March Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

N10-008 Exam Dumps - CompTIA Network+ Certification Exam

Question # 4

A network technician is investigating an issue with handheld devices in a warehouse. Devices have not been connecting to the nearest APs, but they have been connecting to an AP on the far side of the warehouse. Which of the following is the MOST likely cause of this issue?

A.

The nearest APs are configured for 802.11g.

B.

An incorrect channel assignment is on the nearest APs.

C.

The power level is too high for the AP on the far side.

D.

Interference exists around the AP on the far side.

Full Access
Question # 5

A technician is troubleshooting a previously encountered issue. Which of the following should the technician reference to find what solution was implemented to resolve the issue?

A.

Standard operating procedures

B.

Configuration baseline documents

C.

Work instructions

D.

Change management documentation

Full Access
Question # 6

A small, family-run business uses a single SOHO router to provide Internet and WiFi to its employees At the start of a new week, employees come in and find their usual WiFi network is no longer available, and there is a new wireless network to which they cannot connect. Given that information, which of the following should have been done to avoid this situation'

A.

The device firmware should have been kept current.

B.

Unsecure protocols should have been disabled.

C.

Parental controls should have been enabled

D.

The default credentials should have been changed

Full Access
Question # 7

A website administrator is concerned the company’s static website could be defaced by hacktivists or used as a pivot point to attack internal systems. Which of the following should a network security administrator recommend to assist with detecting these activities?

A.

Implement file integrity monitoring.

B.

Change the default credentials.

C.

Use SSL encryption.

D.

Update the web-server software.

Full Access
Question # 8

Given the following information:

Which of the following command-line tools would generate this output?

A.

netstat

B.

arp

C.

dig

D.

tracert

Full Access
Question # 9

Which of the following security devices would be BEST to use to provide mechanical access control to the MDF/IDF?

A.

A smart card

B.

A key fob

C.

An employee badge

D.

A door lock

Full Access
Question # 10

A network engineer is investigating reports of poor network performance. Upon reviewing a device configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following would be the MOST likely result of this finding?

A.

Increased CRC errors

B.

Increased giants and runts

C.

Increased switching loops

D.

Increased device temperature

Full Access
Question # 11

A customer wants to segregate the traffic between guests on a hypervisor. Which of the following does a technician need to configure to meet the requirement?

A.

Virtual switches

B.

OSPF routing

C.

Load balancers

D.

NIC teaming

E.

Fibre Channel

Full Access
Question # 12

Which of the following protocols will a security appliance that is correlating network events from multiple devices MOST likely rely on to receive event messages?

A.

Syslog

B.

Session Initiation Protocol

C.

Secure File Transfer Protocol

D.

Server Message Block

Full Access
Question # 13

A user is having difficulty with video conferencing and is looking for assistance. Which of the following would BEST improve performance?

A.

Packet shaping

B.

Quality of service

C.

Port mirroring

D.

Load balancing

Full Access
Question # 14

A wireless network was installed in a warehouse for employees to scan crates with a wireless handheld scanner. The wireless network was placed in the corner of the building near the ceiling for maximum coverage However users in the offices adjacent lo the warehouse have noticed a large amount of signal overlap from the new network Additionally warehouse employees report difficulty connecting to the wireless network from the other side of the building; however they have no issues when Ihey are near the antenna Which of the following is MOST likely the cause?

A.

The wireless signal is being refracted by the warehouse's windows

B.

The antenna's power level was set too high and is overlapping

C.

An omnidirectional antenna was used instead of a unidirectional antenna

D.

The wireless access points are using channels from the 5GHz spectrum

Full Access
Question # 15

The following instructions were published about the proper network configuration for a videoconferencing device:

"Configure a valid static RFC1918 address for your network. Check the option to use a connection over NAT."

Which of the following is a valid IP address configuration for the device?

A.

FE80::1

B.

100.64.0.1

C.

169.254.1.2

D.

172.19.0.2

E.

224.0.0.12

Full Access
Question # 16

A network technician needs to correlate security events to analyze a suspected intrusion. Which of the following should the technician use?

A.

SNMP

B.

Log review

C.

Vulnerability scanning

D.

SIEM

Full Access
Question # 17

A corporation has a critical system that would cause unrecoverable damage to the brand if it was taken offline. Which of the following disaster recovery solutions should the corporation implement?

A.

Full backups

B.

Load balancing

C.

Hot site

D.

Snapshots

Full Access
Question # 18

At which of the following OSI model layers would a technician find an IP header?

A.

Layer 1

B.

Layer 2

C.

Layer 3

D.

Layer 4

Full Access
Question # 19

Which of the following devices would be used to manage a corporate WLAN?

A.

A wireless NAS

B.

A wireless bridge

C.

A wireless router

D.

A wireless controller

Full Access
Question # 20

A network administrator is talking to different vendors about acquiring technology to support a new project for a large company. Which of the following documents will MOST likely need to be signed before information about the project is shared?

A.

BYOD policy

B.

NDA

C.

SLA

D.

MOU

Full Access
Question # 21

A user recently made changes to a PC that caused it to be unable to access websites by both FQDN and IP Local resources, such as the file server remain accessible. Which of the following settings did the user MOST likely misconfigure?

A.

Static IP

B.

Default gateway

C.

DNS entries

D.

Local host file

Full Access
Question # 22

A network administrator is configuring a database server and would like to ensure the database engine is listening on a certain port. Which of the following commands should the administrator use to accomplish this goal?

A.

nslookup

B.

netstat -a

C.

ipconfig /a

D.

arp -a

Full Access
Question # 23

A network administrator is downloading a large patch that will be uploaded to several enterprise switches simultaneously during the day's upgrade cycle. Which of the following should the administrator do to help ensure the upgrade process will be less likely to cause problems with the switches?

A.

Confirm the patch's MD5 hash prior to the upgrade

B.

Schedule the switches to reboot after an appropriate amount of time.

C.

Download each switch's current configuration before the upgrade

D.

Utilize FTP rather than TFTP to upload the patch

Full Access
Question # 24

A network requirement calls for segmenting departments into different networks. The campus network is set up with users of each department in multiple buildings. Which of the following should be configured to keep the design simple and efficient?

A.

MDIX

B.

Jumbo frames

C.

Port tagging

D.

Flow control

Full Access
Question # 25

A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a non-standard socket Which of the following types of rules is the administrator implementing?

A.

NAT

B.

PAT

C.

STP

D.

SNAT

E.

ARP

Full Access
Question # 26

A company that uses VoIP telephones is experiencing intermittent issues with one-way audio and dropped conversations The manufacturer says the system will work if ping times are less than 50ms. The company has recorded the following ping times:

Which of the following is MOST likely causing the issue?

A.

Attenuation

B.

Latency

C.

VLAN mismatch

D.

Jitter

Full Access
Question # 27

Which of the following protocol types describes secure communication on port 443?

A.

ICMP

B.

UDP

C.

TCP

D.

IP

Full Access
Question # 28

An IT technician suspects a break in one of the uplinks that provides connectivity to the core switch. Which of the following command-line tools should the technician use to determine where the incident is occurring?

A.

nslookup

B.

show config

C.

netstat

D.

show interface

E.

show counters

Full Access
Question # 29

A network administrator decided to use SLAAC in an extensive IPv6 deployment to alleviate IP address management. The devices were properly connected into the LAN but autoconfiguration of the IP address did not occur as expected. Which of the following should the network administrator verify?

A.

The network gateway is configured to send router advertisements.

B.

A DHCP server is present on the same broadcast domain as the clients.

C.

The devices support dual stack on the network layer.

D.

The local gateway supports anycast routing.

Full Access
Question # 30

An organization wants to implement a method of centrally managing logins to network services. Which of the following protocols should the organization use to allow for authentication, authorization and auditing?

A.

MS-CHAP

B.

RADIUS

C.

LDAPS

D.

RSTP

Full Access
Question # 31

A network technician is installing an analog desk phone for a new receptionist After running a new phone line, the technician now needs to cnmp on a new connector. Which of the following connectors would MOST likely be used in this case?

A.

DB9

B.

RJ11

C.

RJ45

D.

DB25

Full Access
Question # 32

Given the following output:

Which of the following attacks is this MOST likely an example of?

A.

ARP poisoning

B.

VLAN hopping

C.

Rogue access point

D.

Amplified DoS

Full Access
Question # 33

A network administrator is reviewing interface errors on a switch. Which of the following indicates that a switchport is receiving packets in excess of the configured MTU?

