Exam Flashcards

1
Q

A systems administrator needs to improve WiFi performance in a densely populated office tower and use the latest standard. There is a mix of devices that use 2.4 GHz and 5 GHz.

Which of the following should the systems administrator select to meet this requirement?

A

802.11ax

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which of the following would be BEST to use to detect a MAC spoofing attack?

A

Reverse Address Resolution Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A technician receives feedback that some users are experiencing high amounts of jitter while using the wireless network. While troubleshooting the network, the technician uses the ping command with the IP address of the default gateway and verifies large variations in latency. The technician thinks the issue may be interference from other networks and non-802.11 devices. Which of the following tools should the technician use to troubleshoot the issue?

A

Spectrum analyzer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Wireless users are reporting intermittent internet connectivity. Connectivity is restored when the users disconnect and reconnect, utilizing the web authentication process each time. The network administrator can see the devices connected to the APs at all times. Which of the following steps will MOST likely determine the cause of the issue?

A

Verify the session time-out configuration on the captive portal settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A network administrator walks into a datacenter and notices an unknown person is following closely. The administrator stops and directs the person to the security desk.

Which of the following attacks did the network administrator prevent?

A

Tailgating

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

A client recently added 100 users who are using VMs. All users have since reported slow or unresponsive desktops. Reports show minimal network congestion, zero packet loss, and acceptable packet delay. Which of the following metrics will MOST accurately show the underlying performance issues? (Choose two.)

A

CPU usage

Memory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Client devices cannot enter a network, and the network administrator determines the DHCP ( dynamic host configuration protocol) scope is exhausted. The administrator wants to avoid creating a new DHCP pool.

Which of the following can the administrator perform to resolve the issue?

A

Reduce the lease time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A network is experiencing a number of CRC (Cyclic Redundancy Check) errors during normal network communication. At which of the following layers of the OSI (Open Systems Interconnection) model will the administrator MOST likely start to troubleshoot?

A

Layer 2

Data Link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

An administrator is writing a script to periodically log the 1Pv6 and MAC addresses of all the devices on a network segment.

Which of the following switch features will MOST likely be used to assist with this task?

A

Neighbor Discovery Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following DNS records works as an alias to another record?

A

CNAME

Canonical Name Pg. 237 Student Guide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

A company built a new building at its headquarters location. The new building is connected to the company’s LAN via fiber-optic cable. Multiple users in the new building are unable to access the company’s intranet site via their web browser, but they are able to access internet sites.

Which of the following describes how the network administrator can resolve this issue?

A

Correct the DNS server entries in the DHCP scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of the following provides redundancy on a file server to ensure the server is still connected to a LAN even in the event of a port failure on a switch?

A

NIC teaming

Network Interface Card

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A technician is searching for a device that is connected to the network and has the device’s physical network address.
Which of the following should the technician review on the switch to locate the device’s network port?

A

MAC table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

An IT organization needs to optimize speeds for global content distribution and wants to reduce latency in high-density user locations.

Which of the following technologies BEST meets the organization’s requirements?

A

Content delivery network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A user reports being unable to access network resources after making some changes in the office.

Which of the following should a network technician do FlRST?

A

Ask what changes were made

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A new cabling certification is being requested every time a network technician rebuilds one end of a Cat 6 (vendor-certified) cable to create a crossover connection that is used to connect switches.

Which of the following would address this issue by allowing the use of the original cable?

A

MDIX

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A company hired a technician to find all the devices connected within a network. Which of the following software tools would BEST assist the technician in completing this task?

A

IP Scanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

A technician is installing a high-density wireless network and wants to use an available frequency that supports the maximum number of channels to reduce interference.

Which of the following standard 802.11 frequency ranges should the technician look for while reviewing WAP specifications?

A

5GHz

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A technician is configuring a network switch to be used in a publicly accessible location.

Which of the following should the technician configure on the switch to prevent unintended connections?

A

Port security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which of the following is used to track and document various types of known vulnerabilities?

