Tüm alıştırma soruları

A network security analyst is reviewing a remote access VPN architecture that combines Layer 2 Tunneling Protocol (L2TP) with IPsec alongside a centralized AAA server infrastructure. Which of the following statements correctly describe the technical protocol characteristics and operational requirements of this solution? (Select TWO.)

An organization is updating its perimeter defenses to protect a cluster of public-facing web servers from known exploit signatures. The security policy mandates that malicious traffic must be actively blocked in real time before reaching the internal network segment, while ensuring zero processing load added to the web servers' host operating systems. Which deployment architecture best fulfills these requirements?

A network technician needs to inspect a host computer's local cache to view the mapping of IP addresses to physical MAC addresses. Which command-line utility should the technician execute?

A network technician captures packet traces while troubleshooting administrative access logs on core routers. The trace analysis reveals that the authentication protocol operates over UDP, encrypts only the password field within packets, and combines authentication and authorization procedures into single exchange pairs. Which security protocol is actively in use for this centralized access control system?

A network administrator discovers that hosts on a local subnet are directing default gateway traffic to an unauthorized computer's MAC address. An inspection reveals that the ARP caches on the affected hosts associate the default gateway's IP address with the attacker's MAC address. Which of the following statements correctly describe the mechanisms or impact of this network security attack? (Select TWO)

A network administrator is reviewing basic firewall operations and Access Control List (ACL) filtering rules. Which of the following statements correctly describe how these security mechanisms function? (Select TWO.)

A network administrator is setting up an IPsec remote access VPN tunnel for mobile workers. Place the steps of the Internet Key Exchange (IKE) negotiation process in the correct chronological order from first to last.

Match each out-of-band management technology on the left to the enterprise infrastructure recovery scenario on the right for which it serves as the most appropriate solution.

A network administrator is diagnosing Layer 2 operational issues across several switch ports in an enterprise campus network. Match each observed switch log message or diagnostic symptom on the left to its correct underlying root cause on the right.

A network security administrator is configuring wireless security policies for remote retail branches that lack 802.1X/RADIUS authentication infrastructure. The new security baseline requires protecting modern client connections against offline dictionary attacks and wireless deauthentication frame spoofing. However, legacy Wi-Fi 5 point-of-sale terminals that only support WPA2-Personal (AES-CCMP) and do not support 802.11w Protected Management Frames (PMF) must continue operating on the same SSID until phase-out. Which of the following security settings must the administrator configure on the wireless controllers to meet all operational and security criteria? (Select TWO)

A network security technician is configuring a secure wireless deployment for a financial institution's regional office. Organization policy requires individual user accounting and authentication against a central Active Directory infrastructure via a RADIUS server, along with enforced protection against deauthentication and management frame spoofing attacks. Which wireless security deployment standard and authentication combination fully satisfies these organization requirements?

A network security administrator is evaluating network security monitoring appliances for an enterprise network segment that hosts time-sensitive industrial SCADA controllers. The team is deciding between installing an out-of-band passive Network Intrusion Detection System (NIDS) fed by a hardware network TAP versus an in-band inline Network Intrusion Prevention System (NIPS). Which of the following statements correctly identify operational trade-offs or characteristics of deploying the passive NIDS architecture over the inline NIPS architecture? (Select TWO.)

A network administrator is troubleshooting an isolated server at a remote site after its operating system suffers a complete kernel panic. Because the host OS is non-functional, all in-band management sessions are disconnected and unresponsive. The administrator must view pre-boot POST and BIOS screens and perform a hard power cycle on the system without physical access. Which of the following deployment strategies best achieves these out-of-band management objectives?

A network administrator needs to select remote access mechanisms for data center infrastructure that provide secure, encrypted command-line management or function out-of-band during a primary production network outage. Which of the following options satisfy these requirements? (Select TWO)

A network security analyst is reviewing logs and architecture reports following a series of coordinated security incidents across an enterprise environment. Match each network attack type on the left with its corresponding operational vector or primary mechanism on the right.

A network technician is configuring environmental controls for a server room housing sensitive equipment. To minimize the risk of electrostatic discharge (ESD) damaging internal hardware components, which environmental measure should be maintained within standard recommended thresholds?

Engineers troubleshooting a remote access IPsec IKEv2 VPN deployment notice that clients can successfully complete initial IKE negotiations over UDP port 500 when assigned a public IPv4 address directly. However, when telecommuters attempt to connect from behind residential routers performing Port Address Translation (PAT), Phase 2 negotiation fails and no encrypted data passes through the tunnel because the intermediate PAT router drops IP Protocol 50 (ESP) packets. Which configuration modification on the VPN gateway will resolve this connection issue while preserving payload encryption for telecommuters?

A network technician needs to inspect live network traffic and decode packet headers passing through a server's network interface to troubleshoot an application issue. Which of the following tools are packet analyzers designed for this task? (Select TWO.)

A network administrator is configuring a remote access VPN for external contractors who need access to internal web-based applications. To comply with corporate security policies, the solution must allow access directly through a standard web browser over TCP port 443 without requiring the installation of dedicated endpoint client software on contractor devices. Which VPN technology should the administrator deploy?

A network administrator is configuring remote access VPN user authentication to forward requests to a central server using RADIUS. Which transport protocol and default destination port does RADIUS use for authentication traffic?