Network Operations: Management, Protocols, and Backup Strategies Practice Test

These questions are part of the practice quiz. Start practicing

• Which VLAN trunking tagging standard is commonly used on inter-switch links?
• Which backup type saves only data that has changed since the last backup of any type?
• What is the time it takes for a packet to travel from its source to its destination, measured in milliseconds; high latency causes lag and slow response times?
• What is the difference between a Disaster Recovery Plan (DRP) and a Business Continuity Plan (BCP)?
• Which port is used for SNMP traps?
• Which statement best describes TLS in securing network communications?
• Which domain is NOT considered a core function of a Network Operations Center?
• Which backup strategy is best practice for data resilience, typically described as three copies on two media with one offsite?
• Which diagram shows how traffic flows logically—including IP addresses, VLANs, and routing paths—without regard to physical location?
• What is the saved configuration stored in NVRAM that loads when a device boots up?
• A disaster recovery facility with some equipment already installed, recovery takes hours to days is called a
• Which command-line tool sends ICMP echo requests to test basic connectivity between two devices and measures round-trip time?
• Which backup type backs up only data that has changed since the last backup of any type and uses the least storage space but takes the most time to restore?
• Which backup type backs up all data changed since the last full backup and typically requires more storage than incremental but restores faster since only the full backup and the latest differential are needed?
• Which FHRP is Cisco-proprietary and uses one active router and one standby with a shared virtual IP and virtual MAC?
• Time Domain Reflectometer. A hardware tool that locates breaks or faults in copper cables by sending a signal and measuring the reflection.
• What does N+1 redundancy mean in data center design?
• What is the practice of saving a copy of a device's current configuration before making changes?
• A replacement component kept in storage that must be physically installed and configured before it can be used is a
• In a Network Operations Center, the incident response and escalation process primarily accomplishes which action?
• Which device connects the transmit pin to the receive pin on a port to test NIC functionality without an actual network connection?
• Which component automates IP address assignment within a VLAN-scoped network?
• Which SNMP versions transmit community strings in plain text and are considered insecure?
• What data does NetFlow collect and how is it used in traffic analysis and capacity planning?
• Which diagram shows the physical arrangement of equipment in server racks, measured in rack units (U)?
• A backup component already installed and ready to take over automatically when the primary fails is a
• How do you implement effective patch management in network devices and servers?
• What is the total maximum data capacity of a network link?
• What is the combined role of VLANs and DHCP in IP address management?
• Which command-line tool would you use to verify the reachability between two devices and measure the round-trip time using ICMP?
• Mean Time Between Failures (MTBF) indicates the average time between
• What redundancy patterns are commonly used in data centers to ensure availability?
• Designing systems with redundancy to minimize downtime and keep services running continuously aims for what?
• Which device injects an audio tone onto a cable to help locate it with a matching probe?
• What combination is recommended for secure remote access to network operations?
• Which statement best describes the SNMP agent's role on network devices?
• Which legacy Linux/Mac command displays network interface configuration and has been replaced by a modern option on newer Linux systems?
• Which category is commonly included in a network outage root-cause taxonomy?
• Which Cisco FHRP distributes traffic across multiple routers while providing redundancy?
• Which statement best describes trade-offs among backup targets such as D2D2T, NAS, SAN, and cloud?
• Syslog uses which port on UDP to send messages to a centralized log server?
• Which term stands for the maximum tolerable period of data loss in DR planning?
• Which disaster recovery pattern involves two sites both actively handling traffic to improve availability?
• Which statement best describes proactive maintenance?
• In MTBF, higher values indicate what about a component?
• Which ITIL process is NOT listed among the essential processes for rapid incident resolution in Network Operations?
• Which statement correctly differentiates bandwidth from throughput?
• A fully operational duplicate of the production environment that can take over within minutes after a failure is a
• Which term is a documented record of normal network performance metrics used as a reference point for identifying anomalies?
• Which command-line tool displays active network connections, listening ports, and routing table information?
• Which syslog level is described as 'Immediate action is required to prevent system failure'?
• Which is a common DNS issue that can affect reachability?
• Why are hashing and integrity checks important in backups?
• Which graphical packet capture and protocol analysis tool captures live traffic or reads capture files and decodes protocols in detail?
• Which ITIL practice is focused on maintaining accurate configuration information and asset inventory?
• Which Linux command-line packet capture tool captures and displays raw network traffic directly from the terminal?
• Which Linux/Mac command-line tool performs detailed DNS lookups, showing the full DNS response including TTL values and record types?
• Which term refers to a system or tool for tracking all IP address allocations across a network to prevent conflicts and assist with planning?
• A hardware tool that verifies cable continuity and correct pinout. Identifies opens, shorts, and miswired pairs in copper cables.
• Which component is a centralized platform that collects SNMP data, monitors device health, displays dashboards, and generates alerts?
• What is the purpose of implementing redundancy across critical network components?
