Tüm alıştırma soruları

2237 soru

Tüm türler2,237 Çoktan seçmeli1,150 Çoklu seçim488 Sayısal30 Eşleştirme350 Sıralama201 Kısa cevap18

A network administrator is designing an out-of-band (OOB) management solution for a remote distribution facility to ensure administrative access and recovery capability during primary WAN transport outages or device hangs. Which of the following implementations should be included to satisfy these out-of-band management objectives? (Select TWO.)

Geçerli olan tümünü seçin

Connect the serial console ports of critical routers and switches to a dedicated console server equipped with a cellular modem.

Configure interactive command-line SSH management sessions to communicate over UDP instead of TCP across the remote access connection.

Deploy a remote switched Power Distribution Unit (PDU) to allow administrators to power-cycle unresponsive network hardware remotely.

Establish Telnet access on standard port 22 across the public internet as the primary fallback protocol during outages.

Cevabı ve açıklamayı göster

Cevap: Connect the serial console ports of critical routers and switches to a dedicated console server equipped with a cellular modem.; Deploy a remote switched Power Distribution Unit (PDU) to allow administrators to power-cycle unresponsive network hardware remotely.

Cevap

The out-of-band management solution requires connecting serial console ports to a cellular-enabled console server and deploying a switched PDU for remote hardware power cycling.

Out-of-band management requires access pathways completely decoupled from the primary network payload path. Connecting network device console ports to a cellular terminal server provides dedicated CLI control during WAN outages. Additionally, installing a switched Power Distribution Unit allows administrators to perform remote power restarts on non-responsive hardware.

Adım Adım Çözüm

Identify the primary requirement for out-of-band management access during network transport outages.

Recognize that access must pass through a separate physical or wireless medium, such as a cellular modem connected to a serial console server.

In-band administrative channels depend on working network routing and WAN links, whereas out-of-band cellular access remains operational independently.

Identify the recovery mechanism for non-responsive network appliances that cannot process CLI commands.

Select a remotely managed, switched Power Distribution Unit (PDU).

Switched PDUs enable administrators to perform hard power reboots on specific outlets over the out-of-band link when devices experience kernel panics or lockups.

Evaluate transport layer protocols and port security standards for remote management.

Confirm SSH over TCP port 22 is used for secure shell access, while avoiding unencrypted Telnet (port 23) and incorrect UDP transport assignments.

SSH relies on TCP for reliable connection-oriented delivery, while Telnet on port 23 lacks payload encryption.

Anahtar Kavram

Out-of-band (OOB) management provides dedicated hardware mechanisms (serial console servers, cellular modems, switched PDUs) to manage and recover infrastructure independently of the primary production IP network.

Soru 1782Soru →

A network administrator is configuring dual-stack services on an enterprise internal network. The administrator needs to create a DNS entry on the local domain controller so client systems can resolve the host name `app.corp.local` to its assigned IPv6 address `2001:db8:10:50::100`. Which of the following DNS record types should be created?

AAAA record

A record

CNAME record

PTR record

Cevabı ve açıklamayı göster

Cevap: AAAA record

Cevap

An AAAA record must be configured on the DNS server.

The quad-A (AAAA) record is specifically designed to resolve domain names to 128-bit IPv6 addresses in DNS forward lookup zones.

Adım Adım Çözüm

Identify the destination address family required for host name resolution.

The target address `2001:db8:10:50::100` is a 128-bit IPv6 address.

Selecting the appropriate DNS resource record type requires matching the record type with the IP version being resolved.

Select the corresponding forward lookup DNS record type for IPv6.

An AAAA record maps host names directly to IPv6 addresses.

Standard IPv4 host records use A records, whereas IPv6 uses AAAA (quad-A) records.

Anahtar Kavram

DNS Record Types for IPv6 Deployment

Soru 1783Soru →

A network consultant is designing a high-density Wi-Fi deployment for a university sports arena housing thousands of concurrent wireless clients. To minimize co-channel interference (CCI), optimize spectrum efficiency, and maintain reliable roaming performance across adjacent access point (AP) cells, which of the following deployment strategies should the consultant implement? (Select TWO.)

Geçerli olan tümünü seçin

Install directional antennas focused downward onto designated seating sections to contain RF coverage cells and reduce cell overlap.

Configure wide

80\text{ MHz}

channel bonding across all

5\text{ GHz}

access point radios to maximize theoretical throughput for individual clients.

Utilize Dynamic Frequency Selection (DFS) channels in the

5\text{ GHz}

band to increase the total number of non-overlapping channels available for AP allocation.

Set

2.4\text{ GHz}

radio transmit power to maximum output across all APs to ensure deep signal penetration through concrete structural elements.

Assign contiguous channels such as Channel 2, Channel 4, and Channel 7 across adjacent

2.4\text{ GHz}

radios to distribute traffic.

Cevabı ve açıklamayı göster

Cevap: Install directional antennas focused downward onto designated seating sections to contain RF coverage cells and reduce cell overlap.; Utilize Dynamic Frequency Selection (DFS) channels in the $5\text{ GHz}$ band to increase the total number of non-overlapping channels available for AP allocation.

