the following system types and deployment modes should the administrator implement?

A network administrator is investigating high latency and severe throughput degradation on a critical database server connected to switch port FastEthernet0/12. An inspection of the switch port statistics shows a high count of late collisions, alignment errors, and frame check sequence (FCS) errors on FastEthernet0/12 during heavy traffic periods. The switch interface is set to default auto-negotiation settings, whereas the server's network interface card (NIC) was recently manually forced to 100 Mbps Full Duplex. Which of the following is the most likely root cause of the late collisions recorded on the switch port?

A network technician is troubleshooting a newly installed server connected to VLAN 50 ($192.168.50.0/24$). The server is configured to obtain IP settings dynamically but continually configures an IP address of $169.254.112.45$. The organization's centralized DHCP server is located on VLAN 10 ($192.168.10.5$) and correctly services hosts on VLAN 10. Which of the following root causes and remediation steps accurately address this connectivity issue? (Select TWO.)

A network engineer is troubleshooting an issue where hosts on VLAN 10 ($10.45.8.0/24$) can ping their default gateway interface ($10.45.8.1$), but cannot establish TCP connections to an application cluster on VLAN 50 ($10.45.50.0/24$). Diagnostic commands reveal that the intermediate Core-Router shows its OSPF adjacency with the Distribution Switch stuck in the EXSTART/EXCHANGE state across their interconnect subnet ($10.45.200.0/30$). Additionally, large packet pings with the Don't Fragment (DF) bit set fail without receiving any diagnostic response. Which TWO of the following root causes or misconfigurations are most likely responsible for this behavior?

A network engineer is troubleshooting an issue where client computers can establish a basic TCP handshake with a remote application server across an IPsec VPN tunnel, but bulk data transfers fail or time out. The engineer suspects that packets exceeding the tunnel's Maximum Transmission Unit (MTU) are being dropped because path MTU discovery is failing.

Which of the following command-line utility commands should the engineer run on a Windows workstation to test reachability while setting the Don't Fragment flag to identify the maximum unfragmented payload size?

An enterprise organization deploys two Layer 3 core switches, Core-A and Core-B, to provide default gateway redundancy for VLAN 10 ($192.168.10.0/24$) using VRRPv3. Core-A is configured as the VRRP Master with a priority of 110, while Core-B acts as the Backup with a priority of 100. Preemption is enabled on both routers. To prevent black-holing traffic if Core-A loses its WAN connection, an interface tracking object is configured on Core-A to decrement its VRRP priority by 20 upon WAN uplink failure. Core-A is also manually configured as the Spanning Tree Protocol (STP) Primary Root Bridge for VLAN 10.

During a WAN link failure test on Core-A, tracking successfully decrements Core-A's priority to 90, and Core-B transitions to the VRRP Master state. However, telemetry shows that outbound host traffic from VLAN 10 experiences significant path latency and traverses the inter-switch trunk twice before leaving the network.

Which of the following root causes best explains why traffic is traversing the inter-switch trunk redundantly following the failover?

A network administrator is designing a centralized access control solution for managing network infrastructure devices, such as switches and routers. The security policy requires that the authorization component must be completely decoupled from authentication, allowing custom command-level access privileges per user group. Additionally, the entire protocol payload, including all administrative commands transmitted during interactive sessions, must be encrypted over a reliable connection. Which protocol best satisfies all of these requirements?

A network administrator is tasked with deploying a centralized AAA solution specifically for administrative CLI access to enterprise network switches. The security baseline mandates that all administrative command authorization details and session logs transmitted between the switches and the AAA server must have their entire packet payloads encrypted. Additionally, the authentication service must operate over a connection-oriented transport protocol to guarantee packet delivery. Which protocol and default port configuration should the administrator implement to meet these requirements?

A network administrator is updating core switch configurations to align with a security mandate requiring both cryptographic authentication and full payload encryption for network monitoring traffic. The legacy implementation relies on unencrypted management queries using community strings. Which protocol version and security level combination should the administrator configure to meet this mandate?

A network administrator is configuring centralized event logging on core switches using the standard Syslog protocol. Which port and transport protocol combination does standard Syslog use by default to transmit log messages to a central log server?

A network administrator is implementing TACACS+ for centralized administration of network routers and switches. Which TWO of the following are distinct operational characteristics of the TACACS+ protocol?