CCNA Basics of IT Infrastructure and IT Project Management Questions

The sponsor requires a standard authorization protocol with protected tokens for a RESTful API. OAuth 2.0 with bearer tokens over HTTPS provides scoped, revocable access tokens that are encrypted in transit. Basic authentication, API keys in client code, and SAML over HTTP are either insecure or not designed for API authorization, so they fail to meet the security requirements.

Voice quality over VoIP is highly sensitive to latency, jitter, and packet loss. Switch QoS settings (e.g., 802.1p/DSCP marking, strict priority queuing) ensure that voice traffic is prioritized over data traffic, preventing delays and dropped packets that degrade call quality. Without proper QoS, even high-bandwidth links will suffer from poor Mean Opinion Scores (MOS).

Proactive risk management involves identifying risks early, documenting them in a risk register, assigning owners, and planning responses. For the HCI replacement, this allows the team to monitor triggers and act before schedule impacts occur. Waiting for risks to happen, relying only on contingency budget, or promising to handle issues later are reactive approaches that do not prevent or minimize schedule disruption.

RAID 5 uses parity-based striping, which incurs a write penalty (each write requires four I/O operations: read old data, read old parity, write new data, write new parity). For a write-intensive workload like an ERP database, this overhead causes high I/O wait times even when disks are healthy and capacity is sufficient. The correct answer is C because the misconfigured RAID level directly explains the observed symptom.

The correct matches are PMP with Project Management Professional, WBS with Work Breakdown Structure, EVM with Earned Value Management, and ROI with Return on Investment. Common confusions include mixing up ROI and PMP definitions, or confusing WBS with EVM.

The cloud-based collaboration platform with version control and real-time editing is the best solution because it provides centralized, always-accessible document repositories and supports simultaneous editing and communication. This meets the needs of a distributed team across multiple time zones. Other options lack real-time collaboration or create version control issues, making them unsuitable for this ERP implementation project.

The correct strategies are mitigation through redundant hardware and network paths, and mitigation through a robust backup and disaster recovery plan. Both reduce the probability or impact of technical risks like hardware failures, network outages, and data loss. Transfer and acceptance do not proactively address these risks, and avoidance would cancel the project, which is not feasible for a critical migration.

Redundant network components with failover mechanisms provide continuous availability by allowing traffic to switch to backup paths or devices during upgrades or failures. This meets the sponsor's requirement to minimize downtime. Other options either reduce the impact of downtime or communicate it, but do not eliminate it, and thus do not satisfy the need for high availability during the infrastructure upgrade.

An active-active data center arrangement is most appropriate for high availability and disaster recovery because it distributes application traffic across multiple geographically dispersed data centers, all of which are actively serving requests. If one site fails, traffic is seamlessly redirected to the remaining active sites, ensuring near-zero downtime and no data loss. This configuration supports automatic failover and load balancing, which are critical for meeting stringent recovery time objectives (RTO) and recovery point objectives (RPO).

The risk is specifically a single point of failure in the fiber path between data centers. Installing a second, diverse fiber path eliminates this single point of failure, ensuring synchronous replication can continue even if one cable is cut. This directly addresses the sponsor's concern about go-live delays due to cable outages, without changing the replication mode or adding unnecessary hardware.

Network latency is a key consideration for SAN performance because SANs rely on low-latency, high-speed block-level storage protocols such as Fibre Channel (FC) or iSCSI. High latency can cause significant delays in I/O operations, directly impacting throughput and application responsiveness, especially in environments with synchronous replication or high transaction rates.

QoS and low latency/jitter are fundamental for VoIP because voice traffic is real-time and sensitive to delays and packet loss. QoS prioritizes voice packets, while low latency and jitter ensure clear audio. Other options, such as redundancy, high bandwidth for file transfers, and encryption at rest, do not directly address the real-time transport requirements of VoIP and are therefore not critical network considerations for this deployment.

Defining bandwidth and latency requirements ensures monitoring traffic is properly sized and prioritized to avoid impacting production. Using a scalable architecture with centralized management enables the solution to grow as new data centers are added while maintaining consistent policies. Disabling monitoring, using flat topologies, or deploying disparate toolsets would create blind spots, complexity, or performance risks rather than meeting the stated requirements.

A network outage is a critical incident requiring immediate escalation. A verbal briefing via phone call (B) is the most appropriate method because it provides real-time, synchronous communication, allowing senior management to ask clarifying questions and make urgent decisions. This aligns with ITIL best practices for major incident management, where speed and clarity are paramount.

The project charter is the formal document that authorizes the project and empowers the project manager to apply organizational resources. In an ERP infrastructure refresh, the sponsor's signature on the charter marks the official start and provides the authority needed to commit budget, staff, and vendor agreements. Other planning artifacts, such as the project management plan or business case, support execution or justify investment but do not grant this formal authority.

The root cause is that the MX records in DNS still point to the old on-premises mail server, so sending mail servers cannot route messages to the new cloud service. Updating the MX records to point to the new service and waiting for DNS propagation (typically 1–48 hours depending on TTL) is the correct first step because it restores proper email routing at the DNS level. No server-side errors exist, so the issue is purely a DNS configuration problem.

