3. Network Operations Flashcards
1
Q
This refers to visual maps of network cabling, ports, and physical layout.
A
Physical Diagram
2
Q
This diagram shows virtual/logical connections like VLANs, IP routing, and firewall zones.
A
Logical Diagram
3
Q
This diagram shows the physical placement and order of equipment in a rack.
A
Rack Diagram
4
Q
This type of diagram details the pathways and labels for all networking cables.
A
Cable Map / Cable Diagram
5
Q
This shows how physical devices are connected (e.g., cables, interfaces).
A
Layer 1 Network Diagram
6
Q
This type of diagram includes MAC addresses, switches, and VLAN information.
A
Layer 2 Network Diagram
7
Q
This diagram shows IP routing paths, subnets, and routers.
A
Layer 3 Network Diagram
8
Q
This is a database or list of all hardware, software, and related licenses used by an organization.
A
Asset Inventory
9
Q
This tool helps manage and track IP addresses and subnet allocations.
A
IP Address Management (IPAM)
10
Q
This is a formal agreement defining performance metrics and support expectations between provider and client.
A
Service-Level Agreement (SLA)
11
Q
This visual tool shows wireless signal strength and coverage areas.
A
Wireless Survey / Heat Map
12
Q
This marks the point when a product is no longer sold or updated with new features.
A
End-of-Life (EOL)
13
Q
This marks when a vendor no longer provides patches, updates, or support for a product.
A
End-of-Support (EOS)
14
Q
This includes managing and updating OS versions, patches, and firmware.
A
Software Management
15
Q
This is the formal process of removing outdated equipment or software from production.
A
Decommissioning
16
Q
This is a structured workflow for submitting, evaluating, and approving network changes.
A
Change Management
17
Q
This process ensures accurate, secure, and consistent network configurations are tracked and recoverable.
A
Configuration Management
18
Q
This is the current configuration of a device actively in use.
A
Production Configuration
19
Q
This is a stored copy of a device’s configuration used for recovery or rollback.
A
Backup Configuration
20
Q
This is a validated and approved standard config used to compare and deploy future builds.
A
Baseline / Golden Configuration
21
Q
Used by network teams, this diagram helps locate devices, ports, and cabling for installation and troubleshooting.
A
Physical Diagram
22
Q
Useful in planning logical segmentation, VLANs, and IP flows, this diagram doesn’t show physical hardware.
A
Logical Diagram
23
Q
Often used by data center technicians, this diagram ensures equipment is installed in the correct position and order.
A
Rack Diagram
24
Q
Critical for cabling audits, this diagram shows cable paths, endpoints, colors, and labeling conventions.
A
Cable Map / Cable Diagram
25
This layer focuses on physical connections like cables, jacks, and patch panels.
Layer 1 Network Diagram
26
This diagram is key for managing MAC addresses, switch ports, and VLAN IDs.
Layer 2 Network Diagram
27
Used by network engineers, this diagram displays routing protocols, IP subnets, and next-hop relationships.
Layer 3 Network Diagram
28
Helps with tracking lifecycle stages, software licenses, and maintenance contracts for IT assets.
Asset Inventory
29
Often used with DHCP and DNS, this system prevents IP conflicts and supports efficient subnet planning.
IP Address Management (IPAM)
30
Defines uptime, response time, and service quality expectations between IT providers and customers.
Service-Level Agreement (SLA)
31
This visual layout is used during wireless deployments or troubleshooting to ensure strong signal coverage.
Wireless Survey / Heat Map
32
No longer manufactured or sold, this status helps teams plan replacement strategies.
End-of-Life (EOL)
33
Once this is reached, vendors won’t offer patches or support—posing a security and reliability risk.
End-of-Support (EOS)
34
Includes OS updates, firmware upgrades, and patch management to maintain secure and stable systems.
Software Management
35
When retiring equipment, this process ensures secure data wiping and proper documentation.
Decommissioning
36
Reduces risk by requiring proposed network changes to go through a review, testing, and approval process.
Change Management
37
Involves storing and comparing config files to prevent misconfigurations and ensure recovery readiness.
Configuration Management
38
This is the active config running on a device—can differ from stored or baseline versions.
Production Configuration
39
Stored on flash, TFTP, or other locations, this config is used to recover or revert devices.
Backup Configuration
40
This validated config serves as the template or 'known good' for building or auditing other systems.
Baseline / Golden Configuration
41
Which type of diagram shows switch connections, MAC addresses, and VLAN assignments?
