ITProTV - NET+ 008 Practice Exam: Baseline #1 Flashcards

Question 1

Q

** Which WAN technology offers the highest potential bandwidth?

Frame Relay
T3
E3
FDDI
OC-3

Answer

A

OC-3

Explanation:
SONET WAN Technologies
- Frame Relay up to 1.544 Mbps
- OC-1 speeds up to 51.84 Mbps
- OC-3 speeds up to 155.52 Mbps
- OC-12 speeds up to 622.08 Mbps
- ATM speeds up to 622 Mbps

Question 2

Q

** While troubleshooting a network outage on a 10GBase-SW network, a technician finds a 500-meter fiber cable with a small service loop and suspects it might be the cause of the outage. Which of the following is MOST likely the issue?

bend radius exceeded
maximum cable length exceeded
dirty connectors
RF interference caused by impedance mismatch

Answer

A

maximum cable length exceeded

Explanation:
10GBase-SW max cable length is 300 meters.

Bend Radius Exceeded - could be the problem if the max cable length wasn’t exceeded already. Remember, fiber-optic cable has max distances depending on the type of cable used and thet ype of network being implemented.

attenuation/DB loss - is reduction in power of the light signal as it is transmitted.
SFP/GBIC cable mismatch - occurs when you use the wrong cable type.
Bad SFP/GBIC cable or transceiver - occurs when you need to replace the component that is bad.
Wavelength mismatch - multimode fiber is designed to operate at 850 and 1300 nm while singlemode fiber is optimized for 1310 and 1550nm. If the wrong wavelength is implemented or a device is added to the network that operates at the wrong wavelength, signal loss will occur.
Fiber type mismatch - if you seu different types of fiber cable on the same network, you will get DB loss.
Connector mismatch - using the wrong connectors on your network, devices will be unable to communicate.

Question 3

Q

** Your network uses a single switch that divides your network into 3 virtual LANs (VLANs). The devices in each VLAN are connected to a single port on the switch. You plan to implement a second switch on your Network. You need to ensure that the VLANs that were originally implemented are spread across both switches. What should you do?

create a subnet-based VLAN on both switches.
implement frame tagging on both switches.
create a protocol-based VLAN on both switches.
Create a port-based VLAN on both switches.

Answer

A

implement frame tagging on both switches

Explanation:
Frame Tagging is a technique that adds a small ehader to the frame as it is passed between devices in order to maintain the original VLAN broadcast domain. In normal Ethernet, there is NO Tagging. Tagging is implemented only when Trunking VLANs between devices is involved. If you have only one switch, untagged VLAN is just fine. If you have two or more switches and you want all the VLANs to talk with each other, they will need the same TAG.

Question 4

Q

Which one of these requires a user complete an action, such as digitally signing an AUP, prior to accessing the Network?

Captive Portal
Access Control List
MAC Filter
Port Security

Answer

A

Captive Portal

Explanation:
Captive Portals - are Web Pages, typically used in public Networks, where users must complete some action before they are granted access to the Network. Captive Portals are commonly seen in coffee shops, hotels, airports, and the user often has to accept an acceptable use policy (AUP) before they can connect to the internet.

Port Security - Allows a Network administrator to only allow a specific MAC Address (or group of MAC Addresses) on a Switch port.

MAC Filtering - Basically does the same thing as Port Security, but Port Filtering works on Switches where MAC Filtering works on Routers. Accomplished by granting or denying Network access to a list of MAC Addresses. The List of MAC Addresses for which you are either granting or denying access to is stored in an Access Control List (ACL)

ACLs - compare the entity that is requesting access to a Network resource against a list of valid entities. Access is granted or denied based on the access configured for that entity. Simply put, ACLs identify which users have access to a given object, such as a drive, a file, or a directory.

Question 5

Q

Your company has decided to implement an Acceptable Use Policy (AUP) that must be distributed to all users. You have been asked to write the preliminary policy to submit your management approval. What is defined in this policy?

which method administrators should use to back up Network data
how users are allowed to employ company hardware
the sensitivity of company data
which users require access to certain company data

Answer

A

how users are allowed to employ company hardware

Question 6

Q

Your company has a corporate-wide Windows Server network using the TCP/IP protocol. Several users are complaining that their computers are getting IP address conflics. Which action should you perform?

