Network+ from a great fam
A technician is setting up a branch office on a point-to-point connection. Which of the following IP network blocks is the MOST efficient use of IP address space for the router connections between the two sites?
/30
Which of the following would be the MOST efficient subnet mask for a point-to-point link?
/31
Which of the following is the number of broadcast domain that are created when using an unmanaged 12-port switch?
1
Based on networks 10.8.16.0/22 and 10.8.31.0/21, which of the following is the BEST summarized CIDR notation?
10.8.0.0/16
Which of the following is the correct port number for NTP?
123
An office network consists of one two-port router connected to a 12-port switch. A four-port hub is also connected to the switch. On this particular network, which of the following is the number of collision domains that exist?
14
A network administrator has been given a network of 172.16.85.0/21 and wants to know the usable range of IP addresses on that subnet. Which of the following indicates the correct IP address range?
172.16.80.1-172.16.87.254
A network technician is creating a new subnet for 488 host machines. The technician is told to use a class B address scheme when making the subnet and is instructed to leave as much room as possible for additional subnets of the same size. Which of the following subnets would fulfill these requirements?
172.18.0.0/23
A technician is trying to determine the IP address of a customerג€™s router. The customer has an IP address of 192.168.1.55/24. Which of the following is the address of the customerג€™s router?
192.168.1.1
A junior network technician is setting up a new email server on the company network. Which of the following default ports should the technician ensure is open on the firewall so the new email server can relay email?
25
Company policy dictates that full backups are taken every Sunday evening, and incremental backups occur Monday through Saturday in the evening. If data loss were to occur on a Thursday before the backup window, which of the following is the number of backup sets that would be needed to retrieve the lost data comeFriday morning?
3
Ann, a network technician, set up a new server and enabled the host-based firewall. She attempts to connect to the server from several different workstations using RDP but is not successful. Which of the following ports on the firewall should she verify is open?
3389
A network technician is setting up a new web server on the company network. One of the requirements for the web server is to ensure the end users can securely authenticate to the application to perform their job duties. Which of the following ports should the network technician request from the firewall team to comply with this requirement?
443
Which of the following protocols can be both connection-oriented and connectionless?
53 DNS
A content filter is set to analyze XML and JSON that users access from the Internet. At which of the following layers is this analysis taking place?
6
A network administrator wants to connect to a remote device via SSH. Which of the following layers of the OSI model is the protocol using?
7
Which of the following wireless connection types utilize MIMO on non-overlapping channels? (Choose two.)
802.11ac 802.11n
An engineer is reviewing the implementation requirements for an upcoming project. The basic requirements identified by the customer include the following: ✑ WLAN architecture supporting speeds in excess of 150 Mbps ✑ Clientless remote network access ✑ Port-based network access control Which of the following solution sets properly addresses all of the identified requirements?
802.11n, SSL-VPN, 802.1x
A vendor has installed new wireless access points in an office. After completing the installation, users in one area of the office report they cannot connect to the wireless network. A network technician confirms the users in that area cannot see the wireless SSID. Which of the following MOST likely explains the issue?
A directional antenna was installed incorrectly.
A network technician needs to extend a Cat 6a connection. A device is being moved to another building that is too far away for the existing cable to reach. There is dark fiber between the buildings, and the devices must be directly connected to each other using RJ45 terminations. Which of the following is needed to ensure the connection?
A media converter
A network administrator has been directed to present the network alerts from the past week to the companys executive staff. Which of the following will provide the BEST collection and presentation of this data?
A report from the SIEM tool
A network technician is preparing for an upcoming department expansion project and is reviewing the standard on private IP addressing. Which of the following IP addresses fall into these address ranges? (Choose two.)
A. 172.30.11.11 D. 192.168.200.201
A network technician is reviewing switch ACLs to determine if they are causing communication issues with one PC. The PCג€™s IP address is 192.168.12.66. Which of the following is the network range found in the ACL that could have affected this PC?
A. 192.168.12.97 255.255.255.192
Which of the following ports should be open on a host-based firewall for a user who needs email and file-sharing capabilities? (Choose two.)
A. 21 E. 587
A network technician is installing a new wireless network in a small office. Due to environmental concerns, the customer wants the network to run exclusively on the 5GHz frequency. Which of the following wireless technologies should the technician install to BEST meet this requirement? (Choose two.)
A. 802.11ac D. 802.11n
Which of the following properties should be configured to extend logical network separation on an uplink interface to a second switch?
A. 802.1Q trunking
The network support team is responsible for managing connections in a large, multipurpose venue where maintaining physical security is difficult. Implementing which of the following standards would BEST help to prevent unauthorized connections to the wired network?
A. 802.1X
A network technician is troubleshooting a connectivity issue with Joe, a user. Joe has reported that when he attempts to RDP to machine1 (192.168.21.21) by name, he is connected to machine3 (192.168.21.23). When the network technician runs the command nslookup machine1, it returns the IP address192.168.21.23; but when the ping ג€"a 192.168.21.23 command is run, the results return the hostname machine3. Which of the following DNS records should be updated to allow RDP connections to machine1 by hostname?
A. A
A network technician is reading a network diagram and looking for the edge router. Which of the following is MOST likely the symbol used for the router?
A. A circle with four outward arrows
A technician must install and configure a network device in a building with 20 classrooms. Each room must be on a separate subnet and should not be able to see traffic from other subnets. Which of the following is the MOST cost-effective solution?
A. A switch with VLANs created for each segment
A technician is utilizing SNMPv3 to monitor network statistics. Which of the following actions would occur immediately of a serverג€™s utilization spikes above the prescribed value?
A. A trap message is sent via UDP to the monitoring workstation.
A companyג€™s web-based application has a database that is set up for high availability in case of a failure. Which of the following is necessary to achieve this type of setup?
A. A virtual IP pointing to the active DB
A network technician is implementing a new IPv6 addressing scheme at a local office. This is a large office, and the network manager would like a solution that saves time and allows for automatic addressing of nodes. Which of the following would BEST accomplish this?
A. APIPA
The lack of which of the following components might make a virtual router less efficient than a physical router?
A. ASIC
Which of the following may state: ג€Employees may not browse social media websites from company-owned computers?ג€
A. AUP
A document outlining the types of actions allowed on the corporate network would be BEST defined as an:
A. AUP.
Which of the following is a purpose of a syslog server?
A. Aggregates switch logs for easier review and correlation
Ann, a customer, recently upgraded her SOHO Internet to gigabit fiber from cable. She was previously getting speeds around 75Mbps down and 25Mbps up. After the upgrade, Ann runs a speed test on her desktop and gets results of 1000Mbps down and 100Mbps up. A technician connects directly to the router and sees the correct 1000Mbps speeds. Which of the following is MOST likely the cause? (Choose two.)
A. All ports should be configured for full duplex. C. The connections are using Cat 5 cable.
Which of the following BEST describe the differences between an IDS and an IPS? (Choose two.)
A. An IDS will detect traffic anomalies and a predefined signature pattern, alert and log them, and allow them through the network. F. An IPS will detect traffic anomalies and a predefined signature pattern, alert and log them, and block the traffic.
A user wants to secure a network closet and be able to tell if anyone makes changes in the closet. Which of the following would be the BEST detective physical security devices in this situation? (Choose two.)
A. Anti-tampering F. Video surveillance
Which of the following additional capabilities does a next generation firewall provide beyond a standard network firewall? (Choose two.)
A. Application control B. User identification
Ann, a network technician, has relocated a rack that contains the networking and server equipment from the third floor to the sixth floor. To connect the rack- mounted router to the media converter in the first-floor MDF, she extended the length of the original 197ft (60m) Cat5e cable to 395ft (120m) by attaching another197ft (60m) cable with an RJ45 coupler. After the move, users report intermittent connectivity to external websites, although connectivity to internal hosts has not changed. Which of the following is a network performance issue that is MOST likely causing this issue?
A. Attenuation
While reviewing switch logs, a network analyst notices many failed logon attempts followed by a successful logon from an unknown IP address. Which of the following hardening techniques should be utilized to prevent unauthorized access?
A. Avoiding common passwords
Which of the following BEST describes the characteristics of a differential backup solution?
A. Backs up files with the creation or modified date as the current date.
A new employee is unable to access any network resources. All other users are able to access the network at 100Mbps. No IP address, subnet mask, or default gateway is displayed on the new employee's workstation. The network administrator reterminates all connectors using the correct standard. Upon further investigation, the network administrator also notices the following: Wire map results from the user patch cable to the patch cable connecting to the switch: ✑ Pins 5 and 7 are short. ✑ The distance is 200ft (61m).Additional observations on the switch: ✑ The VLAN is set correctly. ✑ The port is not disabled. ✑ The duplex/speed settings are correct. ✑ Port LEDs are off for that port. ✑ The port is set to untagged. Which of the following is the MOST likely reason the new employee is having network issues?
A. Bad switchport
A network technician is running copper cable from a core switch to a network closet that is approximately 574ft (175m) away. Which of the following should the technician use to accomplish this?
A. Bridge
Which of the following DNS record types is an alias?
A. CNAME
Which of the following are DNS record types? (Choose three.)
A. CNAME C. PTR G. SRV
Which of the following will listen on the line to ensure there is no traffic transmitting and implement a back-off timer if a collision occurs?
A. CSMA/CD
A home user is unable to get to the Internet from a workstation that is connected to a wireless network. When reviewing the results of the ipconfig command, the user wants to verity the default gateway is correct. Which of the following devices should be the gateway?
A. Cable modem
A network extension needs to be run to a location 500ft (152m) from the nearest switch. Which of the following solutions would work BEST? (Choose two.)
A. Cat 6 with a repeater placed in the middle of the run D. Fiber-optic cabling
A technician needs to connect two routers using copper cables. Which of the following cables would utilize both the TIA/EIA 568a and TIA/EIA 568b standards?
A. Cat5 crossover
An administrator wants to implement an additional authentication factor to the remote SSH servers. Which of the following accomplishes this goal with the principle of ג€something you haveג€?
A. Certificate
A network technician is installing and configuring a new router for the sales department. Once the task is complete, which of the following needs to be done to record the change the technician is making to the company network?
A. Change management
A network administrator notices that network utilization is extremely high around midnight and wonders if this is normal or if there might be a security issue. Which of the following types of documentation should the administrator consult FIRST?
A. Change management documentation
A technician is investigating the cause of a network outage. Which of the following documents should be checked to rule out configuration issues?
A. Change management records
Which of the following steps is a network technician MOST likely to take to secure a new network printer? (Choose two.)
A. Change the default credentials. B. Disable unnecessary services.
A network technician is setting up the wireless network for a companyג€™s new branch office. After doing a site survey, the technician discovers there is a lot of interference from 2.4GHz devices at the location on channel 11. Which of the following would be the BEST channel on which to set up the WAPs?
A. Channel 6
A web application is unable to authenticate customers so they can access their bills. The server administrator has tested the LDAP query but is not receiving results. Which of the following is the NEXT step the server administrator should take to correct the problem?
A. Check port 636 to see if it is being blocked.
A technician installed a new fiber optic cable to connect two sites. Although there is a link light on the port at each site, the customer reports traffic is dropping intermittently. Which of the following should the technician do NEXT to troubleshoot the issue?
A. Check the interfaces for CRC errors.
Multiple users are experiencing slow performance when downloading large files from a specific site. Which of the following should the technician do to check the connection to the external site?
A. Check the latency by running a continuous ping to the site.
Management has requested that services be available within 72 hours of a disaster. Budget is a major concern. A contract is signed with a company that has plenty of space, and the technician will have the option of putting infrastructure equipment in place. Which of the following BEST describes this business continuity strategy?
A. Cold site
Which of the following are characteristics of jumbo frames? (Choose two.)
A. Commonly used on SAN B. MTU size greater than 1500
A developer has asked a network engineer for a small network segment of five computers connected via a Layer 1 device, configured in a star topology, and segregated from the corporate network. Which of the following would BEST fulfill the developerג€™s request?
A. Connect the five PCs to a hub that is not connected to the corporate network.
A technician is troubleshooting a workstationג€™s network connectivity and wants to confirm which switchport corresponds to the wall jack the PC is using. Which of the following concepts would BEST help the technician?
A. Consistent labeling
A network manager is concerned about visitors taking advantage of open cubicies at a companyג€™s facilities. Which of the following would mitigate this issue?
A. Create a VLAN for all unused switchports.
A network administrator is redesigning network security after an attack. During the attack, an attacker used open cubicle locations to attach devices to the network. The administrator wants to be able to monitor future attacks in a safe environment and determine the method of attack. Which of the following should the administrator do to BEST meet this requirement?
A. Create a VLAN for the unused ports and create a honeyspot on the VLAN.
A technician has installed multiple new PC clients and is connecting them to the network. Only one client is receiving IP addressing information. Which of the following should the technician verify as the NEXT troubleshooting step?
A. DHCP scope
After rebooting a PC, a user is no longer able to connect to the corporate network. As a test, the technician plugs a different laptop into the same network jack and receives an IP address of 169.254.112.137. Which of the following is MOST likely causing the issue?
A. DHCP scope exhaustion
Employees at a company report that they are unable to access the Internet. A network technician notices the workstations are receiving IP addresses that do not follow the IP addressing scheme of the corporate network. Upon further inspection, the technician finds an employee has plugged a rogue wireless router into the corporate network. Which of the following settings would have prevented this situation?
A. DHCP snooping
A network analyst is providing access to an FTP server that stores files that are needed by external contractors who are working on a project. In which of the following network locations should the FTP server be placed to achieve the MOST secure environment?
A. DMZ network
Under which of the following layers of the OSI model do ATM cells operate?
A. Data link
A technician discovered a company computer had a virus but was unable to remove it. The technician decided to erase the hard drive to eliminate the threat.Which of the following policies did the technician violate?
A. Data loss prevention
A network technician is setting up a new router. Since it is exposed to the public, which of the following are the BEST steps the technician should take when setting up this device? (Choose two.)
A. Disable unnecessary services. F. Upgrade to the latest firmware.
Log files show the admin user has logged into a public-facing device on several occasions in the evening. None of the technicians admit to doing any after-hours work, and the password has been changed several times but failed to prevent the logins. Which of the following should be the NEXT step to attempt to harden the device?
A. Disable unused ports.
A network topology requires a switch to be placed in an unsecured location. Which of the following techniques should be used to prevent unauthorized access?(Choose two.)
A. Disabling unused ports E. MAC filtering
A technician wants to deploy a network that will require wireless client devices to prompt for a username and password before granting access to the wireless network. Which of the following must be configured to implement this solution?
A. EAP-PEAP
A department is reporting network issues. Users can ping each other and the switch, but not the default gateway. When looking at a wiring diagram and a physical blueprint, a technician notices the 1000BaseLX SFP connects to a distribution switch via a cable that runs behind a large industrial refrigerator. The technician also notices both switches have been worked on recently. Which of the following is MOST likely the issue?
A. EMI
A junior network technician receives a help desk ticket from an end user who is having trouble accessing a web application that was working the previous day.After talking with the end user and gathering information about the issue, which of the following would be the most likely course of action for the technician to perform NEXT?
A. Establish a theory of probable cause.
A network technician arrives at a remote office and is unable to connect a laptop to corporate resources using the wireless network. After checking the IP address, the network technician notices the assigned IP address does not belong to the corporate network IP scheme. Which of the following has the network technician discovered?
A. Evil twin
A company hires some temporary workers. On day one, the temporary employees report they are unable to connect to the network. A network technician uses a packet analysis tool and finds that many clients are continuously sending out requests for an IP address, but many of them are not receiving a response. Which of the following could be the cause of this issue?
A. Exhausted DHCP scope
Which of the following would allow a network technician to access files on a remote system? (Choose two.)
A. FTP B. TFTP
A network technician downloaded new firmware for the company firewall. Which of the following should the network technician verify to ensure the downloaded file is correct and complete?
A. File hash
A network technician is coordinating the upgrade of the companyג€™s WAP firmware with all the remote locations. The company has occasionally experienced errors when transferring large files to some of the remote offices. Which of the following should be used to ensure files arrive without modifications?
A. File hash
A company has two geographically separate locations that need to connect using a VPN. Which of the following devices must be specifically configured to allowVPN traffic into the network?
A. Firewall
A network engineer at a multinational company is asked to purchase mobile phones for senior executives who often travel internationally. The executives want their phones to work with wireless carriers in multiple countries when they travel. Which of the following cellular standards should these new phones support?
A. GSM
A network technician receives a trouble ticket and speaks to the user who is experiencing the issues with the application. Which of the following should the technician perform NEXT?
A. Gather information.
A network technician is performing an initial configuration of a new network switch. Per company policy, the only authorized manner for remotely administering the switch is through a command line. Which of the following protocols should the technician disable to adhere to the company policy?
A. HTTP
A corporation has been the target of hackers who exploited TCP port 80. The network administrator is tasked with securing connections to the web server. Which of the following protocols should be implemented to BEST secure the web server? (Choose two.)
A. HTTPS C. TLS
A network technician is creating a diagram of network termination points in the building. The technician diagrammed the core network room and now needs to diagram the auxiliary network closets. Which of the following is the technician MOST likely going to add to the diagram?
A. IDF
A technician is surveying a collegeג€™s network equipment rooms and connectivity. Which of the following types of documentation does the technician need to perform a detailed site survey? (Choose three.)
A. IDF/MDF documentation. C. Network configuration documentation. G. Rack diagram documentation.
A security manager asks a technician to install a network device that will provide information about attacks against the network but will not stop them. Which of the following devices is MOST suited for this task?
A. IDS
Which of the following protocols are used to configure an email client to receive email? (Choose two.)
A. IMAP C. POP
A technician is establishing connectivity through a VPN for remote server access. Which of the following protocols should be utilized to configure this VPN connection securely?
A. IPSec
A company deploys many workers in the field who remotely access files from a server at headquarters. Leadership is concerned about the risks posed when field workers update these files from unsecured networks. Which of the following policy changes can the company make to MOST improve the confidentiality of connections when connecting remotely? (Choose two.)
A. Implement SSL VPN connections from the remote devices to headquarters. C. Utilize HTTPS to access the company intranet from remote devices.
