N10-005

A technician can increase the bandwidth of an 802.11n cell by: A. doubling the channel width. B. enabling diversity. C. disabling MIMO. D. adding a second access point. Answer: A

Answer: A

A network administrator wants to balance the amount of data between two networking cards. Which of the following can be used for two or more networking cards? A. NIC bonding B. Proxy server C. Firewall ACLs D. VLANs Answer: A

Answer: A

Which of the following is the reason why a company's network may contain a DHCP server? A. To assign IP addresses to devices on the network B. To convert IP addresses to fully qualified domain names C. To provide POP3 and IMAP email functionality D. To allow secure remote access Answer: A

Answer: A

Which of the following protocols does DNS utilize on port 53? A. TCP B. FTP C. RTP D. ICMP Answer: A

Answer: A

Which of the following protocols is used to send time synchronization updates on a given network? A. NTP B. POP3 C. DNS D. IMAP Answer: A

Answer: A

Which of the following tools would a technician use to determine if a CAT6 cable is properly terminated? A. Cable tester B. Punch down tool C. Crimper D. Multimeter Answer: A

Answer: A

Which of the following types of connectors is used with a CAT6 Ethernet cable? A. RJ-45 B. BNC C. RJ-11 D. DB-9 Answer: A

Answer: A

A technician is having issues accessing the Internet from the workstation. They are able to ping the DNS server and their default gateway. Which of the following commands can be used to verify DNS is functioning properly? A. nslookup B. netstat C. traceroute D. nbtstat Answer: A

Answer: A

Which of the following differentiates a layer 3 switch from a layer 2 switch? A. Routing B. Bridging C. Switching D. Repeating Answer: A

Answer: A

Which of the following is used to embed the MAC address of an Ethernet interface in a corresponding IPv6 address? A. Subnet B. IANA prefix C. EUI-64 D. Site-local Answer: C

Answer: C

Which of the following network protocols is used to transport email across the Internet? A. NTP B. SSH C. SMTP D. SNMP Answer: C

Answer: C

Which of the following technologies can change channel widths? A. 802.11a B. 802.11b C. 802.11n D. Bluetooth Answer: C

Answer: C

Which of the following wireless standards is the only one capable of operating in either of the 802.11 wireless spectrums? A. A B. B C. G D. N Answer: D

Answer: D

Wiring

Wiring

Which of the following security devices can receive and process HTTP requests from hosts to allow or deny traffic for web browsing purposes only? A. Load balancer B. VPN concentrator C. Proxy server D. DNS server Answer: C

Answer: C

Which of the following should be installed to prevent inappropriate websites from being viewed? A. Load balancer B. VPN concentrator C. Content filter D. Proxy server Answer: C

Answer: C

Which of the following cables supports 10Gbps throughput and 100 meters as the maximum distance? A. T1 crossover B. Singlemode fiber C. CAT6a D. Coaxial Answer: C

Answer: C

Which of the following can be used to prioritize network streams to optimize performance for certain traffic types? A. VLAN B. VPN C. QoS D. PoE Answer: C

Answer: C

Which of the following commands would be used to identify how many hops a data packet makes before reaching its final destination? A. route B. netstat C. traceroute D. ping 127.0.0.1 Answer: C

Answer: C

Which of the following is MOST commonly implemented for remote access to UNIX systems? A. SSL B. RSH C. SSH D. RDP Answer: C

Answer: C

Which of the following is a common LAN protocol used for a SOHO? A. ATM B. DSL C. Ethernet D. HDLC Answer: C

Answer: C

Which of the following is a common connector used on a coaxial cable? A. RJ-45 B. DB-25 C. BNC D. LC Answer: C

Answer: C

Which of the following is a fiber connector that is slightly smaller than a standard copper network cable connector? A. BNC B. GBIC C. MT-RJ D. SC Answer: C

Answer: C

Which of the following records allows for reverse DNS lookups? A. AAAA B. A C. PTR D. CNAME Answer: C

Answer: C

Which of the following would be used to place extranet servers in a separate subnet for security purposes? A. VPN B. NAT C. DMZ D. IDS Answer: C

Answer: C

Which of the following protocols would the network administrator use to protect login credentials when accessing a router terminal session? A. SCP B. SNMPv3 C. SSL D. SSH Answer: D

Answer: D

At which of the following layers of the OSI model does ASCII work? A. Session B. Transport C. Presentation D. Application Answer: C

Answer: C Explanation: The presentation layer is responsible for the delivery and formatting of information to the application layer for further processing or display. It relieves the application layer of concern regarding syntactical differences in data representation within the end-user systems. An example of a presentation service would be the conversion of an EBCDIC-coded text computer file to an ASCII-coded file.

A company wants to ensure that a wireless signal from their WAP only sends down one specific corridor. Which of the following can be done to achieve this? A. Disable the SSID. B. Change the broadcast channel. C. Lower the signal strength. D. Change the antennas. Answer: D

Answer: D

A network technician has been asked to look into a report from the IDS to determine why traffic is being sent from an internal FTP server to an external website. Which of the following tools can be used to inspect this traffic? A. Router firewall B. Ping and traceroute C. Throughput tester D. Protocol analyzer Answer: D

Answer: D

A network technician recently replaced a managed switch in an enterprise network with a new managed switch. Users on the switch can communicate with each other but now cannot access other network segments. Which of the following is the MOST likely reason that the users are unable to access any network segments? A. The newly installed switch is defective and must be returned. B. The newly installed switch is using a different MAC address than the previous switch. C. The technician forgot to change the VTP mode on the new switch to server. D. The technician did not use the correct cable when trunking the new switch. Answer: D

Answer: D

After deploying a network switch, the network administrator is unable to remotely administer the device. The network administrator notices that the switch has the following configuration. Which of the following is the MOST likely cause of this issue? Management LAN: 192.168.10.0/24 Management interface. 192.168.10.2 255.255.255.0 Default gateway: 192.168.11.1 STP is enabled A. VLAN assignment B. Wrong subnet mask C. Switching loop D. Wrong gateway Answer: D

Answer: D

An administrator is able to list the interfaces on a switch after providing the community string "public". Which of the protocols is the administrator MOST likely using? A. Telnet B. RADIUS C. SSH D. SNMP Answer: D

Answer: D

An administrator would like to search for network vulnerabilities on servers, routers, and embedded appliances. Which of the following tools would MOST likely accomplish this? A. Baseline analyzer B. Ping C. Protocol analyzer D. Nessus Answer: D

Answer: D

Users have contacted the helpdesk stating that they have been having difficulties staying connected to the wireless network. They report that their laptops connect to one access point, drop the connection and then connect to a different access point in a never-ending cycle. Which of the following would BEST remediate this? A. Reconfigure the access points from 802.11b to 802.11g. B. Establish procedures which limit user connections during peak hours. C. Configure the access points so that they all use different SSIDs. D. Move one or more access points, minimizing signal overlap. Answer: D

Answer: D

Which of the following addresses is a class B private address? A. 132.216.14.184 B. 152.119.25.213 C. 162.17.43.22 D. 172.23.226.34 Answer: D

Answer: D

Which of the following can be used to decrypt SSL packets which encapsulate internal network addresses in the payload? A. Proxy server B. Content filter C. Load balancer D. VPN concentrator Answer: D

Answer: D

Which of the following can operate on BOTH the 2.4GHz and 5.8GHz frequencies? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D

Which of the following tools could attempt to detect operating system vulnerabilities? A. nslookup B. honeynet C. netstat D. nessus Answer: D

Answer: D

Which of the following wireless standards can transmit data up to 540Mbps? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D

Which of the following would be used in a firewall to block incoming TCP packets that are not from established connections? A. Access control lists B. Port address translation C. Blocking unauthorized ports D. Stateful inspection Answer: D

Answer: D

Which of the following can MOST likely cause intermittent connection problems with a CAT5 network cable? A. Cable has been looped too many times. B. Cable has a twist tie attached too close to the connector. C. Cable is too warm. D. Cable is run too close to a fluorescent light. Answer: D

Answer: D Explanation Cat 5 is a twisted pair cable for carrying signals. This type of cable is used in structured cabling for computer networks such as Ethernet. The cable standard provides performance of up to 100 MHz and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), and 1000BASE-T (Gigabit Ethernet).

Which of the following copper cable types should be chosen to run gigabit speeds through a dropped ceiling that returns airflow? A. Non-Plenum CAT5 B. Non-Plenum CAT5e C. Plenum CAT5 D. Plenum CAT5e

Answer: D Explanation Cat 5 is a twisted pair cable for carrying signals. This type of cable is used in structured cabling for computer networks such as Ethernet. The cable standard provides performance of up to 100 MHz and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), and 1000BASE-T (Gigabit Ethernet).

Which of the following reduces the deployment cost of a wireless LAN? A. WPA B. 802.1x C. MIMO D. PoE Answer: D

Answer: D Explanation: Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras.

A user does not have network connectivity. While testing the cable the technician receives the below reading on the cable tester: 1-----------1 2-----------2 3-----------3 4-----------4 5-----------5 6-----------6 7-----------7 8-----------8 Which of the following should the technician do next? A. Cable is a crossover, continue troubleshooting B. Pin 3 is not used for data, continue troubleshooting C. Pin 3 is not used for data, replace the NIC D. Redo the cable's connectors Answer: D Explanation: Incomplete/Incorrect Question.

Answer: D Explanation: Incomplete/Incorrect Question.

Which of the following wireless standards provide speeds up to 150Mbps? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D Explanation: 802.11n builds upon previous 802.11 standards by adding multiple-input multiple- output (MIMO). The additional transmitter and receiver antennas allow for increased data throughput through spatial multiplexing and increased range by exploiting the spatial diversity through coding schemes like Alamouti coding. The speed is 150 Mbit/s (even 250 Mbit/s in PHY level)

Which of the following wireless standards would BEST allow a company to utilize new and old devices on the 5GHz spectrum while allowing for the highest possible speeds? A. A B. B C. G D. N Answer: D

Answer: D Explanation: 802.11n is an amendment which improves upon the previous 802.11 standards by adding multiple-input multiple-output antennas (MIMO). 802.11n operates on both the 2.4 GHz and the lesser used 5 GHz bands

Which of the following defines a rack located in an office building between the main rack and other office equipment? A. DSU B. MDF C. CSU D. IDF Answer: D

Answer: D Explanation: An intermediate distribution frame (IDF) is a distribution frame in a central office or customer premises, which cross-connects the user cable media to individual user line circuits and may serve as a distribution point for multipair cables from the main distribution frame(MDF) or combined distribution frame (CDF) to individual cables connected to equipment in areas remote from these frames. IDFs are used for telephone exchange central office, customer-premise equipment, wide area network (WAN), and local area network (LAN) environments, among others.

Which of the following is an example of a Class C address? A. 10.19.0.79 B. 127.34.8.197 C. 176.96.1.222 D. 192.168.1.105

Answer: D Explanation: Class C address range varies from 192.0.0.0 to 223.255.255.255.

Which of the following uses distance vector algorithms to determine the BEST network route to a destination address? A. IS-IS B. OSPF C. BGP D. RIP Answer: D

Answer: D Explanation: Here the term distance vector refers to the fact that the protocol manipulates vectors (arrays) of distances to other nodes in the network

Which of the following is the only standard that can operate at either frequency? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D Explanation: Only 802.11n can operate at 2.4 Ghz and 5Ghz

A CAT5e network cable run needs to be installed over fluorescent lighting arrays in an office building. Which of the following cable types would be BEST suited for such an installation? A. UTP B. Plenum C. Coaxial D. STP Answer: D

Answer: D Explanation: Shielded twisted pair is a special kind of copper telephone wiring used in some business installations. An outer covering or shield is added to the ordinary twisted pair telephone wires; the shield functions as a ground. Twisted pair is the ordinary copper wire that connects home and many business computers to the telephone company. To reduce crosstalk or electromagnetic induction between pairs of wires, two insulated copper wires are twisted around each other. Each signal on twisted pair requires both wires

A customer's email server is not sending emails. Arrange the troubleshooting steps in the order the technician should perform them: ___ . Implement the solution ___ . Verify full system functionality ___ . Establish a theory of probable cause ___ . Determine if any recent changes have been made to the server ___ . Document findings, actions, and outcomes ___ . Establish a plan of action to resolve the problem ___ . Test the theory to determine the cause ___ . Implement preventative measures

1. Determine if any recent changes have been made to the server 2. Establish a theory of probable cause 3. Test the theory to determine the cause 4. Establish a plan of action to resolve the problem 5. Implement the solution 6. Verify full system functionality 7. Implement preventative measures 8. Document findings, actions, and outcomes

Which of the following would be used to connect a singlemode fiber cable to a CAT6 connection? A. Media converter B. T1-crossover C. Multimode cable D. Coaxial Answer: A

Answer: A Explanation: Media converters support many different data communication protocols including Ethernet, Fast Ethernet, Gigabit Ethernet, T1/E1/J1, DS3/E3, as well as multiple cabling types such as coax, twisted pair, multi-mode and single-mode fiber optics.

A technician is reviewing the following aggregated information on a sever to determine the cause of a user's connection problem: Facility | Severity | Mnemonic | Message FW1 4 FPD Packet discarded AP2 7 AUTH User disassociated SW1 7 PUPD Port chg up to dn Which of the following is the technician reviewing? A. Syslog server logs B. Application logs C. Network sniffer logs D. SNMPv2 queries Answer: A

Answer: A Explanation: Syslog server logs are the logs that are saved on a system whenever an instance happens of the wireless device. Reviewing the logs can help him understand the behavior of the WAP as well as the client.

A MAC address is a part of which of the following OSI model layers? A. Network B. Data Link C. Physical D. Transport Answer: B

Answer: B

A network administrator has just been notified about the loss of Internet connectivity. Another technician had just performed non-scheduled maintenance and mentioned that some cabling may have been moved. Which of the following MOST likely caused the loss of Internet connectivity? A. Broadcast storm B. TX/RX cables reversed C. Mismatched MTU D. Incorrect routing table Answer: B

Answer: B

A user is unable to open up websites on the Internet from a browser. The administrator determines that the workstation can ping its local gateway, but not the remote web server. At which of the following layers of the OSI model does the problem MOST likely exist? A. Data link B. Network C. Session D. Physical Answer: B

Answer: B

Which of the following supports faster wireless broadband speeds? A. Satellite B. Wi-MAX C. ISDN D. OC-3 Answer: B

Answer: B Explanation: Wi-MAX (Worldwide Interoperability for Microwave Access) is a wireless communications standard designed to provide 30 to 40 megabit-per-second data rates with the 2011 update providing up to 1 G bit/s for fixed stations

A user has network connectivity per the link lights on the NIC, but cannot access any network resources or the Internet. Which of the following commands should the technician run FIRST? A. arp B. ipconfig C. tracert D. route Answer: B

Answer: B Explanation: As from ipconfig command technician will come to know whether he has assigned right ip address to NIC or not.

The APIPA address 169.254.10.123 falls into which of the following class of addresses? A. A B. B C. C D. D Answer: B

Answer: B Explanation: As the range for class B is from 128.0.0.0 to 191.255.255.255

A large company has experienced Internet slowdowns as users have increased their use of the Internet. Which of the following can the Network Administrator use to determine the amount of bandwidth used by type of application? A. Network maps B. Traffic analysis C. Syslog D. ICMP Answer: B

Answer: B Explanation: By traffic analysis administrator will come to whether user are using bandwidth for right purpose or not.

Which of the following devices is utilized to ensure traffic does not become congested while traveling over redundant links? A. Access control list B. Load balancer C. Content filter D. Proxy server Answer: B

Answer: B Explanation: Load balancing is a computer networking method for distributing workloads across multiple computing resources, such as computers, a computer cluster, network links, central processing units or disk drives. Load balancing aims to optimize resource use, maximize throughput, minimize response time, and avoid overload of any one of the resources.

A company has just installed a new network switch for an expanding department. The company is also piloting the use of a VoIP phone system for this department. Which of the following should be enabled on the new network switch? A. WINS B. QoS C. NAT D. DHCP Answer: B

Answer: B Explanation: QoS provide the voice packet priority over the data packets to avoid jitter and delay.

A technician has low signal strength connecting two wireless bridges. Which of the following could be the problem? A. Low PoE wattage B. Opposing antenna polarizations C. Short distance between antennas D. WPA 2 encryption Answer: B

Answer: B Explanation: The polarization of an antenna is the orientation of the electric field (E-plane) of the radio wave with respect to the Earth's surface and is determined by the physical structure of the antenna and by its orientation. It has nothing in common with antenna directionality terms: "horizontal", "vertical", and "circular". Thus, a simple straight wire antenna will have one polarization when mounted vertically, and a different polarization when mounted horizontally.

Which of the following is the MAXIMUM rated speed for CAT5 cabling? A. 10Mbps B. 100Mbps C. 1000Mbps D. 10Gbps Answer: B

Answer: B Explanation: Category 5 cable (Cat 5) is a twisted pair cable for carrying signals. This type of cable is used in structured cabling for computer networks such as Ethernet. The cable stand provides performance of up to 100 MHz and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet),

An administrator configuring remote access opens ports 500/UDP and 10000/UDP on the firewall. Which of the following services are MOST likely being allowed? (Select TWO). A. SSL B. IPSec C. Kerberos D. RDP E. L2TP F. PPTP Answer: B, E

Answer: B, E

A company has a server with redundant power supplies. Which of the following is this an example of? A. Traffic shaping B. Caching engines C. Fault tolerance D. Load balancing Answer: C

Answer: C

A consultant is installing new WAPs for an office using wall mounts. Which of the following is the BEST location for the new boxes for signal strength and coverage? A. Above the suspended ceiling with antennas positioned upward. B. Close to the floor level to allow the signal to traverse the floor laterally. C. Close to the suspended ceiling, but not above. D. Above the suspended ceiling with antennas positioned downward. Answer: C

Answer: C

A home user states during a basement remodel, one of the workers cut the network cable that goes from the modem to the WAP and nothing else has changed. According to the network troubleshooting methodology, which of the following is the NEXT step? A. Identify the problem B. Question the user C. Establish a plan of action D. Establish a theory of probable cause Answer: C

Answer: C

A small company has a single multi-layer switch. The company currently has all network devices on the same subnet but would like to switch the servers to another subnet for security reasons. The company cannot budget any more money to purchase additional hardware. Which of the following features should be used to achieve the new company requirements? A. PAT B. PoE C. VLAN D. QoS Answer: C

Answer: C

A technician installs a wireless router on an existing network by connecting it directly to the firewall. By default, the main network is a Class A network, while the wireless network is a Class C network. After the wireless router is installed, users connected to the wireless network report they are unable to connect to the Internet. Which of the following needs to be configured to BEST resolve this issue? A. Configure the main network to Class C B. Allow for duplicate IP addresses C. Allow the main network to handle DHCP D. Create a spanning tree to prevent switching loops Answer: C

Answer: C

A technician receives a work order that a user can no longer access any external websites. The user is the only one affected, but can still access websites by IP address. Which of the following is the MOST likely cause? A. The workstation has been removed from the domain and needs to be re-added in directory services. B. The workstation is configured to use the IPv4 protocol instead of IPv6. C. The workstation is configured with an incorrect IP address of the DNS server. D. The workstation's DHCP IP address has expired and has assigned itself an APIPA address. Answer: C

Answer: C

A user reports that they are unable to connect to the network. Upon further investigation, a technician notices that the user has an IP address/subnet mask combination of 192.168.204.255/24. The default gateway for the network is 192.168.204.254. Which of the following could the user's IP address be changed to so that they could connect to the network? A. 192.168.204.0/27 B. 192.168.204.1/27 C.192.168.204.112/24 D. 192.168.204.254/24 Answer: C

Answer: C

An administrator has added four switches to a campus network. The switch in wiring closet A is only connected to the switch in wiring closet C. The switch in wiring closet B is connected to the switch in wiring closet C as well as wiring closet D. The switch in wiring closet D is only connected to the switch in wiring closet B. Which of the following topologies is represented in this design? A. Ring B. Star C. Bus D. Mesh Answer: C

Answer: C

An administrator wants to restrict traffic to FTP sites regardless of which PC the request comes from. Which of the following would BEST accomplish this? A. An IP filtering ACL B. A MAC filtering ACL C. A port filtering ACL D. A class matching ACL Answer: C

Answer: C

Which of the following DNS records must be queried to resolve the IPv6 address of a website? A. CNAME B. PTR C. AAAA D. A Answer: C

Answer: C

Which of the following cable types is unshielded? A. STP B. Twinax C. UTP D. Coax Answer: C

Answer: C

Which two layers of the OSI model make up the TCP/IP model Network Interface layer? A. Application and Transport B. Transport and Session C. Physical and Data Link D. Session and Presentation Answer: C

Answer: C

Which of the following would be used to check whether a DoS attack is taking place from a specific remote subnet? A. Syslog files B. Honeypot C. Network sniffer D. tracert Answer: C

Answer: C Explanation: A network sniffers monitors data flowing over computer network links. It can be a self-contained software program or a hardware device with the appropriate software or firmware programming.

Which of the following network access security methods ensures communication occurs over a secured, encrypted channel, even if the data uses the Internet? A. MAC filtering B. RAS C. SSL VPN D. L2TP Answer: C

Answer: C Explanation: SSL VPN consists of one or more VPN devices to which the user connects by using his Web browser. The traffic between the Web browser and the SSL VPN device is encrypted with the SSL protocol or its successor, the Transport Layer Security (TLS) protocol.

A corporate office recently had a security audit and the IT manager has decided to implement very strict security standards. The following requirements are now in place for each employee logging into the network: Biometric fingerprint scan Complex 12 character password 5 digit pin code authorization Randomized security question prompt upon login Which of the following security setups does this company employ? A. Single factor authentication B. Three factor authentication C. Two factor authentication D. Single sign-on Answer: C

Answer: C Explanation: According to proponents, two-factor authentication could drastically reduce the incidence of online identity theft, phishing expeditions, and other online fraud, because the victim's password would no longer be enough to give a thief access to their information.

Which of the following reasons would MOST likely be used to implement QoS and traffic shaping solutions? A. Redundancy B. Fault tolerance C. Unified communications D. Uptime requirements Answer: C

Answer: C Explanation: In unified communication video, voice, data have only one end gateway so to give priority to avoid delay in voice and video we use QoS.

