Question 1

How would you use the OSI model as a systematic framework for network troubleshooting? Walk through diagnosing a connectivity issue layer by layer.

Accepted Answer

Using the OSI model as a troubleshooting framework means systematically checking each layer from the bottom up (or top down) to isolate where a problem is occurring. This approach prevents you from wasting time guessing and ensures you do not overlook fundamental issues. The bottom-up approach is most common because higher layers depend on lower layers functioning correctly.

Layer 1 (Physical): Start by checking the physical connectivity. Is the cable plugged in and undamaged? Are link lights on the NIC and switch port active? For wireless, is the client within range and is the access point

Question 2

Explain the seven layers of the OSI model and the primary function of each layer.

Accepted Answer

The OSI (Open Systems Interconnection) model is a conceptual framework that standardizes network communication into seven distinct layers. Each layer has a specific responsibility and communicates with the layers directly above and below it. Understanding this model is essential for troubleshooting because it helps you isolate where a problem is occurring.

Layer 1, the Physical layer, deals with the actual transmission of raw bits over a physical medium. This includes cables, connectors, voltage levels, and signal encoding. Ethernet cables, fiber optics, and wireless radio frequencies all o

Question 3

Compare the convergence mechanisms of classic STP (802.1D) with Rapid STP (802.1w). How does RSTP achieve faster failover?

Accepted Answer

Classic STP (802.1D) and Rapid STP (802.1w) both prevent Layer 2 loops, but RSTP dramatically improves convergence time from 30-50 seconds down to subsecond failover in many cases. Understanding the differences is important because prolonged convergence causes network outages that affect all traffic in the affected VLANs.

In classic STP, when a topology change occurs (such as a link failure), the affected port transitions through five states: disabled, blocking, listening, learning, and forwarding. The listening and learning states each last for one forward delay timer (15 seconds by defaul

Question 4

What is a VLAN, and why would you use VLANs in a network?

Accepted Answer

A VLAN (Virtual Local Area Network) is a logical grouping of devices on a network that behave as if they are on the same physical LAN segment, regardless of their actual physical location. VLANs are configured on switches and allow network administrators to segment a network without needing separate physical infrastructure for each segment.

Without VLANs, every device connected to a switch is in the same broadcast domain, meaning a broadcast sent by one device reaches every other device. In a large network, this creates excessive broadcast traffic that wastes bandwidth and reduces performan

Question 5

What is routing, and how does a router decide where to forward a packet?

Accepted Answer

Routing is the process of selecting the best path for network traffic to travel from a source to a destination across one or more networks. While switches forward traffic based on MAC addresses within a single network, routers operate at Layer 3 of the OSI model and forward packets between different networks using IP addresses.

When a router receives a packet, it examines the destination IP address in the packet header and consults its routing table to determine where to send the packet next. The routing table is essentially a map of known networks and the best path to reach each one. Each

Question 6

What are static routes, and when would you use them instead of a dynamic routing protocol?

Accepted Answer

A static route is a manually configured routing entry that tells a router how to reach a specific destination network. Unlike dynamic routes that are automatically learned from other routers, static routes are explicitly defined by a network administrator and do not change unless someone modifies or removes them.

The syntax for configuring a static route on a Cisco router is ip route followed by the destination network, subnet mask, and either the next-hop IP address or the exit interface. For example, ip route 192.168.2.0 255.255.255.0 10.0.0.2 tells the router to send traffic destined for

Question 7

A security audit reveals that your network has several vulnerabilities. Walk through how you would prioritize and remediate network security findings.

Accepted Answer

Receiving a security audit report with multiple findings can be overwhelming, but a structured prioritization and remediation approach ensures the most critical risks are addressed first while avoiding disruption to business operations.

Step 1: Categorize and prioritize findings. Review each finding and assess its risk level based on two factors: likelihood of exploitation and potential business impact. Use a risk matrix (critical, high, medium, low) to categorize. Critical findings that should be addressed immediately include default credentials on network devices, unpatched critical vulne

Question 8

What is a firewall, and what is the difference between a stateless and stateful firewall?

Accepted Answer

A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks like the internet, allowing legitimate traffic to pass while blocking malicious or unauthorized traffic.

A stateless firewall (also called a packet filter) examines each packet individually and makes forwarding decisions based solely on information in the packet header: source and destination IP addresses, source and destination ports, and protocol type. It does

Question 9

How would you design a comprehensive network monitoring strategy for an enterprise? What metrics, tools, and alerting thresholds would you implement?

Accepted Answer

A comprehensive network monitoring strategy provides visibility into network health, enables proactive problem detection, and supports capacity planning. The strategy should cover what to monitor, how to monitor, alerting thresholds, and escalation procedures.

Start with defining monitoring categories and metrics. Availability monitoring ensures devices and links are reachable. Use ICMP ping with 30-60 second intervals. Track uptime percentages and alert on any device that becomes unreachable. Performance monitoring tracks interface utilization (alert at 70 percent sustained for warnings, 8

Question 10

Explain how ping and traceroute work. What information does each tool provide, and when would you use them?

Accepted Answer

Ping and traceroute are the two most fundamental network troubleshooting tools. They both use ICMP (Internet Control Message Protocol) but provide different types of information, and together they form the starting point of almost any network diagnosis.

Ping tests basic connectivity between your device and a destination by sending ICMP Echo Request packets and waiting for ICMP Echo Reply responses. When you run ping 10.0.0.1, your device sends a series of packets to that address and reports whether each one was successfully returned. The output shows several important metrics: the round-tri

Network Engineer

Topics

Networking Fundamentals (OSI/TCP-IP)

Switching & VLANs

IP Routing Basics

Network Security Fundamentals

Network Troubleshooting Tools

Mock Interview

Quick Stats