Network Operations

362 soru

Soru 341Soru

An enterprise network operations team must select a secondary recovery facility for an internal administrative application. The Business Impact Analysis (BIA) establishes a Recovery Time Objective (RTO) of 24 hours and mandates strict budget controls. The disaster recovery strategy requires the facility to have active power, environmental controls, and telecommunications infrastructure in place, along with pre-racked server hardware, but continuous live data replication is not funded. Which disaster recovery site classification best meets these organizational requirements?

Cevabı ve açıklamayı göster

Cevap: Warm site

Cevap

Warm site
A warm site includes operational utilities, network infrastructure, and pre-installed server hardware, requiring only final data restoration and configuration upon disaster declaration. This makes it the most cost-effective solution capable of meeting a 24-hour Recovery Time Objective.

Adım Adım Çözüm

1
Evaluate the Recovery Time Objective (RTO) and budget constraints provided in the scenario.
The target recovery window is 24 hours, and budget limitations exclude continuous live active-active data mirroring.
RTO defines the maximum acceptable duration of system unavailability following a disaster.
2
Compare site recovery parameters against standard disaster recovery location tiers.
A facility equipped with power, HVAC, network links, and pre-staged server hardware that requires backup restoration upon disaster declaration matches the warm site operational model.
Warm sites balance cost and recovery speed for target recovery windows ranging from several hours to a day.

Anahtar Kavram

Disaster Recovery Site Selection Criteria (Hot vs. Warm vs. Cold Sites)
Soru 342Soru

A network administrator is configuring the backup schedule for an enterprise monitoring server. Storage space at the off-site repository is limited, but the primary requirement is to minimize the Recovery Time Objective (RTO) during a total disaster recovery event. The full backup is performed every Sunday evening. Which daily backup strategy should the administrator implement to achieve the shortest recovery time while meeting storage constraints?

Cevabı ve açıklamayı göster

Cevap: Daily differential backups, because full restoration requires only the Sunday full backup and the most recent differential backup.

Cevap

Daily differential backups should be implemented because restoring a system backed up with differential backups requires only the initial full baseline backup and the single most recent differential backup, thereby optimizing the Recovery Time Objective (RTO).
Differential backups save all changes made since the last full baseline backup. When restoring a system, the administrator only needs to restore the full baseline backup and the latest differential backup set. This two-step restoration process minimizes system downtime and lowers the Recovery Time Objective (RTO).

Adım Adım Çözüm

1
Analyze the business continuity requirement.
The key constraint is minimizing Recovery Time Objective (RTO) during system restoration under limited off-site storage availability.
RTO measures the target time required to restore network operations after a failure.
2
Compare differential versus incremental backup mechanics during recovery.
Incremental backups save space during daily backup jobs but require restoring the baseline full backup plus every sequential daily incremental file. Differential backups grow larger over the week but require restoring only two recovery sets: the baseline full backup and the latest differential backup.
Restoring fewer backup files reduces total downtime and operational recovery complexity.
3
Select the optimal backup strategy.
Daily differential backups balance reasonable daily storage usage with the fastest restoration workflow.
This strategy directly satisfies the objective of minimizing RTO while using storage efficiently compared to daily full backups.

Anahtar Kavram

Differential vs Incremental Backup Restoration Trade-offs
Soru 343Soru

An enterprise telemetry cluster suffers a database volume corruption on Friday at 10:00 AM. The disaster recovery strategy specifies a full system backup executed every Sunday at midnight, supplemented by daily differential backups executed every night at 23:00 from Monday through Thursday. Which TWO of the following recovery steps must be performed to restore the database to its latest possible state prior to the failure while minimizing operational restore steps? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Restore the full system backup image from Sunday midnight.; Restore the differential backup created on Thursday at 23:00.

Cevap

Restoring the full system backup image from Sunday midnight and restoring the differential backup created on Thursday at 23:00.
Differential backups record all data modified since the last full baseline backup. Therefore, restoring a system utilizing a differential strategy requires exactly two files: the baseline full backup (Sunday) and the most recent differential backup (Thursday at 23:00).