Which of the following fiber types is MOST often used indoors? A. Plenum B. Modal conditioning C. Multimode D. Singlemode Answer: C

Answer: C Explanation: Multi-mode optical fiber is a type of optical fiber mostly used for communication over short distances, such as within a building or on a campus. Typical multimode links have data rates of 10 Mbit/s to 10 Gbit/s over link lengths of up to 600 meters (2000 feet) and 10 Gbit/s for 300m (1000 feet) — more than sufficient for the majority of premises applications.

An administrator needs to install a WAP in a location where there is no electrical wiring. Which of the following should the administrator use to complete a successful installation? A. Coaxial B. Wireless bridge C. PoE D. Multimode fiber Answer: C

Answer: C Explanation: PoE provides both data and power connections in one cable, so equipment doesn't require a separate cable for each need.

Which of the following technologies is used to connect public networks using POTS lines? A. OC3 B. OC12 C. PSTN D. Cable Answer: C

Answer: C Explanation: The PSTN consists of telephone lines, fiber optic cables, microwave transmission links, cellular networks, communications satellites, and undersea telephone cables, all interconnected by switching centers, thus allowing any telephone in the world to communicate with any other

Which of the following appliances creates and manages a large number of secure remote-access sessions, and also provides a high availability solution? A. Media converter B. Proxy server C. VPN concentrator D. Load balancer Answer: C

Answer: C Explanation: The VPN Concentrator is used for Remote Access VPN's that allows users to use an encrypted tunnel to securely access a corporate or other network via the Internet.

Which of the following is the difference between 802.11b and 802.11g? A. Distance B. Frequency C. Speed D. Transmission power Answer: C

Answer: C Explanation: 802.11b has a maximum speed of 11Mbps whereas 802.11g has a speed of 54Mbps.

PKI is a method of user authentication which uses which of the following? A. Various router commands B. Access control lists C. Certificate services D. A RADIUS server Answer: C

Answer: C Explanation: A PKI (public key infrastructure) enables users of a basically unsecure public network such as the Internet to securely and privately exchange data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority. The public key infrastructure provides for a digital certificate that can identify an individual or an organization and directory services that can store and, when necessary, revoke the certificates. Although the components of a PKI are generally

Which of the following network topologies would be separated into two networks if a client in the middle is removed or the cable is cut? A. Mesh B. Ring C. Bus D. Star Answer: C

Answer: C Explanation: A bus network topology is a network topology in which a set of clients are connected via a shared communications line/cables, called a bus.

A user cannot access the LAN after working successfully most of the day. Which of the following should the network administrator check FIRST? A. VLAN settings B. History logs C. Patch cable D. Port security Answer: C

Answer: C Explanation: A patch cable or patch cord or patch lead is an electrical or optical cable used to connect ("patch- in") one electronic or optical device to another for signal routing.

A small business owner is setting up a SOHO office. The business owner needs one device that will allow for Internet access, trunk VLANs, translate multiple private IP addresses into public IP addresses, and filter packets. Which of the following network devices will allow for all functions? A. A VPN concentrator B. A switch C. A router D. A firewall

Answer: C Explanation: A router is a device which is capable of performing entire task required by the business owner.

Which of the following DNS records is used to identify a domain's SMTP server? A. CNAME B. PTR C. MX D. A Answer: C

Answer: C Explanation: Amail exchanger record(MX record) is a type of resource record in the Domain Name System that specifies a mail server responsible for accepting email messages on behalf of a recipient's domain, and a preference value used to prioritize mail delivery if multiple mail servers are available. The set of MX records of a domain name specifies how email should be routed with the Simple Mail Transfer Protocol (SMTP).

A user is having difficulty connecting a laptop to the company's network via a wireless connection. The user can connect to the network via a wired NIC. The technician suspects the laptop's wireless NIC has failed. The technician performs hardware diagnostics on the wireless NIC and discovers the hardware is working fine. Which of the following network troubleshooting methodology steps should the technician do NEXT? A. Establish a plan of action to resolve the problem. B. Test the theory to determine a cause. C. Re-establish a new theory or escalate. D. Implement the solution or escalate as necessary. Answer: C

Answer: C Explanation: As first theory doesn't work he will establish a new theorey or escalate it to the vendor hardware company to work on it.

Users inform an administrator that the network is slow. The administrator notices the bulk of the traffic is SIP and RTP traffic. Which of the following could the administrator do to help BEST alleviate the traffic congestion for the users? A. Create an ACL on the switches and routers that are dropping SIP and RTP packets. B. Create a QoS policy prioritizing users over RTP and SIP traffic. C. Create another VLAN for SIP and RTP traffic. D. Create a rule to throttle SIP and RTP to 10Kbps or less. Answer: C

Answer: C Explanation: As if we will create a vlan for sip and rtp traffic only this traffic will flow from the ports then .

A technician has a network with a mix of newer and older equipment. Which of the following settings would dynamically configure whether to use full or half duplex? A. Transmission speed B. Frequency C. Auto-negotiate D. Distance Answer: C

Answer: C Explanation: Autonegotiation is an Ethernet procedure by which two connected devices choose common transmission parameters, such as speed, duplex mode, and flow control. In this process, the connected devices first share their capabilities regarding these parameters and then choose the highest performance transmission mode they both support.

Ann, a technician, is installing network cables for an office building. Some of the cables are not showing active on the switch even when moved to different ports. Which of the following is MOST likely the cause? A. Port speed mismatch B. Faulty F-connectors C. Bad wiring D. Bad switch Answer: C

Answer: C Explanation: Bad wiring refers to the state when you do not follow a pattern and everything seems messed up and you are not able to figure out the cause.

Users have reported choppy audio in phone conversations since the implementation of SIP phones on the network. Which of the following should be implemented to alleviate the delays? A. Caching B. VoIP C. QoS D. SMTP Answer: C

Answer: C Explanation: By QoS we can prioritize the voice packets over data network. So delay and latency will get reduce.

In order to limit the number of dynamic addresses of hosts on a network, which of the following can be implemented? A. Scope options B. Leases C. Reservations D. DNS suffixes Answer: C

Answer: C Explanation: DHCP Reservation is used to assign a fixed IP Address to a device that always requires the same IP Address every time it is in use. This feature can be used for a print server, IP Camera, Network storage device as well as a computer

A network consultant arrives at a customer's site to troubleshoot their email server. The server is running a Linux operating system, but the consultant is only familiar with Windows operating systems. Which of the following troubleshooting steps should the consultant take? A. Document findings B. Identify the problem C. Escalate the problem D. Establish a plan of action Answer: C

Answer: C Explanation: It is better to escalate the problem if you are not aware of the situation as it saves downtime and keeps customer happy.

Which of the following will allow a technician to monitor all network traffic when connected to a mirror port? A. VLAN tags B. SNMP C. Packet sniffer D. Syslog Answer: C

Answer: C Explanation: Mirror ports just send the packet to the port which is selected to grab the packet of any destination port to capture that packets we need packet sniffer.

An application server is placed on the network and the intended application is not working correctly. Which of the following could be used to make sure sessions are being opened properly? A. Antivirus scanner B. IDS C. Packet sniffer D. Toner probe Answer: C

Answer: C Explanation: Packet Sniffer is a tool that can help you locate network problems by allowing you to capture and view the packet level data on your network. So we can capture the session and find the cause of failure.

A customer has requested a solution using multiple WAPs for wireless access. Which of the following should be different on each WAP to prevent wireless problems? A. Firewalls B. VLANs C. Channels D. Antenna types Answer: C

Answer: C Explanation: Protocol requires 16.25 to 22 MHz of channel separation (as shown above), adjacent channels overlap and will interfere with each other. Channels 1, 6, and 11 are the most common channels to choose, and most routers will use one of them as the default channel—but the general idea is to be as far away from everybody else as you can.

Which of the following WAN technologies has the HIGHEST latency? A. ADSL B. LTE C. Satellite D. WiMAX Answer: C

Answer: C Explanation: Satellite WAN latency is the delay caused by the physical distance a signal must travel from earth, to the satellite, and back to earth to complete a round-trip transmission. Because of the physics involved in the round-trip-time (RTT), end-to-end latency can take 600 milliseconds or more due to geosynchronous satellites orbiting miles above the earth.

Which of the following cable types supports the FURTHEST distance when connecting various MDFs? A. Multimode B. UTP C. Singlemode D. CAT6 Answer: C

Answer: C Explanation: Single-mode optical fiber (SMF) is an optical fiber designed to carry only a single ray of light (mode). These modes define the way the wave travels through space, i.e. how the wave is distributed in space.

Spanning-Tree Protocol is used with which of the following network devices? A. Router B. NIC C. Switch D. DHCP server Answer: C

Answer: C Explanation: Spanning Tree Protocol (STP) is a Layer 2 protocol that runs on bridges and switches. The specification for STP is IEEE 802.1D. The main purpose of STP is to ensure that you do not create loops when you have redundant paths in your network. Loops are deadly to a network.

Joe, a user, has a computer that has a link light on his network interface card (NIC); however, Joe is unable to access the Internet. Which of the following is the cause of this issue? A. Faulty GBIC B. Faulty SFP C. Cable is a crossover D. VLAN mismatch Answer: D

Answer: D Explanation: As user has link light on NIC that means he has connectivity with switch so he need to check his vlan assignment.

Which of the following reside at a minimum of Layer 3 of the OSI model? (Select TWO). A. Hub B. Switch C. MAC address D. IP address E. Router Answer: D, E

Answer: D, E

Which of the following layers of the OSI model make up the Network Interface layer of the TCP/IP model? (Select TWO). A. Application B. Physical C. Presentation D. Transport E. Data Link F. Network Answer: B, E

Answer: B, E

A network administrator decides to secure their small network by allowing only specific MAC addresses to gain access to the network from specific switches. Which of the following is described by this example? A. Packet filtering B. Hardware firewalls C. Port security D. Stateful inspection Answer: C

Answer: C

A network technician is designing a SOHO environment where cost is a consideration. The requirements include access to the Internet and access to the guest house which is 100 feet away. The location of the Internet modem is located in the main house. Which of the following is the BEST option to accomplish these requirements? A. Use two combined Internet/router/wireless devices, one in each house. B. Use a Layer 3 switch in the main house and a combined Internet/router/wireless device in the guest house. C. Use a combined Internet/router/wireless device in the main house and a wireless access point in the guest house. D. Use a single combined Internet/router/wireless device at the guest house. Answer: C

Answer: C

A technician has configured a router to authenticate VPN users to an LDAP server on the network. In order to allow the authentication service, both UDP and TCP ports needed to be allowed on the router. Which of the following services was MOST likely used? A. Kerberos B. TACACS+ C. RADIUS D. 802.1x Answer: C

Answer: C

A technician has set up a wired network IP scheme with the following specifications: DHCP: 192.168.1.100-150 Gateway: 192.168.1.1 DNS: 192.168.1.1 Which of the following is represented by this addressing scheme? A. Static B. QoS C. Dynamic D. Dynamic with static reservation Answer: C

Answer: C

A user informs the network administrator of increasingly common wireless connection problems. The administrator determines the user has recently received a new cordless phone. The phone is MOST likely causing which of the following conditions? A. Signal strength latency B. Bouncing signal C. Interference D. Crosstalk Answer: C

Answer: C

A user is having trouble with their fax machine disconnecting during transmissions. The technician believes that a DSL signal may be on the same line as the fax. Which of the following tools would MOST likely help prove this hypothesis? A. Multimeter B. Cable tester C. Lineman's handset D. Toner probe Answer: C

Answer: C

A user's network connection is slow. After testing the cabling, the cable tester shows that only pins 1, 2, 3 and 6 are being used. After accurately terminating both ends, the tester displays the same results. Which of the following is the MOST likely cause? A. DB loss on the cable B. Interference C. Split cable D. Distance limitations Answer: C

Answer: C

The TCP/IP application layer contains which of the following OSI layers? A. Layers 1,5,6,7 B. Layers 4,7 C. Layers 5,6,7 D. Layer 7 Answer: C

Answer: C

The systems administrator has assigned an IP address and default gateway to a standard Layer 2 switch. Which of the following would be the primary purpose of doing this? A. Allow VLAN routing B. Enable packet filtering on the switch C. Allow remote administration of the switch D. Enable MAC filtering on the switch Answer: C

Answer: C

Users are reporting a large decrease in network performance. After further investigation, the network administrator notices large amounts of traffic coming from a specific IP address. The network administrator needs to identify the payload of the network traffic. Which of the following could be used to collect that information? A. ipconfig B. ping C. sniffer D. route Answer: C

Answer: C

Users trying to access a website using HTTPS are being blocked by the firewall. Which of the following ports needs to be allowed? A. 80 B. 143 C. 443 D. 3389 Answer: C

Answer: C

Which of the following WAN technologies has the highest latency? A. POTS B. Cable C. Satellite D. DSL Answer: C

Answer: C

Which of the following defines an IP address that is NOT routed on the Internet? A. Multicast B. Public C. Private D. Classful Answer: C

Answer: C

Which of the following a network technician would use to reverse engineer malware and virus? A. IDS B. VLAN C. Virtual Machine D. Switch Answer: C

Answer: C Explanation: Virtual Machine --- even if the VM gets infected, host machine will run as normal.

A NAS appliance has had a failed NIC replaced. Now the NAS appliance is no longer visible on the network. Which of the following is the MOST likely cause of the problem? A. The network cable connecting the NAS to the network switch is bad. B. The network port that the appliance is connected to is assigned to the wrong VLAN. C. Port security on the Ethernet switch has disabled the port. D. Firewall needs to be updated for the new NAS device. Answer: C

Answer: C Explanation: As by port security switch find the changes in mac address because nic is replaced so due to security reason switch shut that port.

Which of the following wireless security measures, although widely implemented, does not provide strong security? A. IPSec B. WPA2 C. MAC address filtering D. 802.1x Answer: C

Answer: C Explanation: By MAC address filtering you can only filter layer 2 traffic but in security system layer 4 and layer 4 security is also essential.

Which of the following uses SSL encryption? A. SMTP B. FTP C. HTTPS D. SNMP Answer: C

Answer: C Explanation: HTTPS is the result of simply layering the Hypertext Transfer Protocol (HTTP) on top of the SSL/TLS protocol, thus adding the security capabilities of SSL/TLS to standard HTTP communications.

A user reports intermittent network connectivity. Which of the following should a technician configure on the managed switch to help troubleshoot this issue? A. SMTP B. SNTP C. SNMP D. SNAT Answer: C

Answer: C Explanation: SNMP, which is widely used in local area networks (LANs), lets you monitor network nodes from a management host. You can monitor network devices such as servers, workstations, printers, routers, bridges, and hubs, as well as services such as Dynamic Host Configuration Protocol (DHCP) or Windows Internet Name Service (WINS).

A technician replaces a failed router in an office with the same model unit using the default settings. After the installation, the technician reboots all of the PCs and servers. Upon reboot some of the PCs are receiving IP addresses on the same subnet as the new router; other PCs are receiving addresses on the same subnet as the servers. Which of the following most likely describes the issue? A. The DHCP lease pool was not large enough B. DHCP lease times were set too low C. The router is not the only DHCP server D. DHCP was not enabled on the replacement router Answer: C

Answer: C Explanation: This happens when there are multiple DHCP servers in the same LAN subnet. Here some machines are getting ip address from the router while some are getting ip address from another DHCP server present in the same domain.

A user's laptop is unable to keep a stable network connection. Which of the following measures would MOST likely need to be configured? A. SSID name B. WAP encryption strength C. WAP radio power D. Channel overlay Answer: C

Answer: C Explanation: WAP radio power is the signal strength through which you can specify the range from which you can stay connected to the network and access internet. Here, when the user is not able to maintain a stable connection then it is a problem with the signal strength for sure so you can try to increase the signal strength by increasing the radio power.

Discover, Offer, Request, and Acknowledge are the steps for which of the following protocols? A. DNS B. DOS C. DHCP D. DSL Answer: C

Answer: C Explanation: When we install a dhcp server into our network then dhcp server works on the basis of dora process first dhcp server sends a hello message in to the network to discover the clients pc and when any client pc found in the network then, dhcp server offers the IP to client pc. When clientpc selects any IP from dhcp server then client pc request for selected IP to dhcp server then dhcp server provide that IP to client pc and both send ackonledgement to each other.

A network administrator is implementing a wireless honeypot to detect wireless breach attempts. The honeypot must implement weak encryption to lure malicious users into easily breaking into the network. Which of the following should the network administrator implement on the WAP? A. WPA B. WPA2 C. WEP D. VPN Answer: C

Answer: C Explanation: Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. Introduced as part of the original 802.11 standard ratified in September 1999, its intention was to provide data confidentiality comparable to that of a traditional wired network. WEP, recognizable by the key of 10 or 26 hexadecimal digits, is widely in use and is often the first security choice presented to users by router configuration tools.

After a new user moves furniture into a cubicle, the computer does not connect to the network any longer. Which of the following would be the MOST likely reason? (Select TWO). A. Bad Ethernet switch port B. TX/RX reversed C. Bad connectors D. Bad patch cable E. Mismatched MTU Answer: C, D

Answer: C, D Explanation: It could be problem with the bad connector because the user just moved furniture to the cubicle and it is quite possible that the movement of the furniture has created problem by disrupting the cabling and connections. These two are the important things which can be broken down whenever there is a physical movement.

A customer wants to increase firewall security. Which of the following are common reasons for implementing port security on the firewall? (Select TWO). A. Preventing dictionary attacks on user passwords B. Reducing spam from outside email sources C. Shielding servers from attacks on internal services D. Blocking external probes for vulnerabilities E. Directing DNS queries to the primary server Answer: C, D

Answer: C, D Explanation: Port security is required because if we keep the ports unsecure then hackers can do port scanning and can compromise the internal secured network so we will have to shield servers to avoid attacks from outside and we need to block incoming scanning request coming from outside.

A customer with a SOHO requires fast, secure, cost-effective access to the Internet. Which of the following would be the MOST appropriate solution? (Select TWO). A. OC3 line with built-in firewall B. DS3 line with a separate firewall C. Cable modem with a separate firewall D. Dial-up modem with separate firewall E. DSL router with firewall capabilities Answer: C, E

Answer: C, E

A proxy server would MOST likely be installed to provide which of the following functions? (Select TWO). A. Combined DNS and DHCP hosting B. Encryption C. Content filtering D. Fault tolerance E. Website caching Answer: C, E

Answer: C, E Explanation: A content-filtering web proxy server provides administrative control over the content that may be relayed in one or both directions through the proxy. A caching proxy server accelerates service requests by retrieving content saved from a previous request made by the same client or even other clients.

Which of the following IP address/subnet mask combinations represent a broadcast address? (Select TWO). A. 200.200.100.0/28 B. 200.200.100.32/27 C. 200.200.100.63/27 D. 200.200.100.79/27 E. 200.200.100.95/27 F. 200.200.100.254/30 Answer: C, E

Answer: C, E Explanation: A broadcast address is a logical address at which all devices connected to a multiple-access communications network are enabled to receive datagrams. A message sent to a broadcast address is typically received by all network-attached hosts, rather than by a specific host. ReferencE.http://www.wikihow.com/Calculate-Network-and-Broadcast-Address

A strong network firewall would likely support which of the following security features for controlling access? (Select TWO). A. War driving B. War chalking C. MAC filtering D. FTP bouncing E. Port filtering Answer: C, E

Answer: C, E Explanation: MAC filtering set the security level at layer 2 and port filtering will set the security level on layer 4 so by filtering the traffic on both layers our network will get secure.

A technician needs multiple networks, high speeds, and redundancy on a system. Which of the following configurations should be considered for these requirements? (Select TWO). A. Routing table B. Next hop C. Port mirroring D. Port monitoring E. VLANs Answer: C, E

Answer: C, E Explanation: Port mirroring is used on a network switch to send a copy of network packets seen on one switch port (or an entire VLAN) to a network monitoring connection on another switch port. This is commonly used for network appliances that require monitoring of network traffic, such as an intrusion detection system, passive probe or real user monitoring (RUM) technology that is used to support application performance management (APM). In computer networking, a single layer-2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them via one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN or VLAN.

