CyberRevision
Continue revision → ← Subjects
Complete networking bank

All 5,000 questions.

Search the curriculum, filter by level, check your saved status, or open any question in revision mode.

0 answered overall

Showing 3,251–3,300 of 5,000 matching questions

50 per page
3251
Level 4 · Advanced Switch Security Unanswered

For a cloud migration threat model, why is understanding "DHCP snooping" technically important?

View answer choices
  1. A switch security feature that blocks untrusted DHCP server messages and builds bindings.
  2. A routing protocol for lease exchange.
  3. A method for hiding DHCP traffic from clients.
  4. A DNS caching feature.
Practice →
3252
Level 4 · Advanced Switch Security Unanswered

For a cloud migration threat model, why is understanding "Dynamic ARP Inspection" technically important?

View answer choices
  1. A protocol that dynamically assigns MAC addresses.
  2. A method for encrypting ARP with TLS.
  3. A feature that validates ARP messages against trusted bindings.
  4. A way to inspect BGP AS paths.
Practice →
3253
Level 4 · Advanced Access Security Unanswered

For a cloud migration threat model, why is understanding "802.1X" technically important?

View answer choices
  1. Port-based network access control using a supplicant, authenticator, and authentication server.
  2. A route summarization protocol.
  3. A spanning-tree convergence timer.
  4. A VLAN trunk tagging method.
Practice →
3254
Level 4 · Advanced Access Security Unanswered

For a cloud migration threat model, why is understanding "RADIUS" technically important?

View answer choices
  1. A distance-vector routing protocol.
  2. A cable category for 10 Gb/s.
  3. A Layer 2 loop prevention protocol.
  4. A protocol providing centralized authentication, authorization, and accounting.
Practice →
3255
Level 4 · Advanced Access Security Unanswered

For a cloud migration threat model, why is understanding "TACACS+" technically important?

View answer choices
  1. A centralized AAA protocol often used for administrator access to network devices.
  2. A Wi-Fi modulation scheme.
  3. A DNS record for certificate authorities.
  4. An Ethernet flow-control frame.
Practice →
3256
Level 4 · Advanced QoS Unanswered

For a cloud migration threat model, why is understanding "QoS classification and marking" technically important?

View answer choices
  1. Increasing physical bandwidth automatically.
  2. Identifying traffic and applying labels that downstream devices can use for treatment.
  3. Encrypting all packets with the same key.
  4. Changing every destination IP address.
Practice →
3257
Level 4 · Advanced QoS Unanswered

For a cloud migration threat model, why is understanding "DSCP" technically important?

View answer choices
  1. A BGP neighbor identifier.
  2. A DNS signature algorithm.
  3. A six-bit IP header field used to mark packets for differentiated QoS treatment.
  4. A 48-bit Ethernet source address.
Practice →
3258
Level 4 · Advanced QoS Unanswered

For a cloud migration threat model, why is understanding "traffic policing" technically important?

View answer choices
  1. Increasing link capacity dynamically.
  2. Choosing a route by hop count.
  3. Buffering all excess traffic until later.
  4. Enforcing a rate by dropping or remarking traffic that exceeds a configured profile.
Practice →
3259
Level 4 · Advanced QoS Unanswered

For a cloud migration threat model, why is understanding "traffic shaping" technically important?

View answer choices
  1. Buffering excess traffic and sending it later to conform to a configured rate.
  2. Changing source addresses with NAT.
  3. Immediately dropping all traffic above the rate.
  4. Tagging an Ethernet VLAN.
Practice →
3260
Level 4 · Advanced QoS Unanswered

For a cloud migration threat model, why is understanding "low-latency queue" technically important?

View answer choices
  1. A queue that always waits until every other queue is empty.
  2. A DNS response cache.
  3. A priority queue intended for delay-sensitive traffic such as voice.
  4. A BGP route storage table.
Practice →
3261
Level 4 · Advanced Switch Security Unanswered

A security engineer documents "DHCP snooping" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A switch security feature that blocks untrusted DHCP server messages and builds bindings.
  2. A routing protocol for lease exchange.
  3. A DNS caching feature.
  4. A method for hiding DHCP traffic from clients.
Practice →
3262
Level 4 · Advanced Switch Security Unanswered