Adım Adım Çözüm

1
Identify the backup baseline requirement
Determine that the full backup from Sunday midnight must be restored first to establish the baseline system state.
Differential backups only store modifications and require a full base image to build upon.
2
Analyze differential backup mechanics
Identify that Thursday night's differential backup holds all changes made between Sunday midnight and Thursday 23:00.
Differential backups record all data changed since the last full backup, making intermediate daily differential backups unnecessary.
3
Select the minimal optimal restore set
Select the Sunday full backup and the Thursday differential backup.
Combining the baseline full backup with the latest differential backup achieves full recovery with only two restore operations.

Anahtar Kavram

Differential Backup Restoration Strategy
Soru 344Soru

An organization executes a full system backup every Sunday at midnight. From Monday through Saturday, differential backups are executed daily at midnight. On Wednesday afternoon, a core router's storage drive fails, requiring a bare-metal recovery. Which of the following restoration sequences must the network administrator execute to restore the router configuration to its latest backed-up state?

Cevabı ve açıklamayı göster

Cevap: Restore the Sunday full backup, then restore the Tuesday differential backup.

Cevap

Restore the Sunday full backup, then restore the Tuesday differential backup.
Differential backups store all data that has changed since the last full backup was taken. To recover a system backed up using a full-plus-differential scheme, an administrator must first restore the latest full backup (Sunday) and then apply the single most recent differential backup (Tuesday). This complete two-step procedure yields the latest data state prior to Wednesday's failure.

Adım Adım Çözüm

1
Identify the baseline backup required for recovery.
The Sunday full backup provides the complete baseline environment.
All differential and incremental restore procedures require starting from the last full backup.
2
Determine the backup type used during weekdays.
The backup policy specifies daily differential backups.
Differential backups record all changes made since the last full backup and accumulate modifications daily without clearing the archive bit.
3
Select the latest differential backup prior to the outage.
The Tuesday differential backup contains all accumulated changes from Monday and Tuesday.
Applying the latest differential backup after the full backup fully restores the system state up to Tuesday midnight with exactly two restore operations.

Anahtar Kavram

Differential Backup Restoration Procedure
Soru 345Soru

Following an unrecoverable hardware failure at a primary data center, a network engineering team must execute a failover to a secondary warm disaster recovery site. Place the following disaster recovery procedure steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for failover execution is: 1) Formally declare a disaster state and activate the Disaster Recovery Plan (DRP), 2) Power on standby server infrastructure and verify system image integrity at the secondary site, 3) Apply the latest transaction logs and data replicas to bring secondary databases current, 4) Update external DNS records and network routing paths to point to the secondary site, and 5) Perform end-to-end validation testing and re-enable client access to critical applications.
Executing a disaster recovery failover requires strict operational sequencing. First, formal disaster declaration authorizes DRP invocation. Next, standby infrastructure at the secondary warm site is powered on. Data replicas and transaction logs are then applied to align with the target RPO. Once data consistency is established, network routing and DNS records are updated to redirect client traffic. Finally, system validation ensures all services operate correctly before production traffic is admitted.

Adım Adım Çözüm

1
Initiate Disaster Recovery Plan activation
Authorized failover process and mobilization of recovery resources.
A formal declaration is required to trigger disaster recovery workflows and allocate secondary site resources.
2
Bring standby recovery infrastructure online
Active secondary server host environment.
Compute platforms at a warm site must be powered up and operational before data or application layers can function.
3
Synchronize database state and apply data backups
Current and consistent database state matching the Recovery Point Objective (RPO).
Data stores must be updated to the most recent consistent snapshot prior to routing live user requests.
4
Re-route ingress network traffic
Client connections directed to secondary site IP addresses.
DNS records and BGP/routing configurations should only point to systems that are online and data-ready.
5
Validate application services and restore production access
Fully operational recovery site open to end users.
Testing verifies end-to-end connectivity, functionality, and security before business operations resume.

