N10-008 Exam 229qs (2022)
Number: 000-000
Passing Score: 800
Time Limit: 120 min
File Version: 1.0
Exam A
QUESTION 1
Which of the following is the physical topology for an Ethernet LAN?
A.
B.
C.
D.
Bus
Ring
Mesh
Star
Section: (none)
QUESTION 2
An IT director is setting up new disaster and HA policies for a company. Limited downtime is critical to
operations. To meet corporate requirements, the director set up two different datacenters across the country
that will stay current on data and applications. In the event of an outage, the company can immediately switch
from one datacenter to another.
Which of the following does this BEST describe?
A.
B.
C.
D.
E.
A warm site
Data mirroring
Multipathing
Load balancing
A hot site
Section: (none)
QUESTION 3
The management team needs to ensure unnecessary modifications to the corporate network are not permitted
and version control is maintained. Which of the following documents would BEST support this?
A.
B.
C.
D.
An incident response plan
A business continuity plan
A change management policy
An acceptable use policy
Section: (none)
QUESTION 4
4
Which of the following is MOST likely to generate significant East-West traffic in a datacenter?
A.
B.
C.
D.
A backup of a large video presentation to cloud storage for archival purposes
A duplication of a hosted virtual server to another physical server for redundancy
A download of navigation data to a portable device for offline access
A query from an IoT device to a cloud-hosted server for a firmware update
Section: (none)
QUESTION 5
5
A technician is troubleshooting a network switch that seems to stop responding to requests intermittently
whenever the logging level is set for debugging. Which of the following metrics should the technician check to
begin troubleshooting the issue?
A.
B.
C.
D.
Audit logs
CPU utilization
CRC errors
Jitter
Section: (none)
QUESTION 6
6
A network administrator is implementing OSPF on all of a company's network devices. Which of the following
will MOST likely replace all the company's hubs?
A.
B.
C.
D.
A Layer 3 switch
A proxy server
A NGFW
A WLAN controller
Section: (none)
QUESTION 7
7
A network administrator discovers that users in an adjacent building are connecting to the company's guest
wireless network to download inappropriate material. Which of the following can the administrator do to MOST
easily mitigate this issue?
A.
B.
C.
D.
Reduce the wireless power levels
Adjust the wireless channels
Enable wireless client isolation
Enable wireless port security
Section: (none)
QUESTION 8
8
Which of the following types of devices can provide content filtering and threat protection, and manage multiple
IPSec site-to-site connections?
A.
B.
C.
D.
E.
Layer 3 switch
VPN headend
Next-generation firewall
Proxy server
Intrusion prevention
Section: (none)
QUESTION 9
9
An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both
ends of the connection are configured for half duplex. Which of the following is the MOST likely cause of this
issue?
A. The link is improperly terminated
B. One of the devices is misconfigured
C. The cable length is excessive
D. One of the devices has a hardware issue
Section: (none)
QUESTION 10
10
A network administrator is configuring a load balancer for two systems. Which of the following must the
administrator configure to ensure connectivity during a failover?
A.
B.
C.
D.
E.
VIP
NAT
APIPA
IPv6 tunneling
Broadcast IP
Section: (none)
QUESTION 11
11
A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building.
Several APs are mounted in this office. The users report that the network connections frequently disconnect
and reconnect throughout the day.
Which of the following is the MOST likely cause of this issue?
A.
B.
C.
D.
The AP association time is set too low
EIRP needs to be boosted
Channel overlap is occurring
The RSSI is misreported
Section: (none)
QUESTION 12
12
A network engineer configured new firewalls with the correct configuration to be deployed to each remote
branch. Unneeded services were disabled, and all firewall rules were applied successfully. Which of the
following should the network engineer perform NEXT to ensure all the firewalls are hardened successfully?
A.
B.
C.
D.
Ensure an implicit permit rule is enabled
Configure the log settings on the firewalls to the central syslog server
Update the firewalls with current firmware and software
Use the same complex passwords on all firewalls
Section: (none)
QUESTION 13
13
At which of the following OSI model layers would a technician find an IP header?
A.
B.
C.
D.
Layer 1
Layer 2
Layer 3
Layer 4
Section: (none)
QUESTION 14
14
An engineer is configuring redundant network links between switches. Which of the following should the
engineer enable to prevent network stability issues?
A.
B.
C.
D.
802.1Q
STP
Flow control
CSMA/CD
Section: (none)
QUESTION 15
15
Several WIFI users are reporting the inability to connect to the network. WLAN users on the guest network are
able to access all network resources without any performance issues. The following table summarizes the
findings after a site survey of the area in question:
Which of the following should a wireless technician do NEXT to troubleshoot this issue?
A.
B.
C.
D.
Reconfigure the channels to reduce overlap
Replace the omni antennas with directional antennas
Update the SSIDs on all the APs
Decrease power in AP 3 and AP 4
Section: (none)
QUESTION 16
16
Which of the following routing protocols is used to exchange route information between public autonomous
systems?
A.
B.
C.
D.
OSPF
BGP
EGRIP
RIP
Section: (none)
QUESTION 17
17
A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use to
detect the exact break point of the fiber link?
A.
B.
C.
D.
E.
OTDR
Tone generator
Fusion splicer
Cable tester
PoE injector
Section: (none)
QUESTION 18
18
Which of the following can be used to centrally manage credentials for various types of administrative
privileges on configured network devices?
A.
B.
C.
D.
E.
SSO
TACACS+
Zero Trust
Separation of duties
Multifactor authentication
Section: (none)
QUESTION 19
19
A network technician is installing new software on a Windows-based server in a different geographical location.
Which of the following would be BEST for the technician to use to perform this task?
A.
B.
C.
D.
RDP
SSH
FTP
DNS
Section: (none)
QUESTION 20
20
Branch users are experiencing issues with videoconferencing. Which of the following will the company MOST
likely configure to improve performance for these applications?
A.
B.
C.
D.
E.
Link Aggregation Control Protocol
Dynamic routing
Quality of service
Network load balancer
Static IP addresses
Section: (none)
QUESTION 21
21
A technician is assisting a user who cannot connect to a network resource. The technician first checks for a
link light. According to troubleshooting methodology, this is an example of:
A.
B.
C.
D.
using a bottom-to-top approach.
establishing a plan of action.
documenting a finding.
questioning the obvious.
Section: (none)
QUESTION 22
22
Which of the following transceiver types can support up to 40Gbps?
A.
B.
C.
D.
SFP+
QSFP+
QSFP
SFP
Section: (none)
QUESTION 23
23
Which of the following TCP ports is used by the Windows OS for file sharing?
A.
B.
C.
D.
53
389
445
1433
Section: (none)
QUESTION 24
24
A network administrator redesigned the positioning of the APs to create adjacent areas of wireless coverage.
After project validation, some users still report poor connectivity when their devices maintain an association to
a distanced AP. Which of the following should the network administrator check FIRST?
A.
B.
C.
D.
Validate the roaming settings on the APs and WLAN clients
Verify that the AP antenna type is correct for the new layout
Check to see if MU-MIMO was properly activated on the APs
Deactivate the 2.4GHz band on the APS
Section: (none)
QUESTION 25
25
Which of the following connector types would have the MOST flexibility?
A.
B.
C.
D.
SFP
BNC
LC
RJ45
Section: (none)
QUESTION 26
26
Which of the following ports is commonly used by VoIP phones?
A.
B.
C.
D.
20
143
445
5060
Section: (none)
QUESTION 27
27
A network engineer is investigating reports of poor network performance. Upon reviewing a report, the
engineer finds that jitter at the office is greater than 10ms on the only WAN connection available. Which of the
following would be MOST affected by this statistic?
A.
B.
C.
D.
A VoIP sales call with a customer
An in-office video call with a coworker
Routing table from the ISP
Firewall CPU processing time
Section: (none)
QUESTION 28
28
A network technician needs to ensure outside users are unable to telnet into any of the servers at the
datacenter. Which of the following ports should be blocked when checking firewall configuration?
A.
B.
C.
D.
E.
22
23
80
3389
8080
Section: (none)
QUESTION 29
29
A technician is writing documentation regarding a company's server farm. The technician needs to confirm the
server name for all Linux servers. Which of the following commands should the technician run?
A.
B.
C.
D.
ipconfig
nslookup
arp
route
Section: (none)
QUESTION 30
30
A technician is connecting multiple switches to create a large network for a new office. The switches are
unmanaged Layer 2 switches with multiple connections between each pair. The network is experiencing an
extreme amount of latency. Which of the following is MOST likely occurring?
A.
B.
C.
D.
Ethernet collisions
A DDoS attack
A broadcast storm
Routing loops
Section: (none)
QUESTION 31
31
A store owner would like to have secure wireless access available for both business equipment and patron
use. Which of the following features should be configured to allow different wireless access through the same
equipment?
A.
B.
C.
D.
MIMO
TKIP
LTE
SSID
Section: (none)
QUESTION 32
32
Which of the following systems would MOST likely be found in a screened subnet?