A network administrator is reviewing security logs and notes a strange IP address logging into the management console of a switch. The administrator verifies the switch is not using default credentials. Which of the following steps should the administrator take NEXT?
A. Implement restrictions via ACL.
A network engineer utilizes a box of Cat5e cable in a datacenter for use between 10Gbps switches in a single rack. After the engineer finishes the installation, switch administrators notice random speed drops and intermittent connection issues. Which of the following is this an example of?
A. Incorrect cable type
A technician set up a new SOHO network recently. The installed router has four Ethernet ports, however, the customer has seven devices that need wired connections. Which of the following should the technician do to BEST meet the customerג€™s requirements?
A. Install a six-port switch.
A network engineer is adding a switch uplink to an existing IDF. Upon inspection, the engineer finds that there are only two strands of single-mode fiber in the IDF, and both strands are in use. Which of the following solutions should the engineer use to provide an additional switch uplink without installing new fiber optic cabling?
A. Install bidirectional transceivers.
Wireless users have been experiencing connectivity problems. Investigation shows neighboring wireless appliances, which are not connected to the network, have been on the same 5GHz frequency to communicate. Which of the following wireless performance problem concepts defines this issue?
A. Interference
A corporate manager says wireless phones do not work properly inside the main building. After a troubleshooting process, the network administrator detects that the voice packets are arriving on the wireless phones with different delay times. Which of the following performance issues is the company facing?
A. Jitter
Which of the following allow for higher fault tolerance, availability, and performance across multiple systems? (Choose two.)
A. Load balancer C. Clustering
A network administrator has created a new VLAN for the server and clients within the accounting department and wants to outline how it integrates with the existing network. Which of the following should the administrator create?
A. Logical diagram
While logged into a financial application, a user gets errors when trying to write to the database. The network administrator is not familiar with the application and how it communicates with the database. Which of the following documentation types should the network administrator use to troubleshoot the data flow?
A. Logical diagram
Which of the following provides information about how often some devices fail so the IT department can take proactive measures?
A. MTBF
A network team at a large company has received funding for a WiFi refresh. One of the requirements in the RFP is the new WLAN infrastructure must provide APs that support multiple streams of information at the same time. For which of the following WiFi features is the network team looking?
A. MU-MIMO
A technician is configuring a new email server and needs to modify DNS records. Which of the following records should the technician update to ensure email functions as expected?
A. MX
A technician is installing six PCs and six VoIP telephones on a small office LAN. The VoIP telephones require QoS to be configured for proper operation. The customer router does not have QoS capability. Which of the following network devices should the technician purchase and install at this office?
A. Managed PoE switch
Which of the following network topologies typically has all devices on a network directly connected to every other network device?
A. Mesh
Which of the following types of packets uses the 224.0.0.0/3 address space by routers to exchange routing information?
A. Multicast
Which of the following should a network administrator use to configure Layer 3 routes? (Choose two.)
A. Multilayer switch B. Firewall
A network technician notices that most of the nodes in the 10.10.74.0/23 address space return either 1 or 2 node hop after running a tracert; however, some of the new servers are showing a hop count larger than 10. Which of the following is the MOST likely reason for this?
A. New servers are being provisioned in the cloud.
Which of the following policies would be the MOST useful for defining the proper procedures when an employee is terminated abruptly?
A. Offboarding
A technician has a remote site that often has congestion issues. When this happens, the remote router cannot be managed using SSH because the session drops. Which of the following is a possible solution to the issue?
A. Out-of-band management
A home user has contacted the help desk to transfer files from an old smartphone to a new one. The help desk analyst informs the home user this can be completed using Bluetooth. Which of the following types of topologies is this called?
A. PAN
A VoIP system will require 23 concurrent voice channels and one signaling channel. Which of the following types of WAN service would provide the BEST connectivity to the PSTN?
A. PRI
A technician has been asked to diagnose problems with DHCP addressing on a VLAN. The DHCP server responds to pings from the technicianג€™s machine. Which of the following should the technician use to help diagnose the problem?
A. Packet sniffer
A network technician needs to install new network cables. The technician will be running the cables in the air return space above the drop ceiling. Which of the following cable types should be installed?
A. Plenum
A vendor is installing an Ethernet network in a new hospital wing. The cabling is primarily run above the celling grid near air conditioning ducts and sprinkler pipes.Which of the following cable types is required for this installation?
A. Plenum
A network administrator is creating a new WLAN that should only be used by legacy devices that do not support a secure method of authentication. Which of the following should be configured to provide connectivity and minimal security to the new network? (Choose two.)
A. Pre-shared key D. MAC filtering
To achieve a more efficient and secure work environment, a company needs a way to control what is being accessed on the Internet using corporate resources.Which of the following devices should be used to accomplish this task? (Choose two.)
A. Proxy server D. Content filter
A network technician discovers there is no connectivity on a T1 line even though the cable connection appears to be in place. The router shows there is no active connection on the port. The issue is occurring between the demarcation point and the router port. The router cable tests fine and is terminated at the demarcation panel. Which of the following tools should be used to fix the issue?
A. Punchdown tool
A user in the marketing department reports the email server is down. The user has not received email for more than 24 hours. Which of the following should the network technician do to investigate this issue?
A. Question other users in the marketing department to see if they are also having connectivity issues.
An AP is configured to authenticate clients by using their Active Directory username and password. The AP uses UDP to connect to the authentication service, which then queries Active Directory. Which of the following authentication services is being used by the AP in this scenario?
A. RADIUS
A network administrator needs to access a remote site and log into the site switch using secure methods. The administrator first has to gain access to the serverGUI. Which of the following access control methods will be used?
A. RDP
A remote user is required to upload weekly reports to a server at the main office. Both the remote user and the server are using a Windows-based OS. Which of the following represents the BEST method for the remote user to connect to the server?
A. RDP
A new DSL circuit was installed to replace the cable service and is not functioning. A network administrator needs to create a cable to connect the circuit. Which of the following connector types should the network administrator use on the cable?
A. RJ11
Which of the following types of attacks is characterized by encrypting data and locking out a user from access to certain data within a workstation?
A. Ransomware
A network support specialist is setting up wireless networks for several small companies that are leasing adjacent spaces in an office building. The network support specialist has already configured an access point for each office with WPA2-AES encryption and minimized any overlap of the wireless channels. Several of the companies have expressed concerns about performance and security issues due to the high volume of wireless networks being installed in close proximity.Which of the following actions will BEST mitigate the companiesג€™ concerns?
A. Reduce the TX power on each access point.
A network engineer has connected the storefront with the maintenance shed on the other side of a golf course using 802.11 wireless bridges and omnidirectional antennas. However, the signal strength is too weak. Which of the following is the MOST efficient and cost-effective solution to solve the issue?
A. Replace the omnidirectional antennas with unidirectional antennas.
Users have been experiencing connection timeout issues when using a web-based program. The network technician determines the problem happened due to aTTL setting that was set too low on the firewall. Which of the following BEST enabled the network technician to reach this conclusion?
A. Reviewing application logs
A user does not have access to network services but has Internet access. The technician notices the computer has an IP address of 192.168.1.144 when the network is 10.10.10.0. Which of the following is MOST likely the issue?
A. Rogue DHCP server
A technician wants to configure a SOHO network to use a specific public DNS server. Which of the following network components should the technician configure to point all clients on a network to a new DNS server?
A. Router
Which of the following network topologies is primarily used to connect servers to large network disk arrays?
A. SAN
A network technician is reviewing the company phone system to make the necessary changes to a firewall configuration. Which of the following protocols are used in VoIP communication? (Choose two.)
A. SIP C. H.323
A network technician has provisioned a new Linux instance in a public cloud providerג€™s IaaS environment. The technician did not install a graphical user interface.The technician wants to connect to the serverג€™s public IP address securely to start a console session. Which of the following remote access methods should the technician use?
A. SSH
A new technician has been tasked with checking the status of a switchport. The technician needs to find the information quickly without the use of command-line utilities. Which of the following remote management methods would help the technician?
A. SSH
A network technician needs a secure way to access a router in another country. Which of the following methods would meet this requirement?
A. SSH connection
Which of the following is the MOST secure type of remote administration?
A. SSH over IPsec client-to-site VPN
A network technician has been asked to create secure private networks between a companyג€™s headquarters and several branch locations. The company has provided the on-premises equipment, but each branch has a different ISP. Which of the following technologies should the technician consider using to accomplish this?
A. Site-to-site
When configuring a new switch in a packet-switched network, which of the following helps protect against network loops?
A. Spanning tree
A technician is troubleshooting intermittent connectivity on a line-of-sight wireless bridge. Which of the following tools should the technician use to determine the cause of the packet loss?
A. Spectrum analyzer
A technician is performing a maintenance task on a weekly basis and wants to ensure the task is properly documented and able to be performed by other technicians. Which of the following types of documentation should the technician complete?
A. Standard operating procedure
Which of the following is a network device that is responsible for separating collision domains?
A. Switch
Which of the following devices are MOST often responsible for 802.1q tagging? (Choose two.)
A. Switch B. Router
Joe, a network technician, has received a report that one of his clients is experiencing an issue connecting to the network. Joe observes two clients are connected to a hub, which is connected to separate wall jacks. Which of the following has MOST likely occurred?
A. Switching loop
Which of the following can a network administrator use to access a network switch using standard AAA configurations?
A. TACACS+
Which of the following protocols operates at Layer 4 of the OSI model?
A. TCP
Which of the following protocols are classified as connectionless? (Choose two.)
A. TFTP D. SNMP
A switch vendor recently released a patch to fix a critical vulnerability found in its switch OS. Which of the following should a network administrator do NEXT according to best practices?
A. Test the patch in a test environment.
A home user has purchased a new smart TV to stream online video services. The smart TV is unable to connect to the wireless network after several attempts.After returning from vacation, the home user tries again and can connect the TV to the wireless network. However, the user notices a laptop is no longer able to connect to the network. Which of the following is the MOST likely cause?
A. The DHCP scope has been exhausted.
Which of the following statements about the OSI model is true?
A. The application layer does not need to know what type of network is being used because that is dealt with by a layer below it.
A network technician has salvaged several Ethernet cables from a datacenter. The technician attempts to use the cables to connect desktops to the network without success. Which of the following is MOST likely the issue?
A. The cables have an incorrect pin-out.
A network technician is installing a new PTZ camera for the security department. The camera is capable of being powered via the Ethernet cable, but it is not powering on. The network technician has tested the cable and received positive results. Which of the following is MOST likely the issue?
A. The camera requires PoE+, but the switch is delivering only PoE.
Joe, a technician, was able to copy data at a site with no network equipment between two new laptops, featuring gigabit Ethernet ports, by using a regular straight- through patch cable. Joe then unsuccessfully tried to accomplish the same thing at a different site from his laptop with a gigabit Ethernet port to an older customer unit, which had a 10/100 network port. Which of the following is the cause of this?
A. The customer's laptop does not support auto-MDIX.
A company is expanding and building a new remote branch office. Marketing will need 78 IP addresses, finance will need 150 IP addresses, legal will need 39 IP addresses, and R&D will need 12 IP addresses. The network administrator gives the technician a network of 172.16.48.0/23 and wants the technician to useVLSM for the design. Which of the following are possible solutions? (Choose three.)
A. The marketing department should receive a /25 network. B. The R&D department should have 172.16.49.207 as a broadcast address. G. The legal department should have usable IPs ranging from 172.16.49.129 to 172.16.49.190.
A technician is replacing a failed SOHO router for a customer who has an existing switch, cable modem, and static IP address. The user has a web server that faces the Internet so users can visit and leave comments. Which of the following BEST describes the correct configuration for this customerג€™s requirements?
A. The modem is placed in bridge mode, the router is placed behind the modem, and the web server is placed behind the router.
A technician has deployed an additional DHCP server for redundancy. Clients in certain subnets are not receiving DHCP leases from the new DHCP server.Which of the following is the MOST likely cause?
A. The new DHCP serverג€™s IP address was not added to the routerג€™s IP helper list.
Joe, a user, is having issues when trying to access certain web pages. Upon navigating to a web page, it seems like it connects, but then presents the following message:The security certificate presented by this website was not trusted by a trusted certificate authority.Joe has cleared his cache and cookies, rebooted his machine, and attempted to browse to the website from a coworkerג€™s desktop, but it still presented with this error.Which of the following is the MOST likely cause of this error?
A. The web server is missing an intermediate certificate.
Which of the following are reasons for enabling jumbo frames? (Choose two.)
A. To increase payload size B. To increase bandwidth
A technician arrives at a new building to find cabling has been run and terminated, but only the wall ports have been labeled. Which of the following tools should be utilized to BEST facilitate labeling the patch panel?
A. Tone generator
Ann, a user, reports that her desktop phone is not working on one cable. However, that cable provides connectivity to her laptop. A technician determines PoE is not provided to the end device. Which of the following is MOST likely the cause?
A. Transceiver mismatch
A network technician is configuring network addresses and port numbers for a router ACL to block a peer-to-peer application. Which of the following is theHIGHEST layer of the OSI model at which this router ACL operates?
A. Transport
Which of the following should a network administrator deploy to control all preventive security measures?
A. UTM
A network engineer wants to implement a technology that allows for an all-in-one approach to incoming and outgoing traffic from the Internet. This device should be able to filter content and scan for malicious information in each packet. Which of the following types of devices would be necessary?
A. UTM appliance
Which of the following would MOST likely provide continuous power during a short brownout?
A. Uninterruptible power supply
A technician is setting up a wireless access point in a coffee shop. The shop is not concerned with security but only wants to allow customers to have access.Which of the following configurations should the technician deploy?
A. Use a pre-shared key.
A network technician is segmenting network traffic into various broadcast domains. Which of the following should the network technician utilize?
A. VLAN
A network technician needs to create separate networks for several classrooms and administrative offices. They have been provided with the network address192.168.1.0/24. They will need five classrooms of 25 hosts, two classrooms of 14 hosts, six admin hosts on the network, and three subnets for router connections.Which of the following IP concepts would need to be deployed?
A. VLSM
A user is connected to the guest wireless network for a video conference with colleagues. The userג€™s computer shows a strong wireless signal, and websites seem to load without issue, but the voice and video have periods of choppiness. Which of the following would BEST identify the issue?
A. Verify the wireless capacity is not exceeded.
Which of the following components can be used to manage network traffic to all nodes in a hypervisor?
A. Virtual switch
Which of the following technologies is used to attach multiple guest operating systems to a single physical network port?
A. Virtual switch
A small business utilizes a SOHO router and wishes to secure its existing wireless infrastructure. The business has fewer than ten devices, which are a mixture of old and new machines. Due to the varying ages of the machines, the latest wireless encryption methods may not be supported on all devices. Which of the following would be the MOST cost-effective method to add a layer of security while allowing all machines to connect?
A. WPA2
When trying to determine why users are unable to access a web-based application that was working the previous day, which of the following should be the FIRST question to ask to determine the scope of the issue?
A. What has been changed on the web server since the previous day?
A network technician has installed multiple new lightweight access points across the network. Which of the following devices should the technician use to manage the new access points?
A. Wireless controller
Due to an increase in wireless demand, 50 additional access points were installed as part of an expansion project. Each device was configured and managed separately, working with its own configuration. Which of the following network devices would assist the network team with reducing complexity and enforcing policies on the WLAN?
A. Wireless controller
While working on a Linux-based OS, a technician experiences an issue accessing some servers and some sites by name. Which of the following command-line tools should the technician use to assist in troubleshooting?
A. dig
After several changes to the network, a technician needs to ensure a client is checking for new hostname and IP pairings. Which of the following commands should the technician use to force new lookups?
A. ipconfig /flushdns
A network technician recently installed a new server on a network. The technician must ensure the server does not have any unnecessary services running. TheIP address of the server is 204.211.38.50. Which of the following commands would allow the technician to make this determination?
A. nmap
A network technician is assisting a user who is experiencing connectivity problems with the VPN. The technician has confirmed the VPN is functioning and other users at the site cannot access the Internet. Which of the following commands would MOST likely be used to further troubleshoot?
A. tracert
A technician is troubleshooting network connectivity issues with a remote host. Which of the following tools would BEST inform the technician of nodes between the client and the remote host? (Choose two.)
A. tracert D. pathping
Which of the following protocols do MOST MITM attacks utilize?
ARP
A disgruntled employee executes a man-in-the-middle attack on the company network. Layer 2 traffic destined for the gateway is redirected to the employees computer. This type of attack is an example of:
ARP cache poisoning
Employees want the ability to use personal devices on the guest network while working out at the company gym. In order to meet the request, which of the following policies requires employee adherence?
AUP
To replace a defective UPS, the network administrator must take the switch offline. The administrator wants to be able to perform maintenance UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?
Add a redundant power supply to the switch
A network administrator wants to increase the confidentiality of the system by hardening the authentication process. Currently, the users log in using usernames and passwords to access the system. Which of the following will increase the authentication factor to three?
Adding a fingerprint reader to each workstation and providing a RSA authentication token
A network engineer is designing a new IDF in an old building. The engineer determines the equipment will fit in a two-post rack, and there is power available for this equipment. Which of the following would be the FIRST issue to remediate?
Air flow and cooling
A customer cannot access a companys secure website. The companys network security is reviewing the firewall for the server and finds the following output: Which of the following changes should be made to allow all customers to access the companys secure website?
Allow 10.5.0.10 443 any any
A network technician configures a firewalls ACL to allow outgoing traffic for several popular services such as email and web browsing. However, after the firewalls deployment, users are still unable to retrieve their emails. Which of the following would BEST resolve this issue?
Allow the firewall to accept inbound traffic to ports 80, 110, 143, and 443
Devices on a network will need to obtain DHCP leases from a server on a different network. Which of the following must the engineer implement for DHCP to forward requests to the designated server?
An IP helper
Which of the following would an organization MOST likely have employees sign before granting access to confidential data?
An NDA
Which of the following BEST describes a VLAN hopping attack?
An attacker gains unauthorized access to a network by using double-tagged packets.
A network technician is investigating an issue with handheld devices in a warehouse. Devices have not been connecting to the nearest APs, but they have been connecting to an AP on the far side of the warehouse. Which of the following is the MOST likely cause of this issue?