Cevap

The consultant should install directional antennas focused downward onto designated seating sections to restrict RF coverage cell boundaries and utilize Dynamic Frequency Selection (DFS) channels in the

5\text{ GHz}

spectrum to expand available non-overlapping channels.

In high-density environments such as sports arenas, containment of RF coverage cells and maximization of available non-overlapping spectrum are critical. Installing directional antennas focuses signal propagation into targeted seating sectors, preventing RF leakage into neighboring AP coverage zones. Additionally, enabling Dynamic Frequency Selection (DFS) allows access points to operate on UNII-2 and UNII-2 Extended spectrum in the

5\text{ GHz}

band, significantly expanding the pool of available non-overlapping channels needed for dense channel reuse plans.

Adım Adım Çözüm

Analyze high-density RF interference challenges

Identified co-channel interference (CCI) and channel reuse limits as the primary performance bottlenecks in a crowded stadium environment.

When hundreds of clients connect to nearby APs operating on the same spectrum, overlapping cells degrade throughput and cause contention.

Evaluate antenna pattern selection

Selected directional patch/sector antennas over omnidirectional antennas.

Directional antennas shape radiation patterns into narrow beams focused on specific seating sections, physically constraining RF propagation and preventing cell overlap.

Evaluate channel planning in the

5\text{ GHz}

spectrum

Selected DFS channel inclusion while avoiding wide channel bonding (

80\text{ MHz}

DFS unlocks additional

5\text{ GHz}

channels (UNII-2 and UNII-2 Extended), allowing a dense matrix of APs to operate on non-overlapping channels. Wide

80\text{ MHz}

channels deplete available channels, exacerbating CCI.

Anahtar Kavram

High-Density Wireless RF Cell Containment and DFS Spectrum Allocation

Tahmini Süre:2m 0s

Soru 1784Soru →

A client workstation requests the IP address for an external hostname (app.sub.example.com) that is not in any local DNS cache. Arrange the steps of the recursive DNS lookup process in the correct order from initial query to final response.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for recursive DNS resolution is: 1) Client sends recursive query to local resolver, 2) Resolver queries root server for .com TLD, 3) Resolver queries .com TLD server for example.com authoritative server, 4) Resolver queries authoritative server for app.sub.example.com host record, 5) Resolver caches the record and returns the IP address to the client.

The correct order follows standard hierarchical DNS resolution: the client workstation issues a recursive request to its local configured resolver. When the resolver's cache is clear, it queries a root name server to find the TLD server, then queries the .com TLD server to locate the authoritative server for example.com, and finally queries the authoritative server for the specific A record before caching and returning the answer to the client.

Adım Adım Çözüm

Identify the initial query trigger

The client sends a recursive request to its assigned local resolver.

Resolvers handle the full lookup process on behalf of stub clients.

Trace top-down DNS hierarchy resolution

The resolver contacts root servers (.), TLD servers (.com), and domain authoritative servers (example.com) sequentially.

Hierarchical DNS resolution proceeds from the root zone downward toward specific authoritative servers.

Identify the completion of resolution

The resolver returns the final A record to the client and caches the result.

Caching reduces subsequent query latency and network load across the DNS hierarchy.

Anahtar Kavram

Iterative and Recursive DNS Name Resolution Hierarchy

Soru 1785Soru →

During a complex infrastructure overhaul and audit across multiple enterprise data center closets, network engineers must consult distinct operational documents to address specific technical challenges. Match each specialized network documentation artifact on the left to the operational scenario on the right where it serves as the essential diagnostic or planning reference.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

The correct pairings match each specialized documentation artifact to its targeted operational requirement: Logical diagrams to layer 2/3 virtual routing and trunk troubleshooting; Rack elevations to cabinet power and thermal planning; Wiring schematics to physical pinout and crosstalk isolation; and Performance baselines to historical anomaly detection.

Each documentation artifact is correctly paired according to its administrative domain: logical diagrams reveal virtual overlay structures (VRF/VLAN); rack elevation diagrams detail rack unit spacing, power, and thermal limits; wiring schematics provide pin-by-pin conductor alignment for physical media; and baselines establish standard metric thresholds for anomaly detection.

Adım Adım Çözüm

Analyze the operational scope of each network document type.

Categorize documents into logical routing topologies, physical rack capacity schematics, physical layer cable pinouts, and statistical performance metrics.

Different network maintenance tasks require specific documentation layer perspectives (Layer 1 physical, Layer 2/3 logical, facilities/power, or performance baseline).

Map logical constructs to the corresponding isolation requirement.

Connect VLAN and VRF logical topology diagrams to inter-tenant subnets and 802.1Q trunk gateway troubleshooting.

VRFs and VLANs are virtual logical constructs not visible on physical site maps or rack drawings.

Correlate physical facilities and cabling specifications to physical layer issues.

Link rack elevation thermal/power specs to cabinet server additions, and cable wiring block maps to pinout crosstalk troubleshooting.

Power draw/heat relates directly to rack elevations, while conductor pinout misalignments relate to physical wiring schematics.

Associate statistical metrics with baseline performance monitoring.

Pair historical telemetry baselines with peak bandwidth anomaly detection.

Identifying abnormal traffic behavior requires comparing current telemetry against established operational baselines.

