Network Infrastructure Management GCCC Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A financial services company operates a trading application that requires sub-second failover. The application runs on two servers in the same data center. The network team is considering two designs: (1) a load balancer in active-passive mode with health checks, or (2) a pair of routers running VRRP. Which design should be chosen to meet the sub-second failover requirement?

   • AUse the load balancer in active-passive mode with health checks, because it can detect application failure and redirect traffic in sub-second time.
   • BUse DNS round-robin with a short TTL, because it can redirect traffic quickly.
   • CUse both designs together, because VRRP and the load balancer provide redundancy at different layers.
   • DUse VRRP on the routers, because it provides fast failover at the IP layer.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which network device is specifically designed to distribute incoming client requests across multiple backend servers to improve performance and availability?

   • AFirewall
   • BRouter
   • CSwitch
   • DLoad balancer
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A network administrator is configuring a new firewall that will be deployed at the edge of the network. The firewall will be managed remotely. The administrator wants to ensure that management traffic is encrypted and that only authorized administrators can access the management interface. Which configuration should be used?

   • AEnable SSH for management, restrict management access to a specific management VLAN, and configure an ACL to allow only the admin workstation IPs.
   • BEnable HTTP for the web management interface and restrict access by source IP.
   • CUse SNMPv2c for management and set a complex community string.
   • DEnable Telnet for management and use a strong password.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company runs a critical application on two servers in the same data center. The network team wants to ensure that if one server fails, the other automatically takes over without manual intervention. Which technique should they implement?

   • AConfigure a load balancer in active-passive mode with health checks that redirect traffic to the standby server on failure.
   • BUse DNS round-robin to distribute traffic between the two servers.
   • CPlace both servers on the same VLAN and rely on the switch to route around failures.
   • DConnect both servers to the same power supply and network switch.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst discovers that a network switch is running firmware with a known remote code execution vulnerability. The vendor has released a patch. The switch is in a critical production path and cannot be rebooted during business hours. What should the analyst do first?

   • AMonitor logs for exploitation attempts and defer patching indefinitely.
   • BDisable the switch and replace it with a spare device.
   • CSchedule the patch during the next maintenance window and implement temporary mitigations such as an ACL to block the attack vector.
   • DApply the patch immediately and accept the brief outage.
   Reveal Solution Discussion Select an answer first