Network Implementation

424 soru

Soru 301Soru

A network engineer is configuring Neighbor Discovery protocol settings on an enterprise VLAN. A server interface has been assigned the IPv6 global unicast address 2001:db8:1111:2222:4567:89ab:cdef:12342001:\text{db8}:1111:2222:4567:89\text{ab}:\text{cdef}:1234. Which solicited-node multicast address will the server interface automatically join to enable Layer 2 address resolution?

Cevabı ve açıklamayı göster

Cevap: ff02::1:ffef:1234

Cevap

The server interface will automatically join the solicited-node multicast address ff02::1:ffef:1234.
The correct answer combines the mandatory solicited-node multicast prefix ff02::1:ff00:0/104 with the last 24 bits (6 hexadecimal characters) of the server's unicast address cdef:1234, yielding ff02::1:ffef:1234.

Adım Adım Çözüm

1
Identify the standard IPv6 solicited-node multicast prefix
The predefined prefix for all solicited-node multicast addresses is ff02::1:ff00:0/104ff02::1:ff00:0/104.
Solicited-node multicast addresses are required by Neighbor Discovery Protocol (NDP) to replace broadcast ARP in IPv6 networks.
2
Extract the low-order 24 bits from the assigned IPv6 address
The final 32 bits of 2001:db8:1111:2222:4567:89ab:cdef:12342001:\text{db8}:1111:2222:4567:89\text{ab}:\text{cdef}:1234 are cdef:1234\text{cdef}:1234. Taking the last 24 bits (6 hex digits) yields ef1234ef1234.
Solicited-node address construction strictly appends the last 24 bits of the host unicast/anycast address to the prefix.
3
Combine the prefix and extracted 24 bits
Appending ef1234ef1234 to ff02::1:ff00:0/104ff02::1:ff00:0/104 gives ff02::1:ffef:1234ff02::1:ffef:1234.
This creates a unique multicast group mapped to the specific network interface for efficient Neighbor Solicitation processing.

Anahtar Kavram

IPv6 Solicited-Node Multicast Address Generation
Tahmini Süre:1m 30s
Soru 302Soru

Four switches are deployed in a single LAN segment running IEEE 802.1D Spanning Tree Protocol (STP). The bridge configuration settings for each switch are as follows:

- Switch-1: Bridge Priority = 3276832768, MAC Address = `00:11:22:33:44:55`
- Switch-2: Bridge Priority = 40964096, MAC Address = `00:AA:BB:CC:DD:EE`
- Switch-3: Bridge Priority = 81928192, MAC Address = `00:11:22:11:22:33`
- Switch-4: Bridge Priority = 40964096, MAC Address = `00:AA:BB:CC:DD:AA`

When the switches finish initialization, which switch is elected as the STP Root Bridge, and for what reason?

Cevabı ve açıklamayı göster

Cevap: Switch-4, because it ties for the lowest bridge priority of 40964096 and possesses the lower MAC address tie-breaker.

Cevap

Switch-4 is elected as the Root Bridge because it ties for the lowest priority value (40964096) and has a lower MAC address (`00:AA:BB:CC:DD:AA`) than Switch-2 (`00:AA:BB:CC:DD:EE`).
In IEEE 802.1D Spanning Tree Protocol, the Root Bridge election process evaluates the Bridge Identifier (BID), which combines a 2-byte Bridge Priority and a 6-byte MAC address. The switch with the lowest BID becomes the Root Bridge. Priority is evaluated first; both Switch-2 and Switch-4 have the lowest priority (40964096). To break the tie, STP compares MAC addresses. Comparing `00:AA:BB:CC:DD:AA` (Switch-4) and `00:AA:BB:CC:DD:EE` (Switch-2), Switch-4 has the smaller MAC address and is successfully elected as the Root Bridge.

Adım Adım Çözüm

1
Evaluate Bridge Priority values for all candidate switches.
Switch-2 (40964096) and Switch-4 (40964096) share the lowest numerical bridge priority value.
STP Root Bridge election strictly prioritizes the lowest Bridge Priority (Bridge ID = Priority + MAC Address).
2
Compare MAC addresses as a tie-breaker between Switch-2 and Switch-4.
Switch-4 (`00:AA:BB:CC:DD:AA`) is numerically lower than Switch-2 (`00:AA:BB:CC:DD:EE`).
When bridge priorities are identical, the switch with the lowest MAC address breaks the tie to determine the Root Bridge.

Anahtar Kavram

STP Root Bridge Election Order (Priority then MAC Address)
Tahmini Süre:1m 15s
Soru 303Soru

A network systems engineer is troubleshooting client connection behavior for an enterprise Voice over IP (VoIP) deployment. Telephony endpoints issue a DNS query to discover available Session Initiation Protocol (SIP) servers for the domain `voip.example.com`. The engineer executes a `dig` command from a test workstation and receives the following response:

text
;; QUESTION SECTION:
;_sip._tcp.voip.example.com. IN SRV

;; ANSWER SECTION:
_sip._tcp.voip.example.com. 3600 IN SRV 10 60 5060 pbx1.voip.example.com.
_sip._tcp.voip.example.com. 3600 IN SRV 10 20 5060 pbx2.voip.example.com.
_sip._tcp.voip.example.com. 3600 IN SRV 20 100 5060 pbx3.voip.example.com.