A

CVE

Common Vulnerabilities and Exposures Pg 299 Student Guide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

The network administrator is informed that a user’s email password is frequently hacked by brute-force programs. Which of the following policies should the network administrator implements to BEST mitigate this issue? (Choose two.)

A

Two-Factor Authentication

Complex passwords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

A network technician is manually configuring the network settings for a new device and is told the network block is 192.168.0.0/20. Which of the
following subnets should the technician use?

A

255.255.240.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which of the following is the LARGEST MTU for a standard Ethernet frame?

A

1500

Pg 70 Student Guide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

According to troubleshooting methodology, which of the following should the technician do NEXT after determining the most likely probable cause of an issue?

A

Test the theory to determine the cause

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which of the following BEST describes a network appliance that warns of unapproved devices that are accessing the network?

A

IDS

Intrusion Detection System Pg.70

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

A technician is installing a cable modem in a SOHO. Which of the following cable types will the technician MOST likely use to connect a modem to the ISP?

A

Coaxial

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

A network technician is reviewing the interface counters on a router interface. The technician is attempting to confirm a cable issue. Given the
following information:

Metric     -     Value
Last cleared - 7 minutes 34 seconds
# of oackets outout - 6915
# of oackets inout - 270
CRCs     -      183
Giants      -       0
Runts     -      0
Multicasts      -     14

Which of the following metrics confirms there is a cabling issue?

A

CRCs

Pg.291 Student Guide Cyclic Redundancy Check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which of the following is the physical topology for an Ethernet LAN?

A

Star

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

An IT director is setting up new disaster and HA policies for a company. Limited downtime is critical to operations. To meet corporate requirements, the director set up two different datacenters across the country that will stay current on data and applications. In the event of an
outage, the company can immediately switch from one datacenter to another. Which of the following does this BEST describe?

A

A hot site

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

The management team needs to ensure unnecessary modifications to the corporate network are not permitted and version control is maintained.

Which of the following documents would BEST support this?

A

A change management policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Which of the following is MOST likely to generate significant East-West traffic in a datacenter?

A

A duplication of a hosted virtual server to another physical server for redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

A technician is troubleshooting a network switch that seems to stop responding to requests intermittently whenever the logging level is set for
debugging. Which of the following metrics should the technician check to begin troubleshooting the issue?

A

CPU utilization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

A technician wants to deploy a new wireless network that comprises 30 WAPs installed throughout a three-story office building. All the APs will
broadcast the same SSID for client access.

Which of the following BEST describes this deployment?

A

Extended service set

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A user tries to ping 192.168.1.100 from the command prompt on the 192.168.2.101 network but gets the following response: U.U.U.U. Which of
the following needs to be configured for these networks to reach each other?

A

Default gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to assign. The ISP assigned 196.26.4.0/26,
and the branch gateway router now has the following configurations on the interface that peers to the ISP:

IP address:196.26.4.30
Subnet mask:255.255.255.224
Gateway:196.24.4.1

The network engineer observes that all users have lost Internet connectivity. Which of the following describes the issue?

A

The incorrect subnet mask was configured

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Within the realm of network security, Zero Trust:

A

block malicious software that is too new to be found in virus definitions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Which of the following service models would MOST likely be used to replace on-premises servers with a cloud solution?

A

laaS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which of the following factors should be considered when evaluating a firewall to protect a datacenter’s east-west traffic?

A

Replication traffic between an on-premises server and a remote backup facility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which of the following is used to prioritize Internet usage per application and per user on the network?

A

Bandwidth management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

A network administrator needs to query the NSs for a remote application. Which of the following commands would BEST help the administrator accomplish this task?

A

dig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Which of the following would MOST likely be used to review previous upgrades to a system?

A

Change management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

A technician is deploying a new switch model and would like to add it to the existing network monitoring software. The technician wants to know what metrics can be gathered from a given switch.

Which of the following should the technician utilize for the switch?