Anahtar Kavram

Distinguishing the specific operational utility of physical topology diagrams, logical topology diagrams, cabling schematics, and performance baselines in enterprise network administration.

Soru 1786Soru →

Three switches—Switch A, Switch B, and Switch C—are interconnected in a redundant Layer 2 topology running standard IEEE 802.1D Spanning Tree Protocol (STP). Switch A is configured with a bridge priority of 4096, while Switch B and Switch C both retain the default bridge priority of 32768. The link between Switch A and Switch B is 1 Gbps (cost = 4), the link between Switch A and Switch C is 10 Gbps (cost = 2), and the link between Switch B and Switch C is 1 Gbps (cost = 4). Based on this topology and STP operational rules, which of the following statements correctly describe the resulting converged network state?

Geçerli olan tümünü seçin

Switch A is elected as the Root Bridge for the topology because it has the lowest bridge priority value.

Switch C's interface connected directly to Switch A is selected as Switch C's Root Port due to having the lowest path cost to the Root Bridge.

Switch B elects its interface connected to Switch C as a Designated Port because Switch B has a lower MAC address than Switch C.

Switch B can force itself to become the Root Bridge by increasing its bridge priority setting to a higher numerical value.

A native VLAN mismatch on the trunk between Switch B and Switch C will force Switch C to automatically become a secondary Root Bridge.

Cevabı ve açıklamayı göster

Cevap: Switch A is elected as the Root Bridge for the topology because it has the lowest bridge priority value.; Switch C's interface connected directly to Switch A is selected as Switch C's Root Port due to having the lowest path cost to the Root Bridge.

Cevap

Switch A is elected as the Root Bridge for the topology because it has the lowest bridge priority value, and Switch C's interface connected directly to Switch A is selected as Switch C's Root Port due to having the lowest path cost to the Root Bridge.

Switch A becomes the Root Bridge because its priority of 4096 is lower than all other switches. Switch C selects its direct 10 Gbps interface (cost 2) as its Root Port because it provides the lowest cumulative path cost to the Root Bridge compared to any alternate route.

Adım Adım Çözüm

Determine the Root Bridge election result by comparing Bridge IDs (Bridge Priority + MAC Address).

Switch A has priority 4096, which is lower than Switch B (32768) and Switch C (32768). Switch A becomes the Root Bridge.

STP selects the switch with the lowest numerical Bridge ID as the Root Bridge.

Determine Root Ports for non-root switches by evaluating cumulative root path costs.

Switch C's direct link to Switch A has a cost of 2 (10 Gbps link), which is lower than the indirect path through Switch B (cost 8). The direct port is chosen as Switch C's Root Port.

Each non-root switch chooses the single port with the lowest path cost back to the Root Bridge.

Evaluate the port roles on the link between Switch B and Switch C.

Switch C advertises a cost of 2 to reach the root, while Switch B advertises a cost of 4. Switch C wins designated port status on that link, placing Switch B's port on that segment in the Blocking state.

Designated Ports on shared segments are assigned to the switch with the lowest root path cost.

Anahtar Kavram

Spanning Tree Protocol Operations (Root Bridge Election, Path Cost Calculation, and Port Role Determination)

Soru 1787Soru →

A network administrator is implementing firewall policies on a stateful security appliance that protects internal servers on the $10.100.10.0/24$ subnet. The administrator needs to allow remote management via SSH from a trusted management workstation ( $10.200.5.50$ ) to the internal servers while ensuring unapproved outbound connections from the servers to the Internet are blocked. Which of the following statements correctly describe how a stateful firewall processes traffic for this scenario? (Select TWO.)

Geçerli olan tümünü seçin

A single inbound rule permitting TCP port

22

from

10.200.5.50

10.100.10.0/24

automatically allows outbound return packets for established sessions without needing a separate outbound rule.

An explicit outbound rule must be configured to permit SSH return traffic on TCP port

22

back to host

10.200.5.50

because firewalls evaluate outbound traffic independently of connection state.

A new outbound TCP connection initiated directly by an internal server to an external public IP address will be blocked if no explicit outbound permit rule exists.

Inbound SSH administrative connections from

10.200.5.50

require permitting UDP port

22

because initial connection negotiation occurs over connectionless UDP.

Cevabı ve açıklamayı göster

Cevap: A single inbound rule permitting TCP port $22$ from $10.200.5.50$ to $10.100.10.0/24$ automatically allows outbound return packets for established sessions without needing a separate outbound rule.; A new outbound TCP connection initiated directly by an internal server to an external public IP address will be blocked if no explicit outbound permit rule exists.

Cevap

Stateful firewalls automatically allow return traffic for established sessions using state table tracking, and they evaluate any newly initiated outbound connections against rule sets, blocking unmatched sessions via implicit deny.

Stateful firewalls maintain a state table to track established connections. When an inbound SSH connection from the management host is permitted, the firewall dynamically allows the corresponding return traffic from the server without requiring a separate reverse rule. Furthermore, any newly initiated session originated by an internal server requires a matching permit rule; otherwise, the firewall's default implicit deny policy blocks the outbound traffic.

Adım Adım Çözüm

Analyze stateful connection tracking for inbound SSH connections.