A. Physical diagram
B. Layer 2 diagram
C. Layer 1 diagram
D. Rack diagram
B. Layer 2 diagram
42
Which system helps prevent duplicate IP addresses and tracks DHCP usage and subnet allocation?
A. DNS
B. RADIUS
C. IPAM
D. SLA
C. IPAM
43
Which document defines guaranteed service levels such as uptime and response time between two parties?
A. Asset inventory
B. IPAM report
C. Service-level agreement
D. Change log
C. Service-level agreement
44
When a network device reaches end-of-support, what is the primary concern?
A. No new hardware features
B. No more firmware upgrades
C. Increased bandwidth
D. Security and support vulnerabilities
D. Security and support vulnerabilities
45
Which configuration state represents a validated, approved, and consistent template used to compare other devices?
A. Production configuration
B. Backup configuration
C. Golden configuration
D. Startup configuration
C. Golden configuration
46
What is the purpose of a wireless survey or heat map?
A. Manage bandwidth allocation
B. Display DNS and DHCP usage
C. Identify optimal access point placement and signal coverage
D. Configure MAC filtering
C. Identify optimal access point placement and signal coverage
47
Which process ensures that all changes to network configurations are reviewed and documented before implementation?
A. Configuration management
B. Change management
C. Decommissioning
D. Inventory control
B. Change Management
48
Where would a list of switch models, software licenses, and warranty info typically be stored?
A. Rack diagram
B. Logical diagram
C. Asset inventory
D. Change control log
C. Asset inventory
49
Which of the following is the running config currently applied to a network device?
A. Backup configuration
B. Baseline configuration
C. Startup configuration
D. Production configuration
D. Production configuration
50
What is the purpose of a patch panel in relation to documentation?
A. To organize IPAM
B. To simplify software upgrades
C. To document cable management and port mapping
D. To control voltage usage
C. To document cable management and port mapping
51
This protocol is used to monitor and manage network devices by exchanging management information.
SNMP (Simple Network Management Protocol)
52
This SNMP alert type is sent by a device to notify a manager of a significant event.
Trap
53
This SNMP database defines the structure of management data on a device.
Management Information Base (MIB)
54
This SNMP version supports community strings but lacks encryption.
SNMP v2c
55
This SNMP version adds encryption and authentication for secure monitoring.
SNMP v3
56
These are shared passwords used in SNMP v1/v2c to control access.
Community Strings
57
Used in SNMP v3, this confirms identity and optionally encrypts data.
Authentication
58
This data provides summaries of network traffic patterns (e.g., NetFlow, sFlow).
Flow Data
59
This captures detailed traffic data at the packet level for deep analysis.
Packet Capture
60
These are normal performance indicators used to compare against anomalies.
Baseline Metrics
61
These are notifications sent when performance deviates from the established baseline.
Anomaly Alerting / Notification
62
This process collects and stores logs from multiple devices in one place.
Log Aggregation
63
This tool collects logs using a standardized protocol, often UDP port 514.
Syslog Collector
64
This platform analyzes log and event data for security and performance issues.
SIEM (Security Information and Event Management)
65
This allows monitoring tools to interact with other systems and share data.
API Integration
66
This feature duplicates network traffic to a mirror port for monitoring or capture.
Port Mirroring
67
This process scans the network to find connected devices and systems.
Network Discovery
68
This type of discovery is manually initiated as needed.
Ad Hoc Discovery
69
This type of discovery runs at set intervals for ongoing device tracking.
Scheduled Discovery
70
This analyzes bandwidth usage and network flow patterns.
Traffic Analysis
71
This monitors device and link performance, including latency and throughput.
Performance Monitoring
72
This tracks whether devices or services are up or down.
Availability Monitoring
73
This ensures device configurations are tracked and compared for compliance or changes.
Configuration Monitoring
74
Commonly used with agents or agentless tools, this protocol allows for centralized monitoring of devices across a network.
SNMP
75
These are one-way messages that allow network devices to automatically send alerts to a management station.
SNMP Traps
76
Without this SNMP component, a management station wouldn’t know what variables or metrics it can access.
Management Information Base (MIB)
77
This version of SNMP is widely used due to simplicity, but it lacks encryption and should be secured carefully.
SNMP v2c
78
Preferred in secure environments, this version adds encryption and secure authentication features.
SNMP v3
79
These are used in SNMP v1/v2c to control read/write access to devices. Poorly managed strings can be a security risk.