A security engineer documents "Dynamic ARP Inspection" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A way to inspect BGP AS paths.
  2. A method for encrypting ARP with TLS.
  3. A protocol that dynamically assigns MAC addresses.
  4. A feature that validates ARP messages against trusted bindings.
Practice →
3263
Level 4 · Advanced Access Security Unanswered

A security engineer documents "802.1X" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A spanning-tree convergence timer.
  2. A VLAN trunk tagging method.
  3. Port-based network access control using a supplicant, authenticator, and authentication server.
  4. A route summarization protocol.
Practice →
3264
Level 4 · Advanced Access Security Unanswered

A security engineer documents "RADIUS" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A Layer 2 loop prevention protocol.
  2. A protocol providing centralized authentication, authorization, and accounting.
  3. A distance-vector routing protocol.
  4. A cable category for 10 Gb/s.
Practice →
3265
Level 4 · Advanced Access Security Unanswered

A security engineer documents "TACACS+" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A centralized AAA protocol often used for administrator access to network devices.
  2. A Wi-Fi modulation scheme.
  3. An Ethernet flow-control frame.
  4. A DNS record for certificate authorities.
Practice →
3266
Level 4 · Advanced QoS Unanswered

A security engineer documents "QoS classification and marking" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. Encrypting all packets with the same key.
  2. Increasing physical bandwidth automatically.
  3. Changing every destination IP address.
  4. Identifying traffic and applying labels that downstream devices can use for treatment.
Practice →
3267
Level 4 · Advanced QoS Unanswered

A security engineer documents "DSCP" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A six-bit IP header field used to mark packets for differentiated QoS treatment.
  2. A BGP neighbor identifier.
  3. A 48-bit Ethernet source address.
  4. A DNS signature algorithm.
Practice →
3268
Level 4 · Advanced QoS Unanswered

A security engineer documents "traffic policing" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. Choosing a route by hop count.
  2. Enforcing a rate by dropping or remarking traffic that exceeds a configured profile.
  3. Buffering all excess traffic until later.
  4. Increasing link capacity dynamically.
Practice →
3269
Level 4 · Advanced QoS Unanswered

A security engineer documents "traffic shaping" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. Changing source addresses with NAT.
  2. Tagging an Ethernet VLAN.
  3. Buffering excess traffic and sending it later to conform to a configured rate.
  4. Immediately dropping all traffic above the rate.
Practice →
3270
Level 4 · Advanced QoS Unanswered

A security engineer documents "low-latency queue" during an industrial network security review. Which definition belongs in the report?

View answer choices
  1. A BGP route storage table.
  2. A queue that always waits until every other queue is empty.
  3. A priority queue intended for delay-sensitive traffic such as voice.
  4. A DNS response cache.
Practice →
3271
Level 4 · Advanced Switch Security Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "DHCP snooping". What is the accurate meaning?

View answer choices
  1. A routing protocol for lease exchange.
  2. A DNS caching feature.
  3. A method for hiding DHCP traffic from clients.
  4. A switch security feature that blocks untrusted DHCP server messages and builds bindings.
Practice →
3272
Level 4 · Advanced Switch Security Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "Dynamic ARP Inspection". What is the accurate meaning?

View answer choices
  1. A feature that validates ARP messages against trusted bindings.
  2. A method for encrypting ARP with TLS.
  3. A way to inspect BGP AS paths.
  4. A protocol that dynamically assigns MAC addresses.
Practice →
3273
Level 4 · Advanced Access Security Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "802.1X". What is the accurate meaning?

View answer choices
  1. A route summarization protocol.
  2. Port-based network access control using a supplicant, authenticator, and authentication server.
  3. A VLAN trunk tagging method.
  4. A spanning-tree convergence timer.
Practice →
3274
Level 4 · Advanced Access Security Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "RADIUS". What is the accurate meaning?

View answer choices
  1. A protocol providing centralized authentication, authorization, and accounting.
  2. A cable category for 10 Gb/s.
  3. A distance-vector routing protocol.
  4. A Layer 2 loop prevention protocol.
Practice →
3275
Level 4 · Advanced Access Security Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "TACACS+". What is the accurate meaning?

View answer choices
  1. A Wi-Fi modulation scheme.
  2. An Ethernet flow-control frame.
  3. A DNS record for certificate authorities.
  4. A centralized AAA protocol often used for administrator access to network devices.
Practice →
3276
Level 4 · Advanced QoS Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "QoS classification and marking". What is the accurate meaning?