A.
B.
C.
D.
RADIUS
FTP
SQL
LDAP
Section: (none)
QUESTION 33
33
Which of the following would need to be configured to ensure a device with a specific MAC address is always
assigned the same IP address from DHCP?
A.
B.
C.
D.
E.
Scope options
Reservation
Dynamic assignment
Exclusion
Static assignment
Section: (none)
QUESTION 34
34
Access to a datacenter should be individually recorded by a card reader even when multiple employees enter
the facility at the same time. Which of the following allows the enforcement of this policy?
A.
B.
C.
D.
Motion detection
Access control vestibules
Smart lockers
Cameras
Section: (none)
QUESTION 35
35
A workstation is configured with the following network details:
Software on the workstation needs to send a query to the local subnet broadcast address. To which of the
following addresses should the software be configured to send the query?
A.
B.
C.
D.
E.
10.1.2.0
10.1.2.1
10.1.2.23
10.1.2.255
10.1.2.31
Section: (none)
QUESTION 36
36
After the A record of a public website was updated, some visitors were unable to access the website. Which of
the following should be adjusted to address the issue?
A.
B.
C.
D.
TTL
MX
TXT
SOA
Section: (none)
QUESTION 37
37
A network administrator is installing a wireless network at a client's office. Which of the following IEEE 802.11
standards would be BEST to use for multiple simultaneous client access?
A.
B.
C.
D.
CDMA
CSMA/CD
CSMA/CA
GSM
Section: (none)
QUESTION 38
38
A technician is installing multiple UPS units in a major retail store. The technician is required to keep track of all
changes to new and old equipment. Which of the following will allow the technician to record these changes?
A.
B.
C.
D.
Asset tags
A smart locker
An access control vestibule
A camera
Section: (none)
QUESTION 39
39
A website administrator is concerned the company's static website could be defaced by hacktivists or used as
a pivot point to attack internal systems.
Which of the following should a network security administrator recommend to assist with detecting these
activities?
A. Implement file integrity monitoring.
B. Change the default credentials.
C. Use SSL encryption.
D. Update the web-server software.
Section: (none)
QUESTION 40
40
A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a
radio. Which of the following antenna types should the AP utilize?
A.
B.
C.
D.
Omni
Directional
Yagi
Parabolic
Section: (none)
QUESTION 41
41
A network field technician is installing and configuring a secure wireless network. The technician performs a
site survey.
Which of the following documents would MOST likely be created as a result of the site survey?
A.
B.
C.
D.
Physical diagram
Heat map
Asset list
Device map
Section: (none)
QUESTION 42
42
A wireless network was installed in a warehouse for employees to scan crates with a wireless handheld
scanner. The wireless network was placed in the corner of the building near the ceiling for maximum coverage
However users in the offices adjacent lo the warehouse have noticed a large amount of signal overlap from the
new network Additionally warehouse employees report difficulty connecting to the wireless network from the
other side of the building; however they have no issues when Ihey are near the antenna Which of the following
is MOST likely the cause?
A.
B.
C.
D.
The wireless signal is being refracted by the warehouse's windows
The antenna's power level was set too high and is overlapping
An omnidirectional antenna was used instead of a unidirectional antenna
The wireless access points are using channels from the 5GHz spectrum
Section: (none)
QUESTION 43
43
An organization with one core and five distribution switches is transitioning from a star to a full- mesh topology
Which of the following is the number of additional network connections needed?
A.
B.
C.
D.
5
7
10
15
Section: (none)
QUESTION 44
44
A network technician is investigating an issue with a desktop that is not connecting to the network. The desktop
was connecting successfully the previous day, and no changes were made to the environment. The technician
locates the switchport where the device is connected and observes the LED status light on the switchport is not
lit even though the desktop is turned on Other devices that arc plugged into the switch are connecting to the
network successfully Which of the following is MOST likely the cause of the desktop not connecting?
A.
B.
C.
D.
E.
Transceiver mismatch
VLAN mismatch
Port security
Damaged cable
Duplex mismatch
Section: (none)
QUESTION 45
45
A network technician has multimode fiber optic cable available in an existing IDF. Which of the following
Ethernet standards should the technician use to connect the network switch to the existing fiber?
A.
B.
C.
D.
10GBaseT
1000BaseT
1000BaseSX
1000BaseLX
Section: (none)
QUESTION 46
46
An ARP request is broadcasted and sends the following request. ''Who is 192.168.1.200? Tell 192.168.1.55''
At which of the following layers of the OSI model does this request operate?
A.
B.
C.
D.
E.
Application
Data link
Transport
Network
Session
Section: (none)
QUESTION 47
47
Which of the following technologies allows traffic to be sent through two different ISPs to increase
performance?
A.
B.
C.
D.
Fault tolerance
Quality of service
Load balancing
Port aggregation
Section: (none)
QUESTION 48
48
A network technician is observing the behavior of an unmanaged switch when a new device is added to the
network and transmits data
A.
B.
C.
D.
E.
Which of the following BEST describes how the switch processes this information?
The data is flooded out of every port. including the one on which it came in.
The data is flooded out of every port but only in the VLAN where it is located.
The data is flooded out of every port, except the one on which it came in
The data is flooded out of every port, excluding the VLAN where it is located
Section: (none)
QUESTION 49
49
There are two managed legacy switches running that cannot be replaced or upgraded. These switches do not
support cryptographic functions, but they are password protected. Which of the following should a network
administrator configure to BEST prevent unauthorized access?
A.
B.
C.
D.
E.
Enable a management access list
Disable access to unnecessary services.
Configure a stronger password for access
Disable access to remote management
Use an out-of-band access method.
Section: (none)
QUESTION 50
50
A network engineer is designing a new secure wireless network. The engineer has been given the following
requirements:
1 Must not use plaintext passwords 2 Must be certificate based
3 Must be vendor neutral
Which of the following methods should the engineer select?
A.
B.
C.
D.
TWP-RC4
CCMP-AES
EAP-TLS
WPA2
Section: (none)
QUESTION 51
51
A lab environment hosts Internet-facing web servers and other experimental machines, which technicians use
for various tasks A technician installs software on one of the web servers to allow communication to the
company's file server, but it is unable to connect to it Other machines in the building are able to retrieve files
from the file server. Which of the following is the MOST likely reason the web server cannot retrieve the files,
and what should be done to resolve the problem?
A. The lab environment's IDS is blocking the network traffic 1 he technician can whitelist the new
application in the IDS
B. The lab environment is located in the DM2, and traffic to the LAN zone is denied by default. The technician
can move the computer to another zone or request an exception from the
administrator.
C. The lab environment has lost connectivity to the company router, and the switch needs to be rebooted. The
technician can get the key to the wiring closet and manually restart the switch
D. The lab environment is currently set up with hubs instead of switches, and the requests are
getting bounced back The technician can submit a request for upgraded equipment to management.
Section: (none)
QUESTION 52
52
Given the following output:
Which of the following attacks is this MOST likely an example of?
A.
B.
C.
D.
ARP poisoning
VLAN hopping
Rogue access point
Amplified DoS
Section: (none)
QUESTION 53
53
An organization wants to implement a method of centrally managing logins to network services. Which of the
following protocols should the organization use to allow for authentication, authorization and auditing?
A.
B.
C.
D.
MS-CHAP
RADIUS
LDAPS
RSTP
Section: (none)
QUESTION 54
54
A company wants to implement a large number of WAPs throughout its building and allow users to be able to
move around the building without dropping their connections Which of the following pieces of equipment would
be able to handle this requirement?
A.
B.
C.
D.
A VPN concentrator
A load balancer
A wireless controller
A RADIUS server
Section: (none)
QUESTION 55
55
A technician is troubleshooting a workstation's network connectivity and wants to confirm which switchport
corresponds to the wall jack the PC is using Which of the following concepts would BEST help the technician?
A.
B.
C.
D.
E.
Consistent labeling
Change management
Standard work instructions
Inventory management
Network baseline
Section: (none)
QUESTION 56
56
A corporation has a critical system that would cause unrecoverable damage to the brand if it was taken offline.
Which of the following disaster recovery solutions should the corporation implement?
A.
B.
C.
D.
Full backups
Load balancing
Hot site
Snapshots
Section: (none)
QUESTION 57
57
Which of the following protocol types describes secure communication on port 443?
A.
B.
C.
D.
ICMP
UDP
TCP
IP
Section: (none)
QUESTION 58
58
A local firm has hired a consulting company to clean up its IT infrastructure. The consulting company notices
remote printing is accomplished by port forwarding via publicly accessible IPs through the firm's firewall Which
of the following would be the MOST appropriate way to enable secure remote printing?
A.
B.
C.
D.
SSH
VPN
Telnet
SSL
Section: (none)
QUESTION 59
59
A user reports a weak signal when walking 20ft (61 m) away from the WAP in one direction, but a strong signal
when walking 20ft in the opposite direction The technician has reviewed the configuration and confirmed the
channel type is correct There is no jitter or latency on the connection Which of the following would be the
MOST likely cause of the issue?
