Tüm alıştırma soruları

Which of the following Quality of Service (QoS) mechanisms and header fields correctly match their corresponding binary/decimal representations or operational behaviors? Match each QoS term on the left with its correct description on the right.

A network administrator is conducting a logging audit on a Cisco IOS router to ensure accurate event classification. Arrange the following syslog event descriptions in order from the LOWEST numerical severity level code to the HIGHEST numerical severity level code.

A network administrator at an enterprise branch office is troubleshooting an unsynchronized NTP client on a Cisco router named Branch-R1. The router has IP reachability to an authoritative internal time server at IP address $10.50.1.10$, but security firewalls along the transit path strictly enforce access rules that permit management services only if they originate from Branch-R1's dedicated Loopback0 interface ($10.255.1.1$). Currently, NTP packets generated by the router are dropped by the firewall because they use the egress physical interface IP address as their source. Which global configuration command must be configured on Branch-R1 to force all outgoing NTP traffic to originate from the specified loopback interface?

A network administrator enables port security on a switch access port using the command switchport port-security mac-address sticky. Devices connect to the port, and their MAC addresses are dynamically added to the switch configuration. However, after a planned reload of the switch, the port loses all learned MAC addresses and fails to forward traffic for previously connected hosts. What is the primary cause of this issue?

Match each Simple Network Management Protocol (SNMP) operational element or security configuration on the left with its corresponding defining characteristic or transport mechanism on the right.

A network administrator configures the command `ip ospf network point-to-point` on a GigabitEthernet interface of a Cisco router connected to a switch segment with another router. Previously, the interface operated using default OSPFv2 interface parameters for Ethernet interfaces. Which two operational changes occur on this interface as a result of this configuration change? (Select two.)

During an emergency security assessment following a network breach attempt, a security analyst discovers that an edge router running legacy software contains an unpatched flaw allowing unauthorized remote privilege escalation. Although no functional malicious script has yet been executed against the system, the security team deploys an Access Control List (ACL) to restrict incoming management traffic. However, the ACL misconfiguration inadvertently causes a network outage because the engineer relied on traffic filtering without accounting for default drop behavior, while another technician misanalyzed the attack severity due to numeric logging inversions. Which term precisely classifies the unpatched software flaw itself, and what fundamental security principle explains the unintended blocking of legitimate traffic by the mitigation ACL?

A security assessment of an enterprise edge router reveals that while SSH access is enabled, administrative commands executed by engineers are logged under a single shared local account without individual accountability or granular command restriction. To eliminate this security risk and enforce centralized command-level authorization and per-user accounting, which solution should the network administrator implement?

A network administrator needs to prevent unauthorized individuals from physically entering a wiring closet containing core network switches and patch panels. Which mechanism directly serves as a physical access control for this facility?

A network device attempts to forward an IP packet toward the target address 172.31.25.140. The routing table contains four matching prefix entries:

- 172.31.25.0/24 [1/0] via 10.1.1.1
- 172.31.25.128/26 [90/307200] via 10.2.2.2
- 172.31.25.128/27 [110/40] via 10.3.3.3
- 172.31.25.136/29 [120/4] via 10.4.4.4

Which next-hop IP address will the device select to forward this packet?

A network engineer is auditing telemetry configurations across enterprise routers and switches. Security policy mandates that management telemetry must ensure packet privacy (encryption) and data integrity. Additionally, firewall rules must be verified to allow SNMP traffic between managed devices and the central Network Management System (NMS). Which two statements accurately describe the SNMP operational mechanics and security settings required to satisfy these requirements? (Select two.)

A network engineer needs to manage egress bandwidth on a WAN interface. The goal is to smooth out traffic bursts by holding excess packets in a buffer for later transmission rather than immediately dropping them when traffic exceeds the configured rate limit. Which Quality of Service (QoS) mechanism should the engineer configure?

An organization is implementing a remote access Virtual Private Network (VPN) solution to enable teleworkers to connect securely to corporate resources across the public internet. Which two operational characteristics are unique to remote access VPNs compared to site-to-site VPNs? (Select two.)

A network administrator needs to configure static Network Address Translation (NAT) on a Cisco IOS router to map an internal server at private IPv4 address $10.20.30.5$ to an external public IPv4 address $203.0.113.25$. Which global configuration command creates this static one-to-one inside source mapping?

An enterprise network administrator is configuring a remote access VPN client profile on a security appliance to support mobile remote workers. The administrator enables split-tunneling to optimize bandwidth usage on the corporate Internet connection. Which two statements accurately describe the operational characteristics of this split-tunneling configuration?

An enterprise is configuring a remote access VPN solution for mobile employees using Cisco AnyConnect client software. The network engineering team wants to implement split-tunneling to conserve corporate Internet bandwidth while maintaining secure connectivity to internal resources. Which two statements describe the operational behavior of split-tunneling in this remote access VPN deployment? (Select TWO.)

During an ongoing incident response investigation, a network analyst detects that an unauthorized host on an internal VLAN is transmitting spoofed Neighbor Discovery (ND) Router Advertisement messages to redirect host traffic through itself before forwarding it to the actual default gateway. Concurrently, the IT security department is seeking a control to prevent unauthorized account access resulting from compromised or stolen user passwords used across corporate endpoints. Which combination correctly identifies the active network attack vector and the most effective mitigation control against the password compromise risk?

A network engineer configures an IPv4 static route on a Cisco router using a next-hop IP address: ip route 192.168.50.0 255.255.255.0 10.0.12.2. When the router receives an inbound packet destined for host 192.168.50.25, in what order does the Cisco IOS routing engine process the packet to determine the forwarding path? Arrange the operational steps in the correct chronological sequence from first to last.

A network security architect is reviewing threat vectors and host-level network attacks targeting a corporate access layer switch. The audit identifies that an attacker connected to an untrusted port successfully performed ARP poisoning to intercept traffic between local hosts and launched a rogue DHCP server to distribute malicious default gateway addresses to clients. Which two mitigation controls directly address these specific security vulnerabilities? (Select two.)

A network administrator is reviewing the output of the 'show ip route' command on a Cisco IOS router. Match each routing table component or source code on the left with its correct functional definition on the right.