All practice questions

A network administrator is configuring a centralized authentication server to support remote access VPN clients using the RADIUS protocol. Security policies require creating specific firewall rules to permit authentication traffic from the VPN gateway to the backend RADIUS server. Which transport protocol and destination port combination must be allowed through the firewall for standard RADIUS authentication?

A network security administrator is updating telemetry and remote management policies for core switches transmitting data across an untrusted WAN link. To comply with security auditing standards requiring both encrypted log transport and secure network polling, which TWO of the following configuration options should be implemented? (Select TWO)

A network technician needs to configure out-of-band (OOB) management access for a core router to ensure administrative connectivity remains available even during a total failure of the primary local network interfaces. Which connection method should be configured?

Match each network security threat to the primary mechanism or vector used to execute the attack.

A network engineer is configuring a single Service Set Identifier (SSID) on an enterprise wireless access point to support both modern corporate laptops and legacy handheld scanners during a phased migration to WPA3. To achieve backward compatibility without establishing separate wireless networks, the engineer selects WPA3-Personal Transition Mode. Which TWO of the following technical requirements and configurations must be implemented on the access point for this deployment? (Select TWO.)

A network administrator provisions a new subinterface on a branch router to serve VLAN 50 (`192.168.50.0/24`). Workstations connected to VLAN 50 fail to obtain network configuration parameters and continuously assign themselves addresses in the `169.254.x.x` range. Meanwhile, devices on VLAN 10 connected to the same switch successfully acquire leases from the centralized DHCP server at `10.10.10.50`. The technician inspects the router subinterface configuration:

text
interface GigabitEthernet0/0/1.50
encapsulation dot1Q 50
ip address 192.168.50.1 255.255.255.0

Which of the following configuration changes on the router interface will resolve the connectivity issue for VLAN 50 hosts?

A remote employee launches a client-based SSL/TLS VPN software application to connect to the corporate network over an untrusted internet connection. In what chronological order do the steps occur to establish the VPN session and enable secure data transfer?

Match each remote access protocol or security component with its primary technical characteristic.

A security administrator needs to detect malicious process injections and file modifications on an internal application server that processes encrypted HTTPS traffic. The solution must inspect activity post-decryption without introducing network transmission latency or requiring payload decryption keys on network taps. Which detection system and deployment strategy best meets these requirements?

A network facility manager is reviewing physical security and environmental protection measures for a remote server room. Match each physical security control or environmental measure on the left with its primary operational purpose on the right.

A network administrator is configuring secure access for a newly installed network switch. The administrator needs to ensure that all web-based administrative traffic between the management workstation and the switch is encrypted to protect sensitive credentials from eavesdropping. Which protocol should be enabled on the switch to meet this requirement?

A network engineer is investigating complaints of erratic video feed freezing during executive webcasts between two branch offices. Telemetry logs indicate a stable average round-trip time (RTT) of $18\text{ ms}$, but the variation in inter-packet arrival delay fluctuates sharply between $4\text{ ms}$ and $165\text{ ms}$. Additionally, company policy dictates that device telemetry collection via remote polling must encrypt all payload data over the wire using authenticated credentials. Which performance metric is degrading video quality, and which monitoring configuration satisfies the security policy?

A network engineering team is designing a resilient out-of-band (OOB) infrastructure for a remote edge data center. The goal is to ensure that administrators can perform direct console configuration and hard power cycles on core infrastructure even during a total failure of the site's primary WAN router and internal LAN routing. Which TWO of the following solutions must be deployed to fulfill these specific out-of-band recovery requirements?

Match each remote access and out-of-band management technology on the left with its primary administrative function on the right.

A network operations team needs to verify that log files sent from edge firewalls to a central monitoring server are not altered or tampered with during transmission. Which core security principle is the team primarily enforcing, and which technical mechanism achieves this goal?

During a routine automated security audit, a network engineer discovers that a custom Access Control List (ACL) rule was manually added directly to a perimeter firewall during an unrecorded late-night troubleshooting session. The rule remains active in production and bypasses the organization's documented security baseline. According to standard change management best practices, which of the following actions should the engineer take first?

A network security architect is defining wireless encryption and key negotiation baselines across multiple enterprise operating environments. Match each wireless security mode on the left with its corresponding mandatory cipher suite, authentication framework, and integrity mechanism on the right.

An infrastructure engineer is designing physical access controls for a high-security data center hall. The facility security policy mandates a mechanism that strictly prevents tailgating (piggybacking) during employee entry. Additionally, in the event of a total facility power outage, exterior access doors must default to a locked state to maintain perimeter security against intruders, while personnel remaining inside the room must be able to exit safely without active electrical power. Which combination of physical access controls best satisfies all specified operational and safety requirements?

A network administrator needs to implement a physical security control for a data center entrance that prevents unauthorized individuals from following authorized personnel through a doorway (tailgating) by using a specialized room with two interlocking doors. Which physical security control should the administrator deploy?

A network technician is troubleshooting a client workstation that failed to obtain an IP address from the DHCP server and auto-configured an APIPA address. Arrange the standard troubleshooting methodology steps in the correct sequential order from first step to last step.