CTI-120 network pro (Labs)

Lakukan tugas rumah & ujian kamu dengan baik sekarang menggunakan Quizwiz!

Create DHCP client reservations You have several printers on Subnet1 that need static IP addresses assigned. In this lab, your task is to configure new reserved clients for each printer using the following steps: Use the CorpDHCP server, a virtual machine running on CorpServer. Configure the IPv4 scope. Use the following reservation information:

Access the CorpDCHP virtual server.From Hyper-V Manager, select CORPSERVER.Maximize the Hyper-V Manager window to view the available server.Double-click CorpDCHP to connect to the server. Configure the IP address.From Server Manager, select Tools > DHCP.From the left pane, expand CorpDHCP.CorpNet.local > IPv4 > Scope [192.168.0.1] Subnet1.Right-click Reservations and select New Reservation.In the Reservation name field, enter a reservation name.In the IP address field, enter the IP address.In the MAC address field, enter the MAC address.Under Supported types, select DHCP only (as needed).Select Add to create the client reservation.Select Yes to the DHCP prompt.Repeat steps 2d-2h for additional reservations.Select Close.

Configure an i.p address

Access the properties for the NIC named Ethernet.Right-click Start and then select Settings.Select Network & Internet.From the right pane, select Change adapter options.Right-click Ethernet and then select Properties. Configure the IP version 4 TCP/IP settings for the Ethernet NIC.Select Internet Protocol Version 4 (TCP/IPv4).Select Properties.Make sure Use the following IP address is selected.This lets you manually configure the IP address and default gateway.Configure the Internet Protocol information as follows:IP address: 192.168.0.254Subnet mask: 255.255.255.0Default gateway: 192.168.0.5Preferred DNS server: 163.128.78.93 or 163.128.80.93Select OK.Select Close. Configure the IP version 4 TCP/IP settings for the Ethernet 2 NIC.From the Network Connections window, right-click Ethernet 2 and then select Properties.Select Internet Protocol Version 4 (TCP/IPv4).Select Properties.Make sure Use the following IP address is selected.Configure the Internet Protocol information as follows:IP address: 10.0.255.254Subnet mask: 255.255.0.0Default gateway: NonePreferred DNS server: NoneSelect OK.Select Close. Ping the preferred DNS server assigned to the Ethernet NIC.Right-click Start and select Windows PowerShell.From the PowerShell prompt, type ping default_preferred_DNS_Server_address and then press Enter.

You are the network administrator for a small corporate network. While working on your Linux server, you have determined that you need to enable and disable a few services. In this lab, your task is to: Use the systemctl command to enable anaconda.service. Use the systemctl command to disable vmtoolsd.service. After each command, check the service status with the systemctl is-enabled command.

Complete this lab as follows: Enable the Anaconda service.From the Favorites bar, select Terminal.At the Terminal prompt, type systemctl enable anaconda.service and then press Enter.Type systemctl is-enabled anaconda.service and then press Enter to check the service's status. Disable the VMware Tools service.Type systemctl disable vmtoolsd.service and press Enter.Type systemctl is-enabled vmtoolsd.service and press Enter to check the service's status.

Configure Management VLAN Settings - CLI You just installed a new switch, and you want to manage the switch from a remote location. In this lab, your task is to set up remote management for the switch as follows: Configure the IP address and subnet mask for the VLAN 1 interface:IP address: 192.168.11.250Subnet mask: 255.255.255.0 Configure the switch to use the default gateways of 192.168.11.254 Verify the configurations using the show run command. Save your changes to the startup-config file.

Configure the IP address and subnet mask for the VLAN 1 interface.Select Switch.From the switch terminal, press Enter to get started.At the Switch> prompt, type enable and press Enter.At the Switch# prompt, type configure terminal and press Enter.At the Switch(config)# prompt, type interface vlan1 and press Enter.At the Switch(config-if)# prompt, type ip address 192.168.11.250 255.255.255.0 and press Enter.Type exit and press Enter. Configure the default gateway.At the Switch(config)# prompt, type ip default-gateway 192.168.11.254 and press Enter.At the prompt, type exit and press Enter. Verify the configuration changes.At the prompt, type show run and press Enter.Press the space bar as needed to verify that the correct changes were made.Type any key to exit show command. Save your changes to the startup-config file.At the Switch# prompt, type copy run start and press Enter.Press Enter to begin building the configuration.Press Enter to return to the prompt.

Secure Access to a Switch You are the IT security administrator for a small corporate network. You need to increase the security on the switch in the Networking Closet by restricting access management. In this lab, your task is to: Create an access profile named MgtAccess and configure it with the following settings:SettingValueAccess Profile NameMgtAccessRule Priority1Management MethodAllActionDenyApplies to InterfaceAllApplies to Source IP addressAll Add a profile rule to the MgtAccess profile with the following settings:SettingValueRule Priority2Management MethodHTTPActionPermitApplies to interfaceAllApplies to Source IP addressUser definedIP Version: Version 4IP Address: 192.168.0.10Network Mask: 255.255.255.0 Set the MgtAccess profile as the active access profile. Save the changes to the switch's startup configuration file using the default settings.

Create and configure an Access Profile named MgtAccess.From the left pane, expand and select Security > Mgmt Access Method > Access Profiles.Select Add.Enter the Access Profile Name of MgtAccess.Enter the Rule Priority of 1.For Action, select Deny.Select Apply and then select Close. Add a profile rule to the MgtAccess profile.From the left pane, under Security > Mgmt Access Method, select Profile Rules.From the right pane, select the MgtAccess profile and then select Add.Enter a Rule Priority of 2.For Management Method, select HTTP.For Applies to Source IP Address, select User Defined.For IP Address, enter 192.168.0.10.For Mask, enter a Network Mask of 255.255.255.0.Select Apply and then select Close. Set the MgtAccess profile as the active access profile.From the left pane, under Security > Mgmt Access Method, select Access Profiles.Use the Active Access Profile drop-down list to select MgtAccess.Select Apply.Select OK. Save the changes to the switch's startup configuration file.At the top, select Save.For Source File Name, make sure Running configuration is selected.For Destination File Name, make sure Startup configuration is selected.Select Apply.Select OK.

You are the IT security administrator for a small corporate network. You need to increase the security on the switch in the Networking Closet by creating an access control list. You have been asked to prevent video game consoles from connecting to the switch. In this lab, your task is to: Create a MAC-based ACL named GameConsoles. Configure the GameConsoles MAC-based access control entry (ACE) settings as follows:PriorityActionDestinationMAC AddressSource MAC Address1DenyAnyValue: 00041F111111Mask: 0000001111112DenyAnyValue: 005042111111Mask: 0000001111113DenyAnyValue: 000D3A111111Mask: 0000001111114DenyAnyValue: 001315111111Mask: 0000001111115DenyAnyValue: 0009BF111111Mask: 0000001111116DenyAnyValue: 00125A111111Mask: 000000111111 Bind the GameConsoles ACL to all of the GE1-GE30 interfaces.Use Copy Settings to apply the binding to multiple interfaces Save the changes to the switch's startup configuration file. Use t

Create the GameConsoles ACL.From the Getting Started page, under Quick Access, select Create MAC-Based ACL.Select Add.In the ACL Name field, enter GameConsoles.Select Apply and then select Close. Create a MAC-based access control.Select MAC-Based ACE Table.Select Add.Enter the priority.Select the action.For Destination MAC Address, make sure Any is selected.For Source MAC Address, select User Defined.Enter the source MAC address value.Enter the source MAC address mask.Select Apply.Repeat steps 2c-2i for the remaining ACE entries.Select Close. Bind the GameConsoles ACL to all of the interfaces.From the left pane, under Access Control, select ACL Binding (Port).Select GE1.At the bottom of the window, select Edit.Select Select MAC-Based ACL.Select Apply and then select Close.Select Copy Settings.In the Copy configuration's to field, enter 2-30.Select Apply. Save the Configuration.From the top of the window, select Save.Under Source File Name, make sure Running configuration is selected.Under Destination File Name, make sure Startup configuration is selected.Select Apply.Select OK.

hange a User's Linux Password Pascal Bullock (pbullock) forgot her password and needs access to the resources on her computer. You are logged on as Sydney Hoffer. The password for the root account is P@ssw0rd (use a zero). In this lab, your task is to: Find Sydney Hoffer's username. Change the password for the pbullock user account to 1234asdf. Make sure the password is encrypted in the shadow file. Answer the question.

Find your username.From the Favorites bar, select Terminal.Type whoami at the prompt.From the top right, select Answer Questions.Answer the question. Change Pascal Bullock's password.At the prompt, type su -c "passwd pbullock" and then press Enter.Type P@ssw0rd and then press Enter.This is the password for the root user.At the New password prompt, type 1234asdf and then press Enter.This is the new password for the schawla user account.At the Retype new password prompt, type 1234asdf and then press Enter.Select Score Lab.

Troubleshoot Physical Connectivity 4 You are a network technician for a small corporate network. An employee in Office 1 says that after she added a pair of speakers to her workstation, she could no longer communicate with the computer in the Networking Closet. You need to diagnose and fix the problem. The following IP addresses are used in this lab:

In Office 1, plug the network cable back into the motherboard's NIC and confirm the connection to the network and the internet

Troubleshoot Physical Connectivity 3 You are a network technician for a small corporate network. Minutes ago, your entire building had a power blackout. The power has been partially restored, but there are still offices and networking closets without power. Employees in the Executive Office and the Support Office have called to report that they can't access the internet or other computers on the network. You need to diagnose and fix the problem as it pertains to the network. The following IP addresses are used in this lab:

In the Networking Closet, remove the switch's power cable from a non-critical load (Bank 2) outlet over to an empty critical load (Bank 1) outlet

Troubleshoot Physical Connectivity 1 You are a network technician for a small corporate network. The employee in Office 1 says that they can't communicate with the computer in Office 2 and has asked that you come to their office to fix the problem. In this lab, the following IP addresses are used:

In the Networking Closet, replace the patch cable for Office 2

Configure Port Aggregation As a network administrator, you have decided to implement port aggregation and combine multiple ports on your switch to increase throughput and provide redundancy with automatic fail-over and fail-back. In this lab, your task is to: Login to the Cisco switch console from Google Chrome:Username: cisco (case-sensitive))Password: cisco (case-sensitive) Create a new Link Aggregation Group (LAG1) named windows_server.Enable the Link Aggregation Control Protocol (LACP).Assign ports GE1 and GE2 as LAG members.. Configure LAG1 to the VLAN mode of access. Join LAG1 to VLAN13.. Verify the status of the new LAG1 group.Answer the questions. Save the changes to the switch's startup configuration file.