A.

CRC errors

B.

Giants

C.

Runts

D.

Flooding

Full Access
Question # 34

A user reports being unable to access network resources after making some changes in the office. Which of the following should a network technician do FIRST?

A.

Check the system’s IP address

B.

Do a ping test against the servers

C.

Reseat the cables into the back of the PC

D.

Ask what changes were made

Full Access
Question # 35

A technician is deploying a low-density wireless network and is contending with multiple types of building materials. Which of the following wireless frequencies would allow for the LEAST signal attenuation?

A.

2.4GHz

B.

5GHz

C.

850MHz

D.

900MHZ

Full Access
Question # 36

A business is using the local cable company to provide Internet access. Which of the following types of cabling will the cable company MOST likely use from the demarcation point back to the central office?

A.

Multimode

B.

Cat 5e

C.

RG-6

D.

Cat 6

E.

100BASE-T

Full Access
Question # 37

Which of the following policies is MOST commonly used for guest captive portals?

A.

AUP

B.

DLP

C.

BYOD

D.

NDA

Full Access
Question # 38

Which of the following is used to provide networking capability for VMs at Layer 2 of the OSI model?

A.

VPN

B.

VRRP

C.

vSwitch

D.

VIP

Full Access
Question # 39

A network technician is investigating an IP phone that does not register in the VoIP system Although it received an IP address, it did not receive the necessary DHCP options The information that is needed for the registration is distributes by the OHCP scope All other IP phones are working properly. Which of the following does the technician need to verify?

A.

VLAN mismatch

B.

Transceiver mismatch

C.

Latency

D.

DHCP exhaustion

Full Access
Question # 40

A network administrator is setting up several loT devices on a new VLAN and wants to accomplish the following

1. Reduce manual configuration on each system

2. Assign a specific IP address to each system

3. Allow devices to move to different switchports on the same VLAN

Which of the following should the network administrator do to accomplish these requirements?

A.

Set up a reservation for each device

B.

Configure a static IP on each device

C.

Implement private VLANs for each device

D.

Use DHCP exclusions to address each device

Full Access
Question # 41

Which of the following is MOST commonly used to address CVEs on network equipment and/or operating systems?

A.

Vulnerability assessment

B.

Factory reset

C.

Firmware update

D.

Screened subnet

Full Access
Question # 42

A technician is implementing a new wireless network to serve guests at a local office. The network needs to provide Internet access but disallow associated stations from communicating with each other. Which of the following would BEST accomplish this requirement?

A.

Wireless client isolation

B.

Port security

C.

Device geofencing

D.

DHCP snooping

Full Access
Question # 43

A network administrator wants to analyze attacks directed toward the company's network. Which of the following must the network administrator implement to assist in this goal?

A.

A honeypot

B.

Network segmentation

C.

Antivirus

D.

A screened subnet

Full Access
Question # 44

A Chief Information Officer (CIO) wants to improve the availability of a company's SQL database Which of the following technologies should be utilized to achieve maximum availability?

A.

Clustering

B.

Port aggregation

C.

NIC teaming

D.

Snapshots

Full Access
Question # 45

A company is being acquired by a large corporation. As part of the acquisition process, the company's address should now redirect clients to the corporate organization page. Which of the following DNS records needs to be created?

A.

SOA

B.

NS

C.

CNAME

D.

TXT

Full Access
Question # 46

Which of the following technologies allows traffic to be sent through two different ISPs to increase performance?

A.

Fault tolerance

B.

Quality of service

C.

Load balancing

D.

Port aggregation

Full Access
Question # 47

A technician receives feedback that some users are experiencing high amounts of jitter while using the wireless network. While troubleshooting the network, the technician uses the ping command with the IP address of the default gateway and verifies large variations in latency. The technician thinks the issue may be interference from other networks and non-802.11 devices. Which of the following tools should the technician use to troubleshoot the issue?

A.

NetFlow analyzer

B.

Bandwidth analyzer

C.

Protocol analyzer

D.

Spectrum analyzer

Full Access
Question # 48

A technician is installing a high-density wireless network and wants to use an available frequency that supports the maximum number of channels to reduce interference. Which of the following standard 802.11 frequency ranges should the technician look for while reviewing WAP specifications?

A.

2.4GHz

B.

5GHz

C.

6GHz

D.

900MHz

Full Access
Question # 49

An administrator is writing a script to periodically log the IPv6 and MAC addresses of all the devices on a network segment. Which of the following switch features will MOST likely be used to assist with this task?

A.

Spanning Tree Protocol

B.

Neighbor Discovery Protocol

C.

Link Aggregation Control Protocol

D.

Address Resolution Protocol

Full Access
Question # 50

Which of the following is used to track and document various types of known vulnerabilities?

A.

CVE

B.

Penetration testing

C.

Zero-day

D.

SIEM

E.

Least privilege

Full Access
Question # 51

Which of the following is MOST likely to generate significant East-West traffic in a datacenter?

A.

A backup of a large video presentation to cloud storage for archival purposes

B.

A duplication of a hosted virtual server to another physical server for redundancy

C.

A download of navigation data to a portable device for offline access

D.

A query from an IoT device to a cloud-hosted server for a firmware update

Full Access
Question # 52

A new cabling certification is being requested every time a network technician rebuilds one end of a Cat 6 (vendor-certified) cable to create a crossover connection that is used to connect switches. Which of the following would address this issue by allowing the use of the original cable?

A.

CSMA/CD

B.

LACP

C.

PoE+

D.

MDIX

Full Access
Question # 53

Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

A.

Layer 3 switch

B.

VPN headend

C.

Next-generation firewall

D.

Proxy server

E.

Intrusion prevention

Full Access
Question # 54

A user tries to ping 192.168.1.100 from the command prompt on the 192.168.2.101 network but gets the following response: U.U.U.U. Which of the following needs to be configured for these networks to reach each other?

A.

Network address translation

B.

Default gateway

C.

Loopback

D.

Routing protocol

Full Access
Question # 55

Which of the following connector types would have the MOST flexibility?

A.

SFP

B.

BNC

C.

LC

D.

RJ45

Full Access
Question # 56

A network administrator walks into a datacenter and notices an unknown person is following closely. The administrator stops and directs the person to the security desk. Which of the following attacks did the network administrator prevent?

A.

Evil twin

B.

Tailgating

C.

Piggybacking

D.

Shoulder surfing

Full Access
Question # 57

After the A record of a public website was updated, some visitors were unable to access the website. Which of the following should be adjusted to address the issue?

A.

TTL

B.

MX

C.

TXT

D.

SOA

Full Access
Question # 58

Access to a datacenter should be individually recorded by a card reader even when multiple employees enter the facility at the same time. Which of the following allows the enforcement of this policy?

A.

Motion detection

B.

Access control vestibules

C.

Smart lockers

D.

Cameras

Full Access
Question # 59

The network administrator is informed that a user’s email password is frequently hacked by brute-force programs. Which of the following policies should the network administrator implements to BEST mitigate this issue? (Choose two.)

A.

Captive portal

B.

Two-factor authentication

C.

Complex passwords

D.

Geofencing

E.

Role-based access

F.

Explicit deny

Full Access
Question # 60

Which of the following technologies provides a failover mechanism for the default gateway?

A.

FHRP

B.

LACP

C.

OSPF

D.

STP

Full Access
Question # 61

A network administrator needs to query the NSs for a remote application. Which of the following commands would BEST help the administrator accomplish this task?

A.

dig

B.

arp

C.

show interface

D.

hostname

Full Access
Question # 62

A company built a new building at its headquarters location. The new building is connected to the company’s LAN via fiber-optic cable. Multiple users in the new building are unable to access the company’s intranet site via their web browser, but they are able to access internet sites. Which of the following describes how the network administrator can resolve this issue?

A.

Correct the DNS server entries in the DHCP scope

B.

Correct the external firewall gateway address

C.

Correct the NTP server settings on the clients

D.

Correct a TFTP Issue on the company’s server

Full Access
Question # 63

Which of the following routing protocols is used to exchange route information between public autonomous systems?

A.

OSPF

B.

BGP

C.

EGRIP

D.

RIP

Full Access
Question # 64

A technician is installing a cable modem in a SOHO. Which of the following cable types will the technician MOST likely use to connect a modem to the ISP?

A.

Coaxial

B.

Single-mode fiber

C.

Cat 6e

D.

Multimode fiber

Full Access
Question # 65

A technician is writing documentation regarding a company’s server farm. The technician needs to confirm the server name for all Linux servers. Which of the following commands should the technician run?