Implement a DHCP Server
Increase the TCP window size
Change the MAC Address for each Network interface card
Manually configure IP Addresses on each computer

Answer

A

Implement a DHCP server

Question 7

Q

One of your branch offices is located on two non-adjacent floors in an office building. You have been given permission to route a communications link between the two floors using existing conduit in the building’s elevator shaft. Your current cabling plan calls for TP wiring on each of the two floors, but the distance between them is more than 90 meters. You need to interconnect the two floors using fiber optic cable in the cheapest manner possible. Which of the following should you deploy between the wiring centers on each floor?

Media Converters
Firewalls
Modems
Hubs
Routers
Switches

Answer

A

Media Converters

Question 8

Q

You support multiple wireless networks. You need to ensure that the protocols used offer the appropriate level of security. Match the descriptions on the left with the Wireless Encryption Protocols on the right?

Descriptions:
Uses a 256-bit Preshared Key
Requires RADIUS Server
Uses a 40-bit or 104-bit Key

Answers:
WEP
WPA/WPA2 Personal
WPA/WPA2 Enterprise

Answer

A

WEP = Uses a 40-bit or 104-bit Key
WPA/WPA2 Personal = Uses a 256-bit pre-shared Key
WPA/WPA2 Enterprise = Requires a RADIUS Server

Question 9

Q

You are designing a SOHO Network for your company. You want to use the Ethernet standard that supports a data transmission rate of 1 Gbps over copper cable. Which Ethernet standard should you use on the Network?

10Base-T
1000BaseCX
1000BaseSX
100Base-FX

Answer

A

1000BaseCX

Question 10

Q

You need to increase the arena that is covered by your Wireless Network to include another building. You decide to use a signal bounce. All of the following could help with this issue EXCEPT?

repeaters
encryption
reflectors
channel bonding

Answer

A

encryption

Question 11

Q

Management has stipulated that you must use unshielded twisted-pair category consists of four twisted pairs of copper wire that is certified for transmission rates up to 100 Mbps for the new guest network you are setting up. Which cabling category should you use?

CAT 2
CAT 1
CAT 4
CAT 5
CAT 3

Answer

A

CAT 5

Explanation:
Transmission Rates
CAT 1 = 4 Mbps, 2 Twisted Pairs
CAT 2 = 4 Mbps
CAT 3 = 10 Mbps
CAT 4 = 16 Mbps
CAT 5 = 100 Mbps
CAT 5e = 1000 Mbps (1 Gbps)
CAT 6 = 1000 Mbps
CAT 6a = 10 Gbps
CAT 7 = 10 Gbps
CAT 8 = 40 Gbps

Question 12

Q

Protocols:
POP3
HTTPS
FTP
IMAP
RDP

Answers:
Port 3389
Port 110
Port 21
Port 143
Port 443

Answer

A

POP3 = 110
HTTPS = 443
FTP = 21
IMAP = 143
RDP = 3389

Question 13

Q

To improve security, you change your Web server named Web1 to the HTTPS protocol. Shortly after implementing the change, users report that they cannot access any Web sites hosted on Web1 by using their fully qualified domain names (FQDN). However, they can access other websites that are hosted on other Web Servers by using their FQDN. What is causing the problem?

HTTPs is not a supported protocol.
The local area network (LAN) is down.
The DNS Server is down.
The new Web address starts with https instead of http.

Answer

A

The new Web address starts with https instead of http.

Question 14

Q

A Network admin use wants the Network can accept an MTU value above 1500. Which of the following should he configure?

UTM appliance
Jumbo Frame
Virtual Router
FCoE

Answer

A

Jumbo Frame

Question 15

Q

What is a physical barrier that acts as the first line of defense against an intruder?

a lock
a turnstile
an access control vestibule
a fence

Question 16

Q

You use HTTPS to secure your e-commerce website. You suspect an external breach has occurred. What should you do to enhance transaction security?

Hashing files
Generating new keys
Avoiding common passwords
disabling IP ports

Answer

A

Generating new keys

Question 17

Q

Your organization needs to perform a risk assessment for their ISP. Which specific type of assessment should you complete?

