Prepare for the CompTIA Network+ N10-008 exam with this brain dump and practice questions. This covers networking concepts, infrastructure, security, and troubleshooting.
Q: A UTM is deployed on the external edge of the main corporate office. The office connects to theWAN port of the edge router. The edge router at the main office connects to the remote officesusing GRE IPSec tunnels. A network administrator notices that a worm that was not detected bythe UTM has spread from the remote sites into the corporate network. The UTM currently hastraffic rules applied that should block the port used by the worm. Which of the following stepswould MOST likely correct this issue?A.Move the UTM onto the LAN side of the networkB.Enable TLS inspection on the UTMC.Enable stateful inspection on the UTMD.Configure the UTM to deny encrypted files from being transferred
Answer: C. Enable stateful inspection on the UTM
Q: A technician has racked a new access switch and has run multimode fiber to a new location. Afterinstalling an extended-range 10Gb SFP in the core switch, the technician installed a 10Gb SFP inthe access switch and connected the port to the new extension with a fiber jumper. However, thelink does not display, and the technician cannot see light emitting from the core switch. Which ofthe following solutions is MOST likely to resolve the problem?A.Swap the fiber pairs in one of the SFPsB.Replace the jumpers with single-mode fiberC.Set the correct MTU on the new interfaceD.Install an optic that matches the fiber type
Answer: B. Replace the jumpers with single-mode fiber
Q: A network technician has implemented ACLs to limit access to cloud-based file storage. Which ofthe following security mechanisms has the technician enforced?A.DLPB.IDSC.WAFD.WPAE.TPM
Answer: C. WAF
Q: A network technician receives a call from a user in the accounting department stating that Internetconnectivity has been lost after receiving a new workstation. No other users in accounting arereporting similar issues. The network technician is able to ping the machine from the accountingdepartment’s router, but is not able to ping the machine from the IT network. Which of thefollowing is MOST likely the cause?A.Incorrect default gatewayB.Duplicate IP addressC.Misconfigured OSPFD.Improper VLAN assignment
Answer: A. Incorrect default gateway
Q: A firewall administrator is implementing a rule that directs HTTP traffic to an internal serverlistening on a non-standard socket. Which of the following types of rules is the administratorimplementing?A.NATB.PATC.STPD.SNATE.ARP
Answer: B. PAT
Q: A technician is installing a new wireless badging system on a hospital network. The requirementsof the badging system are for it to have its own SSID and low power levels. The badging systemhas to cover 99.9% of the hospital. Which of the following is the BEST action to take to meet thesystem requirements?A.Install additional WAPsB.Install external antennasC.Move the WAPs closer to the more populated areaD.Change the antenna types
Answer: A. Install additional WAPs
Q: A technician attempts to replace a switch with a new one of similar model from the same vendor.When the technician moves the fiber and SFP plug, the switch does not completely boot up.Considering that the config files are the same, which of the following is the MOST likely cause ofthe failure?A.Damaged fiberB.Corrupted operating systemC.VLAN mismatchD.Bad port
Answer: B. Corrupted operating system
Q: A company has hundreds of nodes on a single subnet and has decided to implement VLANs. Which of the following BEST describes the benefit of this approach?A.It segments broadcast domains in the network infrastructure.B.It provides a faster port to all servers.C.It provides multiple collision domains on one switchport.D.It provides multiple broadcast domains within a single collision domain
Answer: A. It segments broadcast domains in the network infrastructure.
Q: A company has completed construction of a new datacenter, and the IT staff is now planning torelocate all server and network equipment from the old site to the new site. Which of the followingshould the IT staff reference to determine the location of the equipment being moved?A.Rack diagramsB.Network topologyC.Standard operating proceduresD.Wiring documentation
Answer: A. Rack diagrams
Q: Which of the following would allow a device to maintain the same IP address lease based on thephysical address of the network card?A.MAC address reservationB.Static IP addressC.IP address exclusionD.Custom DNS server entry
Answer: A. MAC address reservation
Q: A technician wants to prevent an unauthorized host from connecting to the network via Ethernet.Which of the following is a Layer 2 access control the technician should implement?A.Access control listsB.Captive portalC.WPA2D.Port security
Answer: D. Port security
Q: A network engineer is configuring wireless access for guests at an organization. Access to otherareas in the organization should not be accessible to guests. Which of the following represents theMOST secure method to configure guest access to the wireless network?A.Guests should log into a separate wireless network using a captive portalB.Guests should log into the current wireless network using credentials obtained upon entering thefacilityC.The existing wireless network should be configured to allow guest accessD.An additional wireless network should be configured to allow guest access
Answer: A. Guests should log into a separate wireless network using a captive portal
Q: The server team has just installed an application across three different servers. They are askingthat all requests to the application are spread evenly across the three servers. Which of thefollowing should the network team implement to fulfill the request?A.Proxy serverB.UTM applianceC.Content filterD.Load balancer
Answer: D. Load balancer
Q: A network technician is deploying mobile phones for a company’s sales staff. Salespeoplefrequently travel nationally and internationally to meet with clients, and often have to roam orswitch cellular providers. Which of the following standards is the BEST option to fit therequirements?A.GSMB.TDMC.CDMAD.PSTNE.MIMO
Answer: A. GSM
Q: A network administrator has been given a network of 172.16.85.0/21 and wants to know theusable range of IP addresses on that subnet. Which of the following indicates the correct IPaddress range?A.172.16.80.0-172.16.85.254B.172.16.80.0-172.16.88.255C.172.16.80.1-172.16.87.254D.172.16.80.1-172.16.85.255
Answer: C. 172.16.80.1-172.16.87.254
Q: A network technician is troubleshooting wireless network issues in a crowded office complex andsuspects there is interference from nearby wireless networks. Which of the following should thetechnician perform to discover possible interference?A.Site surveyB.Vulnerability scanningC.WardrivingD.Checking logical diagramE.Bandwidth test
Answer: A. Site Survey
Q: A network technician is troubleshooting an issue and has established a theory of probable cause.Which of the following steps should the network technician take NEXT?A.Test the possible solutionB.Question the usersC.Determine what has changedD.Document theory
Answer: a. Test the possible solution
Q: A network technician has discovered a rogue access point under an empty cubicle desk. Which ofthe following should the technician perform to ensure another cannot be placed on the network?A.Disable unused ports on switchesB.Enable DHCP guard to detect rogue serversC.Configure WPA2 on all access pointsD.Use TACACS+ authentication
Answer: b. Enable DHCP guard to detect rogue servers
Q: Which of the following provides the ability to deploy consistent access point configurations from acentral location?A.Wireless controllerB.AAA serverC.WiFi-protected setupD.Proxy serverE.VPN concentrator
Answer: A.Wireless controller
Q: A network technician is configuring a wireless network at a branch office. Users at this office workwith large files and must be able to access their files on the server quickly. Which of the following802.11 standards provides the MOST bandwidth?A.aB.acC.gD.n
Answer: B. ac
Q: A network administrator configures a router with the following IP address information:Gigabit Ethernet 1 Interface: 10.10.0.1/24Serial 0 Interface: 10.10.0.253/30Clients are connected to a switch on the gigabit Ethernet interface; the ISP is connected to theSerial 0 interface. When the router configuration is complete and client devices are reconfigured all clients report that they are unable to connect to the Internet. Which of the following is the MOSTlikely reason?A.The router was configured with an incorrect IP addressB.The router was configured with an incorrect default gatewayC.The router was configured with an incorrect subnet maskD.The router was configured with an incorrect loopback address
Answer: C. The router was configured with an incorrect subnet mask
Q: A penetration tester has been tasked with reconnaissance to determine which ports are open onthe network. Which of the following tasks should be done FIRST? (Choose two.)A.Network scanB.Banner grabC.TracertD.DHCP server checkE.Brute-force attack
Answer: A. Network scanC. Tracert
Q: Users are reporting Internet connectivity issues. The network administrator wants to determine ifthe issues are internal to the company network or if there is an issue with the ISP. Which of thefollowing tools should be used to BEST determine where the outage is occurring?A.tracerouteB.pingC.nslookupD.netstat
Answer: A. traceroute
Q: Which of the following security mechanisms dynamically assigns a Layer 2 address and restrictstraffic only to that Layer 2 address?A.Sticky MACB.802.1xC.ACLD.NAC
Answer: A. sticky MAC
