Network Operations

An organization is deploying a pair of enterprise edge switches configured with multi-chassis link aggregation (mLAG) connected to two core routers configured with Virtual Router Redundancy Protocol (VRRP). Server host interfaces are configured in an LACP IEEE 802.3ad dynamic bond. During failure simulation testing, host traffic experiences intermittent packet loss and unidirectional asymmetry upon primary router failure. Which TWO of the following administrative actions or verification steps will resolve these specific high availability operational defects?

An IT administrator wants to ensure that a newly released software update for core network switches will not disrupt corporate operations or introduce instability before deploying it network-wide. Which of the following is the best initial step to validate the software update safely?

During a security audit, a network administrator notices that event logs sent from a remote switch to a central log server contain significant gaps during periods of high network utilization. Investigation reveals that log packets sent via standard Syslog are being silently dropped by intermediate routers under heavy congestion. Which transport protocol and port configuration should be configured on the switch to ensure reliable, delivery-guaranteed log transmission?

A regional bank experienced a storage area network (SAN) volume failure on Thursday at 13:30. The network operations team maintains the following backup schedule for the critical database volume:

- Full backup: Executed every Sunday at 01:00
- Differential backup: Executed daily Monday through Wednesday at 23:00
- Incremental backup: Executed every 4 hours daily (03:00, 07:00, 11:00, 15:00, 19:00, 23:00)

To achieve the minimum Recovery Time Objective (RTO) while recovering all data up to the latest available recovery point prior to the outage, which restoration sequence must the backup engineer execute?

A network administrator receives a critical security advisory regarding a remote code execution vulnerability in the operating system running on the organization's enterprise switches. Which of the following procedures should the administrator perform first to ensure a safe patch deployment?

During a security compliance audit, a network administrator discovers that edge routers are transmitting critical audit logs across an untrusted WAN connection using default Syslog configurations over UDP port 514. Updated corporate policy mandates that all network event logging must guarantee connection-oriented reliable delivery and encrypt log payloads in transit to prevent eavesdropping. Which configuration modification should the administrator implement to fulfill both requirements?

Match each high availability or redundancy concept on the left with its correct operational description on the right.

During a compliance audit of an organization's network monitoring infrastructure, an auditor notes that event log messages and SNMP telemetry are vulnerable to packet loss, eavesdropping, and tampering across WAN links. To remediate these findings, the security engineer must ensure that centralized log forwarding to the SIEM appliance guarantees delivery acknowledgment, encrypts message traffic over standard secure ports, and that SNMP polling enforces cryptographic user authentication along with payload privacy. Which of the following configuration sets correctly fulfills all specified requirements?

A network architecture team is updating its operational repository to streamline disaster recovery, infrastructure auditing, and physical capacity management workflows across a hybrid enterprise data center. Match each specialized network documentation artifact to its primary operational or troubleshooting application.

A network administrator is establishing a standard patch management procedure for enterprise routers. Place the following steps of the software patch management lifecycle in the correct order from first to last.

Match each network logging and auditing component on the left with its corresponding primary function on the right.

A network engineer configures two Layer 3 switches, Switch-1 and Switch-2, with Virtual Router Redundancy Protocol (VRRP) to provide default gateway redundancy for a server VLAN ($172.16.20.0/24$). Switch-1 is configured with a VRRP priority of 110 and a physical SVI address of $172.16.20.2$. Switch-2 has a priority of 100 and a physical SVI address of $172.16.20.3$. The VRRP Virtual IP (VIP) is assigned as $172.16.20.1$. After a network maintenance reboot, end-user servers lose connectivity to external subnets whenever Switch-1 undergoes maintenance, despite Switch-2 being fully operational. Troubleshooting reveals that all servers were manually statically configured with $172.16.20.2$ as their default gateway. Which of the following best explains why gateway redundancy failed and identifies the correct solution?

Match each Syslog severity level to its corresponding event description based on standard network auditing and logging specifications.

A network engineering team must mitigate a critical zero-day privilege escalation vulnerability affecting core infrastructure routers. Which of the following represents the correct sequence of administrative and technical steps required to safely implement this software update according to standardized network maintenance procedures?

Match each high availability and redundancy mechanism to its corresponding operational characteristics within an enterprise network design.

A senior network engineer is leading a major infrastructure upgrade to implement multi-chassis link aggregation and new VLAN topologies across an enterprise datacenter. To satisfy compliance and ensure minimal service disruption, the organization enforces a strict ITIL-aligned change control policy. Place the following phases of the change management lifecycle in the correct sequential order from first to last.

A network administrator must remediate a critical software vulnerability discovered on an enterprise edge router. Arrange the standard patch management lifecycle procedures in the correct sequence from first to last.

An enterprise network uses two routers, Router-A and Router-B, to provide default gateway redundancy for the $192.168.50.0/24$ subnet using Hot Standby Router Protocol (HSRP). Router-A has a physical interface IP address of $192.168.50.2$, Router-B has a physical interface IP address of $192.168.50.3$, and the configured HSRP virtual IP (VIP) is $192.168.50.1$. During scheduled maintenance, Router-A is rebooted, causing Router-B to successfully transition from Standby to Active status. However, hosts on the $192.168.50.0/24$ subnet immediately lose all outbound network access. Which of the following is the most likely cause of this issue?

A network engineer is executing a scheduled operating system software update on a core managed switch equipped with dual flash memory banks (Bank 0 and Bank 1). The switch currently executes its operational firmware from Bank 0. To follow software maintenance best practices for risk mitigation and rapid rollback capability, which of the following procedures should the engineer execute?

An enterprise network administrator maintains a disaster recovery plan for an active database server. The backup schedule performs a full backup every Sunday at 01:00, daily differential backups every evening at 23:00 (Monday through Saturday), and incremental transaction log backups every two hours between 08:00 and 18:00 daily. On Thursday at 15:30, a primary storage failure occurs. Which sequence of backup sets must be restored to recover the server to its 14:00 Thursday point-in-time state with the fewest restoration operations?