Stateful firewalls record session entries in a state table during the TCP three-way handshake. Return traffic for an established session matching an existing state table entry is automatically permitted.

Eliminates the requirement for manual return rules typical of stateless router ACLs.

Evaluate new outbound session initiation from internal servers.

When an internal server initiates a brand-new connection outward, the firewall evaluates it as a new session against configured rules. Without a permit rule, the default implicit deny drops the packet.

Prevents unauthorized internal hosts from initiating connections to external hosts.

Verify protocol and port requirements for SSH management.

SSH operates over TCP port

22

, establishing a reliable stream.

Rules configured for UDP port

22

will fail to match SSH traffic.

Anahtar Kavram

Stateful Inspection vs Stateless Filtering

Soru 1788Soru →

A network administrator is configuring DNS resource records for a newly deployed service hostname `app.example.com`. The service requires mapping the domain directly to an IPv6 address and publishing domain ownership verification text. A diagnostic `dig` command yields the following output:

;; QUESTION SECTION:
;app.example.com. IN ANY

;; ANSWER SECTION:
app.example.com. 3600 IN A 192.0.2.45

Which TWO of the following DNS record types must the administrator add to the authoritative zone file to satisfy these technical requirements?

Geçerli olan tümünü seçin

AAAA record

TXT record

PTR record

SRV record

CNAME record

Cevabı ve açıklamayı göster

Cevap: AAAA record; TXT record

Cevap

The administrator must add an AAAA record to resolve the hostname to an IPv6 address and a TXT record to publish domain ownership verification text.

To satisfy both requirements, an AAAA record is required to map the hostname to its corresponding 128-bit IPv6 address, and a TXT record is required to hold the domain verification text string.

Adım Adım Çözüm

Analyze the technical requirements for hostname address mapping

Mapping `app.example.com` to an IPv6 address requires an IPv6 host record.

An AAAA (quad-A) record specifically handles 128-bit IPv6 address resolution for domain names.

Analyze the technical requirements for verification data storage

Publishing verification strings requires an arbitrary text storage record.

TXT records allow domain owners to store free-form text strings in DNS zone files for third-party domain validation and security policies.

Anahtar Kavram

DNS Resource Record Types (AAAA and TXT)

Tahmini Süre:1m 30s

Soru 1789Soru →

Four network switches (SW1, SW2, SW3, SW4) are connected in a local area network running standard IEEE 802.1D Spanning Tree Protocol (STP). The bridge priorities and base MAC addresses for the switches are configured as follows:

- SW1: Bridge Priority = $32768$ , MAC = $0200.1111.1111$
- SW2: Bridge Priority = $32768$ , MAC = $0200.2222.2222$
- SW3: Bridge Priority = $16384$ , MAC = $0200.3333.3333$
- SW4: Bridge Priority = $32768$ , MAC = $0200.0000.1111$

Which switch will be elected as the STP root bridge in this network topology?

SW3, because it possesses the lowest numerical bridge priority value.

SW4, because it possesses the lowest numerical MAC address among all switches.

SW2, because default priority ties force the election to select the highest MAC address.

SW1, because it retains the default bridge priority and lowest MAC among default-configured switches.

Cevabı ve açıklamayı göster

Cevap: SW3, because it possesses the lowest numerical bridge priority value.

Cevap

SW3 is elected as the root bridge because it has the lowest Bridge Priority (16384), making its overall Bridge ID the lowest in the network.

In 802.1D Spanning Tree Protocol, the switch with the lowest Bridge Identifier (BID) becomes the root bridge. The BID is composed of the Bridge Priority and the MAC address. Bridge Priority is compared first; the lower numerical value wins. Since SW3 has a Bridge Priority of 16384 while SW1, SW2, and SW4 all have the default priority of 32768, SW3 wins the root bridge election automatically without needing a MAC address tie-breaker.

Adım Adım Çözüm

Understand the Spanning Tree Protocol (STP) Bridge ID structure.

Bridge ID (BID) is calculated as:

\text{BID} = \text{Bridge Priority} + \text{MAC Address}

STP elects the switch with the lowest numerical BID as the root bridge.

Compare the Bridge Priority values of all participating switches.

SW1 = 32768, SW2 = 32768, SW3 = 16384, SW4 = 32768.

Bridge Priority is evaluated before MAC addresses.

Identify the switch with the lowest priority.

SW3 has a priority of 16384, which is lower than 32768.

Since SW3 has the lowest priority, MAC address tie-breaking is not needed for SW3.

Anahtar Kavram

STP Root Bridge Election Process

Tahmini Süre:1m 0s

Soru 1790Soru →

A network administrator is performing baseline security hardening on a newly deployed Layer 2 switch in a corporate network environment. To secure the device against unauthorized physical connection and Layer 2 traffic interception, which TWO of the following switch hardening practices should the administrator implement?

Geçerli olan tümünü seçin

Assign all unused physical switch ports to an isolated blackhole VLAN and set their operational status to administratively shutdown.

Reassign the native VLAN on all 802.1Q trunk links from default VLAN 1 to an unused VLAN ID.

Configure VTY lines to accept Telnet connections on TCP port 22 to establish secure remote management sessions.

Deploy SNMPv2c using default community strings to ensure encrypted monitoring of switch health metrics.

