Tüm alıştırma soruları

A network switch running a distance-vector dynamic routing protocol detects that a directly connected link to a remote network segment has failed. To immediately inform neighbouring routers that the route is down and prevent routing loops during convergence, the switch broadcasts a routing update advertising the metric for that failed route as infinity (unreachable). Which dynamic routing mechanism is being demonstrated in this scenario?

A network architect is designing a wireless infrastructure across a multi-floor hospital wing to support real-time telemetry equipment and high-definition video consultations. To maximize throughput, an initial plan suggested configuring all $5\text{ GHz}$ access points (APs) to use $80\text{ MHz}$ channel bonding. However, a post-installation spectral analysis reveals high levels of co-channel interference (CCI) due to floor-to-floor signal bleed and limited available spectrum. Which of the following channel management adjustments is the most effective design strategy to mitigate CCI while maintaining reliable wireless performance?

A network administrator is deploying a centralized log management collector that operates using syslog over UDP port $514$. To enable automated client discovery across the enterprise domain, the administrator needs to configure a DNS record that explicitly specifies the service name, transport protocol, port number, priority, weight, and target hostname. Which of the following DNS record configurations correctly meets this requirement?

A network administrator is creating an Access Control List (ACL) on an enterprise router to allow branch office workstations to obtain initial authentication tickets from an internal Active Directory Domain Controller. Which of the following port and transport protocol combinations must be permitted through the firewall to enable this Kerberos ticket-granting service?

A network administrator is implementing IPv6 addressing and client deployment mechanisms on an enterprise VLAN segment. Which of the following statements regarding IPv6 address formatting, DNS resolution, and autoconfiguration are correct? (Select TWO.)

A network administrator is configuring network address translation on an edge router for a company network. An internal public-facing web server at $192.168.1.50$ must be reachable from the internet at all times using a dedicated public address $203.0.113.10$. At the same time, 250 internal user workstations on the $192.168.1.0/24$ subnet require outbound internet connectivity using the single WAN interface IP address $203.0.113.1$. Which combination of NAT translation types should the administrator implement to satisfy both requirements?

An active network link fails on an access switch operating under standard IEEE 802.1D Spanning Tree Protocol (STP). In what chronological order do the switches process and propagate this event across the switched network?

A network administrator is auditing enterprise DNS configurations. Match each DNS resource record type on the left with its correct functional description on the right.

During a wireless network site audit of an enterprise facility, a network technician discovers that four access points (APs) installed sequentially along a long corridor are operating on 2.4 GHz channels 1, 4, 8, and 11, respectively. Client devices connected near the middle of the corridor experience high frame retransmission rates and degraded throughput despite indicating strong signal strength. Which modification to the wireless spectrum configuration will best eliminate adjacent channel interference while preserving continuous coverage?

A network administrator is configuring the management plane of an enterprise router to comply with baseline device hardening standards. The security policy mandates that all remote command-line management sessions use encrypted transport protocols, idle administrative sessions terminate automatically after $5$ minutes of inactivity, and VTY access be restricted strictly to hosts within the internal management subnet ($10.10.50.0/24$). Which set of configuration commands on the virtual terminal (VTY) lines correctly enforces this hardening policy?

A network engineer is preparing to integrate a new remote site into the corporateWAN over an IPsec VPN tunnel. Before configuring the routing policies and IPsec endpoints, the engineer needs to review a document that details subnets, IP address assignments, VLAN boundaries, and virtual interface routing paths, independent of physical device locations and rack space. Which documentation artifact should the engineer consult to verify these logical data paths and IP network boundaries?

An infrastructure engineer is investigating an incident where telemetry data feeds from an edge gateway fail to reach a central monitoring cluster. After analyzing packet captures, the engineer successfully confirms that an MTU mismatch along the GRE tunnel path is causing fragmented packets to be dropped. Which action represents the next step the engineer should take according to the CompTIA troubleshooting methodology?

An organization maintains a database server that undergoes a full backup every Sunday at 01:00 and daily differential backups at 01:00 from Monday through Saturday. If the database server crashes on Friday at 15:00, which sequence of backup restorations must the network administrator perform to restore the database to its most recent valid state prior to the failure?

Match each remote management technology with its primary operational capability or administrative scenario.

During a security audit, a network administrator discovers that an rogue laptop plugged into an unmanaged wall jack successfully established an 802.1Q trunking link with the local access switch by sending dynamic trunking negotiation messages. This enabled the device to capture and inject traffic across multiple internal VLANs. Which of the following network attack types did the rogue device execute?

A network technician is configuring an out-of-the-box managed network switch to establish a secure management baseline prior to production deployment. Arrange the implementation steps in the correct chronological order from first to last to properly configure hardened remote access.

A network engineer is provisioning a dedicated VLAN for an isolated building management network that requires static IP address assignments for exactly 27 environmental control sensors. To conserve IPv4 address space while accommodating all devices, which subnet mask should be configured on the network interface?

A network engineer is deploying a stateless Access Control List (ACL) on a router WAN interface to allow internal hosts on subnet $172.16.10.0/24$ to access an external HTTPS web service hosted at $198.51.100.25$. The engineer configures an outbound ACL rule permitting TCP traffic from source subnet $172.16.10.0/24$ to destination host $198.51.100.25$ on destination port $443$. However, users report that connection attempts to the external web service continuously time out. Which of the following best explains why the connection fails and identifies the necessary solution?

When evaluating dynamic routing protocol operations within an enterprise network, which of the following operational characteristics accurately distinguish link-state routing protocols from distance-vector routing protocols? (Select TWO)

A network systems administrator is auditing the public DNS zone configuration for an enterprise domain ($enterprise.example$) to support a new email server deployment. The administrator runs the following diagnostic command to inspect existing records:

text
; <<>> DiG 9.16.1-Ubuntu <<>> enterprise.example TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41209
;; QUESTION SECTION:
;enterprise.example. IN TXT

;; ANSWER SECTION:
enterprise.example. 3600 IN TXT "v=spf1 ip4:198.51.100.25/28 -all"

To complete the setup for receiving inbound email and ensuring valid domain authentication, which TWO DNS resource records must be properly configured in the forward lookup zone?