Tüm alıştırma soruları

A system administrator discovers an unauthorized wireless access point broadcasting the exact same network name (SSID) as the corporate Wi-Fi network, attempting to trick user devices into connecting to it. Which of the following network attack types best describes this scenario?

A network engineer is configuring a stateless Access Control List (ACL) on a router interface connecting an internal subnet ($10.100.10.0/24$) to an external gateway. To permit outbound DNS name resolution to a public DNS server ($8.8.8.8$), the engineer applies the following outbound ACL entry on the router interface:

`permit udp 10.100.10.0 0.0.0.255 host 8.8.8.8 eq 53`

After applying this configuration, internal client hosts are still unable to resolve domain names. Packet captures confirm outbound DNS query packets are leaving the interface, but clients never receive answers. Which of the following best explains why the DNS resolution is failing?

A network administrator notices that remote workers connected via a full-tunnel VPN are causing severe bandwidth saturation at the corporate perimeter by streaming internet media through the corporate gateway. To alleviate congestion, the administrator plans to modify the client configuration to allow split tunneling. Which of the following describes the primary security risk introduced by enabling split tunneling?

Match each Intrusion Detection/Prevention System (IDS/IPS) architectural model or detection mechanism on the left to its corresponding operational deployment scenario on the right.

A network technician is configuring a external perimeter firewall to permit incoming remote access VPN connections for users utilizing the Secure Socket Tunneling Protocol (SSTP). Which transport protocol and port number combination must be opened on the firewall for SSTP connections to succeed?

A lead systems engineer is establishing physical and environmental security controls across a newly constructed high-density enterprise data center. Match each specialized environmental or power control mechanism to its primary protective function.

Match each authentication protocol or network security framework to its primary operational characteristic.

During a security audit of a dual-stack enterprise LAN, network administrators discover that several IPv4-configured workstations are unexpectedly redirecting web traffic to an untrusted external IP address. Packet captures reveal that these workstations regularly receive unsolicited ICMPv6 Router Advertisement (RA) packets from a non-gateway host. These RA frames specify an unknown link-local IPv6 address as the default gateway and assign a rogue IPv6 DNS server. Which of the following statements accurately describe this network attack and its operational impact? (Select TWO.)

A network technician is auditing a campus network layout where two Layer 3 switches operate as redundant gateways for a corporate VLAN. Users report degraded throughput during high-traffic periods, and analysis reveals that traffic regularly traverses the inter-switch trunk link to reach the active gateway. Which TWO configuration steps should the technician verify or implement to ensure optimal high-availability traffic paths and prevent unnecessary trunk saturation? (Select TWO.)

A network engineer is configuring a site-to-site VPN tunnel between two enterprise office locations. Unicast IP traffic successfully traverses the tunnel using standard IPsec transport. However, OSPF routing protocol neighbor adjacencies fail to form across the VPN, preventing dynamic routing updates from being exchanged. Which solution should the engineer implement to enable dynamic routing protocols across the encrypted connection?

A network administrator is conducting a post-audit baseline security hardening on an enterprise edge router. The audit report specifies three critical remediation goals: secure the administrative management plane, mitigate unauthorized VLAN hopping attacks across 802.1Q trunk links, and establish cryptographically secured remote device telemetry. Which of the following baseline configuration sets fully satisfies all three audit requirements?

An organization is enhancing the physical access controls for its core data center. Management requires a solution that strictly enforces single-person entry and prevents unauthorized individuals from tailgating behind an authenticated employee into the server hall. Which physical access control mechanism should the network administrator deploy to best satisfy this requirement?

A network security administrator is mapping recently deployed enterprise security controls to core security principles. Match each technical implementation on the left with the primary security concept or CIA triad pillar it addresses on the right.

A network operations team plans to upgrade the core layer-3 switches in a healthcare system's primary data center. Place the following change management phases in the correct sequence from start to finish.

A network technician needs to perform the initial configuration on a brand-new managed switch that has no IP address assigned to its interfaces. Which of the following connection methods should the technician use to access the device command-line interface?

A network technician is troubleshooting a point-to-point wireless bridge spanning 250 meters between two corporate buildings. Signal strength readings indicate a strong Received Signal Strength Indicator (RSSI) of -51 dBm, but the link suffers from high packet corruption, fluctuating bit rates, and intermittent dropouts whenever large cargo trucks cross the intervening parking lot. Which of the following is the most likely cause of this wireless performance issue?

A network technician deploys three wireless access points across an office building to provide coverage on the 2.4 GHz band. Users report frequent packet loss, slow speeds, and dropped connections when moving near areas covered by multiple access points. Upon inspecting the wireless controller, the technician observes that the access points are manually configured to operate on channels 1, 2, and 3, respectively. Which of the following is the most likely cause of the wireless performance degradation?

A security technician observes traffic logs indicating an external host is conducting a half-open TCP SYN scan against a gateway firewall. Which of the following statements accurately describe the operational characteristics of a TCP SYN stealth scan? (Select TWO.)

Following an unscheduled shutdown of a secondary Computer Room Air Handler (CRAH) unit in a high-density data center, network engineers observe water droplets forming on core switch chassis enclosures and optical transceiver modules. To compensate for the reduced cooling capacity, the remaining active CRAH unit automatically dropped its discharge air supply temperature to $10^\circ\text{C}$ ($50^\circ\text{F}$) while maintaining a relative humidity setpoint of $70\%$. Which environmental mechanism directly accounts for the moisture condensation on the operating network hardware?

A network technician needs to safeguard a remote equipment room against electrostatic discharge (ESD) and prevent unauthorized physical tampering with individual server hardware inside shared enclosures. Which TWO of the following controls should be deployed to meet these specific requirements? (Select TWO)