Tüm alıştırma soruları

A network audit requires verifying that wireless security standards across company facilities are aligned with their correct cryptographic algorithms and integrity controls. Match each wireless security protocol on the left with its corresponding encryption cipher and integrity mechanism on the right.

A network technician notices severe network performance degradation on a workstation connected to a switch port. Checking the switch port statistics shows a high count of late collisions and alignment errors, while the workstation's network interface card is manually set to full-duplex. Which of the following is the most likely cause of this issue?

A network engineering team is preparing to implement a major SD-WAN traffic steering policy update across all enterprise branch locations. Place the standard change management steps in the correct chronological order from first to last.

Match each network attack vector to its primary technical mechanism or observed network anomaly.

A network administrator is troubleshooting connectivity failures for dynamic clients in a newly provisioned branch office. Users on VLAN 102 ($10.102.4.0/22$) report that their workstations periodically lose connection to local corporate resources and display IP addresses in the $169.254.x.x$ range. The centralized dual DHCP redundant servers reside on VLAN 10 ($10.10.1.5$ and $10.10.1.6$).

Upon reviewing the Core L3 Switch configuration and DHCP server diagnostics, the administrator notes the following:
text Interface VLAN 102 description Workstation_Subnet ip address 10.102.4.1 255.255.252.0 ip helper-address 10.10.1.5 ! DHCP Server Scope Statistics (10.102.4.0/22): Active Leases: 1022 / 1022 (100% Utilized) Default Lease Time: 8 Days Environment Type: High-density roaming laptop conference area

Which of the following actions should the network administrator perform to resolve the IP address assignment failures and ensure high-availability DHCP relay operations? (Select TWO.)

A network administrator is troubleshooting an 802.1Q trunk connection between Switch-1 and Switch-2. Switch-1 is configured with a native VLAN of 10 and allows VLANs 10, 20, and 30 across its trunk interface GigabitEthernet0/1. Switch-2 has its GigabitEthernet0/1 trunk interface configured with a native VLAN of 20 and allows only VLANs 10 and 20. Console logs indicate recurring CDP native VLAN mismatch messages, and workstations residing on VLAN 30 attached to Switch-1 are completely unable to communicate with VLAN 30 hosts attached to Switch-2.

Which TWO configuration adjustments must be performed on Switch-2 to resolve the console error logs and restore VLAN 30 trunking communication?

A network administrator is troubleshooting an issue where client workstations can resolve standard hostnames, but queries returning large DNS Security Extensions (DNSSEC) records fail to resolve. To isolate the issue, the administrator runs the following command from an affected host:

$ dig +tcp @10.0.0.53 sec.enterprise.local +dnssec
;; Communications error to 10.0.0.53#53(10.0.0.53): connection timed out

Standard `dig` queries executed without the `+tcp` flag complete successfully over UDP. Which of the following is the most likely root cause of this resolution failure?

A network administrator is troubleshooting an issue where a database server at $192.168.50.10/24$ cannot establish a connection to a cloud backup endpoint at $172.24.100.45/24$. The database server is configured with $192.168.50.1$ as its default gateway.

A traceroute executed from the database server produces the following output:

C:\> traceroute 172.24.100.45
Tracing route to 172.24.100.45 over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.50.1
2 2 ms 1 ms 2 ms 10.200.1.1
3 * * * Request timed out.
4 * * * Request timed out.

The administrator connects to router $10.200.1.1$ and reviews its routing table and interface status:

Gateway of last resort is 10.200.2.2 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.200.2.2
C 10.200.1.0/30 is directly connected, GigabitEthernet0/0
C 192.168.50.0/24 is directly connected, GigabitEthernet0/1
S 172.24.0.0/16 [1/0] via 10.200.3.2

GigabitEthernet0/0 is up, line protocol is up (IP 10.200.1.1/30)
GigabitEthernet0/1 is up, line protocol is up (IP 192.168.50.1/24)
GigabitEthernet0/2 is down, line protocol is down (IP 10.200.3.1/30)

Which of the following is the root cause of the connectivity failure?

A network engineer is troubleshooting an enterprise 10GBASE-SR multimode fiber backbone run measuring 350 meters that connects two core switches across a campus facility. The optical link fails to bring up the interface. An initial power check indicates high optical attenuation along the path, but both transceivers and patch cables test normally. Which diagnostic tool should the engineer use to locate the precise distance to the physical break or microbend within the fiber optic cable run?