A. Antenna type
B. Power levels
C. Frequency
D. Encryption type
Section: (none)
QUESTION 60
60
A network technician was troubleshooting an issue for a user who was being directed to cloned websites that
were stealing credentials. The URLs were correct for the websites but an incorrect IP address was revealed
when the technician used ping on the user's PC After checking the is setting, the technician found the DNS
server address was incorrect Which of the following describes the issue?
A.
B.
C.
D.
Rogue DHCP server
Misconfigured HSRP
DNS poisoning
Exhausted IP scope
Section: (none)
QUESTION 61
61
A network technician needs to correlate security events to analyze a suspected intrusion Which of the following
should the technician use?
A.
B.
C.
D.
SNMP
Log review
Vulnerability scanning
SIEM
Section: (none)
QUESTION 62
62
A network administrator is setting up several loT devices on a new VLAN and wants to accomplish the
following:
1. Reduce manual configuration on each system
2. Assign a specific IP address to each system
3. Allow devices to move to different switchports on the same VLAN
Which of the following should the network administrator do to accomplish these requirements?
A.
B.
C.
D.
Set up a reservation for each device
Configure a static IP on each device
Implement private VLANs for each device
Use DHCP exclusions to address each device
Section: (none)
QUESTION 63
63
During the security audit of a financial firm the Chief Executive Officer (CEO) questions why there are three
employees who perform very distinct functions on the server. There is an administrator for creating users
another for assigning the users lo groups and a third who is the only administrator to perform file rights
assignment Which of the following mitigation techniques is being applied'
A. Privileged user accounts
B. Role separation
C. Container administration
D. Job rotation
Section: (none)
QUESTION 64
64
A technician is troubleshooting a previously encountered issue. Which of the following should the technician
reference to find what solution was implemented to resolve the issue?
A.
B.
C.
D.
Standard operating procedures
Configuration baseline documents
Work instructions
Change management documentation
Section: (none)
QUESTION 65
65
A SaaS provider has decided to leave an unpatched VM available via a public DMZ port. With which of the
following concepts is this technique MOST closely associated?
A.
B.
C.
D.
Insider threat
War driving
Evil twin
Honeypot
Section: (none)
QUESTION 66
66
An IDS was installed behind the edge firewall after a network was breached. The network was then breached
again even though the IDS logged the attack. Which of the following should be used in place of these devices
to prevent future attacks?
A.
B.
C.
D.
A network tap
A proxy server
A UTM appliance
A content filter
Section: (none)
QUESTION 67
67
A customer wants to segregate the traffic between guests on a hypervisor. Which of the following does a
technician need to configure to meet the requirement?
A.
B.
C.
D.
E.
Virtual switches
OSPF routing
Load balancers
NIC teaming
Fibre Channel
Section: (none)
QUESTION 68
68
A Chief Information Officer (CIO) wants to improve the availability of a company's SQL database Which of the
following technologies should be utilized to achieve maximum availability?
A.
B.
C.
D.
Clustering
Port aggregation
NIC teaming
Snapshots
Section: (none)
QUESTION 69
69
A network administrator wants to improve the security of the management console on the company's switches
and ensure configuration changes made can be correlated to the administrator who conformed them Which of
the following should the network administrator implement?
A.
B.
C.
D.
Port security
Local authentication
TACACS+
Access control list
Section: (none)
QUESTION 70
70
A network technician is installing an analog desk phone for a new receptionist After running a new phone line,
the technician now needs to cnmp on a new connector.
Which of the following connectors would MOST likely be used in this case?
A.
B.
C.
D.
DB9
RJ11
RJ45
DB25
Section: (none)
QUESTION 71
71
A network manager notices several outages have occurred due to modifications that were made without being
properly tested. Which of the following will the network manager MOST likely implement to prevent future
occurrences?
A.
B.
C.
D.
Logical diagram
Change management
IDF documentation
Configuration baseline
Section: (none)
QUESTION 72
72
A network technician needs to subnet the network. The marketing department has 28 devices. Which of the
following private IP address spaces should be used to ensure the MINIMUM number of unused IP addresses?
A. Gateway: 10.10.10.1
Netmask: 255.255.255.192
B. Gateway: 172.15.18.128
Netmask: 255.255.255.224
C. Gateway: 192.168.1.97
Netmask: 255.255.255.224
D. Gateway: 224.102.113.65
Netmask: 255.255.255.192
Section: (none)
QUESTION 73
73
A company has experienced a major security breach. Which of the following should the network administrator
reference to determine the next steps?
A.
B.
C.
D.
Non-disclosure policy
Data loss prevention policy
Acceptable use policy
Incident response policy
Section: (none)
QUESTION 74
74
A technician restored network connectivity on a user's laptop. After validating full system functionality, which of
the following steps should the technician take NEXT?
A.
B.
C.
D.
Duplicate the problem, if possible
Determine if anything has changed
Test the theory to determine the cause
Document the findings, actions, and outcomes
Section: (none)
QUESTION 75
75
Which of the following is an IPv6 transition mechanism in which network devices utilize IPv4 and IPv6 at the
same time?
A.
B.
C.
D.
6to4
ISATAP
Teredo
Dual stack
Section: (none)
QUESTION 76
76
Which of the following protocols operates at Layer 4 of the OSI model?
A. TCP
B. ARP
C. IMAP
D. POP3
Section: (none)
QUESTION 77
77
In the past, users brought personal laptops to the office to bypass some of the security protocols on their
desktops. Due to new security initiatives, management has asked that users not be allowed to attach personal
devices to the network. Which of the following should a technician use to BEST meet this goal?
A.
B.
C.
D.
Shut down unused ports on switches
Upgrade firmware on network devices
Allow only secure protocols on the network
Disable unnecessary services
Section: (none)
QUESTION 78
78
A technician is installing a SOHO router. Which of the following should be performed on every installation and
periodically maintained to prevent unauthorized access? (Choose two.)
A.
B.
C.
D.
E.
Disable remote management
Update the router firmware
Disable port forwarding
Use complex passwords
Disable the SSID broadcast
Section: (none)
QUESTION 79
79
A network analyst is providing access to an FTP server that stores files that are needed by external contractors
who are working on a project. In which of the following network locations should the FTP server be placed to
achieve the MOST secure environment?
A.
B.
C.
D.
DMZ network
Server network
External network
Internal network
Section: (none)
QUESTION 80
80
A company is contracting a new third-party organization that will handle storage of the company's critical data.
Which of the following policies would ensure the data remains confidential?
A.
B.
C.
D.
SLA
NDA
MOU
BYOD
Section: (none)
QUESTION 81
81
A technician must install and configure a network device in a building with 20 classrooms. Each room must be
on a separate subnet and should not be able to see traffic from other subnets.
Which of the following is the MOST cost-effective solution?
A.
B.
C.
D.
A switch with VLANs created for each segment
A router with interfaces connected to a switch in each room
A VoIP endpoint connected to a hub for each network
A firewall with DHCP pools for each subnet
Section: (none)
QUESTION 82
82
Which of the following WAN transmission mediums is the fastest and can travel the longest distance?
A.
B.
C.
D.
Satellite
Copper
Wireless
Fiber
Section: (none)
QUESTION 83
83
The process of grouping network interfaces together to increase throughput is called:
A.
B.
C.
D.
VLAN tagging
load balancing
port aggregation
fault tolerance
Section: (none)
QUESTION 84
84
Which of the following is used to purposely attack a system to exploit vulnerabilities?
A.
B.
C.
D.
Honeypot
Vulnerability scan
Device hardening
Penetration testing
Section: (none)
QUESTION 85
85
Which of the following storage connection types should be used to allow the consolidation of the physical
connections for SAN and LAN in just one Layer 2 protocol?
A. Fibre Channel
B. SCSI
C. T1/E1
D. FCoE
Section: (none)
QUESTION 86
86
A network administrator walks into a datacenter and notices an unknown person is following closely. The
administrator stops and directs the person to the security desk. Which of the following attacks did the network
administrator prevent?
A.
B.
C.
D.
Evil twin
Tailgating
Piggybacking
Shoulder surfing
Section: (none)
QUESTION 87
87
SIMULATION
You have been tasked with setting up a wireless network in an office. The network will consist of 3 Access
Points and a single switch. The network must meet the following parameters:
- The SSIDs need to be configured as CorpNet with a key of S3cr3t!
- The wireless signals should not interfere with each other
- The subnet the Access Points and switch are on should only support 30 devices maximum
- The Access Points should be configured to only support TKIP clients at a maximum speed
INSTRUCTONS
Click on the wireless devices and review their information and adjust the settings of the access points to meet
the given requirements.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
A.
B.
C.
D.
Section: (none)
QUESTION 88
88
Due to an increase in wireless demand, 50 additional access points were installed as part of an expansion
project. Each device was configured and managed separately, working with its own configuration. Which of the
following network devices would assist the network team with reducing complexity and enforcing policies on the
WLAN?