Vulnerability Assessment
Process Assessment
Vendor Assessment
Posture Assessment

Answer

A

Vendor Assessment

Question 18

Q

Which TCP Port is the Well-Known Port assigned to SSL?

119
80
443
20

Question 19

Q

Your company has implemented a Firewall that only examines the packet header information. Which type of Firewall is this an example of?

application-level proxy firewall
kernel proxy firewall
stateful firewall
packet-filtering firewall

Answer

A

packet-filtering firewall

Question 20

Q

You need to implement Spanning Tree Protocol (STP) to prevent Network Loops when more than one path can be used. Which two devices could you deploy? (Choose Two)

Switches
Routers
Bridges
Hubs

Answer

A

Switches

Bridges

Question 21

Q

Your company wants to use the Private Class B Network designation of 172.17.0.0/20. You have been asked to divide it up into six subnets. Two subnets should have 512 nodes and four more subnets have 256 nodes already established. While a total of 2,048 IP addresses are needed, the design should leave some room for growth in each subnet.
What is the correct way to subnet this network?

Allocate two networks with /22 masks, and the remaining four with /23 masks.
Allocate two networks with /20 masks, and the remaining four with /22 masks.
Allocate two networks with /21 masks, and the remaining four with /22 masks.
Allocate two networks with /24 masks, and the remaining four with /25 masks.
Allocate two networks with /23 masks, and the remaining four with /24 masks.

Answer

A

Allocate two networks with /22 masks, and the remaining four with /23 masks.

Question 22

Q

Which of these devices functions works at Layer 7?

VoIP Gateway
Content Filter
NGFW
VoIP PBX

Answer

A

NGFW (Next Generation Firewall)

Explanation:
Layer 7 = Application Layer

Question 23

Q

Which of the following would be used to help defend against a Man-in-the-Middle Attack?

Flood Guard
DHCP Snooping
Root Guard
BPDU Guard

Answer

A

DHCP Snooping

Question 24

Q

Your organization has implemented Kerberos 5 to authenticate its users. A member of management has asked you to explain ticket granting in Kerberos 5. You want to explain all the components of Kerberos to this member of management. Which entity is a ticket that is granted to a client after a client is Authenticated?

AS
KDC
TG S
TGT

Answer

A

TGT (Ticket-Granting Ticket)

Explanation:
AS = Authentication Server
KDC = Key Distribution Center
TGS = Ticket Granting Server

Question 25

Q

A company procedure calls for using the IPv4 and IPv6 Loopback addresses as part of the troubleshooting process. Which of the following explanations best represents the purpose of this tool?

To provide an IP address for testing the local IP stack through the Network interface.
To provide an IP address that is always available even in the absence of a Network.
To provide an IP address to check interface drivers and hardware.
To provide an IP address for testing the local IP stack without a physical Network connection.
To provide an IP address to determine minimum round-trip performance for packets.

Answer

A

To provide an IP address for testing the local IP stack without a physical Network connection.

Question 26

Q

You are using DSL to connect to the Internet. You recently setup Firewall software to protect your computer’s resources from external users. After setting up the Firewall software, you can no longer access Websites by name.

What is the problem?

You do not have a static IP address.
Your DHCP scope is exhausted.
You have a DHCP server on the Network.
Your firewall software is blocking port 53.
Your firewall software is blocking port 25.

Answer

A

Your firewall software is blocking port 53.

Explanation:
Port 53 is DNS (Domain Name System) which translates Frequently Qualified Domain Names (FQDN) to IP Addresses.

Question 27

Q

You administer your company’s 100Base-TX Ethernet Network. TCP/IP is the Networking protocol used on the Network. You want the routers on the network to send you notices when they have exceeded specified performance thresholds. Which protocol should you use to enable the routers to send the notices?

Telnet
SMTP
SNMP
ARP

Answer

A

SNMP (Simple Network Management Protocol)

Question 28

Q

You need to assign a virtual IP address to an internet server. What are valid reasons for doing so? (Choose ALL that Apply)

To permit multiple servers to share the same address.
To prevent generic addresses for immediate access
To permit the same address to access multiple domain names
To permit a single network interface to service multiple incoming service requests
To eliminate host dependencies on specific, individual network interfaces

Answer

A

To permit multiple servers to share the same address
To permit the same address to access multiple domain names
To eliminate host dependencies on specific, individual network interfaces.

