All practice questions

Which defining operational characteristic correctly corresponds to each authentication protocol or Extensible Authentication Protocol (EAP) framework variant?

An enterprise auditor notes during a compliance review that network administrative changes executed via SSH on core switches cannot be restricted per individual CLI command using the organization's existing remote access protocol. Additionally, security policy mandates encrypting the entire packet body during AAA communications. Which protocol should be deployed on the network devices to satisfy these authorization and encryption requirements?

A network administrator is deploying an extended IPv4 Access Control List (ACL) on a router interface connecting an internal client subnet ($10.50.100.0/24$) to an external management network ($192.168.200.0/24$). The filtering device operates as a stateless packet filter. Which of the following configuration requirements and operational behaviors apply to this scenario? (Select TWO.)

A network administrator receives an automated threshold notification indicating that ambient heat in a remote wiring closet has risen above $30^\circ\text{C}$ ($86^\circ\text{F}$). Which physical environmental monitoring component is directly responsible for measuring atmospheric conditions and triggering this alert?

An organization's network monitoring tool alerts administrators to an overwhelming volume of unsolicited UDP responses originating from public DNS servers, all targeted at a single internal web server. Investigation reveals that an external attacker sent small DNS requests with a spoofed source IP address corresponding to the target server. Which of the following network attack vectors is being executed?

A network technician has established a theory of probable cause regarding a workstation's loss of network connectivity. According to the CompTIA troubleshooting methodology, which of the following actions should the technician take NEXT?

Match each secure remote access protocol or configuration feature on the left with its corresponding primary technical capability on the right.

A network administrator is deploying a secure Wi-Fi network for a corporate office where each employee must authenticate using their unique Active Directory credentials managed by a central RADIUS server. The organization requires using the WPA3 standard. Which wireless security mode and authentication mechanism combination should the administrator configure on the access points?

An enterprise network security team notices an unexpected influx of inbound UDP traffic targeted at the organization's public web server IP address. Packet captures reveal that the incoming traffic consists of large, unsolicited DNS response payloads originating from various external open resolver servers on UDP port 53. Further investigation indicates that the web server itself never initiated any corresponding DNS queries. Which of the following attack types and mechanisms is actively occurring?

A network security administrator is auditing packet captures of an IKEv2 remote access VPN connection. Place the stages of the IPsec IKEv2 session setup in the correct chronological order from initial connection attempt to payload data transmission.

A principal network security architect is evaluating the control and management plane hardening profile for a cluster of core Layer 3 switches deployed in a zero-trust enterprise architecture. To comprehensively secure management communications against eavesdropping and protect inter-switch trunk connections from unauthorized traffic manipulation and VLAN exploitation, which of the following configuration practices must be implemented? (Select TWO.)

During a routine audit, a system administrator discovers that an internal API service running on a web server had its configuration settings modified without authorization. While the service remained continuously reachable and no sensitive customer records were exposed or viewed by unauthorized parties, the altered configuration caused transaction logs to record invalid data. Which principle of the CIA triad was directly compromised in this scenario, and which security mechanism specifically protects against this type of breach?

A network technician is preparing to deploy a new switch into a production environment. Which TWO of the following security configuration steps represent essential device hardening best practices for securing administrative management access? (Select TWO.)

A network security administrator is establishing data protection policies for automated router configuration backups stored on a remote server. Which TWO of the following technical controls directly safeguard the Integrity pillar of the CIA triad for these backup files?

A network technician is setting up three wireless access points in a small office on the 2.4 GHz band. The technician notices performance issues and interference when using channels 1, 2, and 3. Which channel assignment strategy should the technician use to eliminate channel overlap?

A network security team is designing physical and environmental security controls for a new high-security cryptographic key server enclosure located inside a multi-tenant facility. The facility audit identified two primary vulnerability vectors: potential physical access through shared drop-ceiling spaces into the server enclosure, and risk of electromagnetic eavesdropping (TEMPEST risks) on unshielded cryptographic hardware. Additionally, localized water pipe leakage under the raised floor must be detected immediately without placing electrical components at risk of direct contact with conductive standing water. Which of the following physical and environmental measures should the network security engineer implement to directly mitigate these identified risks? (Select TWO.)

In a high-ceiling logistics warehouse with large metal shelving units, wireless handheld inventory scanners experience severe frame loss (~40%) and dropped connections despite exhibiting a strong Received Signal Strength Indicator (RSSI) reading of $-52\text{ dBm}$. A packet analysis reveals a massive spike in $802.11$ Layer 2 retransmissions and corrupted preamble headers. Spectrum analysis confirms no adjacent or co-channel Wi-Fi networks exist in the area. Which of the following wireless phenomena is the primary root cause of this degraded performance?

A network administrator needs to configure secure in-band remote command-line management for a newly deployed network switch. Which of the following protocols and associated TCP port numbers should be selected to ensure all administrative sessions are encrypted? (Select TWO.)

A network administrator is troubleshooting severe latency and intermittent connectivity issues for users in an open-office environment. A recent site audit reveals three 802.11n wireless access points (APs) mounted on the same ceiling grid, operating on the 2.4 GHz band and configured on channels 1, 3, and 5. Which of the following identifies the primary cause of the wireless performance degradation, and what is the proper solution?

Match each wireless connectivity issue to its primary cause.