Network Operations (19%)

N10-009 · 57 questions

• A data center polls its switches with SNMP version 2c, and a capture on the management VLAN shows the community string in clear text. Which change removes that clear-text string and adds both authentication and encryption to the polls?
• Hotel desk phones on a new voice VLAN broadcast for an address, but the only DHCP server sits on a server VLAN two hops away. The router between them is not turning that broadcast into a directed request. A scope for the voice subnet already exists on the server. Which feature must be added on that router?
• Purchasing can no longer order this firewall model, and the vendor will keep publishing security fixes for it through next June. Which life-cycle description is accurate today?
• A storm knocks down routing between a library and its branch, and the branch switches stop answering their management addresses. Staff can still open those switch consoles through a console server reached over a separate cellular line. Which management path is the cellular console server?
• A school technician must find which patch-panel port and which switch port connect to a classroom wall jack labeled B-14, without unplugging working cables to test them. Which record answers that directly?
• A retail chain can lose no more than 15 minutes of sales transactions, and stores can sell on paper for up to four hours while systems return. Which target is the 15-minute figure?
• Data-center administrators must open SSH to one hardened host first, and only that host may open SSH onward to the servers. Direct SSH from the internet is closed. Which design is this?
• A network owner needs a week-long record of which internal addresses talked to which internet addresses and roughly how many bytes moved. Storing every frame, including payloads, is more than the storage budget allows. Which monitoring data fits?
• A library website resolves for IPv4 clients and fails for a test client that has only IPv6. The name has an address record and no IPv6 address record. Which record should be added?
• A university requires a second location that already holds current copies of student records and can take over registration with only a short cutover. Cost is acceptable. Which recovery site matches?
• A school enabled DNSSEC and told students that a coffee-shop network can no longer see which names their laptops look up. Which statement about that belief is accurate?
• A library technician wants to tighten a production firewall rule tonight. Policy requires an approved, scheduled change record before any production edit. What should the technician do?
• A library mail server's outbound messages are refused because its public address has no reverse DNS. Which change addresses that refusal?
• A campus badge printer must keep the same address every day and must still learn its DNS server and default gateway from DHCP. Which configuration does both?
• An IDS in a research lab must see a copy of one server's traffic without sitting inline. The switch can copy that server's frames to the sensor port. Which feature should be used?
• A switch model a warehouse plans to buy averages a long time between failures. Which figure states that property?
• A retail switch was edited by hand and no longer matches the approved baseline stored in change control. What should operations do with that drift?
• Security requires that a remote laptop's internet traffic and its corporate traffic both pass through headquarters for inspection. Which VPN design meets that requirement?
• A library cannot order a security incident because the firewall log and the server log disagree by several minutes. Which change puts those clocks on one timeline?
• Library staff sit in a conference room, talk through a flood scenario, and do not move or fail over any system. Which exercise is that?
• Every Monday at 2 a.m. a campus uplink reaches about 90 percent utilization, matching the backup window already recorded in last month's baseline. How should operations treat that spike?
• Two office technicians assigned the same address to two new servers because each copied an old spreadsheet. Which practice stops the next duplicate?
• Before any campus access point is mounted, the wireless team walks each floor and records signal levels at the classrooms. Which record is that walk producing?
• A factory switch no longer answers SSH or its web page because its management address is gone. A serial console on the switch still responds. How should the technician get in?
• Remote office staff say video meetings are slow because every internet flow hairpins through headquarters. Security has approved local breakout for internet video, while corporate applications must stay in the tunnel. Which change fits?
• A traveler on a cafe's open wireless network can see that a person at the next table is reading the laptop's DNS queries. The laptop should send those queries inside HTTPS. Which feature does that?
• School laptops build IPv6 addresses from the prefix inside a router advertisement, and no DHCPv6 server exists. Which method is forming those addresses?
• A warehouse is sending a closet switch out of the building for good. Staff must wipe its configuration, remove it from inventory and monitoring, and revoke its device account. Which process is that?