Q: Which of the following is a vulnerable system designed to detect and log unauthorized access?A.SIEMB.HoneypotC.DMZD.Proxy server
Answer: B. honeypot
Q: According to the OSI model, at which of the following layers is data encapsulated into a packet?A.Layer 2B.Layer 3C.Layer 4D.Layer 5E.Layer 6
Answer: B. Layer 3
Q: Which of the following WAN technologies is MOST preferred when developing a VoIP system with23 concurrent channels?A.DSLB.POTSC.T1D.DOCSIS
Answer: C. T1
Q: A junior network technician is setting up a new email server on the company network. Which of thefollowing default ports should the technician ensure is open on the firewall so the new email servercan relay email?A.23B.25C.110D.143
Answer: B. 25
Q: Which of the following policies would Joe, a user, have to agree to when he brings in his personaltablet to connect to the company’s guest wireless Internet?A.NDAB.IRPC.BYODD.SLA
Answer: C. BYOD
Q: In a service provider network, a company has an existing IP address scheme. Company A’snetwork currently uses the following scheme:Subnet 1: 192.168.1.0/26Subnet 2: 192.168.1.65/26Company B uses the following scheme:Subnet 1: 192.168.1.50/28The network administrator cannot force the customer to update its IP scheme. Considering this,which of the following is the BEST way for the company to connect these networks?A.DMZB.PATC.NATD.VLAN
Answer: C. NAT
Q: A network engineer is designing a new network for a remote site. The remote site consists of tendesktop computers, ten VoIP phones, and two network printers. In addition, two of the desktopcomputers at the remote site will be used by managers who should be on a separate network fromthe other eight computers. Which of the following represents the BEST configuration for theremote site?A.One router connected to one 24-port switch configured with three VLANS: one for the manager’scomputers and printer, one for the other computers and printer, and one for the VoIP phonesB.Two routers with each router connected to a 12-port switch, with a firewall connected to the switchconnected to the manager’s desktop computers, VoIP phones, and printerC.One router connected to one 12-port switch configured for the manager’s computers, phones, andprinter, and one 12-port switch configured for the other computers, VoIP phones, and printerD.One router connected to one 24-port switch configured with two VLANS: one for the manager’scomputers, VoIP phones, and printer, and one for the other computers, VoIP phones, and printer
Answer: A. One router connected to one 24-port switch configured with three VLANS: one for the manager’scomputers and printer, one for the other computers and printer, and one for the VoIP phones
Q: A network technician is troubleshooting an end-user connectivity problem. The network techniciangoes to the appropriate IDF but is unable to identify the appropriate cable due to poor labeling.Which of the following should the network technician use to help identify the appropriate cable?A.Tone generatorB.MultimeterC.OTDRD.Loopback adapter
Answer: A. Tone Generator
Q: A network technician notices the site-to-site VPN and Internet connection have not come back upat a branch office after a recent power outage. Which of the following is an out-of-band method thetechnician would MOST likely utilize to check the branch office’s router status?A.Use a modem to console into the routerB.Walk a user through troubleshooting the connectionC.Travel to the branch officeD.Hire a contractor to go on-site
Answer: A. Use a modem to console into the router
Q: A network technician is considering opening ports on the firewall for an upcoming VoIP PBXimplementation. Which of the following protocols is the technician MOST likely to consider?(Choose three.)A.SIPB.NTPC.H.323D.SMBE.ICMPF.RTPG.IPSecH.RDP
Answer: A. SIPC. H.323F. RTP
Q: A device operating at Layer 3 of the OSI model uses which of the following protocols to determinethe path to a different network?A.STPB.RTPC.RIPD.NTPE.SIP
Answer: C. RIP
Q: A network administrator is setting up a web-based application that needs to be continuallyaccessible to the end users. Which of the following concepts would BEST ensure thisrequirement?A.High availabilityB.SnapshotsC.NIC teamingD.Cold site
Answer: A. High availability
Q: Which of the following devices should a network administrator configure on the outermost part ofthe network?A.Media converterB.SwitchC.ModemD.FirewalL
Answer: D. Firewall
Q: A company finds that many desktops are being reported as missing or lost. Which of the followingwould BEST assist in recovering these devices?A.Asset tracking tagsB.Motion detectorsC.Security guardsD.Computer locks
Answer: D. computer locksanswer for the exam but the more logical answer would have been A
Q: A technician is connecting a router directly to a PC using the G1/0/1 interface. Without the use ofauto-sensing ports, which of the following cables should be used?A.Straight-throughB.ConsoleC.RolloverD.Crossover
Answer: D. Crossover
Q: A technician is diagnosing an issue with a new T1 connection. The router is configured, the cableis connected, but the T1 is down. To verify the configuration of the router, which of the followingtools should the technician use?A.Loopback adapterB.Cable testerC.Tone generatorD.Multimeter
Answer: A. Loopback adapter
Q: A network technician receives a call from a user who is experiencing network connectivity issues.The network technician questions the user and learns the user brought in a personal wired routerto use multiple computers and connect to the network. Which of the following has the user MOST likely introduced to the network?A.Rogue DHCP serverB.Evil twinC.VLAN mismatchD.Honeypot
Answer: A. Rogue DHCP server
Q: A technician is setting up a direct connection between two older PCs so they can communicate butnot be on the corporate network. The technician does not have access to a spare switch but doeshave spare Cat 6 cables, RJ-45 plugs, and a crimping tool. The technician cuts off one end of thecable. Which of the following should the technician do to make a crossover cable before crimpingthe new plug?A.Reverse the wires leading to pins 1 and 2B.Reverse the wires leading to pins 1 and 3C.Reverse the wires leading to pins 2 and 3D.Reverse the wires leading to pins 2 and 4
Answer: D. Reverse the wires leading to pins 2 and 4answer for exam but answer is mainly believed to be B
Q: Which of the following is the number of broadcast domain that are created when using anunmanaged 12-port switch?A.0B.1C.2D.6E.12
Answer: B. 1
Q: A network engineer wants to a segment the network into multiple broadcast domains. Which of thefollowing devices would allow for communication between the segments?A.Layer 2 switchB.Layer 3 switchC.BridgeD.Load balancer
Answer: B. Layer 3 switch
Q: The Chief Information Officer (CIO) has noticed the corporate wireless signal is available in theparking lot. Management requests that the wireless network be changed so it is no longeraccessible in public areas, without affecting the availability inside the building. Which of thefollowing should be changed on the network?A.Power levelsB.OvercapacityC.Distance limitationsD.Channel overlap
Answer: A. Power levels
Q: A network technician is assisting the security team with some traffic captures. The security teamwants to capture all traffic on a single subnet between the router and the core switch. To do so,the team must ensure there is only a single collision and broadcast domain between the routerand the switch from which they will collect traffic. Which of the following should the technicianinstall to BEST meet the goal?A.BridgeB.Crossover cableC.HubD.Media converter
Answer: C. Hub
Q: Based on networks 10.8.16.0/22 and 10.8.31.0/21, which of the following is the BEST summarizedCIDR notation?A.10.8.0.0/16B.10.8.0.0/19C.10.8.0.0/20D.10.0.0.0/24
Answer: A. 10.8.0.0/16
Q: A technician discovers that multiple switches require a major update. Which of the followingpolicies should be followed?A.Change management policyB.Remote access policyC.Acceptable use policyD.Memorandum of understanding
Answer: A. Change management policy
Q: A technician is troubleshooting a point-to-point fiber-optic connection. The technician is at aremote site and has no connectivity to the main site. The technician confirms the switch and thesend-and-receive light levels are within acceptable range. Both fiber SFPs are confirmed asworking. Which of the following should the technician use to reveal the location of the fault?A.OTDRB.Light meterC.Tone generatorD.CSU/DSU
Answer: A. OTDR
Q: A Chief Information Officer (CIO) wants to move some IT services to a cloud service offering.However, the network administrator still wants to be able to control some parts of the cloudservice’s networking components. Which of the following should be leveraged to complete thistask?A.IaaSB.PaaSC.SaaSD.DaaS
Answer: B. PaaS
Q: Client PCs are unable to receive addressing information from a newly configured interface on a router. Which of the following should be added to allow the clients to connect?A. DHCP lease timeB. IP helperC. TTLD. DNS record type
Answer: B. IP helper
Q: When enabling jumbo frames on a network device, which of the following parameters is being adjusted?A. SpeedB. DuplexC. MTUD. TTL
Answer: C. MTU
Q: A technician logs onto a system using Telnet because SSH is unavailable. SSH is enabled on the target device, and access is allowed from all subnets. The technician discovers a critical step was missed. Which of the following would allow SSH to function properly?A. Perform file hashingB. Generate new keysC. Update firmwareD. Change default credentials
Answer: B. Generate New Keys
Q: A network administrator wants to ensure sensitive data is not ex-filtrated from the system electronically. Which of the following should be implemented?A. DLPB. AUPC. NDAD. SLA
