Network Operations

A network engineer is designing a high-availability solution for a pair of firewalls that must handle peak traffic loads. The business requires that both firewalls actively pass traffic during normal operations so that the full combined throughput of both devices is available, while still providing redundancy if one fails. Which redundancy configuration best meets these requirements?

A company deploys two firewalls in a cluster. The primary firewall handles all traffic while the second unit stays idle, only taking over if the primary fails. During normal operation, the secondary firewall processes no production traffic. Which redundancy configuration does this describe?

A network administrator is preparing next year's hardware refresh budget. Management wants a report identifying which switches and routers will no longer receive vendor firmware updates or hardware replacement support so they can be prioritized for replacement. Which documentation resource is the BEST source for producing this report?

A network engineer submits a change request to upgrade the firmware on the core switches during a maintenance window. The change advisory board reviews the request but sends it back, stating that one critical element is missing that must be documented before approval. This element describes the specific steps to return the switches to their previous working state if the firmware upgrade causes an outage. Which element is the board requiring?

A small nonprofit with a limited budget wants an offsite disaster recovery location. Management states that if the primary site fails, the organization can tolerate several days of downtime while equipment is procured, delivered, and configured. They want to minimize ongoing recurring costs as much as possible. Which type of recovery site best fits these requirements?

A network administrator makes several changes to a core switch's running configuration each week. After a recent faulty update caused an outage, management asks for a system that stores every past version of the device configuration so the team can compare revisions and restore a known-good copy on demand. Which practice best meets this requirement?

A technician pushed a configuration change to a distribution switch that accidentally disabled all its management IP interfaces, and the device is now unreachable over SSH from the network. The switch is still powered and passing user traffic. What is the MOST appropriate way for the technician to regain administrative access to correct the mistake?

A network administrator manages a guest wireless network in a busy conference center where hundreds of visitors connect and leave throughout each day. The administrator notices that the DHCP scope frequently exhausts its available addresses even though far fewer devices are physically present at any given moment. Which DHCP configuration change will most directly address this address exhaustion?

A network administrator deploys a new subnet for the accounting department on a separate VLAN. Hosts on this VLAN are receiving APIPA addresses even though a centralized DHCP server on another subnet is operational and serving other VLANs correctly. Which configuration should the administrator apply to the accounting VLAN's gateway interface to resolve the issue?

Users report intermittent slowness on the corporate WAN link during business hours. The network administrator wants to identify which hosts and applications are consuming the most bandwidth over time, including source/destination IPs, ports, and byte counts per conversation. Which monitoring data source should the administrator use?

A financial trading firm cannot tolerate more than a few minutes of downtime if its primary data center fails. Management approves a large budget to build a secondary facility that is fully equipped with duplicated hardware, live-replicated data, and applications kept running in real time so operations can continue almost instantly. Which type of recovery site meets this requirement?

A network administrator manages a remote branch router by opening an SSH session to the router's production LAN interface over the corporate WAN link. The connection works well during normal operations but becomes unreachable whenever the WAN circuit fails or the router's routing table is misconfigured. Which characteristic best describes this management approach?

A network administrator is receiving reports of intermittent connectivity from several workstations that have been manually assigned static addresses. The administrator suspects address conflicts with the DHCP scope. Which tool or practice would BEST help the team prevent these conflicts going forward?

A security team wants administrators to reach servers in a highly restricted management VLAN. Direct SSH and RDP from user workstations to these servers is prohibited by policy. Administrators must first authenticate to a single hardened, logged host that then permits access to the restricted devices. Which solution meets this requirement?

A new network engineer needs to understand how traffic flows between VLANs, which subnets are assigned to each segment, and how routing is configured across the enterprise. The engineer does not need to know the exact rack or floor location of each device. Which documentation artifact should the engineer consult FIRST?

A network administrator receives frequent complaints about slow application performance during mid-morning hours. When she checks the monitoring dashboard, current utilization looks high, but she has no reference to determine whether these levels are normal for that time of day. Which practice should she implement to accurately identify future deviations from normal network behavior?

A network administrator notices that authentication logs across several servers show timestamps that differ by several minutes, causing Kerberos ticket failures and making it difficult to correlate events in the SIEM. The administrator wants to ensure all devices maintain accurate, consistent time. Which service should be configured to resolve this issue?

A network administrator needs to reconfigure a core switch remotely, but a recent misconfiguration has taken down the switch's production data VLANs, making it unreachable over the normal network path. The organization requires a method that guarantees access to the device's management interface even when the production network is completely down. Which management approach best meets this requirement?

A network technician needs to identify exactly which switch port a specific wall jack in Room 204 connects to, along with the cable's path through the building's risers and patch panels. Which type of documentation should the technician consult first?

A network administrator needs to remotely administer a Windows Server that has a graphical management console. Company policy requires the connection to be encrypted and to provide full desktop interaction. Which remote access method should the administrator use?