questions 1 - 100 Flashcards

1
Q

A technician needs to limit the amount of broadcast traffic on a network and allow different segments to communicate with each other. Which of the following
options would satisfy these requirements?
A. Add a router and enable OSPF.
B. Add a layer 3 switch and create a VLAN.
C. Add a bridge between two switches.
D. Add a firewall and implement proper ACL.

A

B. Add a layer 3 switch and create a VLAN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The network install is failing redundancy testing at the MDF. The traffic being transported is a mixture of multicast and unicast signals. Which of the following would
BEST handle the rerouting caused by the disruption of service?
A. Layer 3 switch
B. Proxy server
C. Layer 2 switch
D. Smart hub

A

A. Layer 3 switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
A technician needs to set aside addresses in a DHCP pool so that certain servers always receive the same address. Which of the following should be configured?
A. Leases
B. Helper addresses
C. Scopes
D. Reservations
A

D. Reservations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q
Joe, a network technician, is setting up a DHCP server on a LAN segment. Which of the following options should Joe configure in the DHCP scope, in order to allow
hosts on that LAN segment using dynamic IP addresses, to be able to access the Internet and internal company servers? (Select THREE).
A. Default gateway
B. Subnet mask
C. Reservations
D. TFTP server
E. Lease expiration time of 1 day
F. DNS servers
G. Bootp
A

A. Default gateway
B. Subnet mask
F. DNS servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A technician just completed a new external website and setup access rules in the firewall. After some testing, only users outside the internal network can reach the
site. The website responds to a ping from the internal network and resolves the proper public address. Which of the following could the technician do to fix this issue
while causing internal users to route to the website using an internal address?
A. Configure NAT on the firewall
B. Implement a split horizon DNS
C. Place the server in the DMZ
D. Adjust the proper internal ACL

A

B. Implement a split horizon DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When configuring a new server, a technician requests that an MX record be created in DNS for the new server, but the record was not entered properly. Which of
the following was MOST likely installed that required an MX record to function properly?
A. Load balancer
B. FTP server
C. Firewall DMZ
D. Mail server

A

D. Mail server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
Which of the following protocols uses label-switching routers and label-edge routers to forward traffic?
A. BGP
B. OSPF
C. IS-IS
D. MPLS
A

D. MPLS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
Which of the following is MOST likely to use an RJ-11 connector to connect a computer to an ISP using a POTS line?
A. Multilayer switch
B. Access point
C. Analog modem
D. DOCSIS modem
A

C. Analog modem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
An administrator notices an unused cable behind a cabinet that is terminated with a DB-9 connector. Which of the following protocols was MOST likely used on this
cable?
A. RS-232
B. 802.3
C. ATM
D. Token ring
A

A. RS-232

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
Which of the following connection types is used to terminate DS3 connections in a telecommunications facility?
A. 66 block
B. BNC
C. F-connector
D. RJ-11
A

B. BNC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
An F-connector is used on which of the following types of cabling?
A. CAT3
B. Single mode fiber
C. CAT5
D. RG6
A

D. RG6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
A network technician must utilize multimode fiber to uplink a new networking device. Which of the following Ethernet standards could the technician utilize? (Select
TWO).
A. 1000Base-LR
B. 1000Base-SR
C. 1000Base-T
D. 10GBase-LR
E. 10GBase-SR
F. 10GBase-T
A

B. 1000Base-SR

E. 10GBase-SR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A network engineer needs to set up a topology that will not fail if there is an outage on a single piece of the topology. However, the computers need to wait to talk on
the network to avoid congestions. Which of the following topologies would the engineer implement?
A. Star
B. Bus
C. Ring
D. Mesh

A

C. Ring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
A network topology that utilizes a central device with point-to-point connections to all other devices is which of the following?
A. Star
B. Ring
C. Mesh
D. Bus
A

A. Star

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
Which of the following network topologies has a central, single point of failure?
A. Ring
B. Star
C. Hybrid
D. Mesh
A

B. Star

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
Which of the following refers to a network that spans several buildings that are within walking distance of each other?
A. CAN
B. WAN
C. PAN
D. MAN
A

A. CAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q
Which of the following network infrastructure implementations would be used to support files being transferred between Bluetooth-enabled smartphones?
A. PAN
B. LAN
C. WLAN
D. MAN
A

A. PAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q
Which of the following describes an IPv6 address of ::1?
A. Broadcast
B. Loopback
C. Classless
D. Multicast
A

