Tüm alıştırma soruları

A network engineer is configuring a floating static route on a Cisco router to serve as a backup path for destination network 172.20.10.0/24 via next-hop IP 10.1.1.2. The primary route to this network is currently learned via eBGP, which has a default administrative distance of 20. The engineer needs to assign an administrative distance of 25 to the backup route so that it only enters the routing table if the primary route fails. What value should complete the configuration command?

Evaluate the following VPN deployment requirements and protocol operational mechanics. Pair each specific VPN design scenario on the left with its corresponding protocol behavior or cryptographic implementation on the right.

A Cisco router is booted with the following interfaces configured and in the up/up state:

- Loopback0: 10.10.10.1/32
- Loopback1: 172.16.100.1/32
- GigabitEthernet0/0: 192.168.10.1/24
- GigabitEthernet0/1: 192.168.200.1/24

An administrator configures OSPFv2 on the router using the following commands:

text
Router(config)# router ospf 1
Router(config-router)# network 192.168.10.0 0.0.0.255 area 0

No `router-id` command is specified. Which IP address will OSPFv2 select as the Router ID for process 1?

A Cisco IOS router with an IP helper address configured receives a DHCP DISCOVER broadcast message from a client host. Place the operational steps performed by the relay agent in the exact sequential order from receiving the initial request to forwarding it to the remote DHCP server.

Security controls in an enterprise network fall into physical access controls, user security awareness elements, or administrative policies. Which of the following correctly matches each security control to its corresponding security program element or physical control function?

A network administrator must configure an enterprise router to send unsolicited critical event notifications to a central Network Management System (NMS). The administrator needs to ensure that any lost notification messages are detected and retransmitted by the router if the NMS fails to receive them. Which notification type and operational mechanism should the administrator implement?

A network security administrator is tasked with hardening campus access switch ports against Layer 2 security threats, specifically rogue DHCP server responses and ARP poisoning attacks. Which two mitigations should be implemented to prevent these threats? (Select two.)

A system administrator is configuring a client-based remote access VPN on company laptops. The configuration specifies that only traffic destined for internal corporate network ranges ($10.0.0.0/8$) should be directed through the encrypted VPN tunnel, while all unsecured internet traffic should go directly out the user's local internet connection. Which VPN feature is being implemented?

Match each Quality of Service (QoS) concept on the left with its corresponding operational description on the right.

A network operations team is troubleshooting performance discrepancies across a Cisco enterprise switch interface connected to a media server. An ingress policy map containing a traffic policing engine is configured on the switch interface to enforce rate limits. During bursts of high bandwidth utilization, real-time video traffic exceeding the configured rate limit is dropped directly at the ingress interface. Conversely, a WAN edge router interface configured with traffic shaping handles similar bandwidth bursts above the rate limit without packet loss, introducing only minor queueing latency. Which operational difference between QoS mechanisms explains this outcome?

An organization needs to deploy a virtual private network (VPN) solution for contractors connecting from untrusted public networks using standard web browsers without requiring software installation on their endpoint devices. Additionally, corporate policy mandates that only traffic bound for internal enterprise applications should pass through the VPN tunnel, while general internet traffic routes directly out through the local internet connection. Which VPN deployment model and traffic management feature combination fulfills these security and operational requirements?

An enterprise network administrator is conducting a security risk assessment across the organization's infrastructure. Match each security incident description on the left to its appropriate technical mitigation control on the right.

A financial enterprise requires a secure connection for dynamic, roaming field auditors back to corporate headquarter applications while allowing them to maintain simultaneous access to local subnet resources such as home printers. Concurrently, the organization must maintain a permanent, always-on encrypted connection between a fixed regional branch router and the headquarter security appliance to route entire subnet traffic transparently.

Which architectural combination correctly satisfies the operational requirements for both deployment models?

An enterprise network administrator is configuring a floating static route on router R1 to serve as a backup path for the corporate subnet 172.16.50.0/24. The primary path is currently learned via internal EIGRP (Administrative Distance 90). Which command correctly configures the backup route so that it remains inactive until the primary EIGRP route fails?

A Cisco router has OSPFv2 process 1 initialized without an explicitly configured router ID. The interface operational statuses and IPv4 address assignments are as follows:

- Loopback0: 172.25.1.1/32 (administratively down, down/down)
- Loopback1: 10.120.5.1/32 (up/up)
- Loopback2: 10.80.99.1/32 (up/up)
- GigabitEthernet0/0: 192.168.50.1/24 (up/up)

What IPv4 address will OSPFv2 select as the router ID for process 1?

An administrator intends to deploy a floating static route on router R1 to serve as a backup path for internal network $10.100.50.0/24$, which is primarily learned via Internal EIGRP (administrative distance 90). Following the configuration, traffic immediately shifts to the secondary link despite the primary link remaining fully operational.

Which configuration mistake caused the static route to preempt the primary EIGRP route in the routing table?

An administrator configures port security on a Cisco Catalyst switch access interface using the command switchport port-security mac-address sticky. End devices connect to the port, and their MAC addresses are dynamically converted to sticky MAC addresses. Following a scheduled reload of the switch, the connected devices lose network connectivity. What is the root cause of this issue?

A network engineer is configuring a Cisco IOS router named Edge-R1 to operate as an NTP client. The router must synchronize its system clock with an upstream central NTP server at IP address 10.45.1.1. Additionally, organizational security policy dictates that all outgoing NTP packets must originate specifically from the router's Loopback0 interface rather than the physical egress interface. Which two global configuration commands must be configured on Edge-R1 to fulfill these operational requirements?

Match each IPsec VPN framework component or feature on the left with its correct primary operational function on the right.

Match each VPN deployment scenario or operational requirement on the left with the corresponding VPN technology or protocol implementation on the right.