A. Wireless controller
B. Wireless range extender
C. Wireless load balancer
D. Wireless analyzer
Section: (none)
QUESTION 89
89
Joe, a user, reports intermittent connectivity issues, but a technician notices that the only time Joe has issues
is when he is logged into the database. Losing connection after authenticating to a database, but still having
access to network resources such as file/print services and email, would MOST likely be caused by:
A.
B.
C.
D.
an incorrect DHCP gateway setting
a duplicate IP address
NTP synchronization
ACL configuration
Section: (none)
QUESTION 90
90
A server rack was moved from one floor to another. The network engineer needs to determine what physical
changes to make on the network to ensure the server rack has connectivity. Which of the following should the
network engineer consult?
A.
B.
C.
D.
Standard operating procedures
Wiring diagram
Inventory documentation
Network baseline
Section: (none)
QUESTION 91
91
An email server, which is called "Frederick," has an IPv6 address of 2001:5689:23:ABCD:6A, but most users
call it "Fred" for short. Which of the following DNS entries is needed so the alias "Fred" can also be used?
A.
B.
C.
D.
E.
F.
MX
AAAA
SRV
CNAME
TXT
NS
Section: (none)
QUESTION 92
92
A network administrator needs to be able to burst datacenter capacity during peak times, but does not want to
pay for on-premises hardware that is not used during off-peak times. Which of the following would aid in this
scenario?
A. Public cloud
B. SaaS
C. PaaS
D. Hybrid cloud
Section: (none)
QUESTION 93
93
A user wants to secure a network closet and be able to tell if anyone makes changes in the closet. Which of
the following would be the BEST detective physical security devices in this situation? (Choose two.)
A.
B.
C.
D.
E.
F.
Anti-tampering
Badges
Door locks
Key fob
Motion detection
Video surveillance
Section: (none)
QUESTION 94
94
An administrator is writing a script to periodically log the IPv6 and MAC addresses of all the devices on a
network segment.
Which of the following switch features will MOST likely be used to assist with this task?
A.
B.
C.
D.
Spanning Tree Protocol
Neighbor Discovery Protocol
Link Aggregation Control Protocol
Address Resolution Protocol
Section: (none)
QUESTION 95
95
Which of the following DNS records works as an alias to another record?
A.
B.
C.
D.
AAAA
CNAME
MX
SOA
Section: (none)
QUESTION 96
96
A company built a new building at its headquarters location. The new building is connected to the company's
LAN via fiber-optic cable. Multiple users in the new building are unable to access the company's intranet site
via their web browser, but they are able to access internet sites. Which of the following describes how the
network administrator can resolve this issue?
A.
B.
C.
D.
Correct the DNS server entries in the DHCP scope
Correct the external firewall gateway address
Correct the NTP server settings on the clients
Correct a TFTP Issue on the company's server
Section: (none)
QUESTION 97
97
A technician is installing a new fiber connection to a network device in a datacenter. The connection from the
device to the switch also traverses a patch panel connection. The chain of connections is in the following order:
Device
LC/LC patch cable
Patch panel
Cross-connect fiber cable
Patch panel
LC/LC patch cable
Switch
The connection is not working. The technician has changed both patch cables with known working patch
cables. The device had been tested and was working properly before being installed. Which of the following is
the MOST likely cause of the issue?
A.
B.
C.
D.
TX/RX is reversed
An incorrect cable was used
The device failed during installation
Attenuation is occurring
Section: (none)
QUESTION 98
98
A technician is searching for a device that is connected to the network and has the device's physical network
address. Which of the following should the technician review on the switch to locate the device's network port?
A.
B.
C.
D.
IP route table
VLAN tag
MAC table
QoS tag
Section: (none)
QUESTION 99
99
Which of the following provides redundancy on a file server to ensure the server is still connected to a LAN
even in the event of a port failure on a switch?
A.
B.
C.
D.
NIC teaming
Load balancer
RAID array
PDUs
Section: (none)
QUESTION 100
100
An IT organization needs to optimize speeds for global content distribution and wants to reduce latency in highdensity user locations. Which of the following technologies BEST meets the organization's requirements?
A.
B.
C.
D.
E.
Load balancing
Geofencing
Public cloud
Content delivery network
Infrastructure as a service
Section: (none)
QUESTION 101
101
A user reports being unable to access network resources after making some changes in the office. Which of
the following should a network technician do FIRST?
A.
B.
C.
D.
Check the system's IP address
Do a ping test against the servers
Reseat the cables into the back of the PC
Ask what changes were made
Section: (none)
QUESTION 102
102
A new cabling certification is being requested every time a network technician rebuilds one end of a Cat 6
(vendor-certified) cable to create a crossover connection that is used to connect switches. Which of the
following would address this issue by allowing the use of the original cable?
A.
B.
C.
D.
CSMA/CD
LACP
PoE+
MDIX
Section: (none)
QUESTION 103
103
A network administrator is designing a new datacenter in a different region that will need to communicate to the
old datacenter with a secure connection. Which of the following access methods would provide the BEST
security for this new datacenter?
A.
B.
C.
D.
Virtual network computing
Secure Socket Shell
In-band connection
Site-to-site VPN
Section: (none)
QUESTION 104
104
An attacker is attempting to find the password to a network by inputting common words and phrases in
plaintext to the password prompt. Which of the following attack types BEST describes this action?
A. Pass-the-hash attack
B. Rainbow table attack
C. Brute-force attack
D. Dictionary attack
Section: (none)
QUESTION 105
105
Which of the following technologies provides a failover mechanism for the default gateway?
A.
B.
C.
D.
FHRP
LACP
OSPF
STP
Section: (none)
QUESTION 106
106
The following configuration is applied to a DHCP server connected to a VPN concentrator:
There are 300 non-concurrent sales representatives who log in for one hour a day to upload reports, and 252
of these representatives are able to connect to the VPN without any Issues. The remaining sales
representatives cannot connect to the VPN over the course of the day. Which of the following can be done to
resolve the issue without utilizing additional resources?
A.
B.
C.
D.
Decrease the lease duration
Reboot the DHCP server
Install a new VPN concentrator
Configure a new router
Section: (none)
QUESTION 107
107
A technician needs to configure a Linux computer for network monitoring. The technician has the following
information:
Linux computer details:
Switch mirror port details:
After connecting the Linux computer to the mirror port on the switch, which of the following commands should
the technician run on the Linux computer?
A.
B.
C.
D.
ifconfig ecth0 promisc
ifconfig eth1 up
ifconfig eth0 10.1.2.3
ifconfig eth1 hw ether A1:B2:C3:D4:E5:F6
Section: (none)
QUESTION 108
108
A network engineer is investigating reports of poor network performance. Upon reviewing a device
configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following
would be the MOST likely result of this finding?
A.
B.
C.
D.
Increased CRC errors
Increased giants and runts
Increased switching loops
Increased device temperature
Section: (none)
QUESTION 109
109
Which of the following devices would be used to manage a corporate WLAN?
A.
B.
C.
D.
A wireless NAS
A wireless bridge
A wireless router
A wireless controller
Section: (none)
QUESTION 110
110
A user recently made changes to a PC that caused it to be unable to access websites by both FQDN and IP
Local resources, such as the file server remain accessible. Which of the following settings did the user MOST
likely misconfigure?
A.
B.
C.
D.
Static IP
Default gateway
DNS entries
Local host file
Section: (none)
QUESTION 111
111
Which of the following policies is MOST commonly used for guest captive portals?
A.
B.
C.
D.
AUP
DLP
BYOD
NDA
Section: (none)
QUESTION 112
112
A network administrator has been directed to present the network alerts from the past week to the company's
executive staff. Which of the following will provide the BEST collection and presentation of this data?
A.
B.
C.
D.
A port scan printout
A consolidated report of various network devices
A report from the SIEM tool
A report from a vulnerability scan done yesterday
Section: (none)
QUESTION 113
113
A small, family-run business uses a single SOHO router to provide Internet and WiFi to its employees At the
start of a new week, employees come in and find their usual WiFi network is no longer available, and there is a
new wireless network to which they cannot connect. Given that information, which of the following should have
been done to avoid this situation'
A.
B.
C.
D.
The device firmware should have been kept current.
Unsecure protocols should have been disabled.
Parental controls should have been enabled
The default credentials should have been changed
Section: (none)
QUESTION 114
114
A network technician is reviewing an upcoming project's requirements to implement laaS. Which of the
following should the technician consider?
A.
B.
C.
D.
Software installation processes
Type of database to be installed
Operating system maintenance
Server hardware requirements
Section: (none)
QUESTION 115
115
A network is experiencing a number of CRC errors during normal network communication. At which of the
following layers of the OSI model will the administrator MOST likely start to troubleshoot?
A.
B.
C.
D.
E.
F.
G.
Layer 1
Layer 2
Layer 3
Layer 4
Layer 5
Layer 6
Layer 7
Section: (none)
QUESTION 116
116
A client recently added 100 users who are using VMs. All users have since reported slow or unresponsive
desktops. Reports show minimal network congestion, zero packet loss, and acceptable packet delay.
