Network Infrastructure Management GCCC Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   During a security incident, a network switch is suspected to be compromised. The switch is critical to production traffic. The incident response team needs to preserve evidence while maintaining business operations. Which action should be taken first?

   • AReboot the switch to clear any malicious code.
   • BDisconnect the switch from the network and analyze it offline.
   • CImmediately power off the switch to preserve the evidence.
   • DTake a memory dump and capture the running configuration, then fail over traffic to a redundant switch.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which factor is most important when prioritizing which patches to apply first to network devices?

   • AThe size of the patch file
   • BThe number of devices affected
   • CThe vendor's release date of the patch
   • DThe severity of the vulnerability and the device's exposure
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company is designing a network for a new office. The office has a guest Wi-Fi network and a corporate network. The security team wants to ensure that guests cannot access internal resources, but they also want to allow guests to access the internet. The company has a single internet connection and a firewall. Which design should be implemented?

   • ADisable the guest Wi-Fi network to avoid the risk.
   • BPut the guest Wi-Fi on the same VLAN as the corporate network and rely on the access point's built-in isolation.
   • CUse a separate physical switch for guest Wi-Fi and connect it directly to the internet connection.
   • DCreate a separate VLAN for guest Wi-Fi, and configure the firewall to allow guest traffic to the internet but block access to the corporate VLAN.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A network team is setting up monitoring for a new DMZ segment that hosts a public web server. They want to detect anomalous traffic patterns and have a record of who accessed the server. Which combination of actions should they implement?

   • ADeploy a packet capture tool on the web server only.
   • BConfigure the firewall to log all dropped packets and discard the logs after 24 hours.
   • CEnable SNMP traps on the switch and configure email alerts for link up/down events.
   • DEnable NetFlow on the firewall and configure syslog forwarding to a central log collector.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A hospital network has a flat Layer 2 topology. The IT security team needs to isolate the medical imaging devices from the general user workstations while keeping both groups on the same physical switches. Which approach should the team implement?

   • ACreate separate VLANs for the imaging devices and user workstations, and configure inter-VLAN routing only where required.
   • BEnable port security on all switch ports to limit the number of MAC addresses per port.
   • CAssign different IP subnets to the devices and rely on the default gateway to filter traffic.
   • DPlace the imaging devices on a separate physical switch and connect it to the core router.
   Reveal Solution Discussion Select an answer first