Net+ Flashcards
1
Q
A technician is trying to determine the IP address of a customer’s router. The customer has an IP address of 192.168.1.55/24. Which of the following is the address of the customer’s router?
A. 192.168.0.55
B. 192.168.1.0
C. 192.168.1.1
D. 192.168.5.5
E. 255 255 255.0
A
C
2
Q
A network technician is connecting two switches together. Which of the following protocols should the technician use to increase speed and fault tolerance?
A. SIP
B. BGP
C. LACP
D. LLDP
A
C
3
Q
Which of the following is a reason why a business may be hesitant to move sensitive data to a SaaS cloud service?
A. Decreased performance of internal network
B. Loss of full control over data resources
C. Increased malware exposure
D. Incompatibility with the current network
A
B
4
Q
Employees want the ability to use personal devices on the guest network while working out at the company gym. In order to meet the request, which of the following policies requires employee adherence?
A. AUP
B. SLA
C. NDA
D. MOU
A
A
5
Q
A building is equipped with light sensors that turn off the fluorescent lights when natural light is above a certain brightness. Users report experiencing network connection issues only during certain hours. The west side of the building experiences connectivity issues in the morning hours and the east side near the end of the day. At night the connectivity issues affect the entire building. Which of the following could be the cause of the connectivity issues?
A. Light sensors are interfering with the network
B. EMI from the lights is interfering with the network cables
C. Network wiring is run perpendicular to electrical conduit
D. Temperature changes are causing attenuation in copper cabling
A
C
6
Q
Users are reporting Internet connectivity issues. The network administrator wants to determine if the issues are internal to the company network or if there is an
issue with the ISP. Which of the following tools should be used to BEST determine where the outage is occurring?
A. traceroute
B. ping
C. nslookup
D. netstat
A
A
7
Q
A network engineer wants to a segment the network into multiple broadcast domains. Which of the following devices would allow for communication between the segments?
A. Layer 2 switch
B. Layer 3 switch
C. Bridge
D. Load balancer
A
B
8
Q
A technician has installed a Linux server in the tax office. The server can access most of the resources on the network, but it cannot connect to another server
that has a share for backup. The technician learns that the target server is on a different subnet. Which of the following tools should the technician use to ensure
the Linux server can reach the backup location?
A. netstat
B. traceroute
C. route
D. dig
E. ifconfig
A
B
9
Q
An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business trips. Which of
the following is needed to protect BOTH the employee and the company?
A. An NDA ensuring work data stored on the personal phone remains confidential
B. An AUP covering how a personal phone may be used for work matters
C. A consent to monitoring policy covering company audits of the personal phone
D. Real-time remote monitoring of the phone’s activity and usage
A
D
10
Q
Which of the following policies would Joe, a user, have to agree to when he brings in his personal tablet to connect to the company’s guest wireless Internet?
A. NDA
B. IRP
C. BYOD
D. SLA
A
C.
11
Q
Which of the following physical security controls is MOST likely to be susceptible to a false positive?
A. Identification card
B. Biometric device
C. Proximity reader
D. Video camera
A
C.
12
Q
A company has hundreds of nodes on a single subnet and has decided to implement VLANs. Which of the following BEST describes the benefit of this
approach?
A. It segments broadcast domains in the network infrastructure
B. It provides a faster port to all servers
C. It provides multiple collision domains on one switchport
D. It provides multiple broadcast domains within a single collision domain
A
A
13
Q
A network administrator wants to ensure sensitive data is not infiltrated from the system electronically. Which of the following should be implemented
A. DLP
B. AUP
C. NDA
D. SLA
A
C
14
Q
A small business developed an in-house application that is very sensitive to network latency when a communicating between servers. Due to a lack of funds, the
business had to build its own network for workstations and servers. Now a network administrator must redesign the network due to performance issues with the
application. Which of the following would be the MOST cost effective for the administrator to recommend?
A. Create Ethernet VLANs
B. Disable autonegotiation on the servers
C. Install 10Gb Ethernet NICs in the servers
D. Install Fibre Channel for the server network
A
C?
15
Q
The backups server connects to a NAS device using block-level storage over Ethernet. The performance is very slow, however, and the network technician
suspects the performance issues are network related Which of the following should the technician do to improve performance?
A. Utilize UDP to eliminate packet overhead
B. Turn off MDIX settings on the NAS and server switchports
C. Enable jumbo frames on the NAS and server
D. Encapsulate the storage traffic in a GRE tunnel
A
C
16
Q
A customer cannot access a company’s secure website. The company’s network security is reviewing the firewall for the server and finds the following output:
Which of the following changes should be made to allow all customers to access the company’s secure website?
A. Allow any any 10.5.0.10 443
B. Allow any any 12.73.15.5 443
C. Allow 10.5.0.10 443 any any
D. Allow 10.5.0.10 any 10.5.0.10 30
A
C
17
Q
A technician is replacing a switch at a branch office and discovers the existing backbone cable does not fit in the new switch. The fiber patch panel has circular
connections. The new switch has a transceiver that accepts a smaller square adapter of two strands. Which of the following patch cables would the technician
need to complete the installation?
A. LC to SC
B. SC to ST
C. LC to ST
D. ST to ST
E. SC to SC
A
C
18
Q
A contractor is setting up and configuring conference rooms for a convention. The contractor sets up each room in the conference center to allow wired Internet
access going to individual tables. The contractor measured the distance between the hotel’s patch panel to the jack, and the distance is within Cat 5e
specifications. The contractor is concerned that the room will be out of specification if cables are run in each room from the wall jacks. Which of the following
actions should the contractor take to ensure the cable runs meet specifications and the network functions properly?
A. Place a switch at the hotel’s patch panel for connecting each room’s cables
B. Place a switch on each table to ensure strong connectivity
C. Place repeaters between the patch panel and the rooms
D. place a switch at the wall jack and run the cables in the room from there
A
A
19
Q
A technician is investigating a server performance issue, The technician has gathered the server utilization statistics. Which of the following should the
technician use to determine which statistics are not in the normal range?
A. Baseline review
B. Vulnerability scan
C. System life-cycle report
D. Archiving logs
A
A
20
Q
A technician is troubleshooting a point-to-point fiber-optic connection. The technician is at a remote site and has no connectivity to the main site. The technician
confirms the switch and the send-and-receive light levels are within acceptable range. Both fiber SFPs are confirmed as working. Which of the following should
the technician use to reveal the location of the fault?
A. OTDR
B. Light meter
C. Tone generator
D. CSU/DSU
A
A
21
Q
A network security technician observes multiple attempts to scan network hosts and devices. All the attempts originate from a single host on the network. Which
of the following threats is MOST likely involved?
A. Smurf attack
B. Rogue AP
C. Compromised system
D. Unintentional DoS
A
C
22
Q
A technician is connecting a router directiy to a PC using the G1 /0/1 interface. Without the use of auto-sensing ports, which of the following cables should be
used?
A. Straight-through
B. Console
C. Rollover
D. Crossover
A
D
23
Q
A network technician has discovered a rogue access point under an empty cubicle desk. Which of the following shouId the technician perform to ensure another
cannot be placed on the network?
A. Disable unused ports on switches
B. Enable DHCP guard to detect rogue servers
C. Configure WPA2 on all access points
D. Use TACACS+ authentication
A
B
24
Q
The security manager reports that individual systems involved in policy or security violations or incidents cannot be located quickly. The security manager
notices the hostnames all appear to be randomly generated characters. Which of the following would BEST assist the security manager identifying systems
involved in security incidents?
A. Enforce port security to require system authentication
B. Implement a standardized UNC
C. Label existing systems with current hostnames
D. Forward the DHCP logs to the security manager every day
A
B
25
A technician attempts to replace a switch with a new one of similar model from the same vendor. When the technician moves the fiber and SFP plug, the switch
does not completely boot up. Considering that the config files are the same, which of the following is the MOST likely cause of the failure?
A. Damaged fiber
B. Corrupted operating system
C. VLAN mismatch
D. Bad port
B
26
In which of the following ways does a DDoS attack differ from a spoofing attack?
A. DDoS attacks target multiple networks
B. Spoofing attacks originate from a single host
C. DDoS attacks are launched from multiple hosts
D. Spoofing attacks require physical presence
C
27
A network technician receives a call from a user in the accounting department stating that Internet connectivity has been lost after receiving a new workstation.
No other users in accounting are reporting similar issues. The network technician is able to ping the machine from the accounting department's router, but is not
able to ping the machine from the IT network. Which of the following is MOST likely the cause?