An incorrect channel assignment is on the nearest APs.
A company finds that many desktops are being reported as missing or lost. Which of the following would BEST assist in recovering these devices?
Asset tracking tags
A network technician has been asked to provide daily reports on network saturation. Which of the following would BEST reflect these statistics?
Average bandwidth usage
A network administrator has configured the network on each floor of a four-story building to have the following different subnets: 10.0.10.0/24, 127.0.0.0/24,172.16.0.0/24, and 192.168.255.0/24. After implementing these networks, the administrator realizes there has been a mistake. Which of the following BEST describes the mistake?
B. 127.0.0.0/24 is the reserved loopback network and cannot be used for host networks.
Which of the following default ports should be opened on a firewall to allow for SSH and Telnet? (Choose two.)
B. 22 C. 23
Which of the following ports are used for electronic mail protocols? (Choose three.)
B. 25 C. 110 E. 143
A host has an IP address of 172.28.57.144 and is on the 172.28.57.128 subnet. Which of the following is a correct subnet mask of the host?
B. 255.255.255.192
Which of the following is created on a 48-port switch with five active VLANs?
B. 48 collision domains, five broadcast domains
A network technician is working on a new wireless project. The network manager has a primary requirement of achieving speeds of at least 1 Gbps when connected. Which of the following standards would be appropriate for the technician to implement?
B. 802.11ac
A network manager is drafting a document that outlines what employees can and cannot do when using personal tablets that are connected to the network. Which of the following is the manager drafting?
B. A BYOD policy
A network device compares a computed value of its major software components against a stored value. While the network device is loading, the device halts and alerts the administrator that the values are different. Which of the following is the name of the value in use, and what does this process provide? (Choose two.)
B. A hash F. Provides integrity
Two computers are connected to a multilayer switch, and both can access the corporate file server. The computers cannot talk to one another. Which of the following is MOST likely the cause?
B. ACL misconfiguration
An attacker has flooded the hardware tables of a switch to forward traffic to the attackerג€™s IP address rather than the default router. The traffic received is copied in real time, and then forwarded to the default router transparently from the end-user perspective. Which of the following attacks are occurring in this scenario?(Choose two.)
B. ARP poisoning C. Man-in-the-middle
A network technician needs to configure a device with an embedded OS so it can be connected to a wireless handheld scanner. Which of the following technologies should be configured on the OS to create the wireless connection?
B. Ad hoc
Joe, an employee at a large regional bank, wants to receive company email on his personal smartphone and tablet. To authenticate on the mail server, he must first install a custom security application on those mobile devices. Which of the following policies would BEST enforce this requirement?
B. BYOD policy
A network technician receives a request for a disaster recovery solution. Management has requested no downtime in the event of a disaster. Which of the following disaster recovery solutions is the appropriate choice?
B. Business continuity
A company has a DNS record for the following address: products.companyXYZ.com. The company would like to add another record, sales.companyXYZ.com, which continually points to the same IP address as products.companyXYZ.com. Which of the following DNS record types would BEST accomplish this?
B. CNAME
A network manager notices several outages have occurred due to modifications that were made without being properly tested. Which of the following will the network manager MOST likely implement to prevent future occurrences?
B. Change management
First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?
B. Change management documentation
A company needs a secure way to provide building blueprints to an engineering partner frequently. The Chief Information Officer (CIO) states that a secure protocol must be used for transfer, and the partner needs to initiate a secure connection to the company's router. Which of the following would BEST meet the requirements? (Choose two.)
B. Client-to-site VPN E. SFTP
A network engineer at a large company is restricting Internet browsing on the corporate WAN to only business-related external websites. Which of the following is the BEST solution to achieve this goal while avoiding the need to configure this restriction on each PC?
B. Content filter
The network team at a university, which has on-campus residences, recently expanded the WiFi offerings to the dormitories. Each dormitory houses approximately 75 students, who each have multiple wireless devices. The WLAN utilizes an intelligent wireless controller for configuration and management. While the WiFi in academic buildings continues to receive few to no complaints, dormitory complaints are on the rise. Which of the following is MOST likely causing the complaints?
B. Crosstalk
A user claims to have no Internet access but can access local resources. A technician determines the issue is with a configuration because a ping to a working public website shows a response that starts with:Ping request could not find hostWhich of the following is the MOST likely misconfiguration?
B. DNS
A network technician is configuring user access to a VPN concentrator and has been advised to use a protocol that supports encryption over UDP. Which of the following protocols has the technician MOST likely configured for client use?
B. DTLS
An ARP request is broadcasted and sends the following request:"Who is 192.168.1.200? Tell 192.168.1.55"At which of the following layers of the OSI model does this request operate?
B. Data link
Which of the following OSI layers contains the LLC function?
B. Data link
Which of the following operate only within the UDP protocol?
B. Datagrams
Which of the following should a technician investigate when using a network baseline to troubleshoot?
B. Determining if the server performance is degraded.
A technician has installed an older IP camera as a temporary replacement for a recently failed newer one. The technician notices that when the cameraג€™s video stream is off, the ping roundtrip time between the camera and the network DVR is consistently less than 1ms without dropped packets. When the camera video stream is turned on, the ping roundtrip time increases dramatically, and network communication is slow and inconsistent. Which of the following is MOST likely the issue in this scenario?
B. Duplex mismatch
According to the troubleshooting methodology, which of the following steps will help a technician gather information about a network problem? (Choose two.)
B. Duplicate the problem D. Question users
A network administrator has deployed a secure wireless network that authenticates using Active Directory network credentials so individual users are uniquely identified when connected to the WLAN. Which of the following wireless technologies has the administrator configured?
B. EAP-PEAP
A network technician is installing a new wireless network for a client. The client has experienced issues with other building tenants connecting to the wireless network and utilizing the bandwidth. The client wants to prevent this from happening by using certificate-based authentication. Which of the following technologies should the network administrator implement?
B. EAP-TLS
A technician needs to upgrade a SOHO wireless routerג€™s firmware. The technician resets the router to factory settings and installs the new firmware. The technician enters the DHCP information and sets the SSID. Which of the following configurations would provide the MOST protection from advance hackers?
B. Enable WPA2 authentication for all hosts.
A network technician is troubleshooting a laptop that does not have wireless connectivity. The technician determines the wireless network is functioning as expected. The laptop does not show any SSIDs or allow the technician to modify network settings. Which of the following should the technician check FIRST?
B. Ensure wireless is enabled on the laptop.
A network technician receives reports indicating some users are unable to gain access to any network resources. During troubleshooting, the technician discovers the workstations have an IP address of 169.254.x.x. Which of the following is the MOST likely cause?
B. Exhausted dynamic scope
Which of the following can be used to provide connectivity to a network storage server without the need for dedicated switches and cabling? (Choose two.)
B. FCoE D. iSCSI
A network administrator has been experiencing slow performance and file errors when attempting to utilize server utilities. The administrator needs to ensure the system files on the server have not been modified. Which of the following should be used to ensure the server files have not been compromised?
B. File hash
A network administrator is purchasing a mobile phone for a manager who is traveling internationally. The phone needs to be able to make and receive calls in multiple countries outside of North America. Which of the following cellular technologies should the administrator look for in the phone?
B. GSM
A consulting company was hired to project and deploy a new datacenter in a different city. This new facility must have the same components installed as the current datacenter to be ready to take over all the network services as soon as the primary site becomes unavailable. Which of the following describes what will be deployed in the new location?
B. Hot site
A company runs Linux servers in its own datacenter and also on a popular public cloud service provider. The servers hosted by the cloud provider can only be accessed with proper authorization and are only accessed by the companyג€™s datacenter. Which of the following BEST describes the type of cloud architecture being used? (Choose two.)
B. Hybrid D. IaaS
Which of the following manages the delegation of physical equipment to the virtual components?
B. Hypervisor
A companyג€™s receptionist hands out slips of paper with access codes to visitors each day. A recent internal audit revealed the current method of guest access needs to be improved. Which of the following would improve the security of the guest network?
B. Implement a captive portal.
A network technician sets up a new schedule on the backup server. Management has informed the technician that a full backup does not need to be completed every day. The technician sets up weekly full backups. Which of the following should the technician configure for the remaining days to MINIMIZE the daily backup size?
B. Incremental
Which of the following storage network technologies has the HIGHEST throughput?
B. InfiniBand
A technician is observing brownout issues at a smaller office. At least once a week, the edge switch power cycles. Which of the following should the technician do to resolve the issue?
B. Install a UPS
A network technician needs to monitor the traffic going to a mission-critical server in the datacenter. Which of the following is the BEST method to perform this?
B. Install an inline tap
When speaking with a client, an employee realizes a proposed solution may contain a specific cryptographic technology that is prohibited for non-domestic use.Which of the following documents or regulations should be consulted for confirmation?
B. International export controls
Which of the following describes the function of Layer 3 of the OSI model?
B. It provides connectionless communication using logical addressing.
A network technician notices a router that repeatedly reboots. When contacting technical support, the technician discovers this is a known problem in which an attacker can craft packets and send them to the router through an obsolete protocol port, causing the router to reboot. Which of the following did the network technician fail to do? (Choose two.)
B. Keep patches updated. C. Disable unnecessary services.
A technician recently ran a new cable over fluorescent lighting. Assuming the technician used the appropriate cables, which of the following connectors should be used to terminate it?
B. LC
A technician is setting up VoIP phones on a wireless network. Users report that calls are choppy and sometimes dropped. The technician has measured two characteristics using simple command-line tools that verify the problem. Which of the following characteristics did the technician measure? (Choose two.)
B. Latency D. Packet loss
A network technician receives a switch that is configured to support VLANs on its ports. At which of the following layers is this switch operating?
B. Layer 2
Users report that the network is slow. Upon investigation, the technician notices all users are on one large subnet. Which of the following devices should be used to break up broadcast domains?
B. Layer 3 switch
At which of the following layers of the OSI model would TCP/UDP operate?
B. Layer 4
A network technician is investigating reports of blocked downloads from a firewall. Which of the following should be used to determine which protocols are being blocked?
B. Log review
A network technician is troubleshooting a connectivity issue and determines the cause is related to the VLAN assignment on one of the access switches in the network. After resolving the issue, the network technician decides to update the documentation to refer to the correct VLAN. Which of the following should the technician update?
B. Logical diagram
A network manager has received reports that some employees have been using the companyג€™s WiFi to log onto their social media accounts from their personal devices. The network manager is looking for a solution to prevent this type of activity. The Chief Information Officer (CIO) wants to continue using a pre-shared key and add an additional layer of security to allow only authorized users to authenticate to the WiFi. Which of the following solutions would address this request?(Choose two.)
B. MAC filtering D. 802.1X
A network technician is installing a network printer in a factory setting. The connection from the switch contains an LC connector, yet the printer only supports anRJ45 connector. Which of the following should the technician use?
B. Media converter
An administrator is redesigning a companyג€™s network and wants to reduce the amount of hardware needed. Currently, all VLAN routing goes out a single switch interface to a router.Which of the following would reduce the number of devices in this configuration?
B. Multilayer switch
A technician has replaced a customerג€™s desktop with a known-good model from storage. However, the replacement desktop will not connect to network resources.The technician suspects the desktop has not been kept up to date with security patches. Which of the following is MOST likely in place?
B. NAC
A company is contracting a new third-party organization that will handle storage of the companyג€™s critical data. Which of the following policies would ensure the data remains confidential?
B. NDA
A Chief Information Officer (CIO) tasks the network engineer with protecting the network from outside attacks. Placing which of the following devices on the network perimeter would provide the MOST security for the system?
B. NGFW
Which of the following devices would allow a network administrator to block an application at Layer 7 on the network?
B. NGFW
Which of the following would a company place at the edge of its network if it wants to view and control which Internet applications are being used?
B. NGFW
At which of the following OSI model layers would a router operate?
B. Network
A technician is preparing to dispose of old network devices. Which of the following policies and best practices would outline procedures for removing sensitive information and configurations from surplus equipment?
B. Off-boarding procedures
A company will be hosting a large workshop for local business leaders, and management wants to provide an easy-to-connect-to guest wireless network for them to access while on site. The network will be disabled after the workshop. The current wireless network has the option to enable a segmented guest network that has not been implemented. Which of the following authentication methods should be used to make the network EASIEST for guests to access?
B. Open
During a weekend event, several people reported they were unable to get onto the wireless network. On Monday, the technician could not find a problem. Which of the following is the MOST likely cause?
B. Overcapacity
Which of the following would MOST likely contain information about credential reuse?
B. Password policy
A network technician is planning to update the firmware on a router on the network. The technician has downloaded the file from the vendorג€™s website. Before installing the firmware update, which of the following steps should the technician perform to ensure file integrity?
B. Perform a hash on the file for comparison with the vendorג€™s hash.
Some users are reporting a high response time to access network resources after a new network router was installed. Which of the following documents should be updated every time a change is implemented on the network to have information about the metrics that represents how the network behaves during the normal scenarios?
B. Performance baseline
A network administrator discovered a rogue access point was sending a signal from inside the corporate headquarters. Which of the following would prevent the access point from providing access to the companyג€™s internal network?
B. Placing unused ports in a separate VLAN
A technician is sent to troubleshoot a faulty network connection. The technician tests the cable, and data passes through successfully. No changes were made in the environment, however, when a network device is connected to the switch using the cable, the switchport will not light up. Which of the following should the technician attempt NEXT?
B. Plug in to another port
Which of the following DHCP settings defines the range of dynamic IP addresses?
B. Pool
Which of the following technologies allows network traffic to come into the network on a certain port and go to a destination server with a different port?
B. Port forwarding
Which of the following should be performed to verify that unnecessary services are disabled on all switches in an environment?
B. Port scanning
Which of the following components acts as an intermediary device between the internal users PC and external web servers to provide caching services that save on Internet bandwidth resources?
B. Proxy server
An organization wants to implement a method of centrally managing logins to network services. Which of the following protocols should the organization use to allow for authentication, authorization, and auditing?
B. RADIUS
A technician is required to install a new DOCSIS-based Internet connection. Which of the following medium types does this use?
B. RG-6
A network administrator needs to install a new 6U switch in the third-floor IDF. Which of the following should the administrator consult to make sure space is available?
B. Rack diagram
A network technician is attempting to update firmware on a router but cannot physically locate the router. Which of the following would show where to locate router?
B. Rack diagram
A network technician needs to replace a failed hard drive on a server at the companyג€™s large, remote datacenter. Which of the following types of documentation should be reviewed to locate this server easily?
B. Rack diagrams
A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?
B. Remote access policy
Users in a school lab are reporting slow connections to the servers and the Internet. Other users in the school have no issues. The lab has 25 computers and is connected with a single 1Gb Ethernet connection on Cat 5e wiring to an unmanaged switch. There are also three spare Cat 5e cable runs, which are not in use.The school wants to double the connection speed between the lab and the servers without running new cables. Which of the following would be the BEST solution?
B. Replace the switches with ones that utilize port bonding and use the spare cables.
A technician has been asked to install biometric controls at the entrance of a new datacenter. Which of the following would be appropriate authentication methods to meet this requirement? (Choose two.)
B. Retina scanner G. Fingerprint reader
A network technician works in a large environment with several thousand users. Due to the needs of the organization, the network manager has asked the technician to design a solution that accommodates the data needs of all the users, while keeping all data on site. Which of the following solutions should the technician implement?
B. SAN
Which of the following storage network technologies inherently leverages block-level storage?
B. SAN
A technician wants to have the ability to transfer files from home to the companyג€™s network on a regular basis. Which of the following is a remote access protocol the technician can utilize to bypass interactive user authentication by using a list of known host public keys?
B. SCP
Which of the following protocols is used to transport outgoing mail across networks?
B. SMTP
A junior network technician is working in the field and needs to connect to the companyג€™s remote server, however, doing so will require the junior technician to use the public Internet. Because security is a concern, which of the following is the BEST method to use?
B. SSH
When connecting to a network device through a remote connection for configuration purposes, which of the following protocols is MOST secure?
B. SSH
A company must create a way for partners to access a web portal to update documents for a project. This should be done only via web browser in a transparent way for the users. Which of the following should be used?
B. SSL VPN
Which of the following services describes a distribution model in which applications are hosted by a service provider and made available to users?
B. SaaS
A user has reported an issue with wireless VoIP phones dropping calls during business hours. When working late or in the evenings, the user does not experience call drops. When the network technician investigates the issue, all WAPs have balanced the number of connections evenly and are not dropping off the network.The network technician connects to the wireless network in the userג€™s office and starts a continuous ping to an external server. The results show a drastic and varied response time for each packet. Which of the following is the MOST likely cause of the dropped calls?
B. Signal-to-noise ratio
A manufacturing company has signed an agreement with another company to collaborate on an upcoming project. Both companies require secure and persistent access to resources on each other's networks. Which of the following remote access technologies should the companies implement to satisfy their requirements?
B. Site-to-site VPN
Which of the following provides two-factor authentication?
B. Smart card + PIN
Which of the following is BEST for providing real-time equipment theft alerts to the security staff?
B. Smart card reader
A few weeks after starting a new position, Joe, a junior network administrator, receives a call from an internal number asking for his username and password to update some records. Joe realizes this may be a type of attack on the network, since he has full access to network resources. Which of the following attacks is described?
B. Social engineering
Which of the following would block access to an untagged port when connected to a Layer 2 device?
B. Spanning tree
Which of the following WAN technologies provides a guaranteed throughput rate?
B. T-1
A large company uses an AAA server to manage network device access. The engineers can use their domain credentials to access all other servers. Currently, the network engineers cannot access the AAA server using domain credentials, but they can access it using a local account. Which of the following should the engineers update?
B. TACAS+ server time
A network technician is capturing packets on the network and notices a UDP packet stream from a phone to the PBX system. The payload of the packet shows the phone downloaded the file cm7910-sccp-load-2995.xml. Which of the following protocols was MOST likely used to download this file?
B. TFTP
A bookstore uses a Faraday cage to comply with credit card regulations. Customers report that their cellular phones have no signal when they are in the bookstore. Which of the following is the MOST likely cause?
B. The Faraday cage prevents access by redirecting signals.
Which of the following BEST describes the functionality of the root guard feature on a switch?