Based on the RFC-standard evaluation rules for DNS SRV records, which of the following statements accurately describes how client traffic will be distributed across these servers under normal operating conditions?

Cevabı ve açıklamayı göster

Cevap: Clients will attempt connection to pbx1.voip.example.com approximately 75% of the time and pbx2.voip.example.com 25% of the time, keeping pbx3.voip.example.com as a standby backup.

Cevap

Clients will attempt connection to pbx1.voip.example.com approximately 75% of the time and pbx2.voip.example.com 25% of the time, keeping pbx3.voip.example.com as a standby backup.
DNS SRV records (RFC 2782) utilize two fields for server selection: Priority and Weight. Clients must attempt target hosts starting with the lowest numerical Priority value. Here, `pbx1.voip.example.com` and `pbx2.voip.example.com` both have a Priority of 10, making them preferred over `pbx3.voip.example.com` (Priority 20). Among targets with equal priority, clients select targets proportionally based on their Weight values. The combined weight for Priority 10 targets is 60+20=8060 + 20 = 80. Thus, `pbx1` receives 6080=75%\frac{60}{80} = 75\% of initial connection attempts and `pbx2` receives 2080=25%\frac{20}{80} = 25\%. Server `pbx3` will only be contacted if both Priority 10 servers fail.

Adım Adım Çözüm

1
Evaluate the Priority field in the SRV record output
Servers pbx1 and pbx2 have a Priority value of 10, while pbx3 has a Priority value of 20.
Per RFC 2782, clients must attempt to contact target host with the lowest numbered priority first. Therefore, pbx1 and pbx2 are preferred primary targets, and pbx3 serves as a secondary backup target.
2
Calculate load balancing proportions using the Weight field for equal-priority targets
Total weight for Priority 10 targets = 60 (pbx1) + 20 (pbx2) = 80.
When multiple targets have the same priority value, clients distribute traffic probabilistically according to relative weight ratios.
3
Determine exact traffic allocation percentages for pbx1 and pbx2
pbx1 allocation = 60 / 80 = 75%; pbx2 allocation = 20 / 80 = 25%.
Dividing each server's weight by the combined weight sum of that priority group determines the expected connection ratio.

Anahtar Kavram

DNS SRV Record Structure and Priority/Weight Traffic Distribution
Soru 304Soru

A network switch running a distance-vector dynamic routing protocol detects that a directly connected link to a remote network segment has failed. To immediately inform neighbouring routers that the route is down and prevent routing loops during convergence, the switch broadcasts a routing update advertising the metric for that failed route as infinity (unreachable). Which dynamic routing mechanism is being demonstrated in this scenario?

Cevabı ve açıklamayı göster

Cevap: Route poisoning

Cevap

Route poisoning is the mechanism used by distance-vector protocols to immediately advertise a failed network path with an infinite metric value, signaling to neighboring routers that the route is unreachable.
Route poisoning is a distance-vector protocol feature designed to speed up convergence and eliminate routing loops. When an interface goes down, the router immediately sets the metric for that network to an infinite value (such as 16 hops in RIP) and advertises it to neighboring nodes so they remove the bad path instantly.

Adım Adım Çözüm

1
Analyze the network failure event and notification behavior
The router detects a link failure and immediately sends out a routing update containing a metric set to infinity.
Distance-vector routing protocols rely on metric limits (e.g., maximum hop count) to indicate network unreachability.
2
Identify the dynamic routing stability control mechanism
Advertising a metric of infinity to invalidate a route upon failure is defined as route poisoning.
This mechanism ensures that neighbor routers invalidate their routing table entries for the destination without waiting for hop counts to slowly count to infinity.

Anahtar Kavram

Distance-Vector Loop Prevention Mechanics (Route Poisoning)
Soru 305Soru

A network architect is designing a wireless infrastructure across a multi-floor hospital wing to support real-time telemetry equipment and high-definition video consultations. To maximize throughput, an initial plan suggested configuring all 5 GHz5\text{ GHz} access points (APs) to use 80 MHz80\text{ MHz} channel bonding. However, a post-installation spectral analysis reveals high levels of co-channel interference (CCI) due to floor-to-floor signal bleed and limited available spectrum. Which of the following channel management adjustments is the most effective design strategy to mitigate CCI while maintaining reliable wireless performance?

Cevabı ve açıklamayı göster

Cevap: Reduce channel widths to 20 MHz20\text{ MHz} or 40 MHz40\text{ MHz} to expand the pool of available non-overlapping channels across UNII bands.

Cevap

Reduce channel widths to 20 MHz20\text{ MHz} or 40 MHz40\text{ MHz} to expand the pool of available non-overlapping channels across UNII bands.
In enterprise wireless deployments, wider bonded channels (80 MHz80\text{ MHz}) aggregate multiple adjacent 20 MHz20\text{ MHz} channels. This reduces the number of unique channel selections available, forcing neighboring access points to share frequencies and causing severe co-channel interference (CCI). Reducing the channel width to 20 MHz20\text{ MHz} or 40 MHz40\text{ MHz} provides a larger set of non-overlapping channels in the 5 GHz5\text{ GHz} UNII bands, allowing effective frequency reuse plans that isolate coverage cells.