A.

ipconfig

B.

nslookup

C.

arp

D.

route

Full Access
Question # 66

Which of the following systems would MOST likely be found in a screened subnet?

A.

RADIUS

B.

FTP

C.

SQL

D.

LDAP

Full Access
Question # 67

An IT director is setting up new disaster and HA policies for a company. Limited downtime is critical to operations. To meet corporate requirements, the director set up two different datacenters across the country that will stay current on data and applications. In the event of an outage, the company can immediately switch from one datacenter to another. Which of the following does this BEST describe?

A.

A warm site

B.

Data mirroring

C.

Multipathing

D.

Load balancing

E.

A hot site

Full Access
Question # 68

A technician is deploying a new switch model and would like to add it to the existing network monitoring software. The technician wants to know what metrics can be gathered from a given switch. Which of the following should the technician utilize for the switch?

A.

MIB

B.

Trap

C.

Syslog

D.

Audit log

Full Access
Question # 69

A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use to detect the exact break point of the fiber link?

A.

OTDR

B.

Tone generator

C.

Fusion splicer

D.

Cable tester

E.

PoE injector

Full Access
Question # 70

Which of the following TCP ports is used by the Windows OS for file sharing?

A.

53

B.

389

C.

445

D.

1433

Full Access
Question # 71

A workstation is configured with the following network details:

Software on the workstation needs to send a query to the local subnet broadcast address. To which of the following addresses should the software be configured to send the query?

A.

10.1.2.0

B.

10.1.2.1

C.

10.1.2.23

D.

10.1.2.255

E.

10.1.2.31

Full Access
Question # 72

A technician wants to deploy a new wireless network that comprises 30 WAPs installed throughout a three-story office building. All the APs will broadcast the same SSID for client access. Which of the following BEST describes this deployment?

A.

Extended service set

B.

Basic service set

C.

Unified service set

D.

Independent basic service set

Full Access
Question # 73

A network technician is installing new software on a Windows-based server in a different geographical location. Which of the following would be BEST for the technician to use to perform this task?

A.

RDP

B.

SSH

C.

FTP

D.

DNS

Full Access
Question # 74

A company hired a technician to find all the devices connected within a network. Which of the following software tools would BEST assist the technician in completing this task?

A.

IP scanner

B.

Terminal emulator

C.

NetFlow analyzer

D.

Port scanner

Full Access
Question # 75

An IT organization needs to optimize speeds for global content distribution and wants to reduce latency in high-density user locations. Which of the following technologies BEST meets the organization’s requirements?

A.

Load balancing

B.

Geofencing

C.

Public cloud

D.

Content delivery network

E.

Infrastructure as a service

Full Access
Question # 76

Which of the following ports is commonly used by VoIP phones?

A.

20

B.

143

C.

445

D.

5060

Full Access
Question # 77

According to troubleshooting methodology, which of the following should the technician do NEXT after determining the most likely probable cause of an issue?

A.

Establish a plan of action to resolve the issue and identify potential effects

B.

Verify full system functionality and, if applicable, implement preventive measures

C.

Implement the solution or escalate as necessary

D.

Test the theory to determine the cause

Full Access
Question # 78

A network device is configured to send critical events to a syslog server; however, the following alerts are not being received:

Severity 5 LINK-UPDOWN: Interface 1/1, changed state to down

Severity 5 LINK-UPDOWN: Interface 1/3, changed state to down

Which of the following describes the reason why the events are not being received?

A.

The network device is not configured to log that level to the syslog server

B.

The network device was down and could not send the event

C.

The syslog server is not compatible with the network device

D.

The syslog server did not have the correct MIB loaded to receive the message

Full Access
Question # 79

Which of the following is the physical topology for an Ethernet LAN?

A.

Bus

B.

Ring

C.

Mesh

D.

Star

Full Access
Question # 80

A network engineer performs the following tasks to increase server bandwidth:

Connects two network cables from the server to a switch stack

Configure LACP on the switchports

Verifies the correct configurations on the switch interfaces

Which of the following needs to be configured on the server?

A.

Load balancing

B.

Multipathing

C.

NIC teaming

D.

Clustering

Full Access
Question # 81

A technician is installing a new fiber connection to a network device in a datacenter. The connection from the device to the switch also traverses a patch panel connection. The chain of connections is in the following order:

Device

LC/LC patch cable

Patch panel

Cross-connect fiber cable

Patch panel

LC/LC patch cable

Switch

The connection is not working. The technician has changed both patch cables with known working patch cables. The device had been tested and was working properly before being installed. Which of the following is the MOST likely cause of the issue?

A.

TX/RX is reversed

B.

An incorrect cable was used

C.

The device failed during installation

D.

Attenuation is occurring

Full Access
Question # 82

Which of the following DNS records works as an alias to another record?

A.

AAAA

B.

CNAME

C.

MX

D.

SOA

Full Access
Question # 83

A network technician is manually configuring the network settings for a new device and is told the network block is 192.168.0.0/20. Which of the following subnets should the technician use?

A.

255.255.128.0

B.

255.255.192.0

C.

255.255.240.0

D.

255.255.248.0

Full Access
Question # 84

A technician is trying to determine whether an LACP bundle is fully operational. Which of the following commands will the technician MOST likely use?

A.

show interface

B.

show config

C.

how route

D.

show arp

Full Access
Question # 85

Branch users are experiencing issues with videoconferencing. Which of the following will the company MOST likely configure to improve performance for these applications?

A.

Link Aggregation Control Protocol

B.

Dynamic routing

C.

Quality of service

D.

Network load balancer

E.

Static IP addresses

Full Access
Question # 86

Which of the following would MOST likely be used to review previous upgrades to a system?

A.

Business continuity plan

B.

Change management

C.

System life cycle

D.

Standard operating procedures

Full Access
Question # 87

A store owner would like to have secure wireless access available for both business equipment and patron use. Which of the following features should be configured to allow different wireless access through the same equipment?

A.

MIMO

B.

TKIP

C.

LTE

D.

SSID

Full Access
Question # 88

A network engineer is investigating reports of poor network performance. Upon reviewing a report, the engineer finds that jitter at the office is greater than 10ms on the only WAN connection available. Which of the following would be MOST affected by this statistic?

A.

A VoIP sales call with a customer

B.

An in-office video call with a coworker

C.

Routing table from the ISP

D.

Firewall CPU processing time

Full Access
Question # 89

The following configuration is applied to a DHCP server connected to a VPN concentrator:

There are 300 non-concurrent sales representatives who log in for one hour a day to upload reports, and 252 of these representatives are able to connect to the VPN without any Issues. The remaining sales representatives cannot connect to the VPN over the course of the day. Which of the following can be done to resolve the issue without utilizing additional resources?

A.

Decrease the lease duration

B.

Reboot the DHCP server

C.

Install a new VPN concentrator

D.

Configure a new router

Full Access
Question # 90

You are tasked with verifying the following requirements are met in order to ensure network security.

Requirements:

Datacenter

Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

Provide a dedicated server to resolve IP addresses and hostnames correctly and handle port 53 traffic

Building A

Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

Provide devices to support 5 additional different office users

Add an additional mobile user

Replace the Telnet server with a more secure solution

Screened subnet

Ensure network is subnetted to allow all devices to communicate properly while minimizing address space usage

Provide a server to handle external 80/443 traffic

Provide a server to handle port 20/21 traffic

INSTRUCTIONS

Drag and drop objects onto the appropriate locations. Objects can be used multiple times and not all placeholders need to be filled.

Available objects are located in both the Servers and Devices tabs of the Drag & Drop menu.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Full Access
Question # 91

Which of the following provides redundancy on a file server to ensure the server is still connected to a LAN even in the event of a port failure on a switch?

A.

NIC teaming

B.

Load balancer

C.

RAID array

D.

PDUs

Full Access
Question # 92

Which of the following can be used to centrally manage credentials for various types of administrative privileges on configured network devices?

A.

SSO

B.

TACACS+

C.

Zero Trust

D.

Separation of duties

E.

Multifactor authentication

Full Access
Question # 93

A network administrator redesigned the positioning of the APs to create adjacent areas of wireless coverage. After project validation, some users still report poor connectivity when their devices maintain an association to a distanced AP. Which of the following should the network administrator check FIRST?

A.

Validate the roaming settings on the APs and WLAN clients

B.

Verify that the AP antenna type is correct for the new layout

C.

