Tüm alıştırma soruları

A security operations analyst is investigating why a corporate workstation cannot reach a newly provisioned internal web application at `api.corp.local`. The analyst executes two diagnostic diagnostic commands from the client terminal:

text
C:\Users\Analyst> nslookup api.corp.local
Server: router.home.gateway
Address: 192.168.1.1

Non-authoritative answer:
Name: api.corp.local
Address: 203.0.113.45

C:\Users\Analyst> dig @10.20.4.5 api.corp.local A +short
10.20.4.200

Based on the output above, which of the following is the most likely root cause of this name resolution discrepancy?

A network administrator is configuring remote monitoring across an untrusted WAN link to collect system metrics and notifications from branch office switches. The administrator must implement a security solution that ensures monitoring credentials and packet payloads remain encrypted for confidentiality, while also verifying packet integrity and authenticating the transmitting switch. Which of the following protocol configurations best satisfies these security requirements?

A network technician is investigating a total signal loss along a long optical fiber cable run connecting two data center racks. Which diagnostic tool should the technician use to measure the exact distance to the location of the physical fiber break?

A network engineer is troubleshooting wireless performance issues in a multi-story office building. Wireless site survey logs indicate that client devices in crowded conference rooms remain stickily connected to distant access points (APs) with a weak RSSI of -83 dBm, causing slow throughput and dropped VoIP calls. Simultaneously, the 2.4 GHz spectrum is severely saturated with high client density. Which of the following actions should the engineer take to resolve these wireless connectivity and coverage issues? (Select TWO.)

A network administrator is investigating an issue where a workstation configured with IPv4 address $192.168.20.45/24$ cannot connect to an internal HTTPS server at $10.50.10.100:443$. The network path spans multiple VLANs across a Layer 3 switch, a core router, and perimeter firewalls. Following a systematic network troubleshooting methodology, place the diagnostic steps in the correct logical sequence to systematically isolate whether the root cause lies within the host setup, default gateway reachability, routing table entries, or ACL filtering.

A network security engineer is performing baseline administrative hardening on a newly deployed edge router to secure its management plane before production deployment. In what correct operational sequence should the engineer execute the following administrative hardening steps to establish secure remote management and enforce network access controls?

A network engineering team needs to upgrade the operating system across core firewall pairs to patch a critical zero-day vulnerability. Place the standard change management stages in the correct chronological order from first to last.

During a routine wireless performance audit of a corporate facility, an administrator observes severe packet loss and elevated frame retransmissions among clients connected to 2.4 GHz access points. Signal strength measurements indicate strong coverage (-55 dBm) across all work areas. Inspection of the wireless controller configuration reveals that adjacent access points are operating on channels 1, 2, 4, and 5. Which of the following represents the primary root cause of this connectivity issue?

A network administrator is documenting the cryptographic baselines for wireless security standards across company facilities. Match each wireless security protocol standard on the left with its primary encryption protocol and integrity mechanism on the right.

A network administrator is deploying security controls on a Layer 3 switch interface connecting a workstation VLAN ($172.20.10.0/24$) to an internal Voice over IP (VoIP) server ($172.20.90.25$). The policy requires allowing standard SIP call signaling and RTP media streams while restricting all other communication from the workstation subnet to the VoIP server. Which of the following statements correctly describe the requirements for this Access Control List (ACL) deployment? (Select TWO.)

A network administrator runs the following query on a client workstation to test hostname resolution:

> nslookup webserver.corp.local
Server: dns1.corp.local
Address: 10.0.0.10

*** dns1.corp.local can't find webserver.corp.local: Non-existent domain

The administrator verifies that the target server is powered on, fully functional, and reachable directly by its IP address. Which of the following is the most likely cause of this issue?

A network technician executes `ipconfig` on a workstation that is unable to reach local network resources. The output displays an IPv4 address of $169.254.12.89$ and a subnet mask of $255.255.0.0$. Which of the following is the most likely cause of this issue?

