Tüm alıştırma soruları

A network administrator is configuring an extended IPv4 Access Control List (ACL) named `MGMT_FILTER` to implement sequential top-down filtering on a Cisco router interface. The policy requires four explicit criteria:
1. Permit SSH administrative access (TCP port 22) from source subnet `192.168.50.0/24` to target server `10.10.10.25`.
2. Permit SNMP monitoring queries (UDP port 161) from source subnet `192.168.50.0/24` to target server `10.10.10.25`.
3. Deny and log all other IP traffic from source subnet `192.168.50.0/24` destined to target server `10.10.10.25`.
4. Permit all remaining traffic originating from subnet `192.168.50.0/24` to any other destination, overriding the default implicit deny statement for this subnet.

In what top-down sequential order must these ACL statements be placed to satisfy all policy requirements without shadowing rules?

An enterprise WAN link connects a remote branch office to the primary data center over a service provider connection with a contracted Committed Information Rate (CIR) of $10\text{ Mbps}$. The service provider immediately drops any bursts that exceed $10\text{ Mbps}$ at the ingress port of the provider edge router. To prevent packet drops during short bursts by queuing excess packets in memory and releasing them at a controlled rate, which Quality of Service (QoS) mechanism should be applied to the enterprise egress router interface?

A network engineer configures an extended IPv4 Access Control List (ACL) on a Cisco IOS router interface with the following commands:

text
access-list 105 permit tcp 192.168.10.0 0.0.0.255 172.16.1.0 0.0.0.255 eq 22
access-list 105 permit icmp 192.168.10.0 0.0.0.255 172.16.1.0 0.0.0.255 echo

This ACL is applied in the inbound direction on interface GigabitEthernet0/1 ($192.168.10.1/24$). Which two statements correctly describe how traffic entering interface GigabitEthernet0/1 is processed by this ACL?

A network administrator executes the commands `ip dhcp snooping` and `ip arp inspection vlan 10` on a Cisco Catalyst switch to mitigate Layer 2 ARP spoofing attacks. However, users on VLAN 10 immediately lose all network connectivity because Dynamic ARP Inspection (DAI) drops all incoming ARP requests from client ports. Executing `show ip dhcp snooping binding` displays an empty binding table. Which command was omitted from the switch configuration?

A network engineer is hardening access to a Cisco IOS router. The local user account is created using `username admin1 secret P@ssw0rd123`. However, when administrators attempt to log in remotely via SSH, the router requests only a password rather than asking for a username first. Which command must be configured under `line vty 0 4` to force the router to authenticate users against the local user database?

Match each Quality of Service (QoS) concept or mechanism on the left to its corresponding operational characteristic or header specification on the right.

Which TWO operational characteristics accurately describe the RADIUS protocol implementation? (Select TWO)

A network administrator applies the following IPv4 extended named access control list (ACL) on a Cisco IOS router interface to regulate access from the Sales department ($192.168.30.0/24$) to the Finance server ($10.2.2.50$):

text
ip access-list extended FILTER_SALES
permit tcp host 192.168.30.15 host 10.2.2.50 eq 443
deny ip 192.168.30.0 0.0.0.255 host 10.2.2.50
permit ip 192.168.30.0 0.0.0.255 any

Which two statements correctly describe the operational evaluation and deployment best practices for this ACL configuration? (Select two.)

A network administrator is configuring initial administrative access security on a Cisco IOS XE router for remote management via SSH. Which TWO commands or configuration actions are required to enforce local database user authentication on the VTY lines and ensure local account passwords are saved using the scrypt (Type 9) hashing algorithm? (Select two.)

A network engineer is comparing default operational behaviors between HSRPv1 and VRRPv2 across Cisco IOS switches. Which two statements accurately describe default characteristics and protocol specifications of these First Hop Redundancy Protocols? (Choose two.)

A network administrator is creating an IPv4 extended Access Control List (ACL 101) on a Cisco IOS router to enforce security policies for traffic sent to Web Server 192.168.10.50. The policy requires:

1. Host 10.1.1.5 must be permitted HTTP access (TCP port 80) to Web Server 192.168.10.50.
2. Host 10.1.1.5 must be denied all other IP traffic to Web Server 192.168.10.50.
3. All other hosts in the 10.1.1.0/24 subnet must be permitted full IP access to Web Server 192.168.10.50.
4. All remaining traffic to Web Server 192.168.10.50 must be explicitly denied.

Arrange the ACL statements in the correct sequential top-down order (from line 1 at the top to line 4 at the bottom) to satisfy all security requirements.

A Cisco router receives an IPv4 packet destined for $172.16.10.45$. Place the routing table lookup and packet forwarding steps in the correct chronological order from first to last.

An engineer executes the following interface configuration on a Cisco IOS router:

text
R1(config)# interface GigabitEthernet0/0
R1(config-if)# ip address 10.1.1.1 255.255.255.0
R1(config-if)# standby 10 ip 10.1.1.1

What is the outcome of issuing the `standby 10 ip 10.1.1.1` command?

A network administrator configures an access port on a Cisco Catalyst switch using the commands `switchport port-security` and `switchport port-security mac-address sticky`. A host connects to the port, and its MAC address is dynamically learned and written to the running configuration. Shortly after, the switch experiences an unexpected reboot due to a brief power failure, before `copy running-config startup-config` or `write memory` was executed. What happens to the learned sticky MAC address on this interface after the switch completes its boot sequence?

Match each Layer 2 security feature or operational scenario on the left to its corresponding switch behavior or implementation detail on the right.

A network administrator applies the following standard IPv4 access control list (ACL) to a VTY line on a Cisco IOS switch to secure remote management access:

text
ip access-list standard VTY_ACCESS
permit host 192.168.10.25
permit 192.168.20.0 0.0.0.255

A monitoring server with IPv4 address $192.168.10.50$ attempts to initiate an SSH session to the switch. Based on this configuration, what action does the switch take on this traffic, and why?

An enterprise router learns the path to a remote subnet $192.168.100.0/24$ through EIGRP, which operates with a default administrative distance of $90$. A network engineer needs to configure a backup IPv4 static route to reach this subnet using the next-hop IPv4 address $10.0.5.2$ so that the backup route remains inactive until the primary EIGRP path fails. Which Cisco IOS command correctly configures this floating static route?

Following an unexpected reboot of an enterprise access switch, users connected to interface GigabitEthernet1/0/12 report a complete loss of network connectivity. Upon investigation, the network administrator discovers that the dynamically learned MAC address added to the port security table prior to the switch reload is missing, causing the switch to reject traffic from the connected workstation. Which administrative action was omitted prior to the reboot that resulted in the loss of the sticky MAC address?

A network administrator is evaluating the core architectural differences between traditional networking and controller-based software-defined networking (SDN). In a controller-based architecture, how is the control plane managed compared to a traditional network?

A network administrator is upgrading a wireless network from WPA2-Personal to WPA3-Personal to increase client authentication security. Which key exchange protocol does WPA3-Personal introduce to protect against offline dictionary attacks?