N10-005 Exam

Question 1

Which of the following DNS records would a web browser access to determine the IP address of
an Internet web page?
A. CNAME
B. A
C. MX
D. PTR

Answer 1

B. A

Question 2

Which of the following technologies allows for redundant links within a Layer 2 segment?
A. OSPF
B. RIP
C. Port Mirroring
D. Spanning Tree

Answer 2

D. Spanning Tree

Question 3

Which of the following BEST describes a switch port?
A. Broadcast domain
B. Distance vector
C. Link state
D. Collision domain

Answer 3

D. Collision domain

Question 4

Two WAPs are positioned with overlapping coverage, but seamless roaming across them is not
working. Which of the following should be checked?
A. WPA should be enabled
B. PKI should be turned off
C. WAP SSIDs are matching
D. WAPs are transmitting on same channel

Answer 4

C. WAP SSIDs are matching

Question 5

Which of the following could Kim, a network technician, use to inspect connection setup, request,
and response headers for users connecting to a web server?
A. nbtstat command
B. dig command
C. ipconfig command
D. Protocol analyzer

Answer 5

D. Protocol analyzer

Question 6

Which of the following address blocks would MOST likely be blocked from crossing a border
router?
A. 8.0.0.0/8
B. 172.16.0.0/12
C. 122.0.0.0/24
D. 248.0.0.0/8

Answer 6

B. 172.16.0.0/12

Question 7

Which of the following would Jeff, a technician, MOST likely use to remotely verify port
configuration of a switch?
A. traceroute command
B. SNMP monitor
C. nbtstat command
D. dig command

Answer 7

B. SNMP monitor

Question 8

Lisa, a user, reports increased delays and timeouts when trying to reach several Internet sites.
Which of the following would MOST likely be used when investigating the problem at Lisa’s
workstation?
A. nslookup
B. route
C. nbtstat
D. arp

Answer 8

A. nslookup

Question 9

Which of the following is the broadcast address for a network defined as 192.168.0.0/24?
A. 192.168.0.255
B. 192.168.0.1
C. 192.168.0.0
D. 192.168.0.253

Answer 9

A. 192.168.0.255

Question 10

Which of the following ports would have to be allowed through a firewall to allow SNMP traffic to
pass on its default port? (Select TWO).
A. 22
B. 23
C. 143
D. 161
E. 162
F. 8080

Answer 10

D. 161

E. 162

Question 11

10
Zach, a technician, wants to test a laptop’s NIC for functionality but has no other networking
equipment to attach it to. Which of the following would allow him to test basic functionality of the
NIC?
A. Loopback plug
B. Protocol analyzer
C. Smart jack
D. Coupler

Answer 11

A. Loopback plug

Question 12

Which of the following BEST describes how a layer 2 switch functions?
A. Switches packets within the same subnet based on MAC addresses
B. Switches packets between different subnets based on IP addresses
C. Switches packets between different subnets based on MAC addresses
D. Switches packets within the same subnet based on IP addresses

Answer 12

A. Switches packets within the same subnet based on MAC addresses

Question 13

Which of the following hardware tools would MOST likely be used to verify Layer 1 connectivity?
A. Multimeter
B. Loopback plug
C. Cable certifier
D. CAT3 coupler

Answer 13

B. Loopback plug

Question 14

Which of the following properties of DHCP would Lisa, a technician, use to ensure an IP address
is not leased out from the active scope?
A. Reservations
B. Lease times
C. Removing IPs from the active leases
D. Configuring the DNS options

Answer 14

A. Reservations

Question 15

Which of the following is needed to allow DHCP to route to a different network separated by a
Layer 3 device?
A. DNS suffixes
B. DHCP relay agent
C. Static IP addressing
D. Scope configuration

Answer 15

B. DHCP relay agent

Question 16

Zach, a network technician, is unable to remotely manage or ping certain layer 2 switches. To
manage those devices remotely, which of the following will MOST likely need to be configured?
A. IP address on the native VLAN interface
B. Port security
C. Port forwarding
D. IP address on the fiber interface

Answer 16

A. IP address on the native VLAN interface

Question 17

Which of the following describes a rationale for a network with redundant paths?
A. VPN compatibility
B. Unified communications implementation
C. High availability requirement
D. QoS

Answer 17

C. High availability requirement

Question 18

Which of the following has a maximum transfer rate of 54Mbps and operates at the 5GHz
frequency?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 18

A. 802.11a

Question 19

Which of the following is used to create a secure connection between a client and a host?
A. VLAN
B. Proxy server
C. IIS server
D. VPN

Answer 19

D. VPN

Question 20

20
Which of the following network devices hides network nodes behind one public IP address?
A. Layer 3 switch
B. Content filter
C. VPN server
D. Proxy server

Answer 20

D. Proxy server

Question 21

A VPN concentrator is used for which of the following purposes?
A. MAC filtering
B. Content filtering
C. Secure network access
D. Connectivity troubleshooting

Answer 21

C. Secure network access

Question 22

Jeff, a technician, has been asked to add a subnet to the company’s LAN. Which of the following
interfaces on the router will be modified?
A. FastEthernet 0/0
B. AUX 0
C. Console 0
D. Serial 0/0/0

Answer 22

A. FastEthernet 0/0

Question 23

Lisa, a technician, has configured a new switch that is remotely accessed using SSH. The switch
is working properly but cannot be accessed remotely. Which of the following items is MOST likely
missing in the configuration?
A. Port speed
B. Cryptokey
C. Data VLAN
D. NAT/PAT

Answer 23

B. Cryptokey

Question 24

Kim, a technician, needs to monitor network traffic for bandwidth analysis because of slow Internet
downloads. Which of the following protocols will the tool use to show the necessary information?
A. SNMP
B. NTP
C. SIP
D. PPTP

Answer 24

A. SNMP

Question 25

Kim, a user, on a wireless network reports an issue with network access while using a cordless
phone. Which of the following is the MOST likely cause?
A. Encryption type
B. Channel selection
C. Antenna placement
D. Signal strength

25

Answer 25

B. Channel selection

Question 26

Which of the following 802.11n features allows for the use of multiple simultaneous frequencies in
order to increase usable bandwidth?
A. Channel bonding
B. MIMO
C. Spatial reuse
D. 20MHz channel spacing

Answer 26

A. Channel bonding

Question 27

Zach, a technician, discovers a switch is not communicating with the other switches in a stack.
Which of the following is the MOST likely cause?
A. Both T568A and T568B standards are being used.
B. STP is disabled.
C. The cable is not a crossover.
D. The port is not trunked.

Answer 27

C. The cable is not a crossover.

Question 28

Jeff, a technician, needs multiple networks, high speeds, and redundancy on a system. Which of
the following configurations should Jeff consider for these requirements? (Select TWO).
A. Routing table
B. Next hop
C. Port mirroring
D. Port monitoring
E. VLANs

Answer 28

C. Port mirroring

E. VLANs

Question 29

A new wiring closet is setup to serve users in the east wing of a campus. Equipment is moved
from the old closet, 50 feet (15 meters) away, and installed in the new closet. Users immediately
begin reporting intermittent connectivity issues with both corporate and Internet resources. Which
of the following is the MOST likely cause?
A. Protocol mismatch
B. MTU size was not increased for the new distance
C. Incorrect VLAN assignment
D. Incorrect cabling

Answer 29

D. Incorrect cabling

Question 30

30
Jeff, a customer, shares a building with several other tenants. He reports that an unencrypted
wireless network has been getting slower while his Internet traffic has steadily been increasing.
Which of the following should be configured to resolve this problem?
A. VLAN
B. MTU
C. WPA
D. SSID

Answer 30

C. WPA

Question 31

Kim, a network administrator, is seeing workstations in building C authenticate to the building A
wireless access point. Which of the following would resolve this issue?
A. Change the security method
B. Reduce the transmission power
C. Change the SSID
D. Change the frequency

Answer 31

B. Reduce the transmission power

Question 32

Zach, a network technician, is configuring several switches to be managed remotely. Which of the
following must be configured to connect via SSH to each of those devices, as well as to retrieve
various parameters?
A. PoE settings and VTP configuration
B. SNMP configuration only
C. IP address and SNMP configuration
D. QoS and PoE settings

Answer 32

C. IP address and SNMP configuration

Question 33

Lisa, the network technician, has been instructed to provide connectivity to workstations within a
SOHO that is over 800 feet (243 meters) away from the main switch. Which of the following would
she install to provide connectivity?
A. CAT5e
B. CAT6
C. Coaxial
D. Multimode fiber

Answer 33

D. Multimode fiber

Question 34

During a disaster recovery test, several billing representatives need to be temporarily setup to take
payments from customers. It has been determined that this will need to occur over a wireless
network, with security being enforced where possible. Which of the following configurations should
be used in this scenario?
A. WPA2, SSID enabled, and 802.11n.
B. WEP, SSID enabled, and 802.11b.
C. WEP, SSID disabled, and 802.11g.
D. WPA2, SSID disabled, and 802.11a.

Answer 34

D. WPA2, SSID disabled, and 802.11a.

Question 35

A number of vendors visit a large corporation but are unable to connect to the company’s wireless
network. Kim, the network technician, verifies that other users are connected to the network and it
seems to be fully operational. Which of the following steps should be taken NEXT to troubleshoot
the issue?
A. Verify the SSID is enabled.
B. Ensure the WAP is up and running.
C. Ensure the transmission is not encrypted.
D. Verify the physical network is connected to the wireless network.

Answer 35

A. Verify the SSID is enabled.

Question 36

An 801.11g wireless access point was configured as follows:
- AP encryption forced to WPA2-AES mode only
- MAC address filtering enabled with the following MAC address in the allow list: 00-ab-29-da-c3-
40
Which is true about the above configuration?
A. Any 802.11b/g compatible client can connect to the wireless network if they support TKIP, the
MAC address is 00-ab-29-da-c3-40, and the encryption key is known by the client.
B. An 802.11a compatible client can connect to the wireless network only if its MAC address is 00-
ab-29-da-c3-40 and the encryption key is known by the client.
C. An 802.11n compatible client can connect to the wireless network only if its MAC address is 00-
ab-29-da-c3-40 and the encryption key is known by the client.
D. Any 802.11g compatible client can connect to the wireless network if the encryption key is
known by the client.

Answer 36

C. An 802.11n compatible client can connect to the wireless network only if its MAC address is 00-
ab-29-da-c3-40 and the encryption key is known by the client.

Question 37

Which of the following is the correct representation of an IPv6 address?
A. ::
B. 0:0:0:0:0:0:0:0:1
C. 1:2:3:4:AB:CD:EF
D. 2001::4860:800f::

Answer 37

A. ::

Question 38

Which protocol is represented by the packet capture below?
UDP 0.0.0.0:68 -> 255.255.255.255:67
A. DHCP
B. FTP
C. SNMP
D. DNS

Answer 38

A. DHCP

Question 39

Which of the following default ports are used with DHCP? (Select TWO).
A. 22
B. 23
C. 53
D. 67
E. 68

Answer 39

D. 67

E. 68

Question 40

40
Which of the following is a reason to use dynamic DNS?
A. The host IP address is not listed in the firewall.
B. The host IP address is assigned by DHCP.
C. Static routes cannot be used on the host network.
D. A third-party certificate is being used.

Answer 40

B. The host IP address is assigned by DHCP.

Question 41

Which of the following virtual components maintains a MAC-to-port forwarding table?
A. Virtual PBX
B. Virtual desktop
C. Virtual switch
D. Virtual server

Answer 41

C. Virtual switch

Question 42

Jeff, a user connected to the wireless network, takes a laptop from his desk to a conference room.
Arriving at the conference room, Jeff realizes that the laptop is in process of reconnecting to the
wireless network. Which of the following is a common wireless problem that can cause this issue?
A. Mismatched SSID
B. Incorrect encryption type
C. Weak signal strength
D. Increased latency

Answer 42

C. Weak signal strength

Question 43

Kim, a network administrator, has made changes to the DHCP leasing setup for a given network
and is expecting all devices to recognize the changes shortly. However, after a full week, none of
the machines on the company network are grabbing new addresses with the new lease time.
Which of the following is the problem?
A. The lease time on the original configuration was too long.
B. The firewall was never configured to recognize the changes.
C. The DHCP server was never restarted, so changes never took affect.
D. The lease time on the original configuration was too short.