Anahtar Kavram

Disaster Recovery Site Failover Sequence
Tahmini Süre:1m 30s
Soru 346Soru

A network security administrator is configuring centralized event collection and device monitoring across enterprise infrastructure. Match each network logging, monitoring, or auditing mechanism on the left with its defining operational characteristic or security control capability on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Syslog Severity Level 2
SNMPv3 authNoPriv Mode
NetFlow / IPFIX Telemetry
SIEM Correlation Engine

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Syslog Severity Level 2 matches Critical condition alerts; SNMPv3 authNoPriv Mode matches authenticated but unencrypted SNMP traffic; NetFlow / IPFIX Telemetry matches flow metadata export without full payload capture; SIEM Correlation Engine matches centralized time-correlated event log analysis across multiple network systems.
Each concept is matched to its exact operational role in enterprise network operations: Syslog Level 2 identifies critical emergency alerts; SNMPv3 authNoPriv secures log/management requests via authentication hashes without packet encryption; NetFlow/IPFIX provides high-level session flow statistics for audit analysis; and a SIEM engine correlates centralized log streams across disparate infrastructure devices.

Adım Adım Çözüm

1
Analyze standard Syslog severity numerical levels.
Identify that Syslog severity levels range from 0 (Emergency) to 7 (Debug). Severity Level 2 represents Critical conditions requiring immediate attention (e.g., loss of primary network link).
Correctly categorizing Syslog severity levels ensures proper event notification filtering in enterprise log management.
2
Evaluate SNMPv3 security levels (noAuthNoPriv, authNoPriv, authPriv).
Determine that authNoPriv incorporates authentication algorithms (HMAC-SHA or MD5) for integrity and user authentication, but omits payload encryption (DES/AES).
Understanding SNMPv3 security modes prevents misconfigurations where confidential management data is transmitted unencrypted despite enabling authentication.
3
Differentiate traffic flow telemetry from full packet capture.
Recognize that NetFlow/IPFIX records flow metadata (5-tuple: source IP, destination IP, source port, destination port, protocol, plus packet/byte counters) for bandwidth auditing and anomaly detection.
NetFlow provides scalable network visibility without requiring heavy storage infrastructure needed for packet capture files.
4
Define the primary function of a SIEM correlation engine in network auditing.
Connect SIEM functionality with cross-device event aggregation, parsing, and rule-based correlation of time-stamped logs from switches, firewalls, and servers.
SIEM systems correlate isolated log entries to identify multi-stage attacks or broader operational issues across the enterprise network.

Anahtar Kavram

Network Logging, Telemetry, and Auditing Architecture
Soru 347Soru

A network administrator needs to update the firmware on 50 wireless access points deployed across a large corporate campus. To mitigate the risk of widespread network downtime in the event that the new firmware introduces instability, which of the following patch deployment strategies should the administrator implement?

Cevabı ve açıklamayı göster

Cevap: Perform a pilot update on a small group of non-critical access points and evaluate stability before upgrading the remaining devices.

Cevap

Perform a pilot update on a small group of non-critical access points and evaluate stability before upgrading the remaining devices.
Executing a pilot deployment on a small subset of non-critical access points ensures that any unforeseen firmware bugs or incompatibilities are discovered with minimal operational impact. Once the pilot group demonstrates stable performance over an observation period, the patch can safely be rolled out to the rest of the network.

Adım Adım Çözüm

1
Analyze the operational risk of upgrading 50 production access points simultaneously.
Identified that a faulty update pushed globally could result in total wireless network failure across the campus.
Patch management best practices require risk mitigation controls prior to full-scale deployment.
2
Select a deployment method that permits live validation with limited failure impact.
Staged deployment (canary or pilot testing) limits potential downtime to a controlled subset of devices.
Pilot deployments verify real-world performance under monitoring before affecting mission-critical areas.

Anahtar Kavram

Staged Patch Deployment and Pilot Testing
Soru 348Soru

A network administrator must update network device telemetry and event logging configurations across core switches to satisfy a new security audit mandate. The compliance policy requires log transport reliability during network congestion, cryptographic encryption for audit log traffic, and payload-level encryption for SNMP polling queries. Which TWO of the following implementation steps should the administrator execute to satisfy these audit requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure Syslog forwarding using TCP port 6514 with Transport Layer Security (TLS) encryption.; Configure SNMPv3 using the authPriv security level for management polling.

