Unit 5: Configuring Routing and Advanced Switching Review

Front

How do packet filtering firewalls apply rules to network traffic, and why might this approach be insufficient for certain modern threats?

Back

They inspect packet headers based on set rules.

Front

Explain how a stateful firewall differs from a packet filtering firewall when managing return traffic in a connection.

Back

It tracks the state of active connections.

Front

What are the benefits of implementing VLANs to isolate specific devices on a shared network? Propose a situation where this might be critical.

Back

VLANs isolate traffic logically without physical changes.

Front

Design a VLAN configuration to separate traffic between administrative and guest networks, detailing any necessary access controls. Options: Assign static IP addresses to all devices on the network. Create separate VLAN IDs for administrative and guest traffic and configure inter-VLAN routing with restrictions. Configure all devices in a single broadcast domain. Enable trunking for all VLANs to share the same ports.

Back

Create separate VLAN IDs for administrative and guest traffic and configure inter-VLAN routing with restrictions.

Front

What transformation occurs in a PAT configuration for outbound traffic, and how does reverse mapping ensure return packets are correctly routed?

Back

PAT modifies source IPs and ports and restores them on return packets.

Front

In a network using PAT, why is it crucial to monitor port exhaustion, and what measures could be implemented to prevent it?

Back

Port exhaustion limits the number of simultaneous connections; using multiple public IPs can mitigate this.

Front

When troubleshooting incorrect gateway settings, how does analyzing a routing table provide clarity on connectivity issues?

Back

It shows the next-hop addresses and their reachability.

Front

Compare the implications of static versus default routes in managing traffic in a multi-router environment.

Back

Default routes simplify routing configuration, but static routes provide precise control.

Front

Why is VLAN 1 often considered a security risk in network configurations, and what best practices mitigate this risk?

Back

VLAN 1 is the default VLAN and is often targeted; disabling or reassigning it reduces risk.

Front

Discuss the potential impact of changing the default VLAN ID on network management and device compatibility.

Back

Changing the default VLAN ID can improve security but may require reconfiguration of management interfaces.