Answer 43

A. The lease time on the original configuration was too long.

Question 44

Zach, a customer, has Internet service that includes several static IP addresses. Zach wishes to
host a website from a server within a privately addressed network and make it publicly available.
Which of the following would have to be configured on the router to allow the public to access the
website from one of the static IP addresses?
A. QoS monitoring
B. Static NAT
C. VLAN tagging
D. MAC filtering

Answer 44

B. Static NAT

Question 45

Which of the following default services uses TCP/UDP port 88?
A. LDAP
B. IGMP
C. HTTP
D. Kerberos

Answer 45

D. Kerberos

Question 46

Which of the following virtualized components would provide a secure operating environment for a
business user?
A. Virtual PBX
B. Virtual switch
C. Virtual desktop
D. Virtual SAN

Answer 46

C. Virtual desktop

Question 47

Multiprotocol Label Switching (MPLS) operates at which of the following layers of the OSI model?
(Select TWO).
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4
E. Layer 5

Answer 47

B. Layer 2

C. Layer 3

Question 48

Which of the following examples would require a private static IP address, but not a public static IP
address?
A. A PDA connecting to the wireless network.
B. A laptop that is deployed on a LAN.
C. A file server deployed in the internal datacenter.
D. An Internet facing web server for external access.

Answer 48

C. A file server deployed in the internal datacenter

Question 49

Zach, a network engineer, is troubleshooting poor wireless throughput for a group of 15 users in a
large office. Many of the computers are showing moderate to weak signals even though there are
two APs less then 15 feet (4 meters) away in either direction. Which of the following is MOST likely
the cause?
A. The local antennas are not powerful enough.
B. There is an SSID mismatch.
C. The receiver sensitivity is too high.
D. The closest APs are down.

Answer 49

D. The closest APs are down.

Question 50

50
Jeff, a network engineer, is troubleshooting an issue where clients are not receiving IP addresses
from a new, properly configured DHCP server on another subnet. Statically addressed clients can
get onto the same network with no issues. Which of the following is causing the issue?
A. Incorrect VLAN tagging
B. Missing helper addresses
C. Wrong default gateway
D. Improper routing protocols

50

Answer 50

B. Missing helper addresses

Question 51

A new small business needs a network solution that provides at least 50Mbps of bandwidth and
supports full duplex communication. Which of the following meets those needs?
A. 10/100 layer 2 switch
B. 2.4GHz 802.11g
C. 5.0GHz 802.11a
D. 10Base2 Ethernet

Answer 51

A. 10/100 layer 2 switch

Question 52

Which of the following services would Kim, a technician, use to create or update a client's DNS 'A'
and 'PTR' records automatically?
A. Kerberos
B. BIND
C. WINS
D. DHCP

Answer 52

D. DHCP

Question 53

Lisa, an administrator, has set up an 802.11n wireless network. Users with 802.11n laptops have
reported that speeds are slow. After testing, Lisa determines that users max out at 802.11g
speeds. Which of the following would MOST likely fix this issue?
A. Enable wireless multimedia (WMM) for QoS
B. Use the 40MHz channels in the 2.4GHz band
C. Enable access point antenna isolation
D. Limit the clients to 802.11g compatible laptops

Answer 53

A. Enable wireless multimedia (WMM) for QoS

Question 54

Kim, a network administrator, is configuring a switch with an LACP port group for uplink. She plugs
in the secondary uplink of the group, and shortly thereafter receives widespread reports that the
network is malfunctioning. Which of the following is MOST likely the cause?
A. A network loop was created due to a misconfiguration of the port group.
B. The port on the switch for the new secondary link was never enabled.
C. The LACP group was mistakenly configured to do layer 2 + 3 + 4 hashing for its link balancing.
D. The LACP group was only configured to do layer 2 hashing for its link balancing.

Answer 54

A. A network loop was created due to a misconfiguration of the port group.

Question 55

A small office has created an annex in an adjacent office space just 20 feet (6 meters) away. Kim,
a network administrator, is assigned to provide connectivity between the existing office and the
new office. Which of the following solutions provides the MOST security from third party
tampering?
A. CAT5e connection between offices via the patch panel located in building’s communication
closet.
B. CAT5e cable run through ceiling in the public space between offices.
C. VPN between routers located in each office space.
D. A WEP encrypted wireless bridge with directional antennae between offices.

Answer 55

C. VPN between routers located in each office space.

Question 56

Kim, an administrator, is attempting to connect a laptop to a server via RJ-45 ports on both a
device and a CAT5 patch cable. All of the IP settings have been verified to be correct, yet there is
a connectivity problem. Which of the following would MOST likely fix the IP connectivity problem?
A. Wires 1, 2 and 3, 6 need to be swapped on one end of the connecting cable.
B. Use the DB-9 port with a DB-9 to RJ-45 adapter on the server.
C. Manually adjust the duplex mode on the server’s link.
D. Configure the laptop to receive a DHCP address from the server, rather than manually setting
one.

Answer 56

A. Wires 1, 2 and 3, 6 need to be swapped on one end of the connecting cable.

Question 57

To achieve MAXIMUM bandwidth throughput, 802.11n clients should use which of the following?
A. Only the 5GHz band
B. Only the 2.4GHz band
C. Only the 900MHz band
D. Both 2.4GHz and 5GHz bands

Answer 57

A. Only the 5GHz band

Question 58

Clients are unable to connect to the wireless network. The network is secured with WPA2-
Enterprise. Which of the following is MOST likely the cause of the problem?
A. MAC address authentication is being used.
B. The RADIUS server is down.
C. The users are using incorrect passwords.
D. The PSK is wrong.

Answer 58

B. The RADIUS server is down.

Question 59

Jeff, a user, reports getting a “This page cannot be displayed” error message in his web browser.
However, Jeff can ping the default gateway. Which of the following is the MOST likely cause of the
problem?
A. SSL certificates are expired
B. Incorrect WINS server
C. The browser is unsupported
D. Incorrect DNS settings

Answer 59

D. Incorrect DNS settings

Question 60

60
A small business would like to connect a second building on their property to the network. The
building is about 200 meters (656 feet) away from the main building. Which of the following would
be the MOST cost-effective method to supply a gigabit Ethernet connection to the second
building?
A. 10GBase-LW
B. 1000Base-LX
C. 1000Base-SX
D. 1000BaseT

Answer 60

C. 1000Base-SX

Question 61

Lisa, a network technician, has implemented DHCP on the network last week. Employees are now
reporting duplicate IP addresses and network connectivity errors. Which of the following would
cause duplicate IP addresses on the network?
A. A second DHCP server is on the network.
B. The network IP leases are expiring and not renewing.
C. The DNS record A pointers are incorrect.
D. The DHCP server has run out of IP addresses to issue to clients.

Answer 61

A. A second DHCP server is on the network.

Question 62

Lisa, a network administrator, wants to be able to block all already known malicious activity. Which
of the following would allow her to perform this activity?
A. Behavioral Based IDS
B. Signature Based IDS
C. Behavioral Based IPS
D. Signature Based IPS

Answer 62

D. Signature Based IPS

Question 63

Which of the following protocols uses port 3389?
A. IMAP
B. DHCP
C. SSH
D. RDP

Answer 63

D. RDP

Question 64

Zach, a network administrator, is responding to a support ticket. The ticket does not have enough
information to determine the problem. Which of the following should Zach perform FIRST before
responding to the ticket?
A. Determine if anything has changed.
B. Test a theory to determine a cause.
C. Establish a plan of action to resolve the problem.
D. Escalate the problem if necessary.

Answer 64

A. Determine if anything has changed.

Question 65

Kim, a technician, is configuring an 802.11n access point. Other WAPs on the network use
802.11b. Which of the following will Kim have to setup to make sure these WAPs will be able to
communicate?
A. Enable mixed mode
B. Disable SSID
C. Disable encryption
D. Enable ‘n’ only mode

Answer 65

A. Enable mixed mode

Question 66

Zach, a technician, is installing a new wireless network. There are currently no wireless devices in
the area. Which of the following should Zach consider before installing the new devices?
A. Frequencies
B. SSID broadcast
C. WAP placement
D. Channels

Answer 66

C. WAP placement

Question 67

Zach, a user, cannot access any network resources. The technician has determined that the
problem is isolated to Zach, and that there have not been any changes to his workstation or switch
port recently. Which of the following steps in the troubleshooting methodology should the
technician do NEXT?
A. Establish a plan of action to resolve the problem.
B. Implement preventative measures.
C. Implement the solution or escalate as necessary.
D. Establish a theory of probable cause.

Answer 67

D. Establish a theory of probable cause.

Question 68

Zach, a customer, wants to network several computers within a large warehouse. The warehouse
has one computer at the very far end of the warehouse that is 170 meters (557 feet) from the
network switch. Which of the following cable types should a technician use for this computer?
A. CAT3
B. CAT5
C. CAT6
D. Fiber

Answer 68

D. Fiber

Question 69

A layer 3 switch can move packets between subnets based on which of the following criteria?
A. 802.1q tag
B. Port
C. Application
D. IP address

Answer 69

D. IP address

Question 70

70
Switch A is configured with VLAN 105 and 106. Switch B is configured with VLAN 105 and 107.
Both switches are connected with a fiber cable. In order for packets from all VLANs to cross the
fiber cable, which of the following configurations MUST be present?
A. Reverse ARP
B. Full duplex on the fiber link
C. PoE
D. 802.1q trunking

Answer 70

D. 802.1q trunking

Question 71

A managed switch offers which of the following benefits over an unmanaged switch? (Select
TWO).
A. 802.1q
B. SNMP
C. Gigabit
D. Layer 2 forwarding
E. Fewer collision domains

Answer 71

A. 802.1q

B. SNMP

Question 72

After installing new cabling, Kim, a technician, notices that several computers are connecting to
network resources very slowly. Which of the following tools would BEST help in determining if the
new cabling is the cause of the problem?
A. Multimeter
B. Cable certifier
C. Cable tester
D. Toner probe

Answer 72

B. Cable certifier

Question 73

A new network printer needs to be installed in the finance department. The switch port, server, and
printer NIC have been configured properly but no link light is coming up when the printer is
plugged into the wall port. Which of the following tools would Jeff, an administrator, use to
diagnose the problem?
A. Cable tester
B. Protocol analyzer
C. OTDR
D. Crimper

Answer 73

A. Cable tester

Question 74

Lisa, a network administrator, needs to facilitate traffic from several VLANs over a single port.
Which of the following configuration changes would facilitate access?
A. Traffic filtering
B. Trunking
C. MAC filtering
D. Port mirroring

Answer 74

B. Trunking

Question 75

Zach, a network administrator, wants to separate the network into broadcast domains. Which of
the following can he use? (Select TWO).
A. WAPs
B. Routers
C. Patch panels
D. Hubs
E. Bridges
F. VLANs

Answer 75

B. Routers

F. VLANs

Question 76

Which of the following routing protocols utilizes only hop count as a metric, broadcasts its routing
table every 30 seconds by default, and has a MAXIMUM hop count of 15?
A. Interior Gateway Routing Protocol (IGRP)
B. Routing Information Protocol (RIP)
C. Open Shortest Path First (OSPF)
D. Border Gateway Routing Protocol (BGP)

Answer 76

B. Routing Information Protocol (RIP)

Question 77

Which of the following is the common port used for IMAP?
A. 25
B. 53
C. 143
D. 443

Answer 77

C. 143

Question 78

Which of the following subnet masks would allow for 192.168.0.3 and 192.168.0.240 to be in the
same subnet?
A. 255.255.255.0
B. 255.255.255.128
C. 255.255.255.192
D. 255.255.255.248

Answer 78

A. 255.255.255.0

Question 79

Which of the following ports should be allowed through a firewall to allow DNS resolution to occur
to an outside DNS server?
A. 20
B. 53
C. 80
D. 3389

Answer 79

B. 53

Question 80

80
Which of the following is a Class A private IP address?
A. 4.2.2.2
B. 10.1.1.45
C. 169.254.9.15
D. 192.168.0.100

Answer 80

B. 10.1.1.45

Question 81

Zach, a technician, suspects a NIC in a desktop computer has failed. Which of the following
commands can Zach use to BEST troubleshoot this issue?
A. netsh
B. nslookup
C. ipconfig
D. tracert

Answer 81

A. netsh

Question 82

After a brownout, Zach, a user, can connect to the internal network, but not the Internet. Which of
the following is the company’s DSL router experiencing that is causing this issue?
A. Switching loop
B. Power failure
C. Broadcast storm
D. Duplicate IP address

Answer 82

B. Power failure

Question 83

Lisa, a technician, is asked to install a wireless router in a company’s public café area. The
company wants the public to be able to connect to the wireless network with minimal security, but
not be able to connect to the private internal network. Which of the following firewall rules would
BEST accomplish this?
A. Content filtering on the wireless access point
B. Allow traffic from the wireless access point
C. Block traffic from the wireless access point
D. Packet filtering on the wireless access point

Answer 83

C. Block traffic from the wireless access point

Question 84

Lisa, an administrator, attempts to open a web page and sees the following error: ‘Error 404: Page
not found’. She then uses the ping command and finds that the default gateway cannot be pinged.
At which of the following layers does the problem MOST likely reside?
A. Layer 1
B. Layer 4
C. Layer 5
D. Layer 7

Answer 84

A. Layer 1

Question 85

Lisa, an administrator, is unable to route traffic between VLANs on a switch. Communication
between devices within each VLAN is functioning. At which of the following layers does the
problem MOST likely reside?
A. Network
B. Data link
C. Transport
D. Session

Answer 85

A. Network

Question 86

Lisa, a technician, installs a new WAP and users are able to connect; however, users cannot
access the Internet. Which of the following is the MOST likely cause of the problem?
A. The signal strength has been degraded and latency is increasing hop count.
B. An incorrect subnet mask has been entered in the WAP configuration.
C. The signal strength has been degraded and packets are being lost.
D. Users have specified the wrong encryption type and routes are being rejected.