View answer choices
  1. Changing every destination IP address.
  2. Increasing physical bandwidth automatically.
  3. Identifying traffic and applying labels that downstream devices can use for treatment.
  4. Encrypting all packets with the same key.
Practice →
3277
Level 4 · Advanced QoS Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "DSCP". What is the accurate meaning?

View answer choices
  1. A DNS signature algorithm.
  2. A six-bit IP header field used to mark packets for differentiated QoS treatment.
  3. A 48-bit Ethernet source address.
  4. A BGP neighbor identifier.
Practice →
3278
Level 4 · Advanced QoS Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "traffic policing". What is the accurate meaning?

View answer choices
  1. Enforcing a rate by dropping or remarking traffic that exceeds a configured profile.
  2. Buffering all excess traffic until later.
  3. Increasing link capacity dynamically.
  4. Choosing a route by hop count.
Practice →
3279
Level 4 · Advanced QoS Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "traffic shaping". What is the accurate meaning?

View answer choices
  1. Changing source addresses with NAT.
  2. Tagging an Ethernet VLAN.
  3. Immediately dropping all traffic above the rate.
  4. Buffering excess traffic and sending it later to conform to a configured rate.
Practice →
3280
Level 4 · Advanced QoS Unanswered

While mapping attack paths in a managed-service-provider audit, the team discusses "low-latency queue". What is the accurate meaning?

View answer choices
  1. A priority queue intended for delay-sensitive traffic such as voice.
  2. A DNS response cache.
  3. A BGP route storage table.
  4. A queue that always waits until every other queue is empty.
Practice →
3281
Level 4 · Advanced Switch Security Unanswered

An analyst validating a government zero-trust rollout sees "DHCP snooping". Which technical explanation should be used?

View answer choices
  1. A method for hiding DHCP traffic from clients.
  2. A switch security feature that blocks untrusted DHCP server messages and builds bindings.
  3. A DNS caching feature.
  4. A routing protocol for lease exchange.
Practice →
3282
Level 4 · Advanced Switch Security Unanswered

An analyst validating a government zero-trust rollout sees "Dynamic ARP Inspection". Which technical explanation should be used?

View answer choices
  1. A feature that validates ARP messages against trusted bindings.
  2. A way to inspect BGP AS paths.
  3. A protocol that dynamically assigns MAC addresses.
  4. A method for encrypting ARP with TLS.
Practice →
3283
Level 4 · Advanced Access Security Unanswered

An analyst validating a government zero-trust rollout sees "802.1X". Which technical explanation should be used?

View answer choices
  1. A VLAN trunk tagging method.
  2. A route summarization protocol.
  3. A spanning-tree convergence timer.
  4. Port-based network access control using a supplicant, authenticator, and authentication server.
Practice →
3284
Level 4 · Advanced Access Security Unanswered

An analyst validating a government zero-trust rollout sees "RADIUS". Which technical explanation should be used?

View answer choices
  1. A cable category for 10 Gb/s.
  2. A Layer 2 loop prevention protocol.
  3. A protocol providing centralized authentication, authorization, and accounting.
  4. A distance-vector routing protocol.
Practice →
3285
Level 4 · Advanced Access Security Unanswered

An analyst validating a government zero-trust rollout sees "TACACS+". Which technical explanation should be used?

View answer choices
  1. A DNS record for certificate authorities.
  2. A centralized AAA protocol often used for administrator access to network devices.
  3. An Ethernet flow-control frame.
  4. A Wi-Fi modulation scheme.
Practice →
3286
Level 4 · Advanced QoS Unanswered

An analyst validating a government zero-trust rollout sees "QoS classification and marking". Which technical explanation should be used?

View answer choices
  1. Identifying traffic and applying labels that downstream devices can use for treatment.
  2. Encrypting all packets with the same key.
  3. Changing every destination IP address.
  4. Increasing physical bandwidth automatically.
Practice →
3287
Level 4 · Advanced QoS Unanswered

An analyst validating a government zero-trust rollout sees "DSCP". Which technical explanation should be used?

View answer choices
  1. A 48-bit Ethernet source address.
  2. A BGP neighbor identifier.
  3. A DNS signature algorithm.
  4. A six-bit IP header field used to mark packets for differentiated QoS treatment.
Practice →
3288
Level 4 · Advanced QoS Unanswered

An analyst validating a government zero-trust rollout sees "traffic policing". Which technical explanation should be used?