Adım Adım Çözüm

1
Analyze the cause of co-channel interference in high-density 5 GHz5\text{ GHz} deployments.
Wide channel bonding (80 MHz80\text{ MHz} or 160 MHz160\text{ MHz}) consumes multiple 20 MHz20\text{ MHz} sub-channels, drastically reducing the total number of independent channel assignments available.
When distinct APs in physical proximity (including vertical bleed across floors) share the same primary or secondary channels, they create a single contention domain.
2
Evaluate channel width adjustment vs throughput trade-offs.
Narrowing channel widths to 20 MHz20\text{ MHz} or 40 MHz40\text{ MHz} increases the quantity of reusable, non-overlapping channels across UNII-1, UNII-2 (DFS), and UNII-3 spectrum.
More discrete channels enable a spatial channel reuse plan where adjacent and multi-floor coverage cells operate on non-interfering frequencies.
3
Select the correct mitigation strategy.
Reducing channel bonding width successfully eliminates co-channel interference and medium contention, ensuring stable performance for critical medical applications.
Channel availability and low contention take precedence over maximum theoretical single-client channel width in high-density enterprise environments.

Anahtar Kavram

Wireless Channel Width and Co-Channel Interference (CCI) Management
Tahmini Süre:1m 30s
Soru 306Soru

A network administrator is deploying a centralized log management collector that operates using syslog over UDP port 514514. To enable automated client discovery across the enterprise domain, the administrator needs to configure a DNS record that explicitly specifies the service name, transport protocol, port number, priority, weight, and target hostname. Which of the following DNS record configurations correctly meets this requirement?

Cevabı ve açıklamayı göster

Cevap: An SRV record formatted as _syslog._udp.example.com specifying UDP transport, port 514, and pointing to the collector's canonical hostname.

Cevap

An SRV record formatted as _syslog._udp.example.com specifying UDP transport, port 514, and pointing to the collector's canonical hostname.
The correct option correctly uses an SRV record formatted as `_syslog._udp.example.com`. SRV records specify Symbolic Service Names (`_syslog`), Transport Protocol (`_udp`), Domain Name, Priority, Weight, Port number (514514), and Target Hostname.

Adım Adım Çözüm

1
Identify the required DNS functionality based on scenario constraints.
The requirement calls for dynamic service location defining service name, transport protocol, port number, priority, weight, and target hostname.
Standard host records (A/AAAA) or alias records (CNAME) only map hostnames to IP addresses or other hostnames; they cannot advertise port numbers or transport protocols.
2
Determine the proper record type and syntax for service location.
Service Location (SRV) records follow the standard naming structure: `_service._proto.name. TTL CLASS SRV priority weight port target`.
SRV records are designed specifically to allow clients to locate servers offering specific services on custom ports.
3
Verify protocol and port parameters against the service requirements.
The service requires syslog over UDP port 514514, which matches `_syslog._udp.example.com` with port `514`.
Choosing `_tcp` instead of `_udp` would direct clients to initiate TCP handshakes, which will fail against a UDP-only syslog listener.

Anahtar Kavram

DNS SRV (Service Location) Record Structure and Functionality
Tahmini Süre:1m 30s
Soru 307Soru

A network administrator is implementing IPv6 addressing and client deployment mechanisms on an enterprise VLAN segment. Which of the following statements regarding IPv6 address formatting, DNS resolution, and autoconfiguration are correct? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The link-local address prefix fe80::/10 allows hosts and interfaces to communicate across the immediate physical or logical link segment independently of global unicast prefix assignments.; Stateless Address Autoconfiguration (SLAAC) enables client hosts to dynamically learn their network prefix and default gateway configuration from ICMPv6 Router Advertisement messages.

Cevap

Link-local addresses (fe80::/10) allow link-scoped communication without global unicast configuration, and SLAAC relies on ICMPv6 Router Advertisements to deliver subnet prefix and default gateway info to hosts.
The link-local address range (fe80::/10) enables host communication over the local layer 2 segment without requiring a global unicast address or internet routing. Additionally, SLAAC uses ICMPv6 Router Advertisement messages sent by routers to supply hosts with the subnet prefix, prefix length, and default gateway information needed to generate their own IPv6 addresses.

Adım Adım Çözüm

1
Analyze link-local address scope characteristics
Confirm that fe80::/10 link-local addresses are automatically derived/assigned and function on the local link independently of global routing configurations.
IPv6 nodes require link-local addresses for Neighbor Discovery Protocol (NDP) and local segment messaging regardless of global unicast routing status.
2
Evaluate SLAAC mechanism operations
Confirm that SLAAC uses ICMPv6 Type 134 (Router Advertisement) messages broadcast by routers to dynamically inform client hosts of the network prefix, prefix length, and default gateway.
SLAAC provides stateless IP address autoconfiguration without needing a centralized DHCPv6 stateful lease server.
3
Inspect distractor option regarding zero-compression syntax
Identify that 2001:db8::cafe::1 contains two sets of double colons (::), which violates RFC 5952.
The double colon operator can only be used once per address because multiple occurrences prevent determining how many zero hextets each double colon represents.
4
Inspect distractor option regarding DNS record types
Identify that A records resolve IPv4 hostnames, whereas AAAA records are mandatory for IPv6 resolution.
IPv6 addresses require 128-bit AAAA resource records in DNS zones.