A

MIB

Management information Base Pg. 276 Student Guide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

A network device is configured to send critical events to a syslog server; however, the following alerts are not being received:

Severity 5 LINK-UPDOWN: Interface 1/1, changed state to down
Severity 5 LINK-UPDOWN: Interface 1/3, changed state to down

Which of the following describes the reason why the events are not being received?

A

The network device is not configured to log that level to the syslog server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

A network administrator is implementing A. OSPF (Open shortest path first) on all of a company’s network devices.

Which of the following will MOST likely replace all the
company’s hubs?

A

A Layer 3 switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

A network administrator discovers that users in an adjacent building are connecting to the company’s guest wireless network to download inappropriate material.
Which of the following can the administrator do to MOST easily mitigate this issue?

A

Reduce the wireless power levels

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

A network administrator is designing a new datacenter in a different region that will need to communicate to the old datacenter with a secure connection.
Which of the following access methods would provide the BEST security for this new datacenter?

A

Site-to-site VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

An attacker is attempting to find the password to a network by inputting common words and phrases in plaintext to the password prompt.

Which of the following attack types BEST describes this action?

A

Dictionary attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Which of the following technologies provides a failover mechanism for the default gateway?

A

FHRP

First Hop Redundancy Protocol Pg. 435 Student Guide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

The following configuration is applied to a DHCP server connected to a VPN concentrator:

IP address: 10.0.0.1
Subnet mask: 255.255.255.0
Gateway: 10.0.0.254

There are 300 non-concurrent sales representatives who log in for one hour a day to upload reports, and 252 of these representatives are able to connect to the VPN without any Issues. The remaining sales representatives cannot connect to the VPN over the course of the day.

Which of the following can be done to resolve the issue without utilizing additional resources?

A

Decrease the lease duration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

A technician needs to configure a Linux computer for network monitoring. The technician has the following information:

Linux computer details:
Interface - ethO
IP address - 10.1.2.24
MAC address - Al:B2:C3:F4:E5:D6

Switch mirror port details:
Interface - ethl
IP address - 10.1.2.3
MAC address - Al:B2:C3:D4:E5:F6

After connecting the Linux computer to the mirror port on the switch, which of the following commands should the technician run on the Linux computer?

A

ifconfig ecth0 promise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

A network engineer is investigating reports of poor network performance. Upon reviewing a device configuration, the engineer finds that duplex settings are mismatched on both ends.

Which of the following would be the MOST likely result of this finding?

A

Increased CRC errors

Cyclic Redundancy Check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Which of the following devices would be used to manage a corporate WLAN?

A

A wireless controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

A

Next-generation firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both ends of the connection are configured for half duplex.

Which of the following is the MOST likely cause of this issue?

A

The cable length is excessive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

A network administrator is configuring a load balancer for two systems.

Which of the following must the administrator configure to ensure connectivity during a failover?

A

VIP

Virtual IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building. Several APs are mounted in this
office. The users report that the network connections frequently disconnect and reconnect throughout the day.

Which of the following is the MOST likely cause of this issue?

A

EIRP needs to be boosted

Effective Isotropic Radiated Power

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

A network engineer configured new firewalls with the correct configuration to be deployed to each remote branch. Unneeded services were
disabled, and all firewall rules were applied successfully.

Which of the following should the network engineer perform NEXT to ensure all the firewalls are hardened successfully?

A

Update the firewalls with the current firmware and software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

At which of the following OSI model layers would a technician find an IP header?

A

Layer 3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

An engineer is configuring redundant network links between switches. Which of the following should the engineer enable to prevent network
stability issues?

A

STP

Spanning tree protocol

60
Q

Several WIFI users are reporting the inability to connect to the network. WLAN users on the guest network are able to access all network resources
without any performance issues. The following table summarizes the findings after a site survey of the area in question:

Location - AP 1 -  
SSID - Corp1 
Channel - 2
RSSI - 81dBm
Antenna Type - Omni
AP2  - 
Corp1 
1
 -82d8m
Omni
AP 3 - 
Corp1/Guest
5
 -44dBm
Directional

Which of the following should a wireless technician do NEXT to troubleshoot this issue?