A. Incorrect default gateway
B. Duplicate IP address
C. Misconfigured OSPF
D. Improper VLAN assignment
A
28
When choosing a type of storage that integrates with the existing network infrastructure, the storage must be easily configurable to share files and can
communicate with all existing clients over TCP/IP. Which of the following is the BEST technology for the network administrator to implement?
A. iSCSI
B. Fibre Channel
C. NAS
D. DAS
C
29
A network technician notices the site-to-site VPN and Internet connection have not come back up at a branch office after a recent power outage. Which of the
following is an out-of-band method the technician would MOST likely utilize to check the branch office's router status?
A. Use a modem to console into the router
B. Walk a user through troubleshooting the connection
C. Travel to the branch office
D. Hire a contractor to go on-site
A
30
An engineer is reviewing the implementation requirements for an upcoming project. The basic requirements identified by the customer include the following:
\*WLAN architecture supporting speeds in excess of 150 Mbps
\*Client less remote network access
\*Port-based network access control
Which of the following solution sets properly addresses all of the identified requirements?
A. 802.11a, IPSec VPN, 802.1x
B. 802.11ac, MPLS, 802.3
C. 802.11b, PPTP,802.1x
D. 802.11g, MS-CHAP, 802.16
E. 802.11n, SSL-VPN, 802.1x
E
31
Users are reporting their network is extremely slow. The technician discovers pings to external host have excessive response times. However, internal pings to
printers and other PCs have acceptable response times. Which of the following steps should the technician take NEXT?
A. Determine if any network equipment was replaced recently
B. Verify malware has not disabled the users' PC firewalls
C. Replace users’ network cables with known-good network cables
D. Power cycle the web server
A
32
A technician is upgrading the firmware on an older KVM switch. The specifications call for a serial port to connect to the computer on one side, and an Ethernet
jack to connect to the switch on the other side. Which of the following connectors does the technician need for this cable? (Choose two.)
A. RG-9
B. DB-9
C. RJ-11
D. DB-25
E. RJ-45
F. BNC
BE
33
A technician replaces a failed router with a spare that has been in inventory for some time. After attempting to enable HTTPS on the spa re router, the technician discovers the feature is unavailable. The support office was able to connect to the previous router. Which of the following actions should the technician perform
to enable HTTPS access for the support team?
A. Reboot the router
B. Enable HTTP on the router
C. Update the firmware of the spare router
D. Perform a factory reset on the router
C
34
Which of the following security mechanisms dynamically assigns a Layer 2 address and restricts traffic only to that Layer 2 address?
A. Sticky MAC
B. 802.1x
C. ACL
D. NAC
A
35
A network technician is able to connect the switches between to offices, but the offices cannot communicate with each other, as each office uses a different IP
addressing scheme. Which of the following devices needs to be installed between the switches to allow communication?
A. Bridge
B. Access point
C. Router
D. Range extender
C
36
A network technician is configuring a firewall access list to secure incoming connections to an email server. The internal address of this email server is
192.168.1.143. The firewall should allow external email servers to send email to the email server. The email server also supports client access via a web
browser. Only secure protocols should be used, and only the necessary ports should be open. Which of the following ACL rules should be configured in the
firewall's WAN port? (Choose two.)
A. Permit 192.168.1.143.25
B. Permit 192.168.1.143.80
C. Permit 192.168.1.143.110
D. Permit 192.168.1.143.143
E. Permit 192.168.1.143.443
F. Permit 192.168.1.143.587
EF
37
A network technician receives a call from a use who is experiencing network connectivity issues. The network technician questions the user and learns the user
brought in a personal wired router to use multiple computers and connect to the network. Which of the following has the user MOST likely introduced to the
network?
A. Rogue DHCP server
B. Evil twin
C. VLAN mismatch
D. Honey pot
A
38
A typical cell tower will have microwave and cellular antennas. Which of the following network topologies do these represent? (Choose two.)
A. Point-to-multipoint
B. Bus
C. Point-to-point
D. Mesh
E. Peer-peer
F. Ring
CD
39
Which of the following provides the ability to deploy consistent access point configurations from a central location?
A. Wireless controller
B. AAA server
C. WiFi-protected setup
D. Proxy server
E. VPN concentrator
A
40
A network technician is implementing a solution on the network to hide the workstation internal IP addresses across a WAN. Which of the following is the
technician configuring?
A. QoS
B. DMZ
C. RIP
D. NAT
D
41
An end-user device requires a specific IP address every time it connects to the corporate network, however, corporate policy does not allow the use of static IP
addresses. Which of the following will allow the request to be fulfilled without breaking the corporate policy?
A. DHCP relay
B. DHCP exclusion
C. DHCP option
D. DHCP reservation
D
42
Which of the following is a system of notation that uses base 16 rather than base 10?
A. Hex
B. Octal
C. Binary
D. CIDR
A
43
A network administrator wants to increase the confidentiality of the system by hardening the authentication process. Currently, the users log in using usernames
and passwords to access the system. Which of the following will increase the authentication factor to three?
A. Adding a fingerprint reader to each workstation and providing a RSA authentication token
B. Adding a fingerprint reader and retina scanner
C. Using a smart card and RSA token
D. Enforcing a stronger password policy and using a hand geometry scan
A
44
A network technician is installing a new network switch is looking for an appropriate fiber optic patch cable. The fiber optic patch panel uses a twist- style
connector. The switch uses a SFP module. Which of the following connector types should the fiber patch cable have?
A. LC
B. ST
C. SC
D. MTRJ
E. MTP
B
45
A network administrator wishes to ensure there are no unnecessary open communication paths into a server. Using a port scanner, the administrator finds that
ports are reported as closed. Which of the following BEST explains this response?
A. The ports belong to an active system and are denying requests
B. The ports are associated with deprecated services
C. The ports do not belong to a live system
D. The ports replied with a SYN/ACK response
B
46
A technician is installing a new wireless badging system on a hospital network. The requirements of the badging system are for it to have its own SSID and low
power levels. The badging system has to cover 99,9% of the hospital. Which of the following is the BEST action to take to meet the system requirements?
A. Install additional WAPs
B. Install external antennas
C. Move the WAPs closer to the more populated area
D. Change the antenna types
A
47
A company has a web-based application that is used by many different departments. The company has experienced some overload of resources on the
database server. The network administrator implements a network device in between the servers and the database. Which of the following BEST describes the
purpose of this device?
A. Content filtering and network analysis
B. Load balancing and providing high availability
C. Port sniffing and protocol analysis
D. Clustering and NIC teaming
B
48
Which of the following is a vulnerable system designed to detect and log unauthorized access?
A. SIEM
B. Honey pot
C. DMZ
D. Proxy server
B
49
A network engineer is designing a new IDF in an old building. The engineer determines the equipment will fit in a two-post rack, and there is power available for
this equipment. Which of the following would be the FIRST issue to remediate?
A. Air flow and cooling
B. UPS capability
C. Circuit labeling
D. Power redundancy
A
50
A customer is reporting difficulty connecting some devices after replacing a wireless router with a new wireless 802.11 ac router. The SSID, encryption and
password are the same as the previous router. A technician goes on-site and notices the devices that are no longer connecting appear to be several years ago,
Which of the following is MOST likely the problem?
A. the password needs to be re-entered.
B. there is a security type mismatch.
C. there is insufficient antenna power.
D. there is a frequency mismatch.
E. the channel has changed.
D
51
A device operating at Layer 3 of the OSI model uses which of the following protocols to determine the path to a different network?
A. STP
B. RTP
C. RIP
D. NTP
E. SIP
C
52
A network technician has created a network that consists of a router, a firewall, a switch, and several PCs. Which of the following physical network topologies
was created?
A. Star
B. Mesh
C. Ring
D. Bus
D
53
A computer lab on a campus network was recently reconfigured using recycled network cables. One of the 24 computers in the lab is unable to connect to the
network after the upgrade. A network technician successfully uses the cable in question to connect directly to another computer. Which of the following is MOST
likely issue with the cable?
A. The cable is a crossover cable
B. The cable is rollover cable
C. The cable has bent pins
D. The cable is a Cat 5 cable
A
54
Users have been experiencing slow network response times, and management has asked the network technician to provide evidence of network improvement.
After optimizing the network, which of the following would be required?
A. IDF/MDF documentation
B. Change management
C. Performance baseline
D. Physical diagram
C
55
Which of the following DNS records needs to be configured for SMTP traffic?
A. MX
B. CNAME
C. AAAA
D. PTR
A
56
Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are intermittent but seem to
occur most often around midday. Which of the following is the MOST likely cause?