Anahtar Kavram

IPv6 Address Scoping, SLAAC Autoconfiguration, and RFC 5952 Syntax Rules
Soru 308Soru

A network administrator is configuring network address translation on an edge router for a company network. An internal public-facing web server at 192.168.1.50192.168.1.50 must be reachable from the internet at all times using a dedicated public address 203.0.113.10203.0.113.10. At the same time, 250 internal user workstations on the 192.168.1.0/24192.168.1.0/24 subnet require outbound internet connectivity using the single WAN interface IP address 203.0.113.1203.0.113.1. Which combination of NAT translation types should the administrator implement to satisfy both requirements?

Cevabı ve açıklamayı göster

Cevap: Configure a Static NAT mapping for the internal web server to 203.0.113.10203.0.113.10, and configure Port Address Translation (PAT/Overload) using the WAN interface for the workstation subnet.

Cevap

Configure a Static NAT mapping for the internal web server to 203.0.113.10203.0.113.10, and configure Port Address Translation (PAT/Overload) using the WAN interface for the workstation subnet.
Static NAT provides a permanent one-to-one mapping between an internal private IP and an external public IP, which is required for inbound traffic destined for internal web servers. Port Address Translation (PAT), also known as NAT Overload, allows multiple internal hosts to share a single public IP address simultaneously by multiplexing connection streams using unique Layer 4 port numbers.

Adım Adım Çözüm

1
Analyze the web server requirement
Inbound access requires a consistent, permanent 1-to-1 mapping between a private IP (192.168.1.50192.168.1.50) and a public IP (203.0.113.10203.0.113.10). This requires Static NAT.
External users initiating connections to an internal server require a fixed public IP address.
2
Analyze the workstation subnet requirement
250 internal hosts need outbound access sharing a single public IP address (203.0.113.1203.0.113.1). This requires Port Address Translation (PAT / NAT Overload).
PAT tracks individual sessions by mapping unique source transport port numbers to the single public IP address.
3
Combine the translation strategies
Implement Static NAT for the web server and PAT (Overload) for the internal subnet.
This hybrid approach fulfills both persistent inbound reachability and high-density outbound client access.

Anahtar Kavram

Static NAT vs. PAT (NAT Overload) Implementation
Soru 309Soru

An active network link fails on an access switch operating under standard IEEE 802.1D Spanning Tree Protocol (STP). In what chronological order do the switches process and propagate this event across the switched network?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence begins with the local switch generating a TCN BPDU upon link failure, sending it upstream toward the Root Bridge, followed by intermediate switches acknowledging receipt with a TCA flag and forwarding the TCN upstream. Next, the Root Bridge receives the TCN and broadcasts Configuration BPDUs with the TC flag set, causing all switches in the network to temporarily reduce their MAC address table aging timer to flush stale entries.
The correct order follows the standard 802.1D Topology Change Notification mechanism: Local event detection and TCN generation -> Upstream TCN transmission -> Hop-by-hop TCA acknowledgment -> Root Bridge TC flag announcement -> Network-wide MAC table aging timer reduction.

Adım Adım Çözüm

1
Identify the event trigger and initial frame generation.
The switch detecting the link transition creates a TCN BPDU.
802.1D requires local switches to report topology changes to the Root Bridge rather than flooding updates independently.
2
Propagate the notification upstream.
The TCN BPDU is sent out the Root Port toward the Root Bridge.
TCN BPDUs flow upward through the STP tree structure to reach the central root switch.
3
Process intermediate hop acknowledgments.
Upstream neighbors send a TCA flag back and continue forwarding the TCN.
Hop-by-hop acknowledgment ensures reliable delivery of the topology change notice.
4
Broadcast the network-wide topology change notification.
The Root Bridge receives the TCN and sets the TC flag in outgoing Configuration BPDUs.
The Root Bridge is the authoritative source for network-wide configuration updates.
5
Execute MAC table convergence across all switches.
Switches receiving the TC flag shorten their MAC table aging timer to the Forward Delay value (15 seconds).
Shortening the aging timer flushes MAC entries that may point to paths disrupted by the link failure.

Anahtar Kavram

802.1D Spanning Tree Topology Change Notification (TCN) propagation and MAC aging timer adjustment
Soru 310Soru

A network administrator is auditing enterprise DNS configurations. Match each DNS resource record type on the left with its correct functional description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

CNAME Record
MX Record
SRV Record
PTR Record

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

CNAME matches the alias-to-canonical domain description; MX matches the mail server routing description; SRV matches the service location (hostname, port, priority, weight) description; PTR matches the IP address-to-FQDN reverse lookup description.
Each DNS resource record fulfills a distinct network role: CNAME creates domain aliases; MX routes domain mail to designated email servers; SRV locates specific network services along with port and priority parameters; PTR performs reverse DNS lookups mapping IP addresses back to domain names.

Adım Adım Çözüm

1
Analyze CNAME functionality
CNAME provides alias redirection from one FQDN to another canonical domain name.
Alias names simplify domain administration when multiple services map to a single target host.
2
Analyze MX functionality
MX records specify mail handling hosts along with preference ordering.
Mail delivery protocols query MX records to determine destination mail servers for email delivery.
3
Analyze SRV functionality
SRV records define target host, port, priority, and weight for specific network protocols.
Applications requiring discovery of host ports (like Active Directory LDAP or SIP VoIP) rely on SRV records.
4
Analyze PTR functionality
PTR records perform IP-to-hostname reverse mapping.
Reverse DNS lookup zones (in-addr.arpa) resolve IP addresses to domain names for auditing and security verification.