• What is IP Flow Information Export, the IETF open standard version of NetFlow for flow-based traffic monitoring?
• Which protocol belongs to the Transport layer in the TCP/IP model?
• Which statement accurately differentiates full, incremental, and differential backups and describes restore order?
• What is the term for the percentage of packets that fail to reach their destination, causing retransmissions and quality issues in real-time communications?
• Restoring from incremental backups requires which combination?
• Which backup type stores every change since the last full backup, potentially using more storage than incremental but easier restore?
• A tool that measures optical power levels on fiber optic connections to identify signal loss caused by damaged fiber or dirty connectors.
• Which DNS feature reduces user-perceived latency by directing clients to the nearest healthy server?
• Which term describes the variation in latency over time, which is critical for real-time applications such as VoIP and video conferencing?
• In network metrics, which term describes the maximum data capacity of a network link?
• What is a key activity commonly performed during a post-change review?
• What is switch port security and how does it mitigate ARP spoofing and MAC flooding?
• Which command-line tool displays and manages the ARP cache, mapping IP addresses to MAC addresses?
• Which concept provides a formal framework for controlling changes and ensuring traceability?
• Which Windows utility combines ping and tracert functionality to collect hop-by-hop statistics over time?
• Version Control is best described as a system that ...
• Which Windows command displays the IP configuration of all network interfaces on the local machine, including IP address, subnet mask, and default gateway?
• What practice helps verify that backups remain recoverable and usable over time?
• Which TLS vulnerabilities are commonly encountered in practice?
• Which two aspects should backups employ to minimize exposure to interception and theft?
• Describe the difference between hot, warm, and cold site DR options.
• Which of the following statements correctly defines MTTR and MTBF and notes their role in maintenance planning?
• Which statement correctly contrasts SNMP v2c and SNMP v3 regarding security features?
• Which item is not typically part of an incident response playbook for network incidents?
• Which statement best describes QoS in enterprise networks?
• Restoring data using a differential backup typically requires which of the following data sets?
• Which protocol is primarily used for directory services and storing user information?
• Which device is the fiber optic equivalent of a copper Time Domain Reflectometer, used to locate breaks and measure loss along fiber links?
• Which DR option is typically deployed with some equipment installed and recovers in hours to days?
• What is the primary purpose of trunking on inter-switch links in VLAN-enabled networks?
• Which term describes first hop gateway redundancy by sharing a virtual IP across routers so clients can always reach a gateway?
• Which protocol is used to monitor and manage network devices by sending data from agents to a central Network Management System?
• What is a synthetic full backup?
• Which item is used to rollback changes by preserving a snapshot of the previous configuration?
• Which syslog level is the most severe, indicating the system is completely unusable?
• Which legacy Unix-like command is used to display network interface configuration and is commonly replaced by a newer tool on modern systems?
• Which syslog level indicates warning conditions that may lead to errors?
• What is a key reason for time synchronization in network operations?
• Which syslog level is described as highly detailed messages used for troubleshooting and usually disabled in production?
• What is a common cloud-based backup/DR option for on-prem networks, and a typical trade-off?
• RPO is the maximum tolerable amount of data loss measured in time. Which option corresponds to RPO?
• Which FHRP is an open-standard solution with one master and backups sharing a virtual IP?
• Which protocol pair differentiates in scope: interior gateway for intra-domain routing vs exterior gateway for inter-domain routing?
• Which protocol is defined by IEEE 802.3ad to bundle multiple physical links into a single logical link?
• Why is rotating encryption keys important in backup security?
• Which SNMP version adds authentication and encryption and is recommended for secure monitoring?
• Which statement about encryption for backups is true?
• Which diagram shows the actual physical locations of devices and how cables are run between them?
• MTBF is used to quantify which aspect of reliability?
• What do RPO and RTO signify, and how do they influence backup strategies?
• What is the role of configuration management databases (CMDB) in network operations?
• Which term describes a backup approach that uses the most storage but offers the simplest restore process?
• Which term refers to the IETF open standard version of NetFlow?
• Which component focuses on documenting lessons learned and remediation steps after an incident has been contained and recovered?
• Which protocol is a sampling-based network traffic monitoring protocol, vendor-neutral alternative to NetFlow?
• In disaster recovery planning, what does the Recovery Time Objective (RTO) specify?
• Which protocol family provides rapid convergence at Layer 2 to prevent outages after topology changes?
• Mean Time to Repair (MTTR) is the average time required to
• Which backup type creates a complete copy of all selected data, requiring the most storage and longest backup time, but offers the fastest and simplest recovery?
• Which syslog level is described as 'Error conditions that have occurred but have not caused system failure. The most commonly monitored level in practice'?
• What is the active configuration currently in a router or switch's RAM?
• Which DNS strategy primarily provides automatic failover between a pair of servers?
• Which configuration is loaded when a device boots and stored in non-volatile memory?
• What does MIB stand for in SNMP?
• Which Windows command combines the functions of ping and tracert and collects statistics at each hop over time?