Cevap

The administrator must implement Syslog forwarding using TCP port 6514 with TLS encryption and configure SNMPv3 using the authPriv security level.
Configuring Syslog using TCP port 6514 with Transport Layer Security (TLS) satisfies the requirements for connection reliability and log traffic confidentiality. Simultaneously, deploying SNMPv3 using the authPriv security level provides both HMAC-based authentication and CBC-DES/AES payload privacy (encryption), fulfilling the requirement for encrypted polling queries.

Adım Adım Çözüm

1
Analyze transport reliability and log encryption requirements
Standard Syslog utilizes UDP port 514, which lacks transport reliability and encryption. Secure Syslog uses TCP port 6514 with TLS to ensure reliable log packet delivery and payload encryption.
TCP guarantees sequence delivery and retransmission during congestion, while TLS secures the log stream.
2
Analyze SNMP security level requirements
SNMPv3 supports three security levels: noAuthNoPriv (no auth, no encryption), authNoPriv (authentication, no encryption), and authPriv (authentication and privacy/encryption).
Only authPriv satisfies the mandate for payload-level encryption during management polling.

Anahtar Kavram

Secure Logging (Syslog over TLS/TCP) and SNMPv3 Security Models
Soru 349Soru

A network technician is deploying a pair of redundant routers to provide seamless default gateway redundancy for a local user subnet. Which TWO of the following steps are required to ensure hosts maintain uninterrupted default gateway access during a router failure?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure a First Hop Redundancy Protocol (FHRP) such as HSRP or VRRP to share a Virtual IP (VIP) address between both routers.; Configure the client host machines on the subnet to use the Virtual IP (VIP) address as their default gateway.

Cevap

To ensure host devices maintain default gateway connectivity during a failure, a First Hop Redundancy Protocol (FHRP) must be configured to generate a shared Virtual IP (VIP) address across the redundant routers, and the host devices must be configured to point to that Virtual IP as their default gateway address.
High availability at Layer 3 requires a First Hop Redundancy Protocol (such as HSRP or VRRP) to present a single logical gateway identity represented by a Virtual IP (VIP) address. Client devices configured to use this VIP as their default gateway remain unaware of physical hardware failures because the backup router automatically assumes control of the VIP upon primary router failure.

Adım Adım Çözüm

1
Identify the mechanism used for first-hop router redundancy.
Recognize that protocols like HSRP or VRRP bind multiple physical routers together into a virtual group with a single shared Virtual IP (VIP).
FHRP protocols enable automatic state tracking and failover of gateway responsibilities.
2
Determine proper client host gateway configuration.
Ensure all client hosts point their default gateway IP address to the Virtual IP address rather than any single physical router interface IP.
If hosts point to the VIP, traffic automatically routes through whichever physical router is actively handling the VIP.

Anahtar Kavram

First Hop Redundancy Protocols (FHRP) and Virtual IP (VIP) Default Gateway Assignment
Soru 350Soru

An organization plans to update the firmware on its primary network security appliances during an upcoming maintenance window. To ensure system operations can be restored promptly if the new firmware encounters a critical fault, which of the following actions should be completed immediately before starting the installation?

Cevabı ve açıklamayı göster

Cevap: Create and verify a full configuration backup and system state snapshot of the active appliances.

Cevap

Create and verify a full configuration backup and system state snapshot of the active appliances.
In standard network patch management procedures, creating and validating a full configuration backup and system state snapshot prior to applying firmware updates is mandatory. This establishes an authoritative baseline and guarantees that administrators can execute a rollback plan if the patch causes instability.

Adım Adım Çözüm

1
Identify the risk mitigation requirement for software updates.
Recognize that firmware upgrades carry a risk of device instability or rollback necessity.
Standard patch management lifecycles require a verified rollback mechanism prior to change execution.
2
Evaluate the safest pre-deployment task.
Generating a validated configuration backup and state snapshot provides a known-good restore point.
Verification confirms the backup is non-corrupt and usable if a restore is needed.