Answer 86

B. An incorrect subnet mask has been entered in the WAP configuration.

Question 87

Jeff, an administrator, has just finished installing a new switch and connected two servers with IPs
of 192.168.105.20 and .30. The servers are able to communicate with each other, but are unable
to reach the Internet. Jeff sees the following information in the switch configuration:
interface VLAN 105
IP address 192.168.105.5 255.255.255.0
Jeff is able to ping the router at 192.168.105.1 from the switch. Which of the following is the MOST
likely cause of the problem?
A. The subnet mask is incorrect.
B. A routing loop has occurred.
C. Jeff used a crossover cable to connect the switch to the gateway.
D. The server is missing default-gateway information.

Answer 87

D. The server is missing default-gateway information.

Question 88

Zach, the network administrator, has just finished installing a new 10/100/1000 switch, but
receives reports from the server administrator that servers connected to the new switch seem to
be experiencing slow LAN connections. Zach checks the port connecting the new switch to the
core switch and sees the following information:
#show run interface GigabitEthernet0/10
Switchport trunk encapsulation dot1q
Switchport mode trunk
Switchport trunk native VLAN 10
Which of the following is the MOST likely cause of the slow connections?
A. The servers have not had VLAN tagging enabled on their NICs.
B. Speed and duplex have not been set.
C. VLAN tagging was not set on the trunk.
D. The servers have been connected with CAT5 cable.

Answer 88

B. Speed and duplex have not been set.

Question 89

1000BaseT has a MAXIMUM run distance of:
A. 25 meters (82 feet).
B. 100 meters (328 feet).
C. 500 meters (1640 feet).
D. 1000 meters (3280 feet).

Answer 89

B. 100 meters (328 feet).

Question 90

90
Which of the following DNS record types provides the hostname to IP address mapping?
A. A record
B. NS record
C. CNAME record
D. MX record

Answer 90

A. A record

Question 91

Kim, a user, took a laptop on vacation and made changes to the configuration in order to use the
device at the hotel. She can reach the Internet, but cannot access any internal network resources.
Which of the following is the MOST likely reason?
A. Incorrect DNS
B. Incorrect subnet mask
C. Duplicate IP address
D. Incorrect SSID

Answer 91

A. Incorrect DNS

Question 92

Teachers and students at a school currently share the same bandwidth. The Internet performance
for the teachers in the classroom is becoming extremely slow. Which of the following is the BEST
method to mitigate the issue?
A. Increased uptime
B. Caching engines
C. Traffic shaping
D. Load balancing

Answer 92

C. Traffic shaping

Question 93

Kim, a network engineer, needs to troubleshoot a remote router within the WAN. Which of the
following user authentications would be the BEST to implement?
A. MS-CHAP
B. Kerberos
C. TACACS+
D. PKI

Answer 93

C. TACACS+

Question 94

Which of the following uses copper wiring?
A. 10GBaseER
B. 10GBaseLW
C. 100BaseFX
D. 1000BaseT

Answer 94

D. 1000BaseT

Question 95

Which of the following cables covers the LONGEST distance?
A. 10GBaseT
B. 10GBaseFR
C. 100BaseTX
D. 1000BaseX

Answer 95

B. 10GBaseFR

Question 96

Users report that their Internet connection is slow. Zach, the network technician, has a suspicion
that users are streaming video and music. Which of the following would BEST confirm Zach’s
theory?
A. Traffic analysis
B. SNMP
C. History logs
D. System logs

Answer 96

A. Traffic analysis

Question 97

A firewall that examines all the incoming traffic and decides if the traffic is going to be allowed
though or dumped is a example of which of the following?
A. Packet sniffing
B. Packet filter
C. Stateful inspection
D. Content filter

Answer 97

C. Stateful inspection

Question 98

Two duplicate pieces of equipment can be used in conjunction for which of the following
purposes? (Select TWO).
A. High availability
B. Fault tolerance
C. Reduce latency
D. Wi-MAX
E. CARP

Answer 98

A. High availability

B. Fault tolerance

Question 99

Which of the following improves wireless performance by allowing only one wireless transmission
on the network at a time?
A. CSMA/CA
B. CSMA/CD
C. Wireless encryption
D. Wireless bonding

Answer 99

A. CSMA/CA

Question 100

100
Lisa, an administrator, is responsible for one Linux and two Windows servers. She would like to
review all server logs centrally. Which of the following services could Lisa use in this scenario?
A. Event logs
B. Baselines
C. Change management
D. Syslog

Answer 100

D. Syslog

Question 101

Lisa, a network technician, needs to push changes out to network devices and also monitor the
devices based on each device’s MIB. Which of the following should she use?
A. SNMP
B. Traffic analysis
C. Syslog
D. Asset management

Answer 101

A. SNMP

Question 102

Users have reported slow access times when retrieving information from a server on the
company’s network. Which of the following tools would provide access time information on each
segment of the network to reach the server?
A. arp
B. route
C. ipconfig
D. tracert

Answer 102

D. tracert

Question 103

Kim, a network technician, wants to use a packet analyzer to troubleshoot a reported problem with
a user’s workstation with IP address 192.168.1.45. To identify the workstation’s packets Kim wants
to use the workstation’s MAC address. Which of the following protocols would provide the needed
information?
A. DHCP
B. ARP
C. DNS
D. PING

Answer 103

B. ARP

Question 104

Which of the following OSI layers performs error detection using a Frame Check Sequence?
A. Session
B. Transport
C. Physical
D. Data link

Answer 104

D. Data link

Question 105

Which of the following VPN methods is BEST used for connecting a remote office to the main
company office?
A. WEP-to-WPA
B. RDP-to-RAS
C. Client-to-site
D. Site-to-site

Answer 105

D. Site-to-site

Question 106

The ISP needs to terminate the WAN connection. The connection should be located in the network
server room where the company LAN equipment resides. Which of the following identifies the
location?
A. Smart jack
B. MDF
C. VPN
D. 66 block

Answer 106

B. MDF

Question 107

Zach, an administrator, wants to eliminate remote access to a network from all users, except those
users in Zach’s own country. Which of the following security measures could he use to set up this
functionality?
A. MAC filtering
B. Port filtering
C. IP filtering
D. TLS

Answer 107

C. IP filtering

Question 108

Lisa, an administrator, is experiencing availability issues on a Linux server. She decides to check
the server for an IP address conflict on the server. Which of the following commands should Lisa
use?
A. traceroute
B. tracert
C. ifconfig
D. ipconfig

Answer 108

C. ifconfig

Question 109

Network upgrades have been completed and the WINS server was shutdown. It was decided that
NetBIOS network traffic will no longer be permitted. Which of the following will accomplish this
objective?
A. Content filtering
B. Port filtering
C. MAC filtering
D. IP filtering

Answer 109

B. Port filtering

Question 110

110
Lisa, a network technician, has determined that the initial theory of probable cause was incorrect.
Which of the following would be the NEXT step in the troubleshooting process?
A. Implement the solution
B. Establish a plan
C. Document findings
D. Escalate the issue

Answer 110

D. Escalate the issue

Question 111

Which of the following is the MAXIMUM hop count for RIP before the network is considered
converged?
A. 1
B. 5
C. 10
D. 15

Answer 111

D. 15

Question 112

A company is expanding and has found that logging into each device to collect error information is
consuming too much time. They have asked Lisa, a network administrator, to set up a server that
will capture errors from each device automatically. Which of the following technologies would
BEST fit this requirement?
A. Syslog
B. RADIUS
C. IPSec
D. Network sniffer

Answer 112

A. Syslog

Question 113

Jeff, a network administrator, has been requested to install wireless access throughout the entire
building, while utilizing a single SSID. Which of the following options will meet this requirement?
A. Set a separate VLAN on each WAP with the same encryption type.
B. Set the SSID on each WAP and set contiguous WAPs to different channels.
C. Set the SSID on each WAP and set contiguous WAPs to the same channel.
D. Set a separate VLAN on each WAP with the same frequency.

Answer 113

B. Set the SSID on each WAP and set contiguous WAPs to different channels.

Question 114

Lisa, a technician, is asked to not allow FTP traffic on a network. Which of the following ports
should be blocked on the firewall to achieve this?
A. 21
B. 22
C. 23
D. 25

Answer 114

A. 21

Question 115

Lisa, a network consultant, is asked to set up a wireless network in a home. The home user wants
the wireless network to be available in every corner of the house. Which of the following additional
information will Lisa need to determine the equipment for the installation? (Select TWO).
A. The length of the house
B. How many rooms are in the house
C. How many users will be using the wireless network
D. The building material of the house
E. The cost of the house

Answer 115

A. The length of the house

D. The building material of the house

Question 116

Kim, a technician, needs to test if domain name resolution is functioning properly. Which of the
following software tools would she use to accomplish this? (Select TWO).
A. arp
B. dig
C. route
D. nslookup
E. netstat

Answer 116

B. dig

D. nslookup

Question 117

Which of the following DNS records would be queried to locate a company’s mail server?
A. A
B. MX
C. AAAA
D. CNAME

Answer 117

B. MX

Question 118

Which of the following protocols would Lisa, a technician, use to disable switch ports automatically
to prevent switching loops?
A. RIP
B. OSPF
C. STP
D. EGP

Answer 118

C. STP

Question 119

Which of the following network appliances can BEST be described as allowing multiple servers to
share requests for a website through the same public IP address?
A. VPN concentrator
B. Content filter
C. Load balancer
D. Proxy server

Answer 119

C. Load balancer

Question 120

120
Which of the following connectors would Kim, a technician, use only for RG-6 cables?
A. F-connector
B. MTRJ
C. RJ-45
D. RS-232

Answer 120

A. F-connector

Question 121

Which of the following technologies implements authentication headers and encapsulating security
payloads?
A. IPSec
B. ISAKMP
C. TLS
D. SSL VPN

Answer 121

A. IPSec

Question 122

Which of the following implements two-factor authentication?
A. Username and password
B. Fingerprint and facial recognition
C. Check card and PIN
D. PIN and password

Answer 122

C. Check card and PIN

Question 123

Which of the following protocols works at the LOWEST layer of the OSI model?
A. L2TP
B. PPTP
C. ISAKMP
D. IPSec

Answer 123

A. L2TP

Question 124

Which of the following protocols provides security through encryption? (Select TWO).
A. PPPoE
B. L2TP
C. IPSec
D. PPP
E. TLS

Answer 124

C. IPSec

E. TLS

Question 125

Which of the following records would be used for a Reverse DNS lookup?
A. AAAA
B. MX
C. PTR
D. A

Answer 125

C. PTR

Question 126

Which of the following ports are MOST commonly used to interactively configure a networking
device? (Select TWO).
A. 21
B. 22
C. 23
D. 53
E. 67

Answer 126

B. 22

C. 23

Question 127

Which of the following protocols is used to resolve FQDNs to IP addresses?
A. SSH
B. FTP
C. DNS
D. HTTP

Answer 127

C. DNS

Question 128

IP address based routing occurs on which of the following layers of the OSI model?
A. Layer 2
B. Layer 3
C. Layer 4
D. Layer 5

Answer 128

B. Layer 3

Question 129

Data arranged into packets would be on which of the following layers of the OSI model?
A. Datagram
B. Transport
C. Presentation
D. Network

Answer 129

D. Network

Question 130

130
Which of the following DNS record types is used for IPv6 resolution?
A. MX
B. AAAA
C. A
D. PTR

Answer 130

B. AAAA

Question 131

Lisa, a home user, wishes to confine a wireless network to devices ONLY inside of her house.
Which of the following will accomplish this?
A. Decreasing radio strength
B. MAC filtering
C. WEP encryption
D. SSID broadcast disable

Answer 131

A. Decreasing radio strength

Question 132

A company wishes to have a wireless signal broadcast only through a specific stretch of a highway
tunnel. Which of the following measures will accomplish this?
A. WPA encryption
B. MAC filtering
C. Changing antenna type
D. Decreasing radio strength

Answer 132

C. Changing antenna type

Question 133

Zach, a user, is unable to logon to his domain from his desktop PC. A cable certifier is used and
shows a high value of NEXT. Which of the following represents the cause?
A. Crosstalk
B. TX/RX reversed
C. Split cables
D. DB loss

Answer 133

A. Crosstalk

Question 134

Lisa, a user, is unable to map a drive to a known NetBIOS share. A ping from the client to the
server is successful. Which of the following software tools is used to check if NetBIOS is enabled?
A. netstat
B. arp
C. nbtstat
D. nslookup

Answer 134

C. nbtstat

Question 135

A SOHO with ten Wi-Fi equipped laptops needs a new network installed. Which of the following
items would be used to setup the office using a new DSL line? (Select TWO).
A. Router
B. Wi-Fi Access point
C. Cable modem
D. Ten WiMAX adapters
E. Ten CAT6 patch cables

Answer 135

A. Router

B. Wi-Fi Access point

Question 136

In order to reduce spam email, Kim, a network administrator, changes the standard SMTP port
from which of the following port numbers to port number 587?
A. 20
B. 21
C. 23
D. 25

Answer 136

D. 25

Question 137

A company would like all HTTP traffic to filter through a proxy server on port 8080. Which of the
following port numbers needs to be redirected through the proxy server to accomplish this?
A. 20
B. 80
C. 143
D. 443

Answer 137

B. 80

Question 138

An office would like to set up an unsecured wireless network for their customers in their lounge
area. Which of the following firewall capabilities should be configured to prevent the wireless traffic
from communicating with the office’s LAN traffic?