B. Loopback

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q
Which of the following is an example of an IPv4 address?
A. 192:168:1:55
B. 192.168.1.254
C. 00:AB:FA:B1:07:34
D. ::1
A

B. 192.168.1.254

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q
A technician, Joe, needs to troubleshoot a recently installed NIC. He decides to ping the local loopback address. Which of the following is a valid IPv4 loopback
address?
A. 10.0.0.1
B. 127.0.0.1
C. 172.16.1.1
D. 192.168.1.1
A

B. 127.0.0.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

A technician, Joe, has been tasked with assigning two IP addresses to WAN interfaces on connected routers. In order to conserve address space, which of the
following subnet masks should Joe use for this subnet?
A. /24
B. /32
C. /28
D. /29
E. /30

A

E. /30

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q
A host has been assigned the address 169.254.0.1. This is an example of which of the following address types?
A. APIPA
B. MAC
C. Static
D. Public
A

A. APIPA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A company wants to create highly available datacenters. Which of the following will allow the company to continue to maintain an Internet presence at all sites in the
event that a WAN circuit at one site goes down?
A. Load balancer
B. VRRP
C. OSPF
D. BGP

A

D. BGP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q
A technician is connecting a NAS device to an Ethernet network. Which of the following technologies will be used to encapsulate the frames?
A. HTTPS
B. Fibre channel
C. iSCSI
D. MS-CHAP
A

C. iSCSI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Company policies require that all network infrastructure devices send system level information to a centralized server. Which of the following should be implemented
to ensure the network administrator can review device error information from one central location?
A. TACACS+ server
B. Single sign-on
C. SYSLOG server
D. Wi-Fi analyzer

A

C. SYSLOG server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q
After a recent breach, the security technician decides the company needs to analyze and aggregate its security logs. Which of the following systems should be
used?
A. Event log
B. Syslog
C. SIEM
D. SNMP
A

C. SIEM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q
A technician would like to track the improvement of the network infrastructure after upgrades. Which of the following should the technician implement to have an
accurate comparison?
A. Regression test
B. Speed test
C. Baseline
D. Statement of work
A

C. Baseline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

It has been determined by network operations that there is a severe bottleneck on the company’s mesh topology network. The field technician has chosen to use log
management and found that one router is making routing decisions slower than others on the network. This is an example of which of the following?
A. Network device power issues
B. Network device CPU issues
C. Storage area network issues
D. Delayed responses from RADIUS

A

B. Network device CPU issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

A network technician receives the following alert from a network device:
“High utilizations threshold exceeded on gi1/0/24 : current value 9413587.54”
Which of the following is being monitored to trigger the alarm?
A. Speed and duplex mismatch
B. Wireless channel utilization
C. Network device CPU
D. Network device memory
E. Interface link status

A

E. Interface link status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

The administrator’s network has OSPF for the internal routing protocol. One port going out to the Internet is congested. The data is going out to the Internet, but
queues up before sending. Which of the following would resolve this issue?
Output:
Fast Ethernet 0 is up, line protocol is up
Int ip address is 10.20.130.5/25
MTU 1500 bytes, BW10000 kbit, DLY 100 usec
Reliability 255/255, Tx load 1/255, Rx load 1/255
Encapsulation ospf, loopback not set
Keep alive 10
Half duplex, 100Mb/s, 100 Base Tx/Fx
Received 1052993 broadcasts
0 input errors
983881 packets output, 768588 bytes
0 output errors, 0 collisions, 0 resets
A. Set the loopback address
B. Change the IP address
C. Change the slash notation
D. Change duplex to full

A

D. Change duplex to full

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q
The RAID controller on a server failed and was replaced with a different brand. Which of the following will be needed after the server has been rebuilt and joined to
the domain?
A. Vendor documentation
B. Recent backups
C. Physical IP address
D. Physical network diagram
A

B. Recent backups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

An administrator reassigns a laptop to a different user in the company. Upon delivering the laptop to the new user, the administrator documents the new location,
the user of the device and when the device was reassigned. Which of the following BEST describes these actions?
A. Network map
B. Asset management
C. Change management
D. Baselines

A

B. Asset management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

A network technician is diligent about maintaining all system servers’ at the most current service pack level available. After performing upgrades, users experience issues with server-based applications. Which of the following should be used to prevent issues in the future?
A. Configure an automated patching server
B. Virtualize the servers and take daily snapshots
C. Configure a honeypot for application testing
D. Configure a test lab for updates

A

D. Configure a test lab for updates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A system administrator has been tasked to ensure that the software team is not affecting the production software when developing enhancements. The software
that is being updated is on a very short SDLC and enhancements must be developed rapidly. These enhancements must be approved before being deployed.
Which of the following will mitigate production outages before the enhancements are deployed?
A. Implement an environment to test the enhancements.
B. Implement ACLs that only allow management access to the enhancements.
C. Deploy an IPS on the production network.
D. Move the software team’s workstations to the DMZ.