A technician needs to install a new wireless encryption system. They are evaluating the feasibility of implementing WPA. WPA increases protection over WEP by implementing which of the following? A. Strong RC4 encryption B. Shared secret keys C. AES encryption D. Key rotation Answer: D

Answer: D

A technician suspects invalid information in the local DNS cache of a workstation. Which of the following commands can be used to clear this? A. nslookup B. ifconfig C. dig D. ipconfig Answer: D

Answer: D

Which of the following standards can operate at 40MHz channel spacing? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D

A network administrator is tasked with blocking unwanted spam is being relayed by an internal email server. Which of the following is the FIRST step in preventing spam that is originating from bots on the network? A. Closing off port 25 on the firewall B. Closing off port 53 on the firewall C. Turning off the SMTP service on the email server D. Turning off the IMAP service on the email server Answer: A

Answer: A

A network technician has a RADIUS server IP address that must be included as part of the security settings for a WAP. Which of the following encryption types should the technician select? A. WPA enterprise B. TKIP C. WPA2 CCMP D. WEP 128-bit Answer: A

Answer: A

A network technician has determined a managed network switch has failed. The technician knows how to install a new switch, but not how to properly configure it. Which of the following troubleshooting steps should the technician take NEXT? A. Escalate the problem B. Identify potential effects C. Test the theory to determine cause D. Establish a plan of action to resolve the problem Answer: A

Answer: A

A new technician has been tasked with implementing a QoS policy for the Network. The technician decides it would be best to monitor the information traversing the network to gain statistical information on ports and protocols utilized. Which of the following tools should the technician use to complete this objective QUICKEST? A. Traffic analyzer B. Network sniffer C. SNMPv3 D. System logs Answer: A

Answer: A

A security appliance is blocking a DDoS attack on the network. Which of the following logs would be used to troubleshoot the traffic patterns trying to go across the network? A. IPS logs B. Application logs C. IDS logs D. History logs Answer: A

Answer: A

A technician finds that the network card is no longer functioning. At which of the following OSI layers is the problem occurring? A. Layer 1 B. Layer 3 C. Layer 5 D. Layer 7 Answer: A

Answer: A

A technician has been called about intermittent connectivity near IDF 2. Multiple cables were recently pulled through a common conduit. Which of the following is MOST likely the cause of the problem? A. Crosstalk B. Bad connectors C. Wrong DNS D. Duplicate IP address Answer: A

Answer: A

A technician needs to install network device in a SOHO network. The office requires 9 wired workstations to share and print data. Which of the following can the technician use? A. A 12 port unmanaged switch. B. A wired router with an 8 port switch and a WAN port. C. A wireless router with an 8 port switch, and a WAN port. D. A 8 port firewall with one console port. Answer: A

Answer: A

A user would like to connect two laptops together and transfer files via the Ethernet ports. Which of the following should MOST likely be provided to the user to accomplish this? A. Crossover B. Rollover C. Loopback D. Straight cable Answer: A

Answer: A

An administrator determines that an attack is taking place on the email server from a group of users on the same ISP. Which of the following is the BEST way to mitigate an attack on the network? A. Packet filtering B. Spam filtering C. MAC filtering D. CSU Answer: A

Answer: A

An administrator is attempting to troubleshoot a program that is unable to resolve IP addresses from FQDNs. Which of the following commands is used to check reverse DNS settings? A. dig B. ifconfig C. nbtstat D. route Answer: A

Answer: A

An administrator is trying to retrieve management information from the network devices on their LAN. Which of the following monitoring resources provides the ability to collect this information encrypted over the network? A. SNMPv3 B. VTP C. CDP D. IPSec Answer: A

Answer: A

An application is using port 2000 on a PC. Which of the following could an administrator do to determine what software is listening on that port? A. Run netstat B. Run dig C. Run nbtstat D. Run tracert Answer: A

Answer: A

At which layer of the OSI model do MAC addresses operate? A. Data Link B. Network C. Application D. Physical Answer: A

Answer: A

At which of the following layers do IP addresses exist? A. TCP/IP model Internet layer B. OSI model Data Link layer C. TCP/IP model Transport layer D. OSI model Physical layer Answer: A

Answer: A

Hubs are differentiated from switches in that between the two, only hubs have: A. a single collision domain. B. a single broadcast domain. C. multiple collision domains. D. multiple broadcast domains. Answer: A

Answer: A

Standards such as JPEG and ASCII operate at which of the following OSI model layers? A. Presentation B. Data link C. Session D. Application Answer: A

Answer: A

The network technician is troubleshooting a connectivity issue on a CAT5 cable with a wire map and notices that only pins 1, 3, and 6 are mapping correctly. Which of the following pins are open and keeping traffic from flowing correctly? A. 2 B. 4 C. 5 D. 8 Answer: A

Answer: A

The technician is working on a DNS problem. Which of the following software tool is the technician MOST likely to use to troubleshoot this issue? A. nslookup B. ipconfig C. ping D. nbtstat Answer: A

Answer: A

Which of the following BEST describes a load balancer? A. A device that splits traffic between multiple nodes of a clustered service. B. A device that allows multiple computers to access the internet through a single public IP address. C. A device that filters internet content based on rules and ACLs. D. A device that separates users onto separate WAPs for even distribution. Answer: A

Answer: A

Which of the following DHCP options is used to exclude IP addresses from being distributed to other computers? A. Reservations B. Suffixes C. Leases D. Gateways Answer: A

Answer: A

Which of the following WAN technologies has synchronous up/down speeds? A. T1 B. ADSL C. Satellite D. Cable broadband Answer: A

Answer: A

Which of the following authentication solutions use tickets that include valid credentials to access additional network resources? A. Kerberos B. RADIUS C. Multi-factor authentication D. TACACS+ Answer: A

Answer: A

Which of the following cable types is MOST commonly used with POTS? A. CAT3 B. Multimode C. CAT6 D. Coaxial Answer: A

Answer: A

Which of the following can a technician use when installing a wireless network in a lounge to prevent inappropriate website images? A. Content filter B. VPN concentrator C. Load balancer D. Proxy server Answer: A

Answer: A

Which of the following describes a manually entered route? A. Static B. Dynamic C. Multicast D. Unicast Answer: A

Answer: A

Which of the following network devices builds a table of ports to MAC addresses to forward packets only to necessary ports? A. Switch B. Hub C. Router D. Repeater Answer: A

Answer: A

Which of the following protocols uses port 3389 by default? A. RDP B. TFTP C. IMAP D. DNS Answer: A

Answer: A

Which of the following would be used to run an instance of a Layer 2 device within an application? A. Virtual switch B. Virtual router C. Virtual PBX D. NaaS Answer: A

Answer: A

Which of the following is the Telco end of a T1 demarc? A. Smart jack B. Network tap C. Proxy server D. IDF Answer: A

Answer: A Explanation: Smart jacks provides diagnostic capabilities. A very common capability provided by a smart jack is loopback, such that the signal from the telephone company is transmitted back to the telephone company. This allows the telephone company to test the line from the central office, without the need to have test equipment at the customer site. The telephone company usually has the ability to remotely activate loopback, without even needing personnel at the customer site. When looped back, the customer equipment is disconnected from the line.

Which of the following can a network technician change to help limit war driving? A. Signal strength B. SSID C. Frequency D. Channel Answer: A

Answer: A Explanation: War driving is a term used to describe the process of a hacker who, armed with a laptop and a wireless adapter card and traveling via a car, bus, subway train, or other form of mechanized transport, goes around sniffing for WLANs. Over time, the hacker builds up a database comprising the network name, signal strength, location, and ip/namespace in use.

An administrator notices SMTP traffic is being blocked by the company firewall. Which of the following ports should be opened? A. 25 B. 53 C. 110 D. 443 Answer: A

Answer: A Explanation: SMTP is an Internet standard for electronic mail (e-mail) transmission across Internet Protocol (IP) networks. SMTP uses TCP port 25.

The security measure used to reduce vulnerabilities for MOST network devices that require regular application and monitoring is: A. patch management B. security limitations C. documentation D. social engineering Answer: A

Answer: A Explanation: A patch is a piece of software designed to fix security vulnerabilities and other bugs, and improving the usability or performance.

Which of the following can be described as a DoS attack? A. Disabling a specific system and making it unavailable to users B. Implementing a keylogger C. Intercepting a packet and decrypting the contents D. Communicating with employees to get company information Answer: A

Answer: A Explanation: A denial of service (DoS) attack is a malicious attempt to make a server or a network resource unavailable to users, usually by temporarily interrupting or suspending the services of a host connected to the Internet.

Honeypots and honeynets are different in which of the following ways? A. Honeynets are managed collections of honeypots. B. Honeypots only test software security, not hardware. C. Honeynets require specialized hardware to implement. D. Honeypots are usually servers and honeynets are routers and switches. Answer: A

Answer: A Explanation: A honeynet is a network set up with intentional vulnerabilities; its purpose is to invite attack, so that an attacker's activities and methods can be studied and that information used to increase network security. A honeynet contains one or more honey pots, which are computer systems on the Internet expressly set up to attract and "trap" people who attempt to penetrate other people's computer systems.

A user is connecting to the Internet at an airport through an ad-hoc connection. Which of the following is the MOST likely security threat? A. Man-in-the-middle B. Social engineering C. Phishing D. DoS Answer: A

Answer: A Explanation: A man in the middle attack is one in which the attacker intercepts messages in a public key exchange and then retransmits them, substituting his own public key for the requested one, so that the two original parties still appear to be communicating with each other.

Which of the following network protocols is used to resolve FQDNs to IP addresses? A. DNS B. FTP C. DHCP D. APIPA Answer: A

Answer: A Explanation: An Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they're easier to e, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.commight translate to198.105.232.4.

Which of the following can be used to compromise a WPA encrypted wireless network when the rainbow table does not contain the key? A. Evil twin B. War chalking C. Buffer overflow D. Virus Answer: A

Answer: A Explanation: An evil twin is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider. This type of evil twin attack may be used to steal the passwords of unsuspecting users by either snooping the communication link or by phishing, which involves setting up a fraudulent web site and luring people there.

Which of the following network appliances will only detect and not prevent malicious network activity? A. IDS B. Network sniffer C. IPS D. Firewall Answer: A

Answer: A Explanation: An intrusion detection system(IDS) is a device or software application that monitors network or system activities for malicious activities or policy violations and produces reports to a management station. Some systems may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system.

A technician decides to upgrade a router before leaving for vacation. While away, users begin to report slow performance. Which of the following practices allows other technicians to quickly return the network to normal speeds? A. Change management B. Baselines C. Asset management D. Cable management Answer: A

Answer: A Explanation: As soon as technician found a problem he generates a change management request to make changes to fast up the speed of router.

Which of the following methods would be implemented to correct a network slowdown caused by excessive video streaming? A. Traffic shaping B. Proxy server C. VPN concentrator D. High availability Answer: A

Answer: A Explanation: As traffic shaping will prioritize the video packets over another packets and then video packets will travel fast on bandwidth.

A technician has been dispatched to investigate an issue where several users in the same aisle have stated they have had no network connection for over an hour. When the technician gets there, the network seems to be up and running. Which of the following should the technician do NEXT? A. Ask the users for more information, such as which applications were not functioning. B. Power-cycle the switch that the users share to clear out cached DNS records. C. Escalate the issue to the network administrator to have their domain credentials reset. D. Close and document the service call, as there was no actual issue affecting the users. Answer: A

Answer: A Explanation: Because the system was up and running when the technician reached there, he can ask for applications that were not working or can ask for more information so that he can isolate the problem. Power cycling will not help because the system is already up and recycling can wipe out logs. Escalation will also not help because the system is now up and running. Closing the call will be unfair because the same instance can occur again.

The network administrator has been tasked to create a network segment where resources can be placed for public web access. Which of the following should be implemented? A. DMZ B. Honeynet C. PAT D. Port security Answer: A

Answer: A Explanation: In computer security, a DMZ is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet.

A technician has been given the task to install a wireless network in a user's home. Which of the following should the technician consider when implementing the network? (Select TWO). A. That there is strong encryption enabled and configured on the access point. B. The user's home network has a correctly completed WHOIS entry. C. The access point is broadcasting the SSID based upon manufacturer's standards. D. There are no conflicts of channels in use by neighboring wireless networks. E. There are redundant internal DNS names set in the access point's settings. F. That the access point's MAC address is properly set in its configuration settings. Answer: A, D

Answer: A, D Explanation: Strong encryption is required to keep the user's internet safe and secure so as to avoid misuse of the internet connection and to ensure that channel conflicts are not there so that the signals do not compete with each other and user start to face intermittent connection.

A network administrator wants to add the firewall rule to allow SSH traffic to the FTP server with the assigned IP 192.168.0.15 from the Internet. Which of the following is the correct firewall rule? A. Allow ANY to 192.168.0.15 port 21 B. Allow ANY to 192.168.0.15 port 22 C. Allow ANY to 192.168.0.15 port 80 D. Allow ANY to ANY port ANY Answer: B

Answer: B

A technician has narrowed down the cause of a problem to two possible sources. Which of the following should the technician do NEXT? A. Implement a solution for both causes to be sure all possibilities are covered. B. Choose the more likely cause and test to confirm. C. Establish a plan of action for each. D. Choose the less likely cause and test to eliminate. Answer: B

Answer: B

A technician has two wireless 802.11g APs. One is set to channel 1 and the other channel 6. The APs appear to interfere with each other. Which of the following is MOST likely the reason? A. Channels below 9 overlap each other B. Channel width is set to 40MHz C. Channels are in the 5GHz range by mistake D. Channel 1 should have been set to 11 to avoid an overlap Answer: B

Answer: B

An administrator has set up a NIPS and connected it to the same switch as the internal firewall interface and the internal router. The device, however, only detects traffic from itself to the firewall or router. Which of the following explains why additional corporate traffic cannot be detected? A. The spanning tree protocol is preventing the traffic. B. Port Mirroring is set up incorrectly. C. The switch needs to be a layer 3 switch. D. The traffic is in a classless IP range and not classful IP range. Answer: B

Answer: B

The BEST way to determine the next hop of a packet is to check the: A. link state. B. routing table. C. routing metrics. D. convergence. Answer: B

Answer: B

Which of the following connectors is usable in SFP modules? A. ST B. LC C. LX D. SX Answer: B

Answer: B Explanation: LC connector is used in SFP modules.

A computer's DNS has bad cach records.which tools can be used to clear the DNS record. A. netstat B. ipconfig C. nslookup D. tracert Answer: B

Answer: B Explanation: ipconfig/flushdns will flush/clear the old DNS record, which includes good and bad cached records

In a SOHO environment, placing a VoIP unit on the outside edge of a LAN router enhances which of the following network optimization methods? A. Load balancing B. Quality of service C. Fault tolerance D. Traffic shaping Answer: B

Answer: B Explanation: In unified communication video, voice, data have only one end gateway so to give priority to avoid delay in voice and video we use QoS.

A technician is troubleshooting a computer that will not connect to the Internet. The PC is connected to the network. Which of the following tools should the technician use FIRST to understand the NIC configuration? A. Protocol analyzer B. ipconfig C. nslookup D. tracert Answer: B

Answer: B Explanation: Ipconfig is a command line utility available on all versions of Microsoft Windows starting with Windows NT. ipconfig is designed to be run from the Windows command prompt. This utility allows you to get the IP address information of a Windows computer. It also allows some control over active TCP/IP connections. ipconfig is an alternative to the older 'winipcfg' utility.

A network administrator suspects that recent traffic problems could be caused by a high CPU load on company routers. Which of the following would BEST be used to monitor CPU cycles on the routers? A. TACACS+ B. SNMP C. Syslog D. DOCSIS Answer: B

Answer: B Explanation: SNMP, which is widely used in local area networks (LANs), lets you monitor network nodes from a management host. You can monitor network devices such as servers, workstations, printers, routers, bridges, and hubs, as well as services such as Dynamic Host Configuration Protocol (DHCP) or Windows Internet Name Service (WINS).

You have been tasked with testing a CAT5 cable. A summary of the test results can be found on the screen. Step 1: Select the tool that was used to create the cable test results. Step 2: Interpret the best results and select the options that explains the results. Cable Test Results ----------Tool Choices 1, 2 Open 7ft ----------------- Multimeter 3, 6 Open 7ft ----------------- Toner Probe 4, 5 Open 7ft ----------------- Protocol Analyzer 7, 8 Open 7ft ----------------- OTDR ----------------------------------- Cable Certifier ---------------------------------- Crimper ---------------------------------- Punch Down Tool Answer: - Cable certifier - Incorrectly crimped cable

Answer: - Cable certifier - Incorrectly crimped cable

A company has asked the network administrator to restrict access to any websites with unauthorized material. Which of the following technologies would BEST accomplish this? A. Content filter B. Packet filter C. IPS D. IDS Answer: A

Answer: A

A company has gone through several upgrades on their network but unfortunately have no way of identifying who approved the upgrades. Which of the following should be implemented to track this type of work? A. Change management B. Asset management C. Access log D. Baselines Answer: A

Answer: A

A company is experiencing a denial of service attack and wants to identify the source IP address of the attacker in real time. Which method is the BEST way to accomplish this? A. Network sniffer B. Syslog C. SNMPv3 D. System logs Answer: A

Answer: A

A company needs to find a way to best route latency-sensitive traffic appropriately on an already congested network. Which of the following would be BEST suited for this purpose? A. QoS B. PPPoE C. RADIUS D. VPN Answer: A

Answer: A

A network administrator has decided to tighten company security after a recent data breach. The new scheme calls for a strong 10 character password, a special 4 digit pin code, and a one-time use dynamic token that is accessed via a smartphone application. Which of the following is being implemented? A. Two-factor authentication B. Biometric security C. Multi-factor authentication D. Single factor authentication Answer: A

Answer: A

A network administrator is replacing old switches to support a VoIP deployment. Based on this parameter, which of the following is MOST likely to be implemented on these new switches? A. PoE B. STP C. NAT D. VTP Answer: A

Answer: A

A network administrator is setting up a WAP and wants to disable the ability of gaining access from the parking garage. Which of the following should the network administrator review? A. Signal strength B. SSID name C. WPA2 encryption D. WEP encryption Answer: A

Answer: A

A technician needs to setup an Internet connection for a small office. There are five users that need the ability to use email and do online research. The office manager wants the connection to be always on and be as inexpensive as possible. Which of the following would BEST fit the needs of this office? A. Broadband B. T1 C. Frame Relay D. Satellite Answer: A

Answer: A

A technician, Joe, visits a site that has reported a network down emergency. He immediately reboots the switches and the router since the network is down. Which of the following network troubleshooting methodology steps should Joe have performed FIRST? A. Determine if anything has changed B. Once a theory is confirmed determine the next step is to resolve the problem C. Implement the solution or escalate as necessary D. Question the obvious Answer: A

Answer: A

A user calls the helpdesk to report not being able to access network resources over the company's Wi-Fi connection. During information gathering, the user mentions that the wireless network their computer is signed into is not the same name as it had been previously. Which of the following is the underlying cause? A. SSID mismatch B. Incorrect WPA key C. Signal bounce D. Antenna placement Answer: A

Answer: A

A user is trying to connect to the wireless network in the office but is unable to establish a consistent connection. The computer alternates connecting between several similarly configured access points. Which of the following would be the BEST way to address this issues? A. Adjust the signal strength of the access points with minimal coverage overlap. B. Increase the pool in each of the access points to avoid running out of IPs. C. Configure each access point to use a different method of encryption than the others. D. Reconfigure each of the access points so that they broadcast different SSIDs. Answer: A

Answer: A

A user moves from one office to another. When the user logs onto their computer, it has local access to shared drives but no Internet access. A technician determines that the computer has an IP address in the wrong subnet. Which of the following is MOST likely the cause? A. Incorrect VLAN B. MTU mismatch C. Hijacked HOSTS file D. Missing routes Answer: A

Answer: A

Two workstations are unable to communicate on the network despite having known good cables. When one device is unplugged from the network the other device functions properly. Which of the following could be the cause of this failure? A. Duplicate IP address B. Incorrect subnet mask C. Incorrect gateway D. Wrong DNS Answer: A

Answer: A

Users are reporting that all of a sudden some of the files stored on the remote file server share are becoming corrupted and cannot be opened. A technician is dispatched to the server room to troubleshoot. The technician verifies that no changes to the network infrastructure occurred recently. Which of the following tools is MOST likely to reveal why files are becoming corrupted? A. Environmental monitor B. OTDR C. Cable tester D. Punch down tool Answer: A

Answer: A

Which of the following services are affected by closing the default ports of 80 and 21 via ACL on a company router? A. FTP and basic Internet traffic B. HTTPS and IMAP traffic C. DNS and TELNET traffic D. VPN and RDP traffic Answer: A

Answer: A

Which of the following syslog severity codes indicates an emergency and that the system is unusable? A. 0 B. 1 C. 6 D. 7 Answer: A

Answer: A

Which of the following technologies prevents network collisions to maximize safe delivery of network data? A. CSMA/CA B. DWDM C. RADIUS D. SONET Answer: A

Answer: A

Ann, a home user, wishes to confine a wireless network to devices ONLY inside of her house. Which of the following will accomplish this? A. Decreasing radio strength B. MAC filtering C. WEP encryption D. SSID broadcast disable Answer: A

Answer: A Explanation: Decreasing Radio Strength will reduce signal strength outside the house and will accomplish what she is intending to do.

Which of the following components of wiring distribution is referred to as the core communications closet for an organization? A. MDF B. Smart jack C. IDF D. Demarc extension Answer: A

Answer: A Explanation: MDF stands for Main Distribution Frame and is the main computer room for servers, hubs, routers, DSL's, etc. to reside.

An administrator is using a packet sniffer to try to determine what is causing the traffic on the network. The administrator sees a lot of packets on port 25. Which of the following traffic types is MOST likely using port 25? A. SMTP B. SSH C. DNS D. TELNET Answer: A

Answer: A Explanation: Port no. 25 is assigned to smtp as documented by iana.

Joe, a network technician, is troubleshooting in a wiring closet in 2011. The cabling to all the equipment does not match the documentation from 2007. Which of the following configuration management methods has been overlooked? A. Change management B. System logs C. Asset management D. Baselining Answer: A

Answer: A Explanation: Change management is the request for to change any configuration which is documented.

Which of the following routing protocols utilizes the DUAL algorithm for determining best path? A. EIGRP B. RIPv2 C. OSPF D. RIP Answer: A

Answer: A Explanation: Diffusing Update Algorithm guarantees loop-free operation and provides a mechanism for fast convergence.

Which of the following would a technician do to monitor remote traffic through an access point? A. Enable an SNMP agent B. Enable network mapping C. Set monitoring SSID D. Select WPA2 Answer: A

Answer: A Explanation: Large networks with hundreds or thousands of nodes are difficult to manage without a large staff to monitor every computer. SNMP, which is widely used in local area networks (LANs), lets you monitor network nodes from a management host. You can monitor network devices such as servers, workstations, printers, routers, bridges, and hubs, as well as services such as Dynamic Host Configuration Protocol (DHCP) or Windows Internet Name Service (WINS).

While preparing to replace an old CAT3 cable with a CAT6 cable to implement VoIP, a facilities employee mistakenly disconnects the entire patch panel, including valid wiring to live workstations. Which of the following should an administrator use in order to connect those ports FIRST? A. Toner B. Multimeter C. Reflectometer D. Cable tester Answer: A

Answer: A Explanation: Toner® connects to any voice, data, or video cable to detect open/short circuits, continuity, AC/DC voltage* and dial tone* all while protecting up to 52 volt.

The network administrator installed a new dipole antenna that extends 100 feet (30.48 meters) from the existing AP. All components are correct, functional, and installed properly. However, during validation, there is a very weak signal coming from the antenna. Which of the following is the MOST likely cause of the issue? A. The installation exceeds the link limitations B. The antenna is mounted for vertical polarization C. The DBI output of the antenna is too low D. The radio is too powerful for the installation Answer: A

Answer: A Explanation: Unlike isotropic antennas, dipole antennas are real antennas. Dipole antennas have a different radiation pattern compared to isotropic antennas. The dipole radiation pattern is 360 degrees in the horizontal plane and 75 degrees in the vertical plane (assuming the dipole antenna is standing vertically) and resembles a donut in shape. Because the beam is "slightly" concentrated, dipole antennas have a gain over isotropic antennas of 2.14 dB in the horizontal plane. Dipole antennas are said to have a gain of 2.14 DBI(in comparison to an isotropic antenna).

