All practice questions

A network administrator is implementing a centralized monitoring solution for enterprise core switches. Organizational compliance policies dictate that network management queries and event trap messages transmitted across the network must guarantee cryptographic integrity, user authentication, and payload confidentiality to prevent eavesdropping and replay attacks. Which protocol implementation best satisfies all specified auditing and monitoring security requirements?

A network administrator receives a high-severity security bulletin requiring a critical firmware update on the organization's core switches. To adhere to standard patch management procedures and minimize operational risk, which of the following actions should the administrator perform FIRST before deploying the patch to the production environment?

A network administrator needs to implement a network security control in front of a critical database cluster. The security policy mandates that known exploit payloads must be actively blocked in real time before reaching internal targets, and any hardware or software failure of the security device must not disrupt legitimate network traffic flow. Which deployment topology and detection mechanism best satisfies all of these requirements?

Match each Intrusion Detection and Prevention System (IDS/IPS) detection logic or deployment mode on the left with its corresponding operational description on the right.

A network administrator needs to deploy a security control that inspects live network traffic and actively drops malicious packets in real time before they reach internal network resources. Which of the following devices or deployments best fulfills this requirement?

Match each DNS resource record type to its primary technical function within an enterprise network infrastructure.

A network engineer is configuring a centralized DHCP server located at $10.200.1.10/24$ to issue IPv4 address leases to workstations across remote subnets. The remote site utilizes a Layer 3 router as the default gateway for multiple local networks, including VLAN 15 ($10.15.0.0/24$). Workstations connected to VLAN 15 are failing to receive IP addresses and are instead generating APIPA addresses. Packet captures indicate that client DHCP DISCOVER broadcast messages from VLAN 15 are not reaching the centralized DHCP server across the WAN link. Which configuration modification on the remote router will resolve this connectivity issue?

A network technician is configuring Virtual Router Redundancy Protocol (VRRP) across two enterprise routers to provide default gateway fault tolerance for a local subnet. Which IP address must be configured as the default gateway on host computers to ensure uninterrupted network access during a gateway failure?

An organization deploys two edge routers in a First Hop Redundancy Protocol (FHRP) group using HSRP to provide default gateway redundancy for an internal server VLAN. During a scheduled firmware upgrade, the primary active router is rebooted. Network logs confirm that the secondary router successfully transitions from standby to active state and assumes ownership of the virtual MAC address. However, all servers on the LAN immediately lose connection to external networks and fail to route outbound traffic until the primary router finishes rebooting. Which of the following is the most likely cause of this failure?

An enterprise network deployment utilizes two Layer 3 switches, Switch-A and Switch-B, configured with VRRP to provide default gateway redundancy for VLAN 20 ($10.20.0.0/24$). Switch-A is configured with physical interface IP $10.20.0.2/24$ and a VRRP priority of 110. Switch-B is configured with physical interface IP $10.20.0.3/24$ and a VRRP priority of 100. The configured VRRP Virtual IP (VIP) is $10.20.0.1/24$. During an operational audit, it is discovered that half of the host workstations on VLAN 20 were manually configured with a static default gateway of $10.20.0.2$, while the other half use the VIP $10.20.0.1$. If Switch-A suddenly suffers a complete power loss, which of the following best describes the resulting traffic routing behavior for hosts on VLAN 20?

A senior network operations engineer must deploy a critical vendor-issued firmware security patch to an active/passive high-availability pair of core enterprise switches. The patch addresses an unauthenticated remote code execution vulnerability but requires a complete system reboot of each appliance. To maintain zero unmanaged downtime, protect configuration state, and adhere to strict enterprise patch management procedures, which of the following operational workflows should the engineer execute?

Which default transport protocol and port pair does standard, unencrypted Syslog use to forward log messages to a centralized logging server?

A network administrator configures Hot Standby Router Protocol (HSRP) across two core routers to provide default gateway redundancy for a critical server VLAN. During a scheduled maintenance test, the active router is powered down. Logs confirm that the standby router successfully transitions to the active state. However, servers on the VLAN immediately lose external network reachability. Upon reviewing network settings, the administrator discovers a configuration error on the servers. Which of the following is the most likely cause of this connectivity loss?

Match each network high-availability technology or protocol to its primary operational role and implementation context.

In an enterprise high-availability network architecture, various redundancy protocols and features operate across different operational layers to maintain network uptime and traffic continuity. Match each network redundancy technology to its primary operational characteristic.

A network technician is configuring centralized authentication for a remote access VPN solution. The organization's security guidelines mandate using an open-standard protocol that encrypts only the password attribute inside access-request packets, leaving the remaining header information unencrypted. Which authentication protocol meets these specific requirements?

During an automated maintenance window, a network operations team deploys a critical microcode update across a fleet of edge routers. Post-installation telemetry reveals that several legacy branch routers failed the integrity check, halted the boot process, and defaulted to an unconfigured secondary image partition. Which of the following operational procedures should the lead engineer execute first to resolve the condition while strictly adhering to patch management and recovery protocols?

A network security administrator is reviewing different deployment architectures and detection logic for intrusion monitoring. Match each intrusion detection or prevention mechanism on the left with its corresponding operational description on the right.

A senior network infrastructure auditor is evaluating enterprise operational readiness across a hybrid data center environment. Match each specific network documentation artifact with the primary operational scenario where its specialized data is required to resolve the issue.

An enterprise network engineer is auditing centralized management protocols and event notification mechanisms across core infrastructure switches. Match each network logging or management protocol configuration on the left with its correct operational or security characteristic on the right.