Tüm alıştırma soruları

During a comprehensive infrastructure review following a series of network upgrades and operational incidents, a lead network engineer must consult specific documentation artifacts. Match each network documentation artifact on the left to the operational scenario on the right where its usage is primary and essential.

A systems administrator is configuring perimeter firewall access control rules to enable centralized administrative access across enterprise infrastructure. The security baseline requires deploying TACACS+ for AAA management of network switches and Remote Desktop Protocol (RDP) for graphical management of remote Windows servers. Which of the following port and transport layer protocol combinations must be permitted through the firewall to support these services? (Select TWO)

A network security administrator is constructing a top-to-bottom Cisco IPv4 extended Access Control List (ACL) on a router interface to filter traffic moving from an internal administration subnet toward a datacenter network. Arrange the following ACL statements in the correct evaluation order from top (first statement) to bottom (last statement) so that specific security exceptions are honored without rule shadowing or unintended traffic blockage.

A system administrator needs to implement remote management for a cluster of physical servers located in a remote datacenter. During host operating system crashes or pre-boot system checks, standard network management protocols like SSH or RDP are unavailable because the OS network stack is inactive. Which of the following out-of-band management solutions provides administrators with remote graphical display output, keyboard/mouse interaction, and full access to motherboard BIOS settings?

A network technician is investigating a connectivity issue on a Linux workstation. When executing `nslookup repo.corp.local`, the command returns an IP address of `10.50.10.25` from the internal DNS server. However, ping commands and web browser traffic directed to `repo.corp.local` consistently attempt to connect to `10.50.10.99`, resulting in connection timeouts.

Which of the following is the most likely cause of this name resolution discrepancy?

A network administrator is evaluating the converged state of an enterprise network running standard IEEE 802.1D Spanning Tree Protocol (STP) across multiple interconnected switches. Which of the following statements correctly describe port roles and operational behavior in a fully converged 802.1D STP topology? (Select TWO.)

A network administrator is designing an enterprise wireless network to mitigate co-channel interference, satisfy regulatory spectrum requirements, and optimize airtime efficiency in high-density environments. Match each wireless deployment mechanism on the left with its primary function or operational requirement on the right.

During an incident investigation on an enterprise local area network, a network administrator notices that a host workstation is sending traffic intended for the default gateway (192.168.1.1) to an unassigned MAC address (00:11:22:33:44:55) on the local switch port. Packet captures reveal unsolicited Address Resolution Protocol responses continuously mapping the gateway's IP address to the attacker's MAC address. Which of the following attack types is actively occurring on this network segment?

A network administrator is dividing the IP address block $172.20.0.0/23$ into subnets with a prefix length of $/26$ to accommodate multiple department networks. What is the broadcast address of the third subnet in this allocation?

A network administrator is troubleshooting an issue where internal workstation clients can resolve standard internal hostnames, but fail when attempting to query external DNSSEC-signed domains that return large response payloads exceeding 512 bytes. Packet captures reveal that the external DNS server sends a response with the TrunCation (TC) flag set over UDP port $53$, after which the client's automated follow-up attempt fails completely. Which firewall configuration issue is most likely causing this name resolution failure?

A network technician is troubleshooting a network outage where hosts on VLAN 30 ($192.168.30.0/24$) are unable to reach an internal application server on VLAN 50 ($192.168.50.10$). Following the CompTIA network troubleshooting methodology, place the actions in the correct sequential order from first step to last step.

Match each physical network cabling diagnostic tool on the left with the specific troubleshooting scenario or measurement task on the right for which it is primary suited.

Match each enterprise wireless deployment scenario on the left with its corresponding deployment methodology or architectural standard on the right.

A datacenter technician is troubleshooting a newly installed single-mode fiber optic link between two core switches that fails to establish a link status. A visual fault locator (VFL) confirms light continuity from end to end, but the switch transceivers report an absolute lack of signal. Which diagnostic instrument should the technician use to measure the exact optical loss in decibels (dB) and verify if the signal strength meets the transceiver operating specifications?

An industrial IoT controller installed in a warehouse facility on VLAN 12 (subnet $10.120.12.0/24$) fails to send telemetry data to the central management server. A network technician reviews the controller's active network settings via a serial console connection and observes the following configuration details:

IP Address: 10.120.12.45
Subnet Mask: 255.255.255.0
Default Gateway: 10.120.13.1
DHCP Server: 10.120.1.10

Which of the following root causes explains why the controller cannot communicate with servers outside its local subnet?

A network administrator is establishing operational documentation for a newly deployed branch office. To ensure efficient remote troubleshooting, the administrator needs to define which details belong specifically on the logical network diagram rather than the physical topology diagram.

Which of the following components should be documented on the logical network diagram? (Select TWO.)

A network technician is troubleshooting an issue where remote users cannot reach an internal web server at IP address $192.168.10.45$ over a secure connection. The technician executes a diagnostic utility directly on the server to inspect network socket states, receiving the following output:

$ ss -tuln
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
tcp LISTEN 0 128 0.0.0.0:80 0.0.0.0:*
udp UNCONN 0 0 0.0.0.0:67 0.0.0.0:*

Based on the command output above, which of the following best explains why client HTTPS requests to `https://192.168.10.45` are failing?

A network engineer is investigating why client workstations cannot establish a secure web session to an internal web service at `https://app.corp.local`. The engineer executes two CLI diagnostic commands:

1. On the Linux web server host:
text
$ ss -tuln
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
tcp LISTEN 0 128 0.0.0.0:80 0.0.0.0:*

2. On a client workstation:
text
$ nslookup app.corp.local 192.168.10.5
Server: dns01.corp.local
Address: 192.168.10.5

Non-authoritative answer:
Name: app.corp.local
Address: 10.20.30.100

Based on the output of these command-line utilities, which TWO statements accurately diagnose the network status and root cause of the connection failure?

A network technician is troubleshooting a newly installed Cat6 unshielded twisted-pair (UTP) cable run connecting a workstation to a switch patch panel. While a basic pin-to-pin continuity cable tester confirms that all eight conductors are connected straight-through with no open or short circuits, the connection suffers from severe packet loss and degraded throughput when transmitting data. Which of the following cable testing features or tools should the technician use to identify the root cause of this performance failure?

During a network security audit, a security analyst identifies an ongoing Man-in-the-Middle (MitM) attack occurring within a local Ethernet switch segment. Packet captures reveal that workstation ARP tables are incorrectly binding the default gateway's IP address to an unauthorized endpoint's MAC address. Which of the following technical mechanisms or indicators are directly associated with this attack vector? (Select TWO.)