A. There is interference from small appliances
B. The signal coverage area is too small
C. Not enough DHCP addresses have been allotted
D. The DNS cache on the users' computers has become corrupt
C
57
An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organization's network. As part of the attack, the
analyst launches a fake access point matching the SSID of the organization's guest access network. When a user connects to the fake access point, the analyst
allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for latest analysis and exploitation. Which
of the following attacks has the analyst successfully performed in this scenario?
A. Bluesnarfing
B. Session hijacking
C. MAC spoofing
D. VLAN hopping
E. Man-in the middle
E
58
The server team has just installed an application across three different servers. They are asking that all requests to the application are spread evenly across the
three servers. Which of the following should the network team implement to fulfil the request?
A. Proxy server
B. UTM appliance
C. Content filter
D. Load balancer
D
59
A company recently upgraded all of its printers to networked multifunction devices. Users can print to the new devices, but they would also like the ability to scan
and fax files from their computers Which of the following should the technician update to allow this functionality?
A. Device software
B. Printer drivers
C. Printer firmware
D. NIC drivers
C
60
A single PRI can deliver multiple voice calls simultaneously using which of the following Layer 1 technologies?
A. Time division multiplexing
B. Analog circuit switching
C. CSMA/CD
D. Time division spread spectrum
A
61
A company has contracted with an outside vendor to perform a service that will provide hardware, software, and procedures in case of a catastrophic failure of
the primary datacenter. The Chief Information Officer (CIO) is concerned because this contract does not include a long-term strategy for extended outages.
Which of the following should the CIO complete?
A. Disaster recovery plan
B. Business continuity plan
C. Service level agreement
D. First responder training
B
62
The Chief Information Officer (CIO) has noticed the corporate wireless signal is available in the parking lot. Management requests that the wireless network be changed so it is no longer accessible in public areas, without affecting the availability inside the building. Which of the following should be changed on the
network?
A. Power levels
B. Overcapacity
C. Distance limitations
D. Channel overlap
A
63
In a service provider network, a company has an existing IP address scheme. Company A's network currently uses the following scheme:
Subnet 1: 192.168.1.0/26
Subnet 2: 192.160.1.65/26
Company b uses the following scheme:
Subnet 1: 192.168.1.50/28
The network administrator cannot force the customer to update its IP scheme. Considering this, which of the following is the BEST way for the company to
connect these networks?
A. DMZ
B. PAT
C. NAT
D. VLAN
C
64
Which of the following MUST be implemented to share metrics between routing protocols within the same router?
A. Routing loop
B. Routing table
C. Route redistribution
D. Dynamic routes
B
65
Which of the following is used to classify network data for the purpose of providing QoS?
A. STP
B. VLANs
C. SIP
D. DSCP
D
66
A network technician is troubleshooting an end-user connectivity problem. The network technician goes to the appropriate IDF but is unable to identify the
appropriate cable due to poor labeling. Which of the following should the network technician use to help identify the appropriate cable?
A. Tone generator
B. Multimeter
C. OTDR
D. Loopback adapter
A
67
A technician is trying to configure a previously owned WAP. The technician successfully logs into the administrative console and attempts to input the IP address
on the WAP. However, the WAP is not accepting the command. Which of the following is causing the problem?
A. The WAP antenna is damaged
B. The WAP transmitter light is dim
C. The terminal emulation software is misconfigured
D. The LWAPP image is installed on the WAP
C
68
A network engineer is designing a new network for a remote site, The remote site consists of ten desktop computers, ten VoIP phones, and two network printers.
In addition, two of the desktop computers at the remote site will be used by managers who should be on a separate network from the other eight computers.
Which of the following represents the BEST configuration for the remote site?
A. One router connected to one 24-port switch configured with three VLANS: one for the manager's computers and printer, one for the other computers and
printer, and one for the VoIP phones
B. Two routers with each router connected to a 12-port switch, with a firewall connected to the switch connected to the manager's desktop computers, VoIP
phones, and printer
C. One router connected to one 12-port switch configured for the manager's computers, phones, and printer, and one 12-port switch configured for the other
computers, VoIP phones, and printer
D. One router connected to one 24-port switch configured with two VLANS: one for the manager's computers, VoIP phones, and printer, and one for the other
computers, VoIP phones, and printer
A
69
An office network consists of one two-port router connected to a 12-port switch. A four-port hub is also connected to the switch. On this particular network, which
of the following is the number of collision domain that exist?
A. 3
B. 12
C. 13
D. 14
E. 15
D
70
Which of the following devices, if implemented, would result in decreased administration time of an 802.11 network running centralized authentication services?
(Choose two.)
A. VPN concentrator
B. Proxy server
C. Wireless controller
D. RADIUS server
E. Multilayer switch
CD
71
A disgruntled employee executes a man-in-the-middle attack on the company network. Layer 2 traffic destined for the gateway is redirected to the employee's
computer. This type of attack is an example of:
A. ARP cache poisoning
B. IP spoofing
C. amplified DNS attack
D. evil twin
A
72
A network administrator has been given a network of 172.16.85.0/21 and wants to know the usable range of IP addresses on that subnet. Which of the following
indicates the correct IP address range?
A. 172.16.80.0-172.16.85.254
B. 172.16.80.0-172.16.88.255
C. 172.16.80.1-172.16.87.254
D. 172.16.80.1 -172.16.85.255
C
73
Which of the following should a technician investigate when using a network baseline to troubleshoot?
A. Tracing a network wire connectivity issue from the datacenter to a host.
B. Determining if the server performance is degraded.
C. Changes that have been made to the network configuration.
D. Location of networking equipment in a rack.
B?
74
A technician has racked a new access switch and has run multimode fiber to a new location. After installing an extended-range 10Gb SFP in the core switch, the
technician installed a 10Gb SFP in the access switch and connected the port to the new extension with a fiber jumper. However, the link does not display, and
the technician cannot see light emitting from the core switch. Which of the following solutions is MOST likely to resolve the problem?
A. Swap the fiber pairs in one of the SFPs
B. Replace the jumpers with single-mode fiber
C. Set the correct MTU on the new interface
D. Install an optic that matches the fiber type
B
75
The IT manager at a small firm is in the process of renegotiating an SLA with the organization's ISP. As part of the agreement, the organization will agree to a
dynamic bandwidth plan to provide 150Mbps of bandwidth. However, if the ISP determines that a host on the organization's internal network produces malicious
traffic, the ISP reserves the right to reduce available bandwidth to 1.5 Mbps. Which of the following policies is being agreed to in the SLA?
A. Session hijacking
B. Blocking
C. Throttling
D. Data usage limits
E. Bandwidth quotas
C
76
Which of the following BEST describes the differences between VLAN hopping and session hijacking?
A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a user's web
connection to execute commands
B. VLAN hopping is a brute force attack executed to gain additional access. Session hijacking involves physically disrupting a network connection
C. VLAN hopping involves overriding a user network connection to execute malicious commands. Session hijacking involves compromising a host to elevate
privileges
D. VLAN hopping is the act of exploiting poor VLAN tagging. Session hijacking is a web-based attack aimed at privilege escalation
A
77
A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a non-standard socket. Which of the following types of
rules is the administrator implementing?
A. NAT
B. PAT
C. STP
D. SNAT
E. ARP
B
78
A network technician configures a firewall’s ACL to allow outgoing traffic for several popular services such as email and web browsing. However, after the
firewall's deployment, users are still unable to retrieve their emails. Which of the following would BEST resolve this issue?
A. Allow the firewall to accept inbound traffic to ports 25, 67,179, and 3389
B. Allow the firewall to accept inbound traffic to ports 80,110,143, and 443
C. Set the firewall to operate in transparent mode
D. Allow the firewall to accept inbound traffic to ports 21, 53, 69, and 123
B
79
A network technician is deploying mobile phones for a company's sales staff. Salespeople frequently travel nationally and internationally to meet with clients, and
often have to roam or switch cellular providers. Which of the following standards is the BEST option to fit the requirements?
A. GSM
B. TDM
C. CDMA
D. PSTN
E. MIMO
A
80
Which of the following protocols do MOST MITM attacks utilize?
A. ARP
B. SIP
C. FTP
D. SCP
A
81
A technician must determine if a web page user's visits are connecting to a suspicious website's IP address in the background. Which of the following tools would
provide the information on TCP connections?
A. netstat
B. tracert
C. arp
D. ipconfig
E. route
A
82
A network engineer arrives at work and discovers that many users are having problems when attempting to connect to the company network shared drives. The
network operations center (NOC) technician just completed server upgrades the night before. To which of the following documents should the NOC technician
refer to determine what potentially caused the connectivity problem?
A. Network maps
B. Cable management
C. Release notes
D. Change management
D
83
Which of the following would allow a device to maintain the same IP address lease based on the physical address of the network card?