Answer: A. DLP
Q: An office network consists of one two-port router connected to a 12-port switch. A four-port hub is also connected to the switch. On this particular network, which of the following is the number of collision domains that exist?A. 3B. 12C. 13D. 14E. 15
Answer: D. 14
Q: A network technician wants to remotely and securely access the desktop of a Linux workstation. The desktop is running remote control software without encryption. Which of the following should the technician use to secure the connection?A. SSH in tunnel modeB. RDP set to console connectionC. EAP-PEAPD. SFTP
Answer: A. SSH in tunnel mode
Q: Which of the following should current network performance be compared against to determine network anomalies?A. BaselineB. Traffic analysisC. Packet captureD. Logs
Answer: A. Baseline
Q: A network administrator configures an email server to use secure protocols. When the upgrade is completed, which of the following ports on the firewall should be configured to allow for connectivity? (Choose three.)A. TCP 25B. TCP 110C. TCP 143D. TCP 389E. TCP 587F. TCP 993G. TCP 995
Answer: E. TCP 587F. TCP 993G. TCP 995
Q: After a server outage, a technician discovers that a physically damaged fiber cable appears to be the problem. After replacing the cable, the server will still not connect to the network. Upon inspecting the cable at the server end, the technician discovers light can be seen through one of the two fiber strands. Which of the following should the technician do FIRST to reconnect the server to the network?A. Reverse the fiber strands of the cable and reconnect them to the serverB. Use a TDR to test both strands of a new replacement cable prior to connecting it to the serverC. Replace the server’s single-mode fiber cable with multimode fiberD. Move the fiber cable to different port on the switch where both strands function
Answer: A. Reverse the fiber strands of the cable and reconnect them to the server
Q: The backup server connects to a NAS device using block-level storage over Ethernet. The performance is very slow, however, and the network technician suspects the performance issues are network related. Which of the following should the technician do to improve performance?A. Utilize UDP to eliminate packet overheadB. Turn off MDIX settings on the NAS and server switchportsC. Enable jumbo frames on the NAS and serverD. Encapsulate the storage traffic in a GRE tunnel
Answer: C. Enable jumbo frames on the NAS and server
Q: A technician is trying to determine the IP address of a customer’s router. The customer has an IP address of 192.168.1.55/24. Which of the following is the address of the customer’s router?A. 192.168.0.55B. 192.168.1.0C. 192.168.1.1D. 192.168.5.5E. 255.255.255.0
Answer: C. 192.168.1.1
Q: A network technician is able to connect the switches between two offices, but the offices cannot communicate with each other, as each office uses a different IP addressing scheme. Which of the following devices needs to be installed between the switches to allow communication?A. BridgeB. Access pointC. RouterD. Range extender
Answer: C. Router
Q: A network technician is working on a proposal for email migration from an on-premises email system to a vendor-hosted email in the cloud. The technician needs to explain to management what type of cloud model will be utilized with the cloud-hosted email. Which of the following cloud models should the technician identify in the proposal?A. IaaSB. PaaSC. SaaSD. MaaS
Answer: C. SaaS
Q: Which of the following is the correct port number for NTP?A. 25B. 69C. 123D. 161
Answer: C. 123
Q: A network technician is connecting two switches together. Which of the following protocols should the technician use to increase speed and fault tolerance?A. SIPB. BGPC. LACPD. LLDP
Answer: C. LACP
Q: A company has a web-based application that is used by many different departments. The company has experienced some overload of resources on the database server. The network administrator implements a network device in between the servers and the database. Which of the following BEST describes the purpose of this device?A. Content filtering and network analysisB. Load balancing and providing high availabilityC. Port sniffing and protocol analysisD. Clustering and NIC teaming
Answer: B. Load balancing and providing high availability
Q: A technician is replacing a switch at a branch office and discovers the existing backbone cable does not fit in the new switch. The fiber patch panel has circular connections. The new switch has a transceiver that accepts a smaller square adapter of two strands. Which of the following patch cables would the technician need to complete the installation?A. LC to SCB. SC to STC. LC to STD. ST to STE. SC to SC
Answer: C. LC to ST
Q: A computer lab on a campus network was recently reconfigured using recycled network cables. One of the 24 computers in the lab is unable to connect to the network after the upgrade. A network technician successfully uses the cable in question to connect directly to another computer. Which of the following is MOST likely the issue with the cable?A. The cable is a crossover cableB. The cable is a rollover cableC. The cable has bent pinsD. The cable is a Cat 5 cable
Answer: A. The cable is a crossover cable
Q: Which of the following is a reason why a business may be hesitant to move sensitive data to a SaaS cloud service?A. Decreased performance of internal networkB. Loss of full control over data resourcesC. Increased malware exposureD. Incompatibility with the current network
Answer: B. Loss of full control over data resources
Q: Users have been experiencing slow network response times, and management has asked the network technician to provide evidence of network improvement.After optimizing the network, which of the following would be required?A. IDF/MDF documentationB. Change managementC. Performance baselineD. Physical diagram
Answer: C. Performance baseline
Q: A network technician has created a network that consists of a router, a firewall, a switch, and several PCs. Which of the following physical network topologies was created?A. StarB. MeshC. RingD. Bus
Answer: D. Bus
Q: A technician is setting up a branch office on a point-to-point connection. Which of the following IP network blocks is the MOST efficient use of IP address space for the router connections between the two sites?A. /24B. /25C. /30D. /32
Answer: C. /30
Q: A technician is upgrading the firmware on an older KVM switch. The specifications call for a serial port to connect to the computer on one side, and an Ethernet jack to connect to the switch on the other side. Which of the following connectors does the technician need for this cable? (Choose two.)A. RG-9B. DB-9C. RJ-11D. DB-25E. RJ-45F. BNC
Answer: B. DB-9E. RJ-45
Q: An end-user device requires a specific IP address every time it connects to the corporate network; however, corporate policy does not allow the use of static IP addresses. Which of the following will allow the request to be fulfilled without breaking the corporate policy?A. DHCP relayB. DHCP exclusionC. DHCP optionD. DHCP reservation
Answer: D. DHCP reservation
Q: A technician is planning a remote-access strategy to manage routers and switches on a dedicated management network. The management network is segregated from the production network and uses site-to-site VPN connections. Some of the equipment does not support encryption. Which of the following should the technician choose that all the equipment would support?A. TelnetB. SSLC. SSHD. IPSec
Answer: A. Telnet
Q: Which of the following protocols do MOST MITM attacks utilize?A. ARPB. SIPC. FTPD. SCP
Answer: A. ARP
Q: An ISP technician gets a call from a business that just changed equipment but can no longer connect to the Internet. The technician checks the ARP table on the ISP switch, and there is no corresponding MAC address present. Instead, the entry is “Incomplete”. Which of the following could cause this condition?A. VLAN mismatchB. Duplex/Speed mismatchC. Duplicate IP addressD. TX/RX reverse
Answer: B. Duplex/Speed mismatch
Q: A systems administrator has recently purchased and installed a large electronic signage screen for the company’s parking garage. The screen’s management software was installed on a server with a public IP address to allow remote management. The systems administrator is now troubleshooting an issue with the screen displaying unknown, random, and inappropriate messages. Which of the following is MOST effective in resolving this issue?A. Changing the management software’s default credentialsB. Disabling unnecessary services from the server and management softwareC. Changing the management software’s default portD. Replacing the management software’s self-signed certificate with a valid certificate
Answer: A. Changing the management software’s default credentials
Q: A technician is investigating a server performance issue. The technician has gathered the server utilization statistics. Which of the following should the technician use to determine which statistics are not in the normal range?A. Baseline reviewB. Vulnerability scanC. System life-cycle reportD. Archiving logs
Answer: A. Baseline review
Q: Which of the following devices, if implemented, would result in decreased administration time of an 802.11 network running centralized authentication services?(Choose two.)A. VPN concentratorB. Proxy serverC. Wireless controllerD. RADIUS serverE. Multilayer switch
Answer: C. Wireless controllerD. RADIUS server