Which of the following metrics will MOST accurately show the underlying performance issues? (Choose two.)
A.
B.
C.
D.
E.
F.
CPU usage
Memory
Temperature
Bandwidth
Latency
Jitter
Section: (none)
QUESTION 117
117
Client devices cannot enter a network, and the network administrator determines the DHCP scope is
exhausted. The administrator wants to avoid creating a new DHCP pool.
Which of the following can the administrator perform to resolve the issue?
A.
B.
C.
D.
Install load balancers
Install more switches
Decrease the number of VLANs
Reduce the lease time
Section: (none)
QUESTION 118
118
A company hired a technician to find all the devices connected within a network. Which of the following
software tools would BEST assist the technician in completing this task?
A.
B.
C.
D.
IP scanner
Terminal emulator
NetFlow analyzer
Port scanner
Section: (none)
QUESTION 119
119
A technician is installing a high-density wireless network and wants to use an available frequency that supports
the maximum number of channels to reduce interference. Which of the following standard 802.11 frequency
ranges should the technician look for while reviewing WAP specifications?
A.
B.
C.
D.
2.4GHz
5GHz
6GHz
900MHz
Section: (none)
QUESTION 120
120
A network technician is adding a 10/100 switch with RJ45 connectors to the company network to accommodate
new computers being added to a network segment. There is no auto-MDIX port on the switch that needs to be
connected to the existing switch on the segment. Which of the following should the technician use to make the
connection?
A. An RG-59 cable with BNC connectors
B. A multi-mode fiber cable
C. A straight-through Cat5 UTP cable
D. A cable with TIA/EIA 568a and 568b on each end
Section: (none)
QUESTION 121
121
A company must create a way for partners to access a web portal to update documents for a project. This
should be done only via web browser in a transparent way for the users. Which of the following should be
used?
A.
B.
C.
D.
Site-to-site connection
SSL VPN
GRE tunnel
VNC
Section: (none)
QUESTION 122
122
A network technician needs to install the latest firmware on the switch to address a recently discovered
vulnerability. Which of the following should the technician do to have a rollback plan in case of issues with the
new firmware? (Choose two.)
A.
B.
C.
D.
E.
F.
Label the switch with IP address and firmware version
Draw the switchport diagram
Create a change management document
Draw the network rack logical diagram
Confirm standard operating procedures documentation
Create a performance baseline of the switch
Section: (none)
QUESTION 123
123
Which of the following statements about the OSI model is true?
A. The application layer does not need to know what type of network is being used because that is
dealt with by a layer below it.
B. The network layer deals with the network cabling and network device interface compatibility.
C. The transport layer deals with how the data is transported from one router to another based on the IP
header.
D. The model consists of four layers that describe the requirements a technician follows to troubleshoot and
support a network.
Section: (none)
QUESTION 124
124
A technician wants to deploy a new wireless network that comprises 30 WAPs installed throughout a threestory office building. All the APs will broadcast the same SSID for client access. Which of the following BEST
describes this deployment?
A. Extended service set
B. Basic service set
C. Unified service set
D. Independent basic service set
Section: (none)
QUESTION 125
125
A user tries to ping 192.168.1.100 from the command prompt on the 192.168.2.101 network but gets the
following response: U.U.U.U. Which of the following needs to be configured for these networks to reach each
other?
A.
B.
C.
D.
Network address translation
Default gateway
Loopback
Routing protocol
Section: (none)
QUESTION 126
126
A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to
assign. The ISP assigned 196.26.4.0/26, and the branch gateway router now has the following configurations
on the interface that peers to the ISP:
The network engineer observes that all users have lost Internet connectivity. Which of the following describes
the issue?
A.
B.
C.
D.
The incorrect subnet mask was configured
The incorrect gateway was configured
The incorrect IP address was configured
The incorrect interface was configured
Section: (none)
QUESTION 127
127
Within the realm of network security, Zero Trust:
A.
B.
C.
D.
prevents attackers from moving laterally through a system.
allows a server to communicate with outside networks without a firewall.
block malicious software that is too new to be found in virus definitions.
stops infected files from being downloaded via websites.
Section: (none)
QUESTION 128
128
Which of the following service models would MOST likely be used to replace on-premises servers with a cloud
solution?
A.
B.
C.
D.
PaaS
IaaS
SaaS
Disaster recovery as a Service (DRaaS)
Section: (none)
QUESTION 129
129
Which of the following factors should be considered when evaluating a firewall to protect a datacenter's eastwest traffic?
A.
B.
C.
D.
Replication traffic between an on-premises server and a remote backup facility
Traffic between VMs running on different hosts
Concurrent connections generated by Internet DDoS attacks
VPN traffic from remote offices to the datacenter's VMs
Section: (none)
QUESTION 130
130
A technician is deploying a low-density wireless network and is contending with multiple types of building
materials. Which of the following wireless frequencies would allow for the LEAST signal attenuation?
A.
B.
C.
D.
2.4GHz
5GHz
850MHz
900MHZ
Section: (none)
QUESTION 131
131
A company that uses VoIP telephones is experiencing intermittent issues with one-way audio and dropped
conversations. The manufacturer says the system will work if ping times are less than 50ms.
The company has recorded the following ping times:
Which of the following is MOST likely causing the issue?
A.
B.
C.
D.
Attenuation
Latency
VLAN mismatch
Jitter
Section: (none)
QUESTION 132
132
Which of the following security devices would be BEST to use to provide mechanical access control to the
MDF/IDF?
A. A smart card
B. A key fob
C. An employee badge
D. A door lock
Section: (none)
QUESTION 133
133
A network technician is investigating an IP phone that does not register in the VoIP system Although it received
an IP address, it did not receive the necessary DHCP options The information that is needed for the
registration is distributes by the OHCP scope All other IP phones are working properly. Which of the following
does the technician need to verify?
A.
B.
C.
D.
VLAN mismatch
Transceiver mismatch
Latency
DHCP exhaustion
Section: (none)
QUESTION 134
134
A network administrator is downloading a large patch that will be uploaded to several enterprise switches
simultaneously during the day's upgrade cycle. Which of the following should the administrator do to help
ensure the upgrade process will be less likely to cause problems with the switches?
A.
B.
C.
D.
Confirm the patch's MD5 hash prior to the upgrade
Schedule the switches to reboot after an appropriate amount of time.
Download each switch's current configuration before the upgrade
Utilize FTP rather than TFTP to upload the patch
Section: (none)
QUESTION 135
135
Which of the following is a system that is installed directly on a server's hardware and abstracts the hardware
from any guest machines?
A.
B.
C.
D.
Storage array
Type 1 hypervisor
Virtual machine
Guest QS
Section: (none)
QUESTION 136
136
A city has hired a new employee who needs to be able to work when traveling at home and at the municipal
sourcing of a neighboring city that snares services. The employee is issued a laptop, and a technician needs to
train the employee on the appropriate solutions for secure access to the network from all the possible locations
On which of the following solutions would the technician MOST likely train the employee?
A. Site-to-site VPNs between the two city locations and client-to-site software on the employee's
laptop tor all other remote access
B. Client-to-site VPNs between the travel locations and site-to-site software on the employee's laptop for all
other remote access
C. Client-to-site VPNs between the two city locations and site-to-site software on the employee's laptop for all
other remote access
D. Site-to-site VPNs between the home and city locations and site-to-site software on the employee's laptop
for all other remote access
Section: (none)
QUESTION 137
137
A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a nonstandard socket Which of the following types of rules is the administrator implementing?
A.
B.
C.
D.
E.
NAT
PAT
STP
SNAT
ARP
Section: (none)
QUESTION 138
138
A technician is configuring a network switch to be used in a publicly accessible location. Which of the following
should the technician configure on the switch to prevent unintended connections?
A.
B.
C.
D.
DHCP snooping
Geofencing
Port security
Secure SNMP
Section: (none)
QUESTION 139
139
Which of the following is used to track and document various types of known vulnerabilities?
A.
B.
C.
D.
E.
CVE
Penetration testing
Zero-day
SIEM
Least privilege
Section: (none)
QUESTION 140
140
The network administrator is informed that a user's email password is frequently hacked by brute- force
programs. Which of the following policies should the network administrator implements to BEST mitigate this
issue? (Choose two.)
A.
B.
C.
D.
Captive portal
Two-factor authentication
Complex passwords
Geofencing
E. Role-based access
F. Explicit deny
Section: (none)
QUESTION 141
141
A network engineer performs the following tasks to increase server bandwidth:
- Connects two network cables from the server to a switch stack
- Configure LACP on the switchports
- Verifies the correct configurations on the switch interfaces
Which of the following needs to be configured on the server?
A.
B.
C.
D.
Load balancing
Multipathing
NIC teaming
Clustering
Section: (none)
QUESTION 142
142
A network technician is manually configuring the network settings for a new device and is told the network
block is 192.168.0.0/20. Which of the following subnets should the technician use?