B. The STP root bridge cannot be changed.
A network administrator has signed up for service with a new ISP. The administrator was given the IP address of 172.17.10.254/30 to use on the external interface of the Internet-facing router. However, the network administrator cannot reach the Internet using that address. Which of the following is the MOST likely explanation?
B. The address provided by the ISP is a private IP address space and is not routable on the Internet.
A lab environment hosts Internet-facing web servers and other experimental machines, which technicians use for various tasks. A technician installs software on one of the web servers to allow communication to the companyג€™s file server, but it is unable to connect to it. Other machines in the building are able to retrieve files from the file server. Which of the following is the MOST likely reason the web server cannot retrieve the files, and what should be done to resolve the problem?
B. The lab environment is located in the DMZ, and traffic to the LAN zone is denied by default. The technician can move the computer to another zone or request an exception from the administrator.
A user is reporting poor network performance. A network technician starts by looking at port statistics on that userג€™s connected switchport. The technician notices there is a high level of collisions on the port. Which of the following is the MOST likely cause?
B. The port and/or userג€™s NIC is set to half-duplex.
A university has a lecture hall containing 100 students. Currently, the lecture hall has two 802.11ac wireless access points, which can accommodate up to 50 devices each. Several students report they are unable to connect devices to the wireless network. Which of the following is MOST likely the issue?
B. The students are attempting to connect 802.11g devices
A senior technician is reconfiguring the companyג€™s firewall because a number of additional devices have been added to the network. The company has acquired a new VoIP phone system, and a group of junior technicians has set up an experimental lab with access to the Internet. Management has given the team latitude for research and development, but would like the company network to be secure and the performance to remain consistent with existing baselines. Which of the following would be the BEST method to reconfigure the network?
B. The technician should put the junior teamג€™s lab in a DMZ and the phone system in a VLAN.
A utility company has installed a wireless device at a residence that allows the company to view power consumption online. The resident reports the 802.11ac home wireless intermittently loses connectivity for about 15 minutes twice a day.Which of the following is the MOST likely cause?
B. There is additional data being transferred over the wireless network.
A technician is installing a SOHO router. Which of the following should be performed on every installation and periodically maintained to prevent unauthorized access? (Choose two.)
B. Update the router firmware D. Use complex passwords
A vulnerability that would allow an unauthenticated, remote attacker to originate a DoS attack was found in a DHCP client implementation of a switch. Which of the following would BEST resolve the issue?
B. Upgrade to the latest firmware
A network technician needs to distribute an updated OS for all network switches at company locations throughout the world. The technician wants to ensure file integrity since several locations do not have high-quality connectivity to the Internet.Which of the following methods should be used to distribute the images while ensuring integrity?
B. Use an FTP server and provide the file hash.
A network analyzer captures traffic from a host that is sending 802.1q traffic to a Layer 3 switch. Which of the following attacks is occurring?
B. VLAN hopping
An attacker has inserted a hub into a trunk link on the local network in an attempt to access the management subnet to attack the networking devices. Which of the following attacks can be used on a trunk link to provide access to the management subnet?
B. VLAN hopping
Ann, a new employee within a department, cannot print to any of the printers in the department or access any of the resources that others can. However, she can access the Internet. The network engineer has confirmed that Annג€™s account has been set up the same as the others. There are no access lists restricting Annג€™s access. Which of the following could be the issue for this lack of access?
B. VLAN mismatch
A second router was installed on a network to be used as a backup for the primary router that works as a gateway. The infrastructure team does not want to change the IP address of the gateway on the devices. Which of the following network components should be used in this scenario?
B. Virtual IP
To increase security and usability of the wireless network, a back-end RADIUS server is used to authenticate users. Which of the following encryptions methods should be used to accomplish this?
B. WPA2-Enterprise
A network technician travels to a remote office to set up a new SOHO for the company. Wireless networking should be used at the remote office. The network technician sets up all the related wireless network equipment, and the last step is to connect the usersג€™ devices to the company network. To complete this step, which of the following should be used to secure the remote network location?
B. WPA2/WPA
A server rack was moved from one floor to another. The network engineer needs to determine what physical changes to make on the network to ensure the server rack has connectivity. Which of the following should the network engineer consult?
B. Wiring diagram
Which of the following datacenter security methodologies is MOST likely to remain usable during a network outage?
B. door locks
Which of the following BEST describes the BGP routing protocol?
B. hybrid
A SAN serves out storage to a companyג€™s virtual environment and provides low-level disk access. The company wants to use its existing IP network and equipment to access the virtual disks. Which of the following network connection types would BEST accomplish this task?
B. iSCSI
A technician notices clients are receiving a 169.254.x.x IP address following the upgrade of a server. Which of the following ports should the technician check on the local server firewall?
B. ports 67 and 68
Which of the following policies would Joe, a user, have to agree to when he brings in his personal tablet to connect to the company's guest wireless Internet?
BYOD
A technician receives a report that Joe, an existing user, is unable to access the network. Joe confirms that he had full access the previous day. The change log is reviewed, and there have been no changes on Joe's computer or any network changes in the last week. The technician moves the connection to an adjacent location on the switch, and Joe is able to access the network. Which of the following is the MOST likely cause of this issue?
Bad port
Which of the following should current network performance be compared against to determine network anomalies?
Baseline
A technician is investigating a server performance issue. The technician has gathered the server utilization statistics. Which of the following should the technician use to determine which statistics are not in the normal range?
Baseline review
Ann, a network technician, has just installed a fiber switch in a datacenter. To run the fiber cabling, Ann plans the cable route over the top of the rack using the cable trays, down to the switch, coiling up any excess cable. As Ann configures the switch, she notices several messages in the logging buffer stating the receive signal of the SFP is too weak. Which of the following is MOST likely the cause of the errors in the logging buffer?
Bend radius exceeded
A network technician is connecting medical-monitoring devices on a personal area network for patients' phones. Which of the following technologies should be used?
Bluetooth
Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?
Broadband
A network technician has created a network that consists of a router, a firewall, a switch, and several PCs. Which of the following physical network topologies was created?
Bus
Which of the following is the physical topology for an Ethernet LAN?
Bus
A company has contracted with an outside vendor to perform a service that will provide hardware, software, and procedures in case of a catastrophic failure of the primary datacenter. The Chief Information Officer (CIO) is concerned because this contract does not include a long-term strategy for extended outages. Which of the following should the CIO complete?
Business continuity plan
A network administrator is configuring the 172.16.40.0/22 network for a new building. Which of the following is the number of hosts that will be supported on this network?
C. 1022
When deploying UTP cables in a networking environment, which of the following are acceptable standards? (Choose two.)
C. 10GBaseT F. 1000BaseT
The length of an IPv6 address is:
C. 128 bits
A network administrator needs to implement a new IP subnet containing 29 hosts. It is possible that the number of hosts in that subnet could eventually double.The company only has a single, unused public IP network left to work with: 164.10.12.0/24. Which of the following would be the BEST way to divide this network without wasting addresses?
C. 164.10.12.128/26
A network administrator wants to narrow the scope of a subnet to two usable IP addresses within a class C network. Which of the following is the correct CIDR notation?
C. 192.1.0.124/30
A technician is allocating the IP address space needed for a new remote office. This office will contain the engineering staff with six employees and the digital marketing staff with 55 employees. The technician has decided to allocate the 192.168.1.0/24 block to the remote office. The engineering staff has been allocated the 192.168.1.64/29 subnet. Using the LEAST amount of space possible, which of the following would be the last usable IP address in the engineering subnet?
C. 192.168.1.70
Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?
C. 2001:0:d58::95:7565:1
A network administrator needs to create a network for 4,000 devices while conserving address space. Which of the following subnet masks should be used on this network?
C. 255.255.240.0
A technician is configuring a new server with an IP address of 10.35.113.47 on the 10.35.112.0 subnet to allow for the maximum number of hosts. When configuring network settings, which of the following is the correct subnet mask?
C. 255.255.240.0
A network engineer for a manufacturing company is implementing a wireless network that provides reliable coverage throughout the facility. There are several large, electric, motorized machines installed on the shop floor for automating the manufacturing process. These machines are known to be significant sources ofRF interference. Which of the following frequencies should the wireless network use to MINIMIZE this interference?
C. 5GHz
A network technician is helping to install 50 Cat6a drops from usersג€™ computers into an IDF. Which of the following is the termination point at the IDF?
C. A 110 block
Which of the following DNS record types allows IPv6 records to be resolved to DNS names?
C. AAAA
A technician set up a small network, which is not connected to the company LAN, for several employees to play a peer-to-peer networking game during breaks.The users know how to set up the software, but they do not know anything about networking. The technician has wired the network but has not configured any networking information and does not want the employees to have access outside the network. Which of the following should be used to apply addressing to the network?
C. APIPA
Users on a LAN segment are reporting a loss of connectivity to network services. The client PCs have been assigned with 169.254.X.X IP addresses. Which of the following IP address schemas is being utilized?
C. APIPA
A technician is troubleshooting a host that is having intermittent issues connecting to internal network resources and the company servers. Using a packet sniffer, the technician notices there are several TCP communications that are missing packets in sequence and need to be retransmitted. The technician receives severalSYN-ACK packets with incorrect addressing. Which of the following is the MOST likely cause of these issues?
C. ARP poisoning attack
Which of the following policies prohibits a network administrator from using spare servers in the datacenter to mine bitcoins?
C. AUP
A technician is working on a Linux VM in a lab environment to become more familiar with the operating system. The technician has configured a basic website and wants to allow access to it from a different machine on the local network. Which of the following should the technician do so other machines can connect?
C. Add access rules in iptables.
A network technician is assisting a SOHO environment with wireless connection issues. The business uses 802.11n and WPA2 encryption. The on-premises equipment is located toward the back of the building and includes a router, firewall, and WAP. The users at the front of the building are experiencing very slow response times due to distance limitations. Which of the following should be done to remediate the slow speeds of the users?
C. Add another AP.
In the past, users brought personal laptops to the office to bypass some of the security protocols on their desktops. Due to new security initiatives, management has asked that users not be allowed to attach personal devices to the network. Which of the following should a technician use to BEST meet this goal?
C. Allow only secure protocols on the network
A company is allowing its employees to use their personal computers, tablets, and IoT devices while at work. However, there are rules and guidelines to which employees must adhere. Which of the following documents applies to these employees?
C. BYOD
A small team is overloaded with requests for database resources. The Chief Information Officer (CIO) is concerned the company does not have the resources to deploy and manage these additional services efficiently. Which of the following types of cloud services would be the MOST effective?
C. BaaS
A zero-day vulnerability is discovered that affects a specific network device. This vulnerability only affects services on port 21. This network device is restricted to use only secure protocols and services. Which of the following explains why this device is secure?
C. Because FTP is not a secure service
A user reports network resources can no longer be accessed. The PC reports a link but will only accept static IP addresses. The technician pings other devices on the subnet, but the PC displays the message Destination unreachable. Which of the following are MOST likely the causes of this issue? (Choose two.)
C. Bent pins E. VLAN mismatch
A new datacenter is being created, and management is trying to control access to that area. Which of the following are the BEST choices for providing access to the new datacenter? (Choose two.)
C. Biometrics D. Key fob
A network technician has purchased a 10GBase-T switch and wishes to connect it to 30 computers with 10GB network cards. The computers are 225ft (69m) away, and all need to establish a 10 Gbps connection to meet business requirements. To minimize costs while still meeting these requirements, which of the following cable types should the technician choose?
C. Cat 6a
A network technician is repurposing a switch that has been in storage for some time. The device has been wiped to factory defaults. Which of the following should be done FIRST to ensure the device has been hardened before configuration?
C. Check for updated firmware.
A network technician is installing a new SOHO branch office that requires the use of a DOCSIS-compatible modem. The modem needs to be connected to theISPג€™s network at the demarc. Which of the following cable types should be used?
C. Coaxial
A network technician has deployed a new 802.11ac network and discovers some of the legacy POS equipment only supports WPA and 802.11a. Which of the following is the MOST secure method of connecting all devices while avoiding a performance impact to modern wireless devices?
C. Connect the legacy devices with a PSK while the modern devices should use the more secure EAP.
A technician needs to add ten additional Ethernet ports to a small office network. A new basic function switch is added. Hosts connected to the new switch are unable to see any computers on the network other than those connected to the new switch. Which of the following should the technician perform to ensure the hosts on the new switch can communicate with the existing network?
C. Connect the switches with a cable that has a TIA/EIA 586A wired connector end and a TIA/EIA 586B wired end.
A network technician needs to install the latest firmware on the switch to address a recently discovered vulnerability. Which of the following should the technician do to have a rollback plan in case of issues with the new firmware? (Choose two.)
C. Create a change management document F. Create a performance baseline of the switch
A company wants to provide its sales representatives with an easy-to-use method of securely connecting to the corporate network from any client network. Which of the following methods should the network technician implement?
C. Create an SSL VPN for remote access to the network.
A company has procured a new office building and started the process of assigning employees to work at that location. The company has also purchased equipment for the new location. There are 5033 laptops, 6000 monitors, and 857 printers. Which of the following steps is the technician most likely to completeFIRST?
C. Create an inventory database
A wireless access point that was working in a large warehouse last week is now offline. The technician observes there is no power to the device. The technician verifies PoE is working on the switchport, and then confirms the wireless access point is still not powering up. Which of the following is the MOST likely issue?
C. Damaged cable
Which of the following is the physical location where the customer-premise equipment comes together with the ISP or third-party telecommunications equipment?
C. Demarcation point
Which of the following BEST explains the purpose of signature management as a mitigation technique?
C. Detecting malicious activity
Which of the following backup techniques is used to capture all the data that has changed since the last full backup?
C. Differential
A network technician is assisting a user who is having problems accessing a particular website. Other users are reporting that the website is accessible outside of the office. The technician suspects the problem is with the companyג€™s firewall. Which of the following should the technician use to troubleshoot?
C. Dig
An NGFW alerts that a web server in the DMZ is sending suspicious traffic. A network administrator finds that port 25 is open, and the traffic is originating from this port. The only purpose of this server is to deliver website traffic. Which of the following should the network administrator recommend to the systems administrator?
C. Disable the SMTP service on the server
A company requires a network storage solution that allows for the use of OS-specific credentials and permissions. The company purchases a SOHO solution, which includes support for SMB, iSCSI, FTP, Telnet, and NFS natively out of the box. Which of the following should be done FIRST?
C. Disable unnecessary services.
A NGFW is continuously sending alerts regarding traffic from an internal database server. An old DHCP service, which was used before a dedicated server was installed, is still running on the server. Which of the following practices could have prevented this incident?
C. Disabling unused services
The Chief Executive Officerג€™s (CEOג€™s) tablet cannot connect to the wireless network from the corner office. A network technician verified the tablet can connect to the wireless network in other areas of the building. The distance between the office and the 802.11ac WAP is 150ft (46m), and there are a few cubicles in between. Which of the following is the MOST likely cause of the tablet not connecting?
C. Distance
A network administrator is downloading a large patch that will be uploaded to several enterprise switches simultaneously during the dayג€™s upgrade cycle. Which of the following should the administrator do to help ensure the upgrade process will be less likely to cause problems with the switches?
C. Download each switchג€™s current configuration before the upgrade.
A network technician receives a report that the companyג€™s intranet web server is not responding. The technician verifies successful connectivity to the server via the ping and tracert commands. The technician also verifies the routers and switches are online and operational, and then runs Telnet to port 80 and receives a response. Which of the following troubleshooting steps should the technician perform NEXT?
C. Duplicate the issue and continue testing.
A network technician wants to address PCs on a subnet with IPv6 in addition to IPv4. The subnet currently uses a DHCP server that only supports IPv4. Which of the following should the technician use to assign IPv6 addresses automatically without DHCP?
C. EUI-64
An employee reports an error when visiting a website using SSL, and a message is displayed warning of an invalid certificate. Which of the following could be occurring?
C. Evil twin
A technician is downloading an ISO from a vendorג€™s website. To ensure the integrity of the download, which of the following should be verified?
C. File hashing
The corporate head office has assigned the subnet of 10.1.100.0/24 to a network technician. The technician wants to create subnets for the finance department, human resources, and IT. Given the following device counts: Finance: 70 devices - Human resources: 38 devices - IT: 16 devices - Which of the following outlines how the technician should allocate the address space given?
C. Finance: 10.1.100.0/25 Human resources: 10.1.100.128/26 IT: 10.1.100.192/27
A technician is sent to a remote office to set up a device to connect to the Internet. The company standards document requires stateful inspection. Which of the following should the technician install?
C. Firewall
The engineering department wants to bring a legacy computer online to test a failed component. When patching the device into the switch, there are no link lights or connectivity. The legacy computer can ping its loopback address successfully. Another device can connect to that same port without issues. Which of the following should the network technician check NEXT? (Choose two.)
C. Firmware version E. Network card drivers
A network technician is installing a new network switch in the MDF. The technician is using fiber to connect the switch back to the core. Which of the following transceiver types should the technician use?
C. GBIC
A network technician needs to subnet the network. The marketing department has 28 devices. Which of the following private IP address spaces should be used to ensure the MINIMUM number of unused IP addresses?
C. Gateway: 192.168.1.97 Netmask: 255.255.255.224
A development team has been testing a web server on a virtual server to create a web application. Once satisfied, the development team clones the entire virtual server into production. The development team needs to use HTTP, HTTPS, and SSH to connect to the new server. Which of the following should the network administrator do to help secure this new production VM? (Choose two.)
C. Generate new SSH host keys. E. Issue a new self-signed certificate.
A network technician receives a new firmware update for a network device. The technician wants to ensure the file has not been tampered with. Which of the following techniques should the technician use to ensure the integrity of the file?
C. Hash comparison
Which of the following devices acts as a multiport repeater at the physical layer of the OSI model?
C. Hub
Which of the following networking devices operates at Layer1?
C. Hub
A network administrator has had difficulty keeping track of IP address assignments on networking devices and clients recently. Which of the following is the BEST technology to aid in this scenario?
C. IPAM
Due to regulatory requirements, a college bookstore prohibits customers from accessing the wireless network in the building. Which of the following would be theBEST method to prevent customers from accessing the wireless network while in the bookstore?