Log in to the Cisco switch.In the Username and Password fields, enter cisco (case-sensitive).Select Log In. Create a new Link Aggregation Group (LAG1).From the left pane, expand and select Port Management > Link Aggregation > LAG Management.From the right pane, select LAG 1 and then select Edit.In the LAG Name field, type windows_server.Select LACP to enable the Link Aggregation Control Protocol (LACP).Under Port List, press and hold the Shift key; then select GE1 and GE2.Select > to add the ports to the LAG Members pane.Select Apply.Select Close. Configure LAG1 to the VLAN mode of access.From the left pane, expand and select VLAN Management > Interface Settings.Using the Filter: Interface Type equals to drop-down menu, select LAG and then select Go.Select LAG1 and then select Edit.For Interface VLAN Mode, select Access.Select Apply.Select Close. Join LAG1 to VLAN13.From the left pane, expand and select VLAN Management > Port VLAN Membership.Using the Filter: Interface Type equals to drop-down menu, select LAG and then select Go.Select LAG1 and then select Join VLAN.Under Select VLAN, from the right pane, select 1U and then select < to remove VLAN1.From the left pane, select VLAN13; then select > to add the VLAN to the selected VLANs pane.Select Apply.Select Close. Verify the status of the new LAG1 group.From the left navigation bar, expand and select Port Management > Link Aggregation > LAG Management.From the top right, select Answer Questions.Answer the questions.This connection is now ready to use LACP.Minimize the Lab Questions window. Save the changes to the switch's startup configuration file.From the upper right of the switch window, select Save.For Source File Name, make sure Running configuration is selected.For Destination File Name, make sure Startup configuration is selected.Select Apply.Select OK.Select D

Explore Physical Connectivity 1

Q1Which of the following ports on the Cisco switch are plugged in and turned on?Your answer:Correct answer:Port 4, Port 5, Port 6 Q2Which of the following ports on the Cisco switch are showing signs of network traffic?Your answer:Correct answer:Port 4, Port 5, Port 6 Q3Which of the following ports on the Cisco switch are plugged in but show no signs of power or network activity?Your answer:Correct answer:Port 1, Port 3 Q4Which computers are attached to ports 1 and 3, respectively?Your answer:Correct answer:Exec and Office1 Q5Which computer(s) could not be reached using the ping command?Your answer:Correct answer:Office1, Exec Q6What do the results of the last ping test tell you about the network?Your answer:Correct answer:All the systems successfully pinged are functioning., Two workstations do not have access to the network. Move the network cable to the good NIC on ExecShow Details Q7After moving the Ethernet cable, what can you conclude from the state of the link lights?Your answer:Correct answer:The network card was bad. Remove the suspected faulty cable from Office1 and the wall plate Connected know good Ethernet cable from Office1 to wall plateShow Details From the switch and patch panel, replace the faulty cable for Office1

Configure Account Password Policies You have been asked to perform administrative tasks for a computer that is not a member of a domain. To increase security and prevent unauthorized access to the computer, you need to configure specific password and account lockout policies. In this lab, your task is to use the Local Security Policy to configure the following password and account lockout policies: Configure password settings so that the user must:Cycle through 10 passwords before reusing an old one.Change the password every 90 days.Keep the password at least 14 days.Create a password at least 8 characters long.Create a password that meets complexity requirements, such as using uppercase letters, lowercase letters, numbers, or symbols. Configure the account lockout policy to: Lock out any user who enters 5 incorrect passwords. Unlock an account automatically after 60 minutes. Configure the number of minutes that must

10 90 14 8 enabled 5 60 10

Create CNAME Records The sales department wants to create an intranet for all sales employees. Internet Information Services (IIS) is installed on CorpWeb and will be used to host the intranet site. Employees need the ability to access the web server using any of the following URLs: http://sales.private http://intranet.sales.private http://www.sales.private You have already created the sales.private Forward Lookup Zone on the CorpDC server. In this lab, your task is to: Allow connections to the web server by creating the following ALIAS (CNAME) records in the zone using the following information:

Access the CorpDC virtual server.From Hyper-V Manager, select CORPSERVER.Double-click CorpDC to connect to the server.Maximize the window for better viewing. Create ALIAS (CNAME) records in the zone.In Server Manager, select Tools > DNS.Expand CORPDC > Forward Lookup Zones.Right-click the sales.private zone and select New Alias (CNAME).In the Alias name field, enter the alias name (to use the parent domain name for the alias, leave the field blank).Enter the fully qualified domain name of the host.Select OK.Repeat steps 2c-2f to create the additional records.

Create Standard DNS Zones The accounting department is testing a new payroll system server. To facilitate their tests, they would like to add the payroll server to DNS to support name resolution. You need to create a new zone to support their request and accelerate lookups. You also need to place a copy of this zone on the DNS server in Building B. In this lab, your task is to: Create a primary forward lookup zone on CorpDC using the following parameters:Deselect Store the zone in Active Directory.Use acct.CorpNet.com as the zone name.Use the default name for the zone file.Do not allow dynamic updates.Allow zone transfers to any server. Create a secondary forward lookup zone called acct.CorpNet.com on CorpDC3.Specify 192.168.0.11 or CorpDC.CorpNet.Local as the master DNS server for the zone.

Access the CorpDC virtual server.From Hyper-V Manager, select CORPSERVER.Double-click CorpDC to connect to the server.Maximize the window for better viewing. Create a primary forward lookup zone.From Server Manager, select Tools > DNS.Expand CORPDC (the server that will host the zone).Right-click Forward Lookup Zones and select New Zone.In the New Zone wizard, select Next.Make sure Primary zone is selected.Clear Store the zone in Active Directory (this option is only available for domain controllers) and then select Next.In the Zone name field, enter acct.CorpNet.com for the zone and then select Next.Verify that Create a new file with this file name is selected and then click Next.Make sure Do not allow dynamic updates is selected and then click Next.Select Finish to complete the New Zone wizard. Configure zone transfers.Expand Forward Lookup Zones.Right-click acct.CorpNet.com (the new zone) and select Properties.Select the Zone Transfers tab.Verify that Allow zone transfers is selected.Select To any server.Select OK. Create a forward secondary zone.Expand CORPDC3 (the server that will host the new zone).Right-click Forward Lookup Zones and then select New Zone.Select Next.Select Secondary zone as the zone type and then select Next.In the Zone name field, enter acct.CorpNet.com and then select Next.In the Master Servers box, select Click here.Enter 192.168.0.11 or CorpDC.CorpNet.Local as the server that hosts a copy of the zone.Press Enter or click away from the IP address to begin validation.After validation is complete, select Next.Click Finish to complete the New Zone wizard.

Create Host Records You work as the IT administrator for a small corporate network. You have two servers and a DNS server that use static IP addresses on the 192.168.0.0/24 subnet. You plan to install three more servers soon, so you need to create DNS records for these servers on the CorpDC server. In this lab, your task is to: Create an IPv4 Active Directory-integrated primary reverse lookup zone for subnet 192.168.0.0/24. Be sure to accept the default replication and dynamic updates settings. Create A records and PTR records under CorpNet.local for the following hosts:Host NameIP AddressCorpServer192.168.0.10CorpFiles16192.168.0.12CorpFiles12192.168.0.13CorpDHCP192.168.0.14CorpWeb192.168.0.15

Access the CorpDC virtual server.From Hyper-V Manager, select CORPSERVER.Double-click CorpDC to connect to the server.Maximize the window for better viewing. Create a primary reverse lookup zone.From Server Manager, select Tool > DNS.Expand CORPDC.Right-click Reverse Lookup Zones and select New Zone.Select Next.Make sure Primary Zone is selected.Make sure Store the zone in Active Directory is selected and then select Next.Keep the default replication scope setting and select Next.Keep the default reverse lookup zone settings and select Next.Type 192.168.0 as the network ID.Select Next.Keep the default dynamic update settings and then select Next.Select Finish. Create a host (A) and associated pointer (PTR) record.From DNS Manager, expand Forward Lookup Zones.Right-click CorpNet.local and select New Host (A or AAAA).In the Name field, enter the host name.In the IP address field, enter the IP address.Select Create associated pointer (PTR) record as needed. The reverse lookup zone must exist for this record to be created.Select Add Hosts.Select OK.Repeat steps 3c-3g to add the additional host records.Select Done.

add a DHCP Server on Another Subnet You have just authorized the CorpDHCP server to assign IP addresses to client workstations on the 192.168.10.0 subnet. You now need to create an IPv4 scope on the CorpDHCP server for an address range on this subnet. In this lab, your task is to: Create an IPv4 scope on CorpDHCP using the following specifications:IPv4 scope name: MySubnetAddress range: 192.168.10.21 to 192.168.10.199Default gateway: 192.168.10.5DNS Servers: 198.28.56.108 and 163.128.78.93 Activate the new scope upon completion.

Access the CorpDCHP virtual server.From Hyper-V Manager, select CORPSERVER.Maximize the Hyper-V Manager window to view the available server.Double-click CorpDCHP to connect to the server. Create an IPv4 scope on the CorpDHCP.From Server Manager, select Tools > DHCP.Expand the CorpDHCP.CorpNet.local server node.Right-click IPv4 and then select New Scope.Click Next.In the Name field, enter MySubnet and then select Next.In the Start IP address field, enter 192.168.10.21In the End IP address field, enter 192.168.10.199Click Next > Next > Next > Next.From the Router (Default Gateway) dialog, enter an IP address of 192.168.10.5, select Add, and then select Next.From the Domain Name and DNS Server dialog, add two DNS server addresses as follows:In the IP address field, enter 198.28.56.108 and then select Add.In the IP address field, enter 163.128.78.93 and then select Add.Select Next and then Next again.Leave the Yes, I want to activate this scope now option selected and then select Next.Select Finish to complete the process of creating the DHCP scope.

Configure DHCP options You have just configured a scope on the CorpDHCP server to service the 192.168.0.0/24 subnet. You need to configure additional TCP/IP parameters for all clients serviced by the CorpDHCP server. In this lab, your task is to: Configure the following DHCP options for the CorpDHCP server (not on the Subnet1 scope):006 DNS Servers (in the following order).192.168.0.11192.168.10.11015 DNS Domain Name: CorpNet.local Configure Subnet1 scope options as follows:003 Router (default gateway) as 192.168.0.5

Access the CorpDCHP virtual server.From Hyper-V Manager, select CORPSERVER.Maximize the Hyper-V Manager window to view the available server.Right-click CorpDCHP and select Connect. Configure the DHCP server options.From Server Manager, select Tools > DHCP.Maximize the DHCP window for better viewing.Expand CorpDHCP.CorpNet.local > IPv4.Right-click Server Options and select Configure Options.Under Available Options, select the 006 DNS Servers.Under IP Address, enter 192.168.0.11.Select Add to add the IP address to the list.Under IP Address, enter the second 192.168.10.11 and then select Add.Scroll down and select 015 DNS Domain Name.In the String value field, enter CorpNet.local.Select OK to save the options you have defined. Configure DHCP scope options.Expand Scope [192.168.0.1] Subnet1.Right-click Scope Options and select Configure Options.Under Available Options, select the 003 Router.Under IP address, enter 192.168.0.5.Select Add to add the IP address to the list.Select OK to save the options you have defined.

Create DHCP exclusions You have just configured a scope on the CorpDHCP server to service the 192.168.0.0/24 subnet. You defined a scope to distribute IP addresses between 192.168.0.1 and 192.168.0.254. In this lab, your task is to: Prevent the DHCP server from assigning addresses to the servers and network devices.Use an exclusion range of 192.168.0.1 to 192.168.0.29.

Access the CorpDHCP Hyper-V server.From Hyper-V Manager, select CORPSERVER.Resize the window to view all virtual machines.Double-click CorpDHCP to access the server. Exclude the IP address range.From Server Manager's menu bar, select Tools > DHCP.Expand CorpDHCP.CorpNet.local > IPv4 > Scope.Right-click the Address Pool node and select New Exclusion Range.In the Start IP address field, enter 192.168.0.1.In the End IP address field, enter 192.168.0.29.Click Add.Click Close to close the Add Exclusion Range dialog.

