Tüm alıştırma soruları

A systems engineer is preparing to upgrade the operating system across multiple network security firewalls. Which of the following administrative tasks must be completed prior to applying the update to maintain change governance and ensure rapid system recovery? (Select TWO.)

A network administrator needs to configure log retention to track user session durations and bytes transferred across remote access VPN connections for compliance auditing. Which pillar of the AAA framework directly delivers this tracking function?

An enterprise network utilizes two Layer 3 switches, Switch-A and Switch-B, to provide default gateway redundancy for VLAN 30 ($172.16.30.0/24$). Switch-A is configured as the HSRP Active router with a priority of 120 and preemption enabled, using Virtual IP (VIP) $172.16.30.1$ (physical IP $172.16.30.2$). Switch-B is the HSRP Standby router with a default priority of 100 and physical IP $172.16.30.3$. Switch-A is also configured as the STP Root Bridge for VLAN 30. During a routine host setup, a technician manually sets a critical server's default gateway address to $172.16.30.2$ instead of the HSRP VIP. Later, Switch-A's tracked WAN uplink fails, decreasing its HSRP priority by 30 points and causing Switch-B to assume the HSRP Active role. Which of the following best describes the immediate pathing behavior for outbound traffic originating from this server?

A network administrator is configuring SNMP management on a core network switch. Organizational policy mandates that telemetry and monitoring traffic must support both cryptographic user authentication and payload encryption. Which SNMPv3 security level meets these requirements?

An enterprise network technician is responding to recurring frame check sequence (FCS) and CRC error bursts on a 10GbE fiber optic link connecting a core switch to a newly installed modular SAN storage array across separate rooms in a data center. The fiber connection passes through multiple intermediate fiber distribution panels (FDPs) and structured patch bays. To systematically trace the specific optical strand IDs, bulkhead coupler locations, port assignments, and physical path terminations before dispatching a field engineer with an Optical Time-Domain Reflectometer (OTDR), which network document should the technician analyze first?

A network security administrator is replacing legacy switch administration protocols across an enterprise. The administrator attempts to configure RADIUS to enforce per-command authorization for individual privileged shell commands executed by engineers during SSH sessions on core switches, attempting to replicate an existing TACACS+ feature set. However, command-line execution validation fails to inspect individual commands once the administrative session is established. Which of the following technical characteristics of RADIUS explains why it cannot provide real-time, granular per-command authorization during an active interactive session?

An enterprise network infrastructure utilizes dual core switches configured with Virtual Router Redundancy Protocol (VRRP) to provide default gateway redundancy for multiple VLANs. Downstream access switches connect to both core switches via multi-chassis trunking. During traffic baseline audits, network engineers notice significant asymmetric traffic flow and sub-optimal hairpinning (tromboning) across the inter-switch link between the core switches. Which of the following configuration changes and architectural adjustments will optimize Layer 2/Layer 3 path symmetry and eliminate unnecessary inter-switch link transit? (Select TWO.)

A network technician is setting up a Virtual Router Redundancy Protocol (VRRP) group between two routers to provide default gateway redundancy for hosts on Subnet $10.10.20.0/24$. Router 1 has interface IP $10.10.20.2$, Router 2 has interface IP $10.10.20.3$, and the Virtual IP (VIP) is configured as $10.10.20.1$. Which IP address must be configured as the default gateway on client computers within this subnet?

An organization deploys an active/standby pair of network gateways configured with a First Hop Redundancy Protocol to provide default gateway resiliency. During scheduled maintenance testing, when the primary active gateway is powered off, workstations on the local subnet immediately lose all outbound internet connectivity. Inspection reveals that internal workstations are receiving traffic normally within their local LAN, but failover routing does not resume internet access until the primary gateway is powered back on. Which misconfiguration is the most likely cause of this issue?

An organization is deploying a pair of enterprise edge switches configured with multi-chassis link aggregation (mLAG) connected to two core routers configured with Virtual Router Redundancy Protocol (VRRP). Server host interfaces are configured in an LACP IEEE 802.3ad dynamic bond. During failure simulation testing, host traffic experiences intermittent packet loss and unidirectional asymmetry upon primary router failure. Which TWO of the following administrative actions or verification steps will resolve these specific high availability operational defects?

A network security administrator needs to deploy a security solution that sits directly in the traffic path to inspect incoming packets and actively block identified threats in real time before they reach internal hosts. Which of the following devices should the administrator implement?

An IT administrator wants to ensure that a newly released software update for core network switches will not disrupt corporate operations or introduce instability before deploying it network-wide. Which of the following is the best initial step to validate the software update safely?

During a security audit, a network administrator notices that event logs sent from a remote switch to a central log server contain significant gaps during periods of high network utilization. Investigation reveals that log packets sent via standard Syslog are being silently dropped by intermediate routers under heavy congestion. Which transport protocol and port configuration should be configured on the switch to ensure reliable, delivery-guaranteed log transmission?

A network engineer is inspecting packet captures during an audit of network management traffic. The captures show authentication and administration sessions between network switches and a central server communicating over TCP port 49, where the complete packet payload following the header is cryptographically encrypted. Which protocol is being observed, and which feature accurately reflects its architecture relative to RADIUS?

A regional bank experienced a storage area network (SAN) volume failure on Thursday at 13:30. The network operations team maintains the following backup schedule for the critical database volume:

- Full backup: Executed every Sunday at 01:00
- Differential backup: Executed daily Monday through Wednesday at 23:00
- Incremental backup: Executed every 4 hours daily (03:00, 07:00, 11:00, 15:00, 19:00, 23:00)

To achieve the minimum Recovery Time Objective (RTO) while recovering all data up to the latest available recovery point prior to the outage, which restoration sequence must the backup engineer execute?

A network administrator receives a critical security advisory regarding a remote code execution vulnerability in the operating system running on the organization's enterprise switches. Which of the following procedures should the administrator perform first to ensure a safe patch deployment?

Hosts on a newly provisioned user subnet fail to dynamically acquire IP addresses from an established DHCP server located on a separate administrative network segment. Why is a DHCP relay service required on the local gateway router to resolve this issue?

During a security compliance audit, a network administrator discovers that edge routers are transmitting critical audit logs across an untrusted WAN connection using default Syslog configurations over UDP port 514. Updated corporate policy mandates that all network event logging must guarantee connection-oriented reliable delivery and encrypt log payloads in transit to prevent eavesdropping. Which configuration modification should the administrator implement to fulfill both requirements?

Match each high availability or redundancy concept on the left with its correct operational description on the right.

Match each AAA authentication protocol or access control framework to its defining operational and structural characteristic.