C. Implement a Faraday cage within the bookstore premises.
Joe, a technician, is attempting to resolve an issue with an off-site router remotely. Joe needs to reset the WAN connection settings and wants to ensure he will have access to the router at all times to monitor the changes.Which of the following solutions would BEST meet this goal?
C. Implement a modem on the AUX port.
A network administrator is responding to a help desk ticket, which states an unknown wireless access point is broadcasting in a specific area. Upon investigation, the administrator finds that a user brought a wireless access point from home and plugged it into the corporate network. This resulted in an attacker using the unsecured wireless LAN to gain access to the network. Which of the following should the network administrator have done to BEST prevent this problem?
C. Implemented port security
An administrator is troubleshooting a userג€™s intermittent wireless connectivity issue. Other users across the hallway can connect and use the wireless network properly. Upon inspection of the connection details, the administrator finds the following: Which of the following is MOST likely the cause of the poor wireless connection?
C. Incorrect antenna type
After setting up in a temporary office, Joe tries to access the companyג€™s wireless network. Following several attempts, Joe is able to get an IP, but cannot access network resources. Which of the following is the MOST likely cause of this error when trying to connect to the companyג€™s wireless network?
C. Incorrect workstation certificate
A disgruntled employee decides to leak critical information about a companyג€™s new product. The employee places keyloggers on the departmentג€™s computers, allowing the information to be sent out to the Internet. Which of the following attacks is occurring?
C. Insider threat
A security guard notices an authorized individual, who is dressed like a lab technician, has entered a secure area of the hospital with a large group. Which of the following security attacks is taking place?
C. Insider threat
Which of the following should be configured on the network to achieve performance for the FCoE storage traffic?
C. Jumbo frames
Which of the following protocols is used by Active Directory for authentication?
C. LDAP
A network technician is troubleshooting an issue routing TCP packets to an email server. At which of the following OSI layers is the issue occurring?
C. Layer 4 ג€" Transport
When using a network monitoring system, a network technician notices that a switch returns many object identifiers that do not have descriptions. Which of the following should be imported into the monitoring system to describe these object identifiers?
C. MIB
Which of the following WAN technologies swaps the header on a packet when internally switching from one provider router to another?
C. MPLS
A user believes a work email account has been compromised. A technician discovers that an email seeming to be from the userג€™s bank shares the same origin IP address as the last login to the email account. Which of the following types of attack is described in this scenario?
C. Man-in-the-middle
Two buildings used to be connected by a wireless bridge, but they are upgrading to fiber. Which of the following new devices would be required at the demarcation points?
C. Media converter
A technician wants to physically connect two office buildingsג€™ networks. The office buildings are located 600ft (183m) apart. Which of the following cable types is the BEST choice?
C. Multimode
A company has just refreshed the hardware in its datacenter with new 10G Ethernet switches. A technician wishes to set up a new storage area network but must use existing infrastructure. Which of the following storage standards should the technician use?
C. NAS
A technician is reviewing network device logs in an attempt to trace an attack that occurred on the network. Which of the following protocols would affect whether or not the technician can properly trace the attack through the network using the logs?
C. NTP
Which of the following is an object held within an MIB?
C. OID
A network technician performs a wireless site survey at a company building and identifies that the cafeteria is not covered by a wireless signal. The cafeteria is located in a medium-size, square-shaped room. Which of the following types of WAP antenna should the technician install in the center of the cafeteria to provide the BEST coverage?
C. Omnidirectional
Which of the following protocols operates at the data link layer of the OSI model?
C. PPP
Which of the following should be configured to allow for IP-to-name resolutions?
C. PTR
A network administrator needs to be able to burst datacenter capacity during peak times, but does not want to pay for on-premises hardware that is not used during off-peak times. Which of the following would aid in this scenario?
C. PaaS
Which of the following concepts would BEST describe when a company chooses to use a third-party vendor to host and administer a critical application?
C. PaaS
Which of the following can be done to implement network device hardening? (Choose two.)
C. Patch and update F. Change default admin password
A Chief Information Officer (CIO) wants a third party to verify the security surrounding an enterprise SQL database server. Which of the following services should the CIO implement?
C. Penetration test
Management has requested that a wireless solution be installed at a new office. Which of the following is the FIRST thing the network technician should do?
C. Perform a site survey
A wireless network is set up in a mesh configuration that has experienced recent growth. Some of the access points are four hops away in the mesh network.Users at these access points are reporting slow download speeds despite being the sole users on the access point. Which of the following would BEST resolve this issue?
C. Physically connect more access points.
A system administrator reports that one of the two domain name servers does not seem to be responding to DNS requests from clients. The servers are both up and running, name service is running on them, and DNS requests appear in the logs. Both servers respond to queries made at the console. Which of the following tools should the systems administrator use to gather more information?
C. Ping the name servers by IP address to make sure they are up, and then ping each name server by name in case name resolution is not working for the server names.
A technician needs to order cable that meets 10GBaseT and fire safety requirements for an installation between a drop ceiling and a standard ceiling. Which of the following should the technician order to ensure compliance with the requirements?
C. Plenum Cat 6a
A technician has been alerted of incoming HTTP traffic on the LAN segment that should not contain any web servers. The technician has the IP address of the destination host and wants to determine if the socket for HTTP is open. Which of the following should the technician perform?
C. Port scan
Which of the following would a network technician MOST likely connect to power wireless access points in drop ceilings?
C. Power-over-Ethernet switch
A company wishes to allow employees with company-owned mobile devices to connect automatically to the corporate wireless network upon entering the facility.Which of the following would BEST accomplish this objective?
C. Pre-shared key
A server in a LAN was configured to act as a gateway between all company computers and an external network. Which of the following networking devices offers the ability to increase both performance and security?
C. Proxy server
A companyג€™s Chief Information Security Officer (CISO) has decided to increase overall network security by implementing two-factor authentication. All users already have username/password combinations and require an additional factor of authentication. Which of the following would satisfy the requirements?
C. RSA token
A technician is configuring a printer for a client. The technician connects the printer to the network, but is unsure how to determine its switchport. Which of the following should the technician do FIRST to locate the switchport?
C. Reference the ARP table in the router.
A recently constructed building makes use of glass and natural light. Users in the building are reporting poor cellular connectivity and speeds. Which of the following is MOST likely the cause?
C. Reflection
A network technician is troubleshooting a problem with a userג€™s client-to-site VPN connection. The user is unable to establish a connection to the server, but the error message that appears on screen does not contain useful information. Which of the following should the technician do NEXT to troubleshoot the issue?
C. Review the logs in the VPN client to check for any informational messages.
A network technician is investigating why a user cannot print to the network printer. The technician wants to determine if anything has changed. Which of the following actions would be the BEST example of this troubleshooting step?
C. Review the maintenance logs from the night before.
A network administrator is attempting to limit the installation of malware on company workstations. The administrator wants to remove root access from the user accounts. Which of the following is this an example of?
C. Role separation
A network administrator is going to be performing a major upgrade to the network. Which of the following should the administrator use in case of a failure?
C. Rollback plan
A company needs to implement a fault-tolerant server configuration after the failure of its database server. The company decides to implement load-balancing redundant servers. Which of the following should be used for file storage for the servers?
C. SAN
Allowing data to be centrally stored and accessed by multiple devices on an isolated subnet is BEST understood as:
C. SAN
A network technician is working on a new switch implementation to expand the network. Which of the following is the BEST option to ensure the implementation goes according to business requirements?
C. SOP
A network technician needs to upgrade a production Windows server to the latest service pack. In which of the following should the work plan and recovery procedure be documented?
C. SOPs
A network technician needs to administer the desktop of a Linux-based workstation remotely on the local network. Which of the following remote access methods should the network technician use?
C. SSH
A network technician is working on a way to set up a new branch office securely. The network manager confirms the company does not have any plans to expand to any other new sites and wants to implement the most cost-effective solution. Which of the following would be the BEST type of VPN to implement?
C. Site-to-site VPN
A technician has designed a LAN with redundant switches. Which of the following should be configured to ensure network availability?
C. Spanning tree
A network technician is setting up a WiFi network in a multi-tenant building. When trying to determine the best channel, which of the following is the BEST tool to use?
C. Spectrum analyzer
A network administrator is concerned about clients being able to access the local Internet while connected to the corporate VPN. Which of the following should be disabled on the client to prevent this?
C. Split tunneling
Management asks a network technician to install a new connection between two main locations. Management requests that the connection be the fastest possible for data replication. Which of the following would be the MOST appropriate type?
C. T3/E3
A network technician is performing a firmware upgrade on a switch. The firmware needs to be downloaded to the device. Which of the following methods should the technician use to retrieve the updated firmware?
C. TFTP
Joe, a network technician, wants to locally back up several router and switch configurations. He wants to store them on a server that can be accessed easily for recovery without authentication. Which of the following servers should Joe use?
C. TFTP
A system administrator receives reports from users of odd behavior in regard to a recently installed server. While reviewing the server network configuration, the systems administrator does both a forward and a reverse DNS lookup on the host, along with the network adapter configuration. Which of the following is the problem identified in the output above?
C. The DNS lookup entry is incorrectly configured.
A switch is being configured for installation into a new building. The network design is such that the only DHCP server resides in the datacenter. A traditional three-layer network hierarchy is being used, and all buildings have a Layer 3 connection back to the core. Which of the following should the technician configure to get DHCP working properly in the new building?
C. The IP helper address on the switch
A network technician at a small office upgrades the LAN switch. After the upgrade, a user reports being unable to access network resources. When the technician checks the switchport, the LED light is not lit. Which of the following should the technician check FIRST?
C. The device is connected to the switch.
A technician is working on a new machine that has been procured for testing and development. The machine will run a hypervisor and host several operating systems of various types so the development team can test the companyג€™s applications in a variety of environments. The technician wants the virtual machines to be available to communicate with each other without leaving the hypervisor. Which of the following is the BEST solution to the problem?
C. The technician should configure a virtual switch.
A network technician is responding to a userג€™s trouble ticket. After replacing the network patch cable with a longer cable, the user is no longer connecting to the network. The network administrator tests the patch cable with a tester and confirms the cable is not faulty. Which of the following is the issue with the newly installed cable?
C. The total cable run exceeds the maximum distance.
A user in the finance department can access the department printer and file server yet is unable to print to the marketing departmentג€™s printer. A technician runs ipconfig and sees the following output: IPv4 Address. . . . . . . . . . . : 192.168.0.101 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 The technician has verified the userג€™s PC is in the proper VLAN and sees an UP/UP status on the switchport. Which of the following is MOST likely causing the issue?
C. There is an incorrect default gateway on the userג€™s PC.
A technician is trying to identify the cause of an issue several wireless users are experiencing at an office. The office is in a square-shaped building, with four802.11b WAPs with omnidirectional antennas located in the four corners of the building. Users near the center of the building report sporadic issues connecting to resources. The technician checks the signal strength in the middle of the building and determines it is adequate. Which of the following is causing the reported issue?
C. There is channel overlap of the access points.
A technician is connecting a PC to a switchport. At the wiring closet, the technician is unable to identify which cable goes from patch panel A connected to the switch to patch panel B connected to the PC. Which of the following tools should the technician use to resolve the issue?
C. Tone generator
A network technician needs to install a new access switch. After installing the new switch, the technician begins to move connections from the old switch to the new switch. The old switch used a GBIC with SC connectors, and the new switch uses an SFP with LC connectors. After connecting the SC connector to the SC- to-LC adapter and plugging it into the switch, the link does not come up as expected. Which of the following should a network technician perform NEXT?
C. Transpose the fiber pairs.
A network technician has recently installed new VoIP phones at all employeeג€™s desks to support a new SIP cloud VoIP solution. However, the technician is unable to make a call from the device after testing. Which of the following should the technician verify? (Choose two.)
C. UDP 5060 is allowed. D. UDP 5061 is allowed.
A critical vulnerability is discovered on a network device. The vendor states it has already patched this vulnerability in its current release. Which of the following actions should an administrator take?
C. Update the firmware.
A WAP has been dropping off the network sporadically and reconnecting shortly thereafter. The Cat 5 wire connecting the access point is a long run of 265ft (81m) and goes through the business area and the mechanical room. Which of the following should the technician do to fix the AP connectivity issue?
C. Upgrade the cable from Cat 5 to Cat 5e.
A network administrator gets a call regarding intermittent network outages across the country. Which of the following should be used to connect to the network so the administrator can troubleshoot this issue from home? (Choose two.)
C. VPN D. SSH
Which of the following steps follows an implemented solution?
C. Verify full system functionality.
A technician is investigating an issue related to a single host that is unable to access the Internet. The technician records the following information: Host IP169.254.1.10. The network IP address range on the DHCP server is 10.10.5.2-10.10.5.250 with a default gateway 10.10.5.1 and a DNS of 8.8.8.8. Which of the following should the technician perform to troubleshoot the issue?
C. Verify the host has physical connectivity and is on the correct VLAN.
A technician has received a report that details the need for a patch and a complete list of the affected systems. Which of the following activities MOST likely generated the report?
C. Vulnerability scanning
Which of the following should be performed on a regular basis to prevent unauthorized access to a company network? (Choose two.)
C. Vulnerability scanning D. Patch management
A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform this task?(Choose two.)
C. WPA2 D. EAP
A network administrator has set up a corporate network at a branch office. Users are able to log into the wireless network with their network credentials after they accept the company root certificate. Which of the following is the wireless network MOST likely using?
C. WPA2 Enterprise with Kerberos
Which of the following is networking stand-alone hardware that will permit any WiFi-compliant device to connect to a wired network?
C. Wireless access point
A network technician is asked to perform an unfamiliar task. Which of the following would the technician MOST likely reference?
C. Work instructions
An employee, who is using a laptop connected to the wireless network, is able to connect to the Internet but not to internal company resources. A systems administrator reviews the following information from the laptop:IP: 192.168.1.100 - MASK: 255.255.255.0 - ROUTER: 192.168.1.1 - The administrator was expecting to see a network address within 10.100.0.0/23, which is consistent with the companyג€™s wireless network. The network administrator verifies the companyג€™s wireless network is configured and working properly. Which of the following is the MOST likely cause of this issue?
C. Wrong SSID
A technician wants to set an IP address to a specific MAC address on a host machine. Which of the following commands should the technician use?
C. arp
A technician is asked to provide centralized SSID management across the entire WAN. The BEST solution would be to:
C. install a wireless controller
Management is concerned there is excessive traffic on the network. A network technician wants to run a quick port scan to see any systems that have open ports.Which of the following tools should be used to do this?
C. nmap
A technician is troubleshooting a server in the finance office that hosts an internal accounting program. The ticketing desk has received several calls from users reporting that access to the accounting program is degraded, and they are experiencing severe delays, sometimes timing out entirely. The problem has been isolated to the server. Which of the following tools should the technician use on the server to narrow down the issue?
C. pathping
While testing an ACL on the default gateway router to allow only web browsing, ports TCP 80 and TCP 443 were the only ports open. When tested, no websites were accessible via their URLs inside the network. Which of the following configurations should be added to the ACL?
C. permit udp any any eq 53
The process of grouping network interfaces together to increase throughput is called:
C. port aggregation
The help desk is receiving reports of intermittent connections to a server. A help desk technician suspects the server is unable to establish a three-way handshake due to a DoS attack. Which of the following commands should a network administrator use to confirm the help desk technicianג€™s claim?
C. tcpdump
A network engineer is working on a network connectivity problem between a site in California and a site in New York. The connection went down overnight, and the engineer is unsure where the connection failed. The technician is logged into the primary switch in the customerג€™s network, which is also the companyג€™s connection to the WAN.Which of the following tools should the technician use to determine the last available network hop?
C. traceroute
The process of searching for open or weakly secured wireless networks in a geographic area is known as:
C. war driving.
A software company is hosting a seminar at a local conference center to unveil its latest software release. As the clients begin to arrive and connect their mobile devices to the wireless network, users begin to report connectivity and throughput issues. Which of the following should the network technicians do to resolve the reported issues quickly?
Call the ISP to increase the bandwidth.
A hydroelectric company wants to manage sensors at a dam remotely. The control station at this dam is several miles off the main road in a densely forested area.Which of the following should the company implement to connect remotely to the sensors?
Cellular modem
A network engineer arrives at work and discovers that many users are having problems when attempting to connect to the company network shared drives. The network operations center (NOC) technician just completed server upgrades the night before. To which of the following documents should the NOC technician refer to determine what potentially caused the connectivity problem?
Change management
A technician discovers that multiple switches require a major update. Which of the following policies should be followed?
Change management policy
Two buildings are connected with 802.11a wireless bridges using omnidirectional antennas. However, the connection between the two bridges often drops. Which of the following would be the BEST solution?
Change the antennas to unidirectional.
A systems administrator has recently purchased and installed a large electronic signage screen for the companyג€™s parking garage. The screenג€™s management software was installed on a server with a public IP address to allow remote management. The systems administrator is now troubleshooting an issue with the screen displaying unknown, random, and inappropriate messages. Which of the following is MOST effective in resolving this issue?
Changing the management softwares default credentials
A client utilizes mobile tablets to view high-resolution images and videos via WiFi within a corporate office building. The previous administrator installed multiple high-density APs with WiFi 5, providing maximum coverage, but the measured performance is still below expected levels. Which of the following would provide theBEST solution?
Channel bonding
A network engineer is surveying the existing wireless infrastructure to propose additional changes to increase throughput. The SSID is already on an uncongested5GHz frequency. Which of the following should the engineer configure?
Channel bonding
A network security technician observes multiple attempts to scan network hosts and devices. All the attempts originate from a single host on the network. Which of the following threats is MOST likely involved?
Compromised system
A network technician wants to ensure the backup configuration files for the network devices are not being altered after they are stored. Which of the following tasks should the network technician perform to achieve this goal?
Compute the checksum of the backup file and document it separately.
A network engineer is adding a second router to the company's topology to connect a new wing of the building. The second router will be in the same server room as the first router and does not support auto-MDX. Which of the following describes how the routers should be connected to each other?
Connect the second router to the first router with a crossover cables
A technician attempts to replace a switch with a new one of similar model from the same vendor. When the technician moves the fiber and SFP plug, the switch does not completely boot up. Considering that the config files are the same, which of the following is the MOST likely cause of the failure?