Configure DNS Addresses You are helping a friend in college with his network connection. The dormitory where he lives has installed a 1000BaseT Ethernet network. This network uses automatic IP addressing with IP address, default gateway, and DNS server information delivered by a DHCP server. You would like to configure your friend's computer (named Dorm-PC) to use a different set of DNS server addresses than the ones being delivered by the DHCP server. In this lab, your task is to: Configure the IPv4 settings for the Ethernet network card to use the following DNS server addresses:Preferred DNS server: 208.67.222.222First alternate DNS server: 208.67.222.220Second alternate DNS server: 208.67.220.123 Have Dorm-PC validate the static DNS server information.

Access the Ethernet properties dialog.Right-click Start and then select Settings.Select Network & Internet.From the right pane, select Change adapter options.Right-click Ethernet and select Properties. Configure the new DNS addresses.Select Internet Protocol Version 4 (TCP/IPv4).Select Properties.Select Use the following DNS server addresses to manually configure the DNS server addresses.Select Advanced to configure more than two DNS server addresses.Select the DNS tab (the top one).Select Add to configure DNS server addresses.Enter the DNS server address and then select Add.Repeat steps 2f-2g to configure the two additional DNS server addresses.Select OK. Validate the new DNS settings.Select Validate settings upon exit and then select OK.Select Close to close Ethernet Properties.

Back Up Files with File History You have recently installed a new Windows 10 computer. To protect valuable data, you need to implement File History backups on this computer. In this lab, your task is to configure automatic backups for the Exec computer as follows: Save the backup to the Backup (E:) volume. Back up files daily. Keep backup files for 6 months. Back up the entire Data (D:) volume. Make a backup now.

Access the File History Backup options.Right-click Start and then select Settings.Select Update & Security.From the left pane, select Backup. Configure and run a File History Backup plan.From the right pane, select Add a drive.Select Backup (E:).Under Automatically back up my files, slide the switch to On.Select More options.Under Back up my files, use the drop-down menu to select Daily.Under Keep my backups, use the drop-down menu to select 6 months.Under Back up these folders, select Add a folder.Double-click the Data (D:) volume and then select Choose this folder.Select Back up now.Wait for the backup to complete.

Auditing Device Logs on a Cisco Switch You are the IT security administrator for a small corporate network. You need to enable logging on the switch located in the Networking Closet. In this lab, your task is to: Enable Logging and the Syslog Aggregator. Configure RAM Memory Logging as follows:Emergency, Alert, and Critical: EnableError, Warning, Notice, Informational, and Debug: Disable Configure Flash Memory Logging as follows:Emergency and Alert: EnableCritical, Error, Warning, Notice, Informational, and Debug: Disable Copy the running configuration file to the startup configuration file using the following settings:Source File Name: Running configurationDestination File Name: Startup configuration

Access the Log Settings for the switch.From the left menu, expand and select Administration > System Log > Log Settings. Enable Logging and the Syslog Aggregator.For Logging, select Enable.For Syslog Aggregator, select Enable. Configure RAM and Flash Memory Logging.Under RAM Memory Logging:Select Emergency, Alert, and Critical.Clear Error, Warning, Notice, Informational, and Debug.Under Flash Memory Logging:Mark Emergency and Alert.Clear Critical, Error, Warning, Notice, Informational, and Debug.Select Apply. Copy the running configuration file to the startup configuration file.From the top menu bar, select Save.Under Copy/Save Configuration, select Apply.Select OK.Select Done.

Configure an IPv6 Address You are the IT administrator for a small corporate network. The company has obtained the registered, globally unique IPv6 /48 network address 2620:14F0:45EA. You need to configure your server with this address so you can begin testing IPv6 in your internal network. This is your first network, so you will use a subnet address of 0001. Your network router is not configured for IPv6 yet, so you must manually configure the address for now. To simplify the configuration, use the server's IPv4 address to create the interface ID. In this lab, your task is to: Configure the external vEthernet network adapter with the following IPv6 address:Prefix: 2620:14F0:45EA:0001Interface ID: 192:168:0:10Subnet prefix length: 64 Use ipconfig to verify the information.

Access the Network Connections window.Right-click Start and then select Settings.Select Network & Internet.From the right pane, select Change adapter options. Configure the external vEthernet network adapter.Right-click the vEthernet (external) adapter and select Properties.Select Internet Protocol Version 6 (TCP/IPv6).Select Properties.Select Use the following IPv6 address and configure the settings as follows:IPv6 address: 2620:14F0:45EA:0001:192:168:0:10Subnet prefix length: 64Select OK.Select Close. Verify the IPv6 address.Right-click Start and select Windows PowerShell (Admin) to verify the address configuration.At the prompt, type ipconfig /all and press Enter view the IPv6 Address.

Connect to an ethernet network You are a network technician for a small corporate network. The owner of the company has asked you to connect a new workstation to the network while the new employee is in an orientation meeting. In this lab, your task is to: Connect the workstation in Office 1 to the Ethernet local area network using a twisted-pair cable. Confirm that the Office 1 workstation is connected to the local network and the internet.

Access the back view of the computer in Office 1. Under Office 1, select Hardware.Above the computer, select Back to switch to the back view of the computer. Connect the RJ45 cable to the computer and the wall plate. Under Shelf, expand Cables.Select the Cat6a Cable, RJ45 cable. From the Selected Component window:Drag an RJ45 Shielded Connector to the Ethernet port on the computer.Drag the other RJ45 Shielded Connector to the Ethernet port on the wall outlet. Test the connection to the internet.On the computer monitor, select Click to view Windows 10 to view the running operating system.In the notification area, right-click the Network icon and select Open Network & Internet settings.The diagram should indicate an active connection to the network and the internet.

configure an ip address on mobile device

Access the iPad IP address settings dialog.Select Settings.Select Wi-Fi.Under Choose A Network, for CorpNet, select the information icon (i). Configure a static IP address.From the right pane, select Static.Configure the IP information as follows:IP address: 192.168.0.85Subnet mask: 255.255.255.0Router (default gateway): 192.168.0.5DNS: 192.168.0.11 Join the iPad to the CorpNet network.Select Join Network.In the Password field, type: @CorpNetWeRSecure!&Select Join.

Configure Network Security Appliance Access

Access the pfSense management console.From the taskbar, select Google Chrome.Maximize the window for better viewing.In the Google Chrome address bar, enter 198.28.56.22 and then press Enter.Enter the pfSense sign-in information as follows:Username: adminPassword: pfsenseSelect SIGN IN. Change the password for the default (admin) account.From the pfSense menu bar, select System > User Manager.For the admin account, under Actions, select the Edit user icon (pencil).For Password, change to P@ssw0rd (0 = zero).Enter P@ssw0rd in the Confirm Password field.Scroll to the bottom and select Save. Create and configure a new pfSense user.Select Add.Enter lyoung as the username.Enter C@nyouGuess!t in the Password field.Enter C@nyouGuess!t in the Confirm Password field.Enter Liam Young in Full Name field.For Group membership, select admins and then select Move to "Member of" list.Scroll to the bottom and select Save. Set a session timeout for pfSense.Under the System breadcrumb, select Settings.For Session timeout, enter 20.Select Save. Disable the webConfigurator anti-lockout rule for HTTP.From the pfSense menu bar, select System > Advanced.Under webConfigurator, for Protocol, select HTTP.Scroll down and select Anti-lockout to disable the webConfigurator anti-lockout rule.Scroll to the bottom and select Save.

Reconnect to an Ethernet Network You are a network technician for a small corporate network. The employee in Office 2 reported that they can no longer communicate with other workstations on the local network or the internet. After troubleshooting the problem, you have determined that the built-in network card in the workstation has stopped working. In this lab, your task is to: Select and install a new network card that provides the fastest Ethernet available from the cards you currently have in the office. Connect the workstation to the local network using the existing cable. After the fix has been implemented, confirm that the workstation has a connection to the local network and the internet.

Add the 1000Base TX adapter to the Office 2 computer.Above the computer, select Motherboard to switch to the motherboard view of the computer.Under Shelf, expand Network Adapters.Identify the network adapter that has the fastest Ethernet speed.Under Shelf, drag the Network adapter, Ethernet 1000BaseTX, PCIe network adapter to a free PCIe slot on the computer. Connect the computer to the network.Above the computer, select Back to switch to the back view of the computer.Drag the RJ45 Shielded Connector from the motherboard's NIC to the port of the 1000BaseTX network adapter. Verify the connection to the local network and the internet.Above the computer, select Front to switch to the front view of the computer.Select the power button on the computer case.Wait for the operating system to start.Right-click Start and then select Settings.Select Network & Internet.The diagram should indicate an active connection to the home network and the internet.

Configure a DHCP relay agent You just installed DHCP service on the CorpDHCP server. You configured two scopes. The scope for Building A (Subnet1) is configured on the 192.168.0.0 network. The scope for Building B (Subnet2) is configured on the 192.168.10.0 network. After activating the scopes, you find that clients on Subnet1 receive IP addressing information from the DHCP server, but clients on Subnet2 have IP addresses in the 169.254.0.0/16 range. You realize that DHCP messages are not being forwarded through the router. In this lab, your task is to: Use Routing and Remote Access to configure CorpServer2 as a DHCP relay agent by performing the following:Add the DHCP relay agent routing protocol.Add NetTeam as a DHCP relay agent interface.Set the boot threshold to 0.Configure the DHCP relay agent properties to identify 192.168.0.14 as the DHCP server. Renew the TCP/IP information on Exec2 (the client machine in Bui

Add the DHCP relay agent routing protocol.From Server Manager, select Tools > Routing and Remote Access.Expand IPv4.Right-click General and select New Routing Protocol.Select DHCP Relay Agent and then select OK. Add and configure a relay agent interface.From the left pane, right-click DHCP Relay Agent and select New Interface.Select NetTeam and then select OK.Make sure Relay DHCP packets is selected.Set the boot threshold to 0 (zero).Select OK. Configure the DHCP relay agent properties to identify the DHCP server.Right-click DHCP Relay Agent and select Properties.In the Server address field, enter 192.168.0.14 (the IP address of the DHCP server).Select Add and then select OK. Renew the TCP/IP address and verify the connection.From the top left, select Floor 1.Under Manager Office, select Exec2.Right-click Start and select Windows PowerShell (Admin).In PowerShell, type ipconfig. Notice that the current IP address is on the 169.254.0.0 network.In PowerShell, type ipconfig /renew and then press Enter.The computer should receive an address on the 192.168.10.0 network.From the taskbar, select the network icon to view the connection status.