Answer 138

C. Packet filtering

Question 139

Kim, an employee, connects to a work computer from home via the built-in Windows remote
desktop connection. Which of the following is she MOST likely using to establish the connection?
A. RDP
B. RTP
C. RIP
D. RAS

Answer 139

A. RDP

Question 140

140
Kim, a technician, suspects a virus has infected the network and is using up bandwidth. She
needs to quickly determine which workstation is infected with the virus. Which of the following
would BEST help Kim?
A. Web server
B. Syslog
C. Network sniffer
D. SNMP

Answer 140

C. Network sniffer

Question 141

Which of the following is the default subnet mask for a Class B address?
A. 255.0.0.0
B. 255.255.0.0
C. 255.255.255.0
D. 255.255.255.255

Answer 141

B. 255.255.0.0

Question 142

Which of the following default ports would need to be disabled to block TFTP traffic?
A. 20
B. 21
C. 69
D. 123

Answer 142

C. 69

Question 143

When troubleshooting a connectivity issue, which of the following commands will give Jeff, the
technician, a list of the host names connected to the network?
A. ping
B. nbstat
C. arp
D. msconfig

Answer 143

B. nbstat

Question 144

Which of the following cable types allows for the LONGEST distance of a Gigabit Ethernet
connection?
A. Multimode fiber
B. CAT6a
C. Single mode fiber
D. Coaxial

Answer 144

C. Single mode fiber

Question 145

Which of the following wireless technologies has the LARGEST cell size?
A. 802.11a
B. 802.3af
C. 802.11g
D. 802.11i

Answer 145

C. 802.11g

Question 146

Which of the following is similar to MIMO?
A. WPA
B. SSID
C. PoE
D. Diversity

Answer 146

D. Diversity

Question 147

Which of the following are available speeds when using 802.11b? (Select TWO).
A. 1 Mb/s
B. 5.5 Mb/s
C. 6 Mb/s
D. 12 Mb/s
E. 54 Mb/s

Answer 147

A. 1 Mb/s

B. 5.5 Mb/s

Question 148

RADAR avoidance technologies are built into which of the following technologies?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11i

Answer 148

A. 802.11a

Question 149

Which of the following technologies can cause interference for 802.11g?
A. RADAR
B. 802.11a
C. IrDA
D. Bluetooth

Answer 149

D. Bluetooth

Question 150

150
Which of the following technologies would be used in a large office area that has a lot of 2.4GHz
noise?
A. 802.3af
B. 802.1q
C. 802.11a
D. MIMO

Answer 150

C. 802.11a

Question 151

Which of the following occurs when antenna gain is increased on an access point?
A. Connection speeds decrease
B. Throughput decreases
C. Cell size increases
D. Attenuation increases

Answer 151

C. Cell size increases

Question 152

Which encryption type uses only a 28 character key?
A. 40/64 bit WEP
B. 104/128 bit WEP
C. WPA2 PSK
D. WPA Personal

Answer 152

B. 104/128 bit WEP

Question 153

Which of the following is an Authentication, Authorization, and Accounting (AAA) technology that is
MOST widely used with remote access?
A. PKI
B. VPN
C. MS-CHAP
D. RADIUS

Answer 153

D. RADIUS

Question 154

Which of the following uses a Management Information Base (MIB) to monitor the network?
A. History Logs
B. Syslog
C. SMTP
D. SNMP

Answer 154

D. SNMP

Question 155

Which of the following does SNMPv3 BEST provide over previous versions?
A. Increased security
B. Simplified management
C. More data types
D. Higher productivity

Answer 155

A. Increased security

Question 156

Which of the following is a terminal emulator used to manage a network device?
A. VPN
B. IDS
C. PuTTY
D. IPS

Answer 156

C. PuTTY

Question 157

Zach, a network administrator, is tasked with simplifying the review of events from network
devices. Which of the following is used to accomplish this?
A. History logs
B. Event logs
C. Syslog server
D. Traffic analyzer

Answer 157

C. Syslog server

Question 158

Jeff, a technician, is troubleshooting connectivity issues with a new data circuit. Jeff verifies that
the ST fiber jumper is good. Which of the following is the problem?
A. TX/RX reversed
B. Interference
C. Cable length
D. Bad connectors

Answer 158

A. TX/RX reversed

Question 159

Users are reporting that Internet performance is slow. Jeff, the technician, has determined that the
Internet connection is saturated. Which of the following is BEST used to determine the source,
destination, and type of the traffic?
A. Netflow
B. Protocol analyzer
C. Network sniffer
D. SNMP

Answer 159

A. Netflow

Question 160

160
Which of the following is a valid IPv6 address?
A. 1056:958:E486::F8:8962
B. 1596:H593:B5D8::B859
C. 2048::9584:A6B8::0983
D. 4820::0985:489D::8761

Answer 160

A. 1056:958:E486::F8:8962

Question 161

Which of the following OSI model layers is responsible for the transmission of bits?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4

Answer 161

A. Layer 1

Question 162

Frames are the Protocol Data Unit for which of the following layers of the OSI model?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4

Answer 162

B. Layer 2

Question 163

Lisa, a network administrator, wants to automatically assign 168.254.1.0/24 addresses to
computers on the network. Which of the following will need to be configured?
A. DHCP addressing
B. Private addressing
C. DNS addressing
D. APIPA addressing

Answer 163

A. DHCP addressing

Question 164

IPSec relies on which of the following protocols? (Select TWO).
A. ESP
B. EAP
C. AH
D. PKI
E. RDP

Answer 164

A. ESP

C. AH

Question 165

A new firewall was recently installed blocking SMTP traffic. As a result, no one has Internet
access. Which of the following has MOST likely occurred?
A. Port security is blocking all traffic.
B. An IDS is blocking all traffic.
C. Implicit deny is blocking all traffic.
D. SMTP is blocking all traffic.

Answer 165

C. Implicit deny is blocking all traffic.

Question 166

An organization has installed a new firewall. Users need to have access to remote websites and
must be able to use SSH to retrieve files from remote locations. Which of the following actions
should be taken on the new firewall? (Select TWO).
A. Allow UDP port 21 outbound
B. Allow UDP port 22 outbound
C. Allow UDP port 80 outbound
D. Allow TCP port 21 outbound
E. Allow TCP port 22 outbound
F. Allow TCP port 80 outbound

Answer 166

E. Allow TCP port 22 outbound

F. Allow TCP port 80 outbound

Question 167

How many collision domains and broadcast domains are present on a 24-port switch with no
VLAN assignments?
A. 1 collision domain, 1 broadcast domain
B. 1 collision domain, 24 broadcast domains
C. 24 collision domains, 1 broadcast domain
D. 24 collision domains, 24 broadcast domains

Answer 167

C. 24 collision domains, 1 broadcast domain

Question 168

Users report that an internal web server is not responding. Which of the following commands could
be used on the server to confirm that the web service is running?
A. nbtstat
B. traceroute
C. nslookup
D. netstat

Answer 168

D. netstat

Question 169

Kim, a network administrator, is attempting to join a workstation to a domain. Which of the
following commands would assist Kim in determining the computer name of the workstation?
(Select TWO).
A. nbtstat
B. net statistics
C. traceroute
D. netstat
E. nslookup

Answer 169

A. nbtstat

B. net statistics

Question 170

170
After a router upgrade, Jeff, the network administrator, needs to determine if workstations still
have the correct default gateway. Which of the following commands could he use? (Select TWO).
A. netstat
B. ipconfig
C. dig
D. traceroute
E. nbtstat

Answer 170

A. netstat

B. ipconfig

Question 171

Kim, an administrator, has detected a worm spreading throughout the network. Which of the
following ACLs can be configured on a Layer2 switch port to mitigate the attack?
A. Drop 19:21:68:10:20:00
B. Permit ::1/32
C. Permit A0:H1:B0:90:1D:6C
D. Drop 192.168.10.20

Answer 171

A. Drop 19:21:68:10:20:00

Question 172

Which of the following MUST be used to implement a wireless network supporting EAP-TTLS?
A. Kerberos
B. Two factor authentication
C. CHAP
D. PKI

Answer 172

D. PKI

Question 173

After installing a SOHO wireless router, Jeff, the network administrator, notices that all internal
RFC 1918 IP addresses are being logged by an Internet web server as coming from the router’s
public interface IP address. Which of the following must Jeff implement to assign a different public
IP from the router’s public interface IP address to one of the workstations in the office?
A. NAT
B. PAT
C. DMZ
D. ACL

Answer 173

A. NAT

Question 174

Which of the following OSI layers is responsible for encrypting HTTPS traffic?
A. 3
B. 4
C. 5
D. 6

Answer 174

D. 6

Question 175

00:12:34:56:78 can be used in which of the following?
A. WPA-PSK password
B. Channel selection
C. WEP key
D. MAC filtering

Answer 175

A. WPA-PSK password

Question 176

Lisa, a network administrator, must implement a wireless security encryption protocol that
supports the AES cipher. Which of the following should be implemented?
A. WEP
B. TKIP
C. WPA2
D. WPA Enterprise

Answer 176

C. WPA2

Question 177

Kim, a technician, has opened ports on the firewall to route to specific devices. Which of the
following did she MOST likely setup?
A. Deep packet inspection
B. DDNS
C. Port forwarding
D. DMZ

Answer 177

C. Port forwarding

Question 178

Which of the following protocols is used by the ping command?
A. SMTP
B. ICMP
C. TFTP
D. ARP

Answer 178

B. ICMP

Question 179

Zach, a user, cannot access the Internet. A similar problem occurred several times last week to
other users, and the solution was to reboot each workstation. As the first step, the technician
reboots the workstation and it does not solve the problem. Which of the following should have
been done instead?
A. Change the DNS server IP on the client
B. Information gathering
C. Change the workstation IP address
D. Establish a plan of action

Answer 179

B. Information gathering

Question 180

180
In which of the following would Lisa, a technician, find the LARGEST number of 110 block patch
panels?
A. MDF
B. Caching engines
C. Demarc
D. IDF

Answer 180

A. MDF

Question 181

Which of the following is the BEST encryption protocol to use to allow customers to access a
secure website from the Internet without using VPNs?
A. IPSec
B. TLS
C. SSL version 1
D. SSL version 2

Answer 181

B. TLS

Question 182

Which of the following wireless security measures, although widely implemented, does not provide
strong security?
A. IPSec
B. WPA2
C. MAC address filtering
D. 802.1x

Answer 182

C. MAC address filtering

Question 183

After Kim, a new user, moves furniture into a cubicle, the computer does not connect to the
network any longer. Which of the following would be the MOST likely reason? (Select TWO).
A. Bad Ethernet switch port
B. TX/RX reversed
C. Bad connectors
D. Bad patch cable
E. Mismatched MTU

Answer 183

C. Bad connectors

D. Bad patch cable

Question 184

Kim, a technician, suspects an attacker has accessed the network. Which of the following would
BEST help confirm her theory?
A. SNMP
B. Traffic analysis
C. Network sniffer
D. System logs

Answer 184

D. System logs

Question 185

Zach, a technician, notices a newly installed CAT5 cable is longer than the standard maximum
length. Which of the following problems would this MOST likely cause?
A. Split cable
B. EMI
C. DB loss
D. Crosstalk

Answer 185

C. DB loss

Question 186

Which of the following wiring standards has both ends colored as follows: orange-white, orange,
green-white, blue, blue-white, green, brown-white, brown?
A. T568A
B. T568B
C. Multimode fiber
D. Crossover