Corrupted operating system
A company has decided to allow certain users to work remotely by opening up a VPN connection through the firewall. The security policy has been updated to allow VPN connections only from certain users and to specific areas on the network. Along with configuring the correct policies on the firewall, which of the following also needs to be configured on usersג€™ mobile devices to allow these VPN connections?
Credentials
A technician is connecting a router directly to a PC using the G1/0/1 interface. Without the use of auto-sensing ports, which of the following cables should be used?
Crossover
A network technician has finished configuring a new DHCP for a network. To ensure proper functionality, which of the following ports should be allowed on the serverג€™s local firewall? (Choose two.)
D. 67 E. 68
A company wants to implement a wireless infrastructure on its campus to meet the needs of its BYOD initiative. The company has users with legacy devices and wants to accommodate them while delivering speed to other users who have modern systems.Which of the following standards BEST fits these requirements?
D. 802.11n
Several open conference rooms have active wired network connections. To discourage unauthorized users, a network technician wants to require users in the conference rooms to authenticate to the network before gaining access. Which of the following would be the BEST network technology to use?
D. 802.1X
A network technician is adding a 10/100 switch with RJ45 connectors to the company network to accommodate new computers being added to a network segment. There is no auto-MDIX port on the switch that needs to be connected to the existing switch on the segment. Which of the following should the technician use to make the connection?
D. A cable with TIA/EIA 568a and 568b on each end
Which of the following BEST describes an exploit?
D. A privilege escalation script
Which of the following BEST describes the RADIUS authentication service protocol?
D. A protocol that sends configuration information from the authentication server
A network engineer wants to change how employees authenticate to the wireless network. Rather than providing a pre-shared key, the engineer wants employees to be able to authenticate with the same unique company user ID and password they use for accessing other services, such as email and document sharing. The engineer also wants to receive daily reports of login attempts on the wireless network. Which of the following should be installed to achieve this goal?
D. AAA/RADIUS server
Joe, a user, reports intermittent connectivity issues, but a technician notices that the only time Joe has issues is when he is logged into the database. Losing connection after authenticating to a database, but still having access to network resources such as file/print services and email, would MOST likely be caused by:
D. ACL configuration
A wireless client is having issues staying connected to the wireless network even though the client is less than 20ft (6m) from the access point. Which of the following is MOST likely the cause?
D. Absorption
802.11n clients currently have no way to connect to the network. Which of the following devices should be implemented to let the clients connect?
D. Access point
A shop owner wants to ensure that only a specified group of devices can access the wireless network. Which of the following methodologies will BEST ensure unauthorized devices cannot consume the shop ownerג€™s limited Internet bandwidth?
D. Activate MAC address filtering.
A network technician notices that switches of the same model have different commands and security features while administering them. Which of the following hardening techniques should the technician perform on a regular schedule to ensure all switches have the same features and security functionality?
D. Apply patches and updates.
A technician needs to connect several computers in close proximity to control manufacturing equipment in a factory. The medium to connect the computers must be cost effective and suitable for short distances. Which of the following mediums should the technician use?
D. BNC connector and RG-59 cable
Which of the following is a policy that communicates the guidelines for connecting personal employee devices to the corporate network?
D. BYOD
A network technician has been asked to install an additional switch in an IDF, but all of the single-mode fiber is in use between the IDF and MDF. The technician has deployed new transceivers that allow for the use of a single fiber stand, providing the additional fiber needed for the new switch. Which of the following has the technician deployed?
D. Bidirectional SFP
A companyג€™s server-naming convention is overly complicated. The systems administrator wants to change the naming convention to make it easier for users to remember which hosts they should log into. However, renaming servers is complicated and requires some downtime. Which of the following DNS record types would accomplish this goal without requiring servers to be renamed?
D. CNAME
An email server, which is called ג€Frederick,ג€ has an IPv6 address of 2001::5689:23:ABCD:6A, but most users call it ג€Fredג€ for short. Which of the following DNS entries is needed so the alias ג€Fredג€ can also be used?
D. CNAME
A customer wants to set up a guest wireless network for visitors. The customer prefers to not have a password on the network. Which of the following should a technician set up to force guests to provide information before using the network?
D. Captive portal
A network administrator wants to employ a username and password authentication system for guest WiFi. Which of the following is the BEST option to provide this type of authentication?
D. Captive portal
A network technician is designing a network cable upgrade in a newly acquired office space. The IT manager wants to install a standardized twisted pair cable solution that supports speeds up to 1 Gbps and terminates with a standard RJ45 connector. Which of the following cable types should the technician suggest?
D. Cat 6
A request is made to open an additional port on a firewall. The request is approved, and the port is opened. Which of the following BEST describes this process?
D. Change management
Management at a company wants to increase the bandwidth available to users after receiving several complaints. A technician reports to management that 50% of the company bandwidth is being utilized by wireless devices outside the companyג€™s property. Given budget constraints, which of the following solutions should the technician propose to management?
D. Configure geofencing
A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform her job. Which of the following would provide secure access to the corporate resources?
D. Connect utilizing client-to-site VPN.
A network administrator wants to ensure all traffic is inspected and abides by the AUP, and that malicious traffic is stopped. Which of the following features should be enabled on a firewall to meet this requirement?
D. Content filtering
After deployment of a second network link to load balance the network traffic, the quality of voice calls degrades. The network administrator discovers the voice packets are arriving at uneven intervals that cannot be handled by the voice application buffer. Which of the following actions will improve the quality of the voice calls?
D. Control the jitter of the affected traffic across the network links
A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?
D. Create a new network segment with ACLs, limiting kiosksג€™ traffic with the internal network.
A network administrator is deploying a new switch in an existing IDF. The current switch has only copper Ethernet ports available to use for the trunk ports. Which of the following cable types should the network administrator deploy?
D. Crossover
A user calls the help desk for assistance with setting up a new SOHO router. The user has three employees who all have laptops that need to connect to the wireless network. The users need to have firewall rules allowing access to an internal server, but cannot be configured with static IP addresses. Which of the following BEST describes what the technician should implement?
D. DHCP reservation for the laptopsג€™ MACs
A company is experiencing exponential growth and has hired many new employees. New users are reporting they cannot log into their systems, even though they are on the same network. The technician can see physical connectivity to the network switch along with their MAC addresses. Which of the following should the technician check NEXT?
D. DHCP scope availability
Joe, an employee, wants to copy text from a message on his corporate email account to a new message on his personal email account. However, the copy and paste functions of the clipboard are grayed out and unavailable. Which of the following policies would be responsible for this behavior?
D. DLP policy
An end user at an Internet cafe tries to visit an online retailerג€™s website; however, the website for a competitor loads. The user checks the URL in the address bar and verifies it is correct, but the competitorג€™s page still loads. Which of the following BEST describes what is occurring?
D. DNS poisoning
A network administrator is adding a new WAN circuit from the ISP to a new building. In which of the following locations would the network administrator find the utility entry point?
D. Demarc
Which of the following represents where the ISPג€™s WAN connection is handed off to the local network?
D. Demarcation point
A technician is making the population of routers more secure. Which of the following are the BEST options for making authentication more secure? (Choose two.)
D. Disable Telnet. E. Implement AAA.
A network technician is reviewing network logs and notices about 30,000 different hosts have been trying to hit the company employeesג€™ database server for the past week. However, none of the hosts are known to the network. Which of the following is MOST likely occurring within the network?
D. Distributed DoS
A technician restored network connectivity on a userג€™s laptop. After validating full system functionality, which of the following steps should the technician takeNEXT?
D. Document the findings, actions, and outcomes
Which of the following IPv6 transition methods requires all network devices to support IPv4 and IPv6?
D. Dual stack
Which of the following is an IPv6 transition mechanism in which network devices utilize IPv4 and IPv6 at the same time?
D. Dual stack
A user reports intermittent performance issues on a segment of the network. According to the troubleshooting methodology, which of the following steps should the technician do NEXT after collecting initial information from the customer?
D. Duplicate the problem, if possible.
A Chief Information Security Officer (CISO) has decided to implement a secure and user-friendly way to connect to the corporate wireless network. Each workstation will be authenticated individually using a unique certificate that will be deployed to the workstation by the organizationג€™s certificate authority. Which of the following authentication methods would meet this requirement?
D. EAP-TLS
A network technician needs to dedicate a range of addresses in DHCP for statically assigned servers and network devices. Which of the following should be configured to BEST accomplish this?
D. Exclusions
Which of the following storage connection types should be used to allow the consolidation of the physical connections for SAN and LAN in just one Layer 2 protocol?
D. FCoE
Which of the following WAN transmission mediums is the fastest and can travel the longest distance?
D. Fiber
A network technician is segmenting a network to allow for unauthenticated public connections to a server. Which of the following devices would BEST safeguard the internal network from the public-facing server?
D. Firewall
A network administrator is securing the wireless network in a multitenant building. The network uses a passphrase for authentication so it is easy to allow guests onto the wireless network, but management would like to prevent users from outside the office space from accessing the network. Which of the following security mechanisms would BEST meet this requirement?
D. Geofencing
Which of the following would indicate that a circuit speed should be increased?
D. High packet drops
A router is set up to utilize RIPv2 to route traffic throughout the network. Which of the following routing metrics is used to determine the path?
D. Hop count
A technician is installing two new servers that collect logs. After installing the servers, the technician reviews the logical output from various commands. Which of the following should be included in a logical network diagram?
D. Hostname
Question #693 Topic 1 Which of the following devices will intelligently attempt to relieve the network of an assumed threat after sampling a packet stream?
D. IPS
Which of the following creates a secure remote connection at the OSI network layer?
D. IPSec
A company has experienced a major security breach. Which of the following should the network administrator reference to determine the next steps?
D. Incident response policy
Joe, a network engineer, is attempting to install wireless in a large work area. He installs the access point in the middle of the work space. When testing, he notices a -60dB reading on one side of the room and a -92dB reading on the other side. Which of the following is MOST likely the issue?
D. Incorrect antenna type
Which of the following technologies should be used in high-throughput networks to reduce network overhead?
D. Jumbo frames
A network technician is helping an end user who is working on a spreadsheet for a very important client. The client can see the file on the remote share but is not able to open the document to print it. This issue is associated with which of the following OSI layers?
D. Layer 7
Which of the following is used to define the duration during which a client can use an IP address?
D. Lease time
Which of the following relies on metrics such as total number of connections or CPU/RAM usage to help maintain performance and availability?
D. Load balancing
A technician is responsible for configuring a new firewall. The hardware team has already installed, powered, and connected the system. Which of the following types of documentation should the technician utilize to complete the task?
D. Logical and physical diagrams
A network technician attempts to limit access to a wireless network by using WPA2 and a pre-shared key; however, employees have been sharing this key with others. Which of the following methods should the technician configure on the wireless access point to ensure only corporate systems can connect using the least amount of effort?
D. MAC filtering
A brokerage firm requires high-speed network connectivity between several buildings in the financial district. Which of the following topologies would BEST meet this requirement?
D. MAN
Before upgrading the firmware on several routers, a technician must verify the firmware file received is the same one the vendor provided. Which of the following should the technician use?
D. MD5 hash
A security administrator wants to implement the ability to prevent an authorized user from tailgating into the office building. Which of the following should be implemented?
D. Mantrap
A security administrator wants to implement the ability to prevent an unauthorized user from tailgating into the office building. Which of the following should be implemented?
D. Mantrap
A network administrator is configuring a new Internet connection. The ISP provided a fiber-optic handoff, but the companyג€™s firewall only supports copper Ethernet interfaces. The administrator wants to connect the devices as easily as possible. Which of the following would be the BEST way to provide the connectivity needed?
D. Media converter
Management requires remote access to network devices when the ISP is down. Which of the following devices would provide the BEST solution?
D. Modem
A network administrator has noticed many systems on the network have traffic that is anomalous and may be part of a botnet. The administrator wants to implement an access control method that requires a computer to have antivirus software installed before being granted network access. Which of the following should the administrator deploy?
D. NAC
Which of the following allows for file-level network storage?
D. NAS
Which of the following technologies is used when multiple Ethernet adapters work to increase speed and fault tolerance?
D. NIC teaming
A network engineer is trying to determine where to place a firewall based on the flow of traffic. Which of the following types of documentation would assist the engineer in doing this?
D. Network diagram
Which of the following routing conventions is known as a link-state protocol?
D. OSPF
A human resources manager notifies the IT manager the night before an employee will be terminated so the employeeג€™s access rights can be removed. Which of the following policies is being exercised?
D. Offboarding
A Chief Information Officer (CIO) is concentrated about an attacker gaining administrative access to the companyג€™s network devices. Which of the following is theMOST secure way to prevent this?
D. Out-of-band console router
A network technician receives a call from a branch office about a problem with its wireless connectivity. The user states the office is hosting a large meeting that includes some online training with local businesses. The guest users have all brought devices to connect to the guest network at the branch office. All users are connected to a single WAP and are reporting that connections keep dropping and network spends are unusable. Which of the following is the MOST likely cause of this issue?
D. Overcapacity
A junior technician is setting up a voice control device so the Chief Executive Officer (CEO) will be able to control various things in the office. Of which of the following types of IoT technologies is this an example?
D. PAN
A new building needs to be joined to an existing network, but management has decided that running fiber is too expensive. Since the buildings are about 1000ft(305m) apart, the IT department has been asked to propose alternatives. Which of the following is the BEST device to add to each building to facilitate the extension of the network while meeting budgetary demands?
D. PRP wireless
Which of the following is used to purposely attack a system to exploit vulnerabilities?
D. Penetration testing
A network technician installed a new host on the network. The host is not connecting to the companyג€™s cloud servers. The technician attempts to ping a server using the IP address with no success. Checking the IP address using ipconfing displays: Which of the following should the technician perform NEXT to determine where the issue is located?
D. Perform a tracert command to locate where the packet is dropped.
A company is redesigning its office to remove the divider walls between desks and create an open collaboration area. All network cables are run through the divider walls, and a new wireless network will be installed. Which of the following sets of documents will need to be revised based on the new configuration?
D. Physical network layout and port locations
Greater bandwidth and availability are required between two switches. Each switch has multiple 100Mb Ethernet ports available. Which of the following should a technician implement to help achieve these requirements?
D. Port aggregation
A technician has been assigned to capture packets on a specific switchport. Which of the following switch features MUST be used to accomplish this?
D. Port mirroring
At which of the following layers of the OSI model does compression occur?
D. Presentation
Which of the following MUST be installed on an employeeג€™s computer if the remote access VPN implements an SSL VPN with PKI authentication?
D. Private certificate
A network technician is assisting a user who has relocated to a newly constructed office space. The user has no network connectivity. A cable tester was used on the port and is reporting that the pairs are open. Which of the following should be used to remedy this problem?
D. Punchdown tool
A network technician is supporting a library system that wants to streamline the checkout of books and media. Which of the following technologies will the technician MOST likely use to facilitate this initiative?
D. RFID
A network administrator is assigned to run and connect a Cat 6e Ethernet cable between two nodes in a datacenter. Which of the following connector types should the network administrator use to terminate this cable?
D. RJ-45
An attacker quickly gains administrative access to a network device. Which of the following MOST likely allowed the attacker to guess the password?
D. Rainbow tables
A network administrator notices a wireless network with the SSID HOME-33BC-5G that has a high signal strength and open authentication. When the administrator connects to the SSID, corporate servers can be accessed. Which of the following has the network administrator discovered?
D. Rogue AP
A network administrator needs to transmit traffic to geographically diverse sites to improve performance. Which of the following devices would BEST direct traffic to the remote sites?
D. Router
A new technician is connecting an access switch to a distribution switch uplink in a datacenter using fiber cables. Which of the following are transceivers the technician should use to perform this job? (Choose two.)
D. SFP E. GBIC
A network administrator wants to reduce the amount of time each user takes to log in to different systems in the network. Which of the following would reduce the time spent authenticating?
D. SSO
An ISP technician frequently needs to administer a router remotely in the event of a configuration error or WAN outage. Which of the following technologies would facilitate the required connectivity?
D. Secure Shell
A network administrator is setting up a wireless network with poor security for a computer science class to hack. Which of the following security methods would beMOST easily circumvented?
D. Shared key
Which of the following physical security devices is used to prevent unauthorized access into a datacenter?
D. Smart card reader
A switch has detected duplicate broadcast messages sourced from a second port. The broadcasts continue to be transmitted and duplicated until the amount of traffic causes severe performance issues. Which of the following should be configured to prevent this behavior?
D. Spanning tree
Ann, a network technician, is told to disable unused ports on a switch. Another technician tells her the policy is to move those ports into a non-routed VLAN and leave them enabled. Which of the following documents should Ann use to ensure she is employing the correct method?
D. Standard operating procedure
A network administrator frequently needs to assist users with troubleshooting network hardware remotely, but the users are non-technical and unfamiliar with network devices. Which of the following would BEST help the administrator and users during hands-on troubleshooting?
D. Standard operating procedures
Which of the following can be used to prevent unauthorized employees from entering restricted areas?
D. Swipe badges
A technician purchasing equipment for a company has determined that several new employees will require new wired workstations. Which of the following is the network technician likely to recommend to add the employees to the existing infrastructure?
D. Switch
Which of the following protocols is associated with a three-way handshake?
D. TCP
A company recently completed construction of a new remote office. The network administrator needs to set up new network devices, such as printers and a local file server, at the remote location. The new devices need to be configured on the same Layer 2 network as the main office. Which of the following should the network administrator configure?
D. TLS VPN
A client requests a new dynamic address and receives a response from two DHCP servers. Which of the following addressing information would the client use?
D. The IP addressing information received first
A customer has submitted a request for a new wireless connection in the main office so visitors can reach the Internet to check their email. The customer is concerned about security and does not want visitors to be able to access the internal finance server. Which of the following BEST describes the correct configuration?
D. The LAN and WLAN should be configured in separate zones with a firewall in between.
An entire enterprise cannot access a specific website. The network technician knows the website was accessible last week. The technician can also ping the website. Which of the following is the technician MOST likely to find upon investigation?
