newwork test

Which of the following criteria can a packet-filtering firewall not use to determine whether to accept or deny traffic?

. Application data

Who is responsible for the security of hardware on which a public cloud runs?

. The cloud provider

Which of the following is not one of the AAA services provided by RADIUS and TACACS+?

Administration

In the event of a fire, the most appropriate failure policy is a _______ policy.

B Fail-close

Which device would allow an attacker to make network clients use an illegitimate default gateway?

DHCP server

Which part of a MAC address is unique to each manufacturer?

a. The OUI

You have just brought online a new secondary DNS server and notice your network-monitoring software reports a significant increase in network traffic. Which two hosts on your network are likely to be causing the increased traffic and why?

a. The secondary and primary DNS servers because the secondary server is requesting zone transfers from the primary server

Suppose you're creating patch cables to be used in a government office. What color wire goes in the first pin?

a. White/green

You need to securely store handheld radios for your network technicians to take with them when they're troubleshooting problems around your campus network. What's the best way to store these radios so all your techs can get to them and so you can track who has the radios?

a. smart locker

Which of the following ACL commands would permit web-browsing traffic from any IP address to any IP address?

access-list acl_2 permit https any any

What decimal number corresponds to the binary number 11111111?

b. 255

Which 802.11 standard functions in both the 2.4-GHz and 5-GHz bands?

b. 802.11ax

Suppose you send data to the 11111111 11111111 11111111 11111111 IP address on an IPv4 network. To which device(s) are you transmitting?

b. All devices on your local network

Which transmission characteristic is never fully achieved?

b. Bandwidth

What information does the switchport port-security command use to restrict access to a switch's interface?

b. Broadcast address

What is the earliest twisted-pair cabling standard that meets the minimum requirements for 10GBASE-T transmissions at 100 meters?

b. Cat 6a

You've decided to run an Nmap scan on your network. Which apps could you open to perform this task? Choose all that apply.

b. Command Prompt c. PowerShell d. Zenmap

What type of attack relies on spoofing?

b. Deauth attack

What type of fiber-cable problem is caused when pairing a 50-micron core cable with a 62.5-micron core cable?

b. Fiber type mismatch

When a router can't determine a path to a message's destination, where does it send the message?

b. Gateway of last resort

When shopping for a new router, what does the MTBF tell you?

b. How long devices like this one will last on average until the next failure

What software allows you to define VMs and manage resource allocation and sharing among VMs on a host computer?

b. Hypervisor

Which two protocols manage neighbor discovery processes on IPv4 networks?

b. ICMP and ARP

Which encryption benchmark ensures data is not modified after it's transmitted and before it's received?

b. Integrity

Which of these cellular technologies offers the fastest speeds?

b. LTE-A

What is the lowest layer of the OSI model at which wired and wireless transmissions share the same protocols?

b. Layer 3

Which fiber connector contains two strands of fiber in each ferrule?

b. MT-RJ

Which type of DNS record identifies an email server?

b. MX record

At which OSI layer does IP operate?

b. Network layer

What is one advantage offered by VDI over RDS and VNC?

b. Offers access to multiple OSs in VMs

A company accidentally sends a newsletter with a mistyped website address. The address points to a website that has been spoofed by hackers to collect information from people who make the same typo. What kind of attack is this?

b. Phishing

Which two encryption protocols might be used to provide secure transmissions for email services?

b. SSL and TLS

Which kind of multiplexing assigns slots to nodes according to priority and need?

b. STDM (statistical time division multiplexing)

Which of the following features of a network connection between a switch and server is not improved by link aggregation?

b. Speed

Which protocol's header would a layer 4 device read and process?

b. TCP

Which type of switch connects all devices in a rack to the rest of the network?

b. ToR switch

What virtual, logically defined device operates primarily at the data link layer to pass frames between nodes?

b. Virtual switch

What type of diagram shows a graphical representation of a network's wired infrastructure?

b. Wiring diagram

Which of these is considered a secure place to store a list of documented network passwords?

c. A password manager

A routing protocol's reliability and priority are rated by what measurement?

c. AD

Which Carrier Sense technology is used on wireless networks to reduce collisions?

c. CSMA/CA

What specifications define the standards for cable broadband?

c. DOCSIS

Which type of DoS attack orchestrates an attack bounced off uninfected computers?

c. DRDoS attack

A technician from your ISP has arrived to help you troubleshoot a weak WAN connection. To what location do you take them?

c. EF

You just settled in for some study time at the local coffee shop, and you pause long enough to connect your smartphone to the Wi-Fi so you can listen to some music while you study. As you're about to sign in, you realize that you clicked on an SSID called "Free Coffee and Internet." What kind of security trap did you almost fall for?

c. Evil twin

When your computer first joins an IPv6 LAN, what is the prefix of the IPv6 address the computer first configures for itself?

c. FE80::/64

Which encryption protocol does GRE use to increase the security of its transmissions?

c. IPsec

What is the first step of inventory management?

c. List all components on the network.