Community Strings
80
This ensures only trusted sources can interact with SNMP data—vital for maintaining network integrity.
SNMP Authentication
81
Instead of showing raw packets, this summarizes communication sessions and bandwidth usage, reducing overhead.
Flow Data
82
This allows for deep troubleshooting by viewing the actual contents of network traffic, but it can raise privacy and security concerns.
Packet Capture
83
By understanding what 'normal' looks like, these values help identify performance degradation or intrusions.
Baseline Metrics
84
Sent automatically by monitoring systems, these flag when traffic or performance deviates from normal.
Anomaly Alerting / Notification
85
Consolidating log data into one place reduces overhead and simplifies analysis.
Log Aggregation
86
This type of server listens for messages from network devices, often using UDP port 514.
Syslog Collector
87
This centralized platform correlates security, performance, and log data to detect threats and monitor operations.
SIEM
88
Lets monitoring platforms pull/push data from other systems, enabling automation and integration.
API Integration
89
Used on switches, this sends traffic from one port to another for inspection without affecting the flow.
Port Mirroring
90
Used to discover unknown devices or audit existing networks, this process reveals all connected endpoints.
Network Discovery
91
This type of discovery is manually triggered to provide a quick snapshot of the current network.
Ad Hoc Discovery
92
This type of discovery helps maintain up-to-date topology maps over time.
Scheduled Discovery
93
Used to find bandwidth hogs or identify unusual flows, this type of analysis is key in congestion troubleshooting.
Traffic Analysis
94
Tracks metrics like CPU usage, interface errors, and latency to ensure smooth operation of network devices.
Performance Monitoring
95
Alerts when critical devices like firewalls or switches become unreachable.
Availability Monitoring
96
Compares current configs to approved versions and alerts when changes occur.
Configuration Monitoring
97
Which protocol is commonly used to collect performance metrics from switches and routers?
A. FTP
B. SNMP
C. HTTPS
D. DNS
B. SNMP
98
Which SNMP version adds support for authentication and encryption?
A. SNMPv1
B. SNMPv2c
C. SNMPv3
D. SNMPv4
C. SNMPv3
99
What are SNMP traps used for?
A. Encrypting MIBs
B. Logging CLI activity
C. Alerting management systems of device events
D. Pinging neighboring devices
C. Alerting management systems of device events
100
Which SNMP component defines which metrics and data points are available on a managed device?
A. Trap
B. Community string
C. MIB
D. Flow record
C. MIB
101
Which method provides summarized statistics on bandwidth, protocols, and communication between hosts?
A. Packet capture
B. Flow data (e.g., NetFlow)
C. Syslog
D. SNMP
B. Flow data (e.g., NetFlow)
102
Which monitoring method is used to analyze the contents of individual network frames and packets?
A. Flow data
B. Packet capture
C. SNMP
D. Baseline metrics
B. Packet Capture
103
What does a baseline metric provide in network monitoring?
A. Firewall rules
B. IP address allocations
C. A comparison point for detecting anomalies
D. Network maps
C. A comparison point for detecting anomalies
104
Which tool collects logs from multiple devices and centralizes them for correlation and security analysis?
A. Port mirror
B. Syslog
C. SIEM
D. MIB
C. SIEM
105
Which feature on a switch is used to send a copy of traffic to a monitoring port?
A. Flow export
B. Port mirroring
C. SNMP
D. NAT
B. Port mirroring
106
Which discovery method would you use if you wanted to manually scan a network right now?
A. Flow-based
B. Ad hoc
C. Scheduled
D. Passive
B. Ad hoc
107
This protocol assigns IP addresses dynamically to clients on a network.
DHCP (Dynamic Host Configuration Protocol)
108
This DHCP feature ensures a specific MAC address always gets the same IP.
Reservation
109
This defines the range of IP addresses a DHCP server can assign.
Scope
110
This sets the duration a device can use an assigned IP address.
Lease Time
111
These are additional DHCP settings like DNS server or default gateway.
DHCP Options
112
This allows DHCP traffic to reach servers on different subnets.
DHCP Relay / IP Helper
113
This prevents specific IPs within a scope from being assigned to clients.
Exclusion
114
This IPv6 feature allows devices to configure their own addresses without a DHCP server.
SLAAC
115
This system translates domain names into IP addresses.
DNS (Domain Name System)
116
This adds cryptographic validation to DNS responses to prevent spoofing.
