Tüm alıştırma soruları

A network administrator is configuring a corporate wireless network that requires individual user authentication against a central RADIUS server using WPA3-Enterprise. Which authentication framework must be implemented on the wireless network?

A network technician needs to configure a network management system to monitor router performance metrics using SNMP. To meet security compliance standards, the communication must ensure both message authentication and payload encryption. Which SNMP version and security level should be selected?

Match each high-availability technology or protocol on the left with its primary operational characteristic on the right.

A senior network security analyst is reviewing telemetry logs and protocol captures across several enterprise security incidents. Match each specific network attack type to its underlying operational mechanism and observed protocol footprint.

Match each intrusion detection/prevention operational mechanism or placement scenario to its primary functionality or characteristics.

During a routine compliance audit, a network analyst discovers that several perimeter firewalls contain unapproved Access Control List (ACL) rule modifications. Investigation reveals that an on-call administrator applied these inline changes two weeks ago to mitigate an active service disruption, but bypassed standard approval procedures. The temporary fix stabilized traffic but resulted in configuration drift between the active firewall state and the documented network baseline. To resolve this non-compliant state while adhering to formal change management governance, which action should the analyst take first?

A network operations team is upgrading its centralized monitoring and logging architecture to ensure regulatory compliance and robust forensic capabilities. Match each network logging or telemetry mechanism on the left with its primary operational auditing function on the right.

During a security incident investigation on a segmented corporate network, a technician notices that workstations on VLAN 10 are sending traffic intended for the local default gateway (10.10.10.1) directly to an unknown host's MAC address (00:50:56:AB:CD:EF). Analysis of network traffic logs reveals that the unknown host continuously transmits unsolicited Ethernet frames asserting ownership of IP address 10.10.10.1 without altering the victim clients' DNS configuration or DHCP lease parameters. Which of the following attack vectors is actively occurring, and what underlying mechanism enables this compromise?

An organization installs redundant power supplies and an Uninterruptible Power Supply (UPS) unit for its core network switches to prevent system outages during electrical disruptions. Which pillar of the CIA triad is directly supported by this implementation?

An enterprise network storage system suffered a catastrophic volume failure on Thursday at 14:15. The network administrator maintains a disaster recovery plan with the following backup schedule:

- Full Backup: Executed every Sunday at 00:00
- Differential Backup: Executed daily Monday through Wednesday at 23:00
- Incremental Backup: Executed hourly on Thursday between 01:00 and 14:00
- Transaction Log Backup: Executed every 15 minutes

To restore the system to the point of failure in the shortest total downtime while maintaining complete data integrity, in what order should the network administrator execute the restoration steps?

A network administrator wants to centralize administrative access to enterprise routers and switches. The administrator requires a security protocol that encrypts the entire packet payload—including all authentication details and command data—and utilizes TCP port 49 for reliable transport. Which protocol best satisfies these requirements?

A network technician is preparing to integrate several new access switches into an existing enterprise network. Before making any configuration changes, the technician records the current operating system versions, interface settings, and active services across all network devices. Which of the following terms best describes this documented initial snapshot used to detect unauthorized modifications over time?

A senior network infrastructure engineer is planning a major architectural revision to implement micro-segmentation policies across an enterprise data center core network. To maintain service availability and comply with IT service management best practices, the engineering team must follow a structured configuration and change management lifecycle. In what chronological order should the engineer execute the change management phases from first to last?

A network security administrator needs to monitor traffic destined for a cluster of internal database servers to identify malicious payload patterns. The solution must ensure that security monitoring introduces zero processing latency to live database transactions and cannot interrupt network traffic if the monitoring device fails or experiences a hardware fault. Which of the following deployment options best satisfies these requirements?

A network security administrator must construct an extended IPv4 Access Control List (ACL) on an ingress router interface serving the internal subnet $10.50.10.0/24$. The ACL must enforce five security requirements using first-match evaluation logic without rule shadowing:

1. Quarantine host $10.50.10.45$ by blocking all of its outbound traffic.
2. Allow database administrative hosts in the $10.50.10.0/26$ subnet to access a central database server at $192.168.100.50$ on TCP port $3306$.
3. Deny all other hosts in $10.50.10.0/24$ access to any server in the $192.168.100.0/24$ network.
4. Permit all remaining hosts in $10.50.10.0/24$ to access external web servers on TCP port $443$.
5. Explicitly deny and log all unapproved IPv4 traffic originating from $10.50.10.0/24$.

Arrange the given ACL statements in the correct top-to-bottom sequential order (from index $10$ to $50$) to fulfill these security requirements accurately.

A senior network operations engineer is implementing a centralized telemetry and performance monitoring solution for core routers transmitting sensitive enterprise data across a shared infrastructure. The monitoring design requires real-time interface throughput polling and immediate alert notifications whenever link utilization breaches critical thresholds. Additionally, security compliance mandates that all monitoring data, including administrative credentials and metric payloads, must provide both message integrity verification and cryptographic privacy during transmission over untrusted network segments. Which of the following protocol configurations correctly satisfies all performance monitoring and security compliance requirements?

A network security administrator is updating wireless security configurations across multiple corporate site tiers to meet strict security baseline policies. Match each wireless security standard or mode on the left with its corresponding encryption protocol and authentication mechanism on the right.

A network security administrator must apply a critical security patch to an enterprise perimeter firewall cluster to remediate a disclosed remote code execution vulnerability. Place the following patch management lifecycle steps in the correct chronological order from first step to last step.

A network administrator needs to implement a basic IPv4 Access Control List (ACL) to filter traffic entering a router interface. Place the following steps in the correct sequential order from first to last to properly configure and activate the firewall ACL.

A enterprise network security architect is updating the organization's defensive baseline to ensure alignment with core security architecture principles. Match each operational technical control on the left with the primary security pillar or principle it directly satisfies on the right.