Connect a cable motem You are working on a small network in your home. You have just signed up for cable internet access for the network. The cable company has installed the line in your home and has given you a preconfigured modem for your network. All connectors on the wall plate are for WAN connections only. You do not have LAN connections inside your home. In this lab, your task is to: Connect the components to make the internet connection.Add the Cable Modem/Router to the workspace.Connect the modem to the WAN connection using the cable with the least amount of signal loss.Connect the computer to the cable modem using a 10/100 Mbps Ethernet connection.Use the AC to DC power adapter to plug in the modem. In Windows, use the Network & Internet settings to confirm that the Home-PC computer is properly connected to the internet. In this lab, the modem was preconfigured with the correct settings to make the connecti

Add the cable modem to the workspace.Under Shelf, expand Routers.Drag the Cable Modem/Router from the shelf to the workspace.Select Back to switch to the back view of the cable modem. Connect the modem to the WAN connection.Under Shelf, expand the Cables category.Select the Coaxial Cable, RG-6 cable.From the Selected Component pane:Drag a Coaxial Type F connector to the applicable port on the cable modem.Drag the other Coaxial Type F connector to the applicable port on the wall plate. Connect the computer to the cable modem.Over the computer, select Back to switch to the back view of the computer.Under Shelf, select the Cat6a Cable, RJ45 cable.From the Selected Component pane:Drag an RJ45 Shielded Connector to the Ethernet port on the cable modem.Drag the other RJ45 Shielded Connector to the Ethernet port on the computer (not the Ethernet card in the slot). Provide power to the modem.Under Shelf, select the Power Adapter, AC to DC.From the Selected Component pane:Drag the DC Power Connector to the port on the cable modem.Drag the AC Power Adapter end to the power outlet. Verify that the computer is connected to the internet.On the monitor, select Click to view Windows 10.From the notification area, right-click the Network icon and select Open Network & Internet settings.The diagram should indicate an active connection to the home network and the internet.

install a switch You are working on a small network in which you used a hub to allow the Home-PC and Home-PC2 computers to communicate with each other while maintaining a connection to the internet. A customer noticed a communication delay whenever the computers use the network at the same time. You believe the delay might be related to the shared bandwidth on the network. You need to reconfigure the network to allow both computers a guaranteed bandwidth. You have decided to use the type of switch that lets you configure the port speed for Home-PC to be faster than Home-PC2. In this lab, your task is to: Connect the two computers using the appropriate network components.Place the appropriate networking device on the workspace. Do not select a device with unnecessary features, and do not include unnecessary devices.Move the power source from the hub to the new networking device.Move the Ethernet cables from the hub t

Add the managed switch and provided power to the switch.Under the Shelf, expand Networking Devices.Drag Managed Switch to the workspace, preferably next to the existing hub.Above the managed switch, select Back to switch to the back view of the managed switch.Above the hub, select Back to switch to the back view of the hub.Select the DC Power Connector on the hub and drag it to the power port on the switch. Move the Ethernet cables from the hub to the switch.Drag an RJ45 Connector cable from the hub to an open Ethernet port on the switch to connect Home-PC, Home-PC2, and the cable modem to the switch.Repeat step 2a for each RJ45 connection on the hub. Confirm that the Home-PC and Home-PC2 computers have active connections to the internet.On the Home-PC monitor, select Click to view Windows 10 to view the running operating system.Right-click Start and then select Settings.Select Network & Internet.The diagram should indicate an active connection to the home network and the internet.From the top navigation menu, select Bench.On the Home-PC2 monitor, select Click to view Windows 10.Right-click Start and then select Settings.Select Network & Internet.The diagram should indicate an active connection to the home network and the internet.

Connect a media converter You are a network technician for a small corporate network. Your manager has decided to switch to a new ISP. The network needs to be moved to the new ISP so that the old one can be cancelled. The new ISP has run a fiber optic line directly to the back of the fiber patch panel in the basement Networking Closet, but the NSA device doesn't have any fiber ports. Because the NSA doesn't have any fiber ports, you need to use a media converter to convert from a fiber optic cable to an Ethernet cable. Most media converters use SFP ports so they can convert multiple form factors. The media converter in this lab already has a fiber SFP module installed. Use the following information to make the proper connections: The ISP is connected to ports 23 and 24 of the fiber patch panel.Port 23 is Tx.Port 24 is Rx. Use the color coding on the end of the fiber optic cables to identify which end is Tx and whic

Add the media converter to the rack.Under Shelf, expand Networking Devices.Drag the Media Converter to the bottom shelf of the rack in the Workspace. Connect the SC to LC fiber cable to the media converter. Above the rack, select Back to switch to the back view of the rack. Drag the Ethernet cable from the left wall outlet to the Ethernet port on the media converter. Under Shelf, expand Cables. Select the Cable, Fiber, SC to LC cable.From the Selected Component pane, drag the Connector, Fiber Duplex LC male connector to the media converter. Connect the SC to LC cables to the patch panel.Above the rack, select Front to switch to the front view of the rack.From the Selected Component pane:Drag the Fiber Optic SC Connector (A) to port 23 on the fiber patch panel.Drag the Fiber Optic SC Connector (B) to port 24 on the fiber patch panel. Attach the power adapter to the media converter and plug it into the wall outlet.From the Shelf, drag the Power Adapter, AC to DC to the DC power port on the media converter.From the Select Connector pane, select DC Power Connector.Above the rack, select Back to switch to the back view of the rack.From the Selected Component pane, drag the AC Power Adapter connector to an open outlet on the rack UPS.The lights on the media converter should turn on. Navigate to any workstation on Floor 1 to confirm internet connectivity.From the top left, select Building A.Under Building A, select Floor 1.Select a workstation (such as Office1).From the notification area, right-click the Network icon and select Open Network & Internet settings.Verify that the workstation has internet connectivity.

Explore nslookup You are the administrator for the CorpNet.local domain. The CorpDC and CorpDC3 servers are the DNS servers for the domain. CorpDC resides in Building A, and CorpDC3 resides in Building B. Users in Building B report that they are unable to contact the CorpWeb server. In this lab, your task is to: Use nslookup to query the DNS for the CorpWeb server using its fully qualified domain name (CorpWeb.CorpNet.local). What happens? Use nslookup to query the CorpDC3 DNS server for CorpWeb. What happens? What is the problem? How would you resolve this problem? How would you verify that the problem has been fixed?

At the PowerShell prompt, type nslookup CorpWeb.CorpNet.local and press Enter.The CorpDC DNS server responds with the name resolution information for CorpWeb. Use nslookup to query the CorpDC3 DNS server for CorpWeb.Type nslookup CorpWeb.CorpNet.local CorpDC3.CorpNet.local and press Enter.The CorpDC3 DNS server responds that it can't find CorpWeb. CorpDC3 does not have a DNS record for CorpWeb.

Change Your Linux Password You are logged on to your computer as Abigail Pain (apain), who is an administrator on this system. However, you think someone has learned your password. In this lab, your task is to change your password using the following information: Current password: P@ssw0rd (use a zero) New password: V3rySecure1@

Change your password to V3rySecure1@. From the Terminal's prompt, type passwd and press Enter. When prompted, enter your current password of P@ssw0rd (use a zero) and then press Enter. At the New password prompt, type V3rySecure1@ and then press Enter. Retype V3rySecure1@ as the new password and then press Enter.

Optimize a Wireless Network You are a network technician for a small corporate network. You would like to take advantage of the self-healing features provided by the small enterprise wireless solution you have implemented. You are already logged in as WxAdmin on the Wireless Controller console from ITAdmin. In this lab, your task is to perform the following: Configure self-healing on the wireless network.Automatically adjust AP radio power to optimize coverage when interference is present.Set the 2.4GHz and 5GHz radio channels to use the Background Scanning method to adjust for interference. Configure the background scanning needed for rogue device detection, AP locationing, and self-healing. Background scans should be performed on all radios every 30 seconds. Configure load balancing for all radios by adjusting the threshold to 40dB. Configure band balancing to allow 30% of clients to use the 2.4GHz radios. Reduce t

Configure Self Healing on the wireless network.From the Ruckus ZoneDirector, select the Configure tab.From the left menu, select Services.Under Self Healing, select Automatically adjust AP radio power to optimize coverage when interference is present.Use the Automatically adjust 2.4GHz channels using drop-down arrow to select Background Scanning.Use the Automatically adjust 5GHz channels using drop-down arrow to select Background Scanning.On the right, select Apply (in the Self Healing pane). Configure Background Scanning.Under Background Scanning, select Run a background scan on 2.4GHz radio.Enter 30 seconds.Select Run a background scan on 5GHz radio.Enter 30 seconds.On the right, select Apply. Configure Load Balancing.Under Load Balancing, select Run load balancing on 2.4GHz radio.In the Adjacent radio threshold(dB) field, enter 40.Select Run load balancing on 5GHz radio.In the Adjacent radio threshold(dB) field, enter 40.On the right, select Apply. Configure Band Balancing.Under Band Balancing, select Percent of clients on 2.4GHz radio.Enter 30.On the right, select Apply. Adjust the AP Power Level.From the left menu, select Access Points.From the top right, select Exhibit to determine which access points to adjust; then close the exhibit.Under Access Points, select Edit next to the access point to be modified.Under Radio B/G/N(2.4G) next to TX Power, make sure Override Group Config is selected.From the TX Power drop-down list, select -3dB (1/2).Under Radio A/N/AC(5G) next to TX Power, make sure Override Group Config is selected.From the TX Power drop-down list, select -3dB (1/2).Select OK.Repeat steps 5b - 5f for additional access points.

Connect fiber optic cables You work as the IT administrator for a growing corporate network. You are in the process of creating an iSCSI storage area network (SAN) on the CorpiSCSI server. The server is currently connected to the network using an Ethernet cable. To increase the server's performance, you have decided to replace the existing Ethernet connection with a fiber optic connection. In this lab, your task is to: Connect the CorpiSCSI server to the Cisco switch using the appropriate fiber optic cable When connecting the server, use the color coding on the end of the fiber optic cable to identify the TX and RX connection ends.Connector A (red) is TX.Connector B (black) is RX. Remove the server's previous Ethernet network connection and place the Ethernet cable on the Shelf. Verify that the server is connected to the network through the fiber optic connection.

Connect the fiber ST to LC cable to the SFP port.Under Shelf, expand Cables.Drag the Cable, Fiber, ST to LC cable to the SFP 1 LC port on the switch.In the Select Connector window, select the Connector, Fiber, Duplex LC, Multi-mode, Male. Connect the fiber ST to LC cable to the TX and RX ports.Above the rack, select Back to switch to the back view.From the Selected Component pane:Drag the ST Connector (A) to the TX port on the CorpiSCSI server (the bottom server).Drag the ST Connector (B) to the RX port on the CorpiSCSI server. Disconnect the Cat6a RJ45 cable from the CorpiSCSI server and switch.Drag the RJ45 connector from the back of the server to the Shelf.Above the rack, select Front to view the front of the rack.Drag the highlighted RJ45 connector from the switch to the Shelf. Verify that the CorpiSCSI server is connected to the network.On the CorpiSCSI's monitor, select Click to view Windows Server 2019.Right-click Start and select Settings.Select Network & Internet.Verify that Ethernet 3 is connected to CorpNet.local.

