Tüm alıştırma soruları

A network engineer configures the following named extended IPv4 Access Control List (ACL) on a Cisco IOS router to regulate inbound traffic from a branch office subnet ($10.20.0.0/22$) destined for a data center network ($172.16.100.0/24$):

`ip access-list extended BRANCH_POLICY`
` 10 permit tcp host 10.20.2.45 host 172.16.100.10 eq 22`
` 20 permit tcp host 10.20.2.45 host 172.16.100.10 eq 443`
` 30 deny tcp 10.20.0.0 0.0.3.255 172.16.100.0 0.0.0.255 eq 80`
` 40 deny tcp 10.20.0.0 0.0.3.255 172.16.100.0 0.0.0.255 eq 443`

The ACL is applied to the inbound direction of the interface facing the branch network. What happens when a user at host $10.20.1.10$ attempts to send ICMP echo request packets to server $172.16.100.1$?

Match each Quality of Service (QoS) mechanism or Per-Hop Behavior (PHB) on the left to its corresponding operational characteristic or header specification on the right.

A network administrator is documenting Syslog severity level definitions for an enterprise Cisco IOS router deployment. Place the following Syslog severity level names in sequence from the lowest numerical severity code (most critical) to the highest numerical severity code (least critical).

A network administrator performs a security audit on a remote branch's main Intermediate Distribution Frame (IDF) closet. The auditor discovers two primary compliance issues: unbadged visitors routinely tailgate behind employees through the entrance door, and staff members frequently leave the access door propped open during work hours due to a lack of security protocol knowledge. Which pair of measures—consisting of one physical access control and one security program element—most effectively remediates these specific vulnerabilities?

A network operations team requires a Cisco IOS router to send only high-criticality log messages—specifically Emergency (severity 0), Alert (severity 1), and Critical (severity 2)—to a central syslog server at IP address 10.1.1.50. Simultaneously, the router must retain all messages up to the Informational level (severity 6) in local system RAM. Which set of commands correctly achieves this configuration?

A host PC on a local subnet connects to router interface GigabitEthernet0/0, which is configured with IP address $192.168.100.1/24$ and the command `ip helper-address 10.50.1.10`. When the host broadcasts a DHCP DISCOVER message, the router performs DHCP relay operations. Which source and destination IP addresses are placed in the Layer 3 IP header of the unicast packet forwarded by the router to the DHCP server?

A network administrator configures Low Latency Queuing (LLQ) on a Cisco WAN router egress interface using Modular QoS CLI (MQC). The policy map contains a `priority` command allocated $128\text{ kbps}$ for Expedited Forwarding (EF) voice traffic and a `bandwidth` command allocated $512\text{ kbps}$ for Assured Forwarding (AF31) transactional data. During a link congestion event, voice traffic arrives at a sustained rate of $200\text{ kbps}$. Which statement accurately describes how the router processes the excess voice traffic beyond the allocated $128\text{ kbps}$?

A network administrator configures Multi-Factor Authentication (MFA) for engineers establishing SSH connections to core routers. The login policy requires engineers to enter their domain password followed by a dynamic time-based passcode generated by a mobile application on their corporate-managed phone. Which two authentication factor categories are being used in this scenario?

Match each enterprise security initiative to the corresponding element classification within an overall enterprise security framework.

An administrator needs to configure a backup static route on router R1 to reach destination network $10.20.30.0/24$ only if the primary path learned via internal EIGRP (Administrative Distance $90$) becomes unavailable. The next-hop IPv4 address for the backup path is $192.168.1.2$. Which command must be entered on router R1 to achieve this objective?

An organization's Chief Financial Officer receives a highly tailored email that appears to originate from the company's primary banking institution. The message references specific details regarding a recent internal corporate transaction and directs the executive to a credential-harvesting website disguised as the bank's portal. Which security threat is demonstrated in this scenario?

An organization is updating its enterprise security program policy for network edge enclosures located in multi-tenant facilities. The Chief Information Security Officer (CISO) requires a security architecture that combines an administrative security program element with a physical access control mechanism to prevent unauthorized physical hardware tampering by facility personnel. Which set of measures correctly pairs an administrative security program element with a physical access control to fulfill this mandate?

A network security engineer is hardening a Cisco IOS router for remote administrative access. The running configuration contains the following entries:

text
username opsadmin privilege 15 secret 9 $9$ eG8H $kQzP8vX... username opstech secret 5$ 1 $mER7$ h8GzK2Pq...
username opsguest password 0 Cisco12345!
service password-encryption
!
line vty 0 4
exec-timeout 10 0
privilege level 5
login local
transport input ssh

Based on this configuration, which operational behavior will occur when users authenticate remotely via SSH?

A network administrator is deploying SSH version 2 for secure management on a Layer 3 switch named HQ-AggSwitch01. The switch already has a non-default hostname configured and local user accounts created. Which TWO configuration steps must be completed to successfully enable SSH version 2 and restrict remote management access strictly to SSH on the virtual terminal lines? (Select TWO.)

A Cisco router's IPv4 routing table contains four active static routes to various destination networks:

- `ip route 0.0.0.0 0.0.0.0 192.168.1.4`
- `ip route 10.10.0.0 255.255.0.0 192.168.1.1`
- `ip route 10.10.4.0 255.255.255.0 192.168.1.2`
- `ip route 10.10.4.16 255.255.255.240 192.168.1.3 110`

When the router receives an IP packet destined for $10.10.4.25$, which next-hop IP address will the router select to forward the packet?

A Cisco router receives an IPv4 packet destined for host $192.168.2.50$. The router's routing table contains a static route configured as `ip route 192.168.2.0 255.255.255.0 10.1.1.2`. Which sequence correctly orders the internal packet processing and recursive routing lookup steps executed by the router from first to last?

A DHCP client host holding an active IPv4 address lease reaches 50 percent of its designated lease duration (expiration of the T1 timer). In what sequence do the client and server execute the operational steps required to successfully renew the existing IP lease?

An organization is updating its network management policy to mitigate the threat of credential sniffing and unauthorized command execution during administrative access to network devices across an untrusted network. Which protocol should be deployed to enforceAAA administrative access while ensuring that the complete payload—including all authorization commands—is fully encrypted in transit?

An enterprise needs to grant external consultants secure access to web-based internal applications from their personal, unmanaged laptops. The security policy strictly forbids requiring local administrative rights or installing persistent client software on the end-user endpoints. Which VPN deployment model best satisfies these operational constraints?

A network administrator configures a Cisco IOS router interface with the `ip helper-address 10.1.1.50` command to support clients on subnets without a local DHCP server. Which two actions does the router perform upon receiving a DHCPDISCOVER broadcast message from a client host on that interface? (Select two.)