Q: A technician must determine if a web page userג€™s visits are connecting to a suspicious website’s IP address in the background. Which of the following tools would provide the information on TCP connections?A. netstatB. tracertC. arpD. ipconfigE. routeReveal Solution
Answer: A. netstat
Q: An administrator is moving to a new office. There will be several network runs through the ceiling area of the office. Which of the following is the BEST to utilize in these areas?A. Single-mode fiber-optic cablingB. Cat 5e-rated cablingC. Cat 6-rated cablingD. Plenum-rated cabling
Answer: D. Plenum-rated cabling
Q: A network technician receives a spool of Cat 6a cable and is asked to build several cables for a new set of Ethernet runs between devices. Which of the following tools are MOST likely needed to complete the task? (Choose three.)A. Wire stripperB. Cable crimperC. RJ-11 connectorsD. RJ-45 connectorsE. MultimeterF. Punchdown toolG. Tone generator
Answer: A. Wire stripperB. Cable crimperD. RJ-45 connectors
Q: As part of a transition from a static to a dynamic routing protocol on an organization’s internal network, the routing protocol must support IPv4 and VLSM. Based on those requirements, which of the following should the network administrator use? (Choose two.)A. OSPFB. IS-ISC. RIPv1D. BGPE. VRRP
Answer: A. OSPFB. IS-IS
Q: A telecommunications provider has just deployed a new OC-12 circuit at a customer site. While the circuit showed no errors from the provider end to the customer’s demarcation point, a network administrator is trying to determine the cause of dropped packets and errors on the circuit. Which of the following should the network administrator do to rule out any problems at Layer 1? (Choose two.)A. Use a loopback at the demark and router, and check for a link lightB. Use an OTDR to validate the cable integrityC. Use a pinout tester to validate the cable integrityD. Use a multimeter to validate the cable integrityE. Check for any devices that may be causing EMI on the cableF. Clean the cables to be sure they are free of dust and debris
Answer: A. Use a loopback at the demark and router, and check for a link lightB. Use an OTDR to validate the cable integrity
Q: A single PRI can deliver multiple voice calls simultaneously using which of the following Layer 1 technologies?A. Time division multiplexingB. Analog circuit switchingC. CSMA/CDD. Time division spread spectrum
Answer: A. Time division multiplexing
Q: A network technician is diagnosing a time-out issue generated from an end user’s web browser. The web browser issues standard HTTP get and post commands to interact with the website. Given this information, the technician would like to analyze the entire TCP handshake of the HTTP requests offline. Which of the following tools would allow the technician to view the handshake?A. Packet analyzerB. Port analyzerC. SNMP trapsD. Spectrum analyzer
Answer: A. Packet analyzer
Q: A customer cannot access a company’s secure website. The company’s network security is reviewing the firewall for the server and finds the following output:(see image on paper)Which of the following changes should be made to allow all customers to access the company’s secure website?A. Allow any any 10.5.0.10 443B. Allow any any 12.73.15.5 443C. Allow 10.5.0.10 443 any anyD. Allow 10.5.0.10 any 10.5.0.10 80
Answer: C. Allow 10.5.0.10 443 any any
Q: Which of the following MUST be implemented to share metrics between routing protocols within the same router?A. Routing loopB. Routing tableC. Route redistributionD. Dynamic routes
Answer: B. Routing table
Q: An engineer is reviewing the implementation requirements for an upcoming project. The basic requirements identified by the customer include the following:✑ WLAN architecture supporting speeds in excess of 150 Mbps✑ Clientless remote network access✑ Port-based network access controlWhich of the following solution sets properly addresses all of the identified requirements?A. 802.11a, IPSec VPN, 802.1xB. 802.11ac, MPLS, 802.3C. 802.11b, PPTP, 802.1xD. 802.11g, MS-CHAP, 802.16E. 802.11n, SSL-VPN, 802.1x
Answer: E. 802.11n, SSL-VPN, 802.1x
Q: Which of the following is used to classify network data for the purpose of providing QoS?A. STPB. VLANsC. SIPD. DSCP
Answer: D. DSCP
Q: A network technician needs to separate a web server listening on port 80 from the internal LAN and secure the server from the public Internet. The web server should be accessible to the public Internet over port 80 but not the private LAN. Currently, the network is segmented with a network-based firewall using the following IP addressing scheme on each interface:see image on paperWhich of the following ones should the technician use to place the web server and which of the following firewall rules should the technician configure?A. Place the web server in the public zone with an inbound rule from eth0 interface to accept traffic over port 80 designated to the web serverB. Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept traffic over port 80 designated to the web serverC. Place the web server in the private zone with an inbound rule from eth2 interface to eth1 to accept traffic over port 80 designated to the web serverD. Place the web server in the DMZ with an inbound rule from eth1 interface to eth0 to accept traffic over port 80 designated to the web server
Answer: B. Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept traffic over port 80 designated to the web server
Q: A company recently upgraded all of its printers to networked multifunction devices. Users can print to the new devices, but they would also like the ability to scan and fax files from their computers. Which of the following should the technician update to allow this functionality?A. Device softwareB. Printer driversC. Printer firmwareD. NIC drivers
Answer: C. Printer firmware
Q: A disgruntled employee executes a man-in-the-middle attack on the company network. Layer 2 traffic destined for the gateway is redirected to the employeeג€™s computer. This type of attack is an example of:A. ARP cache poisoningB. IP spoofingC. amplified DNS attackD. evil twin
Answer: A. ARP cache poisoning
Q: The process of attempting to exploit a weakness in a network after being given permission by the company is known as:A. penetration testingB. vulnerability scanningC. reconnaissanceD. social engineering
Answer: A. penetration testing
Q: A company has contracted with an outside vendor to perform a service that will provide hardware, software, and procedures in case of a catastrophic failure of the primary datacenter. The Chief Information Officer (CIO) is concerned because this contract does not include a long-term strategy for extended outages. Which of the following should the CIO complete?A. Disaster recovery planB. Business continuity planC. Service level agreementD. First responder training
Answer: B. Business continuity plan
Q: A typical cell tower will have microwave and cellular antennas. Which of the following network topologies do these represent? (Choose two.)A. Point-to-multipointB. BusC. Point-to-pointD. MeshE. Peer-peerF. Ring
Answer: C. Point-to-pointD. Mesh
Q: A network administrator has a monitoring system in place that is currently polling hundreds of network devices at regular intervals. The continuous polling is causing high CPU utilization on the server. Which of the following tasks should the administrator perform to resolve the CPU issue while maintaining full monitoring capabilities?A. Remove SNMP polling and configure SNMP traps on each network deviceB. Remove SNMP polling and implement snmpwalk on each network deviceC. Upgrade SNMP to the latest version to mitigate vulnerabilitiesD. Modify SNMP polling to poll only during business hours
Answer: A. Remove SNMP polling and configure SNMP traps on each network device
Q: A contractor is setting up and configuring conference rooms for a convention. The contractor sets up each room in the conference center to allow wired Internet access going to individual tables. The contractor measured the distance between the hotel’ patch panel to the jack, and the distance is within Cat 5e specifications. The contractor is concerned that the room will be out of specification if cables are run in each room from the wall jacks. Which of the following actions should the contractor take to ensure the cable runs meet specifications and the network functions properly?A. Place a switch at the hotel’s patch panel for connecting each room’s cablesB. Place a switch on each table to ensure strong connectivityC. Place repeaters between the patch panel and the roomsD. place a switch at the wall jack and run the cables in the room from there
Answer: A. Place a switch at the hotel’s patch panel for connecting each room’s cables
Q: Users are reporting their network is extremely slow. The technician discovers pings to external host have excessive response times. However, internal pings to printers and other PCs have acceptable response times. Which of the following steps should the technician take NEXT?A. Determine if any network equipment was replaced recentlyB. Verify malware has not disabled the users’ PC firewallsC. Replace users’ network cables with known-good network cablesD. Power cycle the web server
Answer: A. Determine if any network equipment was replaced recently
Q: Which of the following is a system of notation that uses base 16 rather than base 10?A. HexB. OctalC. BinaryD. CIDR
Answer: A. Hex
Q: A network administrator would like to collect information from several networking devices using SNMP. Which of the following SNMP options should a network administrator use to ensure the data transferred is confidential?A. authprivB. SHAC. MD5D. Authentication passphrase
Answer: A. authpriv