Connect Network Devices You're a network technician for a small corporate network. The company recently expanded to the second floor of its building. You've already installed a small networking closet on the second floor, and you've run the necessary cables to the ports on each of the floor's fiber patch panels. Now you need to connect the two networks using fiber optic cables. In this lab, your task is to connect the switch in the Networking Closet on Floor 1 with the switch in Networking Closet 2 on Floor 2 through the fiber patch panels in each networking closet. Use the following information to identify the necessary connections: Connect the appropriate fiber cable to switches through the fiber patch panels. For the patch panel on Floor 1:Port 3 is transmit (Tx).Port 4 is receive (Rx). For the patch panel on Floor 2:Port 1 is transmit (Tx).Port 2 is receive (Rx). Use the color coding on the end of fiber optic cab

Connect the fiber network on Floor 1Hide Details Connect the SFP transceiver (LC) to the switch Connect the LC connector to the SFP transceiver on the switch Connect the SC connector A to port 3 on the fiber patch panel Connect the SC connector B to port 4 on the fiber patch pane Connect the fiber network on Floor 2Hide Details Connect the SFP transceiver (LC) to the switch Connect the LC connector to the SFP transceiver on the switch Connect the SC A connector to port 1 on the fiber patch panel Connect the SC B connector to port 2 on the fiber patch panel Plug the switch on Floor 2 into a Critical Load outlet Computers on Floor 2 are connected to the Internet Install the SFP Transceiver (LC) in the networking closet on Floor 1.Under Shelf, expand the Adapters.Drag the SFP Transceiver (LC) to the SFP 2 port on the switch. Connect the fiber cable to switches.Under Shelf, expand Cables.Select Cable, Fiber, SC to LC.From the Selected Component pane:Drag Connector, Fiber, Duplex LC Multi-mode, Male to the SFP LC port (plugged into SFP2) on the switch.Drag the Fiber Optic SC Connector (A) to port 3 on the fiber patch panel.Drag the Fiber Optic SC Connector (B) to port 4 on the fiber patch panel. Access the networking closet on floor 2.From the top left, select Floor1.Under Building A, select Floor 2.Under Networking Closet 2, select Hardware. Connect the fiber cable to switches on Floor 2.Under Shelf, expand Adapters.Drag SFP Transceiver (LC) to an open SFP port on the switch.Under Shelf, expand Cables.Select Cable, Fiber, SC to LC.From the Selected Component pane:Drag the Connector, Fiber, Duplex LC, Multi-mode, Male to the SFP port.Drag the Fiber Optic SC Connector (A) to port 1 on the fiber patch panel.Drag the Fiber Optic SC Connector (B) to port 2 on the fiber patch panel. Plug the switch on Floor 2 into a bank 1 c

Configure Switch IP Settings - CLI You are in the process of configuring the Branch1 switch. In this lab, your task is to: Find the IP address assigned to the FastEthernet0/0 interface on router SFO.Use the show cdp neighbors detail command.Answer the question. Configure the switch with the following parameters:Interface: vlan1IP address: 192.168.11.250Subnet mask: 255.255.255.0 Configure the switch to use the FastEthernet0/0 interface on the SFO router as the default gateway. Save your changes to the startup-config file.

Find the IP address assigned to the FastEthernet0/0 interface on the SFO router.Select the Branch1 switch.From the Terminal, press Enter to get started.Type enable and press Enter to change to the EXEC or Global Configuration mode.Type show cdp neighbors detail and press Enter.Find the IP address for the SFO router.From the top right, select Answer Questions.Answer the question.Move the question dialog to the side and keep working. Configure the IP address and subnet mask for the Branch1 switch.At the Branch1# prompt, type config t and press Enter.At the Branch1(config)# prompt, type interface vlan1 and press Enter.At the Branch1(config-if)# prompt, type ip address 192.168.11.250 255.255.255.0 and press Enter.At the Branch1(config-if)# prompt, type exit and press Enter. Configure the switch to use the FastEthernet0/0 interface on the SFO router as the default gateway.At the Branch1(config)# prompt, type ip default-gateway routers_IP_address and press Enter.At the Branch1(config)# prompt, type exit and press Enter. Save your changes to the startup-config file.At the Branch1# prompt, type copy run start and press Enter.Press Enter to begin building the configuration.When you see OK, press Enter.From the question dialog, select Score Lab.

Poison DNS You are the IT security administrator for a small corporate network. As a test, you want to spoof the DNS to redirect traffic as part of an on-path (man-in-the-middle) attack. To do this, you have decided to send all DNS requests for the RMK Office Supplies coming from the Exec computer to the RUS Office Supplies site. In this lab, your task is to complete the following: From the Exec computer, view normal access to the RMK Office Supplies website. From the Support computer, view the contents of the /etc/ettercap/etter.dns file to see which entry reroutes the request to the RMK Office Supplies site to the RUS Office Supplies site. Answer Question 1. Use Ettercap to configure DNS spoofing and an on-path attack using the following information:Use unified sniffing on the enp2s0 interface.Set Exec (192.168.0.30) as the target machine.Initiate DNS spoofing using an Ettercap plug-in.Initiate ARP poisoning on re

From Exec, view normal access to the RMK Office Supplies website.From the taskbar, select Google Chrome.In the URL field, type www.rmksupplies.com and press Enter.Notice that you are taken to the RMK Office Supplies website.Close Google Chrome. From Support, learn how Ettercap's DNS spoofing plug-in works by viewing the host file (etter.dns).From the top left, select Floor 1 Overview.Under Support Office, select Support.From the Favorites bar, select Terminal.From the Terminal prompt, type cd /etc/ettercap and then press Enter to change to the Ettercap directory.Type ls and then press Enter to view the current files.Type cat etter.dns and then press Enter to view the contents of the etter.dns file.Typing cat etter.dns | less lets you view the file one line at a time. If used, type q to end the cat command.At the bottom, locate the line that specifies where the RMK Office Supplies website will be redirected.From the top right, select Answer Questions.Answer Question 1.Minimize the Answer Questions dialog. Use Ettercap to begin unified sniffing on the enp2s0 interface.From the Favorites bar, select Ettercap.Select Sniff > Unified sniffing...From the Network Interface drop-down list, select enp2s0.Select OK. Set Exec (192.168.0.30) as the target machine.Select Hosts > Host list to view the hosts known to the tool.None are shown.Select Hosts > Scan for hosts to scan for hosts on the network.A list of hosts is shown.Under IP Address, select 192.168.0.30 (the Exec computer).Select Add to Target 1 to assign it as the target. Initiate DNS spoofing using the Ettercap plug-in.Select Plugins > Manage the plugins.Select the Plugins tab.Double-click dns_spoof to activate it. Initiate ARP poisoning on remote connections.Select Mitm > ARP poisoning.Select Sniff remote connections.Select OK. From Exec, attempt to access the RMK Office

Connect patch cables 2 You are a network technician for a small corporate network. You recently made a patch panel connection for the workstation in Office 1. You now want to provide network and internet connectivity for the computers in a few other offices. In this lab, your task is to: Connect a patch cable between the patch panel and the Cisco switch.Use the following table to determine the correct ports:

From the Networking Closet, attach an Ethernet cable from the patch panel to the switch port.Under Shelf, expand Cables.Select the Cat6a Cable, RJ45.From the Selected Component pane:Drag an RJ45 Shielded Connector to the Exec 1 port on the patch panel.Drag the other RJ45 Shielded Connector to the correct port on the Cisco switch (top row). Repeat steps 1b-1c for the Supp and Lobby ports.

Connect patch cables 1 You are a network technician for a small corporate network. Today, you moved a new workstation to Office 1, and you now need to connect the computer to the Ethernet local area network and the internet. In this lab, your task is to connect the workstation to the wired network as follows: In the Networking Closet: Use the appropriate twisted-pair cable to make a connection between the patch panel and switch.Use port Off 1 on the patch panel.Use port 3 on the Cisco switch. In Office 1: Connect the Office1 desktop computer to the local area network using the appropriate twisted-pair cable. Configure the Office1 desktop computer to obtain IP and DNS addresses automatically from the DHCP server on the local network. Use the Settings app to confirm that the workstation is properly connected to the local area network and the internet.

From the Networking Closet, connect the patch panel and switch. Under Shelf, expand Cables. Select the Cat6a Cable, RJ45 cable. From the Selected Component pane:Drag an RJ45 Shielded Connector to the Off 1 (Office 1) port on the patch panel .Drag the other RJ45 Shielded Connector to port 3 on the Cisco switch (top row, third port from the left). Connect the Office1 workstation to the local area network. From the top left, select Floor 1 Overview. In Office 1, select Hardware. Above the computer, select Back to switch to the back view of the computer. Under Shelf, expand Cables.Select Cat6a Cable, RJ45. From the Selected Component pane:Drag an RJ45 Shielded Connector to the Ethernet port on the computer.Drag the other RJ45 Shielded Connector to the open Ethernet port on the wall outlet. Configure the workstation to obtain IP and DNS addresses automatically from the server on the network.On the Office1 monitor, select Click to view Windows 10.From the Windows taskbar, right-click Start and then select Settings.Select Network & Internet.The Settings windows should indicate there is no connection to the internet.Select Ethernet and then select Change adapter options.Right-click Ethernet and then select Properties.Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties.Select Obtain an IP address automatically.Select Obtain DNS server address automatically.Select OK.Select Close.Close the Network connections window.Select Status.The Settings window should now indicate there is an active connection to the local network and the internet.

Respond to Social Engineering Exploits

Human ResourcesEthics VideoSafeKeepWhile this email has an embedded link, it is digitally signed, so you know it actually comes from your Human Resources department. In addition, if you hover over the link, you see that it is a secure link to the corporate web server. Human ResourcesIMPORTANT NOTICE-Action RequiredSafeKeepWhile this email appears very urgent, it doesn't ask you to click on anything or run any attachments. It does inform you that you need to go a website that you should already know and make sure your courses are complete.Activities CommitteePumpkin ContestSafeKeepThis email doesn't ask you to click on anything or run any attachments.Bob AverezPresentationSafeKeepThis email doesn't ask you to click on anything or run any attachments.

Update Firmware You are the IT security administrator for a small corporate network. You need to increase the security on the switch by updating the switch's firmware. In this lab, your task is to: Import the latest firmware file found in C:\Sx300_Firmware. Change the switch's active image to the version just imported. Complete the required steps to be able to start using the new update.

Import a new firmware image for the Cisco switch.From the right pane, under Quick Access, select Upgrade Device Software.For File Name, select Choose File.Browse to and select C:\Sx300_Firmware\Sx300_FW-1.2.7.76.ros.Select Open.Select Apply.Select OK.Select Done. Change the switch's active image to 1.2.7.76.From the left pane, under Administration > File Management, select Active Image.For Active Image After Reboot, use the drop-down menu to select 1.2.7.76.Select Apply. Reboot the switch to be able to start using the new firmware.From the left pane, under Administration, select Reboot.From the right pane, select Reboot.