Setting up a VPN connection with two-factor authentication is the best practice because it creates an encrypted tunnel over the internet, ensuring data confidentiality and integrity, while two-factor authentication adds an extra layer of security beyond just a password. This approach allows the vendor to access only the internal network resources necessary for installation and configuration, without exposing the entire network to unauthenticated or unencrypted access.

SaaS is the correct choice because it provides a fully managed application without upfront infrastructure costs. The vendor handles all maintenance, updates, and security, allowing the sales team to focus on using the CRM. This model minimizes capital expenditures and operational overhead, aligning with the sponsor's financial concerns and the project's goal of rapid deployment.

The policy statement with an unrestricted principal allows any user (authenticated or unauthenticated) to access the cloud storage. This is the most significant security risk as it effectively makes the storage publicly accessible, allowing anyone to read, write, or delete objects without restriction. Even if other settings like encryption are missing, a wide-open principal is a direct and immediate exposure.

Redundant network paths ensure that if one link or switch fails, traffic can immediately fail over to an alternate path, providing high availability. They also reduce latency by enabling load balancing across multiple links, which is critical for real-time applications. This directly addresses the requirement for both high availability and low latency in a data center build.

The sponsor requires high availability, data redundancy, and site failure recovery. A load balancer ensures application availability by distributing traffic across multiple servers, while offsite backup replication provides data redundancy and enables recovery if the primary site is lost. RAID 0, a UPS, and a single server with dual power supplies do not adequately address all three requirements, especially site-level recovery and data redundancy.

When internet bandwidth is insufficient for the initial seed data transfer of a cloud backup solution, a physical seed transfer (e.g., shipping a hard drive or tape cartridge to the cloud provider) bypasses the bandwidth bottleneck entirely. This approach is commonly supported by major cloud providers (e.g., AWS Snowball, Azure Data Box) for large initial datasets, as it avoids prolonged transfer times and potential failures over limited connections.

These procurement documents are commonly used in project procurement management.

The requirements traceability matrix (RTM) links each requirement to its origin, design, testing, and delivery status. When the vendor changes the migration tool mid-project, the RTM must be updated to reflect how this change impacts each requirement—such as compatibility, data migration rules, or security controls—ensuring all requirements are still met and traceable.

SNMP is the standard protocol for monitoring servers and network devices. It enables the monitoring system to collect performance metrics from both physical and virtual servers. SSH, RDP, and LDAP serve different purposes—remote access, remote desktop, and directory services—and do not provide the required monitoring data collection.

Earned value management (EVM) is the correct technique because it integrates scope, schedule, and cost data to provide objective performance metrics (e.g., Cost Performance Index, Schedule Performance Index) that allow the project manager to continuously monitor and control expenses against the approved budget. For a firewall upgrade with multiple branch offices, EVM helps detect cost overruns early by comparing planned value (PV), earned value (EV), and actual cost (AC), enabling corrective actions before the tight budget is exceeded.

BitLocker Drive Encryption is designed to encrypt entire volumes, protecting data at rest even if the physical disk is removed or stolen. It uses strong AES encryption and integrates with TPM for key protection, offering a balance of security and performance. Other options either encrypt data in transit or control access without encryption, failing to meet the requirement for data-at-rest encryption to comply with regulations.

The cost baseline is the approved, time-phased budget that shows total funding, distribution by work package, and contingency reserve for known risks, making it the correct artifact for the sponsor's request. The bill of materials, business case, and responsibility assignment matrix address components, justification, and roles respectively, and none of them presents an approved budget with reserves.

Hardware compatibility testing is the most critical factor because the inventory management system may require specific hardware configurations (e.g., CPU architecture, RAM, storage, or network interface drivers) to function correctly. If workstations are incompatible, the entire deployment could fail, making this dependency a prerequisite that must be scheduled before or in parallel with software installation. Without verifying compatibility, the project risks costly rework or delays.

The hypervisor management console (e.g., vCenter for VMware or Hyper-V Manager) provides built-in performance monitoring and historical data collection for virtualized servers, allowing the team to baseline CPU and memory usage directly from the virtualization layer. This is the correct tool because it captures resource utilization at the hypervisor level, which is essential for establishing performance baselines in a virtualized environment.

The project charter is the document that formally authorizes the project and includes its purpose, high-level requirements, and key stakeholders. It is created during initiation and provides the project manager with the authority to apply resources. The WBS, project management plan, and business case serve different purposes and do not fulfill the sponsor's request.

iSCSI is generally chosen over Fibre Channel primarily because it leverages existing Ethernet infrastructure, which significantly reduces hardware and operational costs. Fibre Channel requires specialized switches, host bus adapters (HBAs), and cabling, whereas iSCSI can run on standard network interface cards (NICs) and switches, making it a more cost-effective solution for many organizations.