Check to see if MU-MIMO was properly activated on the APs

D.

Deactivate the 2.4GHz band on the APS

Full Access
Question # 94

A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to assign. The ISP assigned 196.26.4.0/26, and the branch gateway router now has the following configurations on the interface that peers to the ISP:

The network engineer observes that all users have lost Internet connectivity. Which of the following describes the issue?

A.

The incorrect subnet mask was configured

B.

The incorrect gateway was configured

C.

The incorrect IP address was configured

D.

The incorrect interface was configured

Full Access
Question # 95

A systems administrator needs to improve WiFi performance in a densely populated office tower and use the latest standard. There is a mix of devices that use 2.4 GHz and 5 GHz. Which of the following should the systems administrator select to meet this requirement?

A.

802.11ac

B.

802.11ax

C.

802.11g

D.

802.11n

Full Access
Question # 96

A network technician needs to ensure outside users are unable to telnet into any of the servers at the datacenter. Which of the following ports should be blocked when checking firewall configuration?

A.

22

B.

23

C.

80

D.

3389

E.

8080

Full Access
Question # 97

Which of the following BEST describes a network appliance that warns of unapproved devices that are accessing the network?

A.

Firewall

B.

AP

C.

Proxy server

D.

IDS

Full Access
Question # 98

The management team needs to ensure unnecessary modifications to the corporate network are not permitted and version control is maintained. Which of the following documents would BEST support this?

A.

An incident response plan

B.

A business continuity plan

C.

A change management policy

D.

An acceptable use policy

Full Access
Question # 99

A technician needs to configure a Linux computer for network monitoring. The technician has the following information:

Linux computer details:

Switch mirror port details:

After connecting the Linux computer to the mirror port on the switch, which of the following commands should the technician run on the Linux computer?

A.

ifconfig ecth0 promisc

B.

ifconfig eth1 up

C.

ifconfig eth0 10.1.2.3

D.

ifconfig eth1 hw ether A1:B2:C3:D4:E5:F6

Full Access
Question # 100

Which of the following transceiver types can support up to 40Gbps?

A.

SFP+

B.

QSFP+

C.

QSFP

D.

SFP

Full Access
Question # 101

A network administrator is designing a new datacenter in a different region that will need to communicate to the old datacenter with a secure connection. Which of the following access methods would provide the BEST security for this new datacenter?

A.

Virtual network computing

B.

Secure Socket Shell

C.

In-band connection

D.

Site-to-site VPN

Full Access
Question # 102

An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both ends of the connection are configured for half duplex. Which of the following is the MOST likely cause of this issue?

A.

The link is improperly terminated

B.

One of the devices is misconfigured

C.

The cable length is excessive

D.

One of the devices has a hardware issue

Full Access
Question # 103

A network administrator is installing a wireless network at a client’s office. Which of the following IEEE 802.11 standards would be BEST to use for multiple simultaneous client access?

A.

CDMA

B.

CSMA/CD

C.

CSMA/CA

D.

GSM

Full Access
Question # 104

A technician is searching for a device that is connected to the network and has the device’s physical network address. Which of the following should the technician review on the switch to locate the device’s network port?

A.

IP route table

B.

VLAN tag

C.

MAC table

D.

QoS tag

Full Access
Question # 105

A client recently added 100 users who are using VMs. All users have since reported slow or unresponsive desktops. Reports show minimal network congestion, zero packet loss, and acceptable packet delay. Which of the following metrics will MOST accurately show the underlying performance issues? (Choose two.)

A.

CPU usage

B.

Memory

C.

Temperature

D.

Bandwidth

E.

Latency

F.

Jitter

Full Access
Question # 106

A network administrator is implementing OSPF on all of a company’s network devices. Which of the following will MOST likely replace all the company’s hubs?

A.

A Layer 3 switch

B.

A proxy server

C.

A NGFW

D.

A WLAN controller

Full Access
Question # 107

Which of the following would be BEST to use to detect a MAC spoofing attack?

A.

Internet Control Message Protocol

B.

Reverse Address Resolution Protocol

C.

Dynamic Host Configuration Protocol

D.

Internet Message Access Protocol

Full Access
Question # 108

A technician is troubleshooting a network switch that seems to stop responding to requests intermittently whenever the logging level is set for debugging. Which of the following metrics should the technician check to begin troubleshooting the issue?

A.

Audit logs

B.

CPU utilization

C.

CRC errors

D.

Jitter

Full Access
Question # 109

A technician is assisting a user who cannot connect to a network resource. The technician first checks for a link light. According to troubleshooting methodology, this is an example of:

A.

using a bottom-to-top approach.

B.

establishing a plan of action.

C.

documenting a finding.

D.

questioning the obvious.

Full Access
Question # 110

Which of the following factors should be considered when evaluating a firewall to protect a datacenter’s east-west traffic?

A.

Replication traffic between an on-premises server and a remote backup facility

B.

Traffic between VMs running on different hosts

C.

Concurrent connections generated by Internet DDoS attacks

D.

VPN traffic from remote offices to the datacenter’s VMs

Full Access
Question # 111

A network is experiencing a number of CRC errors during normal network communication. At which of the following layers of the OSI model will the administrator MOST likely start to troubleshoot?

A.

Layer 1

B.

Layer 2

C.

Layer 3

D.

Layer 4

E.

Layer 5

F.

Layer 6

G.

Layer 7

Full Access
Question # 112

SIMULATION

You have been tasked with setting up a wireless network in an office. The network will consist of 3 Access Points and a single switch. The network must meet the following parameters:

The SSIDs need to be configured as CorpNet with a key of S3cr3t!

The wireless signals should not interfere with each other

The subnet the Access Points and switch are on should only support 30 devices maximum

The Access Points should be configured to only support TKIP clients at a maximum speed

INSTRUCTONS

Click on the wireless devices and review their information and adjust the settings of the access points to meet the given requirements.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Full Access
Question # 113

A network administrator discovers that users in an adjacent building are connecting to the company’s guest wireless network to download inappropriate material. Which of the following can the administrator do to MOST easily mitigate this issue?

A.

Reduce the wireless power levels

B.

Adjust the wireless channels

C.

Enable wireless client isolation

D.

Enable wireless port security

Full Access
Question # 114

A technician is configuring a network switch to be used in a publicly accessible location. Which of the following should the technician configure on the switch to prevent unintended connections?

A.

DHCP snooping

B.

Geofencing

C.

Port security

D.

Secure SNMP

Full Access
Question # 115

Which of the following is the LARGEST MTU for a standard Ethernet frame?

A.

1452

B.

1492

C.

1500

D.

2304

Full Access
Question # 116

An engineer is configuring redundant network links between switches. Which of the following should the engineer enable to prevent network stability issues?

A.

802.1Q

B.

STP

C.

Flow control

D.

CSMA/CD

Full Access
Question # 117

A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building. Several APs are mounted in this office. The users report that the network connections frequently disconnect and reconnect throughout the day. Which of the following is the MOST likely cause of this issue?

A.

The AP association time is set too low

B.

EIRP needs to be boosted

C.

Channel overlap is occurring

D.

The RSSI is misreported

Full Access
Question # 118

Wireless users are reporting intermittent internet connectivity. Connectivity is restored when the users disconnect and reconnect, utilizing the web authentication process each time. The network administrator can see the devices connected to the APs at all times. Which of the following steps will MOST likely determine the cause of the issue?

A.

Verify the session time-out configuration on the captive portal settings

B.

Check for encryption protocol mismatch on the client’s wireless settings

C.

Confirm that a valid passphrase is being used during the web authentication

D.

Investigate for a client’s disassociation caused by an evil twin AP

Full Access
Question # 119

A sales team at a company uses a SaaS solution primarily for videoconferencing and a CRM application that connects to a database server in the corporate data center. Which of the following VPN solutions would allow secure, remote access for sales staff to the CRM application without impacting videoconferencing traffic?

A.

Clientless

B.

Site-to-site

C.

Split tunnel

D.

Full tunnel

Full Access
Question # 120

A help desk technician is concerned that a client's network cable issues may be causing intermittent connectivity. Which of the following would help the technician determine if this is the issue?

A.

Run the show interface command on the switch

B.

Run the tracerouute command on the server

C.

Run iperf on the technician's desktop

D.

Ping the client's computer from the router

E.

Run a port scanner on the client's IP address

Full Access
Question # 121

A user from a remote office is reporting slow file transfers. Which of the following tools will an engineer MOST likely use to get detailed measurement data?