Anahtar Kavram

Pre-Patch Baseline and Rollback Preparedness
Soru 351Soru

Match each enterprise high-availability mechanism on the left with its corresponding operational function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Dual power supply with independent PDU feeds
Link Aggregation Control Protocol (LACP)
Multipath I/O (MPIO)
Virtual Router Redundancy Protocol (VRRP)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Dual power supplies connect to separate PDUs to prevent electrical outage points. LACP aggregates physical switch links into a logical interface. MPIO creates redundant storage connection paths. VRRP provides default gateway failover via an open-standard virtual IP.
Each mechanism addresses high availability at a distinct layer of enterprise infrastructure: dual power supplies protect hardware power feeds; LACP aggregates Layer 2 ethernet links; MPIO ensures block storage access resilience; VRRP provides open-standard Layer 3 default gateway redundancy.

Adım Adım Çözüm

1
Analyze power redundancy requirements
Dual power supplies fed by independent PDUs safeguard hardware against circuit failure.
Redundant power hardware relies on independent feed paths to prevent a single point of failure.
2
Identify network link aggregation mechanisms
LACP bundles multiple network cables into a single trunk for failover and throughput.
LACP dynamically negotiates link aggregation across interfaces.
3
Evaluate storage interconnect redundancy
MPIO routes host storage I/O traffic over multiple redundant host-to-SAN paths.
MPIO provides path failover and load balancing for storage block devices.
4
Select the appropriate gateway redundancy protocol
VRRP establishes an open-standard virtual IP shared among multiple routers.
VRRP allows automatic failover of default gateways without vendor lock-in.

Anahtar Kavram

High Availability and Redundancy Architecture across Power, Network Links, Storage, and First-Hop Routers
Soru 352Soru

Match each network documentation artifact to its primary operational use case during infrastructure planning and maintenance.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Logical Network Diagram
Physical Network Diagram
Rack Elevation Diagram
Network Baseline Documentation

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Logical Network Diagram matches IP subnet and VLAN relationships; Physical Network Diagram matches cable runs and port assignments; Rack Elevation Diagram matches rack space and power planning; Network Baseline Documentation matches historical operational metric collection.
Each documentation type addresses a distinct operational requirement: logical diagrams map abstract networking structures like subnets and VLANs; physical diagrams depict actual cabling and hardware interfaces; rack elevations track enclosure slotting and power; and baselines set reference performance metrics.

Adım Adım Çözüm

1
Analyze the operational role of logical documentation versus physical documentation.
Identify that logical diagrams depict software and protocol boundaries (IP/VLANs/routing), whereas physical diagrams depict tangible connections (cables/ports).
This separates logical infrastructure layout from physical cabling.
2
Evaluate rack elevation and baseline documentation purposes.
Confirm rack elevations map enclosure U-space and power placement, while baselines capture standard performance metrics over time.
Rack diagrams serve physical spatial organization, and baselines serve performance comparison.
3
Match each documentation artifact to its exact functional description.
Form correct associations for all four document types.
Matches align completely with standardized Network+ documentation definitions.

Anahtar Kavram

Distinguishing between network diagram types and operational documentation artifacts.
Soru 353Soru

A network technician is preparing to install a newly purchased 2U rackmount switch into a server room enclosure. Before physically mounting the device, the technician needs to check the layout of the cabinet to ensure there is enough contiguous vertical space and proper power distribution available at that specific position. Which of the following network documentation artifacts is most appropriate for the technician to consult?

Cevabı ve açıklamayı göster

Cevap: Rack diagram

Cevap

The correct document to consult is a rack diagram.
A rack diagram (or rack elevation diagram) shows a visual, scaled representation of server racks and the equipment mounted within them. It details exact vertical positions measured in Rack Units (U), helping technicians plan power, cooling, and space availability before mounting hardware.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario.
The technician needs to view the vertical physical layout and slot availability inside an equipment enclosure.
Installing hardware requires verifying physical space (rack units) and slot arrangement.
2
Match the requirement to the appropriate network document.
A rack diagram provides a scale elevation view of equipment mounted inside standard 19-inch or 23-inch racks.
Rack elevation diagrams specifically track vertical Unit height allocations (such as 1U, 2U) and device locations.

