Network Operations: Management, Protocols, and Backup Strategies Practice Test

These questions are part of the practice quiz. Start practicing

• Which category is commonly included in a network outage root-cause taxonomy?
• What is a key activity commonly performed during a post-change review?
• In network metrics, which term describes the maximum data capacity of a network link?
• A replacement component kept in storage that must be physically installed and configured before it can be used is a
• A backup component already installed and ready to take over automatically when the primary fails is a
• Which backup type saves only data that has changed since the last backup of any type?
• Which strategy best protects backup data both in transit and at rest?
• A spare component that is pre-installed and can automatically take over when the primary fails is called a
• Which protocol family provides rapid convergence at Layer 2 to prevent outages after topology changes?
• Which disaster recovery pattern involves two sites both actively handling traffic to improve availability?
• Which statement about encryption for backups is true?
• Which concept provides a formal framework for controlling changes and ensuring traceability?
• Which backup type backs up only data that has changed since the last backup of any type and uses the least storage space but takes the most time to restore?
• Which instrument is used to identify signal loss caused by dirty connectors in fiber optic systems?
• Designing systems with redundancy to minimize downtime and keep services running continuously aims for what?
• What is the primary purpose of trunking on inter-switch links in VLAN-enabled networks?
• Which network scanning tool is used to discover hosts, identify open ports, and detect running services across a network?
• Syslog uses which port on UDP to send messages to a centralized log server?
• Which device injects an audio tone onto a cable to help locate it with a matching probe?
• What is a synthetic full backup?
• Which command-line tool displays active network connections, listening ports, and routing table information?
• Which statement best describes the SNMP agent's role on network devices?
• What is the difference between a Disaster Recovery Plan (DRP) and a Business Continuity Plan (BCP)?
• Why are hashing and integrity checks important in backups?
• Which ITIL process is NOT listed among the essential processes for rapid incident resolution in Network Operations?
• What practice helps verify that backups remain recoverable and usable over time?
• Describe the difference between hot, warm, and cold site DR options.
• Which protocol is Cisco's proprietary method for exporting flow data?
• Which utility is commonly used to display the active network connections, listening ports, and routing table information on a host?
• A hardware tool that verifies cable continuity and correct pinout. Identifies opens, shorts, and miswired pairs in copper cables.
• What is the purpose of STP in a switched network, and why is rapid convergence important?
• Which statement accurately differentiates full, incremental, and differential backups and describes restore order?
• Which DR option is typically deployed with some equipment installed and recovers in hours to days?
• Which backup method is most storage-efficient but may require the longest time to complete a restore?
• Gateway Load Balancing Protocol is abbreviated as what?
• What does the acronym FHRP stand for?
• Which device connects the transmit pin to the receive pin on a port to test NIC functionality without an actual network connection?
• Which DNS strategy primarily provides automatic failover between a pair of servers?
• Which technologies are commonly used to provide redundancy across core routers, links, and paths?
• Which backup type stores every change since the last full backup, potentially using more storage than incremental but easier restore?
• Explain the difference between backup verification and restore testing.
• Which ITIL practice is focused on maintaining accurate configuration information and asset inventory?
• LDAP/Radius/TACACS+ are used for what in network access control?
• Which modern Linux command displays network interface configuration, including the IP addresses assigned to each interface?
• Which protocol is a Cisco protocol that collects metadata about IP traffic flows?
• Explain the concept of network segmentation and its security and performance benefits.
• How do you implement effective patch management in network devices and servers?
• Which Cisco FHRP uses a shared virtual IP and a virtual MAC address?
• Which backup type creates a complete copy of all selected data, requiring the most storage and longest backup time, but offers the fastest and simplest recovery?
• Which Linux/Mac command-line tool performs detailed DNS lookups, showing the full DNS response including TTL values and record types?
• What data does NetFlow collect and how is it used in traffic analysis and capacity planning?
• Which component focuses on documenting lessons learned and remediation steps after an incident has been contained and recovered?
• What term describes a system that tracks and manages changes to configuration files over time, enabling rollback to earlier versions?
• Which diagram type is used to visualize the physical layout of devices in racks and the cabling between them, focusing on hardware placement?
• Version Control is best described as a system that ...
• Which term describes an unsolicited alert sent from an SNMP agent to the NMS when a threshold is crossed or a fault occurs?
• In SNMP usage, when would you prefer polling versus traps?
• Which statement best describes how network segmentation supports security and performance?
• Which backup strategy is best practice for data resilience, typically described as three copies on two media with one offsite?
• Which graphical packet capture and protocol analysis tool captures live traffic or reads capture files and decodes protocols in detail?
• Which device is the fiber optic equivalent of a copper Time Domain Reflectometer, used to locate breaks and measure loss along fiber links?
• In backup strategies, what does D2D2T stand for?
• Which diagram shows how traffic flows logically—including IP addresses, VLANs, and routing paths—without regard to physical location?