DNSSEC
117
This encrypts DNS queries using HTTPS.
DoH (DNS over HTTPS)
118
This encrypts DNS queries using TLS.
DoT (DNS over TLS)
119
This DNS record maps a domain name to an IPv4 address.
A Record
120
This DNS record maps a domain name to an IPv6 address.
AAAA Record
121
This record creates an alias to another domain name.
CNAME Record
122
This record defines which mail server handles email for a domain.
MX Record
123
This record holds arbitrary text—often used for SPF and DKIM.
TXT Record
124
This record identifies the authoritative DNS server for a domain.
NS Record
125
This record maps an IP address to a domain name (used in reverse DNS).
PTR Record
126
This DNS zone resolves domain names to IP addresses.
Forward Zone
127
This DNS zone resolves IP addresses to domain names.
Reverse Zone
128
This response comes from a server that holds original data.
Authoritative Response
129
This response is based on cached or relayed data, not from the source.
Non-Authoritative Response
130
This DNS server holds the original zone file and can be modified.
Primary DNS Server
131
This DNS server gets a read-only copy of the zone from a primary server.
Secondary DNS Server
132
This type of query has the DNS server do all lookups on behalf of the client.
Recursive Query
133
This local file maps hostnames to IPs and is checked before DNS.
Hosts File
134
This protocol synchronizes clocks on devices over the internet.
NTP (Network Time Protocol)
135
This is a higher-precision clock synchronization protocol used in LANs.
PTP (Precision Time Protocol)
136
This secures NTP messages using encryption and authentication.
NTS (Network Time Security)
137
This metric defines the maximum amount of acceptable data loss in the event of a disaster, shaping backup frequency.
Recovery Point Objective (RPO)
138
This metric sets the target duration to fully restore services after a disruption—it drives decisions around redundancy and staffing.
Recovery Time Objective (RTO)
139
Used in SLAs and maintenance planning, this tracks how long it typically takes to fix failed systems or components.
Mean Time to Repair (MTTR)
140
A reliability metric that predicts the expected time interval between system failures, often used in hardware selection.
Mean Time Between Failures (MTBF)
141
This site is the least expensive option and typically involves leasing space, but setup and restore can take days or weeks.
Cold Site
142
Often used by companies with moderate DR needs, this site includes powered-on hardware but requires data syncing before going live.
Warm Site
143
This site is kept fully in sync with production, allowing near-zero downtime but at the highest cost.
Hot Site
144
In this setup, both systems are live and share workloads; if one fails, the other continues processing without interruption.
Active-Active
145
This setup has a standby system that activates only when the primary fails, saving resources but introducing a brief delay.
Active-Passive
146
This low-cost test format brings stakeholders together to walk through the DR plan using hypothetical scenarios.
Tabletop Exercise
147
This real-world simulation involves executing recovery procedures to ensure systems, backups, and personnel can meet DR objectives.
Validation Test
148
Which metric defines how much data loss is acceptable in a disaster recovery scenario?
A. RTO
B. MTTR
C. RPO
D. MTBF
C. RPO
149
Which metric describes the time allowed to fully restore systems after an outage?
A. RPO
B. RTO
C. MTBF
D. Uptime SLA
B. RTO
150
What does MTTR represent in disaster recovery planning?
A. Time between full system upgrades
B. Time required to repair and restore failed services
C. Downtime that users can tolerate
D. Amount of recoverable data
B. Time required to repair and restore failed services
151
Which metric predicts how often a system or component is likely to fail?
A. MTTR
B. RPO
C. MTBF
D. SLA
C. MTBF
152
Which type of disaster recovery site contains no hardware or data and may take the longest to become operational?
A. Hot site
B. Cold site
C. Warm site
D. Backup site
B. Cold site
153
Which type of site includes powered hardware but typically requires data synchronization before use?
A. Cold site
B. Archive site
C. Warm site
D. Live site
C. Warm site
154
Which site type is fully functional, continuously synchronized, and ready for immediate use?
A. Warm site
B. Cold site
C. Off-site backup
D. Hot site
D. Hot site
155
In which high-availability setup are all systems active and sharing the workload simultaneously?
A. Active-passive
B. Active-active
C. Cold-hot
D. Primary-secondary
B. Active-active
156
Which test type involves simulating a disaster and walking through the recovery plan without touching systems?
A. Validation test
B. Failover test
C. Tabletop exercise
D. Live fire drill
C. Tabletop exercise
157
Which type of DR test verifies that the systems can be fully restored and function as expected?
