Tüm alıştırma soruları

A logistics enterprise experienced a catastrophic disk failure on its core database server on Thursday at 2:00 PM. The organization operates a backup policy consisting of a full backup every Sunday at 12:00 AM, daily incremental backups every evening at 11:00 PM (Monday through Wednesday), and hourly transaction log backups taken at the top of every hour. To restore the database server to its state immediately prior to the 2:00 PM failure with zero data loss, which sequence of backup files must the systems administrator restore?

A network administrator observes that network traffic across multiple VLANs is taking a sub-optimal path through a legacy access switch rather than the primary core switch. Output from `show spanning-tree` reveals that the legacy access switch is currently operating as the Spanning Tree Protocol (STP) Root Bridge because the primary core switch has a configured STP priority of 61440, while the access switch retains the default priority of 32768. Which configuration change on the core switch will resolve the issue and force it to become the STP Root Bridge?

A network administrator is deploying IPv6 on an enterprise subnet. The design requires host devices to automatically generate their own global unicast IP addresses using prefix information advertised by the local router, while simultaneously obtaining DNS server IP addresses from a central DHCPv6 server. Which of the following configurations and address assignments correctly support this deployment strategy? (Select TWO.)

Match each network documentation artifact to the operational scenario where it provides the primary utility.

During an internal security investigation, network administrators notice that whenever client workstations experience a failure resolving internal hostnames via the primary DNS server, an unauthorized endpoint on the same broadcast domain immediately responds to Link-Local Multicast Name Resolution (LLMNR) and NetBIOS Name Service (NBT-NS) queries. The rogue system provides its own IP address, tricking victim computers into sending authentication hashes when trying to access network shares.

Which of the following correctly identify the attack vector taking place and the primary security risk established by this activity? (Select TWO.)

A network administrator working on a Windows host is troubleshooting a connection failure to an off-site database server at IP address $198.51.100.25$ running on TCP port $5432$. Place the following command-line diagnostic procedures in the correct logical sequence, following a standard bottom-up network troubleshooting methodology starting from local network configuration verification up to specific transport-layer service testing.

A network administrator is investigating severe application response delays and dropped connections on a critical database server connected via a Category 6 UTP cable drop. The administrator suspects both physical Layer 1 signal degradation along the cable run and Layer 4 transmission issues caused by excessive dropped segments. Which TWO of the following diagnostic tools or analyzer techniques should the administrator utilize to isolate the root causes at both layers? (Select TWO.)

An organization is defining metrics for its disaster recovery plan to set expectations for downtime and data preservation during an outage. Which of the following statements correctly describe Recovery Time Objective (RTO) and Recovery Point Objective (RPO)? (Select TWO).

A network systems engineer is configuring name resolution for a newly deployed dual-stack web server. Workstations on the corporate network can successfully connect to the server over IPv4 using the hostname `app.finance.net`. However, IPv6 connectivity attempts fail because the hostname does not resolve to an IPv6 address.

To troubleshoot, the engineer executes the following diagnostic query from a workstation:

text
$ dig AAAA app.finance.net +short

The command produces no output, whereas running `dig A app.finance.net +short` returns `172.16.40.25`.

Which resource record type must be configured in the authoritative DNS zone file to enable host name resolution to the server's IPv6 address?

A network systems engineer is designing an IPv6 addressing scheme for an internal enterprise network containing multiple subnets connected via internal routers. The design requirement dictates that internal systems must be routable across all corporate locations without being globally reachable on the public Internet. Which of the following IPv6 address types should be assigned to these hosts?

A network administrator is troubleshooting an issue where client workstations on a newly provisioned VLAN are receiving APIPA addresses ($169.254.x.x$) instead of valid leases from the centralized DHCP server located on a different subnet. Arrange the troubleshooting steps in the logical order the administrator should execute them to systematically diagnose and resolve the issue.

A network administrator is configuring a management server in an infrastructure VLAN. The default gateway interface for this subnet is assigned the IPv4 address $192.168.4.129$ with a subnet mask of $255.255.255.192$. Which of the following IPv4 addresses is a valid usable host address that can be assigned to the new server on this subnet?

A network administrator is documenting the configuration of a enterprise web server. The server interface is assigned the uncompressed IPv6 address $2001:0\text{db}8:0000:0001:0000:0000:0000:0020$. What is the correctly formatted, compressed IPv6 address according to RFC 5952 standard rules?

A network administrator needs to restrict administrative access to a managed switch located at IP address $10.20.30.2$. Only the administrator's workstation at IP address $10.20.30.15$ must be allowed to establish Secure Shell (SSH) management sessions with the switch. All other SSH attempts to the switch must be blocked, while all other non-SSH IP traffic across the subnet must continue to traverse the interface uninhibited.

Which set of extended IPv4 Access Control List (ACL) statements correctly fulfills this security requirement?

An IT technician is auditing a wireless network setup in an enterprise office operating on the $2.4\text{ GHz}$ band. Users report frequent packet loss and degraded network performance. The audit reveals that adjacent wireless access points are currently assigned to channels 1, 3, 5, and 7. Which channel re-assignment strategy should the technician implement to eliminate adjacent-channel interference (ACI)?

A network administrator discovers that a managed switch has begun flooding unicast frames out of all physical ports within a specific VLAN, causing the switch to degrade to hub-like behavior. Packet captures reveal a high volume of traffic originating from a single host port, containing randomized, rapidly changing source MAC addresses that exhaust the switch's Content Addressable Memory (CAM) table capacity. Which of the following attack types is taking place?

A network administrator is organizing corporate DNS infrastructure records to ensure proper service resolution and security compliance. Match each DNS resource record type on the left with its correct functional description on the right.

A network administrator is investigating latency and connectivity issues to an internal database server at $192.168.50.100$. The administrator executes a command-line utility from a client workstation and receives the following output:

Tracing route to 192.168.50.100 over a maximum of 30 hops

0 Workstation1 [10.1.10.15]
1 10.1.10.1
2 10.2.20.1
3 192.168.50.100

Computing statistics for 75 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 Workstation1 [10.1.10.15]
0/ 100 = 0% |
1 1ms 0/ 100 = 0% 0/ 100 = 0% 10.1.10.1
0/ 100 = 0% |
2 15ms 100/ 100 =100% 100/ 100 =100% 10.2.20.1
0/ 100 = 0% |
3 16ms 0/ 100 = 0% 0/ 100 = 0% 192.168.50.100

Which of the following conclusions best explains the results observed in this command output?

A network administrator is connecting a router at a branch office to the central corporate network via a point-to-point IP link ($10.200.1.0/30$). Ping tests between the local interface ($10.200.1.1$) and the remote interface ($10.200.1.2$) are successful. However, OSPF dynamic routing fails to establish a neighbor adjacency between the two routers.

An audit of the inbound Access Control List (ACL) applied to the router's interface displays the following rules:

text
Extended IP access list INBOUND_FILTER
10 permit tcp any any eq 80
20 permit tcp any any eq 443
30 permit icmp any any
40 deny ip any any

Which of the following is the root cause of the OSPF adjacency failure?

A field technician is dispatched to an office building to troubleshoot a single workstation that has lost physical link connectivity to the local network. The switch port in the wiring closet is operating normally, but signals are failing between the patch panel and the user's wall outlet. Which of the following documentation artifacts should the technician consult to identify the exact pinout mappings, conductor color codes, and intermediate punchdown block terminations along this specific copper run?