Anahtar Kavram

DNS Resource Record Functions and Infrastructure Roles
Soru 311Soru

During a wireless network site audit of an enterprise facility, a network technician discovers that four access points (APs) installed sequentially along a long corridor are operating on 2.4 GHz channels 1, 4, 8, and 11, respectively. Client devices connected near the middle of the corridor experience high frame retransmission rates and degraded throughput despite indicating strong signal strength. Which modification to the wireless spectrum configuration will best eliminate adjacent channel interference while preserving continuous coverage?

Cevabı ve açıklamayı göster

Cevap: Reassign the access points sequentially to channels 1, 6, 11, and 1, while adjusting transmit power to control co-channel interference between the non-adjacent channel 1 cells.

Cevap

Reassign the access points sequentially to channels 1, 6, 11, and 1, while adjusting transmit power to control co-channel interference between the non-adjacent channel 1 cells.
The 2.4 GHz Wi-Fi spectrum only contains three non-overlapping 20 MHz channels: 1, 6, and 11. Configuring access points on overlapping channels like 4 and 8 results in adjacent channel interference (ACI), which cannot be effectively negotiated by CSMA/CA mechanism and leads to frame corruption and retransmissions. Reallocating the access points to channels 1, 6, 11, and repeating channel 1 at the far end with tuned transmit power eliminates ACI and minimizes co-channel interference.

Adım Adım Çözüm

1
Analyze the 2.4 GHz channel plan and identify the cause of degradation.
Channels 1, 4, 8, and 11 overlap. Each 20 MHz channel occupies a 22 MHz spectral mask spanning 5 channel numbers. Channels 4 and 8 overlap with channels 1, 6, and 11.
Adjacent channel interference (ACI) prevents Wi-Fi devices from performing standard CSMA/CA contention detection, leading to packet collisions and high retransmissions.
2
Determine the standard non-overlapping channel scheme for 2.4 GHz deployments.
The only non-overlapping 20 MHz channel combination in North America/regulatory domains is channels 1, 6, and 11.
These channels have at least 25 MHz separation between center frequencies, preventing spectral overlap.
3
Formulate the remediation plan for a four-AP corridor deployment.
Assign channels 1, 6, 11, and reuse channel 1 on the furthest AP (1, 6, 11, 1). Lower transmit power on the channel 1 APs to limit cell overlap.
Reusing channel 1 with proper power calibration creates manageable co-channel interference (CCI) rather than destructive adjacent channel interference (ACI).

Anahtar Kavram

2.4 GHz Non-Overlapping Channel Assignment and ACI vs CCI Mitigation
Soru 312Soru

When evaluating dynamic routing protocol operations within an enterprise network, which of the following operational characteristics accurately distinguish link-state routing protocols from distance-vector routing protocols? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Link-state protocols build a complete, synchronized topology database of the network area and run the Shortest Path First algorithm to calculate optimal routes.; Link-state protocols send multicast event-triggered updates only when a link state or network topology change is detected.

Cevap

Link-state dynamic routing protocols maintain a synchronized topology database calculated via the Shortest Path First algorithm and flood incremental update notifications only when network state changes occur.
Link-state dynamic routing protocols operate by maintaining a complete map of the entire network topology in a synchronized database. Each router uses Dijkstra's Shortest Path First algorithm to build its routing table independently. Additionally, link-state protocols conserve bandwidth and speed up convergence by sending multicast updates only when network changes take place.

Adım Adım Çözüm

1
Identify the key operational mechanisms of link-state dynamic routing protocols.
Link-state protocols (such as OSPF and IS-IS) collect Link-State Advertisements to form a complete Link-State Database (LSDB) representing all routers and links in an area.
This global topology awareness allows each router to independently execute Dijkstra's Shortest Path First (SPF) algorithm.
2
Analyze how link-state protocols handle network updates compared to distance-vector protocols.
Link-state routers exchange incremental multicast updates only when a topology change occurs, avoiding unnecessary periodic full-table updates.
Event-driven incremental updates reduce bandwidth consumption and accelerate convergence across large networks.

Anahtar Kavram

Link-State vs. Distance-Vector Dynamic Routing Operations
Soru 313Soru

A network systems administrator is auditing the public DNS zone configuration for an enterprise domain (enterprise.exampleenterprise.example) to support a new email server deployment. The administrator runs the following diagnostic command to inspect existing records:

text
; <<>> DiG 9.16.1-Ubuntu <<>> enterprise.example TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41209
;; QUESTION SECTION:
;enterprise.example. IN TXT

;; ANSWER SECTION:
enterprise.example. 3600 IN TXT "v=spf1 ip4:198.51.100.25/28 -all"

To complete the setup for receiving inbound email and ensuring valid domain authentication, which TWO DNS resource records must be properly configured in the forward lookup zone?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An MX record mapping the domain apex to the mail server's FQDN alongside an assigned preference number.; A TXT record at the domain apex containing the Sender Policy Framework (SPF) string identifying authorized sending IP addresses.

Cevap

The correct records to configure are an MX record directing mail traffic to the server's FQDN with a preference value, and a TXT record containing the SPF policy string.
To establish email services, an enterprise requires an MX record to specify the receiving mail server's FQDN along with a preference value. Additionally, domain authentication relies on a TXT record at the zone apex containing SPF specifications (v=spf1...v=spf1...) to declare authorized sending IP addresses.

