Network Infrastructure Management GCCC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network team uses a vulnerability scanner to identify missing patches on network devices. The scanner reports that a router has a critical vulnerability with a patch available. The router is in a remote office with limited bandwidth. What should the team do first?

   • AReplace the router with a new one that does not require patching.
   • BDownload the patch and apply it immediately over the limited bandwidth.
   • CIgnore the vulnerability because the router is in a remote office.
   • DVerify the router's current configuration and check if the vulnerability is actually exploitable in this environment.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team is investigating a suspected data exfiltration from a server in a DMZ. The team has access to the firewall logs, the switch port logs, and the server's system logs. The team wants to trace the network path of the suspicious traffic. Which combination of logs should the team correlate?

   • AOnly the server logs, because they show what data was accessed.
   • BFirewall logs showing source/destination IPs and ports, switch logs showing MAC addresses and port numbers, and server logs showing process and user activity.
   • CSwitch logs and server logs, but not firewall logs, because the firewall is not on the path.
   • DOnly the firewall logs, because they contain all network traffic information.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization requires that all network device administrators use multi-factor authentication (MFA) when accessing devices. The devices support RADIUS. Which configuration should be implemented?

   • AEnable SSH key-based authentication and disable password authentication.
   • BConfigure the devices to use RADIUS for authentication and integrate the RADIUS server with an MFA provider.
   • CUse local accounts with strong passwords and require a second password for privileged mode.
   • DUse TACACS+ with a shared secret and no additional authentication.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which network infrastructure component operates primarily at Layer 3 of the OSI model and makes forwarding decisions based on IP addresses?

   • ASwitch
   • BLoad balancer
   • CRouter
   • DFirewall
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst detects that an attacker has compromised a network switch and is using it to scan internal subnets. The analyst has isolated the switch by disconnecting it from the network. What should the analyst do next?

   • ACollect forensic evidence from the switch's logs and configuration, then restore the switch from a known-good backup.
   • BImmediately erase the switch's configuration and reboot it.
   • CReplace the switch with a new one without investigating the incident.
   • DReconnect the switch and continue monitoring to gather more evidence.
   Reveal Solution Discussion Select an answer first