A

Reconfigure the channels to reduce overlap

61
Q

Which of the following routing protocols is used to exchange route information between public autonomous systems?

A

BGP

Border Gateway Protocol

62
Q

A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use to detect the exact break point of the
fiber link?

A

OTDR

Optical time domain reflectometer

63
Q

Which of the following can be used to centrally manage credentials for various types of administrative privileges on configured network devices?

A

TACACS+

64
Q

A network technician is installing new software on a Windows-based server in a different geographical location.

Which of the following would be BEST for the technician to use to perform this task?

A

RDP

Remote Desktop Protocol

65
Q

Branch users are experiencing issues with videoconferencing.

Which of the following will the company MOST likely configure to improve performance for these applications?

A

Quality of service

66
Q

A technician is assisting a user who cannot connect to a network resource. The technician first checks for a link light.

According to troubleshooting methodology, this is an example of:

A

questioning the obvious.

67
Q

Which of the following transceiver types can support up to 40Gbps?

A

QSFP+

Quad small factor pluggable

68
Q

Which of the following TCP ports is used by the Windows OS for file sharing?

A

445

69
Q

A network administrator redesigned the positioning of the APs to create adjacent areas of wireless coverage. After project validation, some users
still report poor connectivity when their devices maintain an association to a distanced AP. Which of the following should the network
administrator check FIRST?

A

Validate the roaming settings on the APs and WLAN clients

70
Q

Which of the following connector types would have the MOST flexibility?

A

SFP

Small form factor portable

71
Q

Which of the following ports is commonly used by VoIP phones?

A

5060

72
Q

A network engineer is investigating reports of poor network performance. Upon reviewing a report, the engineer finds that jitter at the office is
greater than 1 Oms on the only WAN connection available. Which of the following would be MOST affected by this statistic?

A

A VoIP sales call with a customer

73
Q

A network technician needs to ensure outside users are unable to telnet into any of the servers at the datacenter. Which of the following ports should be blocked when checking firewall configuration?

A

23

74
Q

A technician is writing documentation regarding a company’s server farm. The technician needs to confirm the server name for all Linux servers.

Which of the following commands should the technician run?

A

nslookup

75
Q

A technician is connecting multiple switches to create a large network for a new office. The switches are unmanaged Layer 2 switches with multiple connections between each pair. The network is experiencing an extreme amount of latency. Which of the following is MOST likely occurring?

A

A broadcast storm

76
Q

A store owner would like to have secure wireless access available for both business equipment and patron use. Which of the following features
should be configured to allow different wireless access through the same equipment?

A

SSID

Service Set Identifier

77
Q

Which of the following systems would MOST likely be found in a screened subnet?

A

FTP

File transfer protocol

78
Q

Which of the following would need to be configured to ensure a device with a specific MAC address is always assigned the same IP address from DHCP (Dynamic Host Configuration Profile)?

A

Reservation

79
Q

Access to a datacenter should be individually recorded by a card reader even when multiple employees enter the facility at the same time. Which
of the following allows the enforcement of this policy?

A

Access control vestibules

80
Q

A workstation is configured with the following network details:

IP address 
10.1.2.23
Subnet mask
10.1.2.0/27
Default Gateway
10.1.2.1

Software on the workstation needs to send a query to the local subnet broadcast address.

To which of the following addresses should the software be configured to send the query?

A

10.1.2.31

81
Q

After the A record of a public website was updated, some visitors were unable to access the website. Which of the following should be adjusted to
address the issue?

A

TTL

Time to Live

82
Q

A network administrator is installing a wireless network at a client’s office.

Which of the following IEEE 802.11 standards would be BEST to use
for multiple simultaneous client access?