Answer 186

B. T568B

Question 187

Zach, a technician, working remotely cannot connect to the database server. The server does not
respond when he tries to ping it. Zach wants to determine which network device is preventing ping
from responding. Which of the following commands should he use to determine this?
A. tracert
B. nslookup
C. dig
D. ipconfig

Answer 187

A. tracert

Question 188

Which of the following could be installed to allow a home user with one desktop computer to
economically have Internet access in every room in the house?
A. Fiber optic
B. CAT6
C. Broadband over powerline
D. CAT5

Answer 188

C. Broadband over powerline

Question 189

Which of the following connectors push and twist on?
A. ST
B. LC
C. MTRJ
D. SC

Answer 189

A. ST

Question 190

190
Which of the following would be used to supply Internet to a cable modem?
A. RJ-11 connector
B. RJ-45 connector
C. F-connector
D. BNC connector

Answer 190

C. F-connector

Question 191

Which of the following 802.11 standards transmits the signals the GREATEST distance?
A. a
B. b
C. g
D. n

Answer 191

D. n

Question 192

Which of the following wireless authentication methods provides the GREATEST amount of
security?
A. WEP
B. WPA Enterprise
C. WPA Personal
D. WPA2 Personal

Answer 192

B. WPA Enterprise

Question 193

Antenna gain is measured in which of the following units?
A. dBi
B. GHz
C. mW
D. MHz

Answer 193

A. dBi

Question 194

Which of the following fiber types is MOST often used indoors?
A. Plenum
B. Modal conditioning
C. Multimode
D. Singlemode

Answer 194

C. Multimode

Question 195

Which of the following types of fiber connectors is used on an SFP?
A. MTRJ
B. LC
C. SC
D. ST

Answer 195

B. LC

Question 196

Horizontal cable is terminated on which device in the wiring closet?
A. Demarc
B. Switch
C. Punch down tool
D. Patch panel

Answer 196

D. Patch panel

Question 197

Which of the following are fiber connectors? (Select TWO).
A. LC
B. MTRJ
C. BNC
D. T1
E. DB-9

Answer 197

A. LC

B. MTRJ

Question 198

Which of the following is the standard 802.11g channel separation?
A. 11 MHz
B. 20 MHz
C. 54 MHz
D. 20 GHz

Answer 198

B. 20 MHz

Question 199

Which of the following devices is installed by a telecommunications company to deliver a T1 or
E1?
A. Smart jack
B. CSU/DSU
C. 66 block
D. Modem

Answer 199

A. Smart jack

Question 200

200
Zach, a technician, wants to provide the MOST wireless security on the LAN but does not have a
RADIUS server. Which technology should be used?
A. PEAP
B. WPA Personal
C. WPA2 Enterprise
D. WPA2 PSK

Answer 200

D. WPA2 PSK

Question 201

802.3 defines which of the following LAN access methods?
A. CSMA/CA
B. CSMA/CD
C. DSL
D. MPLS

Answer 201

B. CSMA/CD

Question 202

Which of the following technologies allows more than two transceivers with an access point?
A. MIMO
B. FIFO
C. 802.1x
D. WPA

Answer 202

A. MIMO

Question 203

A patch cable terminated with one end as T568A and the other as T568B will create which of the
following cable types?
A. Crossover
B. Serial
C. Roll over
D. Straight through

Answer 203

A. Crossover

Question 204

Which of the following will a firewall NOT protect the network from?
A. Intrusion
B. DDoS
C. Denial of Service
D. Spam e-mails

Answer 204

D. Spam e-mails

Question 205

Which of the following is a standard measure of signal power?
A. MHz
B. mips
C. dBm
D. Gbps

Answer 205

C. dBm

Question 206

Which of the following would Jeff, a technician, use for a service that needs fast communication
and is unaffected by packet loss?
A. UDP
B. ARP
C. ICMP
D. TCP

Answer 206

A. UDP

Question 207

Which of the following circuits provides the MOST bandwidth?
A. T3
B. OC3
C. T1
D. PRI

Answer 207

B. OC3

Question 208

Jeff, a technician, is shown a machine that has historical charts of traffic levels for all server and
router interfaces. Which of the following is MOST likely used as a source for creating the charts?
A. SNMP
B. Port scanner
C. Traffic sniffer
D. SYSLOG

Answer 208

A. SNMP

Question 209

Which of the following technologies is associated with the DOCSIS standard?
A. Cable
B. Dialup
C. Wireless
D. Cellular

Answer 209

A. Cable

Question 210

210
Which of the following is a contention based broadcast technology used for wireless networking?
A. CSMA/CA
B. CSMA/CD
C. CSU/DSU
D. TCP/IP

Answer 210

A. CSMA/CA

Question 211

Jeff, a network technician, needs to connect to a computer in a factory environment 250 meters
(820 feet) from the IDF. Which of the following LAN technologies would be BEST to use?
A. 100BaseFX
B. 10GBaseT
C. MPLS
D. Coaxial

Answer 211

A. 100BaseFX

Question 212

Lisa, a network technician, is troubleshooting connectivity to a server at a remote office. Which of
the following utilities should be used to locate the network issue?
A. ipconfig
B. arp
C. tracert
D. netstat

Answer 212

C. tracert

Question 213

Which of the following are components of IPSec? (Select TWO).
A. AH
B. ESP
C. SSH
D. ICA
E. TLS

Answer 213

A. AH

B. ESP

Question 214

In IPSec, which of the following is an agreement on how devices will securely transmit
information?
A. SA
B. ESP
C. AH
D. ISAKMP

Answer 214

A. SA

Question 215

An organization recently installed a firewall on the network. Employees must have access to their
work computer from their home computer. In which of the following ways should the firewall be
configured?
A. Allow TCP port 3389 outbound
B. Allow UDP port 3389 inbound
C. Allow UDP port 3389 outbound
D. Allow TCP port 3389 inbound

Answer 215

D. Allow TCP port 3389 inbound

Question 216

An organization recently installed a firewall on the network. Employees must be able to send and
receive email from a POP3 server. In which of the following ways should the firewall be
configured? (Select TWO).
A. Allow TCP port 23
B. Allow TCP port 25
C. Allow TCP port 110
D. Allow UDP port 25
E. Allow UDP port 110

Answer 216

B. Allow TCP port 25

C. Allow TCP port 110

Question 217

Which of the following OSI model layers is responsible for data encryption?
A. Application
B. Presentation
C. Physical
D. Data Link

Answer 217

B. Presentation

Question 218

Which of the following exterior routing protocols uses an algorithm to determine the quickest route
to a destination?
A. RIP
B. OSPF
C. BGP
D. RIPv2

Answer 218

C. BGP

Question 219

Which of the following OSI model layers is used for logical addressing?
A. Physical
B. Transport
C. Network
D. Data link

Answer 219

C. Network

Question 220

220
In which of the following layers of the OSI model does the TCP protocol operate?
A. Session
B. Network
C. Data link
D. Transport

Answer 220

D. Transport

Question 221

At which of the following layers of the OSI model does an unmanaged switch operate?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4

Answer 221

B. Layer 2

Question 222

Which of the following is an authentication, authorization, and accounting method that provides
administrative access to network devices?
A. PKI
B. TACACS+
C. CHAP
D. SSH

Answer 222

B. TACACS+

Question 223

Which of the following security devices is used in providing packet and MAC address filtering
services for the network?
A. Host-based proxy server
B. Network-based firewall
C. IDS
D. IPS

Answer 223

B. Network-based firewall

Question 224

Which of the following is the MOST appropriate to use when routing Internet traffic through
multiple ISP connections?
A. BGP
B. SNAT
C. RIP
D. GPG

Answer 224

A. BGP

Question 225

Which of the following protocols allows more than three non-overlapping channels?
A. 802.11a
B. 802.11g
C. 802.1q
D. 802.15

Answer 225

A. 802.11a

Question 226

Which of the following represents the physical address of a network access card?
A. FF01:D2:C4:87::11
B. 00-30-48-83-9B-C8
C. 08-9D-35-22-L2-34-FF-21
D. 2D1A:C3:0:1C3B:2AD:FF:FEBE:9D3A

Answer 226

B. 00-30-48-83-9B-C8

Question 227

ADSL, PPP, and ATM all operate at which of the following layers of the OSI model?
A. Layer 1
B. Layer 2
C. Layer 4
D. Layer 7

Answer 227

B. Layer 2

Question 228

Which of the following OSI layers BEST describes where an HTTP proxy operates?
A. Transport
B. Application
C. Presentation
D. Session

Answer 228

A. Transport

Question 229

A MAC address is used at which of the following layers of the OSI model?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4

Answer 229

B. Layer 2

Question 230

230
A network device is more than 100 meters (328 feet) from a 24-port copper switch. Which of the
following can be used to connect the device to the network?
A. Fiber multiplexer
B. Repeater
C. Attenuator
D. OTDR

Answer 230

B. Repeater

Question 231

A disassociation request is a way to mitigate which of the following threats?
A. ARP poisoning
B. Rogue AP
C. Man-in-the-middle attack
D. Botnet

Answer 231

B. Rogue AP

Question 232

Which of the following allows a malicious attacker to view network traffic if the attacker is on the
same network segment as Jeff, an administrator?
A. DoS attack
B. Man-in-the-middle attack
C. Smurf attack
D. Xmas attack

Answer 232

B. Man-in-the-middle attack

Question 233

Which of the following cable types would have the LEAST amount of EMI?
A. CAT3
B. CAT5
C. STP CAT6
D. Plenum CAT6

Answer 233

C. STP CAT6

Question 234

Which of the following WAN technologies uses four wires for digital and a 66 block?
A. Cable
B. ATM
C. T3
D. POTS

Answer 234

D. POTS

Question 235

Kim, an administrator, wants to list all the network connections to and from the server. Which of
the following commands would MOST likely be used?
A. traceroute
B. ping
C. ipconfig
D. netstat

Answer 235

D. netstat

Question 236

Which of the following is used to verify configuration updates on a firewall?
A. Signature identification
B. Access control lists
C. Scanning services
D. Content filtering

Answer 236

A. Signature identification

Question 237

Which of the following sizes is the fixed cell length in ATM?
A. 8 bytes
B. 53 bytes
C. 64 kilobytes
D. 128 kilobytes

Answer 237

B. 53 bytes

Question 238

Which of the following devices should Jeff, an administrator, connect to a protocol analyzer in
order to collect all of the traffic on a LAN segment?
A. Hub
B. VLAN
C. Router
D. Server

Answer 238

A. Hub

Question 239

Which of the following tools would Zach, an administrator, use to identify opens and shorts?
A. Ohmmeter
B. Protocol analyzer
C. Cable tester
D. Multimeter

Answer 239

C. Cable tester

Question 240

240
Which of the following technologies relies on a ticket granting server to allow clients to verify their
identity?
A. TACACS+
B. Kerberos
C. PKI
D. RADIUS

Answer 240

B. Kerberos

Question 241

Which of the following authenticates, allows, and controls the execution of router commands?
A. PKI
B. RADIUS
C. Kerberos
D. TACACS+

Answer 241

D. TACACS+

Question 242

Which of the following is true of NIPS?
A. Routes traffic to the proper port
B. Detects malicious host traffic
C. Detects and prevents harmful traffic
D. Prevents traffic on network hosts

Answer 242

C. Detects and prevents harmful traffic

Question 243

Which of the following network access methods is the MOST secure?
A. PPPoE
B. SIP
C. RSH
D. IPSec

Answer 243

D. IPSec

Question 244

Lisa, a technician, is reporting wireless transmission speeds of 300Mbps. Which of the following
wireless standards is being used?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 244

D. 802.11n

Question 245

Which of the following services do TCP connections provide to application layer protocols? (Select
TWO).
A. Transport services without error recovery
B. Large data size manageability using segmentation
C. Secure Kerberos password encryption on data
D. Delivery through error recovery
E. Proxy server authentication

Answer 245

B. Large data size manageability using segmentation

D. Delivery through error recovery

Question 246

Kim, a user, reports that the web browser is indicating the site certificate is not trusted. Which of
the following attacks may be in progress?
A. Man-in-the-middle
B. Denial of service
C. Ping flooding
D. Smurfing

Answer 246

A. Man-in-the-middle

Question 247

Which of the following technologies is used to connect public networks using POTS lines?
A. OC3
B. OC12
C. PSTN
D. Cable

Answer 247

C. PSTN

Question 248

Which of the following defines access for a network?
A. ACL
B. RDP
C. RAS
D. ARP

Answer 248

A. ACL

Question 249

Which of the following is a form of encrypting packets for safe, secure data transmission within a
network?
A. RAS
B. PPTP
C. IPSec
D. ICA

Answer 249

C. IPSec

Question 250

250
Kim, an administrator, would like to inspect all traffic flowing over the SMTP protocol on a given
network. Which of the following tools would accomplish this? (Select TWO).
A. Packet sniffer
B. Honeypot
C. Port mirroring
D. IPS
E. Port scanner
F. IDS

