Tüm alıştırma soruları

A network security architect at a high-security research institution is deploying a new wireless network to comply with National Security Agency (NSA) Commercial National Security Algorithm (CNSA) Suite standards. The compliance mandate specifies that all wireless communications must use 192-bit cryptographic strength for both data confidentiality and integrity, paired with centralized identity management. Which configuration combination on the wireless LAN controller (WLC) and authentication server satisfies all aspects of this security mandate?

Match each intrusion detection or prevention system (IDS/IPS) architecture and mechanism on the left to its corresponding operational scenario on the right.

A network administrator is deploying a wireless network for an enterprise office. Management requires each employee to authenticate individually using their corporate domain credentials via an IEEE 802.1X RADIUS server, rather than relying on a shared passphrase. Which wireless security mode should the administrator configure?

An enterprise organization plans to modify the BGP configuration across its global WAN edge routers to convert a full-mesh IBGP topology into a route reflector architecture. During the formal Change Advisory Board (CAB) review, the network lead submits a Request for Change (RFC) containing maintenance window schedules, sandbox testing logs, and step-by-step implementation scripts. However, the CAB refuses approval, noting that the document fails to define measurable criteria for identifying an unsuccessful deployment or explicit instructions for returning the network to a functional baseline if unpredicted routing loops occur. Which of the following elements must be added to the RFC to satisfy the CAB requirement for change authorization?

A senior infrastructure engineer is defining the emergency recovery protocol for an enterprise network orchestrator host. The host's backup policy mandates a full system backup executed every Sunday at 01:00, daily incremental backups created Monday through Friday at 22:00, and hourly configuration state exports taken at the top of every hour. An unrecoverable storage array crash corrupts the primary orchestrator host on Thursday at 14:15. Which of the following backup restoration sequences must be executed to restore the orchestrator to its most recent operational state prior to the failure while preserving data integrity?

A network technician applies an Access Control List (ACL) to a router interface containing a single entry that permits outbound HTTP traffic from an internal subnet. Immediately after applying the rule, users report that all non-HTTP network traffic originating from that subnet is blocked. Which fundamental ACL rule mechanism causes traffic not explicitly allowed to be dropped automatically?

An organization is deploying an edge computing cabinet at a remote manufacturing facility that frequently experiences complete primary ISP fiber outages. The network operations team must maintain secure command-line access to core switches for initial boot troubleshooting and possess the ability to hard-reboot frozen hardware remotely without relying on local site staff or the primary WAN link. Which of the following solutions best satisfies both the out-of-band reachability and remote power management requirements?

A network administrator configures a pair of core routers using a First Hop Redundancy Protocol (FHRP) to provide seamless default gateway redundancy for a corporate subnet. During a scheduled maintenance test, the primary router is powered off. Although the secondary router successfully transitions to the active state and assumes ownership of the virtual IP and virtual MAC addresses, workstations on the subnet immediately lose outbound network access. Upon auditing host network configurations, the administrator notices that all affected workstations were statically configured. Which of the following is the most likely cause of the connectivity failure during failover?

A network engineer is designing an out-of-band (OOB) management solution for a remote datacenter rack to maintain administrative control during a complete primary network failure. The technical specifications mandate: (1) remote GUI-level visual access to bare-metal server console screens during POST/boot, (2) direct serial CLI management of edge routers and switches, and (3) the capability to remotely power-cycle frozen hardware. Which deployment strategy fulfills all of these requirements while maintaining dedicated OOB access?

A network engineering team is hardening the remote management architecture for a critical enterprise data center. Security baseline standards require cryptographic protection for all administrative sessions, central AAA authorization for individual CLI commands, and an independent out-of-band (OOB) pathway capable of providing emergency console access if the core routers experience a complete network stack freeze or primary ISP fiber failure. Which of the following mechanisms should the team deploy to satisfy these requirements? (Select TWO.)

Following a network resegmentation, a workstation on VLAN 30 ($192.168.30.0/24$) is unable to communicate with network resources. The workstation's network adapter is set to acquire an IP address automatically. Running `ipconfig /all` on the workstation yields the following output:

IPv4 Address. . . . . . . . . . . . : 169.254.48.19
Subnet Mask . . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . . :
DHCP Server . . . . . . . . . . . . :

The central DHCP server resides on VLAN 10 ($192.168.10.15$). The network administrator inspects the router's configuration for the subinterface corresponding to VLAN 30 and notes that the interface is operational with IP $192.168.30.1/24$, but no relay commands are present.

Which of the following statements accurately diagnose this issue and identify the necessary corrective action? (Select TWO.)

Employees working in a newly expanded section of an office building report frequent wireless disconnections and degraded network throughput on their laptops connecting via the 2.4 GHz band. A network administrator conducts a site survey and finds that three neighboring access points covering the area are currently configured to use Channels 1, 3, and 5. Which of the following identifies the primary cause of this performance issue and the correct action to resolve it?

A network technician is investigating severe performance degradation across an enterprise network following an after-hours maintenance window. After reviewing syslog messages and analyzing traffic patterns, the technician suspects that an incorrectly configured Link Aggregation Control Protocol (LACP) bundle on a core switch stack is creating a Layer 2 switching loop. To test this theory, the technician temporarily disables one of the aggregated member interfaces, which instantly drops CPU utilization back to baseline levels and restores network throughput. According to the CompTIA troubleshooting methodology, which of the following actions should the technician perform next?

Match each remote access security technology or VPN architectural mechanism on the left to its corresponding operational characteristic and protocol specification on the right.

A network security consultant is conducting an audit of an organization's multi-generational wireless network infrastructure. Match each wireless security requirement or vulnerability scenario to its corresponding cryptographic protocol or mechanism.

A network administrator is evaluating remote access and tunneling configurations to meet specific enterprise connectivity requirements. Match each secure tunneling protocol or configuration mode on the left with its defining operational characteristic or protocol constraint on the right. Which pairs correctly match each remote access security technology to its technical behavior?

During peak operational hours, enterprise users report frequent audio distortion and freeze-frames during real-time video calls across a site-to-site WAN link. Network interface polling indicates that total link utilization averages only $45\%$ of available capacity, with interface error counters showing fewer than $0.01\%$ dropped frames. Packet captures indicate that delay between consecutive packets fluctuates significantly across UDP transport streams. Which network metric is primarily responsible for the degraded application quality, and which telemetry technology is best suited to continuously monitor these per-flow transport dynamics?

During a quarterly compliance audit of an organization's network infrastructure, a security analyst identifies two key operational deficiencies: event log packets sent from border routers to the log repository are lost during high network congestion, and SNMP performance telemetry transmitted across public circuits can be read in plain text. Which set of protocol configurations directly resolves both compliance issues?

A network technician needs to establish baseline performance monitoring and secure telemetry for a company's voice-over-IP (VoIP) infrastructure. Which of the following operational measures should the technician implement to effectively monitor audio quality and secure management traffic? (Select TWO).

A network administrator is configuring network redundancy for a mission-critical database server equipped with two physical network interface cards (NICs). The server is connected to two separate, independent standalone switches that do not support multi-chassis link aggregation (MLAG). The administrator configures IEEE 802.3ad Link Aggregation Control Protocol (LACP) bonding on the server's interfaces. Immediately after enabling the bond, network monitoring reports severe packet loss, and both switches log MAC address flapping errors. Which of the following is the most appropriate solution to resolve the connectivity issue while maintaining interface redundancy?