Question 29

Q

You manage a network for your organization. The network contains one DNS server and three routers. You are setting up a new DHCP server. You configure separate scopes for each subnet on your Network. The routers are configured to forward DHCP requests. You need to ensure that DHCP clients receive the appropriate settings using the least administrative effort. What else should you do? (Choose ALL that Apply)

Configure the DNS server as a scope option for each scope
Configure the DNS server as a server option
Configure each router as a scope option for its appropriate scope
Configure each router as a server option

Answer

A

Configure the DNS server as a server option

Configure each router as a scope option for its appropriate scope

Question 30

Q

You just installed a replacement switch that was moved from one part of the network to a new location. After all the patch cables are reconnected, some users cannot communicate via email. What is the most likely issue?

Network connection LED status indicators
VLAN mismatch
Bad Port
Attenuation

Answer

A

VLAN mismatch

Question 31

Q

Which wireless topology only requires one access point to be physically connected to the wired network, while still offering maximum flexibility and redundancy?

Bluetooth
Mesh
Ad Hoc
Infrastructure

Question 32

Q

Which device or feature provides a bridge between the physical environment and the virtual environment?

Virtual router
Hypervisor
Virtual NIC
Virtual Firewall

Answer

A

Virtual NIC (Network Interface Card)

Question 33

Q

You have been called to troubleshoot a workstation problem in the oldest building on your company’s corporate campus. The network workstations in the building are unreliable. When the room lights are on, connectivity is lost, but when the room lights are off, the network is functional. Upon arrival, you quickly survey the work environment. You observe the following conditions:

Lighting consists mainly of fluorescent lights.
Temperature is 65 degrees Fahrenheit (18 degrees Celsius)
Humidity is 75%
Employees own space heaters, but they are not using them.
Electrical outlets appear outdated.

What is most likely causing the loss of connectivity?

Fluorescent lighting in the room
Defective network hubs
low temperature
voltage fluctuation in the outlets

Answer

A

Fluorescent lighting in the room

Question 34

Q

Your company is located in Atlanta, GA. Management has decided to deploy multiple 802.11b WLANs. You are concerned that there are not enough non-overlapping channels to support the number of access points that you need to deploy. How many non-overlapping channels are supported in this deployment?

five
eleven
three
eight

Question 35

Q

Your company uses a single global IP address that maps to the company’s local IP addresses. When requests are sent from the internal network to destinations outside the company, those requests are mapped from the IP address of the local host that made the request to the global IP address.

What term describes this process?

Network Address Translation (NAT)
Network File System (NFS)
Network Access Point (NAP)
Network Access Server (NAS)

Answer

A

Network Address Translation (NAT)

Question 36

Q

A user reports that she cannot print from her computer. You also notice that they are unable to reach a suppliers web site. The operating system is Windows 8.1. Which command should you start with to help with your diagnosis?

route
ping
nmap
dig

Question 37

Q

Which of these devices can perform router functions?

IDS
Proxy Server
Wireless Controller
Multi-Layer Switch

Answer

A

Multi-Layer Switch

Question 38

Q

You are a system admin. A user calls you complaining that every time she tries to log onto the network, she gets an error message. Other users are not having any problems. Which question is best to ask first when attempting to troubleshoot the problem?

Which error message do you receive?
Have you rebooted your computer?
How much memory is installed in your computer?
What is your username and password?

Answer

A

Which error message do you receive?

Question 39

Q

Users are unable to log in to the network. When you examine the authentication server, you see that CPU usage is almost 100%. What is most likely the issue?

expired IP address
incorrect gateway
unresponsive service
names not resolving

Answer

A

unresponsive service

Question 40

Q

You are the network admin for a healthcare organization. Recently several federal and state government laws have been enacted which will affect network operations. Which change management documentation should record this information?

baselines
regulations
policies
procedures

Answer

A

regulations

Question 41

Q

You are installing the wiring for a small office. You want to connect the fifty computers in the office to the Switch. The CAT6 cables that you plan to use have RJ-45 connectors on both ends. Which component should you use?

