Interview Questions.

Question 1. What Type Of Firewall Can Be Used To Block A Web Security Threat?

Answer :

A web application firewall or a layer 7 firewall can be used for the reason.

Question 2. Which Fields In A Packet Does A Network Layer Firewall Look Into For Making Decisions?

Answer :

IP and transport layer headers for information related to source and vacation spot IP addresses, port numbers and many others.

ITIL Configuration Management Interview Questions
Question three. Which Feature On A Cisco Firewall Can Be Used For Protection Against Tcp Syn Flood Attacks?

Answer :

TCP intercept feature.

Question 4. Which Feature On A Firewall Can Be Used To Block A Specific Url Or A Website?

Answer :

URL Filtering.

ITIL Configuration Management Tutorial
Question 5. Which Is The Main Field In An Ip Header , Which Is Modified By A Nat Firewall?

Answer :

The supply IP cope with in the IP header.

Networking Interview Questions
Question 6. What Type Of Firewall Can Be Configured For Providing User Based Authentication To Users On The Lan Network.?

Answer :

Proxy firewall.

Question 7. How To Troubleshoot A High Cpu Utilization Problem In A Router?

Answer :

This symptom is the sign of ordinary capability in a router. First we have to understand the precise purpose for extended CPU usage, and we can use “show procedures cpu ,” “display interface stat” instructions to check the procedure utilizations. It will be because of high site visitors flow (congestion), complex ACL or VPN deployments, ARP/TCP issues etc.

Networking Tutorial Switching Interview Questions
Question 8. If A Router’s Wan Link Goes Down, What You Will Do In That Situation?

Answer :

First we want to verify the exact cause for failover; it is able to be because of bodily or protocol troubles. If it is a “protocol down” problem, then legitimate motives may be link authentication failure, encapsulation mismatch, clock charge no longer configured, incorrect get entry to manage, MTU or Duplex mismatch, and so forth.

Question nine. Is It Normal To Get Crc Errors On Mpls Wan Links?

Answer :

It will be ordinary if it's miles much less than 1% of general visitors on that interface with out a packet drop

And it is advocated to clear up link problems in case cyclic redundancy check (CRC) mistakes are extra than 1% of the full interface traffic. The maximum common purpose for receiving CRC mistakes is the duplex placing, as maximum of vendors set their interface to “car” mode.

CCNP Interview Questions
Question 10. If My Bgp Neighbor Is Stuck In Idle, Or Active State, What Should I Do?

Answer :

If BGP peer is in idle nation then it could be due to bodily connectivity failure or neighbor isn't always defined with well with respective AS. In join state, BGP tries to set up TCP session over port number 179 if it fails to set up TCP connection then it goes to Active kingdom wherein it retries to establish TCP connection. By using debug ip bgp and debug ip tcp transactions commands, we can discover the precise cause of TCP connection failure. Lack of “update-supply” or “ebgp-multihop” command also can be a purpose for neighbor active nation;

Question 11. What Does “%ospf-5-nbrstate: Ospf-1 [5330] Process 1, Nbr 10.Three.3.14 On Vlan44 From Full To Exstart, Badseqnum Ospf” Log Message Mean?

Answer :

This log message pops up when an OSPF DBD trade system makes use of a terrible collection wide variety (due to packet loss or packet exploitation) for the synchronization of the database with its buddies.

Network Monitoring Interview Questions
Question 12. What Is The Significance Of The Variable Ip-ospf-transmit-put off?

Answer :

If OSPF is configured on low bandwidth hyperlinks, IP-OSPF-Transmit-Delay is used to increase the time of the age field of a LSA replace. By default it's miles set to 1 second and, to make it powerful, it should be brought earlier than transmission over a hyperlink.

ITIL Configuration Management Interview Questions
Question thirteen. How To Perform Password Recovery In A Switch?

Answer :

Every transfer collection has its very own set of restoration strategies. Here you could describe the method of password healing for the switches on which you have proven your work experience. You can also refer following hyperlinks to get an idea of password healing on well-known Cisco switches.

Question 14. What Will Happen If One Of The Ports Goes Down Of An eight Port Etherchannel?

Answer :

The universal bandwidth of an EtherChannel interface depends on its lively member hyperlinks. An EtherChannel with eight energetic one hundred Mbps links need to imply a bandwidth of 800 Mbps and, if certainly one of its physical ports fails, the available bandwidth of port-channel interface may be evaluated as 700Mbps with out flapping the port-channel.