Network Infrastructure Management GCCC Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What does role-based access control (RBAC) ensure on network devices?

   • AOnly the administrator can log in
   • BUsers can only access the commands and functions required for their job role
   • CAll users have the same level of access
   • DAccess is granted based on the user's IP address
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   During an incident, a network administrator discovers that a core switch has been compromised and is running unauthorized firmware. The switch is critical to network operations. The administrator has isolated the switch. What should the administrator do to recover the switch while preserving evidence?

   • ARestore the switch from the most recent backup without capturing the current state.
   • BCapture the current firmware image and configuration for forensic analysis, then reimage the switch with a verified known-good firmware and restore a secure baseline configuration.
   • CReplace the switch with a spare and discard the compromised unit.
   • DReboot the switch immediately to clear the unauthorized firmware from memory.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A financial company runs a trading application that requires low latency and high availability. The application is deployed on two servers behind a load balancer. The load balancer itself is a single point of failure. The company is considering two options: (A) deploy a second load balancer in active-passive mode, or (B) use a DNS-based round-robin approach with two load balancers. Which option should the company choose and why?

   • AOption A, because it is always cheaper than DNS round-robin.
   • BOption A, because active-passive failover provides automatic failover with minimal disruption and maintains a single virtual IP.
   • COption B, because DNS round-robin provides automatic failover and does not require a virtual IP.
   • DOption B, because it eliminates the need for a load balancer entirely.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which technique is commonly used to provide high availability by automatically switching traffic to a standby device when the primary device fails?

   • AVLAN tagging
   • BFailover
   • CPort mirroring
   • DNetwork Address Translation (NAT)
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An e-commerce company runs a web application on two load-balanced servers behind a single firewall. The firewall is a single point of failure. The company wants to ensure that the application remains available if the firewall fails. Which solution should the company implement?

   • AMove the application to a different network segment that does not require a firewall.
   • BDeploy a second firewall in an active-passive high-availability pair with automatic failover.
   • CAdd a third web server to the load balancer to handle additional traffic.
   • DConfigure the load balancer to bypass the firewall if it fails.
   Reveal Solution Discussion Select an answer first