Adım Adım Çözüm

1
Identify the record type required for inbound email routing.
Inbound SMTP servers are discovered by querying Mail Exchanger (MX) records, which point to an A/AAAA record target and include a preference priority.
External sending mail servers query MX records for the destination domain to determine where to deliver message payloads.
2
Identify the record type required for email authentication and SPF policy publication.
Sender Policy Framework (SPF) policies are published using TXT resource records placed at the domain apex.
Receiving mail servers retrieve TXT records containing the 'v=spf1' prefix to evaluate whether the sending server's IP is permitted to send mail for that domain.
3
Evaluate why alternative options are invalid for forward zone email configuration.
PTR records belong in reverse lookup zones, SRV records are not used for standard SMTP host discovery, and DNS TXT queries operate normally over UDP port 53.
Correct DNS design requires matching record functionality and zone types to protocol standards.

Anahtar Kavram

DNS Infrastructure and Resource Record Functions (MX and TXT/SPF)
Tahmini Süre:2m 0s
Soru 314Soru

A network engineer is auditing IPv6 interface configurations on a core switch. An interface is manually configured with the fully expanded IPv6 address 2001:0db8:0000:0000:00ab:0000:0000:0001/642001:0\text{db8}:0000:0000:00\text{ab}:0000:0000:0001/64. According to standard RFC 5952 zero-compression and leading-zero suppression rules, which of the following represents the correct canonical form of this address?

Cevabı ve açıklamayı göster

Cevap: 2001:db8::ab:0:0:1/64

Cevap

The canonical form of the address is 2001:db8::ab:0:0:1/64.
According to RFC 5952 guidelines for canonical IPv6 address formatting: 1) Leading zeros in any hextet must be omitted (0db8 becomes db8, 00ab becomes ab, 0001 becomes 1). 2) The double-colon (::) must be used to shorten contiguous zero hextets. 3) If there are multiple zero sequences of equal length, the first sequence must be compressed using double-colon, leaving subsequent zero hextets represented as single zeros. Applying these rules yields 2001:db8::ab:0:0:1/64.

Adım Adım Çözüm

1
Suppress leading zeros in each 16-bit hextet.
2001:0db8 becomes 2001:db8, 0000 becomes 0, 00ab becomes ab, and 0001 becomes 1.
RFC 5952 mandates that leading zeros within each hextet must be suppressed.
2
Identify contiguous sequences of zero hextets.
Sequence 1 contains two zeros (hextets 3 and 4); Sequence 2 contains two zeros (hextets 6 and 7).
Double-colon zero compression can only be applied to contiguous sequences of all-zero hextets.
3
Apply the double-colon (::) operator to compress zero hextets according to tie-breaking rules.
Compress Sequence 1 to yield 2001:db8::ab:0:0:1/64.
When zero sequences are equal in length, RFC 5952 Section 4.2.3 requires compressing the first sequence, and double-colon can only be used once per address.

Anahtar Kavram

RFC 5952 IPv6 Address Representation and Compression Rules
Soru 315Soru

A network systems engineer is deploying an IPv6-enabled mail gateway. Remote mail servers are failing reverse DNS checks when accepting outbound messages from the gateway's IP address (2001:db8:85a3::8a2e:370:73342001:db8:85a3::8a2e:370:7334). The engineer runs the following diagnostic command from a terminal:

text
$ host 2001:db8:85a3::8a2e:370:7334
Host 4.3.3.7.0.7.3.0.e.2.a.8.0.0.0.0.0.0.0.0.3.a.5.8.8.b.d.0.1.0.0.2.ip6.arpa not found: 3(NXDOMAIN)

Which of the following resource records must be configured in the authoritative DNS zone to resolve the NXDOMAIN error?

Cevabı ve açıklamayı göster

Cevap: A PTR record within the ip6.arpa domain that maps the reverse nibble format of the IPv6 address to the mail gateway's FQDN

Cevap

A PTR record within the ip6.arpa domain that maps the reverse nibble format of the IPv6 address to the mail gateway's fully qualified domain name (FQDN).
Reverse DNS lookups resolve IP addresses into hostnames using Pointer (PTR) records. For IPv6, the address is expanded into 32 hexadecimal nibbles, reversed, and appended with .ip6.arpa. Creating a PTR record in this zone allows receiving servers to successfully resolve the mail gateway's IP address.

Adım Adım Çözüm

1
Analyze the diagnostic command and output.
The query 'host 2001:db8:85a3::8a2e:370:7334' performs a reverse DNS lookup against the reverse IPv6 domain (ip6.arpa) and returns NXDOMAIN, indicating the record is missing.
Reverse DNS resolution queries IP addresses to retrieve associated domain names.
2
Identify the required DNS record type for reverse lookup.
A Pointer (PTR) record is specifically designed to map IP addresses to FQDNs in reverse lookup zones (.in-addr.arpa for IPv4 and .ip6.arpa for IPv6).
Forward lookup records (A or AAAA) map hostnames to IP addresses, which will not satisfy reverse DNS lookup requests.
3
Select the option specifying the correct record type and zone structure.
Creating a PTR record in the ip6.arpa zone resolves the reverse lookup failure.
This establishes the valid mapping required by receiving mail servers verifying origin IP addresses.

