Network Operations

362 soru

Soru 201Soru

A network administrator is configuring network redundancy for a mission-critical database server equipped with two physical network interface cards (NICs). The server is connected to two separate, independent standalone switches that do not support multi-chassis link aggregation (MLAG). The administrator configures IEEE 802.3ad Link Aggregation Control Protocol (LACP) bonding on the server's interfaces. Immediately after enabling the bond, network monitoring reports severe packet loss, and both switches log MAC address flapping errors. Which of the following is the most appropriate solution to resolve the connectivity issue while maintaining interface redundancy?

Cevabı ve açıklamayı göster

Cevap: Reconfigure the server NIC teaming mode to Switch Independent Active-Backup mode.

Cevap

Reconfiguring the server's NIC teaming mode to Switch Independent Active-Backup mode resolves the MAC address flapping while maintaining link redundancy.
IEEE 802.3ad LACP link aggregation requires the participating ports to terminate on a single switch control plane, such as a single switch or stacked switches supporting MLAG. When LACP is enabled across independent standalone switches, the switches see the same MAC address appearing across different unaggregated links, causing MAC address table instability (flapping) and dropped traffic. Reconfiguring the NIC team to Switch Independent Active-Backup mode allows one interface to handle traffic while keeping the other in standby without requiring switch coordination, resolving the conflict while maintaining hardware failover protection.

Adım Adım Çözüm

1
Identify the cause of MAC address flapping
IEEE 802.3ad (LACP) requires all aggregated physical ports to terminate on a single logical switch (or MLAG/stacked switch cluster). Connecting LACP links to independent standalone switches causes frames with the same source MAC address to arrive on separate switches, leading to MAC table instability.
Standalone switches cannot coordinate LACP control frames across separate control planes.
2
Select a compatible redundancy mode for standalone switches
Switch Independent Active-Backup mode sends traffic over one primary interface while keeping the secondary interface standby. It does not require switch coordination.
Active-Backup mode works across unstacked, independent upstream switches without causing MAC flapping.

Anahtar Kavram

NIC Teaming and Link Aggregation Requirements in High Availability
Soru 202Soru

Match each out-of-band management technology on the left to the enterprise infrastructure recovery scenario on the right for which it serves as the most appropriate solution.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

IP-KVM Switch with Virtual Media Mapping
Switched Smart Power Distribution Unit (PDU)
Cellular Out-of-Band (OOB) Gateway with VPN
Dedicated Serial Terminal Server (Console Server)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

IP-KVM Switch with Virtual Media Mapping matches OS reinstallation via remotely mounted ISO images. Switched Smart PDU matches remote power cycling and current monitoring of frozen host servers. Cellular OOB Gateway matches alternate transport during primary fiber link cuts. Dedicated Serial Terminal Server matches console command-line recovery of switches stuck at bootloader prompts.
Each management method addresses a specific layer of failure. Virtual media on IP-KVM enables full remote system installation by presenting local images to remote bare-metal hardware. Smart PDUs provide direct control over power outlets to recover unresponsive hardware via hard power cycling. Cellular OOB gateways bypass severed terrestrial infrastructure using cellular networks to restore connectivity to management devices. Serial terminal servers consolidate console cables into a centralized platform for low-level switch and router recovery.

Adım Adım Çözüm

1
Analyze the technical requirements of each recovery scenario.
Scenario 1 requires low-level video/keyboard access and optical/ISO media redirection. Scenario 2 requires raw electrical power control and telemetry. Scenario 3 requires an independent WAN communication channel. Scenario 4 requires asynchronous serial CLI access.
Matching out-of-band techniques requires evaluating whether the access requirement is physical power, serial signals, peripheral redirection, or alternative transport layer availability.
2
Map each hardware/protocol mechanism to its specialized capability.
Virtual media redirection aligns with IP-KVM capabilities. Switched power outlets align with Smart PDUs. Independent cellular radio backhaul aligns with OOB Cellular Gateways. Multi-port RS-232/RJ-45 serial concentrators align with Terminal Servers.
Matching each technology's core function ensures proper operational recovery without relying on corrupted or unavailable in-band operating systems.