A

A. Implement an environment to test the enhancements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

A system administrator wants to update a web-based application to the latest version. Which of the following procedures should the system administrator perform
FIRST?
A. Remove all user accounts on the server
B. Isolate the server logically on the network
C. Block all HTTP traffic to the server
D. Install the software in a test environment

A

D. Install the software in a test environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q
Network segmentation provides which of the following benefits?
A. Security through isolation
B. Link aggregation
C. Packet flooding through all ports
D. High availability through redundancy
A

A. Security through isolation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

After a company rolls out software updates, Ann, a lab researcher, is no longer able to use lab equipment connected to her PC. The technician contacts the vendor
and determines there is an incompatibility with the latest IO drivers. Which of the following should the technician perform so that Ann can get back to work as quickly
as possible?
A. Reformat and install the compatible drivers.
B. Reset Ann’s equipment configuration from a backup.
C. Downgrade the PC to a working patch level.
D. Restore Ann’s PC to the last known good configuration.
E. Roll back the drivers to the previous version.

A

E. Roll back the drivers to the previous version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which of the following requires the network administrator to schedule a maintenance window?
A. When a company-wide email notification must be sent.
B. A minor release upgrade of a production router.
C. When the network administrator’s laptop must be rebooted.
D. A major release upgrade of a core switch in a test lab.

A

B. A minor release upgrade of a production router.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

A company has implemented the capability to send all log files to a central location by utilizing an encrypted channel. The log files are sent to this location in order to
be reviewed. A recent exploit has caused the company’s encryption to become unsecure. Which of the following would be required to resolve the exploit?
A. Utilize a FTP service
B. Install recommended updates
C. Send all log files through SMTP
D. Configure the firewall to block port 22

A

B. Install recommended updates

40
Q

An outside organization has completed a penetration test for a company. One of the items on the report is reflecting the ability to read SSL traffic from the web
server. Which of the following is the MOST likely mitigation for this reported item?
A. Ensure patches are deployed
B. Install an IDS on the network
C. Configure the firewall to block traffic on port 443
D. Implement a VPN for employees

A

A. Ensure patches are deployed

41
Q

A company has had several virus infections over the past few months. The infections were caused by vulnerabilities in the application versions that are being used.
Which of the following should an administrator implement to prevent future outbreaks?
A. Host-based intrusion detection systems
B. Acceptable use policies
C. Incident response team
D. Patch management

A

D. Patch management

42
Q
Which of the following protocols must be implemented in order for two switches to share VLAN information?
A. VTP
B. MPLS
C. STP
D. PPTP
A

A. VTP

43
Q
A technician is setting up a new network and wants to create redundant paths through the network. Which of the following should be implemented to prevent
performance degradation?
A. Port mirroring
B. Spanning tree
C. ARP inspection
D. VLAN
A

B. Spanning tree

44
Q

A training class is being held in an auditorium. Hard-wired connections are required for all laptops that will be used. The network technician must add a switch to the
room through which the laptops will connect for full network access. Which of the following must the technician configure on a switch port, for both switches, in order
to create this setup?
A. DHCP
B. Split horizon
C. CIDR
D. TRUNK

A

D. TRUNK

45
Q

A desktop computer is connected to the network and receives an APIPA address but is unable to reach the VLAN gateway of 10.10.100.254. Other PCs in the
VLAN subnet are able to reach the Internet. Which of the following is MOST likely the source of the problem?
A. 802.1q is not configured on the switch port
B. APIPA has been misconfigured on the VLAN
C. Bad SFP in the PC’s 10/100 NIC
D. OS updates have not been installed

A

A. 802.1q is not configured on the switch port

46
Q
Which of the following communication technologies would MOST likely be used to increase bandwidth over an existing fiber optic network by combining multiple
signals at different wavelengths?
A. DWDM
B. SONET
C. ADSL
D. LACP
A

A. DWDM

47
Q
When two or more links need to pass traffic as if they were one physical link, which of the following would be used to satisfy the requirement?
A. Port mirroring
B. 802.1w
C. LACP
D. VTP
A