Anahtar Kavram

IPv6 Reverse DNS Resolution (PTR Records in ip6.arpa)
Tahmini Süre:1m 30s
Soru 316Soru

A network engineer is designing a multi-building enterprise wireless infrastructure across diverse indoor and outdoor physical environments. Match each wireless antenna type on the left with its optimal deployment scenario and RF propagation profile on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Omnidirectional Dipole Antenna
Internal Patch / Wall Panel Antenna
Yagi-Uda Antenna
Parabolic Dish Antenna

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Omnidirectional Dipole Antenna matches with ceiling-mounted 360-degree horizontal coverage; Internal Patch / Wall Panel Antenna matches with wall-mounted corridor directional coverage; Yagi-Uda Antenna matches with moderate beamwidth medium-distance outdoor bridging; and Parabolic Dish Antenna matches with extremely narrow beamwidth long-range outdoor bridging.
Omnidirectional antennas provide 360-degree horizontal coverage for open office floors; patch panel antennas focus RF energy forward down hallways; Yagi antennas deliver moderate directional gain for medium-distance outdoor bridging; and parabolic dish antennas provide ultra-focused high gain for long-range wireless links.

Adım Adım Çözüm

1
Analyze the radiation pattern of an omnidirectional dipole antenna.
Identify that energy is distributed equally in all horizontal directions (360 degrees).
Central indoor ceiling mounting maximizes area coverage for users spread across an open floor.
2
Evaluate the directional characteristics of patch/panel antennas.
Identify forward hemispherical RF projection.
Useful along facility borders and long hallways to prevent co-channel leakage into unneeded spaces.
3
Distinguish between Yagi and Parabolic Dish point-to-point bridging antennas.
Associate Yagi antennas with moderate directional gain for medium distances and Parabolic Dish antennas with extremely high gain and narrow pencil beams for long-range links.
Physical reflector design in parabolic antennas focuses RF energy much more tightly than Yagi elements, accommodating longer path distances.

Anahtar Kavram

Wireless Antenna Selection, Gain Characteristics, and RF Propagation Profiles
Soru 317Soru

A network administrator is auditing the stateful address translation table on an edge firewall configured with Port Address Translation (PAT). Which of the following statements correctly describe how PAT processes outbound traffic and manages network connections? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: PAT maps multiple private IPv4 addresses to a single public IP address by dynamically assigning a unique Layer 4 source port number to each outbound session.; If two internal hosts initiate outbound traffic using identical source port numbers, the edge device modifies the outbound source port to maintain entry uniqueness in its translation table.

Cevap

The correct statements are that PAT maps multiple private IPv4 addresses to a single public IP address using unique Layer 4 source port numbers, and that the NAT device rewrites egress source ports if two internal hosts attempt to use identical source ports.
Port Address Translation (PAT) allows thousands of internal hosts on private IP addresses to share a single public IP address by tracking sessions using unique Layer 4 TCP/UDP port numbers. If two internal hosts select the same initial ephemeral source port, the PAT gateway alters the translated outbound source port to guarantee a unique translation entry.

Adım Adım Çözüm

1
Analyze how PAT handles internal-to-external translation.
Recognize that PAT uses Layer 4 source port numbers (TCP/UDP) alongside a single public IP address to differentiate traffic streams originating from multiple internal private host IP addresses.
PAT (also known as NAT Overload) relies on unique transport-layer port numbers to allow multiple private IP addresses to share one public IP address.
2
Evaluate port collision handling in PAT.
Confirm that if two client hosts pick the same source port number, the translating device rewrites the translated source port number on the WAN side to avoid ambiguous translation table entries.
Maintaining unique (Public IP, Public Port) tuples is necessary for returning traffic to be correctly de-multiplexed back to the originating internal (Private IP, Private Port) client.
3
Identify misconfigurations and incorrect operational descriptions in distractors.
Eliminate options that confuse Dynamic NAT pool assignment with PAT overload, or that incorrectly place PAT tracking at Layer 2 instead of Layer 3/4.
Dynamic NAT allocates 1-to-1 public IP mappings, and address/port translation operates at Network (Layer 3) and Transport (Layer 4) layers.

Anahtar Kavram

Port Address Translation (PAT / NAT Overload) session tracking and port rewriting mechanisms
Soru 318Soru

A network engineer is configuring standard IEEE 802.1D Spanning Tree Protocol (STP) across a enterprise switch topology. Currently, all switches in the network operate using the default bridge priority of 3276832768. The engineer needs to explicitly configure Switch-1 to guarantee it becomes the primary Root Bridge, and Switch-2 to serve as the designated backup Root Bridge if Switch-1 fails. Which combination of bridge priority settings should the engineer assign to achieve this design?

Cevabı ve açıklamayı göster

Cevap: Assign a bridge priority of 40964096 to Switch-1 and 81928192 to Switch-2.

Cevap

Assign a bridge priority of 4096 to Switch-1 and 8192 to Switch-2.
In Spanning Tree Protocol (STP), the Root Bridge is elected based on the lowest Bridge ID, which consists of a 2-byte Bridge Priority and a 6-byte MAC Address. Because the default priority on switches is 3276832768, assigning a lower priority value such as 40964096 to Switch-1 guarantees it will win the root election. Assigning 81928192 to Switch-2 ensures that if Switch-1 fails, Switch-2 will possess the next lowest priority value in the network, allowing it to seamlessly take over as the backup Root Bridge.