Anahtar Kavram

Out-of-Band (OOB) Remote Management Mechanisms
Soru 203Soru

A network administrator is troubleshooting an isolated server at a remote site after its operating system suffers a complete kernel panic. Because the host OS is non-functional, all in-band management sessions are disconnected and unresponsive. The administrator must view pre-boot POST and BIOS screens and perform a hard power cycle on the system without physical access. Which of the following deployment strategies best achieves these out-of-band management objectives?

Cevabı ve açıklamayı göster

Cevap: Connecting an IP-KVM appliance to the server's video and USB ports while plugging the server's power supplies into a networked managed Power Distribution Unit (PDU)

Cevap

The optimal solution is to connect an IP-KVM appliance to the server's hardware console ports and plug its power supplies into a networked managed Power Distribution Unit (PDU).
Out-of-band (OOB) management operates independently of the host operating system. An IP-KVM switch captures hardware display output (BIOS/POST) and sends keyboard/mouse inputs directly via hardware ports. Paired with a networked managed PDU (Power Distribution Unit), an administrator can remotely toggle electrical power to force a hard cold reboot when the host OS is frozen.

Adım Adım Çözüm

1
Analyze the management constraints and system failure state.
Identified that the host operating system has kernel-panicked, rendering all in-band software services (SSH, RDP, VNC, SNMP) non-functional.
Out-of-band (OOB) solutions must operate independent of the host OS and primary network stack.
2
Identify the required hardware interaction capabilities.
The scenario requires BIOS/POST screen output viewing and direct physical electrical power toggling.
Standard network CLI tools cannot display pre-boot video or force a hard hardware power cycle.
3
Select the appropriate out-of-band hardware technologies.
An IP-KVM provides remote keyboard, video, and mouse interaction at the hardware level, while a managed PDU provides remote outlet power control.
Combining IP-KVM with a managed PDU fulfills both hardware-level display inspection and hard power cycling requirements.

Anahtar Kavram

Out-of-Band (OOB) Management and Hardware Abstraction
Tahmini Süre:2m 0s
Soru 204Soru

A network administrator needs to select remote access mechanisms for data center infrastructure that provide secure, encrypted command-line management or function out-of-band during a primary production network outage. Which of the following options satisfy these requirements? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Connecting device serial console ports to a dedicated terminal server accessible via an external cellular modem; Establishing a Secure Shell (SSH) connection over a dedicated out-of-band management interface

Cevap

Connecting device serial console ports to a dedicated terminal server with cellular backup, and establishing Secure Shell (SSH) connections over an isolated out-of-band management interface.
Out-of-band management relies on dedicated physical or secondary paths (such as serial console connections to a terminal server backed by cellular connectivity) to reach devices independently of production IP networks. For remote management, Secure Shell (SSH) ensures administrative commands and credentials are securely encrypted.

Adım Adım Çözüm

1
Identify methods that provide true out-of-band (OOB) connectivity during primary network failures.
Connecting physical console/serial ports to a terminal server paired with an independent transport channel (such as a cellular modem) allows network administrators to manage hardware even when primary and secondary WAN links are down.
Out-of-band management requires an alternate physical or logical pathway isolated from standard production data paths.
2
Identify secure, encrypted remote access protocols.
Secure Shell (SSH) encrypts all traffic (including passwords and commands) to prevent eavesdropping and unauthorized access, especially when paired with a dedicated out-of-band management network.
In-band unencrypted protocols such as Telnet or legacy SNMP transmit credentials in cleartext and present unacceptable security risks.

Anahtar Kavram

Out-of-Band Management & Secure Remote Access Protocols
Tahmini Süre:1m 0s
Soru 205Soru

A network security administrator is updating telemetry and remote management policies for core switches transmitting data across an untrusted WAN link. To comply with security auditing standards requiring both encrypted log transport and secure network polling, which TWO of the following configuration options should be implemented? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure Syslog to transmit log events using TLS over TCP port 6514.; Configure SNMPv3 utilizing the authPriv security level for device polling.