Anahtar Kavram

Rack Diagrams and Physical Elevation Documentation
Soru 354Soru

A senior network administrator is updating the corporate network documentation after implementing a new voice over IP (VoIP) architecture across three branch offices. The deployment involved adding dedicated voice VLANs, establishing 802.1Q trunk links between switches, and running single-mode fiber patch cables between intermediate distribution frames (IDFs) and main patch panels. Which TWO of the following documentation artifacts should the administrator update to document the IP subnet boundaries, VLAN IDs, and specific port-to-panel cable assignments?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Logical network topology diagram; Wiring schematic and cable schedule

Cevap

The logical network topology diagram and the wiring schematic and cable schedule are the correct documentation types.
The logical network topology diagram captures abstract network layout details including subnets, VLAN IDs, and logical interfaces. The wiring schematic and cable schedule provides precise physical connection data, detailing how fiber links connect between specific patch panel ports and intermediate distribution frames.

Adım Adım Çözüm

1
Identify the logical requirements of the documentation update.
The requirement includes recording IP subnets, VLAN IDs, and trunk routing paths.
Logical diagrams represent software-defined boundaries, Layer 2/3 interfaces, subnets, and VLAN segmentation.
2
Identify the physical cabling requirements of the documentation update.
The requirement includes recording fiber patch runs, port connections, and IDF patch panel assignments.
Wiring schematics and cable schedules explicitly define physical pinouts, port designations, cable runs, and panel terminations.
3
Evaluate and eliminate incorrect documentation options.
Rack elevations only detail vertical slot spacing; baselines track usage performance; SOPs define procedural workflows.
None of the eliminated documents contain port-level wiring schedules or Layer 2/3 logical address maps.

Anahtar Kavram

Differentiation between logical network topology diagrams and physical cabling schematics in enterprise network documentation.
Soru 355Soru

During a campus network audit, a network engineer needs to verify virtual interface IP addresses, VLAN segmentation IDs, dynamic routing protocol relationships, and subnet boundaries across multiple core and distribution switches. Which of the following documentation artifacts provides this information without detailing physical rack unit positions or patch panel cable routing?

Cevabı ve açıklamayı göster

Cevap: Logical network diagram

Cevap

A logical network diagram is the appropriate artifact because it illustrates logical network abstraction elements such as VLAN IDs, IP subnet boundaries, and routing protocols.
Logical network diagrams document the flow of data across an enterprise infrastructure. They explicitly define logical boundaries including VLAN numbers, IP addresses, network subnets, virtual interfaces, and routing protocol domains without detailing physical spatial positioning.

Adım Adım Çözüm

1
Analyze the requirements from the troubleshooting/auditing scenario.
The engineer requires documentation showing VLAN IDs, IP subnets, virtual interfaces, and dynamic routing relationships.
Identifying the target data types separates logical network attributes from physical infrastructure details.
2
Differentiate between logical and physical documentation artifacts.
Logical diagrams represent Layer 2 and Layer 3 data flows and addressing structures, whereas rack elevations, wiring schematics, and cable schedules represent Layer 1 layout and physical hardware locations.
Logical diagrams specifically focus on addressing and protocol boundaries.
3
Select the documentation type that fulfills the criteria.
The logical network diagram accurately provides IP addresses, VLANs, and routing protocol information without requiring physical location details.
Logical diagrams capture system relationships rather than spatial orientation.

Anahtar Kavram

Logical Network Diagrams
Soru 356Soru

A network engineering team is auditing emergency access procedures for remote branch office infrastructure. The goal is to maintain administrative control and restore unresponsive devices even during a complete failure of the primary ISP circuit. Which TWO of the following components or methods provide an effective out-of-band (OOB) management solution? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A cellular-backed serial console server connected to device console management ports; A network-connected switched Power Distribution Unit (PDU) to remotely hard power-cycle locked equipment

Cevap

Deploying a cellular-backed serial console server connected to device console ports and using a network-connected switched Power Distribution Unit (PDU) for remote power-cycling.
Out-of-band (OOB) management requires an alternate, physically isolated access path (such as a serial terminal server utilizing a cellular connection) to bypass failed primary network links. Additionally, a switched PDU provides out-of-band power control to perform hard reboots on frozen devices without physical technician intervention.