Troubleshoot Physical Connectivity 2 You are a network technician for a small network. The manager in Office 2 says that she can no longer communicate with any other computer on the network. You need to diagnose and fix the problem. The following IP addresses are used in this lab:

In Office 2, add a new NIC and connect the Ethernet cable to the new NIC

select and install an network adapter You work as the IT administrator for a small corporate network. To accommodate specific network communication needs for an upcoming project, you need to upgrade the network connection's speed for the Windows workstation located in the Executive Office. In this lab, your task is to: Install the network interface card with the fastest speed into the Exec computer. Connect the Exec computer to the local area network using the new network card and the appropriate cable. From the workstation's operating system, use the ping command to confirm that the workstation has a connection to the local network and the internet using the following:Local server IP address: 192.168.0.10ISP & internet provider: 198.28.2.254

Insert the PCI adapter into the motherboard.Above the computer, select Motherboard to switch to the motherboard view of the computer.Under Shelf, expand Network Adapters.Drag the Network Adapter, Ethernet 10/100/1000BaseTX, PCIe card to a free PCIe slot on the computer's motherboard. Move the Ethernet cable from the computer's built-in network adapter to the new PCIe network card.Above the computer, select Back to switch to the back view of the computer.Drag the Ethernet cable from the built-in port to the port on the PCIe network adapter. Confirm that the computer is connected to the local network and the internet.Above the computer, select Front to switch to the front view of the computer.Select the power button on the computer case to turn on the computer.Wait for the operating system to load.Right-click Start and then select Windows PowerShell (Admin).From the PowerShell prompt, type ping 192.168.0.10 and then press Enter to test connectivity to the local network server.From the PowerShell prompt, type ping 198.28.2.254 and then press Enter to test connectivity to the internet.

Configure NTP You are a network technician for a small corporate network. You would like to use NTP to synchronize time on you network. You are currently logged in as the root user. On the CorpData server, your task is to: Use the dnf package manager to install the NTP service. Use the systemctl utility to verify that the NTP service is running. Answer Question 1. Find the IP address of the NTP server. Answer Question 2. On the Exec computer, your task is to: Add the NTP server as a time source using the following command:w32tm /config /manualpeerlist:[servers_ip_address],0x8 /syncfromflags:MANUAL /update Verify that the Exec computer is using the NTP server for time synchronization using the following command:w32tm /query /status

Install the NTP service on the CorpData server.Under Networking Closet, select CorpData.In the console, type dnf install ntp and then press Enter to begin the installation process.Type y and press Enter to install the NTP package. Verify that the NTP service is running.Type systemctl status ntp and press Enter.From the top left, select Answer Questions.Answer Question 1. Find the NTP server's IP address.Type ip addr show | more to view the NTP server's IP address.Answer Question 2. Add the NTP server as a time source for the Exec computer.From the top left, select Floor1.Under Executive Office, select Exec.Right-click Start and select Windows PowerShell (Admin).Configure Exec to use the NTP server with the following command:w32tm /config /manualpeerlist:192.168.0.24,0x8 /syncfromflags:MANUAL /update Verify that the Exec computer is using the NTP server for time synchronization.In the console, type w32tm /query /status and then press Enter.Select Score Lab.

4.9.8 Troubleshoot IP Configuration 3 Listen to simulation instructions You are a network technician for a small corporate network. The network is connected to the internet and uses DHCP for IP address assignments. The employee in Office 1 reports that their workstation can communicate with some computers on the network but not on the internet. You need to diagnose and fix the problem. While completing this lab, use the following IP addresses: Computer NameIP AddressCorpServer192.168.0.10Office2192.168.0.30Exec192.168.0.33ITAdmin192.168.0.34(Unknown)198.28.2.254(the ISP) In this lab, your task is to: Use the following troubleshooting tools to diagnose the problem on the network:The ping, ipconfig, or tracert command line utilitiesThe Network & Internet settings on the Windows 10 operating system Fix the problem at the applicable workstation(s) as necessary. Use the troubleshooting tools to confirm that the problem is

On the Office1 computer, configure the network connection to request the IP address information from the DHCP server Q1What is the subnet mask for ITAdmin?Your answer:Correct answer:255.255.255.0 Q2What is the IP address for the first DNS server on ITAdmin?Your answer:Correct answer:192.168.0.11 Q3What is the IP address for the subnet mask on Office1?Your answer:Correct answer:255.255.255.240 Q4What is the IP address for the first DNS server on Office1?Your answer:Correct answer:163.128.78.108 Q5How is Office1 obtaining its IP information?Your answer:Correct answer:Manually assigned Q6What is most likely causing the networking issues on Office1?Your answer:Correct answer:There are misconfigured IP addresses.

Create guess pass

Open the Ruckus ZoneDirector using Google Chrome.URL: http://192.168.0.6Admin Name: WirelessAdminPassword: Adminsonly! Set up Guest Access Services using the following parameters:Name: Guest_BYODAuthentication: Use guest pass authentication.The guest should be presented with your terms of use statement and then allowed to go to the URL they were trying to access.Verify that 192.168.0.0/16 is on the list of restricted subnets. Create a guest WLAN using the following parameters:Network Name: GuestESSID: Guest_BYODType: Guest AccessAuthentication: OpenEncryption Method: NoneGuest Access Service: Guest_BYODIsolate guest wireless clients from other clients on the access point. Open a new Google Chrome browser window and request a guest pass using the BYODAdmin user as follows:URL: 192.168.0.6/guestpassUsername: BYODAdminPassword: @dmin1sUse any full name in the Full Name field.Make a note of or copy and paste the key shown in the Key field. Use the key from the guest pass request to authenticate to the wireless LAN Guest_BYOD from the Gst-Lap laptop computer in the Lobby.

install a hub You are working on a home office network. Recently, you added a cable modem to the network so the computer named Home-PC could connect to the internet. You also added the computer named Home-PC2 to your network, but your networking configuration only allows Home-PC to connect to the internet. To save on cost, you want to add a hub to the network so that both computers can communicate with each other and connect to the internet. The computers do not need to have guaranteed bandwidth for their network connections. In this lab, your task is to: Connect the Home-PC and the Home-PC2 using the hub on the Shelf.Place the hub in the workspace.Connect Home-PC to the hub.Reconnect the cables as necessary between the Home-PC and the cable modem.Use the AC to DC power adapter to provide power to the hub.Connect Home-PC2 to the hub. Confirm that both computers are properly connected to the network and internet.

Place the hub in the workspace.Under Shelf, expand Networking Devices.Drag Hub, 1000BaseTX Ethernet1 to the workspace. Connect the Home-PC computer to the hub.Above the hub, select Back to switch to the back view of the hub.Above Home-PC computer, select Back to switch to the back view of the Home-PC computer.Select the Cat5e cable connected to the motherboard's NIC and drag the connector to an Ethernet port on the hub.Under Shelf, expand Cables.Select Cat5e Cable, RJ45.In the Selected Component pane:Drag an RJ45 Connector to the Ethernet port on the back of Home-PC.Drag the other RJ45 Connector to an Ethernet port on the hub. Provide power to the hub.Under Shelf, select Power Adapter, AC to DC.In the Selected Component pane:Drag the DC Power Connector to the port on the hub.Drag the AC power adapter to an empty outlet on the wall or surge protector. Confirm that Home-PC is properly connected to the network and internet.On Home-PC, select Click to view Windows 10.Right-click Start and then select Settings.The diagram should indicate an active connection to the home network and the internet. Connect the Home-PC2 computer to the hub.From the top left, select Bench.Above the Home-PC2 computer, select Back to switch to the back view of the Home-PC2.From the Shelf, select Cat5e Cable,RJ45.In the Selected Component pane:Drag an RJ45 Connector to the Ethernet port on the back of Home-PC2.Drag the other RJ45 Connector to an Ethernet port on the hub. Confirm that Home-PC2 is properly connected to the network and internet.On Home-PC2, select Click to view Windows 10.Right-click Start and then select Settings.Select Network & Internet.The diagram should indicate an active connection to the home network and the internet.

Troubleshoot IP Configuration 2 You are a network technician for a small corporate network. The network is connected to the internet and uses DHCP for address assignments. The owner of the company in the Executive Office and a temporary employee in the IT Administrator office both report that their workstations can communicate with some computers on the network, but cannot access the internet. You need to diagnose and fix the problem. While completing this lab, use the following IP addresses: Computer NameIP AddressCorpServer192.168.0.10(Unknown)198.28.2.254(the ISP)ITAdmin(Unknown)Exec(Unknown) In this lab, your task is to complete the following: To help troubleshoot the issue, use:The ping, ipconfig, and tracert commands from the above computers.The DHCP server console in the Windows Server 2019 operating system, which is running as a VM on the CorpServer computer. Fix the problem at the workstation, the DHCP serve

Q1After looking at the exhibits and the results of the tracert command, which of the following IP addresses is assigned to the building A network router?Your answer:Correct answer:192.168.0.5 Q2Which of the following best describes what you have learned from your troubleshooting up to this point?Your answer:Correct answer:The connections from building A to the ISP are working. Q3Mark all of the observations you found to be true after examining the results of the ipconfig /all command.Your answer:Correct answer:The IP information for the Ethernet adapter is supposed to come from a DHCP server., The IP address is an APIPA address, not a valid address for this network. Q4Which of the following is the most likely reason the ping tests to the ISP failed from Exec and ITAdmin, but were successful from CorpServer?Your answer:Correct answer:The DHCP server is probably not assigning IP addresses correctly. Q5Why can the Exec and ITAdmin computers ping each other while they cannot ping CorpServer or ISP?Your answer:Correct answer:Both are using an APIPA address. In the Networking Closet, activate the DHCP scope for the local network Verify that the Executive Office and IT Administrator workstations can communicate with the internetShow Details

Troubleshoot IP Configuration 1 Listen to simulation instructions You are a network technician for a small corporate network. The network is connected to the internet and uses DHCP for address assignment. The employees in the IT Administration Office and Office 2 report that their workstations can communicate with some computers on the network but cannot access the internet. You need to diagnose and fix the problem. The following IP addresses are used in your network: DeviceIP AddressCorpServer192.168.0.10ITAdmin192.168.0.31Office2192.168.0.34ns1.nethost.net(ISP)198.28.2.254 In this lab, your task is to troubleshoot and fix the issue using the following procedures: From the Office2 computer, use the ping and ipconfig commands to test connectivity and gather information.Answer Questions 1 and 2. From the ITAdmin computer, use the ping and ipconfig commands to test connectivity and gather information.Answer Questions 3

Q1From Office2, which, if any, pings failed?Your answer:Correct answer:The ISP - 198.28.2.254 Q2What is the address of the default gateway assigned to Office2?Your answer:Correct answer:192.168.0.4 Q3From ITAdmin, which, if any, pings failed?Your answer:Correct answer:The ISP - 198.28.2.254 Q4What is the IP address of the default gateway assigned to ITAdmin?Your answer:Correct answer:192.168.0.4 Q5What do you see here that might explain why this computer can access the internet, but Office2 and ITadmin can't?Your answer:Correct answer:The default gateway for CorpServer is different. Reconfigure the DHCP server with 192.168.0.5 as the default gateway Verify that the ITAdmin workstation can communicate with the internet Verify that the Office2 workstation can communicate with the internet

Explore Physical Connectivity 2 In this lab, you explore different methods of troubleshooting network communication problems caused by a loss of power in the Networking Closet. Your troubleshooting steps include using the ping command, viewing the link and network activity lights on the switches and servers, and changing power sources. Select Exhibits to view the network diagram. The following IP addresses are used in this lab: LocationComputer NameIP AddressOffice 1Office1192.168.0.30Building Binternal router interfaceN/A198.28.56.1DNSns1.nethost.net163.128.80.93 Complete this lab as follows:

Q1Select the correct order of the servers in the rack mount (top to bottom)Your answer:Correct answer:CorpServer, CorpiSCSI, CorpData Q2As a result of unplugging the UPSs, what changes are evident?Your answer:Correct answer:All link lights are off., CorpServer is still running., The CorpData monitor is off. Q3Why do CorpServer and its monitor still have power?Your answer:Correct answer:They are plugged into the critical load bank or battery backup section of a UPS. Q4Which of the following ping tests were successful?Your answer:Correct answer:None Q5Which of the following ping tests were successful?Your answer:Correct answer:All Plug the switch into a Critical Load Bank outlet

Poison ARP and Analyze with Wireshark Listen to simulation instructions You are the IT security administrator for a small corporate network. You believe a hacker has penetrated your network and is infiltrating it using ARP poisoning. In this lab, your task is to discover whether ARP poisoning is taking place as follows: Use Wireshark to capture packets on the enp2s0 interface for five seconds. Analyze the Wireshark packets to determine whether ARP poisoning is taking place.Use the 192.168.0.2 IP address to help make your determination. Answer the questions.