A.

Packet capture

B.

IPerf

C.

SIEM log review

D.

Internet speed test

Full Access
Question # 122

A network technician is troubleshooting a new web server connectivity issue. The network technician discovers the following on the support ticket

• The server's IP address can be pinged from the client PCs,

• Access to the web resource works correctly when on the server's console.

• No clients can access the servers data via URL.

• The server does not have a firewall configured

• No ACLs are preventing connectivity from the client's network.

• All services on the server are operating normally, which was confirmed by the server team.

Which of the following actions will resolve the issue?

A.

Reset port security on the switchport connecting the server.

B.

Adjust the web server's NTP settings to match the client settings.

C.

Configure A records for the web server.

D.

Install the correct MIB on the web server

Full Access
Question # 123

A user is tricked into providing log-in credentials to an attacker over the telephone. Which of the following attacks is this an example of?

A.

Shoulder surfing

B.

Tailgating

C.

Phishing

D.

Dumpster diving

Full Access
Question # 124

A network technician wants to find the shortest path from one node to every other node in the network. Which of the following algorithms will provide the FASTEST convergence time?

A.

A static algorithm

B.

A link-state algorithm

C.

A distance-vector algorithm

D.

A path-vector algorithm

Full Access
Question # 125

A network administrator is troubleshooting a connectivity performance issue. As part of the troubleshooting process, the administrator performs a traceout from the client to the server, and also from the server to the client. While comparing the outputs, the administrator notes they show different hops between the hosts. Which of the following BEST explains these findings?

A.

Asymmetric routing

B.

A routing loop

C.

A switch loop

D.

An incorrect gateway

Full Access
Question # 126

A network administrator is reviewing the network device logs on a syslog server. The messages are normal but the stamps on the messages are incorrect. Which of the following actions should the administrator take to ensure the log message time stamps are correct?

A.

Change the NTP settings on the network device

B.

Change the time on the syslog server

C.

Update the network device firmware

D.

Adjust the timeout settings on the syslog server

E.

Adjust the SSH settings on the network device.

Full Access
Question # 127

A network administrator notices excessive wireless traffic occurring on an access point after normal business hours. The access point is located on an exterior wall. Which of the following should the administrator do to limit wireless access outside the building?

A.

Set up a private VLAN.

B.

Disable roaming on the WAP.

C.

Change to a directional antenna.

D.

Stop broadcasting of the SSID.

Full Access
Question # 128

A technician is installing the Wi-Fi infrastructure for legacy industrial machinery at a warehouse. The equipment only supports 802.11a and 802.11b standards. Speed of transmission is the top business requirement. Which of the following is the correct maximum speed for this scenario?

A.

11Mbps

B.

54Mbps

C.

128Mbps

D.

144Mbps

Full Access
Question # 129

An employee working in a warehouse facility is experiencing interruptions in mobile applications while walking around the facility. According to a recent site survey, the WLAN comprises autonomous APs that are directly connected to the internet, providing adequate signal coverage. Which of the following is the BEST solution to improve network stability?

A.

Implement client roaming using an extended service deployment employing a wireless controller.

B.

Remove omnidirectional antennas and adopt a directional bridge.

C.

Ensure all APs of the warehouse support MIMO and Wi-Fi 4.

D.

Verify that the level of EIRP power settings is set to the maximum permitted by regulations.

Full Access
Question # 130

A network administrator needs to create a way to redirect a network resource that has been on the local network but is now hosted as a SaaS solution. Which of the following

records should be used to accomplish the task?

A.

TXT

B.

AAA

C.

PTR

D.

CNAME

Full Access
Question # 131

A company is designing a new complex. The primary and alternate data centers will be in separate buildings 6.2mi (10km) apart and will be connected via fiber.

Which of the following types of SFP is the best choice?

A.

10GBASE-SR

B.

10000BASE-LX

C.

10GBASE-LR

D.

1000BASE-SX

Full Access
Question # 132

Network connectivity in an extensive forest reserve was achieved using fiber optics. A network fault was detected, and now the repair team needs to check the integrity of the fiber cable. Which of me following actions can reduce repair time?

A.

Using a tone generator and wire map to determine the fault location

B.

Using a multimeter to locate the fault point

C.

Using an OTDR In one end of the optic cable to get the liber length information

D.

Using a spectrum analyzer and comparing the current wavelength with a working baseline

Full Access
Question # 133

Which of the following network management methods is able to perform various automated tasks?

A.

SSH

B.

CLI

C.

GUI

D.

API

Full Access
Question # 134

An attacker is attempting to find the password to a network by inputting common words and phrases in plaintext to the password prompt. Which of the following attack types BEST describes this action?

A.

Pass-the-hash attack

B.

Rainbow table attack

C.

Brute-force attack

D.

Dictionary attack

Full Access
Question # 135

Which of the following is used to prioritize Internet usage per application and per user on the network?

A.

Bandwidth management

B.

Load balance routing

C.

Border Gateway Protocol

D.

Administrative distance

Full Access
Question # 136

A network technician is implementing a solution that will allow end users to gain access to multiple applications after logging on. Which of the following authentication methods would allow this type of access?

A.

SSO

B.

LDAP

C.

EAP

D.

TACACS+

Full Access
Question # 137

Which of the following compromises internet-connected devices and makes them vulnerable to becoming part of a botnet? (Select TWO).

A.

Deauthentication attack

B.

Malware infection

C.

IP spoofing

D.

Firmware corruption

E.

Use of default credentials

F.

Dictionary attack

Full Access
Question # 138

A network administrator installed an additional IDF during a building expansion project. Which of the following documents need to be updated to reflect the change? (Select TWO).

A.

Data loss prevention policy

B.

BYOD policy

C.

Acceptable use policy

D.

Non-disclosure agreement

E.

Disaster recovery plan

F.

Physical network diagram

Full Access
Question # 139

A network device needs to discover a server that can provide it with an IPv4 address. Which of the following does the device need to send the request to?

A.

Default gateway

B.

Broadcast address

C.

Unicast address

D.

Link local address

Full Access
Question # 140

A technician is concerned about unauthorized personnel moving assets that are installed in a data center server rack. The technician installs a networked

sensor that sends an alert when the server rack door is opened. Which of the following did the technician install?

A.

Cipher lock

B.

Asset tags

C.

Access control vestibule

D.

Tamper detection

Full Access
Question # 141

A network security engineer is investigating a potentially malicious Insider on the network. The network security engineer would like to view all traffic coming from the user's PC to the switch without interrupting any traffic or having any downtime. Which of the following should the network security engineer do?

A.

Turn on port security.

B.

Implement dynamic ARP inspection.

C.

Configure 802.1Q.

D.

Enable port mirroring.

Full Access
Question # 142

A user reports that a new VoIP phone works properly, but the computer that is connected to the phone cannot access any network resources. Which of the following MOST likely needs to be configured correctly to provide network connectivity to the computer?

A.

Port duplex settings

B.

Port aggregation

C.

ARP settings

D.

VLAN tags

E.

MDIX settings

Full Access
Question # 143

Which of the following routing protocols is BEST suited for use on a perimeter router?

A.

OSPF

B.

RIPv2

C.

EIGRP

D.

BGP

Full Access
Question # 144

A network technician is installing a wireless network in an office building. After performing a site survey, the technician determines the area is very saturated on the 2.4GHz and the 5GHz bands. Which of the following wireless standards should the network technician implement?

A.

802.11ac

B.

802.11 ax

C.

802.11g

D.

802.11n

Full Access
Question # 145

A PC and a network server have no network connectivity, and a help desk technician is attempting to resolve the issue. The technician plans to run a constant ping command from a Windows workstation while testing various possible reasons for the connectivity issue. Which of the following should the technician use?

A.

ping —w

B.

ping -i

C.

ping —s

D.

ping —t

Full Access
Question # 146

A desktop support department has observed slow wireless speeds for a new line of laptops using the organization's standard image. No other devices have experienced the same issue. Which of the following should the network administrator recommend troubleshooting FIRST to resolve this issue?

A.

Increasing wireless signal power

B.

Installing a new WAP

C.

Changing the protocol associated to the SSID

D.

Updating the device wireless drivers

Full Access
Question # 147

Which of the following describes traffic going in and out of a data center from the internet?

A.

Demarcation point

B.

North-South

C.

Fibre Channel

D.

Spine and leaf

Full Access
Question # 148

A network engineer installed a new fiber uplink for an office and wants to make sure that the link meets throughput requirements. Which of the following tools should the engineer use to

verify that the new link is sufficient?