Cevap

The correct configurations are configuring Syslog to transmit log events using TLS over TCP port 6514, and configuring SNMPv3 utilizing the authPriv security level for device polling.
Comprehensive network auditing across untrusted links requires encryption for both passive event streaming and active management polling. Syslog over TLS (RFC 5425) uses TCP port 6514 to ensure secure and reliable event delivery. For active querying, SNMPv3 authPriv is required as it enforces both cryptographic user authentication and payload encryption.

Adım Adım Çözüm

1
Determine the standard protocol and port for encrypted Syslog transport.
Standard unencrypted Syslog uses UDP port 514. Secure Syslog wrapper using TLS mandates TCP port 6514.
TLS encryption requires a connection-oriented transport protocol like TCP to establish secure handshakes.
2
Identify the required SNMP version and security mode for encrypted telemetry polling.
SNMPv3 with authPriv mode provides both authentication and privacy/encryption.
SNMPv1 and SNMPv2c send community strings in cleartext without encryption capabilities, while SNMPv3 authNoPriv authenticates without encrypting payload data.

Anahtar Kavram

Secure Telemetry Transport & Audit Protocols
Soru 206Soru

A network technician needs to configure out-of-band (OOB) management access for a core router to ensure administrative connectivity remains available even during a total failure of the primary local network interfaces. Which connection method should be configured?

Cevabı ve açıklamayı göster

Cevap: Connecting a dedicated modem to the router's auxiliary or serial console port

Cevap

Connecting a dedicated modem to the router's auxiliary or serial console port provides valid out-of-band management.
Out-of-band (OOB) management provides a dedicated, dedicated channel for device administration that operates independently of production network interfaces. Connecting a modem or terminal server to a device's dedicated serial console or auxiliary port ensures administrators retain command-line access even when primary network interfaces fail.

Adım Adım Çözüm

1
Identify the primary requirement for out-of-band (OOB) management access.
OOB management requires an independent, alternative communication path separate from primary data production paths.
In-band channels become unusable whenever primary network interfaces or links experience outages.
2
Evaluate the given connectivity methods against OOB requirements.
A serial console or auxiliary port connected to a modem provides a dedicated path that bypasses network interfaces entirely.
This guarantees command-line interface access for remote technicians during emergency troubleshooting.

Anahtar Kavram

Out-of-Band Management Channel Isolation
Soru 207Soru

A network engineer is investigating complaints of erratic video feed freezing during executive webcasts between two branch offices. Telemetry logs indicate a stable average round-trip time (RTT) of 18 ms18\text{ ms}, but the variation in inter-packet arrival delay fluctuates sharply between 4 ms4\text{ ms} and 165 ms165\text{ ms}. Additionally, company policy dictates that device telemetry collection via remote polling must encrypt all payload data over the wire using authenticated credentials. Which performance metric is degrading video quality, and which monitoring configuration satisfies the security policy?

Cevabı ve açıklamayı göster

Cevap: Metric: Jitter; Configuration: SNMPv3 configured with the authPriv security level using SHA authentication and AES payload encryption.

Cevap

The degraded quality is caused by high jitter, and the required monitoring configuration is SNMPv3 set to the authPriv security level.
Jitter is the variance in packet arrival latency, which adversely impacts real-time UDP streams like interactive video. SNMPv3 utilizing the authPriv security level fulfills the requirement for both packet authentication and payload encryption via cryptographic standards such as AES.

Adım Adım Çözüm

1
Analyze the observed network metric symptom.
Identified high fluctuation in packet arrival times (4 ms4\text{ ms} to 165 ms165\text{ ms}) despite stable average latency (18 ms18\text{ ms}).
Variation in inter-packet arrival delay is the precise definition of jitter, which severely affects real-time stream buffering.
2
Evaluate SNMP version and security level requirements.
Selected SNMPv3 with the authPriv security level.
The corporate policy requires both user authentication and payload encryption. SNMPv3 authPriv uses HMAC-SHA/MD5 for authentication and AES/DES for payload privacy.