C. LACP

48
Q
A technician is configuring a managed switch and needs to enable 802.3af. Which of the following should the technician enable?
A. PoE
B. Port bonding
C. VLAN
D. Trunking
A

A. PoE

49
Q

A technician has finished configuring AAA on a new network device. However, the technician is unable to log into the device with LDAP credentials but is able to do
so with a local user account. Which of the following is the MOST likely reason for the problem?
A. Username is misspelled is the device configuration file
B. IDS is blocking RADIUS
C. Shared secret key is mismatched
D. Group policy has not propagated to the device

A

C. Shared secret key is mismatched

50
Q

Multiple students within a networking lab are required to simultaneously access a single switch remotely. The administrator checks and confirms that the switch can
be accessed using the console, but currently only one student can log in at a time. Which of the following should be done to correct this issue?
A. Increase installed memory and install a larger flash module.
B. Increase the number of VLANs configured on the switch.
C. Decrease the number of VLANs configured on the switch.
D. Increase the number of virtual terminals available.

A

D. Increase the number of virtual terminals available.

51
Q

A company is experiencing very slow network speeds of 54Mbps. A technician has been hired to perform an assessment on the existing wireless network. The
technician has recommended an 802.11n network infrastructure. Which of the following allows 802.11n to reach higher speeds?
A. MU-MIMO
B. LWAPP
C. PoE
D. MIMO

A

D. MIMO

52
Q

A network technician must create a wireless link between two buildings in an office park utilizing the 802.11ac standard. The antenna chosen must have a small
physical footprint and minimal weight as it will be mounted on the outside of the building. Which of the following antenna types is BEST suited for this solution?
A. Yagi
B. Omni-directional
C. Parabolic
D. Patch

A

D. Patch

53
Q
An attacker has connected to an unused VoIP phone port to gain unauthorized access to a network. This is an example of which of the following attacks?
A. Smurf attack
B. VLAN hopping
C. Bluesnarfing
D. Spear phishing
A

B. VLAN hopping

54
Q

Packet analysis reveals multiple GET and POST requests from an internal host to a URL without any response from the server. Which of the following is the BEST
explanation that describes this scenario?
A. Compromised system
B. Smurf attack
C. SQL injection attack
D. Man-in-the-middle

A

A. Compromised system

55
Q
A technician needs to ensure that new systems are protected from electronic snooping of Radio Frequency emanations. Which of the following standards should be
consulted?
A. DWDM
B. MIMO
C. TEMPEST
D. DOCSIS
A

C. TEMPEST

56
Q

A company has decided to update their usage policy to allow employees to surf the web unrestricted from their work computers. Which of the following actions
should the IT security team implement to help protect the network from attack as a result of this new policy?
A. Install host-based anti-malware software
B. Implement MAC filtering on all wireless access points
C. Add an implicit deny to the core router ACL
D. Block port 80 outbound on the company firewall
E. Require users to utilize two-factor authentication

A

A. Install host-based anti-malware software

57
Q

Which of the following would be the result of a user physically unplugging a VoIP phone and connecting it into another interface with switch port security enabled as
the default setting?
A. The VoIP phone would request a new phone number from the unified communications server.
B. The VoIP phone would cause the switch interface, that the user plugged into, to shutdown.
C. The VoIP phone would be able to receive incoming calls but will not be able to make outgoing calls.
D. The VoIP phone would request a different configuration from the unified communications server.

A

B. The VoIP phone would cause the switch interface, that the user plugged into, to shutdown.

58
Q

A network technician has been tasked to configure a new network monitoring tool that will examine interface settings throughout various network devices. Which of
the following would need to be configured on each network device to provide that information in a secure manner?
A. S/MIME
B. SYSLOG
C. PGP
D. SNMPv3
E. RSH

A

D. SNMPv3

59
Q
A technician wants to securely manage several remote network devices. Which of the following should be implemented to securely manage the devices?
A. WPA2
B. IPv6
C. SNMPv3
D. RIPv2
A

C. SNMPv3

60
Q
A technician needs to secure web traffic for a new e-commerce website. Which of the following will secure traffic between a web browser and a website?
A. SSL
B. DNSSEC
C. WPA2
D. MTU
A

A. SSL

61
Q
A company has seen an increase in ransomware across the enterprise. Which of the following should be implemented to reduce the occurrences?
A. ARP inspection
B. Intrusion detection system
C. Web content filtering
D. Port filtering
A