• What is the role of MIBs in SNMP-based network monitoring?
• Which port is used for SNMP polling?
• What is the actual data transfer rate achieved in practice, always equal to or less than the available bandwidth due to overhead and network conditions?
• RPO is the maximum tolerable amount of data loss measured in time. Which option corresponds to RPO?
• Which component is a centralized platform that collects SNMP data, monitors device health, displays dashboards, and generates alerts?
• Which tool displays radio frequency energy across wireless channels to identify interference sources?
• What is the purpose of implementing redundancy across critical network components?
• What does N+1 redundancy mean in data center design?
• Which component automates IP address assignment within a VLAN-scoped network?
• Which statement correctly differentiates bandwidth from throughput?
• Which Cisco FHRP distributes traffic across multiple routers while providing redundancy?
• Which protocol is used to monitor and manage network devices by sending data from agents to a central Network Management System?
• Which legacy Unix-like command is used to display network interface configuration and is commonly replaced by a newer tool on modern systems?
• Mean Time to Repair (MTTR) is the average time required to
• Which term describes first hop gateway redundancy by sharing a virtual IP across routers so clients can always reach a gateway?
• Which is a common DNS issue that can affect reachability?
• What is the combined role of VLANs and DHCP in IP address management?
• Which domain is NOT considered a core function of a Network Operations Center?
• A fully operational duplicate of the production environment that can take over within minutes after a failure is a
• Time Domain Reflectometer. A hardware tool that locates breaks or faults in copper cables by sending a signal and measuring the reflection.
• Which configuration is loaded when a device boots and stored in non-volatile memory?
• Which command-line tool displays and manages the ARP cache, mapping IP addresses to MAC addresses?
• What is switch port security and how does it mitigate ARP spoofing and MAC flooding?
• Which term refers to the IETF open standard version of NetFlow?
• What is the role of backup testing in regulatory compliance and business continuity?
• In network operations, what role does DNS primarily fulfill?
• Which term describes a backup approach that uses the most storage but offers the simplest restore process?
• Which two aspects should backups employ to minimize exposure to interception and theft?
• In a robust backup policy, the rule to keep three copies of data, stored on at least two media types with one offsite copy, is known as what?
• Which Windows command combines the functions of ping and tracert and collects statistics at each hop over time?
• Which factor is least typically considered in network capacity planning?
• What do RPO and RTO signify, and how do they influence backup strategies?
• What is network baselining and what is its role in incident detection?
• Which protocol is defined by IEEE 802.3ad to bundle multiple physical links into a single logical link?
• Which item is not typically part of an incident response playbook for network incidents?
• Which backup strategy recommends maintaining three copies of data on two different media types with one copy stored offsite?
• Which DR option provides the longest recovery time but is the least expensive?
• Which objective defines the maximum acceptable length of time that a system can be offline after a failure before the disruption becomes unacceptable?
• In disaster recovery planning, what does the Recovery Time Objective (RTO) specify?
• Which components are commonly involved in a layered DDoS mitigation strategy?
• What is IP Flow Information Export, the IETF open standard version of NetFlow for flow-based traffic monitoring?
• Which item is used to rollback changes by preserving a snapshot of the previous configuration?
• Which command-line tool sends ICMP echo requests to test basic connectivity between two devices and measures round-trip time?
• Which FHRP is an open-standard solution with one master and backups sharing a virtual IP?
• What is the role of configuration management databases (CMDB) in network operations?
• MTBF is used to quantify which aspect of reliability?
• In MTBF, higher values indicate what about a component?
• Which legacy Linux/Mac command displays network interface configuration and has been replaced by a modern option on newer Linux systems?
• Which command-line utility shows the hop-by-hop path that packets take to a destination and measures latency at each hop?
• Which syslog level indicates warning conditions that may lead to errors?
• Which statement best describes QoS in enterprise networks?
• Restoring from incremental backups requires which combination?
• Which VLAN trunking tagging standard is commonly used on inter-switch links?
• Which SNMP version should be used for secure network monitoring?
• Which protocol bundles multiple physical links between switches or servers into one logical link for increased bandwidth and redundancy?
• Which syslog level is described as 'Immediate action is required to prevent system failure'?
• What is the total maximum data capacity of a network link?
• Which Linux command-line packet capture tool captures and displays raw network traffic directly from the terminal?
• What term refers to the formal process for requesting, reviewing, approving, implementing, and documenting changes to a network to minimize risk?
• Which SNMP versions transmit community strings in plain text and are considered insecure?
• Which TLS vulnerabilities are commonly encountered in practice?
• Which term stands for the maximum tolerable period of data loss in DR planning?
• What is the active configuration currently in a router or switch's RAM?
• Which tool is used to verify copper cable continuity and correct pinout before installation?
• What is the practice of saving a copy of a device's current configuration before making changes?
• Which protocol pair differentiates in scope: interior gateway for intra-domain routing vs exterior gateway for inter-domain routing?