Anahtar Kavram

Network Jitter and SNMPv3 Security Levels
Soru 208Soru

A network engineering team is designing a resilient out-of-band (OOB) infrastructure for a remote edge data center. The goal is to ensure that administrators can perform direct console configuration and hard power cycles on core infrastructure even during a total failure of the site's primary WAN router and internal LAN routing. Which TWO of the following solutions must be deployed to fulfill these specific out-of-band recovery requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A terminal server connected to device console ports and paired with an external cellular modem; Switched Power Distribution Units (PDUs) reachable via an independent out-of-band management network link

Cevap

The correct requirements to deploy are a terminal server paired with a cellular modem for serial CLI connectivity, and switched PDUs connected via an isolated out-of-band network link for power management.
Out-of-band management provides alternative administrative pathways when production networks fail. Deploying a terminal server connected to device serial console ports via an alternative gateway (such as a cellular modem) ensures direct access to device command lines even if primary IP routing is down. Additionally, implementing switched Power Distribution Units (PDUs) on an out-of-band segment allows engineers to perform hard power resets on frozen equipment remotely.

Adım Adım Çözüm

1
Analyze out-of-band remote management requirements
True out-of-band access must function completely independently of primary WAN links, internal LAN switches, and normal IP routing.
When a network experiences kernel panics, bad configuration pushes, or primary link outages, in-band management traffic cannot reach the devices.
2
Evaluate command-line interface (CLI) accessibility options
Selecting a terminal server with cellular modem capability guarantees access.
Terminal servers bridge cellular calls/IP connections directly to physical RS-232 serial console ports on target devices.
3
Evaluate hard power cycle management options
Selecting switched PDUs over an isolated out-of-band connection fulfills power cycling requirements.
Managed PDUs allow remote outlet-level power toggling without relying on the target device's operating system.

Anahtar Kavram

Out-of-band (OOB) architecture requires physically separate access paths (cellular modems, terminal servers, serial console cables) and independent power management (switched PDUs) that operate entirely detached from in-band IP production networks.
Soru 209Soru

Match each remote access and out-of-band management technology on the left with its primary administrative function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

SSH (Secure Shell)
Cellular OOB Modem
Smart PDU
IP-KVM

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

SSH matches with providing encrypted command-line management over an operational IP network; Cellular OOB Modem matches with providing alternative console access during primary link failure; Smart PDU matches with allowing remote power cycling of unresponsive outlets; IP-KVM matches with providing hardware-level graphical interface and BIOS access independent of host OS.
Each management solution aligns directly with a specific operational role: SSH handles encrypted in-band command-line administration, cellular out-of-band modems maintain emergency administrative access when network links fail, Smart PDUs enable remote outlet power cycling, and IP-KVM provides remote BIOS and graphical user interface access independent of the host operating system.

Adım Adım Çözüm

1
Identify in-band encrypted CLI management
SSH provides encrypted shell sessions across standard IP network infrastructure.
SSH is the standard protocol for secure in-band command line access.
2
Identify redundant console reachability method
A cellular out-of-band (OOB) modem bypasses primary ISP and network connections to reach serial consoles directly.
Out-of-band management requires an alternate path independent of the primary data network.
3
Identify remote power control hardware
Smart PDUs manage electrical distribution and allow individual outlet power resets remotely.
When a network appliance freezes completely, cycling power via a Smart PDU is often required.
4
Identify remote hardware display and input management
IP-KVM appliances capture monitor output and input signals at the motherboard level.
IP-KVM functions even when the host operating system is corrupted or turned off.

Anahtar Kavram

Remote Access and Out-of-Band Management Tools
Soru 210Soru

During a routine automated security audit, a network engineer discovers that a custom Access Control List (ACL) rule was manually added directly to a perimeter firewall during an unrecorded late-night troubleshooting session. The rule remains active in production and bypasses the organization's documented security baseline. According to standard change management best practices, which of the following actions should the engineer take first?

Cevabı ve açıklamayı göster

Cevap: Document the current running configuration, assess operational impact, and submit an emergency Request for Change (RFC) for review.

Cevap

Document the current running configuration, assess operational impact, and submit an emergency Request for Change (RFC) for review.
When configuration drift (an unapproved manual change) is discovered in production, the correct procedure is to document the active state, analyze business/security impact, and immediately initiate an emergency Request for Change (RFC). This allows the Change Advisory Board (CAB) or emergency change authority to properly authorize either a controlled rollback plan or a permanent baseline modification.