110 Block
demarcation extension
66 block
Patch panel

Answer

A

Patch panel

Question 42

Q

You need to deploy a fiber distribution panel for datacenter, remote office, or local area networking use. Which of the following features are NOT important for such uses? (Choose ALL that Apply)

Support for SFP+
Cable storage
Cable termination
Support for GBIC connectors
bulkhead adapters and receptacles
cable splices

Answer

A

Support for SFP+
Support for GBIC Connectors

Explanation:
Fiber distribution panel does not need support for SFP+ and for GBIC connectors.

GBIC connectors are used for end-point termination at a device interface of some kind. They are neither typically used nor necessary on a fiber distribution panel.

SFP+ stands for the enhanced, or plus, version of the Small Form-Factor (Hot) pluggable or (SFP) fiber optic connector. SFP+ connectors are used for endpoint connections and not in FDPs which do not need optical-to-digital or digital-to-optical conversion.

Question 43

Q

You administer a LAN. You want to encrypt TCP/IP communications on the LAN. The protocol that you use for encryption should be able to encrypt entire data packets, and the protocol should be able to operate in both tunnel mode and transport mode. Which protocol should you use to encrypt data on the Network?

Kerberos
IPX
L2TP
IPSec

Answer

A

IPSec (Internet Protocol Security)

Question 44

Q

You are a desktop admin for Nutex Corporation. Your org uses Ethernet cable to connect network resources. A user reports that he is unable to access network resources on his portable computer. The portable computer is connected to the company’s network using an Ethernet cable. When you test the cable using a time domain reflectometer (TDR) the signal returns too soon. What should you do?

reinstall the network adapter
re-route the network cable
replace the network adapter
replace the network cable

Answer

A

replace the network cable

Question 45

Q

What is the main purpose of a VPN concentrator?

to resolve host names and IP addresses
to manage internet requests and cache web content
to terminate the VPN tunnels
to provide dynamic IP addresses

Answer

A

to terminate the VPN tunnels

Question 46

Q

A TOOL - used to identify and trace Wires?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

Tone Generator/Probe

Question 47

Q

A TOOL - used to test voltage, current, and resistance?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

Multimeter

Question 48

Q

A TOOL - used to check UTP/STP cable resistance levels and locate cable faults?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

TDR (Time Domain Reflectometer)

Question 49

Q

A TOOL - used to collect Network cable test data and print certification reports?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

Cable Certifier

Question 50

Q

A TOOL - used to capture and analyze data that is sent over a Network?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

Protocol Analyzer

Question 51

Q

A TOOL - used to check Fiber cable resistance levels and locate cable faults?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

OTDR (Optical Time Domain Reflectometer)

Question 52

Q

A TOOL - used to test cable resistance levels, but does not locate faults?

Cable Certifier
Cable Tester
Multimeter
OTDR
Protocol Analyzer
TDR
Tone Generator/Probe

Answer

A

Cable Tester

Question 53

Q

You need to check for open circuits and short circuits on your network. Which tool should you use?

Toner Probe
Butt Set
Protocol Analyzer
Cable Tester

Answer

A

Cable Tester

Question 54

Q

Which of the following computing technologies is most likely to fall under the US Government’s export administration regulations designed to protect the sale or transfer of commodities, technology, information, or software considered of strategic importance to the US?

file compression techniques
deduplication software
encryption tools
web page design tools

Answer

A

encryption tools

Question 55

Q

You are examining the packet captured on your network. You notice some communication between your Cisco router and someone from outside your network. The packets indicate that the communication is occurring over TCP port 23. Which protocol is being used?

FTP
Telnet
SSH
TFTP

Question 56

Q

Which social engineering attack is typically considered the most dangerous?

social engineering
physical penetration
trojan horse
dumpster diving

Answer

A

physical penetration

Question 57

Q

You have recently discovered that your company is not maintaining system logs as per the adopted company procedures. You need to decide if the company procedures should be modified, or if the system logs should be maintained as per the procedures. Which statement is an accurate reason for following the company procedures?

Logging helps an administrator to detect security breaches and vulnerable points in a network.
Logging provides audit trails, but increases the risk for security violations.
Logging provides access control by authenticating user credentails.
Logging prevents security violations, but only deals with passive monitoring.

Answer

A

Logging helps an administrator to detect security breaches and vulnerable points in a network.