A hybrid cloud management platform provides a single interface to manage both on-premises and cloud resources, meeting the requirement for unified provisioning and monitoring. The other cloud service models (IaaS, PaaS, SaaS) each address specific layers but do not offer cross-environment management, so they fail to satisfy the single-pane-of-glass need.

The question explicitly requires the provider to support data sovereignty, which mandates that data must be stored and processed within specific geographic boundaries. The SLA clause on data residency and location clauses (Option D) directly addresses this by defining where data centers are located and whether data can be moved across borders. Without this clause, the provider could store data in jurisdictions violating legal or regulatory requirements, making it the most critical clause to review.

Schedule development follows: define activities, sequence, estimate resources, estimate durations, then develop the schedule.

Separating the web server and database onto two VMs eliminates resource contention between IIS and SQL Server Express, which is the root cause of the CPU and I/O spikes. Replacing the HDD with SSDs reduces disk I/O latency from 50 ms to under 1 ms, directly addressing the performance bottleneck. This solution is cost-effective and can be implemented within two weeks using existing on-premises hardware, without requiring cloud migration or VPN setup.

Biometric access controls and surveillance cameras are direct physical security measures that protect against unauthorized access and provide monitoring. When migrating to a colocation facility, verifying these controls is essential to ensure the servers are physically secure. Other options relate to operational resilience or support but do not address the requirement for physical security of the equipment.

The project manager is performing Estimate Activity Resources because the task involves identifying the types and quantities of people, equipment, and materials needed for project activities. This process is part of the Planning Process Group and provides input to developing the project schedule and budget. Other options are either completed earlier or focus on different aspects of project management.

The parallel deployment strategy is recommended because it allows the old and new ERP systems to run concurrently during cutover, enabling users to validate the new system while maintaining operations on the legacy system. This minimizes downtime by providing a fallback option if issues arise, ensuring business continuity during the migration.

The requirement is that a host failure must not take down its VMs, which is precisely what hypervisor high availability provides by restarting affected VMs on remaining cluster members. DRS, thin provisioning, and VLAN tagging improve balance, storage efficiency, or network segmentation respectively, but none of them recovers workloads after a physical host is lost, so they leave the single point of failure in place.

The project manager should first document the misalignment and assess its impact, as this is a standard issue management practice. This step provides the necessary information to evaluate options and engage stakeholders effectively. Escalating, demanding vendor changes, or altering organizational processes are premature without understanding the consequences.

Live migration and high availability clustering are the two features that directly enable moving running VMs and ensuring automatic failover. Live migration allows maintenance without downtime, while HA clustering restarts VMs on other hosts during failures. Together, they provide the required uptime and flexibility for a virtualized environment.

The project manager should provide a technical requirements document because it contains the detailed specifications such as protocols, codecs, and bandwidth needed to assess compatibility with the existing network. Other documents like SLA, BOM, or SOW do not provide this level of technical detail. This document ensures that the VoIP deployment meets the network's technical constraints.

The WBS process starts with identifying major deliverables, decomposing them, assigning codes, verifying completeness, and documenting details.

Hypervisor memory overcommitment allows a hypervisor to allocate more virtual machine (VM) memory to VMs than the physical RAM available on the host, relying on the fact that VMs rarely use their full allocated memory simultaneously. This directly improves resource utilization by enabling higher VM density per physical host, which is the core inefficiency in resource pooling. Technologies like VMware ESXi's transparent page sharing or KSM (Kernel Same-page Merging) further optimize this by deduplicating identical memory pages.

The sponsor requires redundancy if a single link between switches fails. A mesh topology provides multiple interconnected paths, so traffic can be rerouted when one link goes down. Star, bus, and ring topologies either rely on a single central point, a shared backbone, or a single loop, none of which offer the same level of fault tolerance for a multi-site VoIP rollout.

QoS configuration and bandwidth capacity are critical to support VoIP traffic. QoS ensures voice packets are prioritized to minimize latency and jitter, while sufficient bandwidth prevents congestion that could degrade call quality. DHCP scope, SNMP community strings, and port security are important for other aspects but do not directly ensure the network can handle real-time voice traffic.

Adding resources to a project that is behind schedule can sometimes worsen the delay due to Brooks' Law, especially if the critical path involves tasks that are not parallelizable. The project manager must first analyze the critical path to determine if adding resources will actually reduce the duration of critical tasks, such as mailbox migration batches or DNS cutover steps, or if it will introduce coordination overhead that negates any gains.

A VPN (Virtual Private Network) is the correct choice because it creates an encrypted tunnel over the public internet between the on-premises infrastructure and the public cloud provider, ensuring secure connectivity. Technologies like IPsec or TLS-based VPNs authenticate both endpoints and encrypt all traffic, preventing eavesdropping and tampering during transit.

The backup server is on the same network segment as production traffic, causing congestion during peak hours. Backup timeouts indicate that the backup traffic is competing with production traffic for bandwidth, leading to packet loss or delays. Isolating backup traffic on a separate VLAN reduces network congestion by logically separating the traffic, ensuring dedicated bandwidth for backups and preventing interference with production operations.