Adım Adım Çözüm

1
Identify configuration drift and preserve facts
The unauthorized firewall ACL modification is documented along with its current active state.
Before altering production environments, administrators must fully understand what changes exist and what services might be affected.
2
Initiate emergency change management governance
An emergency RFC is prepared and submitted for formal risk review.
Out-of-band or unrecorded modifications must be processed through emergency change protocols to evaluate security risks and plan a controlled rollback or formal approval.

Anahtar Kavram

Configuration Drift Remediation and Emergency RFC Processing
Soru 211Soru

A network technician is auditing a campus network layout where two Layer 3 switches operate as redundant gateways for a corporate VLAN. Users report degraded throughput during high-traffic periods, and analysis reveals that traffic regularly traverses the inter-switch trunk link to reach the active gateway. Which TWO configuration steps should the technician verify or implement to ensure optimal high-availability traffic paths and prevent unnecessary trunk saturation? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the active Virtual Router Redundancy Protocol (VRRP) master switch to be the Spanning Tree Protocol (STP) root bridge for that VLAN.; Configure DHCP scope options to distribute the virtual IP (VIP) address as the default gateway for client workstations on the VLAN.

Cevap

To optimize high-availability traffic flow and eliminate extra trunk hops, the primary VRRP switch must also be configured as the STP root bridge for the VLAN, and client devices must be assigned the virtual IP (VIP) address as their default gateway.
Optimal network redundancy relies on aligning Layer 2 topology with Layer 3 active forwarding paths. Ensuring that the VRRP master switch is also the Spanning Tree Protocol root bridge guarantees that switch ports leading to the active gateway remain in a forwarding state without unnecessary forwarding across inter-switch links. Furthermore, client devices must use the virtual IP address to benefit from automated gateway redundancy.

Adım Adım Çözüm

1
Analyze the Layer 2 and Layer 3 topologies for high availability efficiency.
Identify that if the STP root bridge and the VRRP master gateway reside on different physical switches, client traffic will travel across the inter-switch link to reach the root bridge before being forwarded to the default gateway.
Aligning the STP root bridge position with the active FHRP master prevents asymmetrical paths and unnecessary utilization of inter-switch trunks.
2
Verify client default gateway configuration settings.
Ensure client workstations receive the shared Virtual IP (VIP) address from DHCP rather than the physical IP address of a single switch.
Using the VIP enables seamless hardware address failover without requiring client reconfiguration when the primary master fails.

Anahtar Kavram

First Hop Redundancy Protocol (FHRP) and Spanning Tree Protocol (STP) Coexistence
Soru 212Soru

A network operations team plans to upgrade the core layer-3 switches in a healthcare system's primary data center. Place the following change management phases in the correct sequence from start to finish.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational order is: 1) Submit a formal Request for Change (RFC); 2) Perform an impact analysis, risk assessment, and establish a rollback procedure; 3) Present the proposed change to the Change Advisory Board (CAB) for authorization; 4) Execute the upgrade during an authorized maintenance window; 5) Conduct post-implementation verification testing and update configuration baseline documentation.
The standard change management lifecycle begins with RFC submission, followed by risk analysis and rollback planning. The complete proposal is then submitted to the CAB for authorization. Once authorized, implementation takes place within an approved maintenance window, followed by post-implementation validation and baseline documentation updates.

Adım Adım Çözüm

1
Identify the initial request phase
Submitting the RFC initiates the change lifecycle.
Change tracking begins with formal documentation of what is changing and why.
2
Analyze risk and fallback options
Impact analysis, risk scoring, and rollback plans are attached to the RFC.
The approving body requires technical risk metrics and back-out plans to evaluate the change.
3
Seek administrative authorization
The Change Advisory Board (CAB) reviews and approves the change.
Execution cannot proceed without stakeholders and advisory boards granting formal permission.
4
Perform the technical deployment
The upgrade is executed within the scheduled maintenance window.
Changes must be deployed only during approved time frames to prevent unplanned outages.
5
Validate and finalize baseline documentation
Verification testing is completed, and baseline network documentation is updated.
Closing a change requires verifying success and ensuring documentation reflects current state.