Q: The IT manager at a small firm is in the process of renegotiating an SLA with the organization’s ISP. As part of the agreement, the organization will agree to a dynamic bandwidth plan to provide 150Mbps of bandwidth. However, if the ISP determines that a host on the organization’s internal network produces malicious traffic, the ISP reserves the right to reduce available bandwidth to 1.5 Mbps. Which of the following policies is being agreed to in the SLA?A. Session hijackingB. BlockingC. ThrottlingD. Data usage limitsE. Bandwidth quotas
Answer: C. Throttling
Q: A network technician has just configured NAC for connections using Cat 6 cables. However, none of the Windows clients can connect to the network.Which of the following components should the technician check on the Windows workstations? (Choose two.)A. Start the Wired AutoConfig service in the Services consoleB. Enable IEEE 802.1q Authentication in Network Interface Card PropertiesC. Enable IEEE 802.1x Authentication in Network Interface Card PropertiesD. Start the Wireless AutoConfig service in the Services consoleE. Enable IEEE 802.3 Ethernet IPv6 in Network Interface Card Properties
Answer: A. Start the Wired AutoConfig service in the Services consoleC. Enable IEEE 802.1x Authentication in Network Interface Card Properties
Q: The security manager reports that individual systems involved in policy or security violations or incidents cannot be located quickly. The security manager notices the hostnames all appear to be randomly generated characters. Which of the following would BEST assist the security manager identifying systems involved in security incidents?A. Enforce port security to require system authenticationB. Implement a standardized UNCC. Label existing systems with current hostnamesD. Forward the DHCP logs to the security manager every dayReveal Solution Discussion
Answer: B. Implement a standardized UNC
Q: A building is equipped with light sensors that turn off the fluorescent lights when natural light is above a certain brightness. Users report experiencing network connection issues only during certain hours. The west side of the building experiences connectivity issues in the morning hours and the east side near the end of the day. At night the connectivity issues affect the entire building. Which of the following could be the cause of the connectivity issues?A. Light sensors are interfering with the networkB. EMI from the lights is interfering with the network cablesC. Network wiring is run perpendicular to electrical conduitD. Temperature changes are causing attenuation in copper cabling
Answer: C. Network wiring is run perpendicular to electrical conduit
Q: A network technician configures a firewall’s ACL to allow outgoing traffic for several popular services such as email and web browsing. However, after the firewall’s deployment, users are still unable to retrieve their emails. Which of the following would BEST resolve this issue?A. Allow the firewall to accept inbound traffic to ports 25, 67, 179, and 3389B. Allow the firewall to accept inbound traffic to ports 80, 110, 143, and 443C. Set the firewall to operate in transparent modeD. Allow the firewall to accept inbound traffic to ports 21, 53, 69, and 123
Answer: B. Allow the firewall to accept inbound traffic to ports 80, 110, 143, and 443
Q: A network security technician observes multiple attempts to scan network hosts and devices. All the attempts originate from a single host on the network. Which of the following threats is MOST likely involved?A. Smurf attackB. Rogue APC. Compromised systemD. Unintentional DoS
Answer: C. Compromised system
Q: Which of the following would be the MOST efficient subnet mask for a point-to-point link?A. /28B. /29C. /31D. /32
Answer: C. /31
Q: An office user cannot access local network drives but has full access to the Internet. A technician troubleshoots the issue and observes the following output of the ipconfig command:see image on paperWhich of the following would MOST likely allow the network drives to be accessed?A. Update the WLAN adapter driverB. Disable the WLAN adapterC. Check the wireless DHCP configurationD. Disable the LAN adapter
Answer: B. Disable the WLAN adapter
Q: Ann, a network technician, has just installed a fiber switch in a datacenter. To run the fiber cabling, Ann plans the cable route over the top of the rack using the cable trays, down to the switch, coiling up any excess cable. As Ann configures the switch, she notices several messages in the logging buffer stating the receive signal of the SFP is too weak. Which of the following is MOST likely the cause of the errors in the logging buffer?A. Bend radius exceededB. Fiber cable mismatchC. Fiber type mismatchD. Bad fiber switch
Answer: A. Bend radius exceeded
Q: Which of the following wireless connection types utilize MIMO on non-overlapping channels? (Choose two.)A. 802.11aB. 802.11acC. 802.11bD. 802.11gE. 802.11n
Answer: B. 802.11acE. 802.11n
Q: A network technician is creating a new subnet for 488 host machines. The technician is told to use a class B address scheme when making the subnet and is instructed to leave as much room as possible for additional subnets of the same size. Which of the following subnets would fulfill these requirements?A. 10.5.4.0/22B. 10.233.2.0/23C. 172.16.0.0/22D. 172.18.0.0/23E. 192.168.25.0/24
Answer: D. 172.18.0.0/23
Q: A network engineer is designing a new IDF in an old building. The engineer determines the equipment will fit in a two-post rack, and there is power available for this equipment. Which of the following would be the FIRST issue to remediate?A. Air flow and coolingB. UPS capabilityC. Circuit labelingD. Power redundancy
Answer: A. Air flow and cooling
Q: In which of the following ways does a DDoS attack differ from a spoofing attack?A. DDoS attacks target multiple networksB. Spoofing attacks originate from a single hostC. DDoS attacks are launched from multiple hostsD. Spoofing attacks require physical presence
Answer: C. DDoS attacks are launched from multiple hosts
Q: A user checks an IP address using an external website. The address is different than the one the user sees when opening a command prompt and typing in ipconfig/all. The user does not understand why the two tools show different IP addresses. This is BEST explained by the interworking of:A. network devicesB. packet flowC. public/private networksD. traffic-routing protocols
Answer: C. public/private networks
Q: Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?A. BroadbandB. BasebandC. Analog modemD. CSMA
Answer: A. Broadband
Q: To replace a defective UPS, the network administrator must take the switch offline. The administrator wants to be able to perform maintenance UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?A. Add a redundant power supply to the switchB. Implement stacking on the switches in the rackC. Add a second UPS into the rackD. Install a power converter for the switch
Answer: A. Add a redundant power supply to the switch
Q: A forensic first responder arrives at the scene where an employee is suspected to have committed a computer-based crime. Which of the following should the first responder do FIRST?A. Document the sceneB. Take pictures upon arrivalC. Secure the areaD. Implement chain of custody
Answer: C. Secure the area
Q: Which of the following DNS records needs to be configured for SMTP traffic?A. MXB. CNAMEC. AAAAD. PTR
Answer: A. MX
Q: A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer being asked to implement?A. LANB. PANC. MAND. WAN
Answer: C. MAN
Q: An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business trips. Which of the following is needed to protect BOTH the employee and the company?A. An NDA ensuring work data stored on the personal phone remains confidentialB. An AUP covering how a personal phone may be used for work mattersC. A consent to monitoring policy covering company audits of the personal phoneD. Real-time remote monitoring of the phone’s activity and usage
Answer: D. Real-time remote monitoring of the phone’s activity and usage
Q: Which of the following protocols can be both connection-oriented and connectionless?A. 20 FTPB. 53 DNSC. 67 DHCPD. 80 HTTP
Answer: B. 53 DNS
Q: Which of the following BEST describes the differences between VLAN hopping and session hijacking?A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a user’s web connection to execute commandsB. VLAN hopping is a brute force attack executed to gain additional access. Session hijacking involves physically disrupting a network connectionC. VLAN hopping involves overriding a user network connection to execute malicious commands. Session hijacking involves compromising a host to elevate privilegesD. VLAN hopping is the act of exploiting poor VLAN tagging. Session hijacking is a web-based attack aimed at privilege escalation
Answer: A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a user’s web connection to execute commands
Q: An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organization’s network. As part of the attack, the analyst launches a fake access point matching the SSID of the organization’s guest access network. When a user connects to the fake access point, the analyst allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for latest analysis and exploitation. Which of the following attacks has the analyst successfully performed in this scenario?A. BluesnarfingB. Session hijackingC. MAC spoofingD. VLAN hoppingE. Man-in-the-middle
Answer: E. Man-in-the-middle
Q: A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company’s firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)A. Document the reason for the requestB. Scan the file for malware to protect the sales department’s computersC. Follow the company’s approval process for the implementationD. Install a TFTP server for the customers to use for the transferE. Create a honeypot to store the file on for the customers to useF. Write the SLA for the sales department authorizing the change