Question 58

Q

Your company is considering converting to the use of IPv6 addresses. What are the three types of internet protocol version 6 (IPv6) addresses? (Choose Three)

Unicast
Anycast
Dual-cast
Broadcast
Multi-cast

Answer

A

Unicast
Anycast
Multicast

Question 59

Q

Which of these is NOT associated with data conversion between the ISP and the customer premises equipment?

CSU/DSU
Demarcation Point
Smart Jack
ATM

Answer

A

ATM (Asynchronous Transfer Mode)

Question 60

Q

You install a Network analyzer to capture your network’s traffic as part of your company’s security policy. Later, you examine the captured packets and discover that the only packets that were captured are from Subnet 1. You need to capture packets from all four subnets on your network. Two routers are used on your network. What could you do? (Choose Two - Each answer is a complete solution.)

Install the network analyzer on a router.
Install a port scanner
Install a distributed network analyzer
install the network analyzer on the firewall
install the network analyzer on all four subnets

Answer

A

install a distributed network analyzer

install the network analyzer on all four subnets

Question 61

Q

Your database admin needs accurate timestamping for purchases. Which of the following would you implement?

Lease Time
NTP
SRV
CoS

Answer

A

NTP (Network Time Protocol)

Question 62

Q

You are troubleshooting a Network connectivity problem on a Windows 7 Enterprise computer, and you need to view the MAC address for the NIC installed in the computer. Which command should you use?

the ping command
the ipconfig /all command
the tracert command
the arp command

Answer

A

the ipconfig /all command

Question 63

Q

Your client is experiencing what appears to be a decrease in network throughput. However, the symptoms the client is reporting to you are not detailed enough for your to diagnose the issue and make a recommendation. What will best assist you in pinpointing the bottleneck the next time it occurs?

Standard operating procedures/work instructions
Network configuration and performance baselines
Wiring and port locations
Rack diagrams

Answer

A

Network configuration and performance baselines

Question 64

Q

You have a strong wireless password policy, but users (including management) are complaining about it. Consequently, enforcement is difficult. You need a protocol solution that does not require digital certificates. Which of these choices would help you secure your Network?

PEAP
EAP-FAST
EAP-TLS
Geofencing

Answer

A

EAP-FAST (Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling)

Answer 59

A

subnet: 172.16.4.0, broadcast: 172.16.5.255

Answer 60

A

Test the Theory.

Answer 61

A

no expectation of privacy

Answer 62

A

A brouter

Explanation:
A brouter can act as a bridge or a Router. When acting as a bridge, a brouter operates at the Data Link layer, when acting as a Router it operates at the Network Layer.

Answer 63

A

2001:DB8:0:1::F00D

Explanation:
Removing leading zeros.
Remove consecutive fields with zeros with double colon (::)
The double colon (::) can be used only once.

Answer 64

A

Users can be grouped by their work functions, by shared applications or protocols, or by department, regardless of their geographical location.

Answer 65

A

25 (SMTP = Simple Mail Transfer Protocol)

Explanation:
SMTP = Sending/Forwarding Email between Servers
POP3 & IMAP = Receiving Email
POP3 = 110
IMAP = 143

Answer 66

A

HTTP (Hypertext Transfer Protocol - Port 80)

Answer 67

A

to increase network security
to reduce congestion by decreasing network traffic

Explanation:
Subnets are used for the following Reasons:
- To expand the Network.
- To reduce congestion.
- To reduce CPU use.
- To isolate Network problems.
- To improve Security.
- To allow combinations of media, because each subnet can support different medium.

Answer 68

A

the client selected the IP address using APIPA. (Automatic Private IP Addressing)

Answer 69

A

change the default credentials

Answer 70

A

5 GHz

Explanation:

11a = 5 GHz / 54 mbps
11b = 2.4 GHz / 11 mbps
11g = 2.4 GHz / 54 mbps
11n = 2.5 & 5 GHz / 100+ mbps
11ac = 5 GHz / up to 1 gbps
11ax = 2.4, 5 GHz, 6 GHz / 10 gbps

Answer 71

A

Broadcast Domain

Answer 72

A

traceroute

Answer 73

A

It implements VLAN trunking.