Answer 250

A. Packet sniffer

C. Port mirroring

Question 251

PKI is a method of user authentication which uses which of the following?
A. Various router commands
B. Access control lists
C. Certificate services
D. A RADIUS server

Answer 251

C. Certificate services

Question 252

Lisa, an administrator, needs to install a wireless network that will allow legacy devices to connect
to the network and also offer both 5GHz and 2.4GHz frequencies. Which of the following would
BEST describe the type of WAP needed?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 252

D. 802.11n

Question 253

Which of the following components would a technician plug into a smart jack?
A. 25 pair cable
B. 100 pair cable
C. Patch cable
D. Patch panel

Answer 253

C. Patch cable

Question 254

Which of the following is used by RADIUS to encrypt messages between the server and the
client?
A. Public key
B. CSU/DSU
C. Private key
D. Shared secret

Answer 254

D. Shared secret

Question 255

Which of the following security measures is the LEAST intrusive on an end device?
A. NIPS
B. Host-based firewall
C. Antivirus
D. HIDS

Answer 255

A. NIPS

Question 256

Which of the following is a social engineering attack?
A. Worms
B. Man-in-the-middle
C. Phishing
D. Evil twin

Answer 256

C. Phishing

Question 257

Which of the following performs posture assessments for unknown devices that connect to the
network?
A. PKI
B. EAP
C. NAC
D. AAA

Answer 257

C. NAC

Question 258

Which of the following mitigation techniques is MOST effective against a DoS attack?
A. IDS
B. Antivirus
C. Redundancy
D. Backups

Answer 258

C. Redundancy

Question 259

Which of the following is a valid MAC address?
A. 00:AB:C4:FE:60:D3
B. 00-AE-S3-BC-90-F7
C. 13-12-BC-DA-97
D. 15:FA:97:44:AB

Answer 259

A. 00:AB:C4:FE:60:D3

Question 260

260
Which of the following is an encrypted remote access protocol?
A. RDP
B. PoE
C. RAS
D. PPP

Answer 260

A. RDP

Question 261

Port scanners and packet sniffers differ in functionality because:
A. packet sniffers and port scanners are just different names for the same device.
B. packet sniffers can only log events on traffic activity and port scanners can route malicious
packets.
C. packet sniffers watch all traffic over certain ports and port scanners watch traffic on certain
NICs.
D. port scanners are limited to detecting open ports and packet sniffers watch all traffic.

Answer 261

D. port scanners are limited to detecting open ports and packet sniffers watch all traffic.

Question 262

A network topology in which the bandwidth dependency is distributed evenly amongst a large
number of inter-connected clients is known as a:
A. peer-to-peer.
B. bus.
C. star.
D. client/server.

Answer 262

A. peer-to-peer.

Question 263

Which of the following would the telecommunications carrier use to segregate customer traffic over
long fiber links?
A. VLAN
B. MPLS
C. VPN
D. PSTN

Answer 263

B. MPLS

Question 264

A technician discovers that a malware infection has damaged part of the Windows TCP/IP stack.
Which of the following commands can help repair the damage?
A. netsh lan
B. netsh interface
C. netsh wlan
D. netsh winsock

Answer 264

D. netsh winsock

Question 265

Which of the following devices exist as either hardware or software to assist in routing traffic?
(Select TWO).
A. Cable modem
B. Layer 2 switch
C. Router
D. NIDS
E. Layer 3 switch

Answer 265

C. Router

E. Layer 3 switch

Question 266

Which of the following operates at OSI layer 2 to forward traffic based on the MAC address?
A. Switch
B. Proxy Server
C. Router
D. VPN Concentrator

Answer 266

A. Switch

Question 267

Which of the following is used to provide hot standby capabilities using paired routers?
A. CARP
B. L2TP
C. PPTP
D. ISAKMP

Answer 267

A. CARP

Question 268

A network technician is configuring a wireless network. To avoid interference from other wireless
networks in the area, the technician should change which setting?
A. Channel
B. SSID
C. Firewall rule
D. Encryption

Answer 268

A. Channel

Question 269

Which of the following is a purpose of a VLAN?
A. Decreases bandwidth on a network
B. Segments broadcast traffic
C. Increases port speed
D. Allows another connection to the router

Answer 269

B. Segments broadcast traffic

Question 270

270
Which of the following default ports would need to be open on a firewall to allow remote desktop
access?
A. 143
B. 443
C. 3389
D. 8080

Answer 270

C. 3389

Question 271

Which of the following DNS records would allow for a website to have more than one FQDN?
A. TXT
B. PTR
C. MX
D. CNAME

Answer 271

D. CNAME

Question 272

Which of the following wireless standards is capable of ONLY operating on 5.8GHz?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 272

A. 802.11a

Question 273

Which of the following protocols are used to connect devices in a secure manner? (Select TWO).
A. TELNET
B. SSH
C. RDP
D. HTTP
E. DNS
F. FTP

Answer 273

B. SSH

C. RDP

Question 274

Which of the following utilities would a technician use to determine the location of lost packets on a
routed network?
A. ping
B. nslookup
C. route
D. tracert

Answer 274

D. tracert

Question 275

Which of the following problems is MOST likely to arise when configuring an IPv6 over IPv4
tunnel?
A. Routing loop
B. MTU black hole
C. Framing errors
D. SYN flood

Answer 275

B. MTU black hole

Question 276

Which of the following could be used to estimate RTT across a router?
A. dig
B. traceroute
C. arp
D. uptime

Answer 276

B. traceroute

Question 277

Which of the following DNS records allows for reverse lookup of a domain?
A. PTR
B. AAAA
C. A
D. MX

Answer 277

A. PTR

Question 278

Which of the following BEST describes the difference between layer 2 switching and layer 2
routing?
A. Switching moves packets between hosts on different subnets, and routing moves packets
between hosts on the same subnet.
B. Routing moves packets between hosts on different subnets, and switching moves packets
between hosts on the same subnet.
C. Both routing and switching move packets between hosts on the same subnet, but routing does
so at a faster pace.
D. Both routing and switching move packets between hosts on different subnets, but switching
does so at a faster pace.

Answer 278

B. Routing moves packets between hosts on different subnets, and switching moves packets
between hosts on the same subnet.

Question 279

A technician notices that network access is becoming increasingly slow. All of the activity lights, on
the only network layer 2 switch, are blinking at steadily increasing rates. Which of the following is
the MOST likely cause of the increased traffic?
A. STP blocking
B. Duplicate IP addresses
C. MTU mismatch
D. Switching loop

Answer 279

D. Switching loop

Question 280

280
No link lights on a switch’s SFP are functioning, so the network technician re-terminates the end.
After testing the cable, the tester is showing a db loss of -9. Which of the following types of cable
is MOST likely being tested?
A. Fiber
B. CAT3
C. CAT5e
D. CAT6a

Answer 280

A. Fiber

Question 281

Several users from the same building are reporting connectivity issues. The SFP at that building’s
IDF switch is showing a link light, but there is no link light to the corresponding switch’s SFP at the
MDF. Which of the following is the MOST likely cause?
A. A crossover cable is being used.
B. DB loss is too high on all strands.
C. Only TX or RX strand is working.
D. TX and RX are reversed.

Answer 281

C. Only TX or RX strand is working.

Question 282

Joe, a user, reports that his PC is the only one that does not have network connectivity. All the
wiring has been tested properly and the problem still exists. Joe is getting an APIPA address.
Which of the following is the MOST likely cause?
A. Crossover cable is being used
B. Switch was powered off
C. PoE is disabled on the port
D. Port on the switch is disabled

Answer 282

D. Port on the switch is disabled

Question 283

Which of the following IP addresses would be classified as private?
A. 10.100.200.0
B. 169.253.10.20
C. 172.168.5.0
D. 200.100.25.0

Answer 283

A. 10.100.200.0

Question 284

Joe, a technician, needs multiple networks, high speeds, and redundancy on a system. Which of
the following configurations should Joe consider for these requirements? (Select TWO).
A. Routing table
B. Next hop
C. Port mirroring
D. Port monitoring
E. VLANs

Answer 284

C. Port mirroring

E. VLANs

Question 285

A supervisor requests that a technician downloads a MIB for a particular server. Which of the
following protocols requires MIBs?
A. IPSec
B. SSL
C. ISAKMP
D. SNMP

Answer 285

D. SNMP

Question 286

A technician replaces a customer’s router, and is now unable to ping the ISP’s gateway. Which of
the following should the technician check?
A. The arp table of the new customer’s router.
B. The route table of the next-hop router.
C. The route table of the new customer’s router.
D. The arp table of a network user.

Answer 286

C. The route table of the new customer’s router.

Question 287

A new monitoring device is installed in the network that uses ping to determine whether critical
network Internet routers are up. After three missing pings, the alarm reports the device is down.
The device is now constantly reporting alarms, yet there are no reported Internet problems from
users. Which of the following is the MOST likely cause?
A. A missing route on the alarm device.
B. Incorrect VLAN assignment on the router.
C. A missing route on the network routers.
D. Incorrect speed/duplex setting on the alarm device.

Answer 287

D. Incorrect speed/duplex setting on the alarm device.

Question 288

Which of the following protocols is used for remote management of devices?
A. SNMP
B. TFTP
C. Syslog
D. SMTP

Answer 288

A. SNMP

Question 289

A DSL modem connects to the provider’s network using which of the following authentication
techniques?
A. PoE
B. MS-CHAP
C. PPPoE
D. EAP

Answer 289

C. PPPoE

Question 290

290
A technician needs to test the length of a newly installed cable run because it is believed that it
exceeds the maximum specification length. Which of the following tools should be used?
A. Cable certifier
B. Toner probe
C. Cable tester
D. Protocol analyzer

Answer 290

A. Cable certifier

Question 291

Keeping an authoritative and timely record of network devices and their settings is a key activity of
which of the following?
A. Project management
B. Quality of service
C. Configuration management
D. Bandwidth shaping

Answer 291

C. Configuration management

Question 292

Which of the following diagnostic commands relies on proper forwarding of ICMP ECHO packets?
A. ifconfig
B. ping
C. route
D. nbtstat

Answer 292

B. ping

Question 293

A technician has replaced the Internet gateway router, and now no users can reach the Internet.
The technician can ping the router Ethernet port but not the ISP’s router IP address. Which of the
following is the MOST likely problem?
A. Faulty crossover cable
B. DNS server is down
C. Switching loop
D. Outside interface shutdown

Answer 293

D. Outside interface shutdown

Question 294

A network technician performs several switch commands to enable various advanced features on
the switch in the accounting department. During the configuration changes, several users from this
department report connectivity issues. Which of the following logs would the network technician
need to analyze to troubleshoot the connectivity issues?
A. Router logs
B. History logs
C. Startup/bootup config logs
D. Event Viewer logs

Answer 294

B. History logs

Question 295

Which of the following TCP/IP and OSI model layers retransmits a TCP packet if it is not received
successfully at its destination?
A. The transport OSI model layer and the transport TCP/IP model layer.
B. The transport OSI model layer and the Internet TCP/IP model layer.
C. The network OSI model layer and the transport TCP/IP model layer.
D. The network OSI model layer and the Internet TCP/IP model layer.

Answer 295

A. The transport OSI model layer and the transport TCP/IP model layer.

Question 296

A user reports a network failure on a computer. The technician determines that the computer and
NIC are operating properly. Which of the following tools can the technician use to trace the
network cabling back to the punch down block?
A. Protocol analyzer
B. Multimeter
C. Punch down tool
D. Toner probe

Answer 296

D. Toner probe

Question 297

A network administrator wants to monitor traffic by deploying MIBs. Which of the follow network
monitoring resources would be used?
A. SCTP
B. Packet sniffer
C. DCCP
D. SNMP

Answer 297

D. SNMP

Question 298

A company has attempted to introduce a new major network segment to allow growth in capacity.
On the core switch, a GBIC was used to interconnect with a newly placed downstream distribution
switch for the first time. Soon after this implementation, a network flood and an outage occurred
between the core and new distribution network modules. Which of the following should the
network administrator troubleshoot FIRST in order to rectify the issue?
A. Check for switching loops between core and distribution switches.
B. Check whether an incorrect VLAN has been assigned to the new distribution switch.
C. Check for inconsistent or missing routes between the core and distribution switches.
D. Check whether the GBIC was set to multi-mode instead of single-mode SFP.

