Network Operations

An enterprise network engineer is analyzing complex network performance anomalies across different application types and operational environments. Match each observed performance symptom or monitoring vulnerability to its corresponding performance metric, protocol mechanism, or diagnostic technique.

An enterprise infrastructure uses two Layer 3 switches, Router-Alpha and Router-Beta, configured with Hot Standby Router Protocol (HSRP) to provide default gateway redundancy for hosts on VLAN 50 ($172.16.50.0/24$). Router-Alpha is intended to be the primary gateway and is configured with an HSRP priority of $120$, preemption enabled, and WAN interface tracking with a priority decrement of $30$. Router-Beta is configured with an HSRP priority of $100$. During an unexpected WAN uplink disruption on Router-Alpha, its tracked interface goes down, successfully reducing its advertised priority to $90$. However, network monitoring reveals that host traffic on VLAN 50 continues routing through Router-Alpha's degraded path instead of transitioning to Router-Beta. Which configuration deficiency on Router-Beta prevents it from assuming the Active gateway role?

Prior to installing a minor software patch on an enterprise edge router, a network engineer creates a backup of the current operating configuration and tests the update in an isolated environment. What is the primary purpose of performing these pre-deployment actions?

An enterprise network design requires deploying redundant layer 2 and layer 3 mechanisms across perimeter firewalls, default gateways, and switch uplinks. Match each high availability protocol on the left with its corresponding operational specification or MAC/header characteristic on the right.

A network administrator is configuring Virtual Router Redundancy Protocol (VRRP) across two routers to provide first-hop redundancy for a local subnet. To ensure that end-user workstations seamlessly switch traffic to the standby router in the event of a primary router failure, which IP address should be configured as the default gateway on the workstations?

A network security engineer is auditing the logging infrastructure of an enterprise network. The engineer discovers that network infrastructure devices transmit sensitive audit logs to a central SIEM server over an unencrypted channel, and critical log messages are lost during peak traffic congestion. Which protocol configuration change will ensure encrypted transport and guaranteed delivery of the audit logs?

A network engineer is troubleshooting log loss during periods of high link congestion. System logs sent from edge routers to a centralized collector are currently dropped during traffic spikes. The compliance team mandates that log transmission across the WAN link must guarantee delivery, avoid loss under network congestion, and encrypt log payloads in transit. Which configuration change best satisfies all technical and compliance requirements?

An enterprise organization requires a disaster recovery strategy for its mission-critical database cluster across dual data centers separated by 120 km. The business demands a Recovery Point Objective (RPO) of absolute zero data loss and a Recovery Time Objective (RTO) under 5 minutes. Which of the following technical controls and redundancy configurations MUST be combined to satisfy these stringent business continuity metrics? (Select TWO)

During a security compliance audit of an enterprise network, an administrator is tasked with remediating an auditing finding regarding switch telemetry monitoring. The audit report indicates that device monitoring traps sent across the management VLAN are vulnerable to packet sniffing because authentication credentials and telemetry payloads are transmitted without encryption. Which SNMP configuration mode should the administrator deploy to satisfy the audit requirement for both cryptographic user authentication and payload encryption?

A network administrator is investigating intermittent VoIP audio degradation across an enterprise WAN link connecting two branch offices. Telephony logs indicate elevated packet loss and jitter during peak operational hours. Corporate security policy dictates that all infrastructure monitoring must utilize encrypted payload data and cryptographic authentication to prevent packet interception on intermediate links. Additionally, the administrator must gather interface bandwidth utilization baselines alongside granular protocol flow analysis to isolate the source of network congestion. Which of the following protocol and security level combinations correctly fulfills both operational and security requirements?

A network administrator is preparing to apply a major firmware update to enterprise distribution switches following a vendor security advisory. Which TWO of the following actions should the administrator perform during the pre-deployment and staging phase to verify software integrity and minimize operational risk?

An enterprise network architect is designing a comprehensive monitoring strategy for a multi-site WAN deployment. The solution must provide secure, continuous device health monitoring, granular flow visibility for bandwidth utilization analysis, and ensure compliance with strict zero-trust cryptographic requirements. Which of the following technical configurations and protocols should the architect deploy to satisfy these operational requirements? (Select TWO).

An IT department deploys Virtual Router Redundancy Protocol (VRRP) across two edge routers, Router-1 (Primary, physical IP $10.0.10.2/24$) and Router-2 (Backup, physical IP $10.0.10.3/24$), to provide default gateway redundancy for a LAN. The virtual router is assigned the Virtual IP (VIP) address $10.0.10.1/24$. During a planned failover test, Router-1 is powered down. Although Router-2 correctly assumes the active VRRP Master role, all client workstations on the LAN immediately lose access to external networks. Which of the following host misconfigurations is the most likely cause of this service disruption?

A network security administrator is configuring a centralized logging and monitoring architecture across enterprise core switches. The corporate compliance policy mandates that event logs are delivered reliably with connection-oriented transport and encrypted in transit, and that SNMP polling must provide both cryptographic user authentication and payload encryption. Which of the following protocol and port configurations must the administrator implement to meet these requirements? (Select TWO.)

A network administrator is designing a high-availability infrastructure for a mission-critical application server cluster. The design must provide Layer 2 link bandwidth aggregation with failure protection between switches, as well as Layer 3 active-standby gateway redundancy for host workstations on the local subnet. Which TWO of the following protocols or configurations should be deployed to satisfy these requirements?

A network administrator is preparing to modify the interface configurations on a primary distribution switch during a scheduled maintenance window. Which of the following steps should be completed BEFORE applying any configuration updates to ensure the switch can be rapidly restored if the change causes an unexpected outage?

A network administrator configures a First Hop Redundancy Protocol (FHRP) across two routers to ensure continuous network availability for clients on a local subnet. To enable seamless automated failover if the primary router fails, which address must be specified as the default gateway on the client workstations?

An enterprise network operations team must urgently remediate a newly published zero-day vulnerability affecting the routing protocol daemon across core Layer 3 switches. Which of the following procedures should the engineering team execute during the emergency maintenance window to preserve high availability and maintain change management compliance? (Select TWO.)

An enterprise network engineering team is preparing a formal Request for Change (RFC) to modify core switch configurations and re-architect VLAN trunking across multiple datacenters. To adhere strictly to enterprise configuration and change management standards, which of the following components MUST be included within the submitted RFC prior to presenting it to the Change Advisory Board (CAB) for evaluation? (Select TWO.)

A network administrator is scheduling a critical vendor-issued software update for an organization's central network monitoring server. Before deploying the software update into the live environment, the administrator needs to ensure that the patch will not disrupt existing monitoring services or introduce system instability. Which of the following represents the most appropriate initial step in the patch management lifecycle to safely mitigate this risk?