A. MAC address reservation
B. Static IP address
C. IP address exclusion
D. Custom DNS server entry
A
84
A network administrator is setting up a web-based application that needs to be continually accessible to the end users. Which of the following concepts would
BEST ensure this requirement?.
A. High availability
B. Snapshots
C. NIC teaming
D. Cold site
A
85
A network administrator is testing connectivity at a new corporate site. The site has a wireless guest as well as a wired employee network. After verifying
connectivity, the administrator checks link speeds by using a speed testing website. The speed testing website shows lower download and upload speeds for the
wired network than the wireless network. Which of the following is the MOST likely explanation?
A. There is less local congestion on the wireless network
B. The testing server for the wired network was farther away
C. The firewall is configured to throttle traffic to specific websites
D. The wireless access points were misconfigured
B
86
A technician is planning a remote-access strategy to manage routers and switches on a dedicated management network. The management network is
segregated from the production network and uses site-to-site VPN connections. Some of the equipment does not support encryption. Which of the following
should the technician choose that all the equipment would support?
A. Telnet
B. SSL
C. SSH
D. IPSec
A
87
A network technician is diagnosing a time-out issue generated from an end user's web browser. The web browser issues standard HTTP get and post commands
to interact with the website. Given this information, the technician would like to analyze the entire TCP handshake of the HTTP requests offline. Which of the
following tools would allow the technician to view the handshake?
A. Packet analyzer
B. Port analyzer
C. SNMP traps
D. Spectrum analyzer
A
88
A network administrator has a monitoring system in place that is currently polling hundreds of network devices at regular intervals. The continuous polling is
causing high CPU utilization on the server. Which of the following tasks should the administrator perform to resolve the CPU issue while maintaining full
monitoring capabilities?
A. Remove SNMP polling and configure SNMP traps on each network device
B. Remove SNMP polling and implement snmpwalk on each network device
C. Upgrade SNMP to the latest version to mitigate vulnerabilities
D. Modify SNMP polling to poll only during business hours
A
89
A company finds that many desktops are being reported as missing or lost Which of the following would BEST assist in recovering these devices?
A. Asset tracking tags
B. Motion detectors
C. Security guards
D. Computer locks
D
90
A network technician is assisting the security team with some traffic captures. The security team wants to capture all traffic on a single subnet between the router
and the core switch. To do so, the team must ensure there is only a single collision and broadcast domain between the router and the switch from which they will
collect traffic. Which of the following should the technician install to BEST meet the goal?
A. Bridge
B. Crossover cable
C. Hub
D. Media converter
C
91
Ann, a network technician, has just installed a fiber switch in a datacenter. To run the fiber cabling, Ann plans the cable route over the top of the rack using the
cable trays, down to the switch, coiling up any excess cable. As Ann configures the switch, she notices several messages in the logging buffer stating the receive
signal of the SFP is too weak. Which of the following is MOST likely the cause of the errors in the logging buffer?
A. Bend radius exceeded
B. Fiber cable mismatch
C. Fiber type mismatch
D. Bad fiber switch
A
92
A network technician is working on a proposal for email migration from an on-premises email system to a vendor-hosted email in the cloud. The technician needs
to explain to management what type of cloud model will be utilized with the cloud-hosted email. Which of the following cloud models should the technician
identify in the proposal?
A. laaS
B. PaaS
C. SaaS
D. MaaS
C
93
Which of the following datacenter security methodologies is MOST likely to remain usable during a network outage?
A. biometric scanners
B. door locks
C. video surveillance
D. motion detectors
B
94
A network technician is building a network for a small office. The office currently has cable TV and now requires access to the Internet without adding any cabling
other than what is already in place. Which of the following solutions should the technician install to meet these requirements?
A. DOCSIS modem
B. Wireless router
C. DSL modem
D. Access point
A
95
A company has completed construction of a new datacenter, and the IT staff is now planning to relocate all server and network equipment from the old site to the
new site. Which of the following should the IT staff reference to determine the location of the equipment being moved?
A. Rack diagrams
B. Network topology
C. Standard operating procedures
D. Wiring documentation
A
96
Which of the following should current network performance be compared against to determine network anomalies?
A. Baseline
B. Traffic analysis
C. Packet capture
D. Logs
A
97
A telecommunications provider has just deployed a new OC-12 circuit at a customer site. While the circuit showed no errors from the provider end to the
customer's demarcation point, a network administrator is trying to determine the cause of dropped packets and errors on the circuit. Which of the following should the network administrator do to rule out any problems at Layer 1 ? (Choose two.)
A. Use a loopback at the demark and router, and check for a link light
B. Use an OTDR to validate the cable integrity
C. Use a pinout tester to validate the cable integrity
D. Use a multimeter to validate the cable integrity
E. Check for any devices that may be causing EMI on the cable
F. Clean the cables to be sure they are free of dust and debris
AB
98
Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?
A. ISDN
B. MPLS
C. PRI
D. Broadband cable
E. Frame relay
E
99
A network technician is considering opening ports on the firewall for an upcoming VoIP PBX implementation. Which of the following protocols is the technician
MOST likely to consider? (Choose three.)
A. SIP
B. NTP
C. H.323
D. SMB
E. ICMP
F. RTP
G. IPSec
H. RDP
ACF
100
A technician logs onto a system using Telnet because SSH is unavailable. SSH is enabled on the target device, and access is allowed from all subnets. The
technician discovers a critical step was missed. Which of the following would allow SSH to function properly?
A. Perform file hashing
B. Generate new keys
C. Update firmware
D. Change default credentials
B
101
A network technician is troubleshooting an issue and has established a theory of probable cause. Which of the following steps should the network technician take
NEXT?
A. Test the possible solution
B. Question the users
C. Determine what has changed
D. Document the theory
A
102
A systems administrator has recently purchased and installed a large electronic signage screen for the company's parking garage. The screen's management
software was installed on a server with public IP address to allow remote management. The systems administrator is now troubleshooting an issue with the
screen displaying unknown, random, and inappropriate messages. Which of the following is MOST effective in resolving this issue?
A. Changing the management software's default credentials
B. Disabling unnecessary services from the server and management software
C. Changing the management software's default port
D. Replacing the management software's self-signed certificate with a valid certificate
A
103
Which of the following WAN technologies is MOST preferred when developing a VoIP system with 23 concurrent channels?
A. DSL
B. POTS
C. T1
D. DOCSIS
C
104
A technician is setting up a direct connection between two older PCs so they can communicate but not be on the corporate network. The technician does not
have access to a spare switch but does have spare Cat 6 cables, RJ-45 plugs, and a crimping tool. The technician cuts off one end of the cable. Which of the
following should the technician do to make a crossover cable before crimping the new plug?
A. Reversethe wires leading to pins1 and2
B. Reversethe wires leading to pins1 and3
C. Reversethe wires leading to pins2 and3
D. Reversethe wires leading to pins2 and4
D
105
A technician discovers that multiple switches require a major update. Which of the following policies should be followed?
A. Change management policy
B. Remote access policy
C. Acceptable use policy
D. Memorandum of understanding
A
106
A network technician has just configured NAG for connections using Cat 6 cables. However, none of the Windows clients can connect to the network. Which of
the following components should the technician check on the Windows workstations? (Choose two.)
A. Start the Wired AutoConfig service in the Services console
B. Enable IEEE 802.1q Authentication in Network Interface Card Properties
C. Enable IEEE 802.1x Authentication in Network Interface Card Properties
D. Start the Wireless AutoConfig service in the Services console
E. Enable IEEE 802.3 Ethernet IPv6 in Network Interface Card Properties
AC
107
Which of the following VPN protocols establishes a secure session that can be initiated using a browser?
A. IPSec
B. SSL VPN
C. PTP
D. PPTP
B
108
A penetration tester has been tasked with reconnaissance to determine which ports are open on the network. Which of the following tasks should be done
FIRST? (Choose two)
A. Network scan
B. Banner grab
C. Tracert
D. DHCP server check
E. Brute-force attack
AC
109
A network administrator configures a router with the following IP address information:
Gigabit Ethernet 1 Interface: 10.10.0.1/24
Serial 0 Interface: 10.10.0.253/30
Clients are connected to a switch on the gigabit Ethernet interface; the ISP is connected to the Serial 0 interface. When the router configuration is complete and
client devices are reconfigured, all clients report that they are unable to connect to the Internet. Which of the following is the MOST likely reason?
A. The router was configured with an incorrect IP address
B. The router was configured with an incorrect default gateway
C. The router was configured with an incorrect subnet mask
D. The router was configured with an incorrect loopback address
C
110
A technician needs to upgrade a SOHO wireless router's firmware. The technician resets the router to factory settings and installs the new firmware. The
technician enters the DHCP information and sets the SSID, Which of the following configurations would provide the MOST protection from advance hackers?
