6 Supporting Network Services and Integrated Practice Free Online FlashCards

What are the three syslog roles?

An originator generates a syslog message, a collector receives and stores it, and a relay forwards it.

Why synchronize device clocks when using centralized logs?

NTP synchronization helps order events from different systems. Without consistent time, log timelines are difficult to interpret.

Why should syslog not be treated as a complete event record?

Syslog is evidence, not a guaranteed record: messages may be lost or truncated depending on transport. Protect log transport and restrict access.

How do polling and notifications differ in network monitoring?

Polling regularly queries devices for status and counters; notifications, such as traps or alerts, report events when they occur.

Which interface and availability measures belong in a monitoring baseline?

A useful baseline tracks device reachability and interface state, utilization, errors, and discards.

What can monitoring trends reveal about the scope of a fault?

Rising interface discards across several devices may indicate congestion; one unreachable host may point to a local link, power, or configuration issue.

What does LDAP connectivity establish—and what does it not establish?

LDAP is a protocol clients use to access directory services. LDAP connectivity alone does not prove that a user authenticated successfully.

How do Active Directory clients locate domain controllers?

Active Directory clients use DNS service-location (SRV) records to find domain controllers that provide services such as LDAP and Kerberos.

Why does time synchronization matter for Kerberos authentication?

Kerberos authentication relies on synchronized clocks, so incorrect client or server time can cause authentication failures.

What should you verify first when a domain-connected client cannot sign in?

Inspect the client’s address, subnet mask, gateway, and DNS servers; confirm its lease is valid and its DNS server is appropriate for the domain.

What should follow discovery of incorrect client network configuration?

If assigned client configuration is wrong, investigate the DHCP scope, relay, or VLAN before troubleshooting authentication.

How should logs from multiple services be correlated during troubleshooting?

Correlate client, DNS, DHCP, network-device, and domain-controller events by timestamp. If timestamps disagree, investigate NTP before inferring event order.