Answer 74

A

throughput tester

Answer 75

A

IPAM (IP Address Management)

Answer 76

A

MTU (Maximum Transmission Unit)

Answer 77

A

high-gain antennas provide a small vertical beamwidth.

Answer 78

A

130.250.0.0

Answer 79

A

signature-based IDS

Explanation:
signature-based = relies upon a database that contains the identities of possible attacks.

network-based IDS = is attached to the network in a place where it can monitor all network traffic.

anomaly-based IDS = detects activities that are unusual.

behavior-based IDS = looks for behaviors that is not allowed and acts accordingly.

Answer 80

A

virtual SAN

Answer 81

A

SNMP (Simple Network Management Protocol)

Answer 82

A

ICMP (Internet Control Message Protocol)

Answer 83

A

RSH (Remote Shelll)

Explanation:
RSH = Remote Shell, used to log on to remote computers and can be easily exploited by man-in-the-middle attacks.

Answer 84

A

create a DHCP reservation

Answer 85

A

port scanner

Answer 86

A

Class C

Explanation:
Class A = 00000000 - 11111110 // 0 - 126
Class B = 10000000 - 10111111 // 128 - 191
Class C = 11000000 - 11011111 // 192 - 223
Class D = 11100000 - 11101111 // 224 - 239
Class E = 11110000 - 11111111 // 240 - 255

Answer 87

A

Remote Access Service (RAS)

Explanation:
RAS = Is a service provided by Windows that allows Remote Access to the Network via a dial-up connection.

Point-to-Point Tunneling Protocol = PPTP is used to allow networks to connect using the INternet as their WAN link. Does not provide remote dial-up access.

Secure Sockets Layer (SSL) is a security encryption protocol.

Dynamic Host Configuration Protocol is a protocol that allows network administrators to centrally manage and automate the assignment of Internet Addresses in an organization’s network. DHCP can automatically assign a new IP address when a computer is plugged into a different location the network. It does not provide remote dial-up access.

Answer 88

A

Remote Authentication Dial-In User Service (RADIUS)

Explanation:
RADIUS was originally designed for Dial-Up networking and validates the credentails of a remote user against a stored database.

Terminal Access Controller Access Control System Plus (TACACS+) authenticates credentials of a remote user, typically an administrator. Only provides Authentication, not Authorization.

Lightweight Directory Access Protocol (LDAP) validates user credentials (typically just username/password) against a database stored in Microsoft Active Directory, Open LDAP, or OpenDJ. LDAP runs over TCP.

Single Sign-On (SSO) allows a client to access multiple applications with a single set of credentials. SSO relies on several underlying authentication technologies, and on its own does NOT use UDP or TCP.

Answer 89

A

A = Maps a host name to an IPv4 Address
AAAA = Maps a host name to an IPv6 Address
CNAME = Maps an additional host name to an existing host record
MX = Maps a mail server name to a domain
PTR = Maps an IP address to a host name (Reverse)

Other:
SVR = specifies location data, IE: port numbers for specified services.
TXT = provides the ability to associate other services, sometimes your mail service, to your domain
SOA = stores important information about the DNS zone for your domain, each zone must have an SOA record

Answer 90

A

Intrustion Prevention System (IPS)

Explanation:
IPS = detects and controls access to the network for intruders
IDS = Intrusion Detection System only Detects the intrusion and then notifies or logs it.

Answer 91

A

war chalking

Explanation:
war chalking = occurs when hackers write SSID and security information on the side of buildings. It has evolved to the point where hackers are now publishing this information on Websites.

WEP cracking = is the process of cracking WEP security.
WPA cracking = is the process of cracking WPA security.

Evil Twin = occurs when a wireless access point that is not under your control is used to perform a hijacking attack. Is a type of Rogue Access Point.

Answer 92

A

post-mortem review

Answer 93

A

VDSL (Very high data rate Digital Subscriber Line)

Explanation:
VDSL = provides the highest data rate at 51 to 55 Mbps over 1000 feet/300 meters.
ADSL = Asymmetric Digital Subscriber Line
HDSL = High bit rate Digital Subscriber Line
SDSL = Symmetric Digital Subscriber Line

Answer 94

A

increased lease time

Explanation:
Lease Time is the amount of time a device maintains the IP address assigned by the DHCP server. Default lease time for Windows is 8 days, but lease times may be adjusted. Increasing Lease Time justification is that every lease must be renewed, and those renewals increase Network Traffic. Increasing the duration of the lease reduces the amount of Network traffic required for lease renewal.