A. Disable the broadcasting of the SSID.
B. Enable WPA2 authentication for all hosts.
C. Use private addressing for the DHCP scope.
D. Install unidirectional antennas.
B
111
Which of the following BEST describes the BGP routing protocol?
A. distance vector
B. hybrid
C. static
D. link state
B
112
A network administrator would like to collect information from several networking devices using SNMP. Which of the following SNMP options should network
administrator use to ensure the data transferred is confidential?
A. authpriv
B. SHA
C. MD5
D. Authentication passphrase
A
113
A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's firewall to allow customers to retrieve
a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)
A. Document the reason for the request
B. Scan the file for malware to protect the sales department's computers
C. Follow the company's approval process for the implementation
D. Install a TFTP server for the customers to use for the transfer
E. Create a honeypot to store the file on for the customers to use
F. Write the SLA for the sales department authorizing the change
AC
114
A network technician has implemented ACLs to limit access to cloud-based file storage. Which of the following security mechanisms has the technician
enforced?
A. DIP
B. IDS
C. WAF
D. WPA
E. TPM
C
115
Which of the following would be the MOST efficient subnet mask for a point-to-point link?
A. /2S
B. /29
C. /31
D. /32
C
116
To replace a defective UPS, the network administrator must take the switch offline. The administrator wants to be able to perform maintenance UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?
A. Add a redundant power supply to the switch
B. Implement stacking on the switches in the rack
C. Add a second UPS into the rack
D. Install a power converter for the switch
A
117
A technician wants to prevent an unauthorized host from connecting to the network via Ethernet. Which of the following is a Layer 2 access control the technician
should implement?
A. Access control lists
B. Captive portal
C. WPA2
D. Port security
D
118
Client PCs are unable to receive addressing information from a newly configured interface on a router. Which of the following should be added to allow the
clients to connect?
A. DHCP lease me
B. IP helper
C. TTL
D. DNS record type
B
119
Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?
A. 2001 ::d58::95:7565:1
B. 2001:0:d58:0:0:95:7565:1
C. 2001:0:d58::95:7565:1
D. 2001:0:0d58::95:7565:1
C
120
Which of the following devices should a network administrator configure on the outermost part of the network?
A. Media converter
B. Switch
C. Modem
D. Firewal
D
121
Which of the following is the number of broadcast domain that are created when using an unmanaged 12-port switch?
A. 0
B. 1
C. 2
D. 5
E. 12
B
122
A Chief Information Officer (CIO) wants to move some IT services to a cloud service offering. However, the network administrator still wants to be able to control
some parts of the cloud service's networking components. Which of the following should be leveraged to complete this task?
A. laaS
B. PaaS
C. SaaS
D. DaaS
B
123
After a server outage, a technician discovers that a physically damaged fiber cable appears to be the problem. After replacing the cable, the server will still not
connect to the network. Upon inspecting the cable at the server end, the technician discovers light can be seen through one of the two fiber strands. Which of the
following should the technician do FIRST to reconnect the server to the network?
A. Reverse the fiber strands of the cable and reconnect them to the server
B. Use a TDR to test both strands of a new replacement cable prior to connecting it to the server
C. Replace the server's single-mode fiber cable with multimode fiber
D. Move the fiber cable to different port on the switch where both strands function
A
124
A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five- block
town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer
being asked to implement?
A. LAN
B. PAN
C. MAN
D. WAN
C
125
A network technician wants to remotely and securely access the desktop of a Linux workstation. The desktop is running remote control software without
encryption. Which of the following should the technician use to secure the connection?
A. SSH in tunnel mode
B. RDP set to console connection
C. EAP-PEAP
D. SFTP
A
126
A UTM is deployed on the external edge of the main corporate office. The office connects to the WAN port of the edge router. The edge router at the main office
connects to the remote offices using GRE IPSec tunnels. A network administrator notices that a worm that was not detected by the UTM has spread from the
remote sites into the corporate network. The UTM currently has traffic rules applied that should block the port used by the worm. Which of the following steps
would MOST likely correct this issue?
A. Move the UTM onto the LAN side of the network
B. Enable TLS inspection on the UTM
C. Enable stateful inspection on the UTM
D. Configure the UTM to deny encrypted files from being transferred
C
127
A technician is setting up a public guest network for visitors to access the Internet that must be separate from the corporate network. Which of the following are
the BEST steps for the technician to take with minimum overhead configuration? (Choose two.)
A. Enable SSID broadcasting to identify the guest network
B. Configure visitor devices to use static IP addresses
C. Enable two-factor authentication on visitor devices
D. Configure the access point to use WPA2-AES encryption
E. Ensure the access point is not running in mixed mode
AB
128
As part of a transition from a static to a dynamic routing protocol on an organization's internal network, the routing protocol must support IPv4 and VLSM. Based
on those requirements, which of the following should the network administrator use? (Choose two.)
A. OSPF
B. IS IS
C. RIPv1
D. BGP
E. VRRP
AB
129
A network technician is creating a new subnet for 488 host machines. The technician is told to use a class B address scheme when making the subnet and is
instructed to leave as much room as possible for additional subnets of the same size. Which of the following subnets would fulfill these requirements?
A. 10.5.4.0/22
B. 10,233.2.0/23
C. 172.16.0.0/22
D. 172.18.0.0/23
E. 192 168.25.0/24
D
130
Which of the following protocols can be both connection-oriented and connectionless?
A. 20 FTP
B. 53 DNS
C. 67 DHCP
D. SO HTTP
B
131
An ISP technician gets a call from a business that just changed equipment but can no longer connect to the Internet. The technician checks the ARP table on (he
ISP switch, and there is no corresponding MAC address present. Instead, the entry is "Incomplete". Which of the following could cause this condition?
A. VLAN mismatch
B. Duplex/ Speed mismatch
C. Duplicate IP address
D. TX/RX reverse
B
132
A network engineer is configuring wireless access for guests at an organization. Access to other areas in the organization should not be accessible to guests.
Which of the following represents the MOST secure method to configure guest access to the wireless network?
A. Guests should log into a separate wireless network using a captive portal
B. Guests should log into the current wireless network using credentials obtained upon entering the facility
C. The existing wireless network should be configured to allow guest access
D. An additional wireless network should be configured to allow guest access
A
133
Which of the following wireless connection types utilize MIMO on non-overlapping channels? (Choose two.)
A. 802.11a
B. 802.11ac
C. 802.11b
D. 802.11g
E. 802.11n
BE
134
Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?
A. Broadband
B. Baseband
C. Analog modem
D. CSMA
A
135
A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not modify the
laptop in any way, and the wireless Internet is functional on other users' laptops. Which of the following issues should be reviewed to help the user to connect to
the wireless network?
A. Wireless switch toggled off
B. WAP settings
C. WLAN IP address out of scope
D. Wireless controller misconfiguration
A
136
A network administrator needs to transmit traffic to geographically diverse sites to improve performance. Which of the following devices would B EST direct
traffic to the remote sites?
A. Hub
B. Bridge
C. Switch
D. Router
D
137
A user reports difficulties connecting a PC to a wired network. The PC connects to an IP phone, which is working correctly. A network technician can verify that
other devices successfully connect to the phone. At which of the following layers of the OSI model is the problem MOST likely located?
A. Network
B. Physical
C. Transport
D. Application
B
138
A technician is setting up a branch office on a point-to-point connection. Which of the following IP network blocks is the MOST efficient use of IP address space
for the router connections between the two sites?
A. /24
B. /25
C. /30
D. /32
C
139
Which of the following should be performed to verify that unnecessary services are disabled on all switches in an environment?
A. Packet capturing
B. Port scanning
C. Log scanning
D. Baseline review
B
140
A technician is sent to a remote office to set up a device to connect to the Internet. The company standards document requires stateful inspection. Which of the
following should the technician install?
A. Router
B. Multiplayer switch
C. Firewall
D. Bridg
C
141
A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform this task?
(Choose two.)
A. RDP
B. SNMP
C. WPA2
D. EAP
E. SSL
CD
142
A technician is investigating the cause of a network outage. Which of the following documents should be checked to rule out configuration issues?
A. Change management records
B. Inventory management
C. Network log files
D. Logical diagrams
A
143
A junior network technician receives a help desk ticket from an end user who is having trouble accessing a web application that was working the previous day.
After talking with the end user and gathering information about the issue, which of the following would be the most likely course of action for the technician to
perform NEXT?