• City hall already sends firewall, VPN gateway, and server logs to a collector. The team now needs those logs correlated, with one alert when they form an incident. Which system adds that?
• City payroll must be usable again within 8 hours after an outage. Losing one hour of payroll data is a separate limit. Which target is the 8-hour figure?
• A data-center monitoring platform should pull interface counters from the switches through their API instead of scraping each switch web page. Which approach is that?
• Both of a university's data centers serve live students at the same time, and either center can keep serving if the other one stops. Which availability design is that?
• City-hall PCs receive a DHCP address in the correct subnet and a correct mask, and they have no default gateway and no DNS server. The scope options are blank. Which change supplies what is missing?
• The hotel front desk should learn that an uplink went down immediately, not at the next five-minute poll of the switch. Which message provides that immediate notice?
• A city-hall access switch has failed, and the vendor will replace it under warranty only if the serial number and the warranty date are on file. Which record holds those facts?
• A monitoring station needs the catalog of objects a factory switch can report through SNMP. Which set of definitions is that catalog?
• A school facilities lead wants a drawing of subnets, router hops, and which VLAN sits behind which gateway. Cable paths and rack elevations already exist. Which drawing answers that request?
• Factory engineers manage the switches through a management VLAN that rides the production network. When production routing fails, management fails with it. Which management path is that?
• Overnight a warehouse switch's running configuration gained a VLAN that the approved baseline does not contain. Interfaces stayed up and utilization looked normal. Which monitoring type caught that?
• The library's primary DNS server is powered off. Clients still receive authoritative answers for the library zone from the server that received a copy of the zone by zone transfer. Which server is answering?
• A factory DHCP scope covers 10.8.8.0/24. The gateway 10.8.8.1 and two printers are static inside that range. A laptop is later leased 10.8.8.1 and the gateway disappears. Which setting should have prevented that lease?
• A county records office can wait several days after a disaster and must spend as little as possible. It can rent space and power, and it would buy equipment only after the disaster. Which site type fits?
• One lab PC at a university resolves the portal name to a lab address. DNS on the university resolver returns the production address. That PC has the lab address in its hosts file. Why does only that PC differ?
• An engineer must set the same VLAN description on 40 campus switches, in a way that can be repeated next semester. Which management method fits that job?
• The operations desk sees a warehouse switch stop answering polls. The dashboard marks it down. Nobody compared its configuration, and utilization is blank because it cannot be reached. Which monitoring reported that?
• A retail office lost its internet circuit for part of a day and wants the uptime the provider committed to, plus the credit if that commitment was missed. Which record answers that?
• A university standby site already has servers installed. Data must be restored from backup after a disaster. The university can wait several hours and cannot wait days to buy equipment. Which site is this?
• Two hospital buildings need their internal subnets to reach each other through an encrypted tunnel. The routers will bring the tunnel up, and staff must not launch a VPN client. Which VPN fits?
• A contractor at an agency may use only a browser to reach one published application and must not install a VPN client. Which access method fits?
• A technician in a hospital closet needs to know which rack unit holds the firewall. Cable paths and IP subnets are already documented. Which drawing answers that?
• A campus team tracks the average time required to repair a failed access switch and restore service. Which measure is that average?
• A new switch in a retail closet is passing traffic, and the monitoring platform does not list it until a scan of the management subnet finds it. Which monitoring function is that scan?
• Senders cannot deliver mail to a university domain. Public DNS for that domain has address records and no mail-exchanger record. Which record should be added?
• A retail chain allows production switch updates only during an approved maintenance window. A critical patch is ready at noon, outside that window. What should the engineer do?
• A city wants proof that operators can move service to the spare site and move it back. They will perform the move, not only discuss it. Which exercise is this?
• A hospital runs live electronic records in one data center. A second data center has the systems ready and does not serve users until the first site fails. Which pattern is this?
• A factory switch failed and will not boot. The replacement must be rebuilt from a copy of the configuration that was stored somewhere other than that switch. Which practice makes the rebuild possible?