Maintain default VLAN 1 as the native VLAN across all user access ports to simplify broadcast domain management.

Cevabı ve açıklamayı göster

Cevap: Assign all unused physical switch ports to an isolated blackhole VLAN and set their operational status to administratively shutdown.; Reassign the native VLAN on all 802.1Q trunk links from default VLAN 1 to an unused VLAN ID.

Cevap

The correct hardening steps are placing unused switch ports into an unrouted blackhole VLAN while administratively shutting them down, and changing the 802.1Q native VLAN on trunk links from default VLAN 1 to a dedicated unused VLAN ID.

Device hardening mandates minimizing the physical and logical attack surface. Disabling unused ports and binding them to an unused blackhole VLAN prevents unauthorized devices from obtaining link status or accessing the network. Furthermore, modifying the 802.1Q native VLAN away from default VLAN 1 protects against Layer 2 frame injection and VLAN hopping attacks.

Adım Adım Çözüm

Analyze access port security requirements.

Unused physical ports represent an open attack vector if left active in default VLAN 1.

Administratively disabling unused ports (`shutdown`) and moving them to an isolated, unrouted VLAN prevents physical plug-and-play network access.

Evaluate trunk port native VLAN configurations.

Default VLAN 1 is targeted in Layer 2 exploitation techniques like VLAN hopping.

Changing the native VLAN to an unused VLAN ID on 802.1Q trunks ensures untagged traffic cannot traverse administrative or data VLANs.

Anahtar Kavram

Layer 2 Infrastructure and Device Hardening Controls

Soru 1791Soru →

A network technician is deploying IP VoIP phones on VLAN 30 ( $172.16.30.0/24$ ). The centralized DHCP server is located on VLAN 10 ( $172.16.10.5$ ). While devices assigned static IP addresses on VLAN 30 communicate across subnets normally, all phones set to acquire addresses automatically receive IPs in the $169.254.x.x$ subnet and fail to register. Inspecting the Layer 3 switch shows that inter-VLAN routing is active and operational. Which of the following is the most likely cause of this problem?

The interface for VLAN 30 on the Layer 3 switch is missing an IP helper address pointing to the DHCP server.

The client phones are receiving an APIPA address because their network cards are experiencing a physical link speed mismatch with the switch.

The DHCP scope for VLAN 30 has exhausted its available IP address pool due to an invalid subnet host count calculation.

The default gateway parameter in the DHCP pool options is set to an address residing on a different IP subnet.

Cevabı ve açıklamayı göster

Cevap: The interface for VLAN 30 on the Layer 3 switch is missing an IP helper address pointing to the DHCP server.

Cevap

The interface for VLAN 30 on the Layer 3 switch is missing an IP helper address pointing to the DHCP server.

DHCP discovery messages are sent as Layer 2 and Layer 3 broadcasts, which routers and Layer 3 switches do not forward across subnets by default. Because the DHCP server is on VLAN 10 and the clients are on VLAN 30, the Layer 3 switch interface serving VLAN 30 requires an IP helper address configured to relay DHCP broadcast requests as unicast traffic to the server.

Adım Adım Çözüm

Analyze the symptom and client IP assignment

Phones fail to receive a dynamic IP lease and auto-assign an APIPA address (

169.254.x.x

APIPA assignment occurs when a host sends a DHCP DISCOVER broadcast but receives no response before timing out.

Evaluate the network topology and broadcast boundaries

Clients reside on VLAN 30 (

172.16.30.0/24

), whereas the DHCP server resides on a separate broadcast domain, VLAN 10 (

172.16.10.5

Layer 3 boundaries (routers/switches) drop broadcast traffic like DHCP DISCOVER frames by default.

Identify the missing network service configuration

A DHCP Relay Agent (`ip helper-address`) must be configured on the VLAN 30 interface of the Layer 3 switch.

The relay agent converts client DHCP broadcast requests into unicast packets and forwards them directly to the DHCP server on VLAN 10.

Anahtar Kavram

DHCP Relay Agent and IP Helper Address Placement across Subnets

Tahmini Süre:1m 30s

Soru 1792Soru →

An engineer is allocating static IP addresses for client workstations on a local network segment provisioned with the CIDR block $172.16.50.160/27$ . Which of the following IP addresses represent valid usable host addresses within this subnet? (Select TWO.)

Geçerli olan tümünü seçin

172.16.50.165

172.16.50.160

172.16.50.188

172.16.50.191

Cevabı ve açıklamayı göster

Cevap: $172.16.50.165$ ; $172.16.50.188$

Cevap

The IP addresses

172.16.50.165

and

172.16.50.188

are valid usable host addresses for the

172.16.50.160/27

subnet.

For the CIDR block

172.16.50.160/27

, the prefix length leaves 5 host bits, yielding

2^5 = 32

total addresses per subnet. The block starts at network ID

172.16.50.160

and ends at broadcast address

172.16.50.191

. Subtracting these two reserved addresses gives a usable host IP range of

172.16.50.161

through

172.16.50.190

. Both

172.16.50.165

and

172.16.50.188

fall squarely within this range.

Adım Adım Çözüm

Calculate the block size and subnet boundaries for a

/27

prefix length.

