4.1 - Apply Secure Design Principles in Network Architectures CISSP Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which network performance metric measures the variation in packet arrival times, which can cause issues with real-time applications like VoIP?

   • AJitter
   • BThroughput
   • CBandwidth
   • DLatency
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A network administrator is troubleshooting intermittent latency on a switch that handles both time-sensitive VoIP traffic and bulk data transfers. The switch currently uses store-and-forward switching. The administrator wants to reduce latency for VoIP without compromising error detection for data. What should they do?

   • AEnable cut-through switching for all ports
   • BDisable error checking on all ports
   • CConfigure separate VLANs and apply cut-through only to the VoIP VLAN
   • DIncrease the switch's buffer size
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A security analyst is investigating a suspicious connection. The analyst sees a TCP connection on port 443 to an external IP, but the payload appears to be encrypted. The analyst suspects the traffic is not standard HTTPS but is using TLS to tunnel another protocol. Which approach would best confirm this?

   • APerform deep packet inspection (DPI) on the TLS handshake and certificate
   • BCheck the source and destination IP addresses only
   • CDisable TLS on the firewall
   • DBlock all traffic on port 443
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A large enterprise is adopting SDN to centralize network management. The security team is concerned about the new attack surface introduced by SDN. Which component of SDN is the most critical to protect?

   • AThe southbound API
   • BThe data plane switches
   • CThe northbound API
   • DThe SDN controller
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A company is deploying VoIP and iSCSI storage on the same Ethernet network. They are concerned about performance degradation of storage traffic during peak VoIP usage. The network team has enabled QoS, but storage performance still suffers. What is the most likely reason?

   • AQoS is prioritizing VoIP traffic, which is time-sensitive, but the storage traffic is being dropped or delayed due to insufficient bandwidth allocation
   • BVoIP traffic is using jumbo frames, causing fragmentation
   • CiSCSI traffic is encrypted, causing excessive CPU load
   • DThe switch is using cut-through switching, which drops storage packets
   Reveal Solution Discussion Select an answer first