Answer 298

A. Check for switching loops between core and distribution switches.

Question 299

Which of the following commands will display the associated IP address of a network adapter in
Windows and Linux environments? (Select TWO).
A. dig
B. nslookup
C. nbstat
D. ifconfig
E. ipconfig

Answer 299

D. ifconfig

E. ipconfig

Question 300

300
A network technician is trying to terminate CAT5 modular jacks. Which of the following tools would
be MOST appropriate for this scenario?
A. Crimper
B. OTDR
C. Throughput tester
D. Punch down tool

Answer 300

D. Punch down tool

Question 301

A technician is looking to secure an entire network by blocking all non-essential ports. Which of
the following devices would BEST provide this functionality?
A. Firewall
B. Honeynet
C. IDS
D. IPS

Answer 301

A. Firewall

Question 302

CAT6 Ethernet cabling has a rated maximum transmission capability of:
A. 10Mbps
B. 100Mbps
C. 20,000Mbps
D. 10,000Mbps

Answer 302

D. 10,000Mbps

Question 303

Which of the following methods limits access to a network based on characteristics of the network
card?
A. IP filtering
B. MAC filtering
C. Port filtering
D. Encryption

Answer 303

B. MAC filtering

Question 304

A router operates at which of the following layers of the OSI model?
A. Layer 2
B. Layer 3
C. Layer 4
D. Layer 5

Answer 304

B. Layer 3

Question 305

An organization wants to perform maintenance on any of its web servers without affecting the
service availability during a scheduled change window. Which of the following network devices
would be required to provide this functionality?
A. Router
B. Forward proxy
C. Load balancer
D. Firewall

Answer 305

C. Load balancer

Question 306

Which of the following is an example of two factor authentication?
A. Password, device certificate and PIN
B. SSL web server certificate and password
C. User password and administrator password
D. Password and hardware token OTP

Answer 306

D. Password and hardware token OTP

Question 307

Which of the following protocols are used for accessing a command line terminal session for
management purposes? (Select TWO).
A. Telnet
B. FTP
C. SNMP
D. SSH
E. RDP

Answer 307

A. Telnet

D. SSH

Question 308

The software in a virtualized environment that controls resource allocation and allows multiple
operating system guests to run on the same physical platform is known as the:
A. Hypervisor
B. LPAR.
C. Broker
D. VDI.

Answer 308

A. Hypervisor

Question 309

Which of the following communication modes has the LOWEST overhead necessary to support
streaming protocols such as RTP?
A. Connectionless
B. Stateful
C. Full Duplex
D. Quality of Service

Answer 309

A. Connectionless

Question 310

310
An administrator is setting up a secure wireless network. The administrator decides to support
802.11n and 802.11g with a WPA2 pre-shared key. Users are given the SSID with the pre-shared
key, but the administrator has disabled the SSID broadcast and MAC filtering. Some users have
reported connection issues. Which of the following would MOST likely resolve the users’
connection issues?
A. Limit the devices to 802.11n only
B. Enable the SSID broadcast
C. Enable MAC filtering
D. Use a WEP 128-bit key

Answer 310

B. Enable the SSID broadcast

Question 311

An administrator has received a recommendation against deploying WEP as a wireless encryption
protection scheme. Which of the following is MOST likely the reason?
A. WEP’s IV is too small.
B. WEP uses RC4 which is easily accessible and not secure.
C. WEP uses plain text.
D. WEP is not well supported.

Answer 311

A. WEP’s IV is too small.

Question 312

An administrator would like to redirect connections to the firewall external interface IP address on
port 80 to web server A and connections on port 8080 to web server B. Which of the following
technologies would be used for this?
A. NAT
B. PAT
C. NAT-T
D. ACL

Answer 312

B. PAT

Question 313

On which of the following OSI layers would a computer send ARP packets in order to discover
physical addresses?
A. Layer 2
B. Layer 3
C. Layer 6
D. Layer 7

Answer 313

A. Layer 2

Question 314

When querying a DNS server for an AAAA record, which of the following is an appropriate
response?
A. 192.168.2.1
B. 00:f3:82:99:a2:b8
C. 61.23.168.192.in-addr.arpa
D. 3ffe:1900:4545:3:200:f8ff:fe21:67cf

Answer 314

D. 3ffe:1900:4545:3:200:f8ff:fe21:67cf

Question 315

Joe, a user, reports getting a “This page cannot be displayed” error message in his web browser.
However, Joe can ping the default gateway. Which of the following is the MOST likely cause of the
problem?
A. SSL certificates are expired
B. Incorrect WINS server
C. The browser is unsupported
D. Incorrect DNS settings

Answer 315

D. Incorrect DNS settings

Question 316

Which of the following uses IPSec to provide encryption?
A. PPPoE
B. PPTP
C. L2TP
D. TLS

Answer 316

C. L2TP

Question 317

A technician notices that the application server’s resources are momentary at full capacity for the
amount of incoming and outgoing packets outside the LAN. Which of the following tools would be
used to find out what IPs are connecting to the server and in active mode?
A. ping
B. tracert
C. netstat
D. ipconfig

Answer 317

C. netstat

Question 318

A server technician notices that some changes were implemented on a server during nonbusiness
hours. Which of the following would allow the technician to identify the last time an
administrator was remotely connected to the server?
A. Network sniffer
B. Traffic analyzer
C. System log
D. Security log

Answer 318

D. Security log

Question 319

Which of the following would a server technician use before deploying an email server to mitigate
A. Disable unused services
B. Network cut sheet
C. Baseline image
D. Enable all services

Answer 319

A. Disable unused services

Question 320

320
A network technician is installing a honeypot in the DMZ and wants to create a report of all the
UDP protocols that are being used. Which of the following firewalls can be used to track this?
A. Dual homed
B. Packet filtering
C. Kernel proxy
D. Stateful-inspection

Answer 320

D. Stateful-inspection

Question 321

A network technician is examining network traffic before setting up QoS on the switch. Which of
the following tools is the technician MOST likely using to examine the network traffic?
A. Connectivity software
B. Throughput tester
C. ipconfig
D. Protocol analyzer

Answer 321

D. Protocol analyzer

Question 322

A technician is configuring a wireless network. Which of the following should the technician setup
in order to prevent intruders if the encryption key gets compromised?
A. WAP placement
B. MAC filtering
C. WPA2 PSK
D. Disable SSID broadcasting

Answer 322

B. MAC filtering

Question 323

A technician is troubleshooting network connectivity on a laptop. The user reports that a new
network interface card (NIC) was recently installed. The technician thinks the NIC has not been
properly configured to access the network. Which of the following network troubleshooting steps
should the technician do NEXT?
A. Implement the solution.
B. Escalate the problem to another technician.
C. Test the theory to determine cause.
D. Establish a plan of action to resolve the problem.

Answer 323

C. Test the theory to determine cause.

Question 324

An administrator wants to prevent traffic from a specific VLAN from reaching any internal
resources, but will be able to reach the Internet. The BEST technique to accomplish this task will
be:
A. an ACL
B. a MAC-filtering table
C. a static gateway
D. aTLS tunnel

Answer 324

A. an ACL

Question 325

Which of the following would cause signal interference in a 2.4 GHz WAP? (Select TWO).
A. Cell phone
B. Cordless phone
C. Microwave oven
D. Printer
E. Television

Answer 325

B. Cordless phone

C. Microwave oven

Question 326

An administrator setup a firewall to secure the network and only allow traffic that originated from
the internal network to return; no traffic originating from the outside is allowed to enter. A new
email server needs to be added to the network that will allow traffic to originate from the outside to
access the server. Which of the following is the BEST method to accomplish this?
A. Add NAT to the firewall for the email server
B. Set a rule on the firewall to allow email to go to the email server
C. Add stateful packet filtering to the firewall
D. Add a DMZ to the firewall for the email server

Answer 326

B. Set a rule on the firewall to allow email to go to the email server

Question 327

A network administrator is monitoring switches on a network. Which of the following protocols is
generating this traffic?
A. SMTP
B. PPoE
C. PoE
D. SNMP

Answer 327

D. SNMP

Question 328

Which of the following would BEST be described as a central connection point for secured client
access to a private network from a public network?
A. Content filter
B. VPN concentrator
C. Load balancer
D. Proxy server

Answer 328

B. VPN concentrator

Question 329

Which of the following wireless networking standards has the SLOWEST maximum transmission rate?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 329

B. 802.11b

Question 330

330
A company wants to implement VLANs and is upgrading their networking equipment to
accommodate this. Which of the following should be purchased to allow for the VLANs?
A. Routers
B. Layer 3 switches
C. Hubs
D. Repeaters

Answer 330

B. Layer 3 switches

Question 331

Redundant network devices are used to provide which of the following performance optimizations?
(Select TWO).
A. Load balancing
B. High availability
C. QoS
D. Traffic shaping
E. Content filtering

Answer 331

A. Load balancing

B. High availability

Question 332

While troubleshooting network connectivity, a technician notices a computer has assigned itself an
APIPA IP address of 169.254.0.1. Assuming the DNS servers have been properly configured,
which of the following tools should the technician use to verify the DHCP server is reachable?
A. ipconfig
B. dig
C. nslookup
D. tracert

Answer 332

D. tracert

Question 333

Which of the following provides a device with an IP address that does not remain the same each
time the lease is renewed?
A. Reservation
B. Static IP address
C. Scope
D. Dynamic IP address

Answer 333

D. Dynamic IP address

Question 334

Which of the following is used to share traffic between multiple network connections?
A. Load balancer
B. Content filter
C. VPN concentrator
D. Proxy server

Answer 334

A. Load balancer

Question 335

A standard CAT1 line requires a specific connector. Which of the following is the standard
connector type?
A. DB-9
B. BNC
C. RJ-45
D. RJ-11

Answer 335

D. RJ-11

Question 336

A network technician is having connectivity issues from the T3 to the fiber module of the switch.
The technician suspects that the fiber cable might be faulty. Which of the following tools can the
network technician use to confirm this?
A. OTDR
B. Punch down tool
C. TDR
D. Toner probe

Answer 336

A. OTDR

Question 337

A network technician needs to address bandwidth issues on the wireless network. There are
currently four 802.11n access points. The technician would like to increase the bandwidth. Which
of the following would be the BEST solution?
A. Disable SSID
B. Channel bonding
C. MIMO
D. Increase the signal

Answer 337

B. Channel bonding

Question 338

At which of the following OSI layers does the CSU/DSU operate?
A. Data link
B. Network
C. Transport
D. Physical

Answer 338

D. Physical

Question 339

When a user logs in and is authenticated a ticket/token is granted and used throughout the
network session. The ticket/token grants the user access to different system resources. This is an
example of which of the following?
A. PKI certificates
B. IPSec
C. Kerberos
D. MS-Chap

Answer 339

C. Kerberos

Question 340

340
A firewall that looks at the source IP and destination IP then routes them accordingly is an
example of which of the following?
A. Packet filtering
B. Content filtering
C. Packet sniffing
D. Application gateway

Answer 340

A. Packet filtering

Question 341

The cable tester displays the following information:
1 1
2 ---------- 2
3 ---------- 3
4 xxxxxxxx 4
5 xxxxxxxx 5
6 ---------- 6
7 ---------- 7
8 ---------- 8
Which is being reported?
A. 5 is open, 1/4 are open
B. 4/5 is shorted, 1 is ok
C. 1 is open, 4/5 are shorted
D. 1 is shorted, 4/5 are open

Answer 341

C. 1 is open, 4/5 are shorted

Question 342

An administrator is receiving reports from an executive that the executive’s wireless access point
loses the signal frequently, even though the WAP is on the executive’s desk. The office contains
four other 802.11n access points. Which of the following would MOST likely correct interference
problems in the executive’s office?
A. Turn off SSID broadcasting for the executive’s access point.
B. Replace the 802.11n access point in the office with an 802.11a access point.
C. Change the channel on the access point to channel 11.
D. Turn off as many lights in the executive’s office as possible to reduce interference.

Answer 342

C. Change the channel on the access point to channel 11.

Question 343

A network technician has setup three VLANs on two of the company switches, enabled all the
ports as access ports, and assigned the ports to VLANs. How many connections will be needed to
connect the two switches together?
A. 1
B. 2
C. 3
D. 5

Answer 343

C. 3

Question 344

A network technician has configured a new firewall to allow TCP port 80 traffic and deny UDP
traffic. Users have reported that they are unable to access Internet websites. The technician
verifies by attempting to access a popular website. Which of the following will MOST likely correct the error?
A. HTTP uses UDP
B. DNS port 23 needs to be allowed
C. HTTP needs port 443 allowed
D. UDP port 53 needs to be allowed

Answer 344

D. UDP port 53 needs to be allowed

Question 345

Kurt, a network technician, has configured a new firewall on the network. Users are reporting
errors when attempting to access several websites. Kurt attempts to access several popular
websites with no errors, however, he does receive an error when attempting to access a bank
website. Which of the following rules would BEST allow access to the bank website?
A. Allow UDP port 53
B. Allow TCP port 80
C. Allow UDP port 340
D. Allow TCP port 443

Answer 345

D. Allow TCP port 443

Question 346

A company has installed a VPN concentrator at the main company headquarters and needs
employees that travel to access the company network. Which of the following solutions will allow
the employees to access the VPN without installing client software?
A. Kerberos
B. SSL VPN
C. Site-to-site VPN
D. WPA enterprise

Answer 346

B. SSL VPN

Question 347

Fifty users in an office are actively connected to the wireless network. A new employee is given
the password, but is not able to connect to the network. Which of the following is the MOST likely
cause of this issue?
A. SSID broadcast was disabled.
B. The channels are configured incorrectly.
C. The wireless network has reached the maximum number of users.
D. Interference is occurring.