Answer: A. Document the reason for the requestC. Follow the company’s approval process for the implementation
Q: A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not modify the laptop in any way, and the wireless Internet is functional on other usersג€™ laptops. Which of the following issues should be reviewed to help the user to connect to the wireless network?A. Wireless switch toggled offB. WAP settingsC. WLAN IP address out of scopeD. Wireless controller misconfiguration
Answer: A. Wireless switch toggled off
Q: A network administrator wants to increase the confidentiality of the system by hardening the authentication process. Currently, the users log in using usernames and passwords to access the system. Which of the following will increase the authentication factor to three?A. Adding a fingerprint reader to each workstation and providing a RSA authentication tokenB. Adding a fingerprint reader and retina scannerC. Using a smart card and RSA tokenD. Enforcing a stronger password policy and using a hand geometry scan
Answer: A. Adding a fingerprint reader to each workstation and providing a RSA authentication token
Q: A network technician is building a network for a small office. The office currently has cable TV and now requires access to the Internet without adding any cabling other than what is already in place. Which of the following solutions should the technician install to meet these requirements?A. DOCSIS modemB. Wireless routerC. DSL modemD. Access point
Answer: A. DOCSIS modem
Q: A network engineer arrives at work and discovers that many users are having problems when attempting to connect to the company network shared drives. The network operations center (NOC) technician just completed server upgrades the night before. To which of the following documents should the NOC technician refer to determine what potentially caused the connectivity problem?A. Network mapsB. Cable managementC. Release notesD. Change management
Answer: D. Change management
Q: Which of the following VPN protocols establishes a secure session that can be initiated using a browser?A. IPSecB. SSL VPNC. PTPD. PPTP
Answer: B. SSL VPN
Q: A technician is setting up a public guest network for visitors to access the Internet that must be separate from the corporate network. Which of the following are the BEST steps for the technician to take with minimum overhead configuration? (Choose two.)A. Enable SSID broadcasting to identify the guest networkB. Configure visitor devices to use static IP addressesC. Enable two-factor authentication on visitor devicesD. Configure the access point to use WPA2-AES encryptionE. Ensure the access point is not running in mixed mode
Answer: A. Enable SSID broadcasting to identify the guest networkD. Configure the access point to use WPA2-AES encryption
Q: When choosing a type of storage that integrates with the existing network infrastructure, the storage must be easily configurable to share files and can communicate with all existing clients over TCP/IP. Which of the following is the BEST technology for the network administrator to implement?A. iSCSIB. Fibre ChannelC. NASD. DAS
Answer: C. NAS
Q: A network technician is installing a new network switch is looking for an appropriate fiber optic patch cable. The fiber optic patch panel uses a twist-style connector. The switch uses a SFP module. Which of the following connector types should the fiber patch cable have?A. LCB. STC. SCD. MTRJE. MTP
Answer: B. ST
Q: Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?A. ISDNB. MPLSC. PRID. Broadband cableE. Frame relay
Answer: E. Frame relay
Q: A network administrator wishes to ensure there are no unnecessary open communication paths into a server. Using a port scanner, the administrator finds that ports are reported as closed. Which of the following BEST explains this response?A. The ports belong to an active system and are denying requestsB. The ports are associated with deprecated servicesC. The ports do not belong to a live systemD. The ports replied with a SYN/ACK response
Answer: B. The ports are associated with deprecated services
Q: Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are intermittent but seem to occur most often around midday. Which of the following is the MOST likely cause?A. There is interference from small appliancesB. The signal coverage area is too smallC. Not enough DHCP addresses have been allottedD. The DNS cache on the usersג€™ computers has become corrupt
Answer: A. There is interference from small appliancesby exam dumps, correct answer is C
Q: A user reports difficulties connecting a PC to a wired network. The PC connects to an IP phone, which is working correctly. A network technician can verify that other devices successfully connect to the phone. At which of the following layers of the OSI model is the problem MOST likely located?A. NetworkB. PhysicalC. TransportD. Application
Answer: A. Network
Q: Which of the following physical security controls is MOST likely to be susceptible to a false positive?A. Identification cardB. Biometric deviceC. Proximity readerD. Video camera
Answer: C. Proximity reader
Q: An assistant systems analyst reports the following findings of an investigation of slow Internet connections in a remote office to the senior systems analyst:see image on paperWhich of the following devices is causing the issue?A. RouterB. FirewallC. Switch 1D. Switch 2
Answer: B. Firewall
Q: A small business developed an in-house application that is very sensitive to network latency when a communicating between servers. Due to a lack of funds, the business had to build its own network for workstations and servers. Now a network administrator must redesign the network due to performance issues with the application. Which of the following would be the MOST cost effective for the administrator to recommend?A. Create Ethernet VLANsB. Disable autonegotiation on the serversC. Install 10Gb Ethernet NICs in the serversD. Install Fibre Channel for the server network
Answer: C. Install 10Gb Ethernet NICs in the servers
Q: A network technician is configuring a firewall access list to secure incoming connections to an email server. The internal address of this email server is 192.168.1.143. The firewall should allow external email servers to send email to the email server. The email server also supports client access via a web browser.Only secure protocols should be used, and only the necessary ports should be open. Which of the following ACL rules should be configured in the firewall’s WAN port? (Choose two.)A. Permit 192.168.1.143.25B. Permit 192.168.1.143.80C. Permit 192.168.1.143.110D. Permit 192.168.1.143.143E. Permit 192.168.1.143.443F. Permit 192.168.1.143.587
Answer: E. Permit 192.168.1.143.443F. Permit 192.168.1.143.587
Q: A network administrator is testing connectivity at a new corporate site. The site has a wireless guest as well as a wired employee network. After verifying connectivity, the administrator checks link speeds by using a speed testing website. The speed testing website shows lower download and upload speeds for the wired network than the wireless network. Which of the following is the MOST likely explanation?A. There is less local congestion on the wireless networkB. The testing server for the wired network was farther awayC. The firewall is configured to throttle traffic to specific websitesD. The wireless access points were misconfigured
Answer: B. The testing server for the wired network was farther away
Q: A technician replaces a failed router with a spare that has been in inventory for some time. After attempting to enable HTTPS on the spare router, the technician discovers the feature is unavailable. The support office was able to connect to the previous router. Which of the following actions should the technician perform to enable HTTPS access for the support team?A. Reboot the routerB. Enable HTTP on the routerC. Update the firmware of the spare routerD. Perform a factory reset on the router
Answer: C. Update the firmware of the spare router
Q: A technician is trying to configure a previously owned WAP. The technician successfully logs into the administrative console and attempts to input the IP address on the WAP. However, the WAP is not accepting the command. Which of the following is causing the problem?A. The WAP antenna is damagedB. The WAP transmitter light is dimC. The terminal emulation software is misconfiguredD. The LWAPP image is installed on the WAP
Answer: D. The LWAPP image is installed on the WAPHide Solution
Q: DRAG DROPYour company recently purchased a new building down the street from the existing office.INSTRUCTIONS-For each of the tasks below, select the appropriate antenna type and encryption object for all wireless access point (AP).1. Create an encrypted wireless connection between the two buildings that BEST controls signal propagation, while maximizing security.2. Restrict the wireless signal generated by the access points (APs) inside Building 1, so that it minimizes broadcast beyond the building.3. Maximize wireless coverage inside Building 1.4. Building 1’s internal wireless network is for visitors only and must not require any special configuration on the visitor’s device to connect.If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.When you have completed the simulation, select the Done button to submit.If you previously made any changes to the simulated environment for the question, those changes were saved and will be present when you continue.
