Hard N10-009 practice questions
Challenge — multi-step scenarios, trade-offs, and subtle distinctions. 3 hard questions available — no sign-up, always free.
During a security audit, a penetration tester demonstrates that they can send frames from an access port on VLAN 10 and have those frames delivered to hosts on VLAN 20 without crossing a router. The tester accomplished this by inserting two 802.1Q tags into a single frame. Which action BEST mitigates this specific attack?
A network engineer runs OSPF on all routers in a campus network. Between the core router and a remote building router, two paths exist: Path 1 traverses a single 1 Gbps fiber link, and Path 2 traverses three 10 Gbps links in series. Assuming default OSPF cost calculations and no manual cost adjustments, which path will OSPF choose to reach the remote building, and why?
A network administrator notices that the company's edge router is being overwhelmed by a flood of ICMP echo replies from many hosts across the internet, none of which the internal network actually pinged. Investigation reveals an attacker is sending spoofed ICMP echo requests using the company's public IP as the source address, directed to the broadcast addresses of misconfigured remote networks. Which configuration change on the company's routers BEST prevents their own network from being used as an amplifier in this type of attack?