Which of the following wireless technologies only uses the 5GHz spectrum but reaches a theoretical throughput of only 54Mbps? A. A B. B C. G D. N Answer: A

Answer: A Explanation: 802.11a standard uses the same core protocol as the original standard, operates in 5 GHz band, and uses a 52-subcarrier orthogonal frequency-division multiplexing (OFDM) with a maximum raw data rate of 54 Mbit/s, which yields realistic net achievable throughput in the mid-20 Mbit/s. The data rate is reduced to 48, 36, 24, 18, 12, 9 then 6 Mbit/s if required.

Management wants to be sure that the existing wiring infrastructure conforms to CAT5e standards. Which of the following is the correct tool? A. Cable certifier B. Cable tester C. OTDR D. Protocol analyzer Answer: A

Answer: A Explanation: A cable certifier is used to verify that a cable meets its specifications such as the bandwidth and frequency. For example, it can verify a CAT 5e cable meets specifications and supports speeds of 1000Mbps.

Which of the following is a Class A IP address? A. 10.4.0.1 B. 169.254.0.1 C. 192.168.0.1 D. 254.200.0.1 Answer: A

Answer: A Explanation: Class A ip address ranges from 10.0.0.0 to 10.255.255.255

Which of the following wireless standards uses a block encryption cipher rather than a stream cipher? A. WPA2-CCMP B. WPA C. WEP D. WPA2-TKIP Answer: A

Answer: A Explanation: Counter Cipher Mode with Block Chaining Message Authentication Code Protocol or CCMP (CCM mode Protocol) is an encryption protocol designed for Wireless LAN products that implement the standards of the IEEE 802.11i amendment to the original IEEE 802.11 standard. CCMP is an enhanced data cryptographic encapsulation mechanism designed for data confidentiality and based upon the Counter Mode with CBC-MAC (CCM) of the AES standard. It was created to address the vulnerabilities presented by WEP, a dated, insecure protocol.

An administrator determines there are an excessive number of packets being sent to a web server repeatedly by a small number of external IP addresses. This is an example of which of the following attacks? A. DDoS B. Viruses C. Worms D. Man-in-the-middle Answer: A

Answer: A Explanation: DDoS attack, a type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols

When a packet that is entering a switch port is encapsulated, which of the following is the switch performing? A. 802.1q B. Collision avoidance C. Port mirroring D. STP Answer: A

Answer: A Explanation: Encapsulation is the term associated with 802.1q which is enabled by default on many devices.

Which of the following performance benefits would multiple domain controllers BEST provide? A. Fault tolerance B. Caching engine C. Proxy server D. Quality of service Answer: A

Answer: A Explanation: Fault-tolerant design is a design that enables a system to continue its intended operation, possibly at a reduced level, rather than failing completely, when some part of the system fails. The term is most commonly used to describe computer-based systems designed to continue more or less fully operational with, perhaps, a reduction in throughput or an increase in response time in the event of some partial failure

Which of the following will BEST block a host from accessing the LAN on a network using static IP addresses? A. IP filtering B. Port filtering C. MAC address filtering D. DHCP lease Answer: A

Answer: A Explanation: IPFilter (commonly referred to asipf) is an open source software package that provides firewall services and network address translation (NAT) for many UNIX-like operating systems. The author and software maintainer is Darren Reed. IPFilter supports both IPv4 and IPv6 protocols, and is a stateful firewall.

A network technician has configured a new firewall with a rule to deny UDP traffic. Users have reported that they are unable to access Internet websites. The technician verifies this using the IP address of a popular website. Which of the following is the MOST likely cause of the error? A. Implicit deny B. HTTP transports over UDP C. Website is down D. DNS server failure Answer: A

Answer: A Explanation: In a network firewall rule set if a certain type of traffic isn't identified it will be denied or stopped by Implicit Deny.

Users are reporting that external web pages load slowly. The network administrator determines that the Internet connection is saturated. Which of the following is BEST used to decrease the impact of web surfing? A. Caching B. Load balancing C. Port filtering D. Traffic analyzer Answer: A

Answer: A Explanation: In computer science, a cache is a component that transparently stores data so that future requests for that data can be served faster. The data that is stored within a cache might be values that have been computed earlier or duplicates of original values that are stored elsewhere. If requested data is contained in the cache (cache hit), this request can be served by simply reading the cache, which is comparatively faster.

A client's computer is unable to access any network resources. Which of the following utilities can a technician use to determine the IP address of the client's machine? A. ipconfig B. nslookup C. dig D. tracert Answer: A

Answer: A Explanation: Ipconfig is a command line utility available on all versions of Microsoft Windows starting with Windows NT. Ipconfig is designed to be run from the Windows command prompt. This utility allows you to get the IP address information of a Windows computer. It also allows some control over active TCP/IP connections. Ipconfig is an alternative to the older 'winipcfg' utility.

A technician is troubleshooting authentication issues on a server. It turns out the clock on the server was 72 minutes behind. Setting the clock to the correct time fixed the issue. Given the scenario, which of the following authentication methods was being used? A. Kerberos B. CHAP C. TACACS+ D. RADIUS Answer: A

Answer: A Explanation: Kerberos is a distributed authentication service that allows a process (a client) running on behalf of a principal (a user) to prove its identity to a verifier (an application server, or just server) without sending data across the network that might allow an attacker or the verifier to subsequently impersonate the principal. Kerberos optionally provides integrity and confidentiality for data sent between the client and server.

Which of the following does Kerberos use to authenticate? A. Tickets B. Servers C. Users D. Clients Answer: A

Answer: A Explanation: Kerberos keeps a database of its clients and their private keys. The private key is a large number known only to Kerberos and the client it belongs to. In the case that the client is a user, it is an encrypted password. Network services requiring authentication register with Kerberos, as do clients wishing to use those services. The private keys are negotiated at registration.

A network administrator wants to see what ports are open on a server. Which of the following commands will show open ports? A. netstat B. tracert C. nbtstat D. nslookup Answer: A

Answer: A Explanation: Netstat command displays various network related information such as network connections, routing tables, interface statistics, masquerade connections, multicast memberships etc.

Which of the following ports would have to be allowed through a firewall for POP3 traffic to pass on its default port? A. 110 B. 123 C. 143 D. 443 Answer: A

Answer: A Explanation: Post Office Protocol (POP) is an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server over a TCP/IP connection. POP3 server listens on well-known port 110.

Which of the following network protocols is used for a secure command line interface for management of network devices? A. SSH B. TELNET C. IGMP D. HTTP Answer: A

Answer: A Explanation: Secure Shell is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services between two networked computers.

Which of the following remote access types requires a certificate for connectivity? A. SSH B. PPP C. HTTPS D. WEP Answer: A

Answer: A Explanation: Secure Shell(SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services between two networked computers that connects, via a secure channel over an insecure network, a server and a client (running SSH server and SSH client programs, respectively)

A network administrator tests a multimode fiber cable from end-to-end on a new link that is down and notices that the dB loss is -.09. Which of the following is the MOST likely cause? A. TXRX reversed B. dB loss too high C. dB loss too low D. Bad connectors Answer: A

Answer: A Explanation: Some Ethernet switches support medium dependent interface crossover (MDIX),which allows a switch port to properly configure its leads as transmit (Tx) or receive (Rx) leads. You can interconnect such switches with a straight-through cable (as opposed to a crossover cable). However, if a network device does not support MDIX, it needs an appropriate cable (that is, a crossover cable ) to allow its Tx leads to connect to the Rx leads on a connected device, and viceversa. Therefore, care must be taken when selecting cable types interconnecting network components.

Which of the following would MOST likely be used by a network administrator to test DNS resolution? A. dig B. ipconfig C. netstat D. nbtstat Answer: A

Answer: A Explanation: The command dig is a tool for querying DNS name servers for information about host addresses, mail exchanges, name servers, and related information. This tool can be used from any Linux (Unix) or Macintosh OS X operating system. The most typical use of dig is to simply query a single host.

An administrator needs to open ports in the firewall to support both major FTP transfer modes. Which of the following default ports was MOST likely opened? (Select TWO) A. 20 B. 21 C. 22 D. 23 E. 25 F. 53 Answer: A, B

Answer: A, B Explanation: FTP use both port 21 and 20 (port 21 for the command port and port 20 for the data).

Various desktop computers are not getting a link light even though the patch cables were replaced. Cables on a 110-block patch panel are suspected to be causing the issues. Which of the following hardware tools would MOST likely be used to troubleshoot and resolve the issue? (Select TWO). A. Cable certifier B. Ping command C. Punch down tool D. Crimper E. Toner probe Answer: A, C

Answer: A, C

An administrator would like to inspect all traffic flowing over the SMTP protocol on a given network. Which of the following tools would accomplish this? (Select TWO). A. Packet sniffer B. Honeypot C. Port mirroring D. IPS E. Port scanner F. IDS Answer: A, C

Answer: A, C Explanation: (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it. And we use packet sniffer to detect the types of packet.

Which of the following connector types are used in terminating singlemode fiber cables? (Select TWO). A. LC B. F-connector C. DB-9 D. BNC E. RJ-11 F. SC Answer: A, F

Answer: A, F Explanation: A variety of optical fiber connectors are available, but SC and LC connectors are the most common types of connectors on the market.[citation needed] Typical connectors are rated for 500-1,000 mating cycles. The main differences among types of connectors are dimensions and methods of mechanical coupling. Generally, organizations will standardize on one kind of connector, depending on what equipment they commonly use. Different connectors are required for multimode, and for single-mode fibers.

Wireless network users recently began experiencing speed and performance issues after access point 2 (AP2) was replaced due to faulty hardware. The original network was installed according to a consultant's specifications and has always worked without a problem. You a network technician have been tasked with evaluating the situation and resolving the issues to improve both performance and connectivity. Refer to the following diagram and perform any Necessary changes to the wireless and wired infrastructure by adjusting devices. Note. Adjust the LEAST number of devices needed to fix the issue all blue icons in the image are clickable.

Answer: AP2 configuration is not correct. The wireless mode should be 'G' and channel should be '11'. For the wired interface, the speed should be set to 100 and duplex to 'Full'. Click 'Submit'

A client has just leased a new office space in a busy commercial building and would like to install a wireless network. Several other tenants are on the same floor. Multiple wireless networks are present in the building. Which of the following can be changed on the client's wireless network to help ensure that interference from other wireless networks is at a minimum? A. WPA encryption key selection B. Channel selection C. Antenna types D. Disable SSID Answer: B

Answer: B

A company has been given a Class C address to be utilized for all devices. The company has several subnets and the largest subnet has 15 hosts. Which of the following represents the MINIMUM CIDR notation of this subnet mask? A. /26 B. /27 C. /28 D. /29 Answer: B

Answer: B

A company wants an administrator to perform a vulnerability test. The administrator finds the company has a POTS phone system. Which of the following can the administrator use to point out the phone system vulnerability? A. Honeypot B. Butt set C. Spyware D. Blue jacking Answer: B

Answer: B

A customer has requested that a new piece of network equipment be installed so that the customer can have multiple subnets for each department, but allow network traffic from each department to reach one another without the use of a router. Which of the following network devices would satisfy this customer's requirements? A. Packet filter B. Layer 3 switch C. Stateful firewall D. Wireless bridge Answer: B

Answer: B

A firewall that detects and prevents attacks from outside the network based on learned data patterns can BEST be described as which of the following? A. Signature based IDS B. Behavior based IPS C. Host based IPS D. Network based IDS Answer: B

Answer: B

A large company has experienced Internet slowdowns as users have increased their use of the Internet. Which of the following can the Network Administrator use to determine the amount of bandwidth used by type of application? A. Network maps B. Traffic analysis C. Syslog D. ICMP Answer: B

Answer: B

A multi-layer switch operates at which of the following OSI layers? A. Layers 1 and 5 B. Layers 2 and 3 C. Layers 4 and 5 D. Layers 5 and 6 Answer: B

Answer: B

A network administrator has been assigned the 192.168.2.64/26 network and assigns the following computer's IP addresses: - 192.168.2.70 - 192.168.2.100 - 192.168.2.125 - 192.168.2.130 When the administrator tries to ping the other computers from 192.168.2.130, an ECHO REPLY is not received. Which of the following must the network administrator do? A. Change the IP of 192.168.2.130 to 192.168.1.128. B. Change the IP of 192.168.2.130 to 192.168.2.126. C. Change the default gateway of 192.168.2.130 accordingly. D. Reconfigure the switch for the right VLAN. Answer: B

Answer: B

A network administrator is reviewing logs and notices that a device with a public IP address is trying to access the web server RDP port. Which of the following tools can be used to resolve the domain of the public IP address? A. arp B. nslookup C. ipconfig D. netstat Answer: B

Answer: B

A network administrator wants to perform a test to see if any systems are passing clear text through the network. Which of the following would be used? A. Social engineering B. Packet sniffing C. Rogue access point D. Man-in-the-middle Answer: B

Answer: B

A network is having problems with traffic flowing to several critical websites that are used for necessary company work. Which of the following appliances would BEST handle network traffic to increase network performance? A. Caching engine B. Traffic shaper C. Network based firewall D. Packet sniffer Answer: B

Answer: B

A router operates at which of the following layers of the OSI model? A. Layer 2 B. Layer 3 C. Layer 4 D. Layer 5 Answer: B

Answer: B

A technician is installing an 802.11n network. The technician is using a laptop that can connect at a maximum speed of 11 Mbps. The technician has configured the 802.11n network correctly but thinks it could be the type of WLAN card used on the laptop. Which of the following wireless standards is the WLAN card MOST likely using? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: B

Answer: B

A technician is trying to add another switch to the network with multiple VLANs. Which of the following should the technician configure on the interface to allow multiple VLANs? A. Mirroring B. Trunking C. Authenticating D. Bonding Answer: B

Answer: B

A technician is unable to easily trace physical connections within a network rack. Which of the following practices would save time in the future? A. Change management B. Cable management C. Asset management D. Setting baselines Answer: B

Answer: B

A technician needs to make a web server with a private IP address reachable from the Internet. Which of the following should the technician implement on the company firewall? A. DOCSIS B. NAT C. CIDR D. VPN Answer: B

Answer: B

A user has three different subnets in an office. Which of the following can be configured to allow two of the subnets to communicate directly with each other at the switch level? A. 802.1af B. 802.1q C. 802.1x D. 802.2 Answer: B

Answer: B

An IP address assigned from a DHCP server is said to be which of the following? A. Hybrid B. Dynamic C. Secure D. Static Answer: B

Answer: B

Ann, a technician, installs a wireless router in a network closet in a large office. She then configures all workstations in various offices on that floor to use the wireless connection. Maximum connection speed at each workstation is 54 Mbps. Some users complain that their network connection is very slow. Which of the following is MOST likely the problem? A. Workstations were configured with the wrong connection speed on the wireless adapter. B. Users with a slow connection are too far away from the wireless router. C. Users that cannot connect are configured on the wrong channel. D. Wireless network SSID is incorrect. Answer: B

Answer: B

In a small office environment, one computer is set up to provide Internet access to three other computers that are not interconnected. This is an example of which of the following topology types? A. Peer-to-peer B. Point-to-multipoint C. Hybrid D. Point-to-point Answer: B

Answer: B

In the event of a fire in an office building, which of the following cable types should be installed to prevent toxic gas from burning PVC cable coatings? A. CAT6a B. Plenum C. Crossover D. STP Answer: B

Answer: B

The network administrator just upgraded all of the WAPs to new ones with 2.4 GHz b/g/n support. The new WAPs reuse the same location and channel as the previous one and with no new external interference detected. However, performance issues are now occurring that did not exist before. Which of the following would correct the issue? A. Configure Wi-Fi Multimedia support B. Use only 20 MHz channel bandwidth C. Enable band steering to use 802.11n D. Configure Quality of Service Answer: B

Answer: B

The network technician is working in an office that has both VoIP telephone lines and analog lines. A user states that the fax machine is not sending or receiving faxes. The network technician determines that the fax machine uses an analog phone line. Which of the following tools would the technician use to troubleshoot the issue? A. Cable tester B. Buttset C. Toner probe D. Cable certifier Answer: B

Answer: B

The network technician needs to install fiber cabling to connect two buildings less than 984 feet (300 meters) apart. Which of the following fiber types should be installed? A. Singlemode B. Multimode C. Crossover D. F-Connector Answer: B

Answer: B

The phone company has provided a channelized T1 line. Which of the following should this line be connected to? A. Switch B. CSU/DSU C. IDF D. MDF Answer: B

Answer: B

Which of the following BEST describes a firewall that can be installed via Add/Remove programs on a Windows computer? A. Managed B. Software C. Hardware D. Wireless Answer: B

Answer: B

Which of the following assists a network administrator in reverse engineering malware and viruses? A. Virtual switches B. Virtual machines C. VLANs D. IDS Answer: B

Answer: B

Which of the following can use a third party back-end LDAP user database for authentication? A. ISAKMP B. TACACS+ C. PKI D. CHAP Answer: B

Answer: B

Which of the following characteristics allows an 802.11g WAP to have transfer speeds up to 108Mbps? A. MIMO technology B. Channel bonding C. Encryption type D. Frequency Answer: B

Answer: B

Which of the following dynamic routing protocols selects routing paths based upon hop count? A. BGP B. RIP C. OSPF D. IGRP Answer: B

Answer: B

Which of the following firewall rules will block destination telnet traffic to any host with the source IP address 1.1.1.2/24? A. Deny any source host on source port 23 to destination any B. Deny any source network 1.1.1.0/24 to destination any on port 23 C. Deny source host 1.1.12 on source port 23 to destination any D. Deny any source network 1.1.1.0/24 with source port 23 to destination any Answer: B

Answer: B

Which of the following is the minimum subnet mask to allow 172.16.1.5 and 172.16.4.3 to be on the same subnet? A. /19 B. /21 C. /22 D. /24 Answer: B

Answer: B

Which of the following is the radio frequency and data rate for 802.11g as specified by the IEEE standards? A. 2.0 GHz at 33 Mbps B. 2.4 GHz at 54 Mbps C. 2.4 GHz at 128 Mbps D. 5.0 GHz at 54 Mbps Answer: B

Answer: B

Which of the following protocols is used to provide secure authentication and encryption over non- secure networks? A. RADIUS B. TLS C. PPTP D. HTTP Answer: B

Answer: B

Which of the following should be mitigated by employing proper coding techniques when developing software? A. Distributed denial of service attacks B. Buffer overflows C. War driving D. Packet sniffing Answer: B

Answer: B

Which of the following spreads out each of the individual wires of a UTP cable onto their own metal connector? A. BNC connection B. 110 block C. Plenum D. LC connector Answer: B

Answer: B

Which of the following uses types and codes rather than ports? A. EIGRP B. ICMP C. UDP D. IPv6 Answer: B

Answer: B

Which of the following wireless router security measures provides access to a network by allowing only devices on an approved physical address list? A. Port filtering B. MAC filtering C. SSID masking D. Port forwarding Answer: B

Answer: B

Which of the following wireless standards can operate on the same frequency but are not compatible? A. 802.11a / 802.11b B. 802.11a / 802.11n C. 802.11b / 802.11g D. 802.11g / 802.11n Answer: B

Answer: B

Which of the following would a network administrator use to scan a network for vulnerabilities? A. ICMP B. NMAP C. ACL D. TCPDUMP Answer: B

Answer: B

Which of the following would be used on a network to ensure access to resources if a critical host becomes unavailable? A. QoS B. CARP C. VLAN D. DHCP server Answer: B

Answer: B

Which wireless standard works at a MAXIMUM data rate of up to 11Mbps? A. 802.11a B. 802.11b C. 802.11g D. 802.1q Answer: B

Answer: B

An unusual amount of activity is coming into one of the switches in an IDF. A malware attack is suspected. Which of the following tools would appropriately diagnose the problem? A. Cable tester B. Protocol analyzer C. Load balancer D. OTDR Answer: B

Answer: B Explanation: A packet analyzer is a computer program or a piece of computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the sniffer captures each packet and, if needed, decodes the packet's raw data, showing the values of various fields in the packet, and analyzes its content.

Which of the following performs authentication and provides a secure connection by using 3DES to encrypt all information between two systems? A. HTTPS B. SSH C. RSA D. SSL Answer: B

Answer: B Explanation: DES encryption algorithm encrypts data three times. Three 64-bit keys are used, instead of one, for an overall key length of 192 bits (the first encryption is encrypted with second key, and the resulting cipher text is again encrypted with a third key).

On which of the following OSI model layers would a MAC address be used? A. Network B. Data Link C. Transport D. Physical Answer: B

Answer: B Explanation: The ITU-TG.hn standard, which provides high-speed local area networking over existing wires (power lines, phone lines and coaxial cables), includes a complete data link layer which provides both error correction and flow control by means of a selective repeat Sliding Window Protocol.

Management has decided that they want a high level of security. They do not want Internet requests coming directly from users. Which of the following is the BEST recommendation? A. Proxy server B. Layer 3 switch C. Firewall Answer: B

Answer: B Explanation: A proxy server is a server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers.

Which of the following wireless standards provide speed of 11Mbps? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: B

Answer: B Explanation: 802.11a - 54Mbps - OFDM 802.11b - 11Mbps - DSSS 802.11g - 54Mbps - OFDM/DSSS 802.11n - 150/300Mbps (MIMO) - OFDM

In contrast to earlier Wi-Fi speeds, which of the following BEST describes the antenna and channelization properties used in 802.11n? A. MIMO, DSSS B. MIMO, OFDM C. CSMA, DSSS D. CSMA, CDMA Answer: B

Answer: B Explanation: 802.11n builds upon previous 802.11 standards by adding multiple-input multiple- output (MIMO). The additional transmitter and receiver antennas allow for increased data throughput through spatial multiplexing and increased range by exploiting the spatial diversity through coding schemes like Alamouti coding. The speed is 150 Mbit/s (even 250 Mbit/s in PHY level)

Multiple computers are connected to a hub near a wall plate. In order to get to the computers, students step on and around the cable that connects the teacher's station, a few feet away, to the same hub. The teacher is experiencing no network connectivity. Which of the following is MOST likely the problem? A. Cross-talk B. Split cables C. Distance D. EMI Answer: B

Answer: B Explanation: A split cable is invisible to wire maps and continuity testers, making it very difficult to troubleshoot.