A. Establish a theory of probable cause.
B. Escalate the ticket to a senior technician.
C. Implement the solution.
D. Document the findings and outcomes.
A
144
A network technician at a small office upgrades the LAN switch. After the upgrade, a user reports being unable to access network resources. When the
technician checks the switchport, the LED light is not lit. Which of the following should the technician check FIRST?
A. The device is using the correct cable type.
B. The switchport is functioning properly.
C. The device is connected to the switch.
D. The switch is connected to the router.
C
145
A network administrator wants to employ a username and password authentication system for guest WiFi. Which of the following is the BEST option to provide
this type of authentication?
A. Port security
B. MAC filtering
C. Network access control
D. Captive portal
D
146
A technician is responsible for configuring a new firewall. The hardware team has already installed, powered, and connected the system. Which of the following
types of documentation should the technician utilize to complete the task?
A. Rack diagram
B. IDF/MDF documentation
C. Network performance baseline
D. Logical and physical diagrams
D
147
Which of the following storage network technologies inherently leverages block-level storage?
A. NAS
B. SAN
C. FCoE
D. iSCSI
E. FTP
A
148
A disgruntled employee decides to leak critical information about a company's new product. The employee places keyloggers on the department's computers,
allowing the information to be sent out to the Internet. Which of the following attacks is occurring?
A. Man-in-the-middle
B. Logic bomb
C. Insider threat
D. Social engineering
C
149
A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform
her job. Which of the following would provide secure access to the corporate resources?
A. Utilize an SSH connection to the corporate server.
B. Use TFTP to transfer files to corporate resources.
C. Allow RDP through an external firewall.
D. Connect utilizing client-to-site VPN.
D
150
Which of the following DNS record types is an alias?
A. CNAME
B. PTR
C. NS
D. SRV
A
151
A recently constructed building makes use of glass and natural light. Users in the building are reporting poor cellular connectivity and speeds. Which of the
following is MOST likely the cause?
A. Absorption
B. Channel overlap
C. Reflection
D. Frequency mismatch
C
152
A network technician is working on a new switch implementation to expand the network. Which of the following is the BEST option to ensure the implementation
goes according to business requirements?
A. AUP
B. NDA
C. SOP
D. SLA
C
153
A technician is utilizing SNMPv3 to monitor network statistics. Which of the following actions would occur immediately of a server's utilization spikes above the
prescribed value?
A. A trap message is sent via UDP to the monitoring workstation.
B. The SET function pushes an alert to the MIB database.
C. The object identifier is modified and reported during the next monitoring cycle.
D. A response message is sent from the agent to the manager
A
154
802.11n clients currently have no way to connect to the network. Which of the following devices should be implemented to let the clients connect?
A. Router
B. Range extender
C. VoIP endpoint
D. Access point
D
155
A network technician is setting up a new router. Since it is exposed to the public, which of the following are the BEST steps the technician should take when
setting up this device? (Choose two.)
A. Disable unnecessary services.
B. Use private IP addresses.
C. Allow remote management access.
D. Disable the console port.
E. Enable encryption.
F. Upgrade to the latest firmware.
AF
156
A network technician is configuring user access to a VPN concentrator and has been advised to use a protocol that supports encryption over UDP. Which of the
following protocols has the technician MOST likely configured for client use?
A. TFTP
B. DTLS
C. DNS
D. SNMP
157
A switch has detected duplicate broadcast messages sourced from a second port. The broadcasts continue to be transmitted and duplicated until the amount of
traffic causes severe performance issues. Which of the following should be configured to prevent this behavior?
A. BPDU guard
B. DHCP snooping
C. ARP protection
D. Spanning tree
D
158
159
A Chief Information Officer (CIO) is concentrated about an attacker gaining administrative access to the company's network devices. Which of the following is
the MOST secure way to prevent this?
A. ACL allowing only HTTP
B. ACL allowing only Telnet
C. Out-of-band modem
D. Out-of-band console router
D
160
The Chief Executive Officer's (CEO's) tablet cannot connect to the wireless network from the corner office. A network technician verified the tablet can connect
to the wireless network in other areas of the building. The distance between the office and the 802.11ac WAP is 150ft (46m), and there are a few cubicles in
between. Which of the following is the MOST likely cause of the tablet not connecting?
A. Absorption
B. Reflection
C. Distance
D. Refraction
E. Attenuation
C
161
A company has two geographically separate locations that need to connect using a VPN. Which of the following devices must be specifically configured to allow
VPN traffic into the network?
A. Firewall
B. Switch
C. Router
D. Modem
A
162
A technician is working on a new machine that has been procured for testing and development. The machine will run a hypervisor and host several operating
systems of various types so the development team can test the company's applications in a variety of environments. The technician wants the virtual machines
to be available to communicate with each other without leaving the hypervisor. Which of the following is the BEST solution to the problem?
A. The technician should connect the machine to its own separate switch.
B. The technician should add a route in each virtual machine to the default gateway.
C. The technician should configure a virtual switch.
D. The technician should set up individual routes between the machines.
C
163
A network technician is repurposing a switch that has been in storage for some time. The device has been wiped to factory defaults. Which of the following
should be done FIRST to ensure the device has been hardened before configuration?
A. Generate new keys.
B. Disable unused ports.
C. Check for updated firmware.
D. Configure the default VLAN
C
164
A technician is setting up a wireless access point in a coffee shop. The shop is not concerned with security but only wants to allow customers to have access.
Which of the following configurations should the technician deploy?
A. Use a pre-shared key.
B. Set up EAP.
C. Configure RADIUS.
D. Configure MAC filtering
A
165
A network administrator is assigned to run and connect a Cat 6e Ethernet cable between two nodes in a datacenter. Which of the following connector types
should the network administrator use to terminate this cable?
A. DB-9
B. RS-232
C. DB-25
D. RJ-45
D
166
Management has requested that services be available within 72 hours of a disaster. Budget is a major concern. A contract is signed with a company that has
plenty of space, and the technician will have the option of putting infrastructure equipment in place. Which of the following BEST describes this business
continuity strategy?
A. Cold site
B. Differential backup
C. Hot site
D. Incremental backup
E. Warm site
F. Full backup
A
167
A network technician is planning to update the firmware on a router on the network. The technician has downloaded the file from the vendor's website. Before
installing the firmware update, which of the following steps should the technician perform to ensure file integrity?
A. Perform antivirus and anti-malware scans of the file.
B. Perform a hash on the file for comparison with the vendor's hash.
C. Download the file a second time and compare the version numbers.
D. Compare the hash of the file to the previous firmware update.
B
168
A network technician performs a wireless site survey at a company building and identifies that the cafeteria is not covered by a wireless signal. The cafeteria is
located in a medium-size, square-shaped room. Which of the following types of WAP antenna should the technician install in the center of the cafeteria to
provide the BEST coverage?
A. Unidirectional
B. Parabolic
C. Omnidirectional
D. Yagi
C
169
An entire enterprise cannot access a specific website. The network technician knows the website was accessible last week. The technician can also ping the
website. Which of the following is the technician MOST likely to find upon investigation?
A. The firewall is misconfigured.
B. The network is being hit by a zero-day attack.
C. The SSL certificate is untrusted.
D. The SSL certificate has expired.
D
170
Which of the following are DNS record types? (Choose three.)
A. CNAME
B. NTP
C. PTR
D. LDAP
E. DHCP
F. TTL
G. SRV
H. SSH
ACG
171
Which of the following backup techniques is used to capture all the data that has changed since the last full backup?
A. Incremental
B. Replica
C. Differential
D. Snapshot
C
172
A network administrator frequently needs to assist users with troubleshooting network hardware remotely, but the users are non-technical and unfamiliar with
network devices. Which of the following would BEST help the administrator and users during hands-on troubleshooting?
A. Logical diagrams
B. MDF documentation
C. Equipment labeling
D. Standard operating procedures
D
173
A technician is observing brownout issues at a smaller office. At least once a week, the edge switch power cycles. Which of the following should the technician
do to resolve the issue?
A. Install a new switch
B. Install a UPS
C. Replace the switch uplink cable.
D. Install a new electrical circuit.
B
174
A technician is troubleshooting a workstation's network connectivity and wants to confirm which switchport corresponds to the wall jack the PC is using. Which of
the following concepts would BEST help the technician?
A. Consistent labeling
B. Change management
C. Standard work instructions
D. Inventory management
E. Network baseline
A
175
Under which of the following layers of the OSI model do ATM cells operate?
A. Data link
B. Network
C. Session
D. Transport
E. Presentation
A
176
A new building needs to be joined to an existing network, but management has decided that running fiber is too expensive. Since the buildings are about 1000ft
(305m) apart, the IT department has been asked to propose alternatives. Which of the following is the BEST device to add to each building to facilitate the
extension of the network while meeting budgetary demands?