A

CDMA

Code Division Multiple Access

83
Q

A technician is installing multiple UPS units in a major retail store. The technician is required to keep track of all changes to new and old equipment.

Which of the following will allow the technician to record these changes?

A

Asset Tags

84
Q

Which of the following attacks encrypts user data and requires a proper backup implementation to recover?

A

Ransomware

85
Q

A network administrator wants to analyze attacks directed toward the company’s network.

Which of the following must the network administrator implement to assist in this goal?

A

A honeypot

86
Q

A network administrator is configuring a database server and would like to ensure the database engine is listening on a certain port.

Which of the following commands should the administrator use to accomplish this goal?

A

netstat -a

87
Q

A technician is implementing a new wireless network to serve guests at a local office. The network needs to provide Internet access but disallow
associated stations from communicating with each other.

Which of the following would BEST accomplish this requirement?

A

Wireless client isolation

88
Q

A company requires a disaster recovery site to have equipment ready to go in the event of a disaster at its main datacenter. The company does not have the budget to mirror all the live data to the disaster recovery site.

Which of the following concepts should the company select?

A

Warm site

89
Q

An IT technician suspects a break in one of the uplinks that provides connectivity to the core switch.

Which of the following command-line tools should the technician use to determine where the incident is occurring?

A

show interface

90
Q

A technician is connecting DSL for a new customer. After installing and connecting the on-premises equipment, the technician verifies DSL synchronization. When connecting to a workstation, however, the link LEDs on the workstation and modem do not light up.

Which of the following
should the technician perform during troubleshooting?

A

Replace the cable connecting the modem and the workstation.

91
Q

Which of the following services can provide data storage, hardware options, and scalability to a third-party company that cannot afford new devices?

A

laaS

Infrastructure as a Service

92
Q

A network administrator is talking to different vendors about acquiring technology to support a new project for a large company.

Which of the
following documents will MOST likely need to be signed before information about the project is shared?

A

NDA

93
Q

Two remote offices need to be connected securely over an untrustworthy MAN. Each office needs to access network shares at the other site.
Which of the following will BEST provide this functionality?

A

Site-to-site VPN

94
Q

A network requirement calls for segmenting departments into different networks. The campus network is set up with users of each department in
multiple buildings.

Which of the following should be configured to keep the design simple and efficient?

A

Port tagging

95
Q

Which of the following protocols will a security appliance that is correlating network events from multiple devices MOST likely rely on to receive
event messages?

A

Syslog

96
Q

Which of the following is MOST commonly used to address CVEs on network equipment and/or operating systems?

A

Firmware update

97
Q

A network technician is investigating an issue with hand held devices in a warehouse. Devices have not been connecting to the nearest APs, but they have been connecting to an AP on the far side of the warehouse. Which of the following is the MOST likely cause of this issue?

A

The nearest APs are configured for 802.11 g.

98
Q

Which of the following uses the destination IP address to forward packets?

A

A router

99
Q

Which of the following OSI model layers is where conversations between applications are established, coordinated, and terminated?

A

Session

100
Q

A business is using the local cable company to provide Internet access. Which of the following types of cabling will the cable company MOST
likely use from the demarcation point back to the central office?

A

RG-6

101
Q

A network administrator decided to use SLAAC (stateless address autoconfiguration) in an extensive IPv6 deployment to alleviate IP address management. The devices were properly connected into the LAN but autoconfiguration of the IP address did not occur as expected.

Which of the following should the network administrator verify?

A

The network gateway is configured to send router advertisements.

102
Q

Which of the following is used to provide networking capability for VMs at Layer 2 of the OSI model?

A

vSwitch

103
Q

A network administrator is required to ensure that auditors have read-only access to the system logs, while systems administrators have read and
write access to the system logs, and operators have no access to the system logs. The network administrator has configured security groups for
each of these functional categories. Which of the following security capabilities will allow the network administrator to maintain these
permissions with the LEAST administrative effort?