Which of the following technologies is used on cellular networks? A. Ethernet B. CDMA C. CSMA/CA D. POTS Answer: B

Answer: B Explanation: CDMA is an example of multiple accesses, which is where several transmitters can send information simultaneously over a single communication channel. This allows several users to share a band of frequencies (see bandwidth). To permit this to be achieved without undue interference between the users CDMA employs spread-spectrum technology and a special coding scheme.

Which of the following WAN technologies uses an analog phone line to transmit data? A. LTE B. DSL C. Satellite D. Cable Answer: B

Answer: B Explanation: DSL is a high-speed Internet service like cable Internet. DSL provides high-speed networking over ordinary phone lines using broadband modem technology. DSL technology allows Internet and telephone service to work over the same phone line without requiring customers to disconnect either their voice or Internet connections.

The security administrator needs to restrict specific devices from connecting to certain WAPs. Which of the following security measures would BEST fulfill this need? A. WAP placement B. MAC address filtering C. Content filtering D. Encryption type and strength Answer: B

Answer: B Explanation: MAC Filtering (or EUI filtering, or layer 2 address filtering) is a security access control method whereby the 48-bit address assigned to each network card is used to determine access to the network.

A network administrator is looking to implement a solution allowing users to utilize a common password to access most network resources for an organization. Which of the following would BEST provide this functionality? A. RADIUS B. Single sign on C. Multifactor authentication D. Two-factor authentication Answer: B

Answer: B Explanation: Single sign-on (SSO) is a session/user authentication process that permits a user to enter one name and password in order to access multiple applications. The process authenticates the user for all the applications they have been given rights to and eliminates further prompts when they switch applications during a particular session.

Which of the following technologies allows multiple staff members to connect back to a centralized office? A. Peer to Peer B. VPN C. PKI D. VLAN Answer: B

Answer: B Explanation: VPN enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.

A technician working for a company with a wireless network named Wireless A notices a second wireless network named Wireless B. Wireless B is MOST likely a: A. man-in-the-middle attack B. rogue access point C. evil twin D. packet sniffer Answer: B

Answer: B Explanation: A rogue access point is a wireless access point that has either been installed on a secure company network without explicit authorization from a local network administrator, or has been created to allow a hacker to conduct a man-in-the-middle attack.

A network administrator is deploying a new wireless network with over 50 thin WAPs and needs to ensure all WAPs use consistent firmware and settings. Which of the following methods provides this functionality? A. Use WAP auto-configuration B. Use a wireless controller C. Use PXE to load and track WAPs D. Use DHCP scope options Answer: B

Answer: B Explanation: A wireless controller is used in combination with the Lightweight Access Point Protocol (LWAPP) to manage light-weight access points in large quantities by the network administrator or network operations center. The wireless LAN controller is part of the Data Plane within the Cisco Wireless Model. The WLAN controller automatically handles the configuration of anywhere from 6 to 6000 wireless access-points, depending on the model.

Which of the following monitoring devices are used only to recognize suspicious traffic from specific software? A. Signature based IPS B. Application based IDS C. Anomaly based IDS D. Application based IPS Answer: B

Answer: B Explanation: An APIDS monitors the dynamic behavior and state of the protocol and will typically consist of a system or agent that would typically sit between a process, or group of servers, monitoring and analyzing the application protocol between two connected devices.

Which of the following allows a malicious attacker to view network traffic if the attacker is on the same network segment as Joe, an administrator? A. DoS attack B. Man-in-the-middle attack C. Smurf attack D. Xmas attack Answer: B

Answer: B Explanation: An attack where a user gets between the sender and receiver of information and sniffs any information being sent. In some cases, users may be sending unencrypted data, which means the man-in-the-middle(MITM) can obtain any unencrypted information. In other cases, a user may be able to obtain information from the attack, but have to unencrypt the information before it can be read.

A user's workstation is experiencing multiple errors when trying to open programs. Which of the following log files should the technician review to assist in troubleshooting these errors? A. History Log B. Application Log C. System Log D. Security Log Answer: B

Answer: B Explanation: As application logs provide the user whether application is compatible with system or not. Or what is the cause which is making trouble.

Joe, a remote user, has called the helpdesk with an issue on his machine. The technician would like to remote into the machine for troubleshooting but does not know the IP address or host name. Which of the following commands can the technician ask Joe to execute to gain this information? A. netstat B. ipconfig C. ping D. traceroute Answer: B

Answer: B Explanation: As ipconfig command will give the information which is assigned to nic for communication so that technician will contact Joe with his ip.

A vendor releases an emergency patch that fixes an exploit on their network devices. The network administrator needs to quickly identify the scope of the impact to the network. Which of the following should have been implemented? A. Change management B. Asset management C. Network sniffer D. System logs Answer: B

Answer: B Explanation: Asset management is defined as the business practice of managing and optimizing the purchase, deployment, maintenance, utilization, and disposal of hardware and software applications within an organization.

Some visitors are unable to access the wireless network. The network's wireless infrastructure is comprised of three different buildings with the configurations listed below. Wireless network in Building A and C is used exclusively for internal employees and Building B is used for visitors and requires no additional configuration on their devices. Which of the following settings would need to be modified to provide wireless access to all visitors? Building A Building B Building C Channel: 2 Channel: 6 Channel: 11 Encryption: WPA2Encryption: WPA2Encryption: WPA2 A. Encryption set to Open in all Buildings B. Encryption set to Open in Building B C. Encryption set to WEP in Building B D. Channel set to 11 in Building B Answer: B

Answer: B Explanation: Because the building B is in the middle, the wireless access router will have reachability to the building A and C. Now, the only thing that we need to do is to open the Wireless access on B for the guest users for the WAP in B so that the users coming to building A and C can get access to internet using the open connection.

Which of the following describes a single computer that is setup specifically to lure hackers into revealing their methods, and preventing real attacks on the production network? A. Evil twin B. Honeypot C. DMZ D. Honeynet Answer: B

Answer: B Explanation: In computer terminology, a honeypot is a trap set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems.

The ISP needs to terminate the WAN connection. The connection should be located in the network server room where the company LAN equipment resides. Which of the following identifies the location? A. Smart jack B. MDF C. VPN D. 66 block Answer: B

Answer: B Explanation: Short for main distribution frame, a cable rack that interconnects and manages the telecommunications wiring between itself and any number of IDFs. Unlike an IDF, which connects internal lines to the MDF, the MDF connects private or public lines coming into a building with the internal network.

Which of the following would be the BEST solution for an IDS to monitor known attacks? A. Host-based B. Signature-based C. Network-based D. Behavior-based Answer: B

Answer: B Explanation: Signature detection involves searching network traffic for a series of bytes or packet sequences known to be malicious. A key advantage of this detection method is that signatures are easy to develop and understand if you know what network behavior you're trying to identify.

Which of the following features will a firewall MOST likely use to detect and prevent malicious traffic on the network? A. Zone filtering B. Signature identification C. Port identification D. Port scanner Answer: B

Answer: B Explanation: Signature-based detection really is more along the lines of intrusion detection than firewalls. However, many personal firewalls and some corporate firewalls contain this functionality. Essentially, the system can be configured to look for specific patterns, known to be malicious, and block the traffic.

When troubleshooting a connectivity issue, which of the following commands will give the technician a list of the host names connected to the network? A. ping B. nbstat C. arp D. msconfig Answer: B

Answer: B Explanation: The Nbstat command is a great command to use when you need to display the NetBIOS over TCP/IP protocol statistics. The Nbstat command can also be used to display NetBIOS name tables for both local and remote computers.

Which of the following is needed when using WPA2-Enterprise wireless encryption? A. TFTP B. RADIUS C. LDAP D. IPSec Answer: B

Answer: B Explanation: The WPA2 standard supports two different authentication mechanisms: one using standard RADIUS servers and the other with a shared key, similar to how WEP works.

Which of the following connector types would be found with a VoIP system utilizing CAT6 cabling? A. SC B. RJ-45 C. RJ-11 D. BNC Answer: B

Answer: B Explanation: The heavier wire in some Cat 6 cables makes them too thick to attach to standard 8P8C (RJ- 45) connectors without a special modular piece

A network administrator is adding 24 - 802.3af class 2 VoIP phones and needs to purchase a single PoE switch to power the phones. Which of the following is the MINIMUM PoE dedicated wattage the switch supports to power all of the phones at full power? A. 96W B. 168W C. 240W D. 369.6W Answer: B

Answer: B Explanation: The switch supports 168W to power all the phones at full power.

Which of the following is the control when observing network bandwidth patterns over time? A. Network log B. Baseline C. Flow data D. Interface statistics Answer: B

Answer: B Explanation: To successfully baseline a network it is important to consider two functions; performance at protocol level and performance at application level. There are many significant metrics to consider at the protocol level, but only a few which are critical. The most important is bandwidth utilization compared with bandwidth availability. The most likely cause of poor network performance is insufficient bandwidth. Trending bandwidth utilization allows you to recognize problem areas, provide enough bandwidth to reach performance objectives, and predict future capacity requirements. Changes in bandwidth utilization patterns also provide a clear indication of network usage alterations, such as a change in end-user behavior, or the unauthorized addition of an application.

Stateful packet inspection is a security technology used by which of the following devices? A. Unmanaged switch B. Hardware firewall C. Bridge D. IDS Answer: B

Answer: B Explanation: With Stateful Packet Inspection (SPI), every time a packet is sent out of the computer, the firewall keeps track of it. When a packet comes back to the firewall, the firewall can tell whether or not the in-bound packet is a reply to the packet that was sent out. This way, the firewall can handle most network traffic safely without a complex configuration of firewall rules.

Compare the settings below to determine which of the following issues is preventing the user from connecting to a wireless network. AP1 (a/b/g/n) User PC Wireless-G SSID iCorpOne SSID.icorpone WEP Key: 337D1FAB10 WEP Key: 33dfab10 Index: 1 Index: 1 Mode: Mixed Mode: 802,11G Channel: 1 Channel: Auto Which of the following settings is incorrect on the client? A. The mode is incorrect B. SSID Mismatch C. Incorrect WEP Key D. Channel is set incorrectly Answer: B

Answer: B Explanation: the first thing which will be checked is the SSID and it is case sensitive but in the above shown example, it is not same so it will stop user from connecting.

A customer is implementing a VoIP infrastructure using an existing network. The customer currently has all network devices on the same subnet and would like the phones to be powered without the use of an AC adapter. Which of the following features should be enabled and configured to allow for reliable performance of the VoIP system? (Select THREE). A. WEP B. PoE C. VLANs D. SSL VPN E. IDS F. QoS Answer: B, C, F

Answer: B, C, F Explanation: As customer don't want to use Ac adapter so Power over Ethernet is best option (PoE) as in this switch provide power to phones. Phones will transfer their power requirement via cdp to vlan assigned and QoS provide the voice packet priority over the data packets to avoid jitter.

Which of the following are considered AAA authentication methods? (Select TWO). A. Kerberos B. Radius C. MS-CHAP D. TACACS+ E. 802.1X Answer: B, D

Answer: B, D

A user arrives at a new house and the Internet provider states the connection will run through the cable. If the user wants to install multiple PCs, which of the following will the user need in order to establish a connection? (Select TWO). A. VPN B. Router C. T1 card D. WEP E. Modem Answer: B, E

Answer: B, E

A company has one public IP address, and only one device needs to be able to connect to the Internet at a time. Which of the following is the BEST option for connectivity? A. VLSM B. CIDR C. NAT D. PAT Answer: C

Answer: C

A company is connected to an ISP, but owns the premise router with an internal CSU/DSU. Which of the following is considered the demarc? A. Premise router B. ISP router C. Smart jack D. CSU/DSU Answer: C

Answer: C

A consultant has been hired to wire a simple small office of ten computers to a layer 2 Ethernet 100BaseT switch. Which of the following cabling will be needed for the installation? A. Multimode fiber B. RG-59 coaxial C. CAT6a D. CAT3 Answer: C

Answer: C

A network administrator currently collects log files from several different servers. Which of the following would allow the network administrator to collect log files on a centralized host? A. The network administrator should install and configure a traffic analysis server. B. The network administrator should install and configure a DMZ server. C. The network administrator should install and configure a syslog server. D. The network administrator should install and configure a network sniffer. Answer: C

Answer: C

A network administrator is implementing an IPS on VLAN 1 and wants the IPS to learn what to prevent on its own. Which of the following would MOST likely be installed? A. Honeynet B. Signature based IPS C. Behavior based IPS D. Host based IPS Answer: C

Answer: C

A network administrator notices that load balancing is not working properly on the web cluster as previously configured. In speaking with management, a change to the IP addressing scheme was made yesterday which possibly affected one member of the cluster. Due to the timing of the events, the administrator theorizes that this change caused the problem. Which of the following should the administrator do NEXT? A. Escalate to the management team B. Change the IP address back to its previous state C. Test the theory by analyzing logs D. Create a plan of action to present to management Answer: C

Answer: C

A small office is looking to deploy wireless to cover one half of the work area only. The technician is restricted to suspending the WAP in the middle of the office due to network jack limitations. Which of the following antenna types would BEST meet these requirements? A. Dipole B. Parabolic C. Directional D. Omni-directional Answer: C

Answer: C

A technician has spent most of the day replacing a server running DHCP. Some of the users have begun to call the help desk stating that Internet connection stopped working even after rebooting. Upon investigation, the users' PCs with issues all have IP addresses that start with 169.254.x.x. The technician completes the replacement and powers on the new DHCP server. Which of the following is the BEST way to provide the PCs with issues a new IP address? A. Statically assign a legitimate IP address, and then set the PCs' NICs to DHCP B. Inform each user to replace 169.254 with 192.168 C. Wait five minutes until the PC resends a DHCP request D. Run netstat on each PC and then reboot into safe mode Answer: C

Answer: C

A user at a hotel sees two SSIDs; both are called "HotelWireless". After the PC connects to one of the APs, the user notices their browser homepage has been changed. Which of the following BEST describes this AP? A. Man-in-the-middle B. DDoS C. Evil twin D. War driving Answer: C

Answer: C

DHCP uses which of the following ports by default? A. 21 B. 23 C. 68 D. 443 Answer: C

Answer: C

Due to a recent change in company policy, all users managing network infrastructure devices must use SSH v2 and all administrative activity must be collected on a central store. Which of the following should the network administrator deploy to comply with the new collection requirements? A. Network intrusion detection B. Traffic analysis tool C. Syslog server D. Network sniffer Answer: C

Answer: C

If a technician does not assign an IP address to a device, the DHCP server will assign the device A. A. static IP address. B. reservation. C. dynamic IP address. D. MAC address. Answer: C

Answer: C

MIMO technology in the 802.11n standard provides for which of the following benefits? A. Channel expansion B. Gigabit wireless bandwidth C. Multipath support D. Channel bonding Answer: C

Answer: C

The DHCP server leases IP addresses 10.162.233.158 to WBAC11 for a period of 14 days. At which of the following times would WBAC11 send an initial request to the DHCP server to renew the IP address lease? A. Day 4 B. Day 6 C. Day 8 D. Day 10 Answer: C

Answer: C

Users report that they are unable to access the production server with IP address 192.168.30.17. These users need to be provided access without changing any subnet to VLAN information. The VLANs configured on the network are listed below: DepartmentVLAN #Subnet used Marketing20192.168.20.0/28 Customer Service25192.168.20.64/28 Finance30192.168.30.0/28 WHSE35192.168.30.16/28 Sales40192.168.3.16/28 The users experiencing this issue need to be added to which of the following VLANs? A. 25 B. 30 C. 35 D. 40 Answer: C

Answer: C

Which of the following STP states indicates an inactivated port due to a loop? A. Disabled B. Learning C. Blocking D. Forwarding Answer: C

Answer: C

Which of the following WAN technologies utilizes an optical SONET carrier and has a maximum bandwidth of 155.54Mbps? A. DS3 B. E3 C. OC3 D. T3 Answer: C

Answer: C

Which of the following attack types is being used if the originating IP address has been spoofed? A. Ping flood B. Trojan C. Smurf D. Worm Answer: C

Answer: C

Which of the following cable types is employed to protect against interference in the physical environment or when security is a concern? A. STP B. RG-6 C. Fiber D. RG-59 Answer: C

Answer: C

Which of the following configurations of a wireless network would be considered MOST secure? A. WEP using MAC Filtering B. WEP and hiding the SSID C. WPA2 D. WPA TKIP and hiding the SSID Answer: C

Answer: C

Which of the following is a link state routing protocol? A. RIPv2 B. BGP C. IS-IS D. RIP Answer: C

Answer: C

Which of the following is true of a client/server topology? A. Virtual servers are used to stream data to other remote servers B. Servers are used to connect to centralized clients C. Remote clients connect to a centralized server D. Remote clients connect to each other via a virtual server Answer: C

Answer: C

Which of the following is used to determine whether or not a user's account is authorized to access a server remotely? A. VPN B. RDP C. LDAP D. Encryption Answer: C

Answer: C

Which of the following is used to explain guidelines for users while using network resources? A. Network cut sheet B. Baselines C. Acceptable use policy D. Regulations Answer: C

Answer: C

Which of the following provides RSA encryption at the session layer? A. SSH B. ISAKMP C. SSL D. TLS Answer: C

Answer: C

Which of the following source ports is MOST likely to be used by a client when making an outbound TCP connection to a windows server? A. 80 B. 445 C. 3000 D. 3389 Answer: C

Answer: C

Which of the following tools would a technician use to terminate CAT6 wires to the inside of the wall jack? A. Toner probe B. Cable tester C. Punch down D. Crimper Answer: C

Answer: C

A company is looking for the simplest solution to help prioritize VoIP traffic on its congested network. Which of the following would BEST accomplish this? A. MPLS B. Caching engines C. QoS D. Load balancing Answer: C

Answer: C Explanation QoS is the service where you can prioritize traffic running over one protocol as compared to the other. It is very similar to the term where you are opening a VIP queue for allowing that traffic to pass.

A small office has created an annex in an adjacent office space just 20 feet (6 meters) away. A network administrator is assigned to provide connectivity between the existing office and the new office. Which of the following solutions provides the MOST security from third party tampering? A. CAT5e connection between offices via the patch panel located in building's communication closet. B. CAT5e cable runs through ceiling in the public space between offices. C. VPN between routers located in each office space. D. A WEP encrypted wireless bridge with directional antennae between offices. Answer: C

Answer: C Explanation: A VPN connection across the Internet is similar to a wide area network (WAN) link between the sites. From a user perspective, the extended network resources are accessed in the same way as resources available from the private network.

The company is setting up a new website that will be requiring a lot of interaction with external users. The website needs to be accessible both externally and internally but without allowing access to internal resources. Which of the following would MOST likely be configured on the firewall? A. PAT B. DHCP C. DMZ D. NAT Answer: C

Answer: C Explanation: DMZ is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a larger and untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN); an external attacker only has access to equipment in the DMZ, rather than any other part of the network.

Several users are reporting connectivity issues with their laptops. Upon further investigation, the network technician identifies that their laptops have been attacked from a specific IP address outside of the network. Which of the following would need to be configured to prevent any further attacks from that IP address? A. Port security B. IDS C. Firewall rules D. Switch VLAN assignments Answer: C

Answer: C Explanation: Firewall rules block or allow specific traffic passing through from one side of the router to the other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively allowing only specific outside users to access specific resources. Outbound rules (LAN to WAN) determine what outside resources local users can have access to.

Which of the following network topologies describes a network where each node is connected to every other node? A.us B. Star C. Mesh D. Ring Answer: C

Answer: C Explanation: Ina true mesh topology every node has a connection to every other node in the network.

Which of the following could be installed to allow a home user with one desktop computer to economically have Internet access in every room in the house? A. Fiber optic B. CAT6 C. Broadband over powerline D. CAT5 Answer: C

Answer: C Explanation: Internet access service through existing power lines is often marketed as broadband over power lines (BPL), also known as power-line Internet or power band. A computer (or any other device) would need only to plug a BPL modem into any outlet in an equipped building to have high-speed Internet access

A technician notices a newly installed CAT5 cable is longer than the standard maximum length. Which of the following problems would this MOST likely cause? A. Split cable B. EMI C. DB loss D. Crosstalk Answer: C

Answer: C Explanation: The maximum length for a cable segment is 100 m per TIA/EIA 568-5-A. If longer runs are required, the use of active hardware such as a repeater or switch is necessary. The specifications for 10BASE-T networking specify a 100metre length between active devices. This allows for 90metres of solid-core permanent wiring, two connectors and two stranded patch cables of 5metres, one at each end.

Which of the following WAN technology types has the GREATEST latency? A. ISDN B. Fiber C. Satellite D. Cable Answer: C

Answer: C Explanation: Because satellites provide a microwave radio relay technology complementary to that of communication cables. They are also used for mobile applications such as communications to ships, vehicles, planes and hand-held terminals, and for TV and radiobroadcasting.

A network administrator is performing a penetration test on the WPA2 wireless network. Which of the following can be used to find the key? A. DoS B. Buffer overflow C. Dictionary file D. SQL injection Answer: C

Answer: C Explanation: A file used by the debugger. It contains information about a program's structure and contents. The Compiler creates the dictionary file in the first phase of compilation, when checking the syntax. A dictionary file has the filename extension.idy, and is often referred to an.idyfile.

Users have been stating that they need to logon to too many applications and web apps with different credentials that use different rule sets. Which of the following would BEST address these concerns? A. Alter the domain account login policies to reflect the most common application rule sets. B. Ensure that the user accounts are properly configured in domain services. C. Implement a software solution that facilitates single sign-on authentication. D. Increase the time between mandatory password changes by a factor of three. Answer: C

Answer: C Explanation: A single sign on permits a user to enter one name and password in order to access multiple applications

A technician has received a trouble ticket from a user who has intermittent wireless access. Moving the computer farther from the WAP results in a more stable connection. Which of the following is MOST likely the cause of this instability? A. Wrong encryption type B. SSID mismatch C. Signal bounce D. Incorrect channel Answer: C

Answer: C Explanation: Bouncing is the tendency of any two metal contacts in an electronic device to generate multiple signals as the contacts close or open.