A.
B.
C.
D.
255.255.128.0
255.255.192.0
255.255.240.0
255.255.248.0
Section: (none)
QUESTION 143
143
A network administrator is securing the wireless network in a multitenant building. The network uses a
passphrase for authentication so it is easy to allow guests onto the wireless network, but management would
like to prevent users from outside the office space from accessing the network. Which of the following security
mechanisms would BEST meet this requirement?
A.
B.
C.
D.
MAC filtering
WPA-PSK
802.1X
Geofencing
Section: (none)
QUESTION 144
144
A technician is asked to provide centralized SSID management across the entire WAN. The BEST solution
would be to:
A. use a configuration management server
B. configure a multilayer switch
C. install a wireless controller
D. use a proxy server
Section: (none)
QUESTION 145
145
A systems administrator needs to improve WiFi performance in a densely populated office tower and use the
latest standard.
There is a mix of devices that use 2.4 GHz and 5 GHz.
Which of the following should the systems administrator select to meet this requirement?
A.
B.
C.
D.
802.11ac
802.11ax
802.11g
802.11n
Section: (none)
QUESTION 146
146
Which of the following would be BEST to use to detect a MAC spoofing attack?
A.
B.
C.
D.
Internet Control Message Protocol
Reverse Address Resolution Protocol
Dynamic Host Configuration Protocol
Internet Message Access Protocol
Section: (none)
QUESTION 147
147
A technician receives feedback that some users are experiencing high amounts of jitter while using the
wireless network. While troubleshooting the network, the technician uses the ping command with the IP
address of the default gateway and verifies large variations in latency.
The technician thinks the issue may be interference from other networks and non-802.11 devices. Which of the
following tools should the technician use to troubleshoot the issue?
A.
B.
C.
D.
NetFlow analyzer
Bandwidth analyzer
Protocol analyzer
Spectrum analyzer
Section: (none)
QUESTION 148
148
Wireless users are reporting intermittent internet connectivity. Connectivity is restored when the users
disconnect and reconnect, utilizing the web authentication process each time. The network administrator can
see the devices connected to the APs at all times.
Which of the following steps will MOST likely determine the cause of the issue?
A. Verify the session time-out configuration on the captive portal settings
B. Check for encryption protocol mismatch on the client's wireless settings
C. Confirm that a valid passphrase is being used during the web authentication
D. Investigate for a client's disassociation caused by an evil twin AP
Section: (none)
QUESTION 149
149
SIMULATION
You are tasked with verifying the following requirements are met in order to ensure network security.
Requirements:
Datacenter
- Ensure network is subnetted to allow all devices to communicate properly while minimizing address space
usage
- Provide a dedicated server to resolve IP addresses and hostnames correctly and handle port 53 traffic
Building A
- Ensure network is subnetted to allow all devices to communicate properly while minimizing address space
usage
- Provide devices to support 5 additional different office users
- Add an additional mobile user
- Replace the Telnet server with a more secure solution Screened subnet
- Ensure network is subnetted to allow all devices to communicate properly while minimizing address space
usage
- Provide a server to handle external 80/443 traffic
- Provide a server to handle port 20/21 traffic
INSTRUCTIONS
Drag and drop objects onto the appropriate locations. Objects can be used multiple times and not all
placeholders need to be filled.
Available objects are located in both the Servers and Devices tabs of the Drag & Drop menu.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
A.
B.
C.
D.
Section: (none)
QUESTION 150
150
Which of the following is used to prioritize Internet usage per application and per user on the network?
A.
B.
C.
D.
Bandwidth management
Load balance routing
Border Gateway Protocol
Administrative distance
Section: (none)
QUESTION 151
151
A network administrator needs to query the NSs for a remote application. Which of the following commands
would BEST help the administrator accomplish this task?
A.
B.
C.
D.
dig
arp
show interface
hostname
Section: (none)
QUESTION 152
152
Which of the following would MOST likely be used to review previous upgrades to a system?
A.
B.
C.
D.
Business continuity plan
Change management
System life cycle
Standard operating procedures
Section: (none)
QUESTION 153
153
A technician is deploying a new switch model and would like to add it to the existing network monitoring
software. The technician wants to know what metrics can be gathered from a given switch. Which of the
following should the technician utilize for the switch?
A.
B.
C.
D.
MIB
Trap
Syslog
Audit log
Section: (none)
QUESTION 154
154
A network device is configured to send critical events to a syslog server; however, the following alerts are not
being received:
Severity 5 LINK-UPDOWN: Interface 1/1, changed state to down
Severity 5 LINK-UPDOWN: Interface 1/3, changed state to down
Which of the following describes the reason why the events are not being received?
A.
B.
C.
D.
The network device is not configured to log that level to the syslog server
The network device was down and could not send the event
The syslog server is not compatible with the network device
The syslog server did not have the correct MIB loaded to receive the message
Section: (none)
QUESTION 155
155
Which of the following is the LARGEST MTU for a standard Ethernet frame?
A.
B.
C.
D.
1452
1492
1500
2304
Section: (none)
QUESTION 156
156
Given the following information:
Which of the following command-line tools would generate this output?
A.
B.
C.
D.
netstat
arp
dig
tracert
Section: (none)
QUESTION 157
157
According to troubleshooting methodology, which of the following should the technician do NEXT after
determining the most likely probable cause of an issue?
A.
B.
C.
D.
Establish a plan of action to resolve the issue and identify potential effects
Verify full system functionality and, if applicable, implement preventive measures
Implement the solution or escalate as necessary
Test the theory to determine the cause
Section: (none)
QUESTION 158
158
Which of the following BEST describes a network appliance that warns of unapproved devices that are
accessing the network?
A.
B.
C.
D.
Firewall
AP
Proxy server
IDS
Section: (none)
QUESTION 159
159
A technician is installing a cable modem in a SOHO. Which of the following cable types will the technician
MOST likely use to connect a modem to the ISP?
A.
B.
C.
D.
Coaxial
Single-mode fiber
Cat 6e
Multimode fiber
Section: (none)
QUESTION 160
160
A network technician is reviewing the interface counters on a router interface. The technician is attempting to
confirm a cable issue. Given the following information:
Which of the following metrics confirms there is a cabling issue?
A.
B.
C.
D.
E.
Last cleared
Number of packets output
CRCs
Giants
Multicasts
Section: (none)
QUESTION 161
161
Which of the following attacks encrypts user data and requires a proper backup implementation to recover?
A.
B.
C.
D.
DDoS
Phishing
Ransomware
MAC spoofing
Section: (none)
QUESTION 162
162
A network administrator wants to analyze attacks directed toward the company's network. Which of the
following must the network administrator implement to assist in this goal?
A.
B.
C.
D.
A honeypot
Network segmentation
Antivirus
A screened subnet
Section: (none)
QUESTION 163
163
A network administrator is configuring a database server and would like to ensure the database engine is
listening on a certain port. Which of the following commands should the administrator use to accomplish this
goal?
A. nslookup
B. netstat -a
C. ipconfig /a
D. arp -a
Section: (none)
QUESTION 164
164
A technician is implementing a new wireless network to serve guests at a local office. The network needs to
provide Internet access but disallow associated stations from communicating with each other. Which of the
following would BEST accomplish this requirement?
A.
B.
C.
D.
Wireless client isolation
Port security
Device geofencing
DHCP snooping
Section: (none)
QUESTION 165
165
A company requires a disaster recovery site to have equipment ready to go in the event of a disaster at its
main datacenter. The company does not have the budget to mirror all the live data to the disaster recovery site.
Which of the following concepts should the company select?
A.
B.
C.
D.
Cold site
Hot site
Warm site
Cloud site
Section: (none)
QUESTION 166
166
An IT technician suspects a break in one of the uplinks that provides connectivity to the core switch. Which of
the following command-line tools should the technician use to determine where the incident is occurring?
A.
B.
C.
D.
E.
nslookup
show config
netstat
show interface
show counters
Section: (none)
QUESTION 167
167
A technician is connecting DSL for a new customer. After installing and connecting the on- premises
equipment, the technician verifies DSL synchronization. When connecting to a workstation, however, the link
LEDs on the workstation and modem do not light up. Which of the following should the technician perform
during troubleshooting?
A.
B.
C.
D.
Identify the switching loops between the modem and the workstation.
Check for asymmetrical routing on the modem.
Look for a rogue DHCP server on the network.
Replace the cable connecting the modem and the workstation.
Section: (none)
QUESTION 168
168
Which of the following services can provide data storage, hardware options, and scalability to a third-party
company that cannot afford new devices?
A.
B.
C.
D.
SaaS
IaaS
PaaS
DaaS
Section: (none)
QUESTION 169
169
A network administrator is talking to different vendors about acquiring technology to support a new project for a
large company. Which of the following documents will MOST likely need to be signed before information about
the project is shared?
A.
B.
C.
D.