MAC Reservations allow you to permanently assign an IP address to the MAC address of a specific device.

TTL = Time to Live specifies the length of time that a DNS Name server must cache the name. By default, the TTL is 60 minutes, but it may be modified in the DNS management console. Longer TTLs are best for more permanent records such as MX Records and others. Lower TTL would mean additional network traffic.

NTP = Network Time Protocol is used to synchronize clocks of computers and network devices on the Network.
NTP has 3 major elements
     1. Stratum/Clientstratum
     2. Clients
     3. Serverservers

Answer 95

A

Mesh

Explanation:
Bus = All computers are connected to a Single Cable
Star = Each computer is connected to a Central Point
Ring = Each computer is connected to two other computers.
Mesh = Each computer is connected to every other computer (Point-to-Point Connections)

Answer 96

A

MTBF (Mean Time Between Failures)

Explanation:
MTBF = is the average, or mean, time between failures on a device or system. It is an expression of reliability. Generally speaking, it is the average length of time that something will work before it is likely to fail. Good preventive maintenance policies would replace a device, such as a power supply as the time in service approaches MTBF.

MTTR = Mean Time to Revoer is the average, or mean time that it takes to Recover or Restore a system. Can be applied in terms of Backups, or also applied to full system failures, hardware failures.

SLA = Service Level Agreements requirements determine what the vendor who provides technology services is obligated to provide to the customer.

Load Balancer = can be used to divert incoming web traffic based on content, to specific servers to reduce workload of the primary server.

RTO = Recovery Time Objective, refers to the concept of the amount of time in which a business processes and applications must be restored to prevent a defined amount of impact after an outage.
RPO = Recovery Point Objective refers to a maximum tolerable period that data can be considered LOST after an incident.

Answer 97

A

Duplicate MAC Address

Explanation:
Duplicate MAC addresses can be caused by MAC address spoofing or by manufacturers reusing MAC addresses in their devices. Manufacturers will often ship NICs with duplicate MAC addresses to different geographic areas. As long as two NICs with the same MAC addresses have atleast one router between them, there will not be a conflict.

Answer 98

A

CoS (Class of Service)

Explanation:
CoS = implements packet tagging in a LAN. Tags different types of traffic, such as Video Streaming or VoIP.
QoS = Quality of Service, uses the CoS tag to determine which traffic gets priority, but QoS does NOT implement the tags.
Traffic Shaping = the overall mechanism that encompasses CoS, QoS, and differentiated services. It does NOT directly implement tagging.
Diffserv = Differentiated Services, uses the CoS classifications for identification and subsequently utilizes the QoS parameters to differentiate traffic.

Answer 99

A

passive hub

Explanation:
hub = is a central point of connection between media segments.

2 Primary types of Hubs

 1. Passive - sents received signals out through ALL of its ports except the one through which the signal was received. Does NOT amplified or regenerate the signal, therefore it does not require electricity to operate.
 2. Active - also sends data out all of its ports except the one through which the signal was received, but it amplifies or regenerates the signal as it sends it out the ports. Therefore it does require electricity to operate.
 3. Hybrid - not a Primary type, but there is a Hybrid Hub. Used to connect different types of cabling. Typically connects sub-hubs which connect to computers.

Switching Hubs - Also known as Switches or Layer 2 Switches, also serve as connection points between media segments. They are built on a table of MAC Addresses unlike other hubs. Thus they are able to send the signal out through the Specific Port leading to the destination rather than through all of the ports.

Answer 100

A

HVAC Systems

Explanation:
HVAC = Heating, Ventilation, Air Conditioning - important to understand that they too can be vulnerabile to cyberattacks as many of these systems are automated and not designed with cybersecurity in mind. Routinely monitoring and managing these systems is critical whenever designing a new network.

Brainscape's Knowledge GenomeTM

ITProTV - NET+ 008 Practice Exam: Baseline #1 Flashcards

Brainscape's Knowledge Genome^TM