D. The SSL certificate has expired.
A web server administrator has changed the domain registrars A record for the companys website. External users can reach the website, but internal users are unable to do so. The web server is accessible by typing the internal IP into a web browser. Which of the following is the reason why the web server cannot be accessed?
D. The corporate DNS server has not been updated.
A network technician does not have access to the GUI of a server and needs to adjust some network properties. Given the command: route add 0.0.0.0 mask 0.0.0.0 192.169.1.222 metric 1Which of the following is the technician attempting to alter?
D. The technician is setting the default gateway.
A company has just installed a new cloud VoIP solution; however, users occasionally report poor call quality or dead air being present. Which of the following describes the NEXT troubleshooting step the technician should take?
D. The technician should run ping tests on the Internet line to monitor for packet loss and latency
A small company is requesting a quote to refresh its wireless network. The company currently runs 60 autonomous APs and has plans to increase wireless density by 50% in the near future. The requirements state that the chosen solution should significantly decrease the management overhead of the current wireless network.Which of the following should the vendors recommend in response to the quote request?
D. The use of lightweight APs with a wireless controller
A network technician is attempting to troubleshoot a connectivity issue. The issue is only reported during the evening hours, and only a single workstation loses connectivity. Which of the following is the MOST likely cause of the issue?
D. The user has violated the AUP, and Internet access has been restricted.
A network technician wants to gain a better understanding of network trends to determine if they are over capacity. Which of the following processes should the technician use?
D. Traffic analysis
Which of the following OSI layers do TCP and UDP operate within?
D. Transport
A school is implementing a wireless network and wants to ensure there is adequate coverage. The gymnasium has thick cinder-block walls, and there are several offices adjacent to it. Which of the following should the network technician recommend to ensure full coverage while minimizing the total number of APs purchased?
D. Use a spectrum analyzer to generate a heat map of the gymnasium to pinpoint AP placement.
To which of the following does a BYOD policy pertain?
D. Use of personal equipment on the company network
A network technician is investigating a device that has been reported as responding slowly. Which of the following should the technician check FIRST?
D. Utilization
To increase speed and availability, a high-traffic web application was split into three servers recently and moved behind a load balancer. Which of the following should be configured on the load balancer to allow for a single destination?
D. VIP
Which of the following physical security devices is used to detect unauthorized server room access?
D. Video surveillance
Which of the following can be used to enable and translate the communication between legacy non-IP phone systems with solutions for voice communications that can run over the Internet?
D. VoIP gateway
A network technician receives an update in an RSS feed that a new exploit was released for specific hardware used on the network. After verifying the vulnerability with the vendor, the network technician discovers the vulnerability was patched almost two years ago. Which of the following techniques should be implemented to discover out-of-date firmware in the future?
D. Vulnerability scanning
A network administrator is installing a campus network of two routers, 24 switches, 76 APs, and 492 VoIP phone sets. Which of the following additional devices should the administrator install to help manage this network?
D. Wireless controller
A flood disables the equipment in a companyג€™s server room. When implementing the disaster recovery plan, all operations are immediately transitioned to another location with momentary downtime. This is an example of a:
D. hot site.
A server administrator is building an email server. To protect the corporate/internal network from external users, the email server should be placed:
D. in the DMZ.
A wireless technician needs to deploy a single 802.11 standard that supports both 2.4GHz and 5GHz frequencies with up to 40MHz channel widths. Which of the following wireless standards should the technician configure?
D. n
A company hires another firm to test the integrity of its information security controls. This is an example of:
D. penetration testing
A customer is reporting difficulty connecting some devices after replacing a wireless router with a new wireless 802.11ac router. The SSID, encryption and password are the same as the previous router. A technician goes on-site and notices the devices that are no longer connecting appear to be several years ago.Which of the following is MOST likely the problem?
D. there is a frequency mismatch.
A technician is upgrading the firmware on an older KVM switch. The specifications call for a serial port to connect to the computer on one side, and an Ethernet jack to connect to the switch on the other side. Which of the following connectors does the technician need for this cable? (Choose two.)
DB-9 RJ-45
In which of the following ways does a DDoS attack differ from a spoofing attack?
DDoS attacks are launched from multiple hosts
An end-user device requires a specific IP address every time it connects to the corporate network; however, corporate policy does not allow the use of static IP addresses. Which of the following will allow the request to be fulfilled without breaking the corporate policy?
DHCP reservation
A network administrator wants to ensure sensitive data is not exfiltrated from the system electronically. Which of the following should be implemented?
DLP
A company plans to deploy a web server securely on the network to be accessible from the Internet. In which of the following locations should the web server be placed?
DMZ
A network technician installs a web server on the firewall. Which of the following methods should the technician implement to allow access to outside users without giving access to the inside network?
DMZ
Which of the following protocols is used during web browsing to resolve website names?
DNS
A network technician is building a network for a small office. The office currently has cable TV and now requires access to the Internet without adding any cabling other than what is already in place. Which of the following solutions should the technician install to meet these requirements?
DOCSIS modem
Which of the following is used to classify network data for the purpose of providing QoS?
DSCP
At which of the following OSI model layers does the Layer 2 Tunneling Protocol operate?
Data link
Users are reporting their network is extremely slow. The technician discovers pings to external host have excessive response times. However, internal pings to printers and other PCs have acceptable response times. Which of the following steps should the technician take NEXT?
Determine if any network equipment was replaced recently
A junior technician deployed new computers in a company, and users are reporting issues with file transfers to network shares being slower than with the previous computers. The network administrator verifies the switch's gigabit ports are set to autonegotiate. Which of the following should the administrator perform NEXT to determine the issue?
Determine if the NIC speed on the computers is configured correctly.
An office user cannot access local network drives but has full access to the Internet. A technician troubleshoots the issue and observes the following output of the ipconfig command: Which of the following would MOST likely allow the network drives to be accessed?
Disable the WLAN adapter
A network technician needs to implement a network security control on a switch. The solution needs to be non-invasive and prevent guests and unauthorized users from accessing the company's network. Which of the following would BEST meet these requirements?
Disabling unused ports
A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the companys firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)
Document the reason for the request Follow the companys approval process for the implementation
An ISP technician gets a call from a business that just changed equipment but can no longer connect to the Internet. The technician checks the ARP table on theISP switch, and there is no corresponding MAC address present. Instead, the entry is ג€Incompleteג€. Which of the following could cause this condition?
Duplex/Speed mismatch
A security manager asks the network administrator to block VoIP protocols using the default ports on the corporate firewall. Which of the following ports should be blocked to prevent this type of traffic from going outside the companyג€™s network? (Choose three.)
E. 1720 F. 5060 G. 5061
A network technician is installing a wireless solution. The solution needs to support new and legacy wireless network clients at the maximum possible speed.Which of the following wireless standards should the technician install?
E. 802.11n
A small company has decided to use a single virtual appliance to filter spam as well as reverse proxy and filter traffic to its internal web server. Which of the following has the company MOST likely deployed?
E. Content filter
A VoIP device is not getting power at a new userג€™s desk. The technician tests the components with a PoE injector at the switch and resolves the issue. Which of the following is the MOST likely cause of the issue?
E. Damaged cable
In which of the following scenarios should a technician use a cross-over cable to provide connectivity?
E. PC to PC
Which of the following would be BEST for continually monitoring and alerting of possible attacks on a network?
E. Reviewing daily logs
Which of the following ports should a network technician open on a firewall to back up the configuration and operating system files of a router to a remote server using the FASTEST method possible?
E. UDP port 69
A network technician has discovered a rogue access point placed under an empty cubicle desk. Which of the following should the technician perform to ensure another cannot be placed on the network?
Enable DHCP guard to detect rogue servers
A technician is setting up a public guest network for visitors to access the Internet that must be separate from the corporate network. Which of the following are theBEST steps for the technician to take with minimum overhead configuration? (Choose two.)
Enable SSID broadcasting to identify the guest network Configure visitor devices to use static IP addresses
The backup server connects to a NAS device using block-level storage over Ethernet. The performance is very slow, however, and the network technician suspects the performance issues are network related. Which of the following should the technician do to improve performance?
Enable jumbo frames on the NAS and server
A UTM is deployed on the external edge of the main corporate office. The office connects to the WAN port of the edge router. The edge router at the main office connects to the remote offices using GRE IPSec tunnels. A network administrator notices that a worm that was not detected by the UTM has spread from the remote sites into the corporate network. The UTM currently has traffic rules applied that should block the port used by the worm. Which of the following steps would MOST likely correct this issue?
Enable stateful inspection on the UTM
Which of the following BEST explains why a firewall would be subject to international export controls?
Encryption technology
A network technician is assisting a user who cannot connect to a wireless connection. The user is connecting to the correct SSID and has the correct pre-shared key. The technician verifies the WAP is working, and other clients are connected to it from the same location. Which of the following should the technician investigate?
Encryption type
Which of the following technologies provides a failover mechanism for the default gateway?
FHRP
An assistant systems analyst reports the following findings of an investigation of slow Internet connections in a remote office to the senior systems analyst: Which of the following devices is causing the issue?
Firewall
Which of the following devices should a network administrator configure on the outermost part of the network?
Firewall
A network technician is upgrading the software on a switch, but the switch will no longer boot after the upgrade. Which of the following should the network technician have verified before the upgrade?
Firmware file hash
A rural municipality has built an external public WiFi meshed network using omnidirectional antennas. After the initial build, the performance meets expectations, and the municipality enters a six-month pilot program in the fall. By the end of the pilot program in the spring, the performance has fallen dramatically. The pilot has a static number of users with no increases in usage from beginning to end. Which of the following would be the MOST likely reason for the performance issues?
Foliage creating absorption issues
Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?
Frame relay
Which of the following VPN technologies should a network technician utilize to tunnel IPv6 traffic and multicast over an IPv4 WAN link?
GRE
A network technician is deploying mobile phones for a companys sales staff. Salespeople frequently travel nationally and internationally to meet with clients, and often have to roam or switch cellular providers. Which of the following standards is the BEST option to fit the requirements?
GSM
A technician logs onto a system using Telnet because SSH is unavailable. SSH is enabled on the target device, and access is allowed from all subnets. The technician discovers a critical step was missed. Which of the following would allow SSH to function properly?
Generate new keys
A network engineer is configuring wireless access for guests at an organization. Access to other areas in the organization should not be accessible to guests.Which of the following represents the MOST secure method to configure guest access to the wireless network?
Guests should log into a separate wireless network using a captive portal
A switch at a remote site suddenly appears to be inaccessible. No configuration changes were made. An engineer confirms with the office attendant that the switch is powered on, and there are LEDs showing green and amber colors. However, the SFP for the fiber connection from the switch to the router shows no lighted LED. After replacing the cable and SFP with new ones, the LED still does not light up, and no connection is made. Which of the following is the MOST likely issue?
Hardware failure
Which of the following is a system of notation that uses base 16 rather than base 10?
Hex
A network administrator is setting up a web-based application that needs to be continually accessible to the end users. Which of the following concepts would BEST ensure this requirement?
High availability
A SaaS provider has decided to leave an unpatched VM available via a public DMZ port. With which of the following concepts is this technique MOST closely associated?
Honeypot
Which of the following is a vulnerable system designed to detect and log unauthorized access?
Honeypot
A network technician is assisting the security team with some traffic captures. The security team wants to capture all traffic on a single subnet between the router and the core switch. To do so, the team must ensure there is only a single collision and broadcast domain between the router and the switch from which they will collect traffic. Which of the following should the technician install to BEST meet the goal?
Hub
Which of the following technologies would allow a technician to install and run multiple guest operating systems on host hardware?
Hypervisor
Client PCs are unable to receive addressing information from a newly configured interface on a router. Which of the following should be added to allow the clients to connect?
IP helper
The security manager reports that individual systems involved in policy or security violations or incidents cannot be located quickly. The security manager notices the hostnames all appear to be randomly generated characters. Which of the following would BEST assist the security manager identifying systems involved in security incidents?
Implement a standardized UNC
A network administrator is installing a new IDS device that will collect logs and alert the administrator of breaches. The network infrastructure includes a modern, a firewall, and core and access switches. The modem is ISP provided and only forwards packets from the data circuit. The firewall handles stateful packet inspection, the ACL, and application layer filtering. Which of the following describes where the administrator should install the IDS device on the network to collect the MOST relevant information?
In front of the modem and firewall
A network technician receives a call from a user in the accounting department stating that Internet connectivity has been lost after receiving a new workstation. No other users in accounting are reporting similar issues. The network technician is able to ping the machine from the accounting departments router, but is not able to ping the machine from the IT network. Which of the following is MOST likely the cause?
Incorrect default gateway
A small business developed an in-house application that is very sensitive to network latency when a communicating between servers. Due to a lack of funds, the business had to build its own network for workstations and servers. Now a network administrator must redesign the network due to performance issues with the application. Which of the following would be the MOST cost effective for the administrator to recommend?
Install 10Gb Ethernet NICs in the servers
A technician is installing a new wireless badging system on a hospital network. The requirements of the badging system are for it to have its own SSID and low power levels. The badging system has to cover 99.9% of the hospital. Which of the following is the BEST action to take to meet the system requirements?
Install additional WAPs
Which of the following BEST explains why a network engineer would use a wireless mesh network when connecting sensors to a sensor gateway?
It creates various paths to a particular destination.
A company has hundreds of nodes on a single subnet and has decided to implement VLANs. Which of the following BEST describes the benefit of this approach?
It segments broadcast domains in the network infrastructure
A new application is being deployed. The application team has asked the network team to monitor network performance and create alerts if fluctuations in the round-trip time for that traffic occur. Which of the following should the network team monitor to meet this requirement?
Jitter
A network technician is connecting two switches together. Which of the following protocols should the technician use to increase speed and fault tolerance?
LACP
A technician is replacing a switch at a branch office and discovers the existing backbone cable does not fit in the new switch. The fiber patch panel has circular connections. The new switch has a transceiver that accepts a smaller square adapter of two strands. Which of the following patch cables would the technician need to complete the installation?
LC to ST
A large metropolitan city is looking to standardize the ability for police department laptops to connect to the city government's VPN. The city would like a wireless solution that provides the largest coverage across the city with a minimal number of transmission towers. Latency and overall bandwidth needs are not high priorities. Which of the following would BEST meet the city's needs?
LTE
According to the OSI model, at which of the following layers is data encapsulated into a packet?
Layer 3
A network engineer wants to segment the network into multiple broadcast domains. Which of the following devices would allow for communication between the segments?
Layer 3 switch
Joe, an ex-employee from accounting, changed the configurations on several network devices on his last day of work. Which of the following is the MOST likely reason a non-IT employee was able to gain access to network devices?
Left default passwords
The server team has just installed an application across three different servers. They are asking that all requests to the application are spread evenly across the three servers. Which of the following should the network team implement to fulfil the request?
Load balancer
A company has a web-based application that is used by many different departments. The company has experienced some overload of resources on the database server. The network administrator implements a network device in between the servers and the database. Which of the following BEST describes the purpose of this device?
Load balancing and providing high availability
As part of a new datacenter upgrade project, the security manager has asked for additional physical security to prevent asset theft. Which of the following technologies should be implemented?
Locks on devices
A technician is diagnosing an issue with a new T1 connection. The router is configured, the cable is connected, but the T1 is down. To verify the configuration of the router, which of the following tools should the technician use?
Loopback adapter
Which of the following is a reason why a business may be hesitant to move sensitive data to a SaaS cloud service?
Loss of full control over data resources
Which of the following would allow a device to maintain the same IP address lease based on the physical address of the network card?
MAC address reservation
A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer being asked to implement?
MAN
A network technician is installing a wireless network for a small medical office. The doctors need to download high resolution x-rays quickly with minimal latency.Which of the following technologies should be utilized?
MIMO
When enabling jumbo frames on a network device, which of the following parameters is being adjusted?
MTU
Which of the following DNS records needs to be configured for SMTP traffic?
MX
An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organizations network. As part of the attack, the analyst launches a fake access point matching the SSID of the organizations guest access network. When a user connects to the fake access point, the analyst allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for latest analysis and exploitation. Which of the following attacks has the analyst successfully performed in this scenario?
Man-in-the-middle
When choosing a type of storage that integrates with the existing network infrastructure, the storage must be easily configurable to share files and can communicate with all existing clients over TCP/IP. Which of the following is the BEST technology for the network administrator to implement?
NAS
A network technician is implementing a solution on the network to hide the workstation internal IP addresses across a WAN. Which of the following is the technician configuring?
NAT
In a service provider network, a company has an existing IP address scheme. Company A's network currently uses the following scheme: Subnet 1: 192.198.1.0/26 Subnet 2: 192.198.1.65/26 Company b uses the following scheme: Subnet 1: 192.168.1.50/28 -The network administrator cannot force the customer to update its IP scheme. Considering this, which of the following is the BEST way for the company to connect these networks?
NAT
Which of the following can be used to decrease latency during periods of high utilization of a firewall?
NIC teaming
A user reports difficulties connecting a PC to a wired network. The PC connects to an IP phone, which is working correctly. A network technician can verify that other devices successfully connect to the phone. At which of the following layers of the OSI model is the problem MOST likely located?
Network
A penetration tester has been tasked with reconnaissance to determine which ports are open on the network. Which of the following tasks should be done FIRST?(Choose two.)
Network scan Tracert
A building is equipped with light sensors that turn off the fluorescent lights when natural light is above a certain brightness. Users report experiencing network connection issues only during certain hours. The west side of the building experiences connectivity issues in the morning hours and the east side near the end of the day. At night the connectivity issues affect the entire building. Which of the following could be the cause of the connectivity issues?
Network wiring is run perpendicular to electrical conduit
Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are intermittent but seem to occur most often around midday. Which of the following is the MOST likely cause?
Not enough DHCP addresses have been allotted
A network administrator is configuring a link-state routing protocol for traffic. Which of the following routing protocols should be implemented?
OSPF
As part of a transition from a static to a dynamic routing protocol on an organizations internal network, the routing protocol must support IPv4 and VLSM. Based on those requirements, which of the following should the network administrator use? (Choose two.)
OSPF IS-IS
A technician is troubleshooting a point-to-point fiber-optic connection. The technician is at a remote site and has no connectivity to the main site. The technician confirms the switch and the send-and-receive light levels are within acceptable range. Both fiber SFPs are confirmed as working. Which of the following should the technician use to reveal the location of the fault?