BYOD policy
NDA
SLA
MOU
Section: (none)
QUESTION 170
170
Two remote offices need to be connected securely over an untrustworthy MAN. Each office needs to access
network shares at the other site. Which of the following will BEST provide this functionality?
A.
B.
C.
D.
Client-to-site VPN
Third-party VPN service
Site-to-site VPN
Split-tunnel VPN
Section: (none)
QUESTION 171
171
A network requirement calls for segmenting departments into different networks. The campus network is set up
with users of each department in multiple buildings. Which of the following should be configured to keep the
design simple and efficient?
A.
B.
C.
D.
MDIX
Jumbo frames
Port tagging
Flow control
Section: (none)
QUESTION 172
172
Which of the following protocols will a security appliance that is correlating network events from multiple
devices MOST likely rely on to receive event messages?
A.
B.
C.
D.
Syslog
Session Initiation Protocol
Secure File Transfer Protocol
Server Message Block
Section: (none)
QUESTION 173
173
Which of the following is MOST commonly used to address CVEs on network equipment and/or operating
systems?
A.
B.
C.
D.
Vulnerability assessment
Factory reset
Firmware update
Screened subnet
Section: (none)
QUESTION 174
174
A network technician is investigating an issue with handheld devices in a warehouse. Devices have not been
connecting to the nearest APs, but they have been connecting to an AP on the far side of the warehouse.
Which of the following is the MOST likely cause of this issue?
A.
B.
C.
D.
The nearest APs are configured for 802.11g.
An incorrect channel assignment is on the nearest APs.
The power level is too high for the AP on the far side.
Interference exists around the AP on the far side.
Section: (none)
QUESTION 175
175
Which of the following uses the destination IP address to forward packets?
A.
B.
C.
D.
A bridge
A Layer 2 switch
A router
A repeater
Section: (none)
QUESTION 176
176
Which of the following OSI model layers is where conversations between applications are established,
coordinated, and terminated?
A.
B.
C.
D.
Session
Physical
Presentation
Data link
Section: (none)
QUESTION 177
177
A business is using the local cable company to provide Internet access. Which of the following types of cabling
will the cable company MOST likely use from the demarcation point back to the central office?
A.
B.
C.
D.
E.
Multimode
Cat 5e
RG-6
Cat 6
100BASE-T
Section: (none)
QUESTION 178
178
A network administrator decided to use SLAAC in an extensive IPv6 deployment to alleviate IP address
management. The devices were properly connected into the LAN but autoconfiguration of the IP address did
not occur as expected. Which of the following should the network administrator verify?
A.
B.
C.
D.
The network gateway is configured to send router advertisements.
A DHCP server is present on the same broadcast domain as the clients.
The devices support dual stack on the network layer.
The local gateway supports anycast routing.
Section: (none)
QUESTION 179
179
Which of the following is used to provide networking capability for VMs at Layer 2 of the OSI model?
A.
B.
C.
D.
VPN
VRRP
vSwitch
VIP
Section: (none)
QUESTION 180
180
A network administrator is required to ensure that auditors have read-only access to the system logs, while
systems administrators have read and write access to the system logs, and operators have no access to the
system logs. The network administrator has configured security groups for each of these functional categories.
Which of the following security capabilities will allow the network administrator to maintain these permissions
with the LEAST administrative effort?
A.
B.
C.
D.
Mandatory access control
User-based permissions
Role-based access
Least privilege
Section: (none)
QUESTION 181
181
Which of the following would be used to expedite MX record updates to authoritative NSs?
A.
B.
C.
D.
UDP forwarding
DNS caching
Recursive lookup
Time to live
Section: (none)
QUESTION 182
182
A client moving into a new office wants the IP network set up to accommodate 412 network- connected
devices that are all on the same subnet. The subnet needs to be as small as possible. Which of the following
subnet masks should be used to achieve the required result?
A.
B.
C.
D.
255.255.0.0
255.255.252.0
255.255.254.0
255.255.255.0
Section: (none)
QUESTION 183
183
A company is being acquired by a large corporation. As part of the acquisition process, the company's address
should now redirect clients to the corporate organization page. Which of the following DNS records needs to be
created?
A.
B.
C.
D.
SOA
NS
CNAME
TXT
Section: (none)
QUESTION 184
184
A user is having difficulty with video conferencing and is looking for assistance. Which of the following would
BEST improve performance?
A.
B.
C.
D.
Packet shaping
Quality of service
Port mirroring
Load balancing
Section: (none)
QUESTION 185
185
A network technician is configuring a new firewall for a company with the necessary access requirements to be
allowed through the firewall. Which of the following would normally be applied as the LAST rule in the firewall?
A. Secure SNMP
B. Port security
C. Implicit deny
D. DHCP snooping
Section: (none)
QUESTION 186
186
A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a
radio. Which of the following antenna types should the AP utilize?
A.
B.
C.
D.
Omni
Directional
Yagi
Parabolic
Section: (none)
QUESTION 187
187
A systems administrator is running a VoIP network and is experiencing jitter and high latency. Which of the
following would BEST help the administrator determine the cause of these issues?
A.
B.
C.
D.
Enabling RADIUS on the network
Configuring SNMP traps on the network
Implementing LDAP on the network
Establishing NTP on the network
Section: (none)
QUESTION 188
188
The following instructions were published about the proper network configuration for a videoconferencing
device:
"Configure a valid static RFC1918 address for your network. Check the option to use a connection over NAT."
Which of the following is a valid IP address configuration for the device?
A.
B.
C.
D.
E.
FE80::1
100.64.0.1
169.254.1.2
172.19.0.2
224.0.0.12
Section: (none)
QUESTION 189
189
A network administrator is reviewing interface errors on a switch. Which of the following indicates that a
switchport is receiving packets in excess of the configured MTU?
A. CRC errors
B. Giants
C. Runts
D. Flooding
Section: (none)
QUESTION 190
190
A network administrator needs to implement an HDMI over IP solution. Which of the following will the network
administrator MOST likely use to ensure smooth video delivery?
A.
B.
C.
D.
Link aggregation control
Port tagging
Jumbo frames
Media access control
Section: (none)
QUESTION 191
191
A network administrator wants to reduce overhead and increase efficiency on a SAN. Which of the following
can be configured to achieve these goals?
A.
B.
C.
D.
Port aggregation
Traffic shaping
Jumbo frames
Flow control
Section: (none)
QUESTION 192
192
A rogue AP was found plugged in and providing Internet access to employees in the break room. Which of the
following would be BEST to use to stop this from happening without physically removing the WAP?
A.
B.
C.
D.
Password complexity
Port security
Wireless client isolation
Secure SNMP
Section: (none)
QUESTION 193
193
A company's network is set up so all Internet-bound traffic from all remote offices exits through a main
datacenter. Which of the following network topologies would BEST describe this setup?
A.
B.
C.
D.
Bus
Spine-and-leaf
Hub-and-spoke
Mesh
Section: (none)
QUESTION 194
194
To comply with industry requirements, a security assessment on the cloud server should identify which
protocols and weaknesses are being exposed to attackers on the Internet. Which of the following tools is the
MOST appropriate to complete the assessment?
A.
B.
C.
D.
Use tcpdump and parse the output file in a protocol analyzer.
Use an IP scanner and target the cloud WAN network addressing.
Run netstat in each cloud server and retrieve the running processes.
Use nmap and set the servers' public IPs as the targets.
Section: (none)
QUESTION 195
195
A systems administrator is configuring a firewall using NAT with PAT. Which of the following would be BEST
suited for the LAN interface?
A.
B.
C.
D.
E.
172.15.0.0/18
172.18.0.0/10
172.23.0.0/16
172.28.0.0/8
172.32.0.0/14
Section: (none)
QUESTION 196
196
A packet is assigned a value to ensure it does not traverse a network indefinitely. Which of the following BEST
represents this value?
A.
B.
C.
D.
Zero Trust
Planned obsolescence
Time to live
Caching
Section: (none)
QUESTION 197
197
Which of the following policies should be referenced when a user wants to access work email on a personal
cell phone?
A.
B.
C.
D.
Offboarding policy
Acceptable use policy
BYOD policy
Remote access policy
Section: (none)
QUESTION 198
198
After a firewall replacement, some alarms and metrics related to network availability stopped updating on a
monitoring system relying on SNMP. Which of the following should the network administrator do FIRST?
A. Modify the device's MIB on the monitoring system.
B. Configure syslog to send events to the monitoring system.
C. Use port mirroring to redirect traffic to the monitoring system.
D. Deploy SMB to transfer data to the monitoring system.
Section: (none)
QUESTION 199
199
At the destination host, which of the following OSI model layers will discard a segment with a bad checksum in
the UDP header?
A.
B.
C.
D.
Network
Data link
Transport
Session
Section: (none)
QUESTION 200
200
A voice engineer is troubleshooting a phone issue. When a call is placed, the caller hears echoes of the
receiver's voice. Which of the following are the causes of this issue? (Choose two.)
A.
B.
C.
D.
E.
F.