A. Switch
B. Router
C. Media converter
D. PRP wireless
D
177
A junior network technician is working in the field and needs to connect to the company's remote server, however, doing so will require the junior technician to
use the public Internet. Because security is a concern, which of the following is the BEST method to use?
A. Telnet
B. SSH
C. SFTP
D. VNC
B
178
A home user has purchased a new smart TV to stream online video services. The smart TV is unable to connect to the wireless network after several attempts.
After returning from vacation, the home user tries again and can connect the TV to the wireless network. However, the user notices a laptop is no longer able to
connect to the network. Which of the following is the MOST likely cause?
A. The DHCP scope has been exhausted.
B. The security passcode has been changed.
C. The SSID is hidden.
D. The AP configuration was reset
A
179
A security guard notices an authorized individual, who is dressed like a lab technician, has entered a secure area of the hospital with a large group. Which of the
following security attacks is taking place?
A. Evil twin
B. Social engineering
C. Insider threat
D. Phishing
B?
180
A network technician has recently installed new VoIP phones at all employee's desks to support a new SIP cloud VoIP solution. However, the technician is
unable to make a call from the device after testing. Which of the following should the technician verify? (Choose two.)
A. TCP 443 is allowed.
B. UDP 1720 is allowed.
C. UDP 5060 is allowed.
D. UDP 5061 is allowed.
E. TCP 8080 is allowed.
F. TCP 8181 is allowed.
CD
181
Which of the following would allow a network technician to access files on a remote system? (Choose two.)
A. FTP
B. TFTP
C. VLSM
D. SIP
E. SMTP
F. IMAP
AB
182
Which of the following provides two-factor authentication?
A. Username + password
B. Smart card + PIN
C. Fingerprint + retina scan
D. Key fob + ID card
B
183
A technician set up a new SOHO network recently. The installed router has four Ethernet ports, however, the customer has seven devices that need wired
connections. Which of the following should the technician do to BEST meet the customer's requirements?
A. Install a six-port switch.
B. Configure port forwarding on the router.
C. Install WAPs near the devices.
D. Configure the switchports as EtherChannel ports.
A
184
A technician is performing a maintenance task on a weekly basis and wants to ensure the task is properly documented and able to be performed by other
technicians. Which of the following types of documentation should the technician complete?
A. Standard operating procedure
B. Work order
C. Performance baseline
D. Logical diagram
E. Change management
A
185
A company is allowing its employees to use their personal computers, tablets, and IoT devices while at work. However, there are rules and guidelines to which
employees must adhere. Which of the following documents applies to these employees?
A. NDA
B. SOP
C. BYOD
D. SLA
C
186
Which of the following are characteristics of jumbo frames? (Choose two.)
A. Commonly used on SAN
B. MTU size greater than 1500
C. MTU size greater than 10000
D. Commonly used on IaaS
E. MTU size greater than 12000
AB
187
A network administrator gets a call regarding intermittent network outages across the country. Which of the following should be used to connect to the network so
the administrator can troubleshoot this issue from home? (Choose two.)
A. FTP
B. SMTP
C. VPN
D. SSH
E. SNMP
CD
188
A network technician downloaded new firmware for the company firewall. Which of the following should the network technician verify to ensure the downloaded
file is correct and complete?
A. File hash
B. File date
C. File type
D. File sizeA
A
189
A technician is troubleshooting network connectivity issues with a remote host. Which of the following tools would BEST inform the technician of nodes between
the client and the remote host? (Choose two.)
A. tracert
B. ping
C. tcpdump
D. pathping
E. netstat
F. nslookup
G. route
AD
190
Which of the following will listen on the line to ensure there is no traffic transmitting and implement a back-off timer if a collision occurs?
A. CSMA/CD
B. CSMA/CA
C. MPLS
D. OSPF
A
191
A network technician receives a call from a branch office about a problem with its wireless connectivity. The user states the office is hosting a large meeting that
includes some online training with local businesses. The guest users have all brought devices to connect to the guest network at the branch office. All users are
connected to a single WAP and are reporting that connections keep dropping and network spends are unusable. Which of the following is the MOST likely cause
of this issue?
A. DHCP exhaustion
B. Channel overlapping
C. Interference
D. Overcapacity
D
192
Which of the following BEST describes an exploit?
A. A router with default credentials
B. An open mail relay server
C. An SNMPv1 private community
D. A privilege escalation script
D
193
A server in a LAN was configured to act as a gateway between all company computers and an external network. Which of the following networking devices offers
the ability to increase both performance and security?
A. Load balancer
B. IDS
C. Proxy server
D. Wireless controller
C
194
A technician is setting up VoIP phones on a wireless network. Users report that calls are choppy and sometimes dropped. The technician has measured two
characteristics using simple command-line tools that verify the problem. Which of the following characteristics did the technician measure? (Choose two.)
A. Reflection
B. Latency
C. Interference
D. Packet loss
E. Signal-to-noise ratio
F. Attenuation
BD
195
Which of the following ports should a network technician open on a firewall to back up the configuration and operating system files of a router to a remote server
using the FASTEST method possible?
A. UDP port 22
B. TCP port 22
C. TCP port 25
D. UDP port 53
E. UDP port 69
E
196
A technician is replacing a failed SOHO router for a customer who has an existing switch, cable modem, and static IP address. The user has a web server that
faces the Internet so users can visit and leave comments. Which of the following BEST describes the correct configuration for this customer's requirements?
A. The modem is placed in bridge mode, the router is placed behind the modem, and the web server is placed behind the router.
B. The router is placed in bridge mode, the modem is placed behind the router, and the web server is placed behind the modem.
C. The web server is placed in bridge mode, the router is placed behind the web server, and the modem is placed behind the router.
D. The switch is placed in bridge mode, the modem is placed behind the router, and the router is placed behind the modem.
A
197
A network technician is attempting to troubleshoot a connectivity issue. The issue is only reported during the evening hours, and only a single workstation loses
connectivity. Which of the following is the MOST likely cause of the issue?
A. The router has a time-based ACL, applied for the network segment.
B. A light source is creating EMI interference, affecting the UTP cabling.
C. Nightly backups are consuming excessive bandwidth.
D. The user has violated the AUP, and Internet access has been restricted
D
198
A network administrator is redesigning network security after an attack. During the attack, an attacker used open cubicle locations to attach devices to the
network. The administrator wants to be able to monitor future attacks in a safe environment and determine the method of attack. Which of the following should
the administrator do to BEST meet this requirement?
A. Create a VLAN for the unused ports and create a honeyspot on the VLAN.
B. Install a BPDU guard on switchports and enable STP.
C. Create a DMZ for public servers and secure a segment for the internal network.
D. Install antivirus software and set an ACL on the servers
A
199
A company has just refreshed the hardware in its datacenter with new 10G Ethernet switches. A technician wishes to set up a new storage area network but must
use existing infrastructure. Which of the following storage standards should the technician use?
A. iSCSI
B. Fibre Channel
C. NAS
D. InfinitiBand
C
200
A network technician needs to install a new access switch. After installing the new switch, the technician begins to move connections from the old switch to the
new switch. The old switch used a GBIC with SC connectors, and the new switch uses an SFP with LC connectors. After connecting the SC connector to the SCto-LC adapter and plugging it into the switch, the link does not come up as expected. Which of the following should a network technician perform NEXT?
A. Replace SFP with a new one.
B. Fall back to the old switch.
C. Transpose the fiber pairs.
D. Replace multimode with single-mode cable.
C
201
A network technician is installing a new SOHO branch office that requires the use of a DOCSIS-compatible modem. The modem needs to be connected to the
ISP's network at the demarc. Which of the following cable types should be used?
A. UTP
B. Multimode
C. Coaxial
D. Serial
C
202
A technician needs to order cable that meets 10GBaseT and fire safety requirements for an installation between a drop ceiling and a standard ceiling. Which of
the following should the technician order to ensure compliance with the requirements?
A. PVC Cat 5
B. Plenum Cat 5e
C. Plenum Cat 6a
D. PVC Cat 7
C
203
Which of the following physical security devices is used to detect unauthorized server room access?
A. Access badge
B. Biometrics
C. Smart card
D. Video surveillance
D
204
A network technician recently installed a new server on a network. The technician must ensure the server does not have any unnecessary services running. The
IP address of the server is 204.211.38.50. Which of the following commands would allow the technician to make this determination?
A. nmap
B. pathping
C. route
D. nslookup
A
205
Joe, an employee at a large regional bank, wants to receive company email on his personal smartphone and tablet. To authenticate on the mail server, he must
first install a custom security application on those mobile devices. Which of the following policies would BEST enforce this requirement?