/27

mask reserves

32 - 27 = 5

host bits. The total address block size is

2^5 = 32

addresses.

Knowing the block size allows determination of the starting network ID and ending broadcast address.

Determine the network address, broadcast address, and usable host IP range.

Network ID =

172.16.50.160

. Broadcast address =

172.16.50.160 + 31 = 172.16.50.191

. Usable host range =

172.16.50.161

172.16.50.190

The network address (all host bits 0) and broadcast address (all host bits 1) are reserved and must be excluded from host assignment.

Evaluate the candidate options against the usable host IP range.

172.16.50.165

and

172.16.50.188

lie strictly within the range of

172.16.50.161

172.16.50.190

172.16.50.160

is the network ID and

172.16.50.191

is the broadcast address.

Only IP addresses inside the usable host boundary are assignable to workstation interfaces.

Anahtar Kavram

Subnet host range calculation and exclusion of network ID and broadcast address

Soru 1793Soru →

During a maintenance window, a network technician inadvertently removes the IP address configuration from a core switch's primary VLAN interface, causing all active remote management sessions to drop. The switch remains powered on and operational, but it is no longer reachable across the local area network. Which of the following physical management methods should the technician use to regain command-line access to the switch?

Connect an RS-232 serial cable directly from a management workstation to the switch console port.

Establish an SSH session on TCP port 22 targeting the switch default gateway address.

Initiate an unencrypted Telnet connection over UDP port 23 to broadcast an administrative recovery frame.

Launch an RDP connection on TCP port 3389 to access the switch desktop management utility.

Cevabı ve açıklamayı göster

Cevap: Connect an RS-232 serial cable directly from a management workstation to the switch console port.

Cevap

Connecting an RS-232 serial cable directly from a management workstation to the switch console port.

Out-of-band (OOB) management via a direct serial console connection operates independently of the IP protocol stack and network interface status. Connecting directly to the device console port using an RS-232 serial cable allows full administrative access to the command-line interface even when network IP addresses are absent or misconfigured.

Adım Adım Çözüm

Analyze the failure domain described in the scenario.

In-band connectivity is lost because the Layer 3 IP address configuration on the target device was deleted.

Network protocols requiring IP connectivity (such as SSH, Telnet, HTTPS, RDP) cannot route traffic to an unaddressed network interface.

Identify the appropriate management architecture required for recovery.

Out-of-band (OOB) access via local physical serial connection is needed.

Direct console access connects to the terminal hardware controller directly and operates independently of network interface state or IP addressing.

Select the correct physical medium and connection protocol.

An RS-232 serial connection using a console cable attached to the dedicated console port provides direct CLI interface access.

This allows the administrator to re-enter IP configuration commands directly without relying on network packet routing.

Anahtar Kavram

Out-of-Band (OOB) Console Management

Tahmini Süre:1m 30s

Soru 1794Soru →

Match each IPv6 address prefix or designated address on the left with its corresponding network deployment scope or functional purpose on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

fe80::/10 matches the link-local prefix; ff02::1 matches the all-nodes link-local multicast address; 2001:db8::/32 matches the documentation prefix; fc00::/7 matches the Unique Local Address (ULA) prefix.

Each IPv6 prefix serves a distinct functional scope in network deployment: fe80::/10 provides link-local unicast connectivity required on every active interface; ff02::1 targets all local nodes via link-scope multicast; 2001:db8::/32 is designated by RFC 3849 for technical documentation examples; and fc00::/7 provides private, non-globally routable enterprise addressing (Unique Local Address).

Adım Adım Çözüm

Identify link-local unicast prefix

fe80::/10 is reserved for link-local communication within a single layer 2 domain.

Link-local addresses always start with fe80::/10 and are non-routable across routers.

Identify IPv6 multicast addresses

ff02::1 belongs to the ff00::/8 multicast block and targets all nodes on the link.

The ff02 scope indicates link-local multicast, and group ID 1 represents all nodes.

Identify documentation and private address spaces

2001:db8::/32 is for documentation, while fc00::/7 defines Unique Local Addresses.

RFC standards explicitly reserve 2001:db8::/32 for lab manuals/textbooks and fc00::/7 for private site-local style deployments.

Anahtar Kavram

IPv6 Address Scopes and Functional Block Classifications

Soru 1795Soru →

A network security administrator is organizing a training module to help tier-1 analysts identify malicious activity across different network layers. Match each network attack type on the left with its corresponding operational mechanism or technical signature on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Cevabı ve açıklamayı göster

Cevap

ICMP Redirect Attack matches with altering a host's local routing table via control messages; Slowloris Attack matches with sending incomplete HTTP headers to exhaust server thread pools; RF Jamming matches with emitting electromagnetic signals to disrupt 802.11 wireless frames; MAC Address Spoofing matches with altering physical hardware addresses in frame headers to bypass filtering.

Each attack vector is paired with its specific network layer operational signature: ICMP Redirect manipulates host IP routing tables via ICMP control messages; Slowloris maintains unclosed Layer 7 HTTP header requests to consume web server sockets; RF Jamming causes Layer 1 physical wireless radio frequency interference; and MAC Address Spoofing modifies Layer 2 physical frame headers.