Which kind of crosstalk occurs between wire pairs near the source of the signal?

c. NEXT

Which OSI layer is responsible for directing data from one LAN to another?

c. Network layer

Which cloud management technique executes a series of tasks in a workflow?

c. Orchestration

Which cable is best suited for ultra-high-speed connections between a router and a switch on the same rack?

c. Passive twinaxial cable

Which of the following attack simulations detect vulnerabilities and attempt to exploit them? Choose two.

c. Pen testing a. Red team-blue team exercise

Which DNS server offers the most current resolution to a DNS query?

c. Primary DNS server

You've just completed a survey of the wireless signals traversing the airspace in your company's vicinity, and you've found an unauthorized AP with a very strong signal near the middle of the 100-acre campus. Its SSID is broadcasting the name of a smartphone model. What kind of threat do you need to report to your boss?

c. Rogue AP

You need to access customer records in a database as you're planning a marketing campaign. What language can you use to pull the records most relevant to the campaign?

c. SQL

What kind of device can monitor a connection at the demarc but cannot interpret data?

c. Smartjack

A network consists of seven computers and a network printer, all connected directly to one switch. Which network topology does this network use?

c. Star

What method does a GSM network use to separate data on a channel?

c. TDMA

If you are connected to a network that uses DHCP, and you need to terminate your Windows workstation's DHCP lease, which command would you use?

c. ipconfig /release

What is the Internet standard MTU?

d. 1,500 bytes

Which protocol replaced TKIP fod. CCMPr WPA2?

d. CCMP

What field in a TCP segment is used to determine if an arriving data unit exactly matches the data unit sent by the source?

d. Checksum

What type of device does a computer turn to when attempting to connect with a host with a known IP address on another network?

d. Default gateway

Which function of WPA/WPA2 security ensures data cannot be read in transit?

d. Encryption

A former employee discovers six months after he starts work at a new company that his account credentials still give him access to his old company's servers. He demonstrates his access to several friends to brag about his cleverness and talk badly about the company. What kind of attack is this?

d. Insider threat

In the client-server model, what is the primary secure protocol used for communication between a browser and web server?

HTTPS

As you're working to fix a problem with an application, you make multiple changes at once hoping that something will solve the issues you're having. You end up with more problems than when you started. Which step, if followed correctly, would have prevented this complication?

Identify the problem.

Which policy ensures messages are discarded when they don't match a specific firewall rule?

Implicit deny

Active Directory and 389 Directory Server are both compatible with which directory access protocol?

LDAP

At what layer of the OSI model do proxy servers operate?

Layer 7

Which of the following applications could be used to run a website from a server?

NGNIX

Which principle ensures auditing processes are managed by someone other than the employees whose activities are being audited?

Separation of dutie

What information in a transmitted message might an IDS use to identify network threats

Signature

Which part of a toner and probe kit emits an audible tone when it detects electrical activity on a wire pair?

Tone locator

Which routing protocol does an edge router use to collect data to build its routing tables for paths across the Internet?

a. BGP

Which of these categories of twisted-pair cable can support Gigabit Ethernet?

a. Cat 5e, cat 6a, cat 7

In Question 6, suppose one computer is upgraded from Windows 10 Professional to Windows Server 2019. Which networking model can the network now support that it could not support without the upgrade?

a. Client-server

Which one of the following wireless transmission types requires a clear LOS to function?

a. IR

What is the lowest layer of the OSI model at which LANs and WANs support the same protocols?

a. Layer 3

Which device can manage traffic to multiple servers in a cluster so all servers equally share the traffic?

a. Load balancer

Leading up to the year 2000, many people expected computer systems the world over to fail when clocks turned the date to January 1, 2000. What type of threat was this?

a. Logic bomb

Which cloud service model gives software developers access to multiple platforms for testing code? a. PaaS b. SaaS c. XaaS d. IaaS

a. PaaS

You need to connect a new network printer to a nearby wall jack. What kind of cable should you use?

a. Patch cable

A network consists of five computers, all running Windows 10 Professional. All the computers are connected to a switch, which is connected to a router, which is connected to the Internet. Which logical networking model does the network use?

a. Peer-to-peer

Which of the following is an application layer protocol?

a. RDP

If you're shopping for a rack switch, what component on the switch tells you it can be mounted to a rack?

a. Rack ears

What kind of route is created when a network administrator configures a router to use a specific path between nodes?

a. Static route

Which of the following devices are you likely to find in the MDF? Choose all that apply.

a. Switches c. Routers d. KVM switch

A transceiver was recently damaged by a lightning strike during a storm. How might you decide whether the ISP is responsible for replacing this device, or whether your company must foot the bill?

d. Look at whether the device is located on the ISP's side of the demarc.

With which network connection type does the VM obtain IP addressing information from its host?

d. NAT mode

A company wants to have its employees sign a document that details some project-related information that should not be discussed outside the project's team members. What type of document should they use?

d. NDA

Your organization has just approved a special budget for a network security upgrade. What procedure should you conduct to develop your recommendations for the upgrade priorities?

d. Posture assessment

Check My Work As you're troubleshooting a dead zone in your office, which measurement will help you determine the edges of the dead zone?

d. RSSI

Which remote file access protocol is an extension of SSH?

d. SFTP

Which of the following is considered a secure protocol?

d. SSH

Which device converts signals from a campus's analog phone equipment into IP data that can travel over the Internet?

d. Voice gateway

Which of the following wireless technologies does not use the 2.4 GHz band?

d. Z-Wave

Which of these commands has no parameters in Windows?

d. hostname

You're getting a duplicate IP address error on your computer and need to figure out what other device on your network is using the IP address 192.168.1.56. What command will show you which MAC address is mapped to that IP address?

d. telnet 192.168.1.56