Adım Adım Çözüm

1
Identify the STP Root Bridge election criteria.
STP elects the switch with the lowest Bridge ID (Bridge Priority + MAC Address) as the Root Bridge.
Lower numerical values have higher precedence in STP elections.
2
Determine the required priority value for the primary Root Bridge (Switch-1).
Switch-1 priority must be lower than the default value of 3276832768. Setting it to 40964096 guarantees primary root bridge status.
A lower priority value ensures Switch-1 beats all default switches in election comparisons.
3
Determine the required priority value for the secondary backup Root Bridge (Switch-2).
Switch-2 priority must be higher than Switch-1 (40964096) but lower than all other network switches (3276832768). Setting it to 81928192 achieves backup placement.
If Switch-1 fails, Switch-2 will have the next lowest priority (81928192) among remaining operational switches.

Anahtar Kavram

STP Root Bridge Election and Priority Mechanics
Tahmini Süre:1m 15s
Soru 319Soru

A network engineer is documenting the IPv6 address allocation for an enterprise router interface. The fully expanded, uncompressed address assigned to the interface is 2001:0db8:0000:0042:0000:0000:0000:0007. According to RFC 5952 rules, what is the correctly compressed and canonicalized representation of this IPv6 address?

Cevabı ve açıklamayı göster

Cevap: 2001:db8:0:42::7

Cevap

2001:db8:0:42::7
According to RFC 5952 standards for IPv6 address canonicalization: 1) Leading zeros within each 16-bit field must be removed (0db8 -> db8, 0042 -> 42, 0007 -> 7). 2) A single all-zero field is written as 0. 3) The double-colon (::) must be used to compress the longest contiguous sequence of all-zero fields. In this address, the sequence of three zeros (0000:0000:0000) is longer than the single zero field, making 2001:db8:0:42::7 the only correct canonical compressed address.

Adım Adım Çözüm

1
Suppress leading zeros in each 16-bit hexadecimal field (hextet).
2001:0db8 becomes 2001:db8; 0000 becomes 0; 0042 becomes 42; 0000:0000:0000 becomes 0:0:0; 0007 becomes 7. The intermediate string is 2001:db8:0:42:0:0:0:7.
RFC 5952 requires removing leading zeros within each hextet while preserving a single zero for any all-zero hextet.
2
Identify all contiguous sequences of all-zero hextets and select the longest sequence to compress using double-colon (::).
Sequence 1 is at index 3 (length 1: '0'). Sequence 2 is at indices 5-7 (length 3: '0:0:0'). The longer sequence (length 3) is replaced with '::'.
RFC 5952 specifies that double-colon (::) must replace the longest contiguous run of all-zero hextets. Shorter single-zero hextets must remain as a single '0'.
3
Combine the compressed sections into the final canonical IPv6 address.
2001:db8:0:42::7
Ensures full compliance with RFC 5952 formatting and lowercase hexadecimal standards.

Anahtar Kavram

RFC 5952 IPv6 Address Compression and Canonical Representation
Soru 320Soru

A core router receives a packet destined for 192.168.10.45192.168.10.45. The router's Routing Information Base (RIB) contains four distinct candidate routes for reaching this destination network:

- A static route to 192.168.10.0/24192.168.10.0/24 configured with an administrative distance of 130130.
- An OSPF route to 192.168.10.0/24192.168.10.0/24 with an administrative distance of 110110 and metric of 5050.
- An EIGRP internal route to 192.168.10.0/24192.168.10.0/24 with an administrative distance of 9090 and metric of 2560025600.
- A RIPv2 route to 192.168.10.0/24192.168.10.0/24 with an administrative distance of 120120 and metric of 22.

Which route will the router install into its active forwarding table to handle traffic destined for 192.168.10.45192.168.10.45?

Cevabı ve açıklamayı göster

Cevap: The EIGRP internal route because it possesses the lowest administrative distance value among all candidate routes.

Cevap

The router will select the EIGRP internal route because it has the lowest administrative distance (9090) among all routes advertising the exact same prefix mask length (192.168.10.0/24192.168.10.0/24).
When a router receives multiple routing updates for the exact same destination network prefix (192.168.10.0/24192.168.10.0/24), it uses Administrative Distance (AD) to evaluate which protocol source is most trustworthy. EIGRP internal routes have a default AD of 9090, which is lower (and thus preferred) over OSPF (110110), RIPv2 (120120), and the explicitly configured static route (130130).

Adım Adım Çözüm

1
Evaluate Longest Prefix Match (LPM)
All candidate routes advertise the exact same network prefix mask (192.168.10.0/24192.168.10.0/24), so prefix length comparison results in a tie.
Routers check prefix length specificity first before comparing routing source trustworthiness.
2
Compare Administrative Distance (AD) across competing protocols
EIGRP internal AD (9090) < OSPF AD (110110) < RIPv2 AD (120120) < Custom Static AD (130130).
Administrative Distance defines the trustworthiness of a route source; lower AD numbers indicate higher priority.
3
Select winning route for Forwarding Information Base (FIB)
The EIGRP route is selected and installed into the active routing table.
Metrics are only compared between routes learned from the exact same routing protocol instance, not across different protocols.

Anahtar Kavram

Administrative Distance Precedence in Route Selection
ÖncekiSayfa 16 / 22Sonraki
Network Implementation Alıştırma Soruları — CompTIA Network+ — Sayfa 16 | Examkin