Networking Concepts for Managers GSLC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company's remote employees connect to the corporate network via a VPN. The security team wants to ensure that data is encrypted in transit and that only authorized users can connect. Which combination of controls achieves both goals?

   • AUse SSL/TLS without client authentication
   • BUse IPsec with digital certificates for authentication
   • CUse MAC address filtering on the VPN server
   • DUse a simple password and PPTP
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network engineer is troubleshooting a slow connection between two sites. The engineer suspects that a router is dropping packets due to a misconfigured access control list. At which OSI layer is the router primarily operating when it makes this decision?

   • ATransport layer
   • BPhysical layer
   • CNetwork layer
   • DData link layer
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A university is deploying a guest wireless network. The network must allow visitors to access the internet but not the internal campus network. The security team wants to minimize the risk of malware spreading from guest devices. Which combination of controls is most effective?

   • AUse the same SSID as the staff network but require a stronger password for guests.
   • BAllow guests to access the internal network but restrict them to a few file shares.
   • CPlace the guest SSID on a separate VLAN with a firewall rule that blocks access to internal subnets.
   • DDisable encryption on the guest SSID to make it easier for visitors to connect.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A data center is designing a network for a critical application that requires high availability. The manager wants to ensure that if one switch fails, the application remains reachable. Which topology and device redundancy approach best meets this requirement?

   • AA mesh topology with multiple redundant switches and links.
   • BA ring topology with a single switch in the ring.
   • CA bus topology with a backup cable.
   • DA star topology with a single high-end switch and redundant power supplies.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A coffee shop wants to offer free Wi-Fi to customers while keeping the payment system on a separate, secure network. The shop has one internet connection and one wireless access point. What is the most effective way to isolate customer traffic from the payment system?

   • AConfigure VLANs on the switch and a firewall between the VLANs
   • BUse WPA2 encryption on the customer Wi-Fi network
   • CDisable SSID broadcast for the payment network
   • DPlace the payment system on a different subnet without a router
   Reveal Solution Discussion Select an answer first