Answer: see image on https://www.examtopics.com/exams/comptia/n10-007/view/15/
Q: A technician has installed a Linux server in the tax office. The server can access most of the resources on the network, but it cannot connect to another server that has a share for backup. The technician learns that the target server is on a different subnet. Which of the following tools should the technician use to ensure theLinux server can reach the backup location?A. netstatB. tracerouteC. routeD. digE. ifconfig
Answer: B. traceroute
Q: Which of the following WAN technologies provides a guaranteed throughput rate?A. DSLB. T-1C. Cable broadbandD. Dial-up
Answer: B. T-1
Q: Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?A. 2001::d58::95:7565:1B. 2001:0:d58:0:0:95:7565:1C. 2001:0:d58::95:7565:1D. 2001:0:0d58::95:7565:1
Answer: C. 2001:0:d58::95:7565:1
Q: A network administrator needs to transmit traffic to geographically diverse sites to improve performance. Which of the following devices would BEST direct traffic to the remote sites?A. HubB. BridgeC. SwitchD. Router
Answer: D. Router
Q: Which of the following should a technician investigate when using a network baseline to troubleshoot?A. Tracing a network wire connectivity issue from the data center to a host.B. Determining if the server performance is degraded.C. Changes that have been made to the network configuration.D. Location of networking equipment in a rack.
Answer: B. Determining if the server performance is degraded.
Q: A technician needs to upgrade a SOHO wireless router’s firmware. The technician resets the router to factory settings and installs the new firmware. The technician enters the DHCP information and sets the SSID. Which of the following configurations would provide the MOST protection from advance hackers?A. Disable the broadcasting of the SSID.B. Enable WPA2 authentication for all hosts.C. Use private addressing for the DHCP scope.D. Install unidirectional antennas.
Answer: B. Enable WPA2 authentication for all hosts.
Q: A technician notices clients are receiving a 169.254.x.x IP address following the upgrade of a server. Which of the following ports should the technician check on the local server firewall?A. ports 20 and 21B. ports 67 and 68C. ports 80 and 443D. port 123 and 8080
Answer: B. ports 67 and 68
Q: Which of the following datacenter security methodologies is MOST likely to remain usable during a network outage?A. biometric scannersB. door locksC. video surveillanceD. motion detectors
Answer: B. door locks
Q: A network technician is implementing a solution on the network to hide the workstation internal IP addresses across a WAN. Which of the following is the technician configuring?A. QoSB. DMZC. RIPD. NAT
Answer: D. NAT
Q: Employees want the ability to use personal devices on the guest network while working out at the company gym. In order to meet the request, which of the following policies requires employee adherence?A. AUPB. SLAC. NDAD. MOU
Answer: A. AUP
Q: Which of the following BEST describes the BGP routing protocol?A. distance vectorB. hybridC. staticD. link state
Answer: B. hybrid
Q: A customer is reporting difficulty connecting some devices after replacing a wireless router with a new wireless 802.11ac router. The SSID, encryption and password are the same as the previous router. A technician goes on-site and notices the devices that are no longer connecting appear to be several years ago.Which of the following is MOST likely the problem?A. the password needs to be re-entered.B. there is a security type mismatch.C. there is insufficient antenna power.D. there is a frequency mismatch.E. the channel has changed.
Answer: D. there is a frequency mismatch.
Q: Multiple users are reporting that they are unable to access the network. The ENTIRE network is shown in the diagram. PCs are not statically assigned IP addresses. The following devices will display settings:✑ WorkstationA✑ WorkstationB✑ WorkstationC✑ WorkstationD✑WorkstationE✑ WorkstationF✑ WorkstationG✑ Laptop1✑ Laptop2✑ DHCP server1✑ DHCP server2Instructions:Review the settings and select the box in the diagram that identifies the device causing the issue. Only one device can be selected at a time.After checking the device that is causing the issue, select the second tab in the lower left hand corner. Identify the reason as to why some users are unable to access the network.When the simulation is complete, select the Done button to submit.Part 1 -Part 2 -Identify the reason as to why some users are unable to access the network.A. Workstation(s) are plugged into switch ports configured with half duplex.B. The site-to-site router was configured with the incorrect ACL.C. The DHCP server scope is full and is not providing IP addresses.D. WAN and LAN ports are reversed on the router.E. STP has disabled some of the ports on the switch.F. The NIC driver is not installed.G. A wireless client is unable to associate to the AP.
Answer: see image in https://www.examtopics.com/exams/comptia/n10-007/view/16/G. A wireless client is unable to associate to the AP.Hide Solution
Q: Which of the following should be performed to verify that unnecessary services are disabled on all switches in an environment?A. Packet capturingB. Port scanningC. Log scanningD. Baseline review
Answer: B. Port scanning
Q: A technician is sent to a remote office to set up a device to connect to the Internet. The company standards document requires stateful inspection. Which of the following should the technician install?A. RouterB. Multiplayer switchC. FirewallD. Bridge
Answer: C. Firewall
Q: A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform this task?(Choose two.)A. RDPB. SNMPC. WPA2D. EAPE. SSL
Answer: C. WPA2D. EAP
Q: A technician is investigating the cause of a network outage. Which of the following documents should be checked to rule out configuration issues?A. Change management recordsB. Inventory managementC. Network log filesD. Logical diagrams
Answer: A. Change management records
Q: A junior network technician receives a help desk ticket from an end user who is having trouble accessing a web application that was working the previous day. After talking with the end user and gathering information about the issue, which of the following would be the most likely course of action for the technician to perform NEXT?A. Establish a theory of probable cause.B. Escalate the ticket to a senior technician.C. Implement the solution.D. Document the findings and outcomes.
