Network Operations

A network administrator needs to apply a critical vendor security update to the organization's core infrastructure routers. In what order should the administrator execute the patch management lifecycle steps from first to last?

An administrator is auditing an enterprise network's device monitoring architecture to satisfy compliance guidelines. The policy mandates that all SNMP telemetry and event notifications transmitted between network switches and the central management station must enforce both sender identity verification and full packet payload encryption. Which of the following SNMPv3 security levels must be configured on the devices to meet these audit requirements?

A systems engineer is implementing high availability and link redundancy for a critical database host connected to two independent physical switches. The network architecture must support simultaneous active-active frame forwarding across both links for throughput aggregation while preventing Layer 2 loops, without utilizing vendor-proprietary physical stacking cables. Which TWO of the following configurations or technologies must be deployed together to achieve this redundancy design?

Match each network logging mechanism or Syslog severity level on the left with its corresponding description or operational characteristic on the right.

A network administrator is updating the telemetry and auditing configuration across core switch infrastructure to adhere to security compliance standards. The compliance policy mandates that all remote device management queries must provide cryptographic authentication and payload privacy, and that system log messages must be securely forwarded to a central server using a reliable, encrypted transport protocol. Which TWO of the following configurations should the administrator implement to satisfy these mandates? (Select TWO)

A network engineering team is preparing to deploy a vendor-released maintenance patch to address a critical security vulnerability across multiple enterprise edge routers. To ensure network stability and adhere to standard change management procedures, which of the following operational steps should be completed prior to applying the patch to production hardware? (Select TWO.)

During a high-availability audit of a corporate network, a technician evaluates a VRRP pair where Router 1 (10.1.1.2) and Router 2 (10.1.1.3) share Virtual IP (VIP) 10.1.1.1. When Router 1 is powered off for maintenance, workstations on the local subnet immediately lose connectivity to remote networks despite Router 2 assuming the active master role. Troubleshooting reveals that workstations cannot reach their default gateway during the outage. What is the most likely root cause of this failure?

A network administrator needs to restore a corrupted domain controller on Thursday morning. The network backup strategy consists of a full backup executed every Sunday at 00:00, followed by daily incremental backups executed Monday through Wednesday at 23:00. Arrange the restoration steps in the correct chronological order required to recover the server to its most recent state prior to the failure.

A network technician is tasked with creating documentation for a newly installed equipment cabinet in a telecommunications room. Which of the following specifications belong specifically in a rack diagram? (Select TWO.)

An ON-site network technician is investigating a physical link failure between a wall outlet in a conference room and a switch located in the building's telecommunications closet. The technician needs to identify the precise wire pinouts, color coding standards, patch panel terminal punch-downs, and wall jack labeling schemes used for that specific horizontal cable run. Which of the following network documentation artifacts should the technician consult?

A enterprise network engineer is auditing a high-availability server cluster spanning two intermediate distribution frames (IDFs). During a simulated power failure on IDF-1, the secondary dual-homed database server lost network connectivity despite being physically connected to an uninterruptible power supply (UPS) in IDF-2. Upon investigation, the engineer discovers that the server's secondary network interface card (NIC) was patched into an unconfigured access port on a switch powered by a non-redundant PDU circuit, while the primary NIC was documented on VLAN 100 with 802.1Q trunking. To systematically rectify the physical layout, cable path, equipment mounting height, and logical subnet boundaries to prevent recurrence, which combination of documentation artifacts must the engineer update?

A network administrator receives a critical zero-day vulnerability advisory affecting the operating system of two enterprise core switches configured as a high-availability active/standby pair. Applying the software patch requires a full reboot of the updated switch. To mitigate operational risk, preserve service uptime, and ensure rollback capability during this emergency maintenance, which of the following procedures represents the correct workflow for deploying the patch?

An enterprise organization deploys two Layer 3 core switches, Core-A and Core-B, to provide default gateway redundancy for VLAN 10 ($192.168.10.0/24$) using VRRPv3. Core-A is configured as the VRRP Master with a priority of 110, while Core-B acts as the Backup with a priority of 100. Preemption is enabled on both routers. To prevent black-holing traffic if Core-A loses its WAN connection, an interface tracking object is configured on Core-A to decrement its VRRP priority by 20 upon WAN uplink failure. Core-A is also manually configured as the Spanning Tree Protocol (STP) Primary Root Bridge for VLAN 10.

During a WAN link failure test on Core-A, tracking successfully decrements Core-A's priority to 90, and Core-B transitions to the VRRP Master state. However, telemetry shows that outbound host traffic from VLAN 10 experiences significant path latency and traverses the inter-switch trunk twice before leaving the network.

Which of the following root causes best explains why traffic is traversing the inter-switch trunk redundantly following the failover?

A network administrator is updating core switch configurations to align with a security mandate requiring both cryptographic authentication and full payload encryption for network monitoring traffic. The legacy implementation relies on unencrypted management queries using community strings. Which protocol version and security level combination should the administrator configure to meet this mandate?

A network administrator is configuring centralized event logging on core switches using the standard Syslog protocol. Which port and transport protocol combination does standard Syslog use by default to transmit log messages to a central log server?

A network administrator is implementing a centralized monitoring solution for enterprise core switches. Organizational compliance policies dictate that network management queries and event trap messages transmitted across the network must guarantee cryptographic integrity, user authentication, and payload confidentiality to prevent eavesdropping and replay attacks. Which protocol implementation best satisfies all specified auditing and monitoring security requirements?

A network administrator receives a high-severity security bulletin requiring a critical firmware update on the organization's core switches. To adhere to standard patch management procedures and minimize operational risk, which of the following actions should the administrator perform FIRST before deploying the patch to the production environment?

A network technician is configuring Virtual Router Redundancy Protocol (VRRP) across two enterprise routers to provide default gateway fault tolerance for a local subnet. Which IP address must be configured as the default gateway on host computers to ensure uninterrupted network access during a gateway failure?

An organization deploys two edge routers in a First Hop Redundancy Protocol (FHRP) group using HSRP to provide default gateway redundancy for an internal server VLAN. During a scheduled firmware upgrade, the primary active router is rebooted. Network logs confirm that the secondary router successfully transitions from standby to active state and assumes ownership of the virtual MAC address. However, all servers on the LAN immediately lose connection to external networks and fail to route outbound traffic until the primary router finishes rebooting. Which of the following is the most likely cause of this failure?

An enterprise network deployment utilizes two Layer 3 switches, Switch-A and Switch-B, configured with VRRP to provide default gateway redundancy for VLAN 20 ($10.20.0.0/24$). Switch-A is configured with physical interface IP $10.20.0.2/24$ and a VRRP priority of 110. Switch-B is configured with physical interface IP $10.20.0.3/24$ and a VRRP priority of 100. The configured VRRP Virtual IP (VIP) is $10.20.0.1/24$. During an operational audit, it is discovered that half of the host workstations on VLAN 20 were manually configured with a static default gateway of $10.20.0.2$, while the other half use the VIP $10.20.0.1$. If Switch-A suddenly suffers a complete power loss, which of the following best describes the resulting traffic routing behavior for hosts on VLAN 20?