Q1What is the MAC address of the first responding device?Your answer:Correct answer:00:00:1B:11:22:33 Q2What is the MAC address of the duplicate responding device?Your answer:Correct answer:00:00:1B:33:22:11 Use Wireshark to capture packets on the enp2s0 interface for five seconds.From the Favorites bar, select Wireshark.Maximize the window for easier viewing.Under Capture, select enp2s0.Select the blue fin to begin a Wireshark capture.After capturing packets for five seconds, select the red box to stop the Wireshark capture. Analyze the Wireshark packets to determine whether ARP poisoning is taking place.In the Apply a display filter field, type arp and press Enter to only show ARP packets.In the Info column, look for lines containing the 192.168.0.2 IP address.From the top right, select Answer Questions.Answer the questions.Select Score Lab.

14.3.9 Troubleshoot with Wireshark

Q1What is the effect of the net 192.168.0.0 filter in Wireshark?Your answer:Correct answer:Only packets with either a source or destination address on the 192.168.0.x network are displayed. Isolate traffic with the host 192.168.0.45 filter. Q2What is the effect of the host 192.168.0.45 filter in Wireshark?Your answer:Correct answer:Only packets with 192.168.0.45 in either the source or destination address are displayed. Isolate traffic with the ip.src==192.168.0.45 filter. Q3What is the effect of the ip.src==192.168.0.45 filter in Wireshark?Your answer:Correct answer:Only packets with 192.168.0.45 in the source address are displayed. Isolate traffic with the ip.dst==192.168.0.45 filter. Q4What is the effect of the ip.dst==192.168.0.45 filter in Wireshark?Your answer:Correct answer:Only packets with 192.168.0.45 in the destination address are displayed. Isolate traffic with the tcp.port==80 filter. Q5What is the effect of the tcp.port==80 filter in Wireshark?Your answer:Correct answer:Only packets with port 80 in either the source or destination port are displayed. Isolate traffic with the eth contains 11:12:13 filter. Q6What is the effect of the eth contains 11:12:13 filter in Wireshark?Your answer:Correct answer:Only packets with 11:12:13 in either the source or destination MAC address are displayed. Isolate traffic with the tcp contains password filter. Q7What is the captured password?Your answer:nnCorrect answer:hippophobia

Configure DHCP Snooping You have a single switch with a DHCP server connected to Fa0/24. The DHCP snooping feature is already enabled on SwitchA. Now you want to configure DHCP snooping and dynamic ARP inspection on the switch. In this lab, your task is to: Enable DHCP snooping globally on SwitchA. Enable DHCP snooping for VLAN 1.Use the Fa0/24 interface. Configure the port that the DHCP server is connected to as a trusted interface for DHCP snooping. Enable dynamic ARP inspection for VLAN 1. Save the changes to the startup-config file.

Save the changes to the startup-config file.At the SwitchA# prompt, type copy run start and press Enter.Press Enter to begin building the configuration. Enable DHCP snooping for VLAN1.At the SwitchA(config)# prompt, type ip dhcp snooping vlan 1 and press Enter.At the SwitchA(config)# prompt, type int fa0/24 and press Enter. Configure the port that the DHCP server is connected to as a trusted interface for DHCP snooping.At the SwitchA(config-if)# prompt, type ip dhcp snooping trust and press Enter.At the SwitchA(config-if)# prompt, type exit and press Enter. Enable dynamic ARP inspection for VLAN1.At the SwitchA(config)# prompt, type ip arp inspection vlan 1 and press Enter.Press Ctrl + Z. Save the changes to the startup-config file.At the SwitchA# prompt, type copy run start and press Enter.Press Enter to begin building the configuration.

configure a secure email on mobile device

Set the email account to use SSL and the secure port 993.Select Settings.From the left menu, select Accounts & Passwords. (You may need to scroll down to see this option.)Under Accounts & Passwords, select Gmail.Under Gmail, select [email protected] Advanced.Slide the button to enable Use SSL.Make sure the server port is set to 993.At the top, select Account.Click Done. Connect to CorpNet Wi-Fi.From the left menu, select Wi-Fi.Select CorpNet.In the Password field, enter @CorpNetWeRSecure!& as the password.Select Join.

Configure Logging on pfSense You are the IT administrator for a small corporate network. To be more proactive in your defense against potential attacks, you want to save the system logs being captured by the pfSense firewall. In this lab, your task is to: Sign in to pfSense using:Username: adminPassword: P@ssw0rd (zero) Configure the general system logs to:Only show 25 logs at a time.Have a maximum log file size of 250000 bytes. Enable and configure remote system logging using the following instructions:Save the log files on CorpSever (192.168.0.10).Only forward system and firewall events. Answer the questions.

Sign in to the pfSense Management console.In the Username field, enter admin.In the Password field, enter P@ssw0rd (zero).Select SIGN IN or press Enter. Access the system log settings.From the pfSense menu bar, select Status > System Logs.From the top right, select Answer Questions.Answer Question 1. Configure the general logging options.Under the Status breadcrumb, select Settings.Set the GUI Log Entries field to 25 to show only 25 logs at a time in the GUI.Set the Log file size field to 250000 bytes (250 KB) to set the maximum size of each log file. Configure remote logging.Scroll to the bottom and, under Remote Logging Options, select Enable Remote Logging.Make sure the options are set as follows:Source address: Default (any)IP protocol: IPv4Remote log servers: 192.168.0.10For Remote Syslog Contents, select the following:System EventsFirewall EventsSelect Save. View the results of the changes made to the number of logs shown.Under the Status breadcrumb, select System.Answer Question 2.Select Score Lab.

Configure QoS You are the IT administrator for a small corporate network. Several employees have complained of slow internet bandwidth. You have discovered that the user stations on the guest Wi-Fi network are consuming much of your company's bandwidth. You have decided to use pfSense's Traffic Shaper wizard to create the various rules needed to better control the bandwidth usage and to fine-tune the priority for the type of traffic used on your guest Wi-Fi network. Your network has one LAN and one WAN. In this lab, your task is to complete the following: Access the pfSense management console:Username: adminPassword: P@ssw0rd (zero) Create a firewall alias using the following specifications:Name: HighBWDescription: High bandwidth usersAssign the IP addresses of the high-bandwidth users to the alias:Vera's IP address: 172.14.1.25Paul's IP address: 172.14.1.100 The Shaper must be configured for the GuestWi-Fi interfac

Sign in to the pfSense management console.In the Username field, enter admin.In the Password field, enter P@ssw0rd (0 = zero).Select SIGN IN or press Enter. Create a high bandwidth usage alias.From the pfSense menu bar, select Firewall > Aliases.Select Add.Configure the Properties as follows:Name: HighBWDescription: High bandwidth usersType: Host(s)Add the IP addresses of the offending computers to the host(s) configuration as follows:Under Host(s), in the IP or FQDN field, enter 172.14.1.25 for Vera's system.Select Add Host.In the new IP or FQDN field, enter 172.14.1.100 for Paul's system.Select Save.Select Apply Changes. Start the Traffic Shaper wizard for dedicated links.From the pfSense menu bar, select Firewall > Traffic Shaper.Under the Firewall bread crumb, select Wizards.Select traffic_shaper_wizard_dedicated.xml.Under Traffic Shaper wizard, in the Enter number of WAN type connections field, enter 1 and then select Next. Configure the Traffic Shaper.Make sure you are on Step 1 of 8.Using the drop-down menu for the upper Local interface, select GuestWi-Fi.Using the drop-down menu for lower Local interface, make sure PRIQ is selected.For the upper Upload field, enter 8.Using the drop-down menu for the lower Upload field, select Mbit/s.For the top Download field, enter 50.Using the drop-down menu for the lower Download field, select Mbit/s.Select Next. Prioritize voice over IP traffic.Make sure you are on Step 2 of 8.Under Voice over IP, select Enable to prioritize the voice over IP traffic.Under Connection #1 parameters, in the Upload rate field, enter 10.Using the drop-down menu for the top Units, select Mbit/s.For the Download rate, enter 20.Using the drop-down menu for the bottom Units, select Mbit/s.Select Next. Enable and configure a penalty box.Make sure you are on Step 3 of 8.Under Penalty Box, select Enab

Configure a Perimeter Firewall You are the security analyst for a small corporate network. You recently placed a web server in a screened subnet, or demilitarized zone (DMZ). You need to configure the perimeter firewall on the network security appliance (pfSense) to allow access to the web server from the LAN and from the WAN. You also want to allow all traffic from the LAN network to the DMZ network. In this lab, your task is to perform the following: Access the pfSense management console:Username: adminPassword: P@ssw0rd (zero) Add an HTTP firewall rule that allows traffic from the WAN to the web server in the DMZ. Add an HTTPS firewall rule that allows traffic from the WAN to the web server in the DMZ.Use the following table for the HTTP and HTTPS rules:ParameterSettingSourceWANSource and destination port/serviceHTTP (80), HTTPS (443)DestinationA single hostIP address for host172.16.1.5DescriptionsFor HTTP: HTTP t

Sign in to the pfSense management console.In the Username field, enter admin.In the Password field, enter P@ssw0rd (zero).Select SIGN IN or press Enter. Create and configure a firewall rule to pass HTTP traffic from the internet to the web server.From the pfSense menu bar, select Firewall > Rules.Under the Firewall breadcrumb, select DMZ.Select Add (either one).Make sure Action is set to Pass.Under Source, use the drop-down menu to select WAN net.Select Display Advanced.For Source Port Range, use the From drop-down menu to select HTTP (80).Under Destination, use the Destination drop-down menu to select Single host or alias.In the Destination Address field, enter 172.16.1.5Using the Destination Port Range drop-down menu, select HTTP (80).Under Extra Options, in the Description field, enter HTTP to DMZ from WAN.Select Save.Select Apply Changes. Create and configure a firewall rule to pass HTTPS traffic from the internet to the web server.For the rule just created, select the Copy icon (two files).Under Source, select Display Advanced.Change the Source Port Range to HTTPS (443).Under Destination, change the Destination Port Range to HTTPS (443).Under Extra Options, change the Description field to HTTPS to DMZ from WANSelect Save.Select Apply Changes. Create and configure a firewall rule to pass all traffic from the LAN network to the DMZ network.Select Add (either one).Make sure Action is set to Pass.For Interface, use the drop-down menu to select LAN.For Protocol, use the drop-down menu to select Any.Under Source, use the drop-down menu to select LAN net.Under Destination, use the drop-down menu to select DMZ net.Under Extra Options, in the Description field, enter LAN to DMZ Any.Select Save.Select Apply Changes.