A.

tcpdump

B.

ping

C.

iperf

D.

netstat

Full Access
Question # 149

A technician is trying to install a VolP phone, but the phone is not turning on. The technician checks the cable gong from the phone to the switch, and the cable is good. Which of the following actions IS needed for this phone to work?

A.

Add a POE injector

B.

Enable MDIX.

C.

Use a crossover cable.

D.

Reconfigure the port.

Full Access
Question # 150

Network users reported that a recent firmware upgrade to a firewall did not resolve the issue that prompted the upgrade. Which of the following should be performed NEXT?

A.

Reopen the service ticket, request a new maintenance window, and roll back to the anterior firmware version.

B.

Gather additional information to ensure users' concerns are not been caused by a different issue with similar symptoms.

C.

Employ a divide-and-conquer troubleshooting methodology by engaging the firewall vendor's support.

D.

Escalate the issue to the IT management team in order to negotiate a new SLA with the user's manager.

Full Access
Question # 151

In which of the following components do routing protocols belong in a software-defined network?

A.

Infrastructure layer

B.

Control layer

C.

Application layer

D.

Management plane

Full Access
Question # 152

A network technician needs to select an AP that will support at least 1.3Gbps and 5GHz only. Which of the following wireless standards must the AP support to meet the requirements?

A.

B

B.

AC

C.

AX

D.

N

E.

G

Full Access
Question # 153

A technician manages a DHCP scope but needs to allocate a portion of the scope’s subnet for statically assigned devices. Which of the following DHCP concepts would be BEST to use to prevent IP address conflicts?

A.

Dynamic assignment

B.

Exclusion range

C.

Address reservation

D.

IP helper

Full Access
Question # 154

A network technician needs to install patch cords from the UTP patch panel to the access switch for a newly occupied set of offices. The patch panel is not

labeled for easy jack identification. Which of the following tools provides the easiest way to identify the appropriate patch panel port?

A.

Toner

B.

Laptop

C.

Cable tester

D.

Visual fault locator

Full Access
Question # 155

A network manager is configuring switches in IDFs to ensure unauthorized client computers are not connecting to a secure wired network. Which of the following is the network manager MOST likely performing?

A.

Disabling unneeded switchports

B.

Changing the default VLAN

C.

Configuring DHCP snooping

D.

Writing ACLs to prevent access to the switch

Full Access
Question # 156

A network manager wants to set up a remote access system for the engineering staff. Access to this system will be over a public IP and secured with an ACL.

Which of the following best describes this system?

A.

VPN

B.

Secure Shell

C.

Jump server

D.

API

Full Access
Question # 157

Which of the following would be the MOST cost-effective recovery solution for a company's lower-priority applications?

A.

Warm site

B.

Cloud site

C.

Hot site

D.

Cold site

Full Access
Question # 158

A network technician needs to ensure that all files on a company's network can be moved in a safe and protected manner without interception from someone who is not the intended recipient. Which of the following would allow the network technician to meet these requirements?

A.

FTP

B.

TFTP

C.

SMTP

D.

SFTP

Full Access
Question # 159

A technician is investigating a SAN switch that has a high number of CRC errors. Which of the following is the MOST likely cause of the errors?

A.

Break in the fiber

B.

Bad switch port

C.

Mismatched duplex

D.

Memory errors

Full Access
Question # 160

A technician is troubleshooting a connectivity issue with an end user. The end user can access local network shares and intranet pages but is unable to access the internet or remote resources. Which of the following needs to be reconfigured?

A.

The IP address

B.

The subnet mask

C.

The gateway address

D.

The DNS servers

Full Access
Question # 161

A network administrator is investigating a performance issue on a dual-link connection—VPN and MPLS—to a partner network. The MPLS is the primary path, and the VPN is used as a backup. While communicating, the delay is measured at 18ms, which is higher than the 6ms expected when the MPLS link is operational but lower than the 30ms expected tor the VPN connection. Which of the following will MOST likely point to the root cause of the Issue?

A.

Checking the routing tables on both sides to ensure there is no asymmetric routing

B.

Checking on the partner network for a missing route pointing to the VPN connection

C.

Running iPerf on both sides to confirm the delay that Is measured is accurate

D.

Checking for an incorrect VLAN assignment affecting the MPLS traffic

Full Access
Question # 162

Which of the following would enable a network technician to implement dynamic routing?

A.

An IPS

B.

A bridge

C.

A Layer 3 switch

D.

A hub

Full Access
Question # 163

A company's data center is hosted at its corporate office to ensure greater control over the security of sensitive data. During times when there are increased workloads, some of the company’s non-sensitive data is shifted to an external cloud provider. Which of the following cloud deployment models does this describe?

A.

Hybrid

B.

Community

C.

Public

D.

Private

Full Access
Question # 164

A company wants to add a local redundant data center to its network in case of failure at its primary location. Which of the following would give the LEAST amount of redundancy for the company's network?

A.

Cold site

B.

Hot site

C.

Cloud site

D.

Warm site

Full Access
Question # 165

An engineer is designing a network topology for a company that maintains a large on-premises private cloud. A design requirement mandates internet-facing hosts to be partitioned off from the internal LAN and internal server IP ranges. Which of the following defense strategies helps meet this requirement?

A.

Implementing a screened subnet

B.

Deploying a honeypot

C.

Utilizing network access control

D.

Enforcing a Zero Trust model

Full Access
Question # 166

Which of the following is an example of on-demand scalable hardware that is typically housed in the vendor's data center?

A.

DaaS

B.

IaaS

C.

PaaS

D.

SaaS

Full Access
Question # 167

A network technician receives a report about a performance issue on a client PC that is connected to port 1/3 on a network switch. The technician observes the following configuration output from the switch:

Which of the following is a cause of the issue on port 1/3?

A.

Speed

B.

Duplex

C.

Errors

D.

VLAN

Full Access
Question # 168

A public, wireless ISP mounts its access points on top of traffic signal poles. Fiber-optic cables are installed from a fiber switch through the ground and up the

pole to a fiber-copper media converter, and then connected to the AP. In one location, the switchport is showing sporadic link loss to the attached AP. A similar link loss is not seen at the AP interface. The fiber-optic cable is moved to another unused switchport with a similar result. Which of the following steps should the assigned technician complete NEXT?

A.

Disable and enable the switchport.

B.

Clean the fiber-optic cable ends.

C.

Replace the media converter.

D.

Replace the copper patch cord.

Full Access
Question # 169

A company has a geographically remote office. In order to connect to the internet, the company has decided to use a satellite WAN link. Which of the following is the GREATEST concern for this type of connection?

A.

Duplex

B.

Collisions

C.

Jitter

D.

Encapsulation

Full Access
Question # 170

A server application requires large amounts of data to be sent at a consistent rate. Which of the following should an engineer most likely configure to meet these requirements?

A.

Link speed

B.

Jumbo frames

C.

Switch Virtual Interface

D.

Spanning tree

Full Access
Question # 171

A help desk technician discovers the following note while reviewing tickets in a customer's account:

Which of the following describes what the technician was documenting with this note?

A.

The technician was approaching multiple problems individually.

B.

The technician was establishing a plan of action and identifying potential effects.

C.

The technician was testing a theory to determine the cause.

D.

The technician was identifying the problem by gathering information.

Full Access
Question # 172

A technician needs to allow a device to maintain the same IP address lease based on the physical address of a network card. Which of the following should the technician use?

A.

MAC address reservation

B.

Static IP address

C.

Custom DNS server entry

D.

IP address exclusion

Full Access
Question # 173

A network administrator is configuring a new switch and wants to connect two ports to the core switch to ensure redundancy. Which of the following configurations would meet this

requirement?

A.

Full duplex

B.

802.1Q tagging

C.

Native VLAN

D.

Link aggregation

Full Access
Question # 174

A security engineer wants to provide a secure, dedicated, alternate access method into an IT network infrastructure to administer connected devices and IT assets. Which of the following is the engineer most likely to implement?

A.

Remote desktop gateway

B.

Authentication and authorization controls

C.

Out-of-band management

D.

Secure Shell

Full Access
Question # 175

Which of the following would be BEST to install to find and block any malicious users within a network?

A.

IDS

B.

IPS

C.

SCADA

D.

ICS

Full Access
Question # 176

Which of the following focuses on application delivery?

A.

DaaS

B.

laaS

C.

SaaS

D.