A network technician is systematically troubleshooting a Linux workstation that fails to resolve an internal fully qualified domain name (FQDN). Arrange the following diagnostic steps in the correct order, starting from local client configuration inspection and escalating through to upstream network infrastructure isolation.

A network administrator is troubleshooting an intermittent physical layer failure on a newly provisioned 90-meter Category 6A unshielded twisted-pair (UTP) link connecting a core switch to a server farm switch. A standard continuity test verifies 1-to-1 pin mapping with no opens or shorts. However, when the link auto-negotiates to 10GBASE-T, the switch interfaces report extremely high cyclic redundancy check (CRC) error counts and dropped frames, whereas forcing the link speed down to 1000BASE-T yields stable performance. Which diagnostic tool should the administrator use to pinpoint the exact location and nature of this signal degradation along the cable run?

Employees in a newly renovated office suite report that laptops connected to the 5 GHz Wi-Fi network experience severe signal drop-offs and low throughput when moving inside glass-walled conference rooms. However, clients connected to the 2.4 GHz wireless network maintain stable signal strength throughout the entire floor. Diagnostic site survey tools reveal a significant drop in RSSI specifically when receiving 5 GHz signals behind the newly installed tinted glass walls. Which of the following is the primary cause of the performance degradation on the 5 GHz band?

A network administrator needs to establish a comprehensive network performance monitoring strategy across remote branch routers. The solution must securely collect hardware state metrics (such as CPU utilization and interface counters) while also capturing granular flow-level statistics (such as packet loss and jitter) for latency-sensitive applications. Which TWO performance telemetry mechanisms should the administrator implement to fulfill these requirements?

A network administrator applies the following extended Access Control List (ACL) to the inbound direction of interface GigabitEthernet0/1 on a branch router to allow subnet `192.168.50.0/24` access to a web server at `10.10.20.100`:

text
Router# show access-lists 105
Extended IP access list 105
10 permit tcp 192.168.50.0 0.0.0.255 host 10.10.20.100 eq 443
20 permit tcp 192.168.50.0 0.0.0.255 host 10.10.20.100 eq 80

Immediately after applying this ACL, workstations on the `192.168.50.0/24` subnet report that they can no longer reach external internet sites or perform domain name resolution via the internal DNS server at `10.10.10.5`. Which of the following best explains the root cause of this connectivity failure?

A network administrator deployed a new internal database server named `db-primary` with IP address $172.16.45.10$ inside the `internal.corp.net` DNS zone. Users situated on workstations within the `sales.corp.net` domain report that querying short hostname `db-primary` fails, whereas querying the fully qualified domain name (FQDN) succeeds.

The administrator executes the following troubleshooting commands from a user workstation in `sales.corp.net`:

C:\> nslookup db-primary
Server: dc1.sales.corp.net
Address: 172.16.10.5

*** dc1.sales.corp.net can't find db-primary: Non-existent domain

C:\> nslookup db-primary.internal.corp.net
Server: dc1.sales.corp.net
Address: 172.16.10.5

Name: db-primary.internal.corp.net
Address: 172.16.45.10

Which of the following configuration changes will resolve the short hostname resolution failure for all workstations in `sales.corp.net`?

A network administrator is designing a wireless deployment for a corporate branch office. Security policy mandates individual user accountability, centralized credential management using an existing 802.1X RADIUS infrastructure, and enterprise-grade encryption. A junior technician proposes deploying WPA3-Personal with Simultaneous Authentication of Equals (SAE) to avoid the administrative overhead of deploying and managing digital certificates on client devices. Which of the following best explains why the technician's proposal fails to satisfy the organizational security compliance baseline?

A user reports that a recently updated internal web application still directs their browser to an obsolete IP address on their local client machine. In what order should a network technician perform the following steps to systematically troubleshoot and resolve this stale name resolution issue?