A. Incident response policy
B. BYOD policy
C. DLP policy
D. Remote access policy
B
206
A technician is allocating the IP address space needed for a new remote office. This office will contain the engineering staff with six employees and the digital
marketing staff with 55 employees. The technician has decided to allocate the 192.168.1.0/24 block to the remote office. The engineering staff has been
allocated the 192.168.1.64/29 subnet. Using the LEAST amount of space possible, which of the following would be the last usable IP address in the engineering subnet?
A. 192.168.1.62
B. 192.168.1.63
C. 192.168.1.70
D. 192.168.1.71
207
An administrator is troubleshooting a user's intermittent wireless connectivity issue. Other users across the hallway can connect and use the wireless network
properly. Upon inspection of the connection details, the administrator finds the following:
SSID; Company WiFi
Signal 5%
SNR 2
Which of the following is MOST likely the cause of the poor wireless connection?
A. Channel overlap
B. Overcapacity
C. Incorrect antenna type
D. Latency
C
208
A VoIP system will require 23 concurrent voice channels and one signaling channel. Which of the following types of WAN service would provide the BEST
connectivity to the PSTN?
A. PRI
B. BRI
C. E1/E3
D. DSL
A
209
A network administrator is going to be performing a major upgrade to the network. Which of the following should the administrator use in case of a failure?
A. Baseline report
B. Vulnerability report
C. Rollback plan
D. Business continuity plan
C
210
A web application is unable to authenticate customers so they can access their bills. The server administrator has tested the LDAP query but is not receiving
results. Which of the following is the NEXT step the server administrator should take to correct the problem?
A. Check port 636 to see if it is being blocked.
B. Change service port 636 to port 389.
C. Restart the web server.
D. Verify the browser is using port 443.
A
211
Which of the following is networking stand-alone hardware that will permit any WiFi-compliant device to connect to a wired network?
A. Wireless hub
B. Wireless firewall
C. Wireless access point
D. Wireless bridge
C
212
Which of the following devices are MOST often responsible for 802.1q tagging? (Choose two.)
A. Switch
B. Router
C. IDS
D. Hub
E. IPS
F. Network tap
AB
213
A network technician is installing a new wireless network in a small office. Due to environmental concerns, the customer wants the network to run exclusively on
the 5GHz frequency. Which of the following wireless technologies should the technician install to BEST meet this requirement? (Choose two.)
A. 802.11ac
B. 802.11b
C. 802.11g
D. 802.11n
E. Bluetooth
F. Z-Wave
AD
214
Which of the following concepts would BEST describe when a company chooses to use a third-party vendor to host and administer a critical application?
A. SaaS
B. IaaS
C. PaaS
D. CASB
C
215
A content filter is set to analyze XML and JSON that users access from the Internet. At which of the following layers is this analysis taking place?
A. 1
B. 3
C. 5
D. 7
E. 6
E
216
Ann, a new employee within a department, cannot print to any of the printers in the department or access any of the resources that others can. However, she can
access the Internet. The network engineer has confirmed that Ann's account has been set up the same as the others. There are no access lists restricting Ann's
access. Which of the following could be the issue for this lack of access?
A. Duplex/speed mismatch
B. VLAN mismatch
C. DNS server issue
D. DHCP server issue
E. Spanning tree blocked ports
B
217
A technician is configuring a printer for a client. The technician connects the printer to the network, but is unsure how to determine its switchport. Which of the
following should the technician do FIRST to locate the switchport?
A. Perform a DNS lookup on the server.
B. Set up an SSH session to the desktop.
C. Reference the ARP table in the router.
D. Configure port security on the switch
C
218
A router is set up to utilize RIPv2 to route traffic throughout the network. Which of the following routing metrics is used to determine the path?
A. Distance
B. Bandwidth
C. Speed
D. Hop count
D
219
A second router was installed on a network to be used as a backup for the primary router that works as a gateway. The infrastructure team does not want to
change the IP address of the gateway on the devices. Which of the following network components should be used in this scenario?
A. Loopback IP
B. Virtual IP
C. Reserved IP
D. Public IP
B
220
Which of the following can be done to implement network device hardening? (Choose two.)
A. Implement spanning tree
B. Perform VLAN hopping
C. Patch and update
D. Perform backups
E. Enable port mirroring
F. Change default admin password
CF
221
A critical vulnerability is discovered on a network device. The vendor states it has already patched this vulnerability in its current release. Which of the following
actions should an administrator take?
A. Change the default password
B. Use a firewall in front of the device.
C. Update the firmware.
D. Upgrade the configuration
C
222
A technician has been alerted of incoming HTTP traffic on the LAN segment that should not contain any web servers. The technician has the IP address of the destination host and wants to determine if the socket for HTTP is open. Which of the following should the technician perform?
A. Baseline assessment
B. Packet analysis
C. Port scan
D. Patch-level assessment
C
223
Which of the following creates a secure remote connection at the OSI network layer?
A. L2TP
B. SSL
C. DTLS
D. IPSec
D
224
A network technician has salvaged several Ethernet cables from a datacenter. The technician attempts to use the cables to connect desktops to the network
without success. Which of the following is MOST likely the issue?
A. The cables have an incorrect pin-out.
B. The cables are UTP instead of STP.
C. The cables are Cat 6 instead of Cat 5.
D. The cables are not plenum rated.
A
225
A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become
compromised. Which of the following is the MOST effective way to protect the kiosks?
A. Install an IDS to monitor all traffic to and from the kiosks.
B. Install honeypots on the network to detect and analyze potential kiosk attacks before they occur.
C. Enable switchport security on the ports to which the kiosks are connected to prevent network-level attacks.
D. Create a new network segment with ACLs, limiting kiosks' traffic with the internal networ
D
226
While working on a Linux-based OS, a technician experiences an issue accessing some servers and some sites by name. Which of the following command-line
tools should the technician use to assist in troubleshooting?
A. dig
B. iptables
C. ifconfig
D. traceroute
A
227
A network administrator has had difficulty keeping track of IP address assignments on networking devices and clients recently. Which of the following is the
BEST technology to aid in this scenario?
A. DNS
B. DHCP
C. IPAM
D. NTP
C
228
A technician is surveying a college's network equipment rooms and connectivity. Which of the following types of documentation does the technician need to
perform a detailed site survey? (Choose three.)
A. IDF/MDF documentation.
B. Cable run label documentation.
C. Network configuration documentation.
D. Performance baseline documentation.
E. Standard operating procedure documentation.
F. Change management documentation.
G. Rack diagram documentation.
ACG
229
A technician is connecting a PC to a switchport. At the wiring closet, the technician is unable to identify which cable goes from patch panel A connected to the
switch to patch panel B connected to the PC. Which of the following tools should the technician use to resolve the issue?
A. Cable tester
B. Multimeter
C. Tone generator
D. OTDR
C
230
A technician wants to deploy a network that will require wireless client devices to prompt for a username and password before granting access to the wireless
network. Which of the following must be configured to implement this solution?
A. EAP-PEAP
B. CCMP-AES
C. WPA2-PSK
D. TKIP-RC4
A
231
Which of the following protocols are classified as connectionless? (Choose two.)
A. TFTP
B. FTP
C. HTTP
D. SNMP
E. SSH
F. IMAP
AD
232
Users in a school lab are reporting slow connections to the servers and the Internet. Other users in the school have no issues. The lab has 25 computers and is
connected with a single 1Gb Ethernet connection on Cat 5e wiring to an unmanaged switch. There are also three spare Cat 5e cable runs, which are not in use.
The school wants to double the connection speed between the lab and the servers without running new cables. Which of the following would be the BEST
solution?
A. Plug in a second spare cable at each end to double the speed.
B. Replace the switches with ones that utilize port bonding and use the spare cables.
C. Replace the switches with 10Gb switches and utilize the existing cabling.
D. Plug in a second cable and set one port to TX and one port to RX.
B
233
A technician is downloading an ISO from a vendor's website. To ensure the integrity of the download, which of the following should be verified?
A. File size
B. Vendor URL
C. File hashing
D. Encryption
C
234
An administrator wants to implement an additional authentication factor to the remote SSH servers. Which of the following accomplishes this goal with the
principle of “something you have�
A. Certificate
B. Pattern
C. Password
D. Fingerprint
A
235
A junior technician is setting up a voice control device so the Chief Executive Officer (CEO) will be able to control various things in the office. Of which of the
following types of IoT technologies is this an example?
A. LAN
B. WAN
C. SAN
D. PAN
D
236
Simulation