PaaS

Full Access
Question # 177

A network administrator is looking for a solution to extend Layer 2 capabilities and replicate backups between sites. Which of the following is the best solution?

A.

Security Service Edge

B.

Data center interconnect

C.

Infrastructure as code

D.

Zero trust architecture

Full Access
Question # 178

A security engineer is trying to connect cameras to a 12-port PoE switch, but only eight cameras turn on. Which of the following should the engineer check first?

A.

Ethernet cable type

B.

Voltage

C.

Transceiver compatibility

D.

DHCP addressing

Full Access
Question # 179

An engineer is using a tool to run an ICMP sweep of a network to find devices that are online. When reviewing the results, the engineer notices a number of workstations that are currently verified as being online are not listed in the report.

The tool was configured to scan using the following information:

Network address: 172.28.16.0

CIDR: /22

The engineer collected the following information from the client workstation:

IP address: 172.28.17.206

Subnet mask: 255.255.252.0

Which of the following MOST likely explains why the tool is failing to detect some workstations?

A.

The scanned network range is incorrect.

B.

The subnet mask on the client is misconfigured.

C.

The workstation has a firewall enabled.

D.

The tool is unable to scan remote networks.

Full Access
Question # 180

Which of the following describes the BEST device to configure as a DHCP relay?

A.

Bridge

B.

Router

C.

Layer 2 switch

D.

Hub

Full Access
Question # 181

A corporation is looking for a method to secure all traffic between a branch office and its data center in order to provide a zero-touch experience for all staff members who work there. Which of the following would BEST meet this requirement?

A.

Site-to-site VPN

B.

VNC

C.

Remote desktop gateway

D.

Virtual LANs

Full Access
Question # 182

A network engineer is designing a wireless network that has the following requirements:

• Network speed must be higher than 100Mbps

• Must use the 2.4GHz and 5GHz bands

Which of the following 802.11 standards should the engineer select?

A.

802. lla

B.

802.11b

C.

802. 11g

D.

802.11 n

Full Access
Question # 183

Users have reported an issue connecting to a server over the network. A workstation was recently added to the network and configured with a shared USB printer. Which of the following is most likely causing the issue?

A.

The switch is oversubscribed and cannot handle the additional throughput.

B.

The printer is tying up the server with DHCP discover messages

C.

The web server’s back end was designed for only single-threaded applications.

D.

The workstation was configured with a static IP that is the same as the server.

Full Access
Question # 184

Which of the following protocols would enable a company to upgrade its internet connection by acquiring its own public IP prefixes and autonomous system number?

A.

EIGRP

B.

BGP

C.

IPv6

D.

MPLS

Full Access
Question # 185

A network administrator is preparing new switches that will be deployed to support a network extension project. The lead network engineer has already provided documentation to ensure the switches are set up properly Which of the following did the engineer most likely provide?

A.

Physical network diagram

B.

Site survey reports

C.

Baseline configurations

D.

Logical network diagram

Full Access
Question # 186

Which of the following describes the ability of a corporate IT department to expand its cloud-hosted VM environment with minimal effort?

A.

Scalability

B.

Load balancing

C.

Multitenancy

D.

Geo-redundancy

Full Access
Question # 187

A user is required to log in to a main web application, which then grants the user access to all other programs needed to complete job-related tasks. Which of the following authentication methods does this setup describe?

A.

SSO

B.

RADIUS

C.

TACACS+

D.

Multifactor authentication

E.

802.1X

Full Access
Question # 188

A network technician needs to use an RFC1918 IP space for a new office that only has a single public IP address. Which of the following subnets should the technician use for the LAN?

A.

10.10.10.0/24

B.

127.16.10.0/24

C.

174.16.10.0/24

D.

198.18.10.0/24

Full Access
Question # 189

A technician is investigating a misconfiguration on a Layer 3 switch. When the technician logs in and runs a command, the following data is shown:

Which of the following commands generated this output?

A.

show route

B.

show config

C.

show interface

D.

tcpdump

E.

netstat —s

Full Access
Question # 190

At which of the following OSI model layers does a MAC filter list for a wireless infrastructure operate?

A.

Physical

B.

Network

C.

Session

D.

Data link

Full Access
Question # 191

Which of the following diagrams would most likely include specifications about fiber connector types?

A.

Logical

B.

Physical

C.

Rack

D.

Routing

Full Access
Question # 192

An auditor assessing network best practices was able to connect a rogue switch into a network Jack and get network connectivity. Which of the following controls would BEST address this risk?

A.

Activate port security on the switchports providing end user access.

B.

Deactivate Spanning Tree Protocol on network interfaces that are facing public areas.

C.

Disable Neighbor Resolution Protocol in the Layer 2 devices.

D.

Ensure port tagging is in place for network interfaces in guest areas

Full Access
Question # 193

A network technician needs to install security updates on several switches on me company's network. The management team wants this completed as quickly and efficiently as possible. Which of the following should the technician do to perform the updates?

A.

Upload the security update onto each switch using a terminal emulator and a console cable.

B.

Configure a TFTP server. SSH into each device, and perform the update.

C.

Replace each old switch with new switches that have the updates already performed.

D.

Connect a USB memory stick to each switch and perform the update.

Full Access
Question # 194

A technician is troubleshooting reports that a networked printer is unavailable. The printer's IP address is configured with a DHCP reservation, but the address cannot be pinged from the print server in the same subnet. Which of the following is MOST likely the cause of me connectivity failure?

A.

Incorrect VLAN

B.

DNS failure

C.

DHCP scope exhaustion

D.

Incorrect gateway

Full Access
Question # 195

Logs show an unauthorized IP address entering a secure part of the network every night at 8:00 pm. The network administrator is concerned that this IP address will cause an issue to a critical server and would like to deny the IP address at the edge of the network. Which of the following solutions would address these concerns?

A.

Changing the VLAN of the web server

B.

Changing the server's IP address

C.

Implementing an ACL

D.

Instating a rule on the firewall connected to the web server

Full Access
Question # 196

A network technician must connect a newly installed access switch in a warehouse to the distribution switch in the telecommunications closet. The distance between the two switches is 1,640ft (500m). Which of the following is the best cable choice?

A.

Fiber

B.

Cat 5e

C.

Cat 6a

D.

Coaxial

Full Access
Question # 197

A network technician is hired to review all the devices within a network and make recommendations to improve network efficiency. Which of the following should the technician do FIRST before reviewing and making any recommendations?

A.

Capture a network baseline

B.

Perform an environmental review.

C.

Read the network logs

D.

Run a bandwidth test

Full Access
Question # 198

Which of the following is the physical security mechanism that would MOST likely be used to enter a secure site?

A.

A landing page

B.

An access control vestibule

C.

A smart locker

D.

A firewall

Full Access
Question # 199

A lab environment hosts Internet-facing web servers and other experimental machines, which technicians use for various tasks A technician installs software on one of the web servers to allow communication to the company's file server, but it is unable to connect to it Other machines in the building are able to retrieve files from the file server. Which of the following is the MOST likely reason the web server cannot retrieve the files, and what should be done to resolve the problem?

A.

The lab environment's IDS is blocking the network traffic 1 he technician can whitelist the new application in the IDS

B.

The lab environment is located in the DM2, and traffic to the LAN zone is denied by default. The technician can move the computer to another zone or request an exception from the administrator.

C.

The lab environment has lost connectivity to the company router, and the switch needs to be rebooted. The technician can get the key to the wiring closet and manually restart the switch

D.

The lab environment is currently set up with hubs instead of switches, and the requests are getting bounced back The technician can submit a request for upgraded equipment to management.

Full Access
Question # 200

A systems administrator is running a VoIP network and is experiencing jitter and high latency. Which of the following would BEST help the administrator determine the cause of these issues?

A.

Enabling RADIUS on the network

B.

Configuring SNMP traps on the network

C.

Implementing LDAP on the network

D.

Establishing NTP on the network

Full Access
Question # 201

A technician is troubleshooting a workstation's network connectivity and wants to confirm which switchport corresponds to the wall jack the PC is using Which of the following concepts would BEST help the technician?

A.

Consistent labeling

B.

Change management

C.

Standard work instructions

D.

Inventory management

E.

Network baseline

Full Access
Question # 202

A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a radio. Which of the following antenna types should the AP utilize?

A.

Omni

B.

Directional

C.

Yagi

D.

Parabolic

Full Access
Question # 203

An organization with one core and five distribution switches is transitioning from a star to a full-mesh topology Which of the following is the number of additional network connections needed?