Answer: A. Establish a theory of probable cause.
Q: A system administrator receives reports from users of odd behavior in regard to a recently installed server. While reviewing the server network configuration, the systems administrator does both a forward and a reverse DNS lookup on the host, along with the network adapter configuration.see image on paperWhich of the following is the problem identified in the output above?A. There is no reverse DNS entry for this host.B. The server IP address is incorrectly configured.C. The DNS lookup entry is incorrectly configured.D. The reverse DNS entry is pointing to a different host.
Answer: C. The DNS lookup entry is incorrectly configured.
Q: A network technician at a small office upgrades the LAN switch. After the upgrade, a user reports being unable to access network resources. When the technician checks the switchport, the LED light is not lit. Which of the following should the technician check FIRST?A. The device is using the correct cable type.B. The switchport is functioning properly.C. The device is connected to the switch.D. The switch is connected to the router.
Answer: C. The device is connected to the switch.
Q: A network administrator wants to employ a username and password authentication system for guest WiFi. Which of the following is the BEST option to provide this type of authentication?A. Port securityB. MAC filteringC. Network access controlD. Captive portal
Answer: D. Captive portal
Q: A technician is responsible for configuring a new firewall. The hardware team has already installed, powered, and connected the system. Which of the following types of documentation should the technician utilize to complete the task?A. Rack diagramB. IDF/MDF documentationC. Network performance baselineD. Logical and physical diagrams
Answer: D. Logical and physical diagrams
Q: Which of the following storage network technologies inherently leverages block-level storage?A. NASB. SANC. FCoED. iSCSIE. FTP
Answer: B. SAN
Q: Which of the following networking devices operates at Layer 1?A. RouterB. FirewallC. HubD. Bridge
Answer: C. Hub
Q: A disgruntled employee decides to leak critical information about a company’s new product. The employee places keyloggers on the department’s computers, allowing the information to be sent out to the Internet. Which of the following attacks is occurring?A. Man-in-the-middleB. Logic bombC. Insider threatD. Social engineering
Answer: C. Insider threat
Q: A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform her job. Which of the following would provide secure access to the corporate resources?A. Utilize an SSH connection to the corporate server.B. Use TFTP to transfer files to corporate resources.C. Allow RDP through an external firewall.D. Connect utilizing client-to-site VPN.
Answer: D. Connect utilizing client-to-site VPN.Hide Solution
Q: Which of the following DNS record types is an alias?A. CNAMEB. PTRC. NSD. SRV
Answer: A. CNAME
Q: A recently constructed building makes use of glass and natural light. Users in the building are reporting poor cellular connectivity and speeds. Which of the following is MOST likely the cause?A. AbsorptionB. Channel overlapC. ReflectionD. Frequency mismatch
Answer: C. ReflectionRefraction
Q: A network technician is working on a new switch implementation to expand the network. Which of the following is the BEST option to ensure the implementation goes according to business requirements?A. AUPB. NDAC. SOPD. SLA
Answer: C. SOP
Q: A technician is utilizing SNMPv3 to monitor network statistics. Which of the following actions would occur immediately of a server’s utilization spikes above the prescribed value?A. A trap message is sent via UDP to the monitoring workstation.B. The SET function pushes an alert to the MIB database.C. The object identifier is modified and reported during the next monitoring cycle.D. A response message is sent from the agent to the manager.
Answer: A. A trap message is sent via UDP to the monitoring workstation.
Q: In which of the following scenarios should a technician use a cross-over cable to provide connectivity?A. PC to switchB. Switch to APC. Router to switchD. Router to modemE. PC to PC
Answer: E. PC to PC
Q: 802.11n clients currently have no way to connect to the network. Which of the following devices should be implemented to let the clients connect?A. RouterB. Range extenderC. VoIP endpointD. Access point
Answer: D. Access point
Q: A network technician is setting up a new router. Since it is exposed to the public, which of the following are the BEST steps the technician should take when setting up this device? (Choose two.)A. Disable unnecessary services.B. Use private IP addresses.C. Allow remote management access.D. Disable the console port.E. Enable encryption.F. Upgrade to the latest firmware.
Answer: A. Disable unnecessary services.F. Upgrade to the latest firmware.
Q: A network technician is configuring user access to a VPN concentrator and has been advised to use a protocol that supports encryption over UDP. Which of the following protocols has the technician MOST likely configured for client use?A. TFTPB. DTLSC. DNSD. SNMP
Answer: B. DTLS
Q: A switch has detected duplicate broadcast messages sourced from a second port. The broadcasts continue to be transmitted and duplicated until the amount of traffic causes severe performance issues. Which of the following should be configured to prevent this behavior?A. BPDU guardB. DHCP snoopingC. ARP protectionD. Spanning tree
Answer: D. Spanning tree
Q: A Chief Information Officer (CIO) is concentrated about an attacker gaining administrative access to the company’s network devices. Which of the following is the MOST secure way to prevent this?A. ACL allowing only HTTPB. ACL allowing only TelnetC. Out-of-band modemD. Out-of-band console router
Answer: D. Out-of-band console router
Q: The Chief Executive Officer’s (CEO’s) tablet cannot connect to the wireless network from the corner office. A network technician verified the tablet can connect to the wireless network in other areas of the building. The distance between the office and the 802.11ac WAP is 150ft (46m), and there are a few cubicles in between. Which of the following is the MOST likely cause of the tablet not connecting?A. AbsorptionB. ReflectionC. DistanceD. RefractionE. Attenuation
Answer: C. Distance
Q: A company has two geographically separate locations that need to connect using a VPN. Which of the following devices must be specifically configured to allowVPN traffic into the network?A. FirewallB. SwitchC. RouterD. Modem
Answer: A. Firewall
Q: A technician is working on a new machine that has been procured for testing and development. The machine will run a hypervisor and host several operating systems of various types so the development team can test the company’s applications in a variety of environments. The technician wants the virtual machines to be available to communicate with each other without leaving the hypervisor. Which of the following is the BEST solution to the problem?A. The technician should connect the machine to its own separate switch.B. The technician should add a route in each virtual machine to the default gateway.C. The technician should configure a virtual switch.D. The technician should set up individual routes between the machines.
Answer: C. The technician should configure a virtual switch.
Q: A network technician is re-purposing a switch that has been in storage for some time. The device has been wiped to factory defaults. Which of the following should be done FIRST to ensure the device has been hardened before configuration?A. Generate new keys.B. Disable unused ports.C. Check for updated firmware.D. Configure the default VLAN.
Answer: C. Check for updated firmware.
Q: A technician is setting up a wireless access point in a coffee shop. The shop is not concerned with security but only wants to allow customers to have access.Which of the following configurations should the technician deploy?A. Use a pre-shared key.B. Set up EAP.C. Configure RADIUS.D. Configure MAC filtering.
Answer: A. Use a pre-shared key.
Q: A network administrator is assigned to run and connect a Cat 6e Ethernet cable between two nodes in a datacenter. Which of the following connector types should the network administrator use to terminate this cable?A. DB-9B. RS-232C. DB-25D. RJ-45
Answer: D. RJ-45
Q: Management has requested that services be available within 72 hours of a disaster. Budget is a major concern. A contract is signed with a company that has plenty of space, and the technician will have the option of putting infrastructure equipment in place. Which of the following BEST describes this business continuity strategy?A. Cold siteB. Differential backupC. Hot siteD. Incremental backupE. Warm siteF. Full backup
Answer: A. Cold site
Q: A network technician is planning to update the firmware on a router on the network. The technician has downloaded the file from the vendor’s website. Before installing the firmware update, which of the following steps should the technician perform to ensure file integrity?A. Perform antivirus and anti-malware scans of the file.B. Perform a hash on the file for comparison with the vendor’s hash.C. Download the file a second time and compare the version numbers.D. Compare the hash of the file to the previous firmware update.
Answer: B. Perform a hash on the file for comparison with the vendor’s hash.