Answer 347

A. SSID broadcast was disabled.

Question 348

An administrator has been asked to connect an analog phone cabling in a server room. Which of
the following should the administrator use?
A. 66 block
B. Demarc
C. Circuit switch
D. Smart jack

Answer 348

A. 66 block

Question 349

Which of the following wireless device frequencies uses light waves?
A. 802.11b
B. 802.11n
C. IrDA
D. Bluetooth

Answer 349

C. IrDA

Question 350

350
A technician installing a new switch notices that users on the switch can communicate with other
devices on the network, but not with the Internet. Which of the following is the MOST likely cause?
A. Duplicate IP address
B. Wrong DHCP
C. Wrong VLAN configuration
D. Wrong subnet mask

Answer 350

C. Wrong VLAN configuration

Question 351

A senior technician is inspecting a junior technician’s created patch cables. There is a visible
space between the ends of the copper wiring and the top of the plastic at each end of the cables.
Which of the following is the reason these cables cannot be used?
A. Bad connectors
B. Open shorts
C. UTP
D. EMI

Answer 351

A. Bad connectors

Question 352

Which of the following ports does DHCP use? (Select TWO).
A. 22
B. 23
C. 67
D. 68
E. 69

Answer 352

C. 67

D. 68

Question 353

A company wants to implement a wireless encryption method, but wants the key to be a simple phrase so they can easily allow visitors to connect. Which of the following wireless encryption
methods should they employ?
A. WPA
B. WPA2 Enterprise
C. PKI
D. MS-CHAP

Answer 353

A. WPA

Question 354

A distribution layer switch with an SC GBIC that has a fiber connection back to the core has gone
bad and needs to be replaced with a newer model and an LC GBIC. The fiber patch cable was
replaced with a known good LC patch cable. After replacing the switch, the fiber connection shows
no link. Which of the following is MOST likely the cause of the problem?
A. DB loss
B. Incompatible GBIC
C. TXRX reversed
D. Cross-talk

Answer 354

C. TXRX reversed

Question 355

Which of the following has a rated MAXIMUM speed of 100Mbps?
A. CAT3
B. CAT5
C. CAT5e
D. CAT6

Answer 355

B. CAT5

Question 356

A technician is configuring a wireless network. The technician would like to add multiple WAPs.
Which of the following should the technician ensure during setup?
A. Make sure the WAPs use different frequencies.
B. Disable SSID broadcast on all of the WAPs.
C. Make sure WAPs channels do not overlap.
D. Make sure WAPs are using the same channels.

Answer 356

C. Make sure WAPs channels do not overlap.

Question 357

A technician is getting ready to install a WLAN in a warehouse. Which of the following will MOST
likely determine the WAP placement?
A. Antenna types
B. SSID broadcast
C. VTP configuration
D. Channels

Answer 357

A. Antenna types

Question 358

Which of the following IEEE standards use the same frequency? (Select TWO).
A. 802.11a
B. 802.11b
C. 802.11e
D. 802.11g
E. 802.11i

Answer 358

B. 802.11b

D. 802.11g

Question 359

A user is not able to connect to 802.11n WAP. The user has an 802.11g WLAN card and has
connected to other 802.11n networks. Which of the following is MOST likely the reason the user is
unable to connect?
A. WAP is set to use only the 2.4 GHz frequency.
B. WAP is set to use “N only”.
C. WAP encryption is using WEP 128.
D. WAP has MAC filtering disabled.

Answer 359

B. WAP is set to use “N only”.

Question 360

360
Which of the following options would need to be configured on a DHCP server to boot from the
network?
A. DNS Server
B. Proxy Server
C. TFTP Server
D. NTP Server

Answer 360

C. TFTP Server

Question 361

Which of the following can a technician increase on an antenna to create a larger cell size in a
WLAN?
A. Attenuation
B. Bandwidth
C. Length
D. Gain

Answer 361

D. Gain

Question 362

How many pairs of CAT5e wires are used for data with 1000BaseT?
A. 2
B. 4
C. 6
D. 8

Answer 362

B. 4

Question 363

Which of the following should be utilized to reduce null zones?
A. SSID broadcasting
B. Diversity
C. WPA
D. Horizontal polarization

Answer 363

B. Diversity

Question 364

Which of the following can be done to increase a wireless LAN cell size?
A. Add a higher gain omni antenna
B. Add diversity antennas
C. Add a higher gain yagi antenna
D. Increase the PoE wattage

Answer 364

A. Add a higher gain omni antenna

Question 365

RADAR can cause interference with which of the following technologies?
A. WiMAX
B. 802.11i
C. 802.11n
D. Bluetooth

Answer 365

C. 802.11n

Question 366

Which of the following is considered an Exterior Gateway Protocol (EGP)?
A. BGP
B. IGRP
C. RIP
D. OSPF

Answer 366

A. BGP

Question 367

IPv6 routing occurs at which of the following OSI model layers?
A. Layer 2
B. Layer 3
C. Layer 4
D. Layer 5

Answer 367

B. Layer 3

Question 368

At which of the following layers of the OSI model does Media Access Control reside?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 7

Answer 368

B. Layer 2

Question 369

Routers are used instead of Layer 2 switches to separate which of the following?
A. Collision Domains
B. Link States
C. Distant Vectors
D. Broadcast Domains

Answer 369

D. Broadcast Domains

Question 370

370
A power failure caused a router to reboot. Now users are not able to reach remote networks.
Which of the following is the MOST likely cause?
A. The dynamic NAT tables were erased by the reset.
B. The DNS server setting on the workstations are incorrect.
C. MAC entries in the ARP table were not saved.
D. A technician did not save the running configuration.

Answer 370

D. A technician did not save the running configuration.

Question 371

A computer on VLAN 10 with the IP address of 192.168.1.45/27 cannot ping a computer on VLAN
20 with the IP address of 192.168.1.65/27. Which configuration change will allow the PING to be
successful?
A. Replace the router with a Layer 2 switch that supports VLANs
B. Change VLAN 20 computers Default Gateway to 192.168.1.127/27
C. Change VLAN 10 computers Default Gateway to 192.168.1.32/27
D. AllowICMP to pass through the Router

Answer 371

D. AllowICMP to pass through the Router

Question 372

At which of the following layers of the OSI model do frames exist?
A. Application
B. Network
C. Transport
D. Data Link

Answer 372

D. Data Link

Question 373

Which of the following technologies is considered to be cell-switched?
A. ISDN
B. Frame Relay
C. ATM
D. DSL

Answer 373

C. ATM

Question 374

The Chief Information Officer (CIO) is unable to send or receive email and has asked the network
administrator to resolve the email problem. Which of the following should the network
administrator do NEXT?
A. Establish a plan of action to resolve the problem
B. Gather additional information
C. Escalate to a senior network administrator
D. Document the problem and proposed solution

Answer 374

B. Gather additional information

Question 375

Which of the following uses port 53 by default?
A. RDP
B. QoS
C. DHCP
D. DNS

Answer 375

D. DNS

Question 376

A technician has disabled ICMP on a server. Which of the following will continue to function for the
purpose of troubleshooting connectivity on the server?
A. telnet
B. ping
C. arp
D. tracert

Answer 376

A. telnet

Question 377

Which of the following is the MAXIMUM rated throughput of 10BaseT?
A. 10Gbps
B. 10GHz
C. 10Mbps
D. 10MHz

Answer 377

C. 10Mbps

Question 378

Which of the following WAN technologies will vary in bandwidth depending on the amount of traffic
in the local area on the same provider?
A. Satellite
B. Cable
C. T1
D. DSL

Answer 378

B. Cable

Question 379

Which of the following would provide the ability to have a pool of web servers provide content as
users visit the website’s single domain name?
A. Protocol analyzer
B. Load balancer
C. Content filter
D. Channel bonding

Answer 379

B. Load balancer

Question 380

380
Which of the following is based ENTIRELY on using ICMP packets?
A. Social engineering
B. NMAP
C. Buffer overflow attack
D. Smurf attack

Answer 380

D. Smurf attack

Question 381

Which of the following could be used to stop unknown threats?
A. DMZ
B. Signature based IPS
C. Behavior based IPS
D. Honeypots

Answer 381

C. Behavior based IPS

Question 382

Which of the following cable types have a rated MAXIMUM bandwidth of 100Mbps?
A. CAT3
B. CAT5
C. CAT5e
D. CAT6

Answer 382

B. CAT5

Question 383

Which of the following allows a technician to gather information about the operating system?
A. Domain services
B. Fingerprinting
C. Countermeasures
D. Reconnaissance

Answer 383

B. Fingerprinting

Question 384

Which of the following is indicative of an FTP bounce?
A. Arbitrary IP address
B. Reverse DNS lookups
C. Same Port Number
D. File Transfer Success

Answer 384

A. Arbitrary IP address

Question 385

The software that allows a machine to run multiple operating systems at once is called the:
A. server manager
B. hypervisor
C. boot loader
D. partition manager

Answer 385

B. hypervisor

Question 386

Which of the following routing protocols relies on hop count as its ONLY metric?
A. BGP
B. EIGRP
C. OSPF
D. RIP

Answer 386

D. RIP

Question 387

A technician recently fixed a computer with several viruses and spyware programs on it and
notices the Internet settings were set to redirect all traffic through an unknown proxy. This type of
attack is known as which of the following?
A. Phishing
B. Social engineering
C. Man-in-the-middle
D. Shoulder surfing

Answer 387

C. Man-in-the-middle

Question 388

Which of the following is an IPv6 address?
A. 00:14:38:05:7B:E5
B. 10.10.1.1
C. 192.168.1.1
D. 2001:cdba::3257:9652

Answer 388

D. 2001:cdba::3257:9652

Question 389

A company has a large number of employees that need VPN access from home. Which of the
following is the BEST solution for deploying and managing the remote access?
A. Site-to-site VPN
B. Network-based firewall
C. SSL VPN
D. Host-based firewall

Answer 389

C. SSL VPN

Question 390

390
Which of the following is a routed protocol that functions at layer 3 of the OSI model?
A. IP
B. Frame relay
C. PPP
D. ADSL

Answer 390

A. IP

Question 391

Something you have, something you are, and something you know are the three tenets of:
A. social engineering
B. change management
C. remote access
D. access control

Answer 391

D. access control

Question 392

Which of the following technologies is used on cellular networks?
A. Ethernet
B. CDMA
C. CSMA/CA
D. POTS

Answer 392

B. CDMA

Question 393

Which of the following standards can operate at both the 2.4GHz and 5GHz frequencies?
A. 802.11a
B. 802.11b
C. 802.11g
D. 802.11n

Answer 393

D. 802.11n

Question 394

Which of the following mediums is circuit switched?
A. PSTN
B. ATM
C. Frame relay
D. MPLS

Answer 394

A. PSTN

Question 395

Which of the following is true about tunneling and encryption?
A. SIP encrypts all data going through the tunnel.
B. PPTP creates a secure tunnel.
C. SSL VPN provides a secure tunnel.
D. RAS is a secure way to create a tunnel.

Answer 395

C. SSL VPN provides a secure tunnel.

Question 396

Which of the following is a secure way to connect to a device?
A. RSH
B. TFTP
C. SNMPv2
D. SFTP

Answer 396

D. SFTP

Question 397

Which of the following uses eight groups of characters for addressing?
A. MAC
B. IPv4
C. IPv6
D. DHCP

Answer 397

C. IPv6

Question 398

A pest control contractor attempts to gain access to the datacenter; however, the manager on duty
notes that a pest control inspection was not on the schedule. Which of the following attacks is in
progress?
A. Phishing
B. Social engineering
C. Man-in-the-middle
D. Smurfing

Answer 398

B. Social engineering

Question 399

Which of the following is true about an IP address if the first bit is a one and the second bit is a
zero?
A. The address is a Class A address.
B. The address is a Class B address.
C. The address is a Class C address.
D. The address is a Class D address.

Answer 399

B. The address is a Class B address.

Question 400

400
Which of the following MUST be used when securing a VoIP network consisting of private IP
addresses?
A. IPS
B. Application layer firewall
C. IDS
D. An unmanaged switch

Answer 400

B. Application layer firewall

Question 401

Which of the following uses certificates as a form of security?
A. Kerberos
B. LDAP
C. PKI
D. CHAP

Answer 401

C. PKI

Question 402

Which of the following is a proprietary routing protocol?
A. RIP
B. EIGRP
C. OSPF
D. BGP

Answer 402

B. EIGRP