A.

5

B.

7

C.

10

D.

15

Full Access
Question # 204

Which of the following services can provide data storage, hardware options, and scalability to a third-party company that cannot afford new devices?

A.

SaaS

B.

IaaS

C.

PaaS

D.

DaaS

Full Access
Question # 205

A client moving into a new office wants the IP network set up to accommodate 412 network-connected devices that are all on the same subnet. The subnet needs to be as small as possible. Which of the following subnet masks should be used to achieve the required result?

A.

255.255.0.0

B.

255.255.252.0

C.

255.255.254.0

D.

255.255.255.0

Full Access
Question # 206

A network technician has multimode fiber optic cable available in an existing IDF. Which of the following Ethernet standards should the technician use to connect the network switch to the existing fiber?

A.

10GBaseT

B.

1000BaseT

C.

1000BaseSX

D.

1000BaseLX

Full Access
Question # 207

A network engineer is designing a new secure wireless network. The engineer has been given the following requirements:

1 Must not use plaintext passwords

2 Must be certificate based

3. Must be vendor neutral

Which of the following methods should the engineer select?

A.

TWP-RC4

B.

CCMP-AES

C.

EAP-TLS

D.

WPA2

Full Access
Question # 208

A network technician was troubleshooting an issue for a user who was being directed to cloned websites that were stealing credentials. The URLs were correct for the websites but an incorrect IP address was revealed when the technician used ping on the user's PC After checking the is setting, the technician found the DNS server address was incorrect Which of the following describes the issue?

A.

Rogue DHCP server

B.

Misconfigured HSRP

C.

DNS poisoning

D.

Exhausted IP scope

Full Access
Question # 209

A network field technician is installing and configuring a secure wireless network. The technician performs a site survey. Which of the following documents would MOST likely be created as a result of the site survey?

A.

Physical diagram

B.

Heat map

C.

Asset list

D.

Device map

Full Access
Question # 210

A network technician is observing the behavior of an unmanaged switch when a new device is added to the network and transmits data. Which of the following BEST describes how the switch processes this information?

A.

The data is flooded out of every port. including the one on which it came in.

B.

The data is flooded out of every port but only in the VLAN where it is located.

C.

The data is flooded out of every port, except the one on which it came in

D.

The data is flooded out of every port, excluding the VLAN where it is located

Full Access
Question # 211

A network technician is reviewing an upcoming project's requirements to implement laaS. Which of the following should the technician consider?

A.

Software installation processes

B.

Type of database to be installed

C.

Operating system maintenance

D.

Server hardware requirements

Full Access
Question # 212

A company requires a disaster recovery site to have equipment ready to go in the event of a disaster at its main datacenter. The company does not have the budget to mirror all the live data to the disaster recovery site. Which of the following concepts should the company select?

A.

Cold site

B.

Hot site

C.

Warm site

D.

Cloud site

Full Access
Question # 213

A technician is connecting DSL for a new customer. After installing and connecting the on-premises equipment, the technician verifies DSL synchronization. When connecting to a workstation, however, the link LEDs on the workstation and modem do not light up. Which of the following should the technician perform during troubleshooting?

A.

Identify the switching loops between the modem and the workstation.

B.

Check for asymmetrical routing on the modem.

C.

Look for a rogue DHCP server on the network.

D.

Replace the cable connecting the modem and the workstation.

Full Access
Question # 214

A network administrator is required to ensure that auditors have read-only access to the system logs, while systems administrators have read and write access to the system logs, and operators have no access to the system logs. The network administrator has configured security groups for each of these functional categories. Which of the following security capabilities will allow the network administrator to maintain these permissions with the LEAST administrative effort?

A.

Mandatory access control

B.

User-based permissions

C.

Role-based access

D.

Least privilege

Full Access
Question # 215

Which of the following would be used to expedite MX record updates to authoritative NSs?

A.

UDP forwarding

B.

DNS caching

C.

Recursive lookup

D.

Time to live

Full Access
Question # 216

A network administrator needs to implement an HDMI over IP solution. Which of the following will the network administrator MOST likely use to ensure smooth video delivery?

A.

Link aggregation control

B.

Port tagging

C.

Jumbo frames

D.

Media access control

Full Access
Question # 217

A SaaS provider has decided to leave an unpatched VM available via a public DMZ port. With which of the following concepts is this technique MOST closely associated?

A.

Insider threat

B.

War driving

C.

Evil twin

D.

Honeypot

Full Access
Question # 218

Which of the following OSI model layers is where conversations between applications are established, coordinated, and terminated?

A.

Session

B.

Physical

C.

Presentation

D.

Data link

Full Access
Question # 219

A company wants to implement a large number of WAPs throughout its building and allow users to be able to move around the building without dropping their connections Which of the following pieces of equipment would be able to handle this requirement?

A.

A VPN concentrator

B.

A load balancer

C.

A wireless controller

D.

A RADIUS server

Full Access
Question # 220

Which of the following uses the destination IP address to forward packets?

A.

A bridge

B.

A Layer 2 switch

C.

A router

D.

A repeater

Full Access
Question # 221

A network technician is investigating an issue with a desktop that is not connecting to the network. The desktop was connecting successfully the previous day, and no changes were made to the environment. The technician locates the switchport where the device is connected and observes the LED status light on the switchport is not lit even though the desktop is turned on Other devices that arc plugged into the switch are connecting to the network successfully Which of the following is MOST likely the cause of the desktop not connecting?

A.

Transceiver mismatch

B.

VLAN mismatch

C.

Port security

D.

Damaged cable

E.

Duplex mismatch

Full Access
Question # 222

A network administrator wants to improve the security of the management console on the company's switches and ensure configuration changes made can be correlated to the administrator who conformed them Which of the following should the network administrator implement?

A.

Port security

B.

Local authentication

C.

TACACS+

D.

Access control list

Full Access
Question # 223

An IDS was installed behind the edge firewall after a network was breached. The network was then breached again even though the IDS logged the attack. Which of the following should be used in place of these devices to prevent future attacks?

A.

A network tap

B.

A proxy server

C.

A UTM appliance

D.

A content filter

Full Access
Question # 224

Two remote offices need to be connected securely over an untrustworthy MAN. Each office needs to access network shares at the other site. Which of the following will BEST provide this functionality?

A.

Client-to-site VPN

B.

Third-party VPN service

C.

Site-to-site VPN

D.

Split-tunnel VPN

Full Access
Question # 225

Which of the following attacks encrypts user data and requires a proper backup implementation to recover?

A.

DDoS

B.

Phishing

C.

Ransomware

D.

MAC spoofing

Full Access
Question # 226

A local firm has hired a consulting company to clean up its IT infrastructure. The consulting company notices remote printing is accomplished by port forwarding via publicly accessible IPs through the firm's firewall Which of the following would be the MOST appropriate way to enable secure remote printing?

A.

SSH

B.

VPN

C.

Telnet

D.

SSL

Full Access
Question # 227

A network technician is configuring a new firewall for a company with the necessary access requirements to be allowed through the firewall. Which of the following would normally be applied as the LAST rule in the firewall?

A.

Secure SNMP

B.

Port security

C.

Implicit deny

D.

DHCP snooping

Full Access
Question # 228

A user reports a weak signal when walking 20ft (61 m) away from the WAP in one direction, but a strong signal when walking 20ft in the opposite direction The technician has reviewed the configuration and confirmed the channel type is correct There is no jitter or latency on the connection Which of the following would be the MOST likely cause of the issue?

A.

Antenna type

B.

Power levels

C.

Frequency

D.

Encryption type

Full Access
Question # 229

During the security audit of a financial firm the Chief Executive Officer (CEO) questions why there are three employees who perform very distinct functions on the server. There is an administrator for creating users another for assigning the users lo groups and a third who is the only administrator to perform file rights assignment Which of the following mitigation techniques is being applied'

A.

Privileged user accounts

B.

Role separation

C.

Container administration

D.

Job rotation

Full Access
Question # 230

An ARP request is broadcasted and sends the following request.

''Who is 192.168.1.200? Tell 192.168.1.55''

At which of the following layers of the OSI model does this request operate?

A.

Application

B.

Data link

C.

Transport

D.

Network

E.

Session

Full Access
Question # 231

Which of the following is a system that is installed directly on a server's hardware and abstracts the hardware from any guest machines?

A.

Storage array

B.

Type 1 hypervisor

C.

Virtual machine

D.

Guest QS

Full Access