Users report that they are unable to access any external websites. The local intranet is not affected. A network technician has isolated the problem to a Linux-based server. Which of the following commands will enable the technician to view DNS information on the Linux-based server? A. nbtstat B. ipconfig C. dig D. netstat Answer: C

Answer: C Explanation: By dig command technician will come to know whether name resolution is happening in correct way or not.

After a technician has identified the problem and its impact, which of the following steps should be performed NEXT? A. Implement preventative measures. B. Establish a plan of action to resolve the problem. C. Establish a theory of probable cause. D. Implement the solution or escalate as necessary. Answer: C

Answer: C Explanation: By sorting out the probable causes and establishing a theorey on them he will come to know whether it is right cause or not.

A company has recently allowed its employees to telecommute two days a week. The employees MUST have a minimum of 1Mbps non-shared connection to the Internet. Which of the following MUST the employees have at their home in order to connect to the Internet? A. ISDN B. Cable modem C. DSL D. Dial-up networking Answer: C

Answer: C Explanation: Digital subscriber line (DSL, originally digital subscriber loop) is a family of technologies that provide Internet access by transmitting digital data over the wires of a local telephone network.

A network technician is troubleshooting a user's connectivity problem, and has determined a probable cause. The technician is at which step in the troubleshooting methodology? A. Verify full system functionality B. Identify the problem C. Establish a theory D. Implement the solution Answer: C

Answer: C Explanation: Establish a theory means to correlate the finding and cause of a problem in order to fix the problem.

Which of the following commands will provide an administrator with the number of hops a packet takes from host to host? A. nslookup B. ping C. traceroute D. route Answer: C

Answer: C Explanation: In computing, traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network. The history of the route is recorded as the round-trip times of the packets received from each successive host (remote node) in the route (path); the sum of the mean times in each hop indicates the total time spent to establish the connection.

A Chief Executive Officer (CEO) decided that only a limited number of authorized company workstations will be able to connect to the Internet. Which of the following would BEST accomplish this goal? A. Use content filtering B. Install and configure IDS C. Enable MAC address filtering D. Enable RAS on the network firewall Answer: C

Answer: C Explanation: Most Wi-Fi access points and routers ship with a feature called hardware or MAC address filtering This feature is normally turned "off" by the manufacturer, because it requires a bit ofeffort to set up properly. However, to improve the security of your Wi-Fi LAN (WLAN), strongly consider enabling and using MAC address filtering.

A network technician is concerned that a user is utilizing a company PC for file sharing and using a large amount of the bandwidth. Which of the following tools can be used to identify the IP and MAC address of the user's PC? A. System log B. History log C. Network sniffer D. Nslookup Answer: C

Answer: C Explanation: Network sniffer is a computer program or a piece of computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the sniffer captures each packet and, if needed, decodes the packet's raw data, showing the values of various fields in the packet, and analyzes its content according to the appropriate RFC or other specifications.

Joe, a technician, suspects a virus has infected the network and is using up bandwidth. He needs to quickly determine which workstation is infected with the virus. Which of the following would BEST help Joe? A. Web server B. Syslog C. Network sniffer D. SNMP Answer: C

Answer: C Explanation: Network sniffer is a tool to analyze packets that are being exchanged between the hosts and using this Joe can understand whether there was traffic encountered to server or not which was infected.

A user's computer is unable to access the Internet. Which of the following utilities can a technician use to determine if DNS is working? A. nbstat B. arp C. nslookup D. ipconfig Answer: C

Answer: C Explanation: Nslookup is a network utility program used to obtain information about Internet servers. As its name suggests, the utility finds name server information for domains by querying DNS.

Which of the following devices can be utilized to monitor and block websites accessible by a company? A. WINS server B. DNS server C. Content filter D. Reverse proxy Answer: C

Answer: C Explanation: On the Internet, content filtering (also known as information filtering) is the use of a program to screen and exclude from access or availability Web pages or e-mail that is deemed objectionable. Content filtering is used by corporations as part of Internet firewall computers and also by home computer owners, especially by parents to screen the content their children have access to from a computer.

A network administrator has been tasked to deploy a new WAP in the lobby where there is no power outlet. Which of the following options would allow the network administrator to ensure the WAP is deployed correctly? A. QoS B. Install 802.11n WAP C. PoE D. Parabolic antenna Answer: C

Answer: C Explanation: Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras.

A system administrator is implementing an IDS on the database server to see who is trying to access the server. The administrator relies on the software provider for what to detect. Which of the following would MOST likely be installed? A. Behavior based IDS B. Network based IDS C. Signature based IDS D. Honeypot Answer: C

Answer: C Explanation: Signature detection involves searching network traffic for a series of bytes or packet sequences known to be malicious. A key advantage of this detection method is that signatures are easy to develop and understand if you know what network behavior you're trying to identify.

A network technician is concerned that an attacker is attempting to penetrate the network, and wants to set a rule on the firewall to prevent the attacker from learning which IP addresses are valid on the network. Which of the following protocols needs to be denied? A. TCP B. SMTP C. ICMP D. ARP Answer: C

Answer: C Explanation: The Internet Control Message Protocol(ICMP) is one of the core protocols of the Internet Protocol Suite. It is used by network devices, like routers, to send error messages indicating, for example, that a requested service is not available or that a host or router could not be reached. ICMP can also be used to relay query messages. It is assigned protocol number 1.

Which of the following protocols is MOST commonly associated with VoIP? A. LDAP B. HTTPS C. SIP D. SCP Answer: C

Answer: C Explanation: The Session Initiation Protocol (SIP) is a signaling communications protocol, widely used for controlling multimedia communication sessions such as voice and video calls over Internet Protocol (IP) networks.

Which of the following commands can a network technician use to check whether the DNS server for a given domain is reachable? A. nmap B. nbtstat C. dig D. arp Answer: C

Answer: C Explanation: The command digis a tool for querying DNS name servers for information about host addresses, mail exchanges, name servers, and related information. This tool can be used from any Linux (Unix) or Macintosh OS X operating system. The most typical use of dig is to simply query a single host.

A technician is troubleshooting Internet connectivity for a PC. Which of the following is MOST likely the reason for Internet connectivity issues upon inspecting the routing table? A. The router should be listed as 224.0.0.1 B. The NIC is set to the wrong subnet mask C. The route of last resort is missing D. Loopback traffic is weighted higher than NIC interface traffic Answer: C

Answer: C Explanation: The default route is missing from the table. It looks like this: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.12 25

Which of the following can be used to limit wireless network access to a single computer? A. Configure PPP B. Packet sniffing C. MAC address filtering D. Omni-directional antennas Answer: C

Answer: C Explanation: Wireless access can be filtered by using the Media Access Control (MAC)addresses of the wireless devices transmitting within your wireless network. You can either permit or prevent specific wireless computers and devices access to your wireless network.

Which of the following are standard fiber cable connector types? (Select TWO). A. RJ-11 B. F-connector C. MTRJ D. DB-9 E. ST Answer: C, E

Answer: C, E

Which of the following protocols are used to view and send mail from a local host off of a remote server? (Select TWO). A. TFTP B. SNMP C. POP3 D. IMAP4 E. SFTP Answer: C,D

Answer: C,D

A company has multiple WAPs within close proximity to each other to allow users to move about seamlessly through the building with their laptops, without losing any connection. However, this has had the opposite effect, causing any user that is close to two of the access points to constantly reconnect to the wireless network. Which of the following should be changed on all the WAPs to allow this to work as the customer intended? A. Change the SSID to be unique for each WAP. B. Change the antenna direction to be unique for each WAP. C. Change the encryption method to be unique for each WAP. D. Change the channel to be unique for each WAP. Answer: D

Answer: D

A company recently added an addition to their office building. A technician runs new plenum network cables from the switch on one side of the company's gymnasium 80 meters (262 ft.) to the new offices on the other side, draping the wires across the light fixtures. Users working out of the new offices in the addition complain of intermittent network connectivity. Which of the following is MOST likely the cause of the connectivity issue? A. dB loss B. Distance C. Incorrect connector type D. EMI E. Crosstalk Answer: D

Answer: D

A large corporate office is looking to place smaller network closets around campus to handle switching for remote workstations. To which of the following is this referring? A. MDF B. VPN C. RDP D. IDF Answer: D

Answer: D

A network technician is doing a wireless audit and finds an SSID that does not match the company's SSID. The company uses the SSID of ABC123, and the SSID the technician found is Default. Which of the following threats did the network technician find? A. AP isolation B. DDoS C. Evil twin D. Rogue AP Answer: D

Answer: D

A network technician is trying to run a protocol analyzer and is instructed to record the chimney offload state of TCP. Which of the following utilities did the technician use to check this parameter with the output listed below? Querying active state... TCP Global Parameters ---------------------------------------------- Receive-Side Scaling State : enabled Chimney Offload State : disabled Receive Window Auto-Tuning Level : normal Add-On Congestion Control Provider : ctcp ECN Capability : disabled RFC 1323 Timestamps : disabled A. net B. netstat C. nbtstat D. netsh Answer: D

Answer: D

A network technician visits a site that needs voice connectivity to the corporate office and installs four IP phones. The phone exchange resides at the telephone company. Which of the following technologies is being used? A. Virtual switch B. Virtual server C. Virtual desktop D. Virtual PBX Answer: D

Answer: D

A new WAP is configured to only use 802.11g with SSID broadcasts enabled. The encryption is set to WPA and the key is given to the user. A user near the WAP is using a laptop equipped with a 5GHz wireless card and is not able to see the SSID. Which of the following is the problem? A. Latency B. Incorrect encryption type C. EUI-64 D. Incompatible hardware Answer: D

Answer: D

A number of remote users have reported being unable to securely log on to the company's network. Upon speaking with some of the employees experiencing the issue, no changes were made to their configurations, usernames, or passwords. The technician establishes a theory that one of the VPN concentrators may be down. Which of the following should the technician do NEXT? A. Plan to reboot the concentrator as the potential solution B. Escalate the problem to management C. Continue to speak to users, questioning if changes have been made D. Test access to the concentrator to confirm the status Answer: D

Answer: D

A technician enters a username and password once and can access multiple databases without being prompted to reenter their password. This is an example of which of the following? A. Two-factor authentication B. Network access control C. Multifactor authentication D. Single sign-on Answer: D

Answer: D

A technician is troubleshooting a network issue and needs to view network traffic on a switch in real-time. Which of the following would allow the technician to view network traffic on a switch? A. ISAKMP B. Port forwarding C. Port security D. Port mirroring Answer: D

Answer: D

A technician needs to enter a username and password and have their fingerprint scanned to access a server. Which of following types of authentication is this an example of? A. Single sign-on B. Network access control C. PKI authentication D. Two-factor authentication Answer: D

Answer: D

A user is unable to communicate with any local network resources, but is connected to the wireless network and can access the Internet. The network technician notices that the laptop has an incorrect IP address, even though it shows it is connected. Which of the following is the MOST likely cause? A. Signal strength B. Interference C. AP placement D. Incorrect SSID Answer: D

Answer: D

All users on a specific network segment report losing access to the wired network. During troubleshooting, the network administrator observes link lights on the workstations. When physically reviewing each switch, the network administrator changes the switch view settings to Activity and sees that all port lights remain solid green. Which of the following is MOST likely causing this issue? A. STP convergence B. Power failure C. Excessive bandwidth usage D. Broadcast storm Answer: D

Answer: D

An IP camera has a failed PoE NIC. This is the third time in months that a PoE NIC has failed on this device. The technician suspects a possible power issue. Which of the following should be used to test the theory? A. Toner probe B. Loopback plug C. Protocol analyzer D. Multimeter Answer: D

Answer: D

Ann, a new user, is unable to communicate on the network from her computer. A technician has verified that the cables are functioning properly. Based on the information below, which action should the technician take to correct Ann's problem? Computer_A Switch_A IP: 10.0.0.60Int VLAN10 SM: 255.255.255.0IP address 10.0.0.1/28 GW: 10.0.0.1Speed 100 Duplex Full A. Change the duplex on the switch interface to half B. Change the speed on the switch interface to 10Mbps C. Change the subnet mask of the computer to 255.255.255.240 D. Change the IP address of the computer to 10.0.0.12 Answer: D

Answer: D

The address 6FFE:FFFF:0000:2F3B:04AC:00FF:FEBE:5C4A is an example of which of the following? A. APIPA B. MAC C. IPv4 D. IPv6 Answer: D

Answer: D

The application layer in the TCP/IP model is comparable to which of the following layers in the OSI model? A. Layer 2 B. Layer 5 C. Layer 6 D. Layer 7 Answer: D

Answer: D

The unit responsible for the successful shaping and transmission of a digital signal is called: A. demarc. B. T1 hub. C. smart jack. D. CSU/DSU. Answer: D

Answer: D

Users at a remote site are unable to establish a VPN to the main office. At which of the following layers of the OSI model does the problem MOST likely reside? A. Presentation B. Application C. Physical D. Session Answer: D

Answer: D

Using source port numbers as a way to keep track of connections is a characteristic of which of the following protocols? A. TCP B. UDP C. NAT D. PAT Answer: D

Answer: D

Which of the following has the LEAST amount of collisions in a domain? A. Bridge B. Hub C. Repeater D. Switch Answer: D

Answer: D

Which of the following is MOST likely used with RG-6 media? A. MTRJ B. RJ-11 C. RJ-45 D. F-connector Answer: D

Answer: D

Which of the following is a fiber connector type? A. F-connector B. RJ-11 C. RS-232 D. MTRJ Answer: D

Answer: D

Which of the following is a requirement for bridging with 802.11a? A. WPA encryption B. Governmental licenses C. High gain yagi antennas D. Clear line of sight Answer: D

Answer: D

Which of the following is the unit used to transfer information at Layer 2 of the OSI model? A. Packet B. Socket C. Session D. Frame Answer: D

Answer: D

Which of the following is used to ensure traffic flows efficiently on multiple T-1 circuits? A. DNS server B. Content filter C. Proxy server D. Load balancer Answer: D

Answer: D

Which of the following is used to limit the amount of bandwidth used on a link for different applications to improve overall performance? A. QoS B. Fault tolerance C. Load balancing D. Traffic shaping Answer: D

Answer: D

Which of the following network topologies is ONLY possible between two users? A. Star B. Client-server C. Hybrid D. Peer-to-peer Answer: D

Answer: D

Which of the following preventative measures would BEST secure a web server from being port scanned by attackers publicly? A. Content filter B. Proxy server C. ACL implicit allow D. Firewall Answer: D

Answer: D

Which of the following protocols are used to provide accurate time to network devices? A. SMTP B. FTP C. TLS D. NTP Answer: D

Answer: D

Which of the following provides the STRONGEST security for a tunneled connection over the Internet? A. RDP B. SMTP C. RAS D. IPSec Answer: D

Answer: D

Which of the following should be used when throughput to the destination network is a priority? A. MTU B. Hop count C. Reliability of the path D. Bandwidth Answer: D

Answer: D

Which of the following is an example of a CSMA/CD medium? A. WEP B. SONET C. Token ring D. Ethernet Answer: D

Answer: D Explanation CSMA/CD is a Media Access Control method in which a carrier sensing scheme is used and also a transmitting data station that detects another signal while transmitting a frame, stops transmitting that frame, transmits a jam signal, and then waits for a random time interval before trying to resend the frame

Which of the following attacks would allow an intruder to do port mapping on a company's internal server from a separate company server on the Internet? A. SYN flood B. Teardrop C. Smurf D. FTP bounce Answer: D

Answer: D Explanation: FTP bounce attack is an exploit of the FTP protocol whereby an attacker is able to use the PORT command to request access to ports indirectly through the use of the victim machine as a middle man for the request.

Which of the following connectors are MOST commonly used on a POTS line? A. RJ-45 B. MTRJ C. DB-9 D. RJ-11 Answer: D

Answer: D Explanation: The six-position plug and jack commonly used for telephone line connections may be used for RJ11, RJ14 or even RJ25, all of which are actually names of interface standards that use this physical connector. The RJ11 standard dictates a 2-wire connection, while RJ14 uses a 4-wire configuration, and RJ25 uses all six wires. The RJ abbreviations, though, only pertain to the wiring of the jack (hence the name "registered jack"); it is commonplace but not strictly correct to refer to an unwired plug connector by any of these names. Typically you'll find the RJ-11 and RJ-14 on your Plain Old Telephone Service (POTS)

A network administrator is responding to a statement of direction made by senior management to implement network protection that will inspect packets as they enter the network. Which of the following technologies would be used? A. Packet sniffer B. Stateless firewall C. Packet filter D. Stateful firewall Answer: D

Answer: D Explanation: Stateful firewall keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known active connection will be allowed by the firewall; others will be rejected.

Multiple networked devices running on the same physical hardware that provide central access to applications and files, where each device runs as a piece of software are known as: A. Virtual desktops. B. Switches. C. PBXs. D. Virtual servers. Answer: D

Answer: D Explanation: A Virtual server, usually a Web server, that shares computer resources with other virtual servers. In this context, the virtual part simply means that it is not a dedicated server that is, the entire computer is not dedicated to running the server software

Which of the following cable types is required to run through an air duct? A. UTP B. Fiber C. PVC D. Plenum Answer: D

Answer: D Explanation: Plenum rated cable has a special insulation that has low smoke and low flame characteristics. Plenum cable is mandated to be installed in any "air handling" space. For example, most large office buildings use the ceiling to return air to the AC unit. This qualifies this ceiling as a plenum ceiling, and all the cables that go through that ceiling must be plenum rated.

A small office client is requesting a network redesign. Both wired and wireless devices must connect to the network. All of the wireless devices can communicate using the latest standards. The building has a long courtyard in the middle with reinforced walls, which extends up through all the floors. The distance from the switch to the furthest drop is 88 meters. Which of the following is the correct network redesign choice? A. Fiber optic cabling is necessary due to distance limitations. B. The wireless network should be 802.11b due to equipment limitations. C. One WAP will be sufficient to provide wireless coverage to the floor. D. The wired network should be run with at least CAT6 cabling. Answer: D

Answer: D Explanation: The Category 6 cable, also known as Cat-6, is backward compatible with the Category 5/5 e and Category 3 cable standards. It can create a high speed computer network and operate at an optimal performance if other components in the network are compatible with gigabit speeds. AdvantagE.Speed and Performance - The cable can handle speed performance of up to 250 MHZ. This fast performance makes it possible to use with a fast Ethernet network including Gigabit Ethernet and 10-Gigabit Ethernet. The whole generation of the Cat 6 cable was introduced to complement the Gigabit Ethernet which includes interface cards, patch panels, routers, switches, and other components which is developed to achieve a full gigabit network. Many IT professionals realized that the Cat 6 cable provide very fast network performance and can deliver gigabit speeds. AdvantagE.Similar Structure with Cat 5 Cable Cat 6 cable has a similar structure to the Cat 5 and Cat 5e. The Cat 6, Cat 5 and Cat 5e cables have 8 wires that are twisted together to form four pairs. The difference is that one pair of the wires in the Cat 6 cable is kept from contacting with others so that it can produce double the bandwidth of the Cat 5 and Cat 5e. AdvantagE.Backward Compatible - The plug and port of the Cat 6 cable is the same as the Cat 5 and Cat 5e. Therefore, it can be plugged into any port or connection that supports both of those cables. If you use the Cat 5 port, it will not yield the full speed that it is capable of handling. Instead, it will operate at the speed of the computer or cable. However, the speed will be acceptable. AdvantagE.Upgradable - If upgrading to a more optimal network, the Cat 6 cable should be included in part of the upgrade. The Cat 6 cable will not operate at the full speed if other units in the network does not support gigabit speeds. Small businesses that are starting should consider installing the Cat 6 cable since it is becoming the industry standard.

Which of the following 802.11 standards transmits the signals the GREATEST distance? A. a B. b C. g D. n Answer: D

Answer: D Explanation: 802.11n uses multiple antennas to increase data rates.

After a network technician has added a new workstation and cabling to the network, users report the network is very slow. The activity lights on all switches are blinking rapidly, showing large amounts of traffic. Which of the following is the BEST explanation for the traffic? A. The new user is downloading large files. B. The router failed, flooding the network with beacons. C. The new user's IP address is a duplicate. D. A switching loop was created. Answer: D

Answer: D Explanation: A Switching loop or Bridge loop occurs in computer networks when there is more than one Layer 2 (OSI model) path between two endpoints (e.g. multiple connections between two network switches or two ports on the same switch connected to each other). The loop creates broadcast radiation as broadcasts and multicasts are forwarded by switches out every port, the switch or switches will repeatedly rebroadcast the broadcast messages flooding the network.

Users are reporting wired connectivity drops in a new office with brand new CAT6 infrastructure. Which of the following tools should a technician use to BEST troubleshoot this issue? A. OTDR B. Protocol analyzer C. Toner probe D. Cable certifier Answer: D

Answer: D Explanation: A cable certifier is an electronic device used to verify the source of electric current, voltage and a switching matrix used to connect the current source and the volt meter to all of the contact points in a cable.

An organization finds that most of the outgoing traffic on the network is directed at several Internet sites viewed by multiple computers simultaneously. Which of the following performance optimization methods would BEST alleviate network traffic? A. Load balancing internal web servers B. Redundant network resources C. Implement fault tolerance on the WAN D. Implement caching engines Answer: D

Answer: D Explanation: A cache server is a dedicated network server or service acting as a server that saves Web pages or other Internet content locally. By placing previously requested information in temporary storage, or cache, a cache server both speeds up access to data and reduces demand on an enterprise's bandwidth.

Which of the following security appliances are used to only identify traffic on individual systems? A. Host based IPS B. Application based IPS C. Network based IDS D. Host based IDS Answer: D

Answer: D Explanation: A host-based intrusion detection system (HIDS) is an intrusion detection system that monitors and analyzes the internals of a computing system as well as the network packets on its network interfaces.

Which of the following security methods is used to attract users attempting to gain unauthorized access to various systems within a single network? A. Network based IDS B. Firewall C. Network based IPS D. Honeynet Answer: D

Answer: D Explanation: A network-based intrusion prevention system (NIPS) is a system used to monitor a network as well as protect the confidentiality, integrity, and availability of a network. Its main functions include protecting the network from threats, such as denial of service (DoS) and unauthorized usage.