A

Role-based access

104
Q

Which of the following would be used to expedite MX (Mail Exchange) record updates to Authorize NSs?

A

Time to live

105
Q

A client moving into a new office wants the IP network set up to accommodate 412 network-connected devices that are all on the same subnet. The subnet needs to be as small as possible. Which of the following subnet masks should be used to achieve the required result?

A

255.255.254.0

106
Q

A company is being acquired by a large corporation. As part of the acquisition, the company’s address should now redirect to the corporate organization page. Which of the following DNS records needs to be created?

A

CNAME

107
Q

A user having difficulty with video conferencing and is looking for assistance. Which of the following would BEST improve performance?

A

Quality of service

108
Q

A network technician is configuring a new firewall for a company with the necessary access requirements to be allowed through the wirewall.

Which of the following would normally be applied as the LAST rule in the firewall?

A

Implicit Deny

109
Q

A technician wants to install a WAP in the center of a room that provides service in a radius surrounding a radio.

Which of the following antenna types should the AP utilize?

A

Omni

110
Q

A systems administrator is running a voip network and is experiencing jitter and high latency. Which of the following would BEST help the administrator determine the cause of the issues?

A

Configuring SNMP traps on the network.

Simple Network Management Protocol

111
Q

The following interactions were published about the proper network configuration for a videoconferencing device: “Configure a valid static RFC1918 address for your network. Check the option to use a connection over NAT.”

Which of the following is a valid IP address configuration for the device?

A

172.19.0.2

112
Q

A Network administrator is reviewing interface errors on a switch. Which of the following indicated that a switchport is recieving packets in excess of the configured MTU?

A

Giants

113
Q

A Network administator needs to implement an HDMI over IP solution. Which of the following will the network administrator MOST likely use to ensure smooth video delievery?

A

Jumbo Frames

114
Q

A Network administrator wants to reduce overhead and increase efficiency on a SAN (storage area network). Which of the following can be configured to achieve these goals?

A

Jumbo Frames

115
Q

A rouge AP was found plugged in a providing internet access to employees in the breakroom. Which of the following would be best to use to stop this from happening without physically removing the WAP?

A

Port Security

116
Q

A company’s network is set up so all internent-bound traffic from all remote offices exists through the main datacenter. Which of the following network topologies would BEST describe this setup?

A

Hub-and-Spoke

117
Q

To comply with industry requirements, a security assessment on the cloud server should identify which protocols and weaknesses are being exposed to attackers on the internet. Which of the following tools is the most appropriate to complete the assessment?

A

Use nmap and set the servers’ public IPs as the targets.

118
Q

A systems administrator is configuring a firewall using NAT with PAT. Which of the following would be BEST suited for the LAN interface?

A

172.23.0.0/16

119
Q

A packet is assigned a value to ensure it does not trverse a network indefinitely. Which of the following best represents this value?

A

Time to live

120
Q

Which of the following policies should be referenced when a user wants to access work email on a personal cell phone?

A

BYOD policy

121
Q

After a firewall replacement, some alarms and metrics related to network availability stopped updating on a monitoring system relying on SNMP. Which of the following should the network administrator do FIRST?

A

Modify the device’s MIB on the monitoring system.

Management Information Base

122
Q

At the destination host, which of the following OSI model layers will discard a segment with a bed checksum in the UDP header?

A

Transport

123
Q

A voice engineer is troubleshooting a phone issue. When a call is placed, the caller hears echoes of the recievers voice. Which of the following are causes of this issue?

A

Jitter QOS Misconfiguration

124
Q

Which of the following VPN configurations should be used to separtate Internet and corperate traffic?

A

Split-tunnel

125
Q

Which of the following is required when connecting an endpoint device with an RJ45 port to a network device with an ST port?

A

A media converter

126
Q

The management team has instituted a 40-hr RTO as part of the disaster recovery plan. Which of the following procedures would meet the policy’s requirements?

A

Recover all systems within 48 hours.