Anahtar Kavram

Standard ITIL Change Management Life Cycle
Soru 213Soru

A network technician needs to perform the initial configuration on a brand-new managed switch that has no IP address assigned to its interfaces. Which of the following connection methods should the technician use to access the device command-line interface?

Cevabı ve açıklamayı göster

Cevap: Local console connection

Cevap

Local console connection
A local console connection provides direct out-of-band management access using a serial interface connection. It allows initial configuration of network devices when no IP address or network connectivity has been established.

Adım Adım Çözüm

1
Determine the network operational status of the new switch.
The device is unconfigured and has no IP address assigned to any interface.
Network-layer remote management protocols require IP addressing to establish connectivity.
2
Evaluate access protocols against the current state.
In-band protocols (SSH, Telnet, RDP) cannot reach an unconfigured device.
In-band management depends on an operational network protocol stack.
3
Select a direct physical management connection.
Use a serial console cable connected directly from the technician workstation to the switch console port.
Console management operates out-of-band and works without IP addressing.

Anahtar Kavram

Out-of-Band Management via Serial Console
Soru 214Soru

A network administrator needs to configure secure in-band remote command-line management for a newly deployed network switch. Which of the following protocols and associated TCP port numbers should be selected to ensure all administrative sessions are encrypted? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: SSH (Secure Shell); Port 22

Cevap

SSH (Secure Shell) and TCP Port 22 must be selected to secure in-band remote management.
SSH (Secure Shell) and TCP port 22 are the standard protocol and port combination used for encrypted in-band command-line access to network infrastructure switches and routers.

Adım Adım Çözüm

1
Identify the security requirement for remote management
The requirement specifies that administrative sessions must be encrypted.
Encryption prevents eavesdropping and credential theft across the network.
2
Select the appropriate protocol and default port number
SSH provides encrypted CLI management and operates by default on TCP port 22.
Telnet and port 23 transmit traffic in plaintext and do not meet the security requirement.

Anahtar Kavram

Secure Remote Command-Line Management
Soru 215Soru

A network administrator prepares a Request for Change (RFC) to perform a major firmware upgrade on the primary core switches of a enterprise network. The submitted RFC includes the technical rationale, a comprehensive risk impact analysis, results from pre-deployment sandbox testing, and a designated maintenance window schedule. During the Change Advisory Board (CAB) review, the committee defers approval due to an omitted required section. Which of the following critical elements was missing from the submitted RFC?

Cevabı ve açıklamayı göster

Cevap: A formal rollback plan defining specific trigger thresholds and step-by-step procedures to revert to the previous stable state if validation fails

Cevap

A formal rollback plan defining specific trigger thresholds and step-by-step procedures to revert to the previous stable state if validation fails
In standardized configuration and change management workflows, every Request for Change (RFC) must contain an explicit rollback plan prior to Change Advisory Board (CAB) approval. This ensures engineers can quickly and safely revert the network device to its baseline configuration if post-implementation testing fails.

Adım Adım Çözüm

1
Analyze the components present in the RFC submission
The submission includes rationale, risk assessment, sandbox test results, and maintenance window scheduling.
Identifying existing RFC components highlights what mandatory change management phase is missing.
2
Evaluate standard CompTIA and ITIL change management guidelines for RFC completion
A mandatory requirement for any infrastructure RFC is a fully defined, pre-tested rollback procedure with explicit triggers.
CAB approval requires assurance that the network can quickly revert to a baseline state without prolonged outage if the implementation encounters errors.

Anahtar Kavram

Standard Request for Change (RFC) Mandatory Components and Rollback Planning
Tahmini Süre:1m 15s
Soru 216Soru

Match each out-of-band management operational requirement on the left with the most appropriate hardware management technology on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Emergency administrative CLI access to network routers during a complete failure of the primary terrestrial WAN connection
Direct BIOS-level graphical keyboard, video, and mouse control with virtual media mounting for an un-responsive bare-metal host
Remote execution of hard power-cycles on individual equipment outlets during system kernel lockups
Centralized aggregation of multiple asynchronous RS-232 serial console connections within a datacenter rack

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Emergency WAN access pairs with Out-of-Band Cellular Gateway; BIOS-level video and peripheral control pairs with Hardware IP-KVM Switch; Remote outlet power-cycling pairs with Switched Smart Power Distribution Unit (PDU); RS-232 serial console aggregation pairs with Terminal Server / Console Server.
Out-of-band technologies target distinct physical management planes: Cellular Gateways restore network pathways during landline outages; IP-KVM switches digitize hardware video and USB inputs prior to OS load; Switched PDUs control AC electrical outlets; and Terminal Servers centralize low-level serial CLI connections.