• Which statement best describes how network segmentation supports security and performance?
• Which command-line utility shows the hop-by-hop path that packets take to a destination and measures latency at each hop?
• In backup strategies, what does D2D2T stand for?
• Which modern Linux command shows the IP addresses assigned to each network interface?
• What is the purpose of STP in a switched network, and why is rapid convergence important?
• What term refers to the formal process for requesting, reviewing, approving, implementing, and documenting changes to a network to minimize risk?
• Which strategy best protects backup data both in transit and at rest?
• Which configuration is loaded when a device boots and stored in non-volatile memory?
• What term describes configuring multiple network cards in a server as a single logical interface to provide redundancy and potentially increase throughput?
• Which term describes an unsolicited alert sent from an SNMP agent to the NMS when a threshold is crossed or a fault occurs?
• LDAP/Radius/TACACS+ are used for what in network access control?
• Which tool is used to observe network traffic with a graphical interface and decode protocols in detail?
• My TraceRoute. A Linux tool that combines ping and traceroute into a single continuously updating display.
• What is the maximum acceptable amount of data loss measured in time?
• What is the common high-availability standard that allows about 5 minutes and 15 seconds of downtime per year?
• Which statement correctly matches NetFlow, IPFIX, and sFlow with their descriptions?
• Which tool displays radio frequency energy across wireless channels to identify interference sources?
• What is the primary role of a SIEM in network operations?
• Which backup method is most storage-efficient but may require the longest time to complete a restore?
• A spare component that is pre-installed and can automatically take over when the primary fails is called a
• Which SNMP version should be used for secure network monitoring?
• Which port is used for SNMP polling?
• Which diagram type is used to visualize the physical layout of devices in racks and the cabling between them, focusing on hardware placement?
• A disaster recovery facility that provides only space, power, and connectivity with recovery taking days to weeks is known as a
• Which syslog level corresponds to 'Critical error conditions that need urgent attention'?
• Which DR option provides the longest recovery time but is the least expensive?
• What is the actual data transfer rate achieved in practice, always equal to or less than the available bandwidth due to overhead and network conditions?
• Which backup strategy recommends maintaining three copies of data on two different media types with one copy stored offsite?
• Which factor is least typically considered in network capacity planning?
• Which Cisco FHRP uses a shared virtual IP and a virtual MAC address?
• Optical Time Domain Reflectometer. The fiber optic equivalent of a TDR. Locates breaks, splices, and connectors in fiber cables and measures signal loss.
• Which instrument is used to identify signal loss caused by dirty connectors in fiber optic systems?
• Which statement correctly describes how port security relates to ARP spoofing and MAC flooding?
• For fast recovery, which backup type is typically fastest to restore because it contains the entire dataset in one copy?
• What is the role of backup testing in regulatory compliance and business continuity?
• What is the role of MIBs in SNMP-based network monitoring?
• Explain the difference between backup verification and restore testing.
• Explain the concept of network segmentation and its security and performance benefits.
• Which protocol is Cisco's proprietary method for exporting flow data?
• Which expression best captures the relationship between MTBF, MTTR, and system availability?
• Which components are commonly included in an enterprise DDoS mitigation strategy?
• In network operations, what role does DNS primarily fulfill?
• Which command-line tool queries DNS servers to resolve hostnames to IP addresses and test DNS functionality?
• Which utility is commonly used to display the active network connections, listening ports, and routing table information on a host?
• Which protocol bundles multiple physical links between switches or servers into one logical link for increased bandwidth and redundancy?
• Which components are commonly involved in a layered DDoS mitigation strategy?
• Which network scanning tool is used to discover hosts, identify open ports, and detect running services across a network?
• What is the primary purpose of centralized log management in security operations?
• Which protocol is a sampling-based network traffic monitoring protocol that works across manufacturers?
• What term describes a system that tracks and manages changes to configuration files over time, enabling rollback to earlier versions?
• Which tool is used to verify copper cable continuity and correct pinout before installation?
• Which syslog level is described as 'The least severe'?
• Which statement best describes the difference between VM snapshots and VM backups?
• Which modern Linux command displays network interface configuration, including the IP addresses assigned to each interface?
• What is the primary purpose of change management in a network operations context?
• Which technologies are commonly used to provide redundancy across core routers, links, and paths?
• In SNMP usage, when would you prefer polling versus traps?
• What does the acronym FHRP stand for?
• Which elements are essential when designing a disaster recovery drill?
• Which objective defines the maximum acceptable length of time that a system can be offline after a failure before the disruption becomes unacceptable?
• Gateway Load Balancing Protocol is abbreviated as what?
• In a robust backup policy, the rule to keep three copies of data, stored on at least two media types with one offsite copy, is known as what?
• What is network baselining and what is its role in incident detection?
• Which protocol is a Cisco protocol that collects metadata about IP traffic flows?
• Which open-standard FHRP is used to share a virtual IP address among routers?