Tüm alıştırma soruları

A network security administrator applies a new stateless extended IPv4 Access Control List (ACL) to interface $GigabitEthernet0/0$ in the inbound direction on a perimeter router. The interface serves an internal management VLAN on subnet $192.168.4.0/24$. The objective of the configuration is to permit local network devices to send SNMP trap notifications to an off-site monitoring server at IP address $198.51.100.45$ listening on UDP port 162.

The technician configures a single rule entry:
`access-list 102 permit udp 192.168.4.0 0.0.0.255 host 198.51.100.45 eq 162`

Immediately after applying the ACL with `ip access-group 102 in`, users on the $192.168.4.0/24$ subnet report a complete loss of web access (TCP ports 80/443) and DNS name resolution (UDP port 53) to all external destinations.

Which of the following identifies the root cause of this network outage?

A network engineer is analyzing physical layer and spectrum analysis logs to diagnose radio frequency (RF) propagation and interference anomalies across an enterprise campus. Match each RF phenomenon or interference condition to its corresponding diagnostic observation.

A network administrator is establishing a baseline hardening configuration on a newly deployed edge switch. Which of the following administrative practices should be implemented to secure the management plane of the device? (Select TWO.)

A network security team is updating its enterprise defense framework to align existing technical controls with core security principles. Match each core security principle on the left with its corresponding technical control implementation on the right.

An enterprise network engineer is designing a physical connectivity architecture between two secure server rooms located on separate floors of a shared multi-tenant commercial facility. High-throughput fiber optic cabling must pass through unmonitored building maintenance risers accessible to third-party facility personnel. The security policy requires real-time automated alerts if physical tampering, unauthorized bending, or physical tapping of the conduit pathway occurs. Which physical security control should the engineer implement to meet this requirement?

A network engineer is designing a high-availability network topology for a cluster of mission-critical application servers. The design requires active-active link aggregation, increased total bandwidth, and seamless link failover across two separate physical access switches without Spanning Tree Protocol (STP) placing any redundant interface into a blocking state. Which TWO of the following configurations or technologies must be implemented to fulfill these requirements?

A enterprise network administrator receives multiple urgent tickets reporting intermittent database connection timeouts immediately following an after-hours core switch firmware upgrade. Place the following troubleshooting steps in the exact chronological sequence mandated by the official CompTIA Network+ Troubleshooting Methodology, starting with the earliest step and ending with the final step.

An IT technician working in a newly commissioned remote network facility reports experiencing frequent static electric shocks when touching metallic server racks. Subsequent monitoring reveals that the temperature is maintained at $20^{\circ}\text{C}$, but relative humidity levels inside the room have dropped to $15\%$. Which of the following environmental security controls should be adjusted to minimize electrostatic discharge (ESD) risks to sensitive network hardware?

After conducting diagnostic tests on a malfunctioning core switch, a systems engineer confirms their theory that a corrupted firmware image is causing routing table drops. Following the CompTIA troubleshooting methodology, which of the following actions should the engineer take next? (Select TWO.)

A network security administrator is documenting legacy and modern wireless security protocols for a corporate compliance audit. Match each wireless security standard on the left with its corresponding encryption cipher and integrity mechanism on the right.

A network technician is responding to an outage and needs to follow the standard CompTIA troubleshooting process. Place the following primary steps of the CompTIA Network+ troubleshooting methodology in the correct chronological order from first step to final step.

A network security team investigates an incident where employees on a corporate LAN segment report intermittent connectivity drops and redirection to an untrusted portal. Network packet captures reveal two distinct anomalous activities: a rapid influx of DHCP DISCOVER frames generated using spoofed source MAC addresses to exhaust available IP pool leases, followed by unauthorized DHCP ACK messages directing hosts to use an attacker-controlled default gateway. Which TWO of the following attack types were executed during this incident?

A network engineering team needs to update the primary TACACS+ server IP addresses and authentication keys across all wireless LAN controllers in an enterprise network. To adhere to organizational governance and minimize service disruption, the team must follow the standard change management lifecycle.

Place the following change management steps in the correct chronological order from first to last.

A network engineer is configuring stateless Access Control Lists (ACLs) on a Layer 3 switch to secure communication between an application tier subnet ($172.16.10.0/24$) and a database tier subnet ($10.20.30.0/24$). The application servers must establish connection requests to MySQL database instances listening on TCP port $3306$. Because the filtering device is a stateless ACL rather than a stateful firewall, bidirectional rules must be defined explicitly. Which TWO of the following ACL entries must be configured on the database interface to allow this traffic flow while maintaining state awareness manually?

A mobile workstation user moves across an office floor and suddenly loses access to network resources. Upon checking the client's network settings, a technician observes an IP address of $169.254.112.45$. What is the primary cause of this wireless connectivity issue?

A network administrator is troubleshooting a user workstation that cannot connect to an internal website named `server1.corp.local`. The technician runs the `nslookup` command on the workstation and receives the following output:

C:\Users\User> nslookup server1.corp.local
Server: dc01.corp.local
Address: 10.0.0.10

*** dc01.corp.local can't find server1.corp.local: Non-existent domain

Which of the following is the most likely cause of this name resolution failure?

A network engineer is investigating complex wireless performance issues across an enterprise facility. Match each observed wireless diagnostic metric/symptom on the left with its most likely root cause or underlying phenomenon on the right.

Mobile laptop users in an office building report that as they walk from the hallway into an adjacent conference room, their devices maintain a weak Wi-Fi connection to the distant hallway access point (AP) rather than connecting to the closer AP inside the conference room. A site survey reveals that the hallway AP is transmitting at maximum power ($20\text{ dBm}$), while client laptops transmit at standard power ($13\text{ dBm}$). Which of the following actions will BEST resolve this sticky client issue and promote seamless roaming?

Following an internal security audit of enterprise network infrastructure, a network engineer must remediate vulnerabilities on several Layer 3 switches. The audit report specifically highlighted risks associated with management plane traffic eavesdropping and VLAN hopping exploits on trunk links. Which of the following TWO device hardening measures should the engineer implement to directly address these findings? (Select TWO.)

A network administrator is troubleshooting name resolution issues on a Linux workstation. The administrator runs the command `dig @10.0.0.5 webserver.company.local` and receives the following output:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;webserver.company.local. IN A

Which of the following is the most accurate interpretation of this command output?