Adım Adım Çözüm

1
Analyze out-of-band (OOB) management requirements
OOB management requires a dedicated, redundant communication channel that remains operational when primary network interfaces or WAN circuits fail.
Connecting a terminal server to console ports over a cellular modem guarantees command-line access during primary link outages.
2
Identify remote hardware power recovery mechanisms
A switched PDU allows remote outlet power-cycling when an operating system or management interface becomes completely unresponsive.
Hard reboots require physical power control separate from operating system network stacks.
3
Evaluate and reject in-band and insecure management alternatives
Telnet and SNMPv2c are in-band management methods that depend on working primary network paths and lack proper security/encryption.
In-band tools become unreachable during primary ISP failure and expose network devices to cleartext credential interception.

Anahtar Kavram

Out-of-Band (OOB) Remote Access and Power Management Infrastructure
Tahmini Süre:1m 30s
Soru 357Soru

During a comprehensive infrastructure review following a series of network upgrades and operational incidents, a lead network engineer must consult specific documentation artifacts. Match each network documentation artifact on the left to the operational scenario on the right where its usage is primary and essential.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Baseline performance report
Change management log
Logical network diagram
Rack elevation diagram

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Baseline performance report matches evaluating historical throughput and CPU utilization thresholds. Change management log matches auditing maintenance windows for configuration modifications. Logical network diagram matches mapping VLAN IDs, subnets, and routing adjacencies. Rack elevation diagram matches verifying vertical rack unit space, power outlets, and thermal airflow clearance.
Each network artifact serves a specific operational function: performance evaluation requires baseline metrics, tracking past edits requires change management logs, mapping layer 2/3 configurations requires logical topology diagrams, and physical server room installation requires rack elevation diagrams.

Adım Adım Çözüm

1
Analyze performance measurement and trend analysis requirements
Correlate historical utilization benchmarks with the baseline performance report.
Baseline metrics establish what constitutes standard operating parameters, providing a comparative reference point when troubleshooting performance degradation.
2
Analyze administrative audit and historical configuration tracking requirements
Associate historical configuration audit requirements with the change management log.
Change management logs record scheduled maintenance details, approved commands, and implementation dates required to trace configuration anomalies.
3
Analyze protocol, IP subnetwork, and VLAN relationship mapping requirements
Connect IP schemes, VLAN segmentation, and routing protocol relationships to the logical network diagram.
Logical diagrams represent software structures and layer 3 routing topology without clutter from physical cable pathways or rack layouts.
4
Analyze physical space, power, and thermal planning requirements
Match spatial rack unit, power distribution, and thermal airflow planning with the rack elevation diagram.
Rack elevation diagrams accurately model vertical rack unit usage, power allocation, and cabinet space requirements for physical deployments.

Anahtar Kavram

Operational applications of network documentation and diagrams
Soru 358Soru

A system administrator needs to implement remote management for a cluster of physical servers located in a remote datacenter. During host operating system crashes or pre-boot system checks, standard network management protocols like SSH or RDP are unavailable because the OS network stack is inactive. Which of the following out-of-band management solutions provides administrators with remote graphical display output, keyboard/mouse interaction, and full access to motherboard BIOS settings?

Cevabı ve açıklamayı göster

Cevap: An IP-KVM switch connected directly to the display output and USB ports of the physical servers

Cevap

An IP-KVM switch connected directly to the display output and USB ports of the physical servers
An IP-KVM device provides true out-of-band management by capturing hardware display signals and translating remote keyboard/mouse inputs over an IP connection. Because it operates independently of the host operating system, administrators can access BIOS setup, perform cold reboots, and diagnose kernel crashes remotely.