A network administrator runs the `ipconfig` command on a user's workstation that is experiencing network connectivity issues. The command output displays an IPv4 address of $169.254.108.42$ with a subnet mask of $255.255.0.0$. Which of the following best explains the root cause of this configuration?

During a network maintenance window, a network administrator configures an extended Access Control List (ACL) on a Layer 3 core switch to restrict access from the Engineering VLAN subnet ($10.120.4.0/22$) to the Data Center subnet ($10.120.32.0/24$). Shortly after implementation, users report that while HTTP web access to an internal application server at $10.120.32.50$ is functional, secure HTTPS sessions to the same server fail to establish.

The administrator inspects the switch configuration using `show ip access-lists ENG_TO_DC` and retrieves the following output:

text
Extended IP access list ENG_TO_DC
10 permit tcp 10.120.4.0 0.0.3.255 host 10.120.32.50 eq 80
20 deny ip 10.120.4.0 0.0.3.255 10.120.32.0 0.0.0.255
30 permit tcp 10.120.4.0 0.0.3.255 host 10.120.32.50 eq 443

Which of the following identifies the root cause of the HTTPS connectivity failure?

A network security technician is analyzing packet captures from an enterprise user segment after host traffic was unexpectedly intercepted. The packet capture shows multiple unsolicited ARP responses associating the default gateway's IP address with an unauthorized host's MAC address. Which of the following options correctly identify the mechanism behind this incident and an effective defense? (Select TWO.)

A systems engineer is troubleshooting a name resolution failure for an internal application alias, `app.corp.net`. When querying the primary DNS server directly using `nslookup`, the following output is returned:

text
$ nslookup app.corp.net 10.150.1.10
Server: dns01.corp.net
Address: 10.150.1.10

** server can't find app.corp.net: NXDOMAIN

Upon reviewing the primary zone configuration, the administrator confirms that `app.corp.net` exists as a valid CNAME record mapping to `web-prod-01.internal.net`. However, `web-prod-01.internal.net` is hosted in a separate private zone that is not configured on or reachable by `dns01.corp.net`.

Which of the following best explains why the DNS server returns an NXDOMAIN error for the CNAME query?

A network technician is investigating a client workstation that fails to resolve the internal hostname `app.finance.local`. Place the following diagnostic steps in the correct order, starting from initial client configuration verification through transport layer troubleshooting.

A network administrator investigating wireless network instability observes that corporate laptops are repeatedly disconnected from the primary access point after receiving spoofed 802.11 management frames. Immediately following these disconnections, several client devices automatically connect to a nearby unauthorized access point broadcasting the same Service Set Identifier (SSID). Which of the following attack types is primary driver behind this network disruption?

A network security engineer is configuring a central remote-access VPN gateway to integrate with an external authentication server. According to the organization's compliance policy, the selected authentication protocol must encrypt the entire packet payload during transit and strictly separate authentication from authorization duties. Which protocol should the engineer implement on the VPN gateway?

A network technician is troubleshooting a workstation that cannot communicate with servers on remote subnets. The technician executes `ipconfig` on the workstation and observes the following network settings:

text
IPv4 Address. . . . . . . . . . . : 192.168.1.50
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1

The workstation can ping local host $192.168.1.10$, but all outbound traffic to external networks fails. Which of the following is the root cause of the connectivity failure?

A network administrator is troubleshooting an issue where a client workstation fails to connect to an internal database server named `db01.prod.lan`. The technician executes two commands on the workstation and observes the following output:

C:\Users\Admin> ipconfig /displaydns

Record Name . . . . . : db01.prod.lan
Record Type . . . . . : 1
Time To Live . . . . : 86400
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 10.20.4.150

C:\Users\Admin> nslookup db01.prod.lan 192.168.1.10
Server: dns01.corp.lan
Address: 192.168.1.10

Name: db01.prod.lan
Address: 10.20.4.200

Which TWO of the following statements correctly identify the cause of the connection failure and the required step to resolve it?

A financial firm is upgrading the wireless infrastructure across its corporate headquarters to comply with updated security policies. The engineering team must implement a wireless architecture that enforces centralized, individual user authentication against an existing RADIUS server and utilizes 256-bit Galois/Counter Mode Protocol (GCMP-256) for data confidentiality. Which wireless security deployment combination directly fulfills these mandate requirements?

Match each switching troubleshooting symptom or log message on the left with its underlying root cause on the right.