Which of the following is the MOST secure way to prevent malicious changes to a firewall? A. SNMPv2 access only B. TELNET access only C. SSH access only D. Console access only Answer: D

Answer: D Explanation: As SSH is secure than any other option because it provide encryption. So we use SSH to remotely access.

Ann, a network technician, has been troubleshooting a connectivity problem in the LAN room. Ann has diagnosed the problem and implemented a solution. Which of the following would be the NEXT step? A. Test the theory B. Establish a plan of action C. Establish a theory D. Document findings Answer: D

Answer: D Explanation: As to prove the cause of problem documents need to be attached so document finding is the first step after we implemented and diagnosed that problem.

A recent flood in the office caused a lot of equipment to be damaged and the manager of the IT department would like a way to prevent such an incident in the future. Which of the following is the BEST way to mitigate such an equipment failure? A. Reduce the power input on the replacement servers. B. Cover the servers with plastic tarps. C. Purchase twice as many servers to create high availability clusters. D. Transfer the replacement servers offsite to a data center. Answer: D

Answer: D Explanation: As we replace replacement servers offsite to datacenter this will cause lower traffic on over lan and will not cause failure of these server also.

Which of the following OSI layers allows users to access network services such as file sharing? A. Layer 1 B. Layer 3 C. Layer 4 D. Layer 7 Answer: D

Answer: D Explanation: Basically File Transfer protocol (FTP) is responsible for file transfer which lies under Application layer (Layer 7) of OSI layers.

A technician sees suspicious traffic coming from a computer connected to a WAP. Which of the following can be used to stop this traffic while troubleshooting the problem? A. tracert B. QoS C. ipconfig D. MAC filtering Answer: D

Answer: D Explanation: By doing MAC filtering technician can block the data coming from a specific mac address.

Which of the following is the MAXIMUM potential speed of CAT5e UTP cable? A. 10BaseT B. 100BaseT C. 100BaseFX D. 1000BaseT Answer: D

Answer: D Explanation: Category 5 e cable (Cat 5) is a twisted pair cable for carrying signals. This type of cable is use in structured cabling for computer networks such as Ethernet. The cable standard provides performance of up to 100 MHz and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), and 1000BASE-T (Gigabit Ethernet).

Users notice a problem with their network connectivity when additional lights are turned on. Which of the following would be the cause for this problem? A. DDOS B. Cross talk C. Open short D. EMI Answer: D

Answer: D Explanation: External Machine Interface (EMI), an extension to Universal Computer Protocol (UCP), is a protocol primarily used to connect to short message service centres (SMSCs) for mobile telephones.

Which of the following would a network administrator recommend to satisfy fault tolerance needs within the datacenter? A. Multimode fiber B. Setting up a new hot site C. Central KVM system D. Central UPS system Answer: D

Answer: D Explanation: For uninterrupted power supply we need ups as from this no power issue will come and our systems will remain safe.

Which of the following does Kerberos provide? A. Non-repudiation B. Accounting C. Exchange D. Authentication Answer: D

Answer: D Explanation: Kerberos is a trusted third-party authentication service based on the model presented by Needham and Schroeder. It is trusted in the sense that each of its clients believes Kerberos' judgment as to the identity of each of its other clients to be accurate.

In order to discover the currently unknown IP address of the next-hop router, a network administrator would begin by using which of the following tools? A. NMAP B. ping C. nslookup D. tracert Answer: D

Answer: D Explanation: Nslookup is a network utility program used to obtain information about Internet servers. As its name suggests, the utility finds name server information for domains by querying DNS.

Which of the following allows an administrator to reference performance and configuration information if there is a problem on the network? A. Wire schemes B. Change management C. Network diagrams D. System baselines Answer: D

Answer: D Explanation: System baseline is the record line or changes record that administrator keep to match the effect after new configuration with previous configuration.

A Linux-based workstation is unable to connect to an IP printer on the same network segment. The printer IP address settings have been verified. How would a network technician verify IP address settings on the Linux-based workstation? A. Run the dig command on the workstation. B. Run the nslookup command on the workstation. C. Run the ipconfig command on the workstation. D. Run the ifconfig command on the workstation. Answer: D

Answer: D Explanation: The "ifconfig" command allows the linux/unix operating system to setup network interfaces and allow the user to view information about the configured network interfaces.

Users report that an internal file server is inaccessible. Of the following commands, which would be the MOST useful in determining network-layer connectivity? A. dig B. nbtstat C. netstat D. ping Answer: D

Answer: D Explanation: The Nbstat command is a great command to use when you need to display the NetBIOS over TCP/IP protocol statistics. The Nbstat command can also be used to display NetBIOS name tables for both local and remote computers.

Which of the following is a specialized piece of hardware designed to encrypt and decrypt user traffic? A. Proxy server B. TDR C. Smart jack D. VPN concentrator Answer: D

Answer: D Explanation: The VPN Concentrator is used for Remote Access VPN's. In typical use, a Remote Access VPN allows users to use an encrypted tunnel to securely access a corporate or other network via the Internet.

Some employees are unable to maintain a wireless network connection. The network's wireless infrastructure is comprised of three different buildings with the configurations listed below. Wireless network in Building A and C is used exclusively for internal employees and Building B is used for visitors and requires no additional configuration on their devices. Which of the following settings would need to be modified to provide the BEST wireless experience for all employees as they move between buildings? Building ABuilding BBuilding C Channel: 1Channel: 6Channel: 11 Encryption: WPA2Encryption: OpenEncryption: WPA2 SSID. CorpSSID. GuestSSID. Sales A. Change Channel in Building B to 7 B. Change Encryption in Building B to match A and C C. Change Channel in Building C to 1 D. Change SSID in Building C to match Building A Answer: D

Answer: D Explanation: The configuration difference between users in building A and C is that they have same encryption however the SSID is different so the user has to manually authenticate and connect to the network whenever he will move between buildings. If the SSID's are same then he will not have to authenticate himself again and he will get automatic connectivity.

A technician has been dispatched to investigate connectivity problems of a recently renovated office. The technician has found that the cubicles were wired so that the network cables were run inside the conduit with the electrical cabling. Which of the following would MOST likely resolve the connectivity issue? A. Power-cycle the computers and switches to re-establish the network connection. B. Re-run the network cabling through the ceiling alongside the lights to prevent interference. C. Test the wiring in the network jacks for faults using a cable verifier. D. Re-run the network cabling so that they are 12 inches or more away from the electrical lines. Answer: D

Answer: D Explanation: The electric cables create electric field around them and can interrupt in internet connectivity as well. It is quite possible that this is the cause which is creating the connectivity issue.

Ann, a client, shares half of a rectangular floor plan with another company and wishes to set up a secure wireless network. The installed antenna limits the signal to her half of the floor. Through analysis, the frequency and channels of surrounding wireless networks have been determined and configuration changes made accordingly. Which of the following would be the NEXT step in setting up this secure wireless network? A. Decrease signal strength on the antenna B. Change the wireless channel on the WAP C. Change the device placement to further obfuscate the signal D. Set up encryption on the WAP and clients Answer: D

Answer: D Explanation: The encryption will help the clients and server to uniquely identify themselves in an interfering environment.

A user is unable to access any network resources. The IP configuration of the workstation is as follows: IP Address: 192.168.10.32 Subnet Mask: 255.255.255.240 Default Gateway: 192.168.10.46 Which of the following would allow the user to connect to network resources? A. Change the default gateway to 192.168.10.1 B. Change the default gateway to 192.168.10.254 C. Change the IP address to 192.168.10.31 D. Change the IP address to 192.168.10.33 Answer: D

Answer: D Explanation: The given ip address is network id which we don't assign to the host so the next ip is applicable to this.

A user reports that some normally accessible external sites are not responding, but most other sites are responding normally. Which of the following is MOST likely the cause? A. VLAN tag mismatch B. Wrong subnet mask C. Smurf attack D. Faulty routing rule Answer: D

Answer: D Explanation: This happens when the DNS server is able to resolve the URL but there can be a conflicting route pointing to somewhere else rather than to the correct device who is responsible for routing traffic to the internet.

Which of the following technologies can cause interference for 802.11g? A. RADAR B. 802.11a C. IrDA D. Bluetooth Answer: D

Answer: D Explanation: This wireless communication standard has a maximum transmission speed of 54 Mbits per second and a typical indoor range of 30 meters. It uses the 2.4 GHz band. This band may have to deal.

A technician is developing a shortcut sheet for the network to be able to assist in future troubleshooting scenarios. Which of the following should the network devices have to ease manageability efforts? A. MAC spoofing B. Dynamic IPs C. MAC filtering D. Static IPs Answer: D

Answer: D Explanation: To give every user same ip every time because we have to document that ip slot we use static ip configuration.

A company wants to secure its WAPs from unauthorized access. Which of the following is the MOST secure wireless encryption method? A. SSID disable B. SNMPv3 C. WEP D. WPA2 Answer: D

Answer: D Explanation: WPA2 improves security of Wi-Fi connections by not allowing use of an algorithm called TKIP (Temporal Key Integrity Protocol) that has known security holes (limitations) in the original WPA implementation.

During a disaster recovery test, several billing representatives need to be temporarily setup to take payments from customers. It has been determined that this will need to occur over a wireless network, with security being enforced where possible. Which of the following configurations should be used in this scenario? A. WPA2, SSID enabled, and 802.11n. B. WEP, SSID enabled, and 802.11b. C. WEP, SSID disabled, and 802.11g. D. WPA2, SSID disabled, and 802.11a. Answer: D

Answer: D Explanation: WPA2 is a security technology commonly used on Wi-Fi wireless networks. WPA2 (Wireless Protected Access 2) replaced the original WPA technology on all certified Wi-Fi hardware since 2006 and is based on the IEEE 802.11i technology standard for data encryption.

Multiple servers' IP addresses fall within the DHCP scope assigned by the administrator. Which of the following should be implemented to ensure these static IP addresses are not assigned to workstations? A. The administrator should create exclusions for the workstations IP addresses. B. The administrator should change the servers to utilize DHCP to obtain IP addresses. C. The administrator should change the workstations to utilize static IP addresses. D. The administrator should create exclusions for the servers IP addresses. Answer: D

Answer: D Explanation: Whenever you define the ip pool from which IP addresses are to be dynamically assigned to the users then in order to avoid assignment of static ip address we can create exclusion for the static ip addresses so that they are not assigned to any other host and this is how we can avoid ip address conflict on the network.

Which of the following network protocols is used to transport email between servers? A. IMAP4 B. POP3 C. SNMP D. SMTP Answer: D

Answer: D Explanation: While electronic mail servers and other mail transfer agents use SMTP to send and receive mail messages, user-level client mail applications typically use SMTP only for sending messages to a mail server for relaying

A technician is reviewing the following company diagram to determine proper connectivity settings: Device Connection Type Distance Server A CAT6e 380ft Laptop B 802.11g 310ft PC 1 CAT5 300ft Laptop C 802.11n 100ft Server E Single Mode 500ft Which of the following device configurations is out of specifications? A. Laptop C B. Server E C. Laptop B D. Server A E. PC 1 Answer: D

Answer: D Explanation: no legitimate Category 6e standard exists

A company needs to implement a secure wireless system that would require employees to authenticate to the wireless network with their domain username and password. Which of the following would a network administrator deploy to implement these requirements? (Select TWO). A. 802.1q B. MAC address filtering C. WPA2 Personal D. WPA Enterprise E. 802.1x Answer: D, E

Answer: D, E

Which of the following tools should the technician have on hand to install the bulk CAT6 cable? (Select TWO). A. Loopback plug B. Multimeter C. OTDR D. Crimper E. Cable tester F. TDR Answer: D, E

Answer: D, E Explanation: A cable tester is an electronic device used to verify the source of electric current, voltage and a switching matrix used to connect the current source and the volt meter to all of the contact points in a cable.

The Network Interface Layer of the TCP/IP model corresponds to which of the following layers of the OSI model? (Select TWO). A. Network B. Session C. Transport D. Physical E. Data link Answer: D, E

Answer: D, E Explanation: The network layer is responsible for packet forwarding including routing through intermediate routers, whereas the data link layeri s responsible for media access control, flow control and error checking.

802.11n can operate at which of the following frequencies? (Select TWO). A. 2.4Mhz B. 2.5Mhz C. 5Mhz D. 2.4Ghz E. 2.5Ghz F. 5Ghz Answer: D, F

Answer: D, F Explanation: 802.11n is an amendment which improves upon the previous 802.11 standards by adding multiple-input multiple-output antennas (MIMO). 802.11n operates on both the 2.4 GHz and the lesser used 5 GHz bands

Which of the following are authentication methods that can use AAA authentication? (Select TWO) A. Kerberos B. PKI C. TKIP/AES D. MS-CHAP E. RADIUS F. TACACS+ Answer: E, F

Answer: E, F

Workstations are unable to access the internet after a recent power outage. Configure the appropriate devices to ensure All workstations have internet connectivity. Answer: The switches are not connected properly. Connect Switch 1 to switch three on the last port and then connect the last port of switch 3 to the first port of switch 2. Click Enable ALL to Enable the switches.

Answer: The switches are not connected properly. Connect Switch 1 to switch three on the last port and then connect the last port of switch 3 to the first port of switch 2. Click Enable ALL to Enable the switches.

A network where all traffic feeds through a centralized gateway uses which of the following topologies? A. Peer-to-peer B. Ring C. Bus D. Star Answer: D

Explanation: A bus topology is a type of network setup where each computer and network device is connected to a single cable or backbone.

GigSwitch1 is currently configured with a speed of 100 and Duplex is set to Auto on all interfaces. Interface 2 will be connected to GigSwitch2 which is used for all departments. Interface 1 will be used for HR traffic only. GigSwitch1 needs to be configured with the following parameters: Configure the necessary protocol to prevent switching loops Configure GigSwitch1 with a /24 IP address for management Traffic across Interface 1 needs to be forced to accept and receive up to 100Mbps data at the same time Traffic across Interface 2 needs to be forced to use Gigabit speeds and maximum performance Global Switch Configuration Interface 1 Interface 2 1 IP Address 1 VLAN 10 1 V LAN 192.168.1.1 HR Trunking 255.255.255.240 Multiplexing 2 Enable STP 2 100/Full 2 1000/Full

Global Switch Configuration Interface 1 Interface 2 1 IP Address 1 VLAN 10 1 V LAN 192.168.1.1 HR Trunking 255.255.255.240 Multiplexing 2 Enable STP 2 100/Full 2 1000/Full

Under each network device, drag and drop the associated broadcast and/or collision description. Objects may be used multiple times, as needed. Router - Multiple Broadcast Domain - Multiple Collision Domain Layer 2 Switch - Single Broadcast Domain - Multiple Collision Domain Wireless AP - Single Broadcast Domain - Single Collision Domain Hub - Single Broadcast Domain - Single Collision

Router - Multiple Broadcast Domain - Multiple Collision Domain Layer 2 Switch - Single Broadcast Domain - Multiple Collision Domain Wireless AP - Single Broadcast Domain - Single Collision Domain Hub - Single Broadcast Domain - Single Collision Domain

Fiber connectors

fiber connectors

Which of the following 802.3 classifications has a MAXIMUM segment distance of 984 feet (300 meters)? A. 1000Base B. 100BaseFX C. 1000BaseSX D. 1000BaseT Answer: C

Answer: C

Which of the following BEST describes the definition of DHCP? A. DHCP is utilized to dynamically lease IP addresses to hosts. B. DHCP is utilized to statically lease IP address to hosts. C. DHCP is utilized to permanently lease IP address dynamically to hosts. D. DHCP is utilized to permanently lease IP address statically to hosts. Answer: A

Answer: A Explanation: Because DHCP server maintains a database of available IP addresses and configuration information. When the server receives a request from a client, the DHCP server determines the network to which the DHCP client is connected, and then allocates an IP address or prefix that is appropriate for the client, and sends configuration information appropriate for that client

Which of the following protocols works at the LOWEST layer of the OSI model? A. L2TP B. PPTP C. ISAKMP D. IPSec Answer: A

Answer: A Explanation: Layer Two Tunneling Protocol (L2TP) is an extension of the Point-to-Point Tunneling Protocol (PPTP) used by an Internet service provider (ISP) to enable the operation of a virtual private network (VPN) over the Internet.

Which of the following can function in an unsecure mode? A. SNMPv3 B. SSH C. SSL D. SCP Answer: A

Answer: A Explanation: SNMPv3 makes no changes to the protocol aside from the addition of cryptographic security, it looks much different due to new textual conventions, concepts, and Terminology.SNMPv3 primarily added security and remote configuration enhancements to SNMP

A technician wants to separate networks on a switch. Which of the following should be configured to allow this? A. VLAN B. Trunking C. Spanning tree D. Traffic filtering Answer: A

Answer: A Explanation: A VLAN is a group of end stations in a switched network that is logically segmented by function, project team, or application, without regard to the physical locations of the users. VLANs have the same attributes as physical LANs, but you can group end stations even if they are not physically located on the same LAN segment.

If a NIC does not have a link light, there is a failure at which of the following OSI layers? A. Physical B. Session C. Data link D. Presentation Answer: A

Answer: A Explanation: The NIC does not have light refers to a situation that there could be a fault in the LAN cable or the ports are down and all of these fall under the physical layer. To make it simple, it falls in physical layer because blinking lights refers to the physical connectivity.

While working on a PC, a technician notices 0.0.0.0 in the routing table. Which of the following does this indicate? A. It is the default route. B. This is the address for the DHCP server. C. The PC has not been assigned an IP address. D. The firewall is down. Answer: A

Answer: A Explanation: The address 0.0.0.0 generally means "any address". If a packet destination doesn't match an individual address in the table, it must match a 0.0.0.0 gateway address. In other words, default gateway is always pointed by 0.0.0.0:

Which of the following is the FASTEST Ethernet technology? A. 10GBaseSR B. 10BaseT C. 100BaseFX D. 1000BaseT Answer: A

Answer: A Explanation: 10GBASE-SR ("short range") is a port type for multi-mode fiber and uses 850 nm lasers. Its Physical Coding Sublayer 64b/66b PCS is defined in IEEE 802.3 Clause 49 and its Physical Medium Dependent PMD in Clause 52. It delivers serialized data at a line rate of 10.3125 Gbit/s.

Enterprise IP routing policy is MOST clearly depicted in which of the following configuration management documents? A. Logical network diagrams B. Physical network diagrams C. Wiring schematics D. Group security role assignments Answer: A

Answer: A Explanation: A logical network diagram illustrates the network architecture of a group of interconnected computers and other devices, such as printers, modems, switches, routers, and even mobile devices. These electronic components form the physical network that provides local area network (LAN) and wide area network (WAN) access to users. Once you know the layout and you have an idea about the packet flow then your job becomes easy and you can create an action plan to go for the implementation.

A network administrator is tasked with deploying a company-wide wireless system which allows for accurate tracking of employees' wireless device locations via WAP triangulation. Which of the following is the MOST important aspect of the deployment? A. WAP placement B. TX/RX channel C. Signal strength D. Transmission power Answer: A

Answer: A Explanation: Before going ahead with the deployment, the first thing that need to be check is where you are going to place your wireless router so that you can have internet connectivity from every location that you need.

Which of the following defines the amount of time a host retains a specific IP address before it is renewed or released? A. DHCP lease B. Subnet mask C. DHCP reservation Answer: A

Answer: A Explanation: By default, each IP address assigned by a DHCP Server comes with a one-day lease, which is the amount of time that the address is valid.

A network technician is troubleshooting signal problems with certain WAPs in an office and finds consistently high ping times across the units. Such an issue is called which of the following? A. Latency B. Attenuation C. Crosstalk D. Frequency hopping Answer: A

Answer: A Explanation: During the high ping time users are using most of the bandwidth that causes latency so signal strength get affected by this.

Which of the following is the BEST way to prevent new users from connecting to a wireless access point, but still allow already connected users to continue to connect? A. Create a MAC filter containing the current users. B. Turn off SSID broadcast. C. Change the encryption type to AES 256-bit for current users. D. Reduce the signal strength to 0 percent. Answer: A

Answer: A Explanation: MAC Filtering (or EUI filtering, or layer 2 address filtering) refers to a security access control method whereby the 48-bit address assigned to each network card is used to determine access to the network. MAC addresses are uniquely assigned to each card, so using MAC filtering on a network permits and denies network access to specific devices through the use of blacklists and whitelists. While the restriction of network access through the use of lists is straightforward, an individual person is not identified by a MAC address, rather a device only, so an authorized person will need to have a whitelist entry for each device that he or she would use to access the network.

Users have reported issues accessing an Internet website. The network technician wants to verify network layer connectivity. Which of the following tools can provide the verification? A. ping B. netstat C. route D. arp Answer: A

Answer: A Explanation: Ping is a computer network administration utility used to test the reachability of a host on an Internet Protocol (IP) network and to measure the round-trip time for messages sent from the originating host to a destination computer.

An employee connects to a work computer from home via the built-in Windows remote desktop connection. Which of the following is MOST likely being used to establish the connection? A. RDP B. RTP C. RIP D. RAS Answer: A

Answer: A Explanation: Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software for this purpose, while the other computer must run RDP server software.

Which of the following properties of DHCP would a technician use to ensure an IP address is not leased out from the active scope? A. Reservations B. Lease times C. Removing IPs from the active leases D. Configuring the DNS options Answer: A

Answer: A Explanation: Reservations are permanent lease assignments that are used to ensure that a specified client on a subnet can always use the same IP address. You can use DHCP reservations for hosts that require a consistent IP address, but do not need to be statically configured.

Which of the following uses port 23 by default? A. TELNET B. IMAP C. FTP D. SNMP Answer: A

Answer: A Explanation: Telnet is a network protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection. User data is interspersed in-band with Telnet control information in an 8-bit byte oriented data connection over the Transmission Control Protocol (TCP).

Which of the following features can BEST be used to facilitate authorized remote access to a network? A. VPN concentrator B. Proxy server C. Content filter D. Load balancer Answer: A

Answer: A Explanation: The VPN Concentrator is used for Remote Access VPN's. In typical use, a Remote Access VPN allows users to use an encrypted tunnel to securely access a corporate or other network via the Internet.