Adım Adım Çözüm

1
Identify the key remote management requirements in the scenario.
The scenario requires out-of-band access that works during OS panics/pre-boot states and provides graphical video output alongside keyboard/mouse input.
Software-based in-band tools (like RDP or SSH) depend on the host operating system's kernel and network stack, which are non-functional when the OS freezes or has not booted.
2
Evaluate candidate remote access hardware solutions.
An IP-KVM device connects to physical video outputs (HDMI/VGA/DisplayPort) and USB controller ports, encoding video frames into network packets.
Because it interfaces at the hardware layer outside the host operating system, it grants remote BIOS and pre-boot console access.

Anahtar Kavram

Out-of-Band Remote Access via IP-KVM
Soru 359Soru

A network administrator is establishing operational documentation for a newly deployed branch office. To ensure efficient remote troubleshooting, the administrator needs to define which details belong specifically on the logical network diagram rather than the physical topology diagram.

Which of the following components should be documented on the logical network diagram? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: IP address subnets, CIDR notations, and VLAN identifiers associated with network segment boundaries; Dynamic routing protocol boundaries, autonomous system numbers (ASNs), and network gateways

Cevap

The correct components to include on a logical network diagram are the IP address subnets with VLAN identifiers and the dynamic routing protocol boundaries with ASNs and network gateways.
Logical network diagrams focus on how data moves logically through a network. They display IP address subnets, VLAN IDs, CIDR notation, routing protocol domains, autonomous system numbers (ASNs), and default gateways. In contrast, physical rack dimensions, slot locations, and specific host configuration errors do not belong on a logical topology map.

Adım Adım Çözüm

1
Differentiate between logical and physical network documentation
Identify that physical diagrams focus on hardware locations, cable paths, rack units, and physical ports, whereas logical diagrams focus on data paths, IP addressing, subnets, VLANs, and routing protocols.
Clear segregation of documentation types ensures technicians can quickly locate network layer information versus physical infrastructure details.
2
Evaluate candidate components for logical diagram inclusion
Select IP subnet allocations/VLAN IDs and routing protocol domains/ASNs as logical abstractions.
These elements define how packets are routed and segmented logically across the network topology.

Anahtar Kavram

Logical vs. Physical Network Diagrams
Tahmini Süre:1m 30s
Soru 360Soru

An enterprise network operations center manages a critical financial application server. The server's disaster recovery policy dictates a full system image backup every Sunday at 01:00 AM, along with cumulative differential backups executed each night from Monday through Saturday at 11:00 PM. On Friday at 10:00 AM, a storage controller failure permanently corrupts the primary volume. What is the minimum and correct sequence of backup restoration operations required to bring the system back to its most recent consistent operational state?

Cevabı ve açıklamayı göster

Cevap: Restore the Sunday full backup image, followed by the Thursday differential backup image.

Cevap

Restore the Sunday full backup image, followed by the Thursday differential backup image.
Differential backups capture all modified data since the last full backup. Restoring the initial Sunday full backup establishes the baseline dataset, and applying the Thursday differential backup updates all files to their state as of Thursday night (11:00 PM) without needing intermediate daily differential sets.

Adım Adım Çözüm

1
Identify the backup schedule type and baseline file set.
The baseline image is the full backup created on Sunday at 01:00 AM.
Every recovery process requires initializing the target storage with the last known full backup baseline.
2
Analyze the properties of the daily backup strategy.
Daily backups are differential, meaning each daily set contains all changed data since the Sunday full backup.
Differential backups accumulate modifications over time relative to the last full backup, unlike incremental backups which capture only changes made since the previous backup of any type.
3
Determine the optimal restoration sequence.
The system requires restoring the Sunday full backup first, followed by the Thursday 11:00 PM differential backup.
The Thursday differential backup already includes all changes accumulated from Monday, Tuesday, and Wednesday, making intermediate differential files redundant.

Anahtar Kavram

Differential Backup Restoration Sequence
ÖncekiSayfa 18 / 19Sonraki
Network Operations Alıştırma Soruları — CompTIA Network+ — Sayfa 18 | Examkin