Adım Adım Çözüm

1
Analyze the access requirement type for each operational scenario
Identify whether the task involves secondary WAN connectivity, graphical host/BIOS management, AC power control, or multi-device serial console consolidation.
Out-of-band mechanisms provide dedicated hardware channels depending on which layer of host or network access has failed.
2
Evaluate transport independence for primary circuit outages
Match cellular gateways to primary WAN link failures, as cellular networks supply a completely isolated path independent of wired ISP infrastructure.
In-band remote access relies on functional production routing, whereas out-of-band cellular pathways bypass standard WAN infrastructure.
3
Differentiate peripheral, serial CLI, and power interface technologies
Assign IP-KVM switches for graphical KVM frame capture, terminal servers for RS-232 CLI console consolidation, and switched PDUs for electrical outlet rebooting.
KVM devices handle video/peripherals, terminal servers handle text-based serial communications, and smart PDUs manage electrical current.

Anahtar Kavram

Remote Access and Out-of-Band Management Solutions
Soru 217Soru

Match each enterprise high-availability mechanism or protocol on the left with its correct operational description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

VRRP (Virtual Router Redundancy Protocol)
LACP (Link Aggregation Control Protocol)
CARP (Common Address Redundancy Protocol)
MPIO (Multipath I/O)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

VRRP pairs with the open-standard Layer 3 virtual IP default gateway failover protocol; LACP pairs with IEEE 802.1AX Layer 2 physical link aggregation; CARP pairs with shared IP host/firewall cluster redundancy; MPIO pairs with storage area network redundant physical pathing.
Each mechanism matches its exact function: VRRP provides standard open Layer 3 virtual default gateway redundancy; LACP aggregates Layer 2 Ethernet links into a logical interface; CARP handles shared IP addresses for host and firewall clusters; and MPIO provides redundant physical connectivity to storage array targets.

Adım Adım Çözüm

1
Categorize each mechanism by its primary layer and operational scope in high-availability design.
VRRP and CARP function as Layer 3/cluster IP sharing mechanisms; LACP functions as a Layer 2 link bundler; MPIO functions at the storage adapter level.
Identifying the target OSI layer or system component simplifies matching terms with operational descriptions.
2
Distinguish between Layer 3 gateway failover protocols and host-level IP sharing mechanisms.
VRRP matches the open-standard virtual default gateway protocol, whereas CARP matches shared IP clustering across security appliances.
VRRP is specifically designed for gateway routers, while CARP is commonly used in BSD-based firewall cluster deployments.
3
Differentiate interface aggregation from storage path redundancy.
LACP matches IEEE link bundling, and MPIO matches multi-path storage controller connection management.
LACP handles network switch interfaces, while MPIO handles SAN and host interface adapter paths.

Anahtar Kavram

High Availability and Redundancy Protocols across Network Layers and Storage
Soru 218Soru

During a scheduled high-availability failover test, a network administrator powers down Core Router A, which participates in a Virtual Router Redundancy Protocol (VRRP) group with Core Router B. Core Router A has a physical IP address of 10.1.10.2, Core Router B has a physical IP address of 10.1.10.3, and the VRRP virtual IP (VIP) is 10.1.10.1. Immediately following the shutdown, several workstations lose connection to remote networks. Troubleshooting reveals that these workstations have their default gateway statically configured as 10.1.10.2. What is the root cause of the connectivity failure?

Cevabı ve açıklamayı göster

Cevap: The workstations were configured with the primary router's physical interface IP address rather than the VRRP virtual IP address.