Jitter
Speed mismatch
QoS misconfiguration
Protocol mismatch
CRC errors
Encapsulation errors
Section: (none)
QUESTION 201
201
Which of the following VPN configurations should be used to separate Internet and corporate traffic?
A.
B.
C.
D.
Split-tunnel
Remote desktop gateway
Site-to-site
Out-of-band management
Section: (none)
QUESTION 202
202
Which of the following is required when connecting an endpoint device with an RJ45 port to a network device
with an ST port?
A.
B.
C.
D.
A media converter
A bridge
An MDIX
A load balancer
Section: (none)
QUESTION 203
203
The management team has instituted a 48-hour RTO as part of the disaster recovery plan. Which of the
following procedures would meet the policy's requirements?
A.
B.
C.
D.
Recover all systems to a loss of 48 hours of data.
Limit network downtime to a maximum of 48 hours per year.
Recover all systems within 48 hours.
Require 48 hours of system backup maintenance.
Section: (none)
QUESTION 204
204
Which of the following cable types would MOST likely be used to provide high-speed network connectivity
between nearby buildings?
A.
B.
C.
D.
E.
UTP
Coaxial
Fiber
Cat 5
Twinaxial
Section: (none)
QUESTION 205
205
Which of the following is the physical security mechanism that would MOST likely be used to enter a secure
site?
A.
B.
C.
D.
A landing page
An access control vestibule
A smart locker
A firewall
Section: (none)
QUESTION 206
206
Which of the following BEST describes a North-South traffic flow?
A.
B.
C.
D.
A public Internet user accessing a published web server
A database server communicating with another clustered database server
A Layer 3 switch advertising routes to a router
A management application connecting to managed devices
Section: (none)
QUESTION 207
207
A network switch was installed to provide connectivity to cameras monitoring wildlife in a remote location. The
organization is concerned that intruders could potentially leverage unattended equipment in the remote location
to connect rogue devices and gain access to the organization's resources. Which of the following techniques
would BEST address the concern?
A.
B.
C.
D.
Configure port security using MAC filtering.
Manually register the cameras on the switch address table.
Activate PoE+ on the active switchports.
Disable Neighbor Discovery Protocol on the switch.
Section: (none)
QUESTION 208
208
A technician is documenting an application that is installed on a server and needs to verify all existing web and
database connections to the server. Which of the following tools should the technician use to accomplish this
task?
A.
B.
C.
D.
tracert
ipconfig
netstat
nslookup
Section: (none)
QUESTION 209
209
A technician is assisting a user who cannot access network resources when the workstation is connected to a
VoIP phone. The technician identifies the phone as faulty and replaces it.
According to troubleshooting methodology, which of the following should the technician do NEXT?
A.
B.
C.
D.
E.
Implement the solution.
Test the theory.
Duplicate the issue.
Document the findings.
Verify functionality.
Section: (none)
QUESTION 210
210
Which of the following OSI model layers contains IP headers?
A.
B.
C.
D.
E.
Presentation
Application
Data link
Network
Transport
Section: (none)
QUESTION 211
211
A small office is running WiFi 4 APs, and neighboring offices do not want to increase the throughput to
associated devices. Which of the following is the MOST cost-efficient way for the office to increase network
performance?
A. Add another AP.
B. Disable the 2.4GHz radios.
C. Enable channel bonding.
D. Upgrade to WiFi 5.
Section: (none)
QUESTION 212
212
A network technician is troubleshooting an application issue. The technician is able to recreate the issue in a
virtual environment. According to the troubleshooting methodology, which of the
following actions will the technician most likely perform NEXT?
A.
B.
C.
D.
Gather information from the initial report.
Escalate the issue to a supervisor.
Implement a solution to resolve the issue.
Establish a theory of probable cause.
Section: (none)
QUESTION 213
213
Which of the following types of datacenter architectures will MOST likely be used in a large SDN and can be
extended beyond the datacenter? (Choose two.)
A.
B.
C.
D.
E.
iSCSI
FCoE
Three-tiered network
Spine and leaf
Top-of-rack switching
Section: (none)
QUESTION 214
214
A technician is troubleshooting a client's report about poor wireless performance. Using a client monitor, the
technician notes the following information:
Which of the following is MOST likely the cause of the issue?
A. Channel overlap
B. Poor signal
C. Incorrect power settings
D. Wrong antenna type
Section: (none)
QUESTION 215
215
A network technician reviews an entry on the syslog server and discovers the following message from a switch:
SPANNING-TREE Port 1/1 BLOCKED
Which of the following describes the issue?
A.
B.
C.
D.
A loop was discovered, and the impact was mitigated.
An incorrectly pinned cable was disconnected.
The link-local address on the port is incorrect.
The port was shut down, and it needs to be reactivated.
Section: (none)
QUESTION 216
216
A company just migrated its email service to a cloud solution. After the migration, two-thirds of the internal
users were able to connect to their mailboxes, but the connection fails for the other one- third of internal users.
Users working externally are not reporting any issues. The network administrator identifies the following output
collected from an internal host:
c:\user> nslookup newmail.company.com Non-Authoritative answer:
Name: newmail.company.com
IPs: 3.219.13.186, 64.58.225.184, 184.168.131.243
Which of the following verification tasks should the network administrator perform NEXT?
A.
B.
C.
D.
Check the firewall ACL to verify all required IP addresses are included.
Verify the required router PAT rules are properly configured.
Confirm the internal DNS server is replying to requests for the cloud solution.
Validate the cloud console to determine whether there are unlicensed requests.
Section: (none)
QUESTION 217
217
A network technician was hired to harden the security of a network. The technician is required to enable
encryption and create a password for AP security through the web browser. Which of the following would BEST
support these requirements?
A.
B.
C.
D.
ESP
WPA2
IPSec
ACL
Section: (none)
QUESTION 218
218
Which of the following ports are associated with IMAP? (Choose two.)
A.
B.
C.
D.
E.
F.
25
110
143
587
993
995
Section: (none)
QUESTION 219
219
A network administrator is trying to identify a device that is having issues connecting to a switchport. Which of
the following would BEST help identify the issue?
A.
B.
C.
D.
A syslog server
Change management records
A rack diagram
The security log
Section: (none)
QUESTION 220
220
A company with multiple routers would like to implement an HA network gateway with the least amount of
downtime possible. This solution should not require changes on the gateway setting of the network clients.
Which of the following should a technician configure?
A. Automate a continuous backup and restore process of the system's state of the active
gateway.
B. Use a static assignment of the gateway IP address on the network clients.
C. Configure DHCP relay and allow clients to receive a new IP setting.
D. Configure a shared VIP and deploy VRRP on the routers.
Section: (none)
QUESTION 221
221
Which of the following protocols would allow a secure connection to a Linux-based system?
A.
B.
C.
D.
SMB
FTP
RDP
SSH
Section: (none)
QUESTION 222
222
A network administrator is troubleshooting the communication between two Layer 2 switches that are reporting
a very high runt count. After trying multiple ports on both switches, the issue persists. Which of the following
should the network administrator perform to resolve the issue?
A. Increase the MTU size on both switches.
B. Recertify the cable between both switches.
C. Perform a factory reset on both switches.
D. Enable debug logging on both switches.
Section: (none)
QUESTION 223
223
Users attending security training at work are advised not to use single words as passwords for corporate
applications. Which of the following does this BEST protect against?
A.
B.
C.
D.
E.
An on-path attack
A brute-force attack
A dictionary attack
MAC spoofing
Denial of service
Section: (none)
QUESTION 224
224
A network administrator needs to run a single command-line tool capable of displaying routing table and
multicast memberships.
Which of the following would BEST help the administrator achieve the requirements?
A.
B.
C.
D.
arp
show route
show config
netstate
Section: (none)
QUESTION 225
225
Which of the following topologies requites the MOST connections when designing a network?
A.
B.
C.
D.
Mesh
Star
Bus
Ring
Section: (none)
QUESTION 226
226
A technician is assisting a user who cannot connect to a website. The technician attempts to ping the default
gateway and DNS server of the workstation.
According to troubleshooting methodology this is an example of:
A.
B.
C.
D.
a divide-and-conquer approach
gathering information
a top-to-bottom approach
Implementing a solution
Section: (none)
QUESTION 227
227
A network administrator is troubleshooting an issue with a new Internet connection.
The ISP is asking detailed questions about the configuration of the router that the network administrator is
troubleshooting.
Which of the following commands is the network administrator using? (Select TWO.)
A.
B.
C.
D.
E.
F.
tcpdump
show config
hostname
show route
netstate
show ip arp
Section: (none)
QUESTION 228
228
Which of the following BEST describes hosting several businesses on the same physical infrastructure?
A.
B.
C.
D.
Hybrid
Elasticity
laaS
Multitenancy
Section: (none)
QUESTION 229
229
An IT officer is installing a new WAP.
Which of the following must the officer change to connect users securely to the WAP?
A.
B.
C.
D.
AES encryption
Channel to the highest frequency within the band
TKIP encryption protocol
Dynamic selection of the frequency
Section: (none)