127
Q

Which of the following cable types would most likely be used to provide high-speed network connectivity between nearby buildings?

A

Fiber

128
Q

Which of the following is a physical security mechanism that would most likely be used to enter a secure site?

A

An access control vestibule

129
Q

Which of the following best describes a North-South traffic flow?

A

A management application connecting to managed devices

130
Q

A network switch was installed to provide connectivity to cameras monitoring wildlife in a remote location. The organization is concerned that intruders could potentially leverage unattended equipment in the remote location to connect rogue devices and gain access to the organization’s resources.

Which of the following techniques would BEST address the concern?

A

Configure port security using MAC filtering.

131
Q

A technician is documenting an application that is installed on a server and needs to verify all existing web and database connections to the
server. Which of the following tools should the technician use to accomplish this task?

A

netstat

132
Q

A technician is assisting a user who cannot access network resources when the workstation is connected to a VoIP phone. The technician
identifies the phone as faulty and replaces it. According to troubleshooting methodology, which of the following should the technician do NEXT?

A

Verify functionality.

133
Q

Which of the following OSI model layers contains IP headers?

A

Network

134
Q

A small office is running WifI 4 APs, and neighboring offices do not want to increase the throughput to associated devices. Which of the following is the MOST cost-effieient way for the office to increase network performance?

A

Enable channel bonding

135
Q

A technician is troubleshooting an application issue. The technician is able to recreate the issue in a virtual environment. According to the troubleshooting methodology, which of the following actions will the technician most likely perform NEXT?

A

Establish a theory of probable cause

136
Q

Which of the following types of datacenter architectures will most likeley be used in a large SDN anc can be exxtended beyond the datacenter?

A

Three-tiered network, Spine and leaf

137
Q

A techician is troubleshooting a clients report about poor wireless performance. Using a client monitor, the technician notes the following information:

SSID - Signal (RSSI) - Channel
Corperate   -50.  9 
Corperate   -69.  10
Corperate   -67    11
Corperate   -63   6

Which of the following is MOST likely the cause of the issue?

A

Channel Overlap

138
Q

A network techician reviews an entry on the syslog server and discovers the following message from a switch:

SPANNING_TREE Port 1/1 BLOCKED -
Which of the following describes the issue?

A

A loop was discovered, and the impact was mitigated.

139
Q

A company just migrated its email service to a cloud solution. After the migration, two-thirds of the interal users were unable to connect to thier mailboxes, but the connection fails for the other one-third of internal users. Users working externally are not reporting any issues. The network administrator identifies the following output collected from an internal host: c:\user> nslookup newmail.compy.com non-authoritive answer:

Name: mewmail.companyu.com
IPs: 3.219.13.186, 64.58.225.184, 184.168.131.243

Which of the following verification tasks should the network administator perform next?

A

Check the firewall ACL to verify all required IP addresses are included.

140
Q

A network technician was hired to harden the security of a network. The technician is required to enable encryption and create a passowrd for AP security through the web browser. Which of the following best support these requirements?

A

WPA2

141
Q

Which of the following ports are associated with IMAP?

A

143, 993

142
Q

A network administrator is trying to identify a device that is having issues connecting to a switchport. Which of the following would best help identify the issue?

A

A syslog server

143
Q

A company with multiple routers would like to implement an HA network gateway with the least amount of downtown posssible. This solution should not require changes on the gateway setting of the network clients. Which of the following should the technican configure?

A

Configure a shared VIP and deploy VRRP on the routers.

144
Q

Which of the following protocols would allow a secure connection to a Linux-based system?

A

SSH

145
Q

A network administrator is troubleshooting the communication between two Layer 2 switches that are reporting a very high runt count. After trying
multiple ports on both switches, the issue persists. Which of the following should the network administrator perform to resolve the issue?

A

Increase the MTU size on both switches.

146
Q

Users attending security training at work are advised not to use single words as passwords for corporate applications. Which of the following
does this BEST protect against?

A

A dictionary attack