Which of the following TCP ports are used by FTP? (Select TWO). A. 20 B. 21 C. 22 D. 23 E. 25 F. 80 Answer: A, B

Answer: A, B Explanation: FTP uses two ports by default: 21 for sending commands, and 20 for sending data. For instance if you said "FTP <ServerName>" it would make the attempt using port 21. If the session was established, port 20 would be using for the data. Note; These are the default ports which is what I assume you were asking. A server administrator can however configure FTP to use whatever port he defines.

At which of the following layers do frames exist? (Select TWO). A. OSI model Data link layer B. TCP/IP model Network Interface layer C. OSI model Physical layer D. OSI model Network layer E. TCP/IP model Internet layer Answer: A, B

Answer: A, B Explanation: The data link layer is concerned with local delivery of frames between devices on the same LAN. Data-link frames, as these protocol data units are called, do not cross the boundaries of a local network. Inter-network routing and global addressing are higher layer functions, allowing data-link protocols to focus on local delivery, addressing, and media arbitration. In this way, the data link layer is analogous to a neighborhood traffic cop; it endeavors to arbitrate between parties contending for access to a medium, without concern for their ultimate destination.

A network administrator needs to implement a monitoring tool and be able to send log information to a server and receive log information from other clients. Which of the following should be implemented? (Select TWO). A. SNMP B. Network sniffer C. Syslog D. System log E. History log Answer: A, C

Answer: A, C Explanation: Simple Network Management Protocol (SNMP) is an "Internet-standard protocol for managing devices on IP networks". Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention. Syslog is a standard for computer message logging. It permits separation of the software that generates messages from the system that stores them and the software that reports and analyzes them.

Which of the following networking devices can exist at several layers of the OSI model at the same time? (Select TWO). A. Switch B. Cable C. Repeater D. Router E. Bridge F. Hub Answer: A, D

Answer: A, D Explanation: A Multilayer Switch and Router work from OSI layer 2, 3 or 4 to IP DSCP (if IP packet) and/or VLAN IEEE 802.1p.

A user wants to connect seven PCs together for a game night. Which of the following should the user install to help with this task? A. Media convertor B. Switch C. Firewall D. Bridge Answer: B

Answer: B Explanation: They connect multiple PCs, printers, servers and other hardware. Switches allow you to send information, such as email, and access shared resources, including printers, in a smooth, efficient, and transparent manner.

A user reports that several spots within the company's office have intermittent connectivity issues with the newly installed wireless network. There are several WAPs located around the office to provide a strong signal wherever the users are. Which of the following is the MOST likely cause of the problem? A. Incompatible network card B. Channel overlap C. Latency D. WEP encryption

Answer: B Explanation: To reduce interference between wireless APs, ensure that wireless APs with overlapping signals use unique channel frequencies. The 802.11b standard reserves 14 frequency channels for use with wireless APs.

Which of the following protocols is MOST commonly used for the transfer of router configuration files? A. SSL B. TFTP C. DNS D. IMAP Answer: B

Answer: B Explanation: Trivial File Transfer Protocol (TFTP) is a file transfer protocol notable for its simplicity. It is generally used for automated transfer of configuration or boot files between machines in a local environment. Compared to FTP, TFTP is extremely limited, providing no authentication, and is rarely used interactively by a user.

Which of the following switch features allows for both incoming and outgoing data across physical ports at the same time? A. Burst-frame B. Full-duplex C. Half-duplex D. VoIP Answer: B

Answer: B Explanation: A full-duplex (FDX), or sometimes double-duplex system, allows communication in both directions, and, unlike half-duplex, allows this to happen simultaneously. Land-line telephone networks are full-duplex, since they allow both callers to speak and be heard at the same time

Which of the following is used to register and resolve IP addresses with their plain language equivalents? A. Proxy server B. DNS server C. Brouter equipment D. DHCP server Answer: B

Answer: B Explanation: DNS server translate (resolution) the human-memorable domain names and hostnames into the corresponding numeric Internet Protocol (IP) addresses.

Which of the following would the telecommunications carrier use to segregate customer traffic over long fiber links? A. VLAN B. MPLS C. VPN D. PSTN Answer: B

Answer: B Explanation: MPLS is a mechanism in high-performance telecommunications networks that directs data from one network node to the next based on short path labels rather than long network addresses, avoiding complex lookups in a routing table. The labels identify virtual links (paths) between distant nodes rather than endpoints

Network upgrades have been completed and the WINS server was shutdown. It was decided that NetBIOS network traffic will no longer be permitted. Which of the following will accomplish this objective? A. Content filtering B. Port filtering C. MAC filtering D. IP filtering Answer: B

Answer: B Explanation: TCP/IP port filtering is the practice of selectively enabling or disabling Transmission Control Protocol (TCP) ports and User Datagram Protocol (UDP) ports on computers or network devices. When used in conjunction with other security practices, such as deploying firewall software at your Internet access point, applying port filters to intranet and Internet servers insulates those servers from many TCP/IP-based security attacks, including internal attacks by malicious users.

Which of the following DHCP properties defines the size of the pool of available IP addresses? A. Options B. Scope C. Leases D. Reservations Answer: B

Answer: B Explanation: A range of IP addresses that are available to be leased to DHCP clients by the DHCP Server service.

Which of the following protocols resolves IP addresses to MAC addresses? A. DNS B. ARP C. RARP D. NTP Answer: B

Answer: B Explanation: ARP is used to convert an IP address to a physical address such as an Ethernet address. ARP has been implemented with many combinations of network and data link layer technologies, such as IPv4, Chaosnet, DECnetand Xerox PARC Universal Packet (PUP) using IEEE 802 standards, FDDI, X.25, Frame Relay and Asynchronous Transfer Mode (ATM). IPv4 over IEEE 802.3 and IEEE 802.11 is the most common case.

Which of the following uses classless subnet masks across a network? A. Subnetting B. CIDR C. Supernetting D. Summarization Answer: B

Answer: B Explanation: Classless Inter-Domain Routing is based on variable-length subnet masking(VLSM), which allows a network to be divided into variously sized subnets, providing the opportunity to size a network more appropriately for local needs and also CIDR allows an address or routing prefix to be written with a suffix indicating the number of bits of the prefix, such as 192.168.2.0/24.

Which of the following is the definition of a DNS server? A. Hosts proprietary business applications B. Translates FQDN's to IP addresses C. Provides network IDS/IPS security D. Assigns IP addresses to network devices Answer: B

Answer: B Explanation: Domain Name System (DNS) is the name resolution protocol for TCP/IP networks, such as the Internet. Client computers query a DNS server to resolve memorable, alphanumeric DNS names to the IP addresses that computers use to communicate with each other.

Ann, a technician, installs a new WAP and users are able to connect; however, users cannot access the Internet. Which of the following is the MOST likely cause of the problem? A. The signal strength has been degraded and latency is increasing hop count. B. An incorrect subnet mask has been entered in the WAP configuration. C. The signal strength has been degraded and packets are being lost. D. Users have specified the wrong encryption type and routes are being rejected. Answer: B

Answer: B Explanation: Due to wrong subnet entered user is unable to communicate with anyone so to communicate he needs to be in right subnet.

A network technician needs to configure a port on a switch to provide connectivity and electrical support to a WAP being installed in a warehouse. Which of the following features needs to be configured on the switch? A. STP B. PoE C. VTP trunking D. Port forwarding Answer: B

Answer: B Explanation: Power over Ethernet or PoE describes any of several standardized or ad-hoc systems which pass electrical power along with data on Ethernet cabling. This allows a single cable to provide both data connection and electrical power to devices such as wireless access points or IP cameras.

Which of the following wireless standards has a MAXIMUM transfer rate of 11Mbps? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: B

Answer: B Explanation: The 802.11b standard allows for a maximum data transfer speed of 11 Mbps, at a range of about 100 m indoors and up to 200 meters outdoors (or even beyond that, with directional antennas.) Hypothetical speed Range(indoors) Range(outdoors) 11 Mbits/s 50 m 200 m 5.5 Mbits/s 75 m 300 m 2 Mbits/s 100 m 400 m 1 Mbit/s 150 m 500 m

Given a subnet mask of 255.255.255.0, how many usable IP addresses would be in that subnet? A. 250 B. 254 C. 255 D. 256 Answer: B

Answer: B Explanation: The Subnet Mask however, determines the "class" of a Network. 255.255.255.0 is a "Class C" network A class c network can host up to 254 pc's

Which of the following commands displays the routing table on a server or workstation? A. nbtstat B. route C. traceroute D. nmap Answer: B

Answer: B Explanation: The route command allows you to make manual entries into the network routing tables. The route command distinguishes between routes to hosts ...

The network support team is constantly getting calls from users in a specific area of an office building. The users are able to connect to the office wireless network, but they sometimes disconnect or experience very slow download speeds. Which of the following is MOST likely the problem? A. rrect service set identifier B. Low signal strength or interference C. Incorrect encryption scheme D. Incorrect IP address or subnet mask Answer: B

Answer: B Explanation: This generally happens when the signals are weak in any particular area and any movement can make you lose connectivity to the internet. In this case you can try to increase the radio power so that the signal strength can be increased.

Ann, a new user, has a workstation that has connectivity to the printer located in her department, but cannot access the Internet. The result of an ipconfig command on Ann's workstation is as follows: IP address: 192.168.0.124 Subnet Mask: 255.255.255.128 Default Gateway: 192.168.0.254 Which is MOST likely preventing the user from accessing the Internet? A. Duplicate IP address B. Incorrect gateway C. Incorrect VLAN D. Bad switch port Answer: B

Answer: B Explanation: We usually give default gateway as an end device which is directly connected with ISP so in this case user has lost his connectivity with due to wrong default gateway configured.

Which of the following performance optimization techniques would be MOST beneficial for a network-wide VoIP setup? (Select TWO). A. Proxy server B. Traffic shaping C. Caching engines D. Load balancing E. Quality of service Answer: B, E

Answer: B, E Explanation: Traffic shaping retains excess packets in a queue and then schedules the excess for later transmission over increments of time. The result of traffic shaping is a smoothed packet output rate. QoS (Quality of Service) is a major issue in VOIP implementations. The issue is how to guarantee that packet traffic for a voice or other media connection will not be delayed or dropped due interference from other lower priority traffic. Things to consider are: Latency: Delay for packet delivery Jitter: Variations in delay of packet delivery Packet loss: Too much traffic in the network causes the network to drop packets Burstiness of Loss and Jitter: Loss and Discards (due to jitter) tend to occur in bursts

Which of the following TCP/IP model layers does the OSI model Presentation layer map to? A. Transport B. Internet C. Application D. Network Interface Answer: C

Answer: C Explanation: The Application layer provides applications the ability to access the services of the other layers and defines the protocols that applications use to exchange data. There are many Application layer protocols and new protocols are always being developed.

Which of the following is a common physical network topology? A. Cross-over B. Loopback C. Star D. Straight Answer: C

Answer: C Explanation: A star network consists of one central switch, hub or computer, which acts as a conduit to transmit messages. This consists of a central node, to which all other nodes are connected; this central node provides a common connection point for all nodes through a hub. In star topology, every node (computer workstation or any other peripheral) is connected to central node called hub or switch.

A technician needs to ensure that traffic from a specific department is separated within several switches. Which of the following needs to be configured on the switch to separate the traffic? A. Duplex settings B. SNMP string C. VLAN assignments D. Spanning tree Answer: C

Answer: C Explanation: A VLAN is a group of end stations with a common set of requirements, independent of physical location. VLANs have the same attributes as a physical LAN but allow you to group end stations even if they are not located physically on the same LAN segment.

A network administrator must ensure that both the server and the client are authenticated to the wireless system before access is granted. Which of the following should be implemented to meet this requirement? A. EAP-PEAP B. MAC ACL C. EAP-TTLS D. MS-CHAPv2 Answer: C

Answer: C Explanation: Extensible Authentication Protocol, or EAP, is an authentication framework frequently used in wireless networks and Point-to-Point connections. EAP is an authentication framework providing for the transport and usage of keying material and parameters generated by EAP methods.

Several users from the finance department report that they are able to access the Internet, but unable to connect to their financial applications. The network technician is unable to ping the finance server. The technician decides to check the switch and determines that Internet access is working. Which of the following is a possible cause of the access issues? A. Faulty cable B. Remote management disabled C. Improper VLAN assignment D. Mismatched duplex Answer: C

Answer: C Explanation: Finance Server is placed in same VLAN which is assigned to finance users if they are able to access internet that's means connectivity to switch is good, so we have to check the VLAN assigned to users.

A network technician is setting up a wireless access point that would only allow a certain laptop to be able to access the WAP. By using ACL, which of the following would be filtered to ensure only the authorized laptop can access the WAP? A. NetBIOS name filtering B. IP address filtering C. MAC address filtering D. Computer name filtering Answer: C

Answer: C Explanation: MAC Filtering (or EUI filtering, or layer 2 address filtering) refers to a security access control method whereby the 48-bit address assigned to each network card is used to determine access to the network. MAC addresses are uniquely assigned to each card, so using MAC filtering on a network permits and denies network access to specific devices through the use of blacklists and whitelists. While the restriction of network access through the use of lists is straightforward, an individual person is not identified by a MAC address, rather a device only, so an authorized person will need to have a whitelist entry for each device that he or she would use to access the network.

A customer wants to keep cost to a minimum and has only ordered a single static IP address from the ISP. Which of the following must be configured on the router to allow for all the computers to share the same public IP address? A. VLANs B. PoE C. PAT D. VPN Answer: C

Answer: C Explanation: Port Address Translation (PAT), is an extension to network address translation (NAT) that permits multiple devices on a local area network (LAN) to be mapped to a single public IP address. The goal of PAT is to conserve IP addresses.

Which of the following is a terminal emulator used to manage a network device? A. VPN B. IDS C. PuTTY D. IPS Answer: C

Answer: C Explanation: PuTTY is a free and open-source terminal emulator, serial console and network file transfer application. It supports several network protocols, including SCP, SSH, Telnet and rlogin.

Which of the following is always true when a router selects a destination? A. The default gateway is selected over any other static or dynamic route. B. The shortest route is always selected. C. The most specific route is selected over the default gateway. D. A dynamic route is selected over a directly attached network. Answer: C

Answer: C Explanation: Router always looks for the most closely matched route for forwarding the packet. For example if there are two routes in your router and you have to send a packet to a host with an ip 10.10.10.10 then it will forward packet to 192.168.1.10 rather than 192.168.1.1: Network Destination Netmask Gateway 0.0.0.0 0.0.0.0 192.168.1.1 10.10.10.0 255.255.255.0 192.168.1.10

Which of the following port numbers is used for SNMP? A. 61 B. 151 C. 161 D. 1611 Answer: C

Answer: C Explanation: Simple Network Management Protocol(SNMP) is an "Internet-standard protocol for managing devices on IP networks". Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, UPSes and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.

In which of the following layers of the OSI model would MAC addressing be found? A. Network B. Application C. Data Link D. Transport Answer: C

Answer: C Explanation: The ITU-TG.hn standard, which provides high-speed local area networking over existing wires (power lines, phone lines and coaxial cables), includes a complete data link layer which provides both error correction and flow control by means of a selective repeat Sliding Window Protocol.

Which of the following is the common port used for IMAP? A. 25 B. 53 C. 143 D. 443 Answer: C

Answer: C Explanation: The Internet Message Access Protocol (commonly known as IMAP) is an Application Layer Internet protocol that allows an e-mail client to access e-mail on a remote mail server. The current version, IMAP version 4 revision 1 (IMAP4rev1), is defined by RFC 3501. An IMAP server typically listens on well-known port 143.

Which of the following is the OSI layer that handles file compression such as LZMA or DEFLATE? A. Layer 3 B. Layer 5 C. Layer 6 D. Layer 7 Answer: C

Answer: C Explanation: The presentation level is translator between the application and network format. Unlike the lower layers, its concern is with the syntax and semantics of the information transmitted. Most user programs do not exchange random binary bit strings. They exchange data such as names, addresses, dates, etc. Different computers store the data in a different way. In order to allow these computers to transmit the data to each other the presentation layer translates the data into a standard form to be used on the network. Another function is data compression which can be used to reduce the number of bits needed to send the packet of information. Security is also added at this layer by using data encryption and decryption. This prevents others from intercepting the data and being able to decipher the meaning of the bits.

A customer is having problems connecting to a wireless network in a shared office space. The customer can detect several other wireless network signals. All of the wireless networks have different SSIDs but several are using the same encryption type. Which of the following should be configured on the customer's wireless network to improve connectivity to the wireless network? A. Change the SSID to match other wireless networks for increased throughput. B. Change the encryption type to a different mechanism to avoid interference. C. Change the channel to a different channel than the other wireless networks. D. Change the WAP to a different manufacturer than the other wireless networks. Answer: C

Answer: C Explanation: To reduce interference between wireless APs, ensure that wireless APs with overlapping signals use unique channel frequencies. The 802.11b standard reserves 14 frequency channels for use with wireless APs. You can use any other channel instead of the one that you are using.

Users are reporting that some Internet websites are not accessible anymore. Which of the following will allow the network administrator to quickly isolate the remote router that is causing the network communication issue, so that the problem can be reported to the appropriate responsible party? A. Ping B. Protocol analyzer C. Tracert D. Dig Answer: C

Answer: C Explanation: Tracert command will tell the administrator which route is not present or which is present so he will come to know whether he has appropriate route or not.

Joe has a small office and is looking to replace his phone system with a lower cost solution that requires minimal in-house support. Which of the following is the BEST choice? A. Wide Area Network B. NAT C. Virtual PBX D. Virtual LAN Answer: C

Answer: C Explanation: Virtual PBX, a business phone system providing call routing, follow-me calling, voice-mail, fax-mail, and ACD queues with no customer installed equipment.

A network technician has just upgraded a switch. The new switch's IP range and subnet mask correctly match other network devices. The technician cannot ping any device outside of the switch's own IP subnet. The previous switch worked correctly with the same settings. Which of the following is MOST likely the problem? A. The proxy server is set incorrectly. B. The Ethernet cable is pinched. C. The network gateway is set incorrectly. D. The IP address is set incorrectly. Answer: C

Answer: C Explanation: When user is able to ping everything in its own subnet that means that all the hosts are reachable however when you are not able to ping anything outside of this subnet then please check if the device is sending traffic to the correct host who should forward it to the further devices.

Assigning the same IP address to a network device is which of the following? A. SSID B. Scope C. Reservation D. Lease Answer: C

Answer: C Explanation: You might want to assign network printers and certain servers DHCP reservations to ensure that they always have the same IP address, but continue to receive updated configuration information from the DHCP server. For example, create reservations for servers that must always have the same IP address.

Which of the following provides secure access to a network device? A. SNMPv2 B. FTP C. RSH D. SSH Answer: D

Answer: D Explanation Secure Shell(SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services between two networked computers that connects, via a secure channel over an insecure network, a server and a client (running SSH server and SSH client programs, respectively).

Which of the following LAN technologies is used to provide a MAXIMUM bandwidth of 1Gbps through singlemode fiber? A. 10GBaseLR B. 100BaseFX C. 100BaseTX D. 1000BaseX Answer: D

Answer: D Explanation: 1000BaseX identifies various Gigabit Ethernet physical layer standards as defined in IEEE802.3z, such as 1000BaseLX, 1000BaseSX, 1000BaseCX and 1000BaseLH. Basically, all standards included in 1000BaseX uses 8B/10B coding scheme with 8 bits of data and 2 bits of error-correction data. Each specification allows various cable (fiber or copper) lengths, and uses different cable media.

A network administrator suspects a broadcast storm is causing performance issues on the network. Which of the following would be used to verify this situation? A. Environmental monitor B. Multimeter C. Toner probe D. Protocol analyzer Answer: D

Answer: D Explanation: A "Protocol analyzer" is a tool (hardware or software) used to capture and analyze signals and data traffic over a communication channel.

Which of the following wiring distribution types, often found in company closets, is used to connect wiring from individual offices to the main LAN cabling? A. MDF B. 66 block C. IDF D. Patch panel Answer: D

Answer: D Explanation: A patch panel, patch bay, patch field or jack field is a number of circuits, usually of the same or similar type, which appear on jacks for monitoring, interconnecting, and testing circuits in a convenient, flexible manner.

Companies trying to cut down on constant documentation of IP addresses could use which of the following? A. Longer lease times B. More reservations C. Larger scopes D. Dynamic IP addressing Answer: D

Answer: D Explanation: In Dynamic IP addressing all the hosts with private ip address will be patted to the same ip so the administrator will not have to keep track of each and every host with private ip mapped to a static public ip address.

Which of the following standards can operate at either 20MHz or 40MHz channel spacing? A. 802.11a B. 802.11b C. 802.11g D. 802.11n Answer: D

Answer: D Explanation: The 2.4 GHz ISM band is fairly congested. With 802.11n, there is the option to double the bandwidth per channel to 40 MHz which results in slightly more than double the data rate. However, when in 2.4 GHz, enabling this option takes up to 82%[10] of the unlicensed band, which in many areas may prove to be infeasible. The specification calls for requiring one primary 20 MHz channel as well as a secondary adjacent channel spaced ±20 MHz away. The primary channel is used for communications with clients incapable of 40 MHz mode. When in 40 MHz mode, the center frequency is actually the mean of the primary and secondary channels.

The network interface layer of the TCP/IP model corresponds with which of the following layers of the OSI model? (Select TWO). A. Transport layer B. Network layer C. Session layer D. Physical layer E. Presentation layer F. Data link layer Answer: D, F

Answer: D, F Explanation: The lowest layer of the OSI Reference Model is the physical layer, which is responsible for the "nitty gritty" details of transmitting information from one place to another on a network. The layer just above the physical layer is the data link layer, called the network interface layer or just the link layer in the TCP/IP architectural model. Its primary job is to implement networks at the local level, and to interface between the hardware-oriented physical layer, and the more abstract, software- oriented functions of the network layer and those above it.

Which of the following is a path vector routing protocol? A. RIP B. EIGRP C. ISIS D. OSPF E. BGP Answer: E

Answer: E Explanation: Because BGP involves a table of IP networks or "prefixes" which designate network reachability among autonomous systems (AS).