A. Simulation
B. Tabletop
C. Validation test
D. Walkthrough
C. Validation test
158
This VPN type connects two separate sites, such as branch offices, using an encrypted tunnel.
Site-to-Site VPN
159
This VPN type allows individual remote users to connect to a central network.
Client-to-Site VPN
160
This client-to-site VPN method uses a browser-based portal—no software install required.
Clientless VPN
161
This VPN approach routes only some traffic through the tunnel, preserving local internet access.
Split Tunnel
162
This VPN approach routes *all* traffic through the VPN for maximum security.
Full Tunnel
163
This method of access uses a secure, encrypted command-line interface.
SSH (Secure Shell)
164
This access method involves interacting through a visual interface like a dashboard or web portal.
Graphical User Interface (GUI)
165
This method allows programmatic control and automation of network devices.
API (Application Programming Interface)
166
This is the physical port used to configure devices directly, often via serial cable.
Console
167
This hardened system provides an isolated, secure environment to access and manage network devices.
Jump Box / Jump Host
168
This management type uses the same production network for administrative access.
In-Band Management
169
This uses a dedicated, isolated path for managing devices—even if the production network is down.
Out-of-Band Management
170
Used to link entire office networks together securely over the internet, this type of VPN connects routers or firewalls.
Site-to-Site VPN
171
This type of VPN allows individual users—like remote workers—to securely connect to a corporate network.
Client-to-Site VPN
172
Often used from public devices, this VPN requires no install and runs in a web browser with limited functionality.
Clientless VPN
173
Allows only specific traffic (like corporate resources) to pass through the tunnel, while internet-bound traffic uses the local network.
Split Tunnel
174
Sends *all* traffic—including internet-bound—through the VPN tunnel, often used in high-security environments.
Full Tunnel
175
This secure protocol provides encrypted command-line access, replacing insecure protocols like Telnet.
SSH (Secure Shell)
176
Commonly used for firewalls, wireless controllers, and cloud platforms, this method lets users click through visual options.
Graphical User Interface (GUI)
177
Used in automation and integration, this method allows software to send commands and queries to devices or platforms.
API
178
This is a direct connection to a device using a serial cable, typically for initial config or when network access fails.
Console
179
Placed between the admin and sensitive devices, this hardened machine allows secure and controlled access into protected network zones.
Jump Box / Jump Host
180
Uses the main production network path for administrative access—easy but vulnerable if that network goes down.
In-Band Management
181
Uses a dedicated network path (e.g., separate NIC or management switch) that remains available even during production outages.
Out-of-Band Management
182
Which type of VPN is used to connect two networks, such as corporate offices?
A. Client-to-site VPN
B. Site-to-site VPN
C. Full tunnel VPN
D. Clientless VPN
B. Site-to-site VPN
183
Which VPN method allows remote users to connect without installing any client software?
A. Full tunnel VPN
B. Client-to-site VPN
C. Split tunnel VPN
D. Clientless VPN
D. Clientless VPN
184
In which VPN setup is only specific traffic (e.g., corporate resources) sent through the VPN tunnel?
A. Full tunnel
B. Split tunnel
C. Clientless
D. Site-to-site
B. Split tunnel
185
What access method provides secure, command-line access over an encrypted connection?
A. Telnet
B. GUI
C. SSH
D. SNMP
C. SSH
186
Which of the following allows automated tools and scripts to interact with network services and devices?
A. SSH
B. API
C. Console
D. GUI
B. API
187
What is a jump box used for in a secure network environment?
A. Automatically patch devices
B. Provide internet access to IoT devices
C. Act as an intermediary for managing protected systems
D. Replace firewalls
C. Act as an intermediary for managing protected systems
188
What’s the key benefit of out-of-band management compared to in-band?
A. It uses less bandwidth
B. It integrates better with DNS
C. It works even when the primary network is down
D. It requires no authentication
C. It works even when the primary network is down
189
Which method uses a physical or virtual port to access a device before the network is configured?
A. API
B. GUI
C. Console
D. SSH
C. Console
190
Which method of device management is vulnerable if the production network fails?
A. API-based
B. Out-of-band
C. GUI
D. In-band
D. In-band
191
Which type of VPN forces all traffic, including web browsing, through the tunnel?
A. Split tunnel
B. Site-to-site
C. Full tunnel
D. Clientless
C. Full tunnel