View answer choices
  1. Increasing link capacity dynamically.
  2. Choosing a route by hop count.
  3. Enforcing a rate by dropping or remarking traffic that exceeds a configured profile.
  4. Buffering all excess traffic until later.
Practice →
3289
Level 4 · Advanced QoS Unanswered

An analyst validating a government zero-trust rollout sees "traffic shaping". Which technical explanation should be used?

View answer choices
  1. Immediately dropping all traffic above the rate.
  2. Buffering excess traffic and sending it later to conform to a configured rate.
  3. Tagging an Ethernet VLAN.
  4. Changing source addresses with NAT.
Practice →
3290
Level 4 · Advanced QoS Unanswered

An analyst validating a government zero-trust rollout sees "low-latency queue". Which technical explanation should be used?

View answer choices
  1. A queue that always waits until every other queue is empty.
  2. A DNS response cache.
  3. A BGP route storage table.
  4. A priority queue intended for delay-sensitive traffic such as voice.
Practice →
3291
Level 4 · Advanced Switch Security Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "DHCP snooping" is correct?

View answer choices
  1. A routing protocol for lease exchange.
  2. A method for hiding DHCP traffic from clients.
  3. A switch security feature that blocks untrusted DHCP server messages and builds bindings.
  4. A DNS caching feature.
Practice →
3292
Level 4 · Advanced Switch Security Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "Dynamic ARP Inspection" is correct?

View answer choices
  1. A protocol that dynamically assigns MAC addresses.
  2. A method for encrypting ARP with TLS.
  3. A feature that validates ARP messages against trusted bindings.
  4. A way to inspect BGP AS paths.
Practice →
3293
Level 4 · Advanced Access Security Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "802.1X" is correct?

View answer choices
  1. A spanning-tree convergence timer.
  2. A route summarization protocol.
  3. Port-based network access control using a supplicant, authenticator, and authentication server.
  4. A VLAN trunk tagging method.
Practice →
3294
Level 4 · Advanced Access Security Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "RADIUS" is correct?

View answer choices
  1. A distance-vector routing protocol.
  2. A cable category for 10 Gb/s.
  3. A Layer 2 loop prevention protocol.
  4. A protocol providing centralized authentication, authorization, and accounting.
Practice →
3295
Level 4 · Advanced Access Security Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "TACACS+" is correct?

View answer choices
  1. A centralized AAA protocol often used for administrator access to network devices.
  2. A Wi-Fi modulation scheme.
  3. A DNS record for certificate authorities.
  4. An Ethernet flow-control frame.
Practice →
3296
Level 4 · Advanced QoS Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "QoS classification and marking" is correct?

View answer choices
  1. Increasing physical bandwidth automatically.
  2. Identifying traffic and applying labels that downstream devices can use for treatment.
  3. Encrypting all packets with the same key.
  4. Changing every destination IP address.
Practice →
3297
Level 4 · Advanced QoS Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "DSCP" is correct?

View answer choices
  1. A six-bit IP header field used to mark packets for differentiated QoS treatment.
  2. A BGP neighbor identifier.
  3. A DNS signature algorithm.
  4. A 48-bit Ethernet source address.
Practice →
3298
Level 4 · Advanced QoS Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "traffic policing" is correct?

View answer choices
  1. Increasing link capacity dynamically.
  2. Choosing a route by hop count.
  3. Buffering all excess traffic until later.
  4. Enforcing a rate by dropping or remarking traffic that exceeds a configured profile.
Practice →
3299
Level 4 · Advanced QoS Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "traffic shaping" is correct?

View answer choices
  1. Buffering excess traffic and sending it later to conform to a configured rate.
  2. Changing source addresses with NAT.
  3. Immediately dropping all traffic above the rate.
  4. Tagging an Ethernet VLAN.
Practice →
3300
Level 4 · Advanced QoS Unanswered

During lessons learned from a multinational enterprise breach simulation, which statement about "low-latency queue" is correct?

View answer choices
  1. A DNS response cache.
  2. A priority queue intended for delay-sensitive traffic such as voice.
  3. A queue that always waits until every other queue is empty.
  4. A BGP route storage table.
Practice →