Network Infrastructure Management GCCC Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A network administrator is configuring a new router that will be deployed in a branch office. The router will be managed remotely from the corporate headquarters. The administrator wants to ensure that management traffic is encrypted and that only authorized administrators can access the router. The router supports SSH, HTTPS, and SNMPv3. Which configuration should the administrator apply?

   • AEnable Telnet for remote management because it is simpler to configure.
   • BEnable SSH and SNMPv3, but keep the default community strings for SNMP.
   • CEnable SSH for command-line management, enable HTTPS for web-based management, and disable all other management protocols.
   • DEnable only SNMPv3 for management and disable SSH and HTTPS.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security analyst is investigating a potential breach. The analyst has access to firewall logs, but the logs are only retained for 7 days. The analyst needs to determine if a specific IP address communicated with an internal server over the past month. What should the analyst do?

   • ACheck if the firewall logs have been archived to a central log management system.
   • BUse the firewall's real-time monitoring feature to replay the traffic.
   • CConclude that the data is unavailable and proceed without it.
   • DRequest the ISP to provide the logs for the past month.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A network team is implementing role-based access control (RBAC) for network devices. The team wants to ensure that junior administrators can view configurations but cannot modify them, while senior administrators can modify configurations. Which approach should be used?

   • ADisable configuration commands for all administrators and use a change management process.
   • BUse the same privilege level for all administrators and rely on training to prevent mistakes.
   • CConfigure privilege levels on the devices, assigning junior admins a read-only privilege level and senior admins a higher privilege level.
   • DCreate separate local accounts for each administrator and manually assign permissions.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is designing a new network segment for a public-facing web application. The application must be accessible from the internet, but the backend database must not be directly reachable from the internet. Which set of components should be used?

   • AA firewall, a load balancer, and a DMZ segment for the web servers, with the database in a separate internal segment.
   • BA single router with no firewall, placing all servers on the same subnet.
   • CA switch with VLANs for web and database, but no firewall between them.
   • DA load balancer only, with the database directly attached to the load balancer.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A network administrator is hardening a router that will be managed remotely. The router currently has Telnet, HTTP, and SSH enabled. The administrator wants to ensure that management traffic is encrypted and that only authorized administrators can access the router. Which configuration should the administrator apply?

   • AKeep Telnet enabled but restrict it to a specific management IP range.
   • BDisable Telnet and HTTP, keep SSH enabled, and configure SSH to use local accounts with strong passwords.
   • CEnable HTTPS for management and disable SSH.
   • DDisable all remote management and require console access only.
   Reveal Solution Discussion Select an answer first