• What is a key reason for time synchronization in network operations?
• Which FHRP is Cisco-proprietary and uses one active router and one standby with a shared virtual IP and virtual MAC?
• Which command-line tool queries DNS servers to resolve hostnames to IP addresses and test DNS functionality?
• What does MIB stand for in SNMP?
• What is the common high-availability standard that allows about 5 minutes and 15 seconds of downtime per year?
• Which syslog level corresponds to 'Critical error conditions that need urgent attention'?
• What is the primary role of a SIEM in network operations?
• My TraceRoute. A Linux tool that combines ping and traceroute into a single continuously updating display.
• What is the maximum acceptable amount of data loss measured in time?
• Which modern Linux command shows the IP addresses assigned to each network interface?
• Which syslog level is described as 'The least severe'?
• Which SNMP version adds authentication and encryption and is recommended for secure monitoring?
• What is the saved configuration stored in NVRAM that loads when a device boots up?
• What combination is recommended for secure remote access to network operations?
• In a Network Operations Center, the incident response and escalation process primarily accomplishes which action?
• Mean Time Between Failures (MTBF) indicates the average time between
• Which statement correctly describes how port security relates to ARP spoofing and MAC flooding?
• For fast recovery, which backup type is typically fastest to restore because it contains the entire dataset in one copy?
• Which statement correctly contrasts SNMP v2c and SNMP v3 regarding security features?
• A tool that measures optical power levels on fiber optic connections to identify signal loss caused by damaged fiber or dirty connectors.
• A disaster recovery facility with some equipment already installed, recovery takes hours to days is called a
• What is the time it takes for a packet to travel from its source to its destination, measured in milliseconds; high latency causes lag and slow response times?
• Which term describes the variation in latency over time, which is critical for real-time applications such as VoIP and video conferencing?
• Which diagram shows the physical arrangement of equipment in server racks, measured in rack units (U)?
• Which DNS feature reduces user-perceived latency by directing clients to the nearest healthy server?
• What is the primary purpose of change management in a network operations context?
• Which configuration is loaded when a device boots and stored in non-volatile memory?
• Which syslog level is described as highly detailed messages used for troubleshooting and usually disabled in production?
• Which elements are essential when designing a disaster recovery drill?
• Optical Time Domain Reflectometer. The fiber optic equivalent of a TDR. Locates breaks, splices, and connectors in fiber cables and measures signal loss.
• Which protocol belongs to the Transport layer in the TCP/IP model?
• Which term is a documented record of normal network performance metrics used as a reference point for identifying anomalies?
• Which statement correctly matches NetFlow, IPFIX, and sFlow with their descriptions?
• Which tool is used to observe network traffic with a graphical interface and decode protocols in detail?
• Why is rotating encryption keys important in backup security?
• What redundancy patterns are commonly used in data centers to ensure availability?
• Which diagram shows the actual physical locations of devices and how cables are run between them?
• Which protocol is a sampling-based network traffic monitoring protocol that works across manufacturers?
• Which Windows utility combines ping and tracert functionality to collect hop-by-hop statistics over time?
• Which protocol is primarily used for directory services and storing user information?
• What is the primary purpose of centralized log management in security operations?
• Which term refers to a system or tool for tracking all IP address allocations across a network to prevent conflicts and assist with planning?
• Which statement best describes TLS in securing network communications?
• Which syslog level is the most severe, indicating the system is completely unusable?
• What is a common cloud-based backup/DR option for on-prem networks, and a typical trade-off?
• Which Windows command displays the IP configuration of all network interfaces on the local machine, including IP address, subnet mask, and default gateway?
• Which open-standard FHRP is used to share a virtual IP address among routers?
• Which command-line tool would you use to verify the reachability between two devices and measure the round-trip time using ICMP?
• Which port is used for SNMP traps?
• What term describes configuring multiple network cards in a server as a single logical interface to provide redundancy and potentially increase throughput?
• Which syslog level is described as 'Error conditions that have occurred but have not caused system failure. The most commonly monitored level in practice'?
• Which statement best describes trade-offs among backup targets such as D2D2T, NAS, SAN, and cloud?
• A disaster recovery facility that provides only space, power, and connectivity with recovery taking days to weeks is known as a
• Which statement best describes the difference between VM snapshots and VM backups?
• Which backup type backs up all data changed since the last full backup and typically requires more storage than incremental but restores faster since only the full backup and the latest differential are needed?
• Which protocol is a sampling-based network traffic monitoring protocol, vendor-neutral alternative to NetFlow?
• What is the term for the percentage of packets that fail to reach their destination, causing retransmissions and quality issues in real-time communications?
• Which of the following statements correctly defines MTTR and MTBF and notes their role in maintenance planning?
• Which statement best describes proactive maintenance?
• Which components are commonly included in an enterprise DDoS mitigation strategy?
• Restoring data using a differential backup typically requires which of the following data sets?
• Which expression best captures the relationship between MTBF, MTTR, and system availability?