Adım Adım Çözüm

Analyze the ICMP Redirect attack mechanism.

ICMP Type 5 packets are gateway control messages designed to update host routing paths; forged ICMP redirects alter target routing tables to intercept traffic.

This establishes the link between ICMP control packets and host route manipulation.

Analyze the Slowloris attack mechanism.

Slowloris sends partial HTTP request headers over open TCP connections at slow rates to tie up concurrent web server worker threads.

This differentiates application-layer slow HTTP DoS attacks from volumetric network floods.

Analyze the RF Jamming mechanism.

RF Jamming operates at the physical layer by generating deliberate radio frequency noise on active wireless bands to lower the Signal-to-Noise Ratio (SNR).

This identifies physical wireless signal interference as the cause of frame corruption and channel blockage.

Analyze the MAC Address Spoofing mechanism.

MAC spoofing overrides a network card's media access control address in frame headers to match an authorized MAC address.

This links layer 2 hardware addressing manipulation with bypassing MAC filtering security controls.

Anahtar Kavram

Common Network Attack Types and Vectors

Soru 1796Soru →

A network administrator is investigating user reports of severe performance degradation and file transfer timeouts when accessing a local backup server connected to Switch-A. The administrator reviews the interface statistics on switch port GigabitEthernet0/1 and observes a rapidly increasing counter for late collisions, FCS errors, and runts, despite the physical link showing up/up at 100 Mbps. Which of the following is the primary cause of this connectivity issue?

A duplex mismatch between switch port GigabitEthernet0/1 and the backup server network interface card

An un-tagged frame leakage issue caused by a native VLAN mismatch on switch port GigabitEthernet0/1

Spanning Tree Protocol placing port GigabitEthernet0/1 into an alternate blocking state due to a root bridge priority misconfiguration

The backup server and client workstations residing on different VLANs without a configured Layer 3 routing gateway

Cevabı ve açıklamayı göster

Cevap: A duplex mismatch between switch port GigabitEthernet0/1 and the backup server network interface card

Cevap

A duplex mismatch between switch port GigabitEthernet0/1 and the backup server network interface card

The combination of high late collision counters, FCS errors, and runts on a connected link is a classic indicator of a duplex mismatch. This commonly occurs when one device is manually set to full-duplex while the connecting switch port is left on auto-negotiation, causing the switch port to fall back to half-duplex.

Adım Adım Çözüm

Analyze the reported interface symptoms and error counters

Identified high late collisions, FCS errors, and runts on an operational link.

Late collisions occur when a device detects a collision after transmitting the first 64 bytes (512 bits) of a frame.

Correlate error counters with Layer 1/2 configuration mismatch types

Determined that half-duplex devices listen for collisions during transmission while full-duplex devices transmit continuously without checking for carrier sense.

When one end is full-duplex and the other is half-duplex, the full-duplex end sends data whenever ready, causing the half-duplex end to detect collisions mid-frame and log late collisions.

Select the root cause that matches the physical error profile

Confirmed duplex mismatch as the correct root cause.

Only a duplex mismatch produces late collisions; trunk mismatches or routing failures result in dropped packets or log warnings without collision counter increments.

Anahtar Kavram

Duplex Mismatch Symptom Identification

Soru 1797Soru →

A network administrator is troubleshooting an unbundled Category 6 copper cable run passing through a ceiling plenum that suddenly lost connectivity. The administrator suspects the cable was damaged or cut at an unknown point along its 85-meter length. Which diagnostic instrument should be utilized to measure the exact distance to the cable fault?

Time-Domain Reflectometer (TDR)

Tone generator and probe

Basic continuity wire mapper

Loopback plug

Cevabı ve açıklamayı göster

Cevap: Time-Domain Reflectometer (TDR)

Cevap

Time-Domain Reflectometer (TDR)

A Time-Domain Reflectometer (TDR) sends an electrical pulse down a copper cable and records signal reflections caused by impedance anomalies. By measuring the time delay of the returned signal, the device calculates the precise distance to a physical break or open circuit.

Adım Adım Çözüm

Identify the primary diagnostic requirement from the scenario.

The goal is to determine the exact distance along a copper cable run where a physical break or severance occurred.

The cable run is 85 meters long and hidden behind ceiling plenum spaces, making visual inspection inefficient.

Evaluate testing tools based on their operating principles.

A Time-Domain Reflectometer (TDR) sends signal pulses down copper conductors and analyzes the timing of reflected signals to calculate distance to impedance disruptions (opens or shorts).

Only a TDR (or OTDR for optical fiber) provides distance-to-fault measurements.

Anahtar Kavram

Using TDR to locate physical copper cabling faults

Tahmini Süre:1m 0s

Soru 1798Soru →

A network administrator performs a full system backup every Sunday at midnight, followed by daily differential backups every weekday night at 11:00 PM. If a catastrophic server drive failure occurs on Thursday afternoon, which set of backups must be restored to return the system to its latest backed-up state with minimal steps?