Cevap

The workstations were configured with the primary router's physical interface IP address rather than the VRRP virtual IP address.
For First Hop Redundancy Protocols (FHRP) such as VRRP or HSRP to function properly, host devices must use the Virtual IP (VIP) as their default gateway. When hosts are configured with the physical interface IP of a specific router, high-availability mechanism is bypassed. Powering down that physical router breaks outbound routing for those hosts because the standby router only intercepts traffic addressed to the VIP.

Adım Adım Çözüm

1
Analyze host default gateway configuration in relation to the VRRP setup.
Workstations have their default gateway set to 10.1.10.2, which is the physical IP address of Core Router A.
First Hop Redundancy Protocols (FHRPs) like VRRP require hosts to point to a shared Virtual IP (10.1.10.1) so that traffic is dynamically handled by whichever router holds the master role.
2
Evaluate traffic behavior when Core Router A is powered down.
Packets sent directly to 10.1.10.2 are dropped because the underlying physical interface is offline.
Core Router B only responds to packets destined for the VRRP VIP (10.1.10.1) and the VRRP virtual MAC address, not to packets sent to Core Router A's physical IP address.
3
Determine the required resolution.
Update the workstation network configuration so the default gateway points to the VRRP VIP (10.1.10.1).
This enables seamless failover to Core Router B whenever Core Router A becomes unavailable.

Anahtar Kavram

FHRP Virtual Gateway IP Configuration
Tahmini Süre:1m 30s
Soru 219Soru

A network technician needs to establish direct administrative access to a network switch whose network interfaces are completely unreachable due to a network link failure. Which connection method provides dedicated out-of-band management to the command-line interface without relying on active network IP connectivity?

Cevabı ve açıklamayı göster

Cevap: Connecting a terminal emulator on a laptop directly to the switch console port using a serial console cable

Cevap

Connecting a terminal emulator on a laptop directly to the switch console port using a serial console cable
Connecting directly to the physical console port using a serial console cable provides true out-of-band management. This connection operates independently of the switch's network interfaces, IP configuration, or network link state, allowing administrative CLI access even during a major network outage.

Adım Adım Çözüm

1
Identify the management requirement
The network interfaces are unreachable, meaning in-band network protocols cannot function.
In-band protocols depend on operational IP interfaces, network links, and routing infrastructure.
2
Evaluate management channels
Direct console port connection provides out-of-band (OOB) management capabilities.
The serial console port connects directly to the device's control plane hardware independently of network interface status.

Anahtar Kavram

Out-of-Band Management vs. In-Band Management
Soru 220Soru

A corporate enterprise plans to deploy a new port security baseline across all access switches at branch office sites during an upcoming scheduled maintenance window. Which of the following components MUST be included within the formal Request for Change (RFC) document prior to submitting it for Change Advisory Board (CAB) review? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A comprehensive rollback plan detailing specific metric-based triggers and step-by-step instructions for configuration baseline restoration; A formal risk assessment outlining potential service impacts, dependency mapping, and business disruption severity

Cevap

A comprehensive rollback plan detailing specific metric-based triggers and step-by-step instructions for configuration baseline restoration, and a formal risk assessment outlining potential service impacts, dependency mapping, and business disruption severity.
A formal Request for Change (RFC) must incorporate a comprehensive rollback strategy with predefined execution triggers and step-by-step recovery commands to restore the original baseline if issues arise. Additionally, a detailed risk assessment evaluating service dependencies and business impact is required so the Change Advisory Board (CAB) can properly evaluate and approve the change request.

Adım Adım Çözüm

1
Identify mandatory components required in a standard enterprise Request for Change (RFC).
Recognize that RFC documentation must define project scope, risk impact analysis, scheduling details, validation testing, and rollback procedures.
Standard change management governance ensures that network modifications are properly vetted, predictable, and reversible.
2
Evaluate the candidate options against change management best practices.
Select the options detailing a clear rollback strategy with back-out triggers and a risk assessment mapping service dependencies.
A rollback strategy guarantees recovery steps if production failures occur, while a risk assessment enables the CAB to judge the operational risk.

Anahtar Kavram

Request for Change (RFC) essential documentation components
ÖncekiSayfa 11 / 19Sonraki