OTDR
A network engineer is designing a new network for a remote site. The remote site consists of ten desktop computers, ten VoIP phones, and two network printers.In addition, two of the desktop computers at the remote site will be used by managers who should be on a separate network from the other eight computers.Which of the following represents the BEST configuration for the remote site?
One router connected to one 24-port switch configured with three VLANS: one for the managerג€™s computers and printer, one for the other computers and printer, and one for the VoIP phones
A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a non-standard socket. Which of the following types of rules is the administrator implementing?
PAT
A Chief Information Officer (CIO) wants to move some IT services to a cloud service offering. However, the network administrator still wants to be able to control some parts of the cloud serviceג€™s networking components. Which of the following should be leveraged to complete this task?
PaaS
A network technician is diagnosing a time-out issue generated from an end users web browser. The web browser issues standard HTTP get and post commands to interact with the website. Given this information, the technician would like to analyze the entire TCP handshake of the HTTP requests offline. Which of the following tools would allow the technician to view the handshake?
Packet analyzer
A company has multiple site-to-site VPN connections using a pre-shared key. The Chief Information Security Officer (CISO) is concerned about the long-term security of the tunnels and has asked the network technicians to develop a plan to ensure the best security of the tunnels. Which of the following should the network technicians implement?
Perform annual key rotations on the site-to-site VPNs.
Users have been experiencing slow network response times, and management has asked the network technician to provide evidence of network improvement.After optimizing the network, which of the following would be required?
Performance baseline
A network technician is configuring a firewall access list to secure incoming connections to an email server. The internal address of this email server is192.168.1.143. The firewall should allow external email servers to send email to the email server. The email server also supports client access via a web browser.Only secure protocols should be used, and only the necessary ports should be open. Which of the following ACL rules should be configured in the firewalls WAN port? (Choose two.)
Permit 192.168.1.143.443 Permit 192.168.1.143.587
A contractor is setting up and configuring conference rooms for a convention. The contractor sets up each room in the conference center to allow wired Internet access going to individual tables. The contractor measured the distance between the hotels patch panel to the jack, and the distance is within Cat 5e specifications. The contractor is concerned that the room will be out of specification if cables are run in each room from the wall jacks. Which of the following actions should the contractor take to ensure the cable runs meet specifications and the network functions properly?
Place a switch at the hotels patch panel for connecting each rooms cables
A network technician needs to separate a web server listening on port 80 from the internal LAN and secure the server from the public Internet. The web server should be accessible to the public Internet over port 80 but not the private LAN. Currently, the network is segmented with a network-based firewall using the following IP addressing scheme on each interface: Which of the following ones should the technician use to place the web server and which of the following firewall rules should the technician configure?
Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept traffic over port 80 designated to the web server
An administrator is moving to a new office. There will be several network runs through the ceiling area of the office. Which of the following is the BEST to utilize in these areas?
Plenum-rated cabling
A typical cell tower will have microwave and cellular antennas. Which of the following network topologies do these represent? (Choose two.)
Point-to-point Mesh
A technician wants to prevent an unauthorized host from connecting to the network via Ethernet. Which of the following is a Layer 2 access control the technician should implement?
Port security
A customer wants a technician to implement a solution that will allow its critical on-site servers to continue to function in the event of an extended power outage.Which of the following should the technician recommend?
Power generator
The Chief Information Officer (CIO) has noticed the corporate wireless signal is available in the parking lot. Management requests that the wireless network be changed so it is no longer accessible in public areas, without affecting the availability inside the building. Which of the following should be changed on the network?
Power levels
A company recently upgraded all of its printers to networked multifunction devices. Users can print to the new devices, but they would also like the ability to scan and fax files from their computers. Which of the following should the technician update to allow this functionality?
Printer firmware
Which of the following physical security controls is MOST likely to be susceptible to a false positive?
Proximity reader
Branch users are experiencing issues with videoconferencing. Which of the following will the company MOST likely configure to improve performance for these applications?
Quality of service
A device operating at Layer 3 of the OSI model uses which of the following protocols to determine the path to a different network?
RIP
A company has completed construction of a new datacenter, and the IT staff is now planning to relocate all server and network equipment from the old site to the new site. Which of the following should the IT staff reference to determine the location of the equipment being moved?
Rack diagrams
An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business trips. Which of the following is needed to protect BOTH the employee and the company?
Real-time remote monitoring of the phones activity and usage
A network administrator has a monitoring system in place that is currently polling hundreds of network devices at regular intervals. The continuous polling is causing high CPU utilization on the server. Which of the following tasks should the administrator perform to resolve the CPU issue while maintaining full monitoring capabilities?
Remove SNMP polling and configure SNMP traps on each network device
A technician has racked a new access switch and has run multimode fiber to a new location. After installing an extended-range 10Gb SFP in the core switch, the technician installed a 10Gb SFP in the access switch and connected the port to the new extension with a fiber jumper. However, the link does not display, and the technician cannot see light emitting from the core switch. Which of the following solutions is MOST likely to resolve the problem?
Replace the jumpers with single-mode fiber
A network technician is installing a new fiber-optic connection between two buildings on a campus network. When the network technician connects the fiber at the second location, the interface link light does not light up. Which of the following should the technician do NEXT?
Reverse the fiber pair.
After a server outage, a technician discovers that a physically damaged fiber cable appears to be the problem. After replacing the cable, the server will still not connect to the network. Upon inspecting the cable at the server end, the technician discovers light can be seen through one of the two fiber strands. Which of the following should the technician do FIRST to reconnect the server to the network?
Reverse the fiber strands of the cable and reconnect them to the server
A technician is setting up a direct connection between two older PCs so they can communicate but not be on the corporate network. The technician does not have access to a spare switch but does have spare Cat 6 cables, RJ-45 plugs, and a crimping tool. The technician cuts off one end of the cable. Which of the following should the technician do to make a crossover cable before crimping the new plug?
Reverse the wires leading to pins 1 and 3
A network technician receives a call from a user who is experiencing network connectivity issues. The network technician questions the user and learns the user brought in a personal wired router to use multiple computers and connect to the network. Which of the following has the user MOST likely introduced to the network?
Rogue DHCP server
Which of the following should a technician use to keep the STP topology predictable and consistent?
Root guard
A network technician is able to connect the switches between two offices, but the offices cannot communicate with each other, as each office uses a different IP addressing scheme. Which of the following devices needs to be installed between the switches to allow communication?
Router
Which of the following MUST be implemented to share metrics between routing protocols within the same router?
Routing table
A network technician is considering opening ports on the firewall for an upcoming VoIP PBX implementation. Which of the following protocols is the technicianMOST likely to consider? (Choose three.)
SIP H.323 RTP
A network administrator it concerned about the management traffic between a machine and the corporate router. Which of the following protocols should the administrator use to prevent a security breach?
SSH
A network technician wants to remotely and securely access the desktop of a Linux workstation. The desktop is running remote control software without encryption. Which of the following should the technician use to secure the connection?
SSH in tunnel mode
A company needs to create a new website for the delivery of secure content to and from specific customers. The Chief Information Officer (CIO) states as a requirement the creation of a secure connection between the client's machine and the website every time the content is accessed. This should be accomplished without requiring the installation of any client software. Which of the following should be used in this scenario?
SSL
Which of the following VPN protocols establishes a secure session that can be initiated using a browser?
SSL VPN
A network technician is installing a new network switch is looking for an appropriate fiber optic patch cable. The fiber optic patch panel uses a twist-style connector. The switch uses a SFP module. Which of the following connector types should the fiber patch cable have?
ST
A network engineer needs to connect two network switches with a gigabit link. The proposed route to run the 164ft (50m) cable is directly underneath a large electrical generator. Which of the following cable types would BEST fit the needs of the network engineer?
STP
A network technician is working on a proposal for email migration from an on-premises email system to a vendor-hosted email in the cloud. The technician needs to explain to management what type of cloud model will be utilized with the cloud-hosted email. Which of the following cloud models should the technician identify in the proposal?
SaaS
A forensic first responder arrives at the scene where an employee is suspected to have committed a computer-based crime. Which of the following should the first responder do FIRST?
Secure the area
A network technician has just implemented a new wireless network that requires clients to use a WEP key for access. The technician is now required to make changes to ensure the network uses the strongest encryption available. After the changes are implemented, several users report being unable to connect. Which of the following is the MOST likely cause?
Security type mismatch
A technician is dispatched to replace an access point that has failed. The device is preconfigured with the correct SSID and passphrase. When the user tries to connect to the SSID, the connection fails. Which of the following is the MOST likely cause of the issue?
Security type mismatch
A network administrator is setting up several IoT devices on a new VLAN and wants to accomplish the following: 1. Reduce manual configuration on each system. 2. Assign a specific IP address to each system. 3. Allow devices to move to different switchports on the same VLAN. Which of the following should the network administrator do to accomplish these requirements?
Set up a reservation for each device.
A new employee is learning how to use multiple company applications. Upon logging in to one application, the employee notices the other applications do not require authentication. Which of the following explains the reason why this is happening?
Single sign-on is being used
A network technician is troubleshooting wireless network issues in a crowded office complex and suspects there is interference from nearby wireless networks.Which of the following should the technician perform to discover possible interference?
Site survey
A user has just received a call from someone claiming to be from the company help desk and asking for password information to assist the user with a password reset. Company policy, however, states the help desk will not ask for password information. Which of the following has the user just experienced?
Social engineering
A network technician has just configured NAC for connections using Cat 6 cables. However, none of the Windows clients can connect to the network.Which of the following components should the technician check on the Windows workstations? (Choose two.)
Start the Wired AutoConfig service in the Services console Enable IEEE 802.1x Authentication in Network Interface Card Properties
Which of the following security mechanisms dynamically assigns a Layer 2 address and restricts traffic only to that Layer 2 address?
Sticky MAC
A network technician is required to install a network device to provide service to an office area. The office area has 23 users and two printers that must be able to connect to the file server in a different building. Which of the following network devices should the technician use?
Switch
Which of the following WAN technologies is MOST preferred when developing a VoIP system with 23 concurrent channels?
T1
A network administrator configures an email server to use secure protocols. When the upgrade is completed, which of the following ports on the firewall should be configured to allow for connectivity? (Choose three.)
TCP 587 TCP 993 TCP 995
A network administrator walks into a datacenter and notices an unknown person is following closely. The administrator stops and directs the person to the security desk. Which of the following attacks did the network administrator prevent?
Tailgating
A technician is planning a remote-access strategy to manage routers and switches on a dedicated management network. The management network is segregated from the production network and uses site-to-site VPN connections. Some of the equipment does not support encryption. Which of the following should the technician choose that all the equipment would support?
Telnet
A network technician is troubleshooting an issue and has established a theory of probable cause. Which of the following steps should the network technician take NEXT?
Test the possible solution
A technician is trying to configure a previously owned WAP. The technician successfully logs into the administrative console and attempts to input the IP address on the WAP. However, the WAP is not accepting the command. Which of the following is causing the problem?
The LWAPP image is installed on the WAP
A computer lab on a campus network was recently reconfigured using recycled network cables. One of the 24 computers in the lab is unable to connect to the network after the upgrade. A network technician successfully uses the cable in question to connect directly to another computer. Which of the following is MOST likely the issue with the cable?
The cable is a crossover cable
A network technician is troubleshooting a PC that cannot access the Internet. However, the PC responds to ICMP echo requests from the same subset. Which of the following is the MOST likely reason the PC cannot communicate externally?
The default gateway is incorrect.
A consultant is designing a new network for a company that will be hosting its own email and web servers. The company wants to ensure there are separate devices to protect the internal network from the DMZ and the DMZ from the Internet. Which of the following would provide this protection?
The in-line installation of two firewalls to divide the Internet to the DMZ and the DMZ to the LAN.
A technician is called to a customer site because the modem has failed and needs to be replaced. The technician connects the existing firewall to a modem taken from another customer site and ensures the users can reach the Internet. That night, a remote vendor tries to transfer a file to the customer's server using FTP but is unable to make the connection. There were no issues the previous night. Which of the following is the MOST likely cause of the problem?
The modern may have its own built-in firewall that is interfering with the communications.
A network administrator wishes to ensure there are no unnecessary open communication paths into a server. Using a port scanner, the administrator finds that ports are reported as closed. Which of the following BEST explains this response?
The ports are associated with deprecated services
A network administrator configures a router with the following IP address information:Gigabit Ethernet 1 Interface: 10.10.0.1/24Serial 0 Interface: 10.10.0.253/30Clients are connected to a switch on the gigabit Ethernet interface; the ISP is connected to the Serial 0 interface. When the router configuration is complete and client devices are reconfigured, all clients report that they are unable to connect to the Internet. Which of the following is the MOST likely reason?
The router was configured with an incorrect subnet mask
A network administrator is testing connectivity at a new corporate site. The site has a wireless guest as well as a wired employee network. After verifying connectivity, the administrator checks link speeds by using a speed testing website. The speed testing website shows lower download and upload speeds for the wired network than the wireless network. Which of the following is the MOST likely explanation?
The testing server for the wired network was farther away
The IT manager at a small firm is in the process of renegotiating an SLA with the organizations ISP. As part of the agreement, the organization will agree to a dynamic bandwidth plan to provide 150Mbps of bandwidth. However, if the ISP determines that a host on the organizations internal network produces malicious traffic, the ISP reserves the right to reduce available bandwidth to 1.5 Mbps. Which of the following policies is being agreed to in the SLA?
Throttling
A single PRI can deliver multiple voice calls simultaneously using which of the following Layer 1 technologies?
Time division multiplexing
A network technician is troubleshooting an end-user connectivity problem. The network technician goes to the appropriate IDF but is unable to identify the appropriate cable due to poor labeling. Which of the following should the network technician use to help identify the appropriate cable?
Tone generator
A site was hit with ransomware on two occasions in the past month. Which of the following would be the BEST solution for a technician who wants to reduce this frequency?
UTM appliance
A customer has requested Ethernet cabling for a new office building. A technician is dispatched to perform a site survey and does not note any special considerations for the installation. Which of the following cable types will the technician MOST likely recommend for this installation?
Unshielded twisted pair
A technician replaces a failed router with a spare that has been in inventory for some time. After attempting to enable HTTPS on the spare router, the technician discovers the feature is unavailable. The support office was able to connect to the previous router. Which of the following actions should the technician perform to enable HTTPS access for the support team?
Update the firmware of the spare router
A telecommunications provider has just deployed a new OC-12 circuit at a customer site. While the circuit showed no errors from the provider end to the customers demarcation point, a network administrator is trying to determine the cause of dropped packets and errors on the circuit. Which of the following should the network administrator do to rule out any problems at Layer 1? (Choose two.)
Use a loopback at the demark and router, and check for a link light Use an OTDR to validate the cable integrity
A network technician notices the site-to-site VPN and Internet connection have not come back up at a branch office after a recent power outage. Which of the following is an out-of-band method the technician would MOST likely utilize to check the branch officeג€™s router status?
Use a modem to console into the router
A malicious user sent double-tagged frames on an 802.1Q-enabled port and immediately gained access to additional network resources. Which of the following attacks did the malicious user successfully execute?
VLAN hopping
Which of the following BEST describes the differences between VLAN hopping and session hijacking?
VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a users web connection to execute commands
A network administrator needs to bring a new building online that houses multiple departments. The departments vary in size, with the smallest having 25 hosts and the largest having 140 hosts. When designing the addressing scheme for the new building, which of the following should the network administrator use lo limit the number of wasted IP addresses?
VLSM
Which of the following components should be used to provide interconnectivity between virtual machines in distinct broadcast domains inside the hypervisors environment?
Virtual router
A network technician has implemented ACLs to limit access to cloud-based file storage. Which of the following security mechanisms has the technician enforced?
WAF
A wireless administrator has configured a secure wireless network that can only be associated to specific domain accounts. This was done to help mitigate any ricks associated with the wireless signal propagating outside of the facility. Which of the following has no administrator implemented?
WPA2
A network technician receives a spool of Cat 6a cable and is asked to build several cables for a new set of Ethernet runs between devices. Which of the following tools are MOST likely needed to complete the task? (Choose three.)
Wire stripper Cable crimper RJ-45 connectors
Which of the following provides the ability to deploy consistent access point configurations from a central location?
Wireless controller
Which of the following devices, if implemented, would result in decreased administration time of an 802.11 network running centralized authentication services?(Choose two.)
Wireless controller RADIUS server
A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not modify the laptop in any way, and the wireless Internet is functional on other users laptops. Which of the following issues should be reviewed to help the user to connect to the wireless network?
Wireless switch toggled off
A network administrator plans to install network connectivity at a new remote office location. The administrator is concerned about how to troubleshoot network connectivity issues and reconfigure the remote router. The technician should use __________.
a modem using POTS.
A network technician is configuring a wireless network at a branch office. Users at this office work with large files and must be able to access their files on the server quickly. Which of the following 802.11 standards provides the MOST bandwidth?
ac
A network administrator would like to collect information from several networking devices using SNMP. Which of the following SNMP options should a network administrator use to ensure the data transferred is confidential?
authpriv
A user from a remote office is reporting slow file transfers. Which of the following tools will an engineer MOST likely use to get detailed measurement data?
iPerf
A technician must determine if a web page users visits are connecting to a suspicious websites IP address in the background. Which of the following tools would provide the information on TCP connections?
netstat
The process of attempting to exploit a weakness in a network after being given permission by the company is known as:
penetration testing
A user checks an IP address using an external website. The address is different than the one the user sees when opening a command prompt and typing in ipconfig/all. The user does not understand why the two tools show different IP addresses. This is BEST explained by the interworking of:
public/private networks
A technician has installed a Linux server in the tax office. The server can access most of the resources on the network, but it cannot connect to another server that has a share for backup. The technician learns that the target server is on a different subnet. Which of the following tools should the technician use to ensure theLinux server can reach the backup location?
traceroute
Users are reporting Internet connectivity issues. The network administrator wants to determine if the issues are internal to the company network or if there is an issue with the ISP. Which of the following tools should be used to BEST determine where the outage is occurring?
traceroute