The Sunday full backup followed by only the Wednesday differential backup

The Sunday full backup followed sequentially by the Monday, Tuesday, and Wednesday backups

The Sunday full backup followed by only the Monday differential backup

Only the Wednesday differential backup

Cevabı ve açıklamayı göster

Cevap: The Sunday full backup followed by only the Wednesday differential backup

Cevap

The Sunday full backup followed by only the Wednesday differential backup

Differential backups save all files that have changed since the last full backup. Restoring the baseline Sunday full backup followed by the Wednesday differential backup completely restores the environment up to Wednesday night in just two restore operations.

Adım Adım Çözüm

Identify the backup strategy being used

The organization uses a Full backup combined with daily Differential backups.

Understanding how differential backups function is key to determining the correct restoration path.

Determine the data contained in a differential backup

A differential backup records all data modified since the last full backup, meaning Wednesday's differential contains all cumulative changes from Monday, Tuesday, and Wednesday.

Because each differential backup is cumulative from the full backup, earlier differential backups are superseded by the newest one.

Identify the optimal recovery sequence

Restore the Sunday full backup first to establish the baseline, then apply only the Wednesday differential backup to bring the system up to date.

This two-step process achieves complete restoration to the latest backup state with minimal recovery time.

Anahtar Kavram

Differential Backup Restoration Sequence

Soru 1799Soru →

A network administrator connects several new switches in a redundant topology to ensure high availability. Place the steps of the initial IEEE 802.1D Spanning Tree Protocol (STP) convergence process in the correct chronological order from link startup to topology stabilization.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological order of IEEE 802.1D STP convergence is: 1) Switches originate BPDUs claiming to be the Root Bridge, 2) The switch with the lowest Bridge ID is elected as the Root Bridge, 3) Non-root switches elect their Root Ports, 4) Segment-level Designated Ports are elected, and 5) Remaining redundant ports enter the Blocking state.

The standard IEEE 802.1D STP algorithm operates sequentially: switches announce themselves as root via initial BPDUs, elect the true Root Bridge based on the lowest Bridge ID, select Root Ports on non-root switches, designate single forwarding ports per segment, and block remaining redundant links to eliminate loops.

Adım Adım Çözüm

Identify initial BPDU transmission upon boot.

Switches send initial BPDUs asserting Root Bridge status.

Before exchanging information, switches lack topology visibility and default to claiming root status.

Complete Root Bridge election process.

The switch with the lowest Bridge Priority (or lowest MAC address as tiebreaker) becomes the agreed Root Bridge.

BPDUs with superior (lower) Bridge IDs override inferior claims across the broadcast domain.

Select non-root switch Root Ports.

Each non-root switch assigns its port with the lowest Root Path Cost as its Root Port.

Non-root switches require exactly one active path to send traffic toward the Root Bridge.

Elect segment-level Designated Ports.

The switch port on each segment with the lowest cost to the Root Bridge becomes the Designated Port.

Each LAN segment must have one designated forwarding interface to prevent loop formation.

Place unassigned redundant ports into Blocking state.

All non-root, non-designated ports transition to Blocking.

Ports not assigned active forwarding roles must block data traffic to eliminate physical switching loops.

Anahtar Kavram

Spanning Tree Protocol Convergence Sequence

Soru 1800Soru →

A network engineer is configuring static host IP addresses for a newly created VLAN assigned the subnet block $10.50.160.0/20$ . Which of the following IPv4 addresses are valid, usable host addresses within this subnet? (Select TWO.)

Geçerli olan tümünü seçin

10.50.160.1

10.50.172.45

10.50.160.0

10.50.175.255

Cevabı ve açıklamayı göster

Cevap: $10.50.160.1$ ; $10.50.172.45$

Cevap

The valid usable host addresses in the subnet are

10.50.160.1

and

10.50.172.45

For a

/20

subnet prefix (

255.255.240.0

), the block size in the third octet is

16

(

256 - 240 = 16

). Starting at

10.50.160.0

, the subnet encompasses all addresses up through

10.50.175.255

. Reserving the network address (

10.50.160.0

) and the broadcast address (

10.50.175.255

) yields a usable host range of

10.50.160.1

through

10.50.175.254

. Both

10.50.160.1

and

10.50.172.45

reside within this usable host range.

Adım Adım Çözüm

Determine the subnet mask and block size

/20

prefix corresponds to a subnet mask of

255.255.240.0

. The block size in the third octet is

256 - 240 = 16

Calculating the block size identifies the boundary increments for subnets.

Calculate the network address and broadcast address

The network address is

10.50.160.0

. The next subnet starts at

10.50.176.0

, making the broadcast address for this subnet

10.50.175.255

The broadcast address is one address lower than the start of the next subnet.

Identify the usable host IP address range

The usable host range spans from

10.50.160.1

(first usable) to

10.50.175.254

(last usable).

Subtracting 2 reserved addresses (network ID and broadcast) defines the assignable IP range.

Evaluate the choices against the usable range

10.50.160.1

and

10.50.172.45

fall inside the usable range, whereas

10.50.160.0

(network ID) and

10.50.175.255

(broadcast) do not.

Host assignments must strictly exclude network and broadcast IP addresses.

Anahtar Kavram

Determining usable IPv4 host address boundaries for a given CIDR prefix.

ÖncekiSayfa 90 / 112Sonraki

Tüm alıştırma soruları

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Cevap

Adım Adım Çözüm

Anahtar Kavram