Configure a Screened Subnet (DMZ) You are the IT administrator for a small corporate network. You want to make a web server that runs services accessible from the internet. To help protect your company, you want to place this server and other devices in a screened subnet, or demilitarized zone (DMZ). This DMZ and server need to be protected by the pfSense Security Gateway Appliance (pfSense). Since a few of the other devices in the DMZ require an IP address, you have also decided to enable DHCP on the DMZ network. In this lab, your task is to perform the following: Access the pfSense management console:Username: adminPassword: P@ssw0rd (zero) Add a new pfSense interface that can be used for the DMZ.Use DMZ as the interface name.Use a static IPv4 address of 172.16.1.1/16. Add a firewall rule for the DMZ interface that allows all traffic from the DMZ.Use Allow DMZ to any rule as the description. Configure and enable t

Sign into the pfSense management console.Enter admin in the Username field.In the Password field, enter P@ssw0rd (0 = zero).Select SIGN IN or press Enter. Configure an interface for the DMZ.From the pfSense menu bar, select Interfaces > Assignments.Select Add.Select OPT1.Select Enable interface.Change the Description field to DMZUnder General Configuration, use the IPv4 Configuration Type drop-down menu to select Static IPv4.Under Static IPv4 Configuration, change the IPv4 Address field. to 172.16.1.1Use the Subnet mask drop-down menu to select 16.Select Save.Select Apply Changes.(Optional) Verify the change as follows:From the menu bar, select pfsense COMMUNITY EDITION.Under Interfaces, verify that the DMZ is shown with the correct IP address. Add a firewall rule to the DMZ interface that allows all traffic from the DMZ.From the pfSense menu bar, select Firewall > Rules.Under the Firewall breadcrumb, select DMZ. (Notice that no rules have been created.)Select Add (either one).For the Action field, make sure Pass is selected.For the Interface field, make sure DMZ is selected.For the Protocol, use the drop-down menu to select Any.Under Source, use the drop-down menu to select DMZ net.Under Destination, make sure it is configured for any.Under Extra Options, enter Allow DMZ to any rule as the description.Scroll to the bottom and select Save.Select Apply Changes. Configure pfSense's DHCP server for the DMZ interface.From the menu bar, select Services > DHCP Server.Under the Services breadcrumb, select DMZ.Select Enable to enable DHCP server on the DMZ interface.Configure the Range field as follows:From: 172.16.1.100To: 172.16.1.200Scroll to the bottom and select Save.

Configure NAT

Sign into the pfSense management console.In the Username field, enter admin.In the Password field, enter P@ssw0rd (zero).Select SIGN IN or press Enter. Configure NAT port forwarding for the PC1 computer.From the pfSense menu bar, select Firewall > NAT.Select Add (either one).Configure or verify the following settings:Interface: LANProtocol: TCPDestination type: LAN addressDestination port range (From and To): MS RDPRedirect target IP: 172.16.1.100Redirect target port: MS RDPDescription: RDP from LAN to PC1Select Save. Configure NAT port forwarding for the Kali Linux server.Select Add (either one).Configure or verify the following settings:Interface: LANProtocol: TCPDestination type: LAN addressDestination port range (From and To): SSHRedirect target IP: 172.16.1.6Redirect target port: SSHDescription: SSH from LAN to KaliSelect Save. Configure NAT port forwarding for the web server.Select Add (either one).Configure or verify the following settings:Interface: LANProtocol: TCPDestination type: LAN addressDestination port range (From and To): OtherCustom (From and To) 5151Redirect target IP: 172.16.1.5Redirect target port: Other 5151Description: RDP from LAN to web server using custom portSelect Save.Select Apply Changes.

Troubleshoot DNS Records You are the administrator for the CorpNet.local domain. The CorpDC and CorpDC3 servers are the DNS servers for the domain. You are responsible for CorpDC, which resides in Building A. Some users report that they are unable to contact the CorpWeb server. In this lab, your task is to: Test the connectivity to CorpWeb using the ping command.Ping CorpWeb.CorpNet.localPing 192.168.0.15 (the IP address for CorpWeb).Answer Question 1. Create any DNS records needed to fix the problem using the following information:Host name: CorpWebIP address: 192.168.0.15 Test the connectivity to CorpWeb using the ping command.Ping CorpWeb.CorpNet.localPing 192.168.0.15 (the IP address for CorpWeb).Answer Question 2.

Test the connectivity to CorpWeb using the ping command.Right-click Start and select Windows PowerShell (Admin).At the prompt, type ping CorpWeb.CorpNet.local and press Enter.At the prompt, type ping 192.168.0.15 (the IP address for CorpWeb) and press Enter.From the top right, select Answer Questions.Answer Question 1.Close PowerShell. Access the CorpDC virtual server.From Hyper-V Manager, select CORPSERVER.Double-click CorpDC to connect to the server.Maximize the window for better viewing. Create any DNS records needed to fix the problem.In Server Manager, select Tools > DNS.Expand CORPDC > Forward Lookup Zones.Right-click CorpNet.local and select New Host (A or AAAA).In the Name field, enter CorpWeb.Notice that the fully qualified domain name (FQDN) is now CorpWeb.CorpNet.local.Enter 192.168.0.15 in the IP Address field.Select Create associated pointer (PTR) record to automatically create the PTR record for the new host.Select Add Host.Select OK.Select Done to close the New Host dialog. Test the connectivity to CorpWeb using the ping command.Right-click Start and select Windows PowerShell (Admin).At the prompt, type ping CorpWeb.CorpNet.local and press Enter.Answer Question 2.Select Score Lab.

Install a home router Listen to simulation instructions You are setting up a small network in a home. The owner of the network has decided to change his internet service provider (ISP) to a company called EtherSpeed. The ISP has installed a connection to both RJ45 jacks on the wall plate. You are responsible for selecting the correct router to connect the network to the internet. You want to use the fastest connection speed available while maintaining security for the Home-PC and Home-PC2 computers. In this lab, your task is to complete the following: Place the appropriate router on the workspace. Using the power source currently connected to the existing switch, provide power to the new router. Determine which devices the Ethernet cables (those that are plugged into the existing switch) are currently connected to.Answer Questions 1-3 using the Exhibits. Move all the Ethernet cables from the old switch to an open LA

USE SMALL WHITE SWITCH Place the router in the Workspace and provide power.Under Shelf, expand Routers.Drag Router, Ethernet w/Firewall to the Workspace.For convenience, place the router to the left of the existing cable modem.Above the router, cable modem, and switch, select Back to view the back of each device.Drag the DC Power Connector from the switch to the power port on the new router. Determine where the cables plugged into the switch are currently connected.Above the Home-PC computer, select Back.Above the Home-PC2 computer, select Back.From the upper right, select Exhibits.On the switch, select the cable plugged into port 1.From the top right, select Answer Questions.Answer Question 1.On the switch, select the cable plugged into port 3.Answer Question 2.On the switch, select the cable plugged into port 4.Answer Question 3.Minimize the Lab Questions dialog and close the Exhibits window. Move all the Ethernet cables to their new locations.From the switch, drag one of the Ethernet cables to an open LAN port on the new router.Repeat step 3a for the remaining two Ethernet cables still in the switch.Drag the Ethernet cable from the Cable Modem to an open Ethernet port on the wall plate. Confirm that the computer is properly connected to the network and internet.On the Home-PC monitor, select Click to view Windows 10 to view the running operating system.In the notification area, right-click the Network icon and select Open Network & Internet settings.The diagram should indicate an active connection to the home network and the internet. Confirm the connection for Home-PC2.From the top left, select Bench to return to the bench view.On Home-PC2, select Click to view Windows 10 to view the running operating system.Right-click Start and then select Settings.Select Network & Internet.The diagram should indicate an active c

Explore Network Communications In this lab, you will discover important facts about network communications by using the ping, ipconfig, and tracert command utilities. The following local network IP addresses are used in this lab: LocationNameIP AddressOffice 1Office1192.168.0.30Support OfficeSupport199.92.0.33RouterNetwork Router192.168.0.5IT AdministrationITAdmin192.168.0.33ISPExternal DNS Server163.128.78.93RouterInternet Router198.28.56.1 Complete this lab as follows: Right-click Start and then select Windows PowerShell (Admin). At the PowerShell prompt, type ping 192.168.0.30 and press Enter to ping Office1.Does the test succeed? Type ping 199.92.0.33 and press Enter to ping Support.Why does this test fail? Type ping 192.168.0.5 and press Enter to ping the router's internal interface.Does the test succeed? Type ipconfig and press Enter to view the IP settings.What is the default gateway? Type ping 163.128.78.93 a

Use tracert on ExecHide Details Run tracert 198.28.56.1 (the router) Run tracert 163.128.78.93 (the ISP's DNS server)

diable servioces

Using Zenmap, scan the network for open remote access ports.From the Favorites bar, select Zenmap.Maximize the windows for better viewing.In the Command field, use nmap -p [port number] 192.168.0.0/24 to scan the port.Select Scan (or press Enter) to scan the subnet for a given service.Using the table in the scenario, identify the computer(s) with the open port using the IP address found.From the top right, select Answer Questions.Answer Question 1.Repeat steps 1c-1e and then answer Question 2. For computers that have a remote access service port open, disable and then stop the applicable service from running.From the top left, select Floor 1 Overview.Select the computer with the remote access service port open. If needed, minimize or move the Lab Questions dialog.Right-click Start and select Computer Management.From the left pane, expand and select Services and Applications > Services.Maximize the window for better viewing.Double-click the service (Remote Desktop Services or VNC Server) that needs to be stopped.Using the Startup type drop-down menu, select Disabled.Under Service status, select Stop.Select OK.Repeat step 2a-2i.From the top right, select Answer Questions.Select Score Lab.

Configure alternate addressing

You work as the IT administrator for a small corporate network. The receptionist in your office has a laptop that runs Windows 10. He took it home and configured a static connection to his home network. When he returned to the office, he could no longer connect to the office network, which uses a DHCP server for IP address configuration. You need to configure the laptop to work on both networks (home and office). In this lab, your task is to configure the TCP/IPv4 properties for the Wi-Fi interface as follows: Verify the current state of the wireless network.Answer the question. Configure the interface to obtain its:IP address automatically.DNS server address automatically. Configure the alternate TCP/IP information using the following information:IP address: 172.16.0.12Subnet mask: 255.255.0.0Default gateway: 172.16.255.254Preferred DNS server: 198.60.22.2

CTI-120 network pro (Labs)

Set pelajaran terkait

Market Efficiency: R47

APES Unit 7

Learning Unit 3 Quiz

ACCT: Chapter 2

Class Questions

Python Badge

Key Ideas Chapter 17-20

Chapter 5

Flashcards

ENTP - 5000 Lean Startup Discussion Questions

Medical-Surgical NCLEX Practice QUIZ

Audit Quiz 6

Observation

BIO EXAM#3 COGBOOK Questions

Financial Statements

Chapter 8 quiz

F3 - Equity Method and Joint Ventures

DIGESTIVE SYSTEM

BiSc Chapter 8 (Cellular Reproduction: Cells from Cells)

ENVIRON 201- Midterm Exam