C. Web content filtering

62
Q
A company wants to make sure that users are required to authenticate prior to being allowed on the network. Which of the following is the BEST way to accomplish
this?
A. 802.1x
B. 802.1p
C. Single sign-on
D. Kerberos
A

A. 802.1x

63
Q

A wireless network technician for a local retail store is installing encrypted access points within the store for real-time inventory verification, as well as remote price
checking capabilities, while employees are away from the registers. The store is in a fully occupied strip mall that has multiple neighbors allowing guest access to
the wireless networks. There are a finite known number of approved handheld devices needing to access the store’s wireless network. Which of the following is the
BEST security method to implement on the access points?
A. Port forwarding
B. MAC filtering
C. TLS/TTLS
D. IP ACL

A

B. MAC filtering

64
Q

A network technician has set up an FTP server for the company to distribute software updates for their products. Each vendor is provided with a unique username
and password for security. Several vendors have discovered a virus in one of the security updates. The company tested all files before uploading them but retested the file and found the virus. Which of the following could the technician do for vendors to validate the proper security patch?
A. Use TFTP for tested and secure downloads
B. Require biometric authentication for patch updates
C. Provide an MD5 hash for each file
D. Implement a RADIUS authentication

A

C. Provide an MD5 hash for each file

65
Q
During a check of the security control measures of the company network assets, a network administrator is explaining the difference between the security controls at
the company. Which of the following would be identified as physical security controls? (Select THREE).
A. RSA
B. Passwords
C. Man traps
D. Biometrics
E. Cipher locks
F. VLANs
G. 3DES
A

C. Man traps
D. Biometrics
E. Cipher locks

66
Q
Which of the following physical security controls prevents an attacker from gaining access to a network closet?
A. CCTVs
B. Proximity readers
C. Motion sensors
D. IP cameras
A

B. Proximity readers

67
Q

A technician needs to install software onto company laptops to protect local running services, from external threats. Which of the following should the technician
install and configure on the laptops if the threat is network based?
A. A cloud-based antivirus system with a heuristic and signature based engine
B. A network based firewall which blocks all inbound communication
C. A host-based firewall which allows all outbound communication
D. A HIDS to inspect both inbound and outbound network communication

A

C. A host-based firewall which allows all outbound communication

68
Q

A technician is setting up a computer lab. Computers on the same subnet need to communicate with each other using peer to peer communication. Which of the
following would the technician MOST likely configure?
A. Hardware firewall
B. Proxy server
C. Software firewall
D. GRE tunneling

A

C. Software firewall

69
Q

A firewall ACL is configured as follows:
10. Deny Any Trust to Any DMZ eq to TCP port 22
11. Allow 10.200.0.0/16 to Any DMZ eq to Any
12. Allow 10.0.0.0/8 to Any DMZ eq to TCP ports 80, 443
13. Deny Any Trust to Any DMZ eq to Any
A technician notices that users in the 10.200.0.0/16 network are unable to SSH into servers in the DMZ. The company wants 10.200.0.0/16 to be able to use any
protocol, but restrict the rest of the 10.0.0.0/8 subnet to web browsing only. Reordering the ACL in which of the following manners would meet the company’s
objectives?
A. 11, 10, 12, 13
B. 12, 10, 11, 13
C. 13, 10, 12, 11
D. 13, 12, 11, 10

A

A. 11, 10, 12, 13

70
Q

A technician is installing a surveillance system for a home network. The technician is unsure which ports need to be opened to allow remote access to the system.
Which of the following should the technician perform?
A. Disable the network based firewall
B. Implicit deny all traffic on network
C. Configure a VLAN on Layer 2 switch
D. Add the system to the DMZ

A

D. Add the system to the DMZ

71
Q
The ability to make access decisions based on an examination of Windows registry settings, antivirus software, and AD membership status is an example of which
of the following NAC features?
A. Quarantine network
B. Persistent agents
C. Posture assessment
D. Non-persistent agents
A

C. Posture assessment

72
Q
Which of the following types of network would be set up in an office so that customers could access the Internet but not be given access to internal resources such
as printers and servers?
A. Quarantine network
B. Core network
C. Guest network
D. Wireless network
A

C. Guest network

73
Q
Which of the following is a security benefit gained from setting up a guest wireless network?
A. Optimized device bandwidth
B. Isolated corporate resources
C. Smaller ACL changes
D. Reduced password resets
A

B. Isolated corporate resources

74
Q

Ann, a network technician, was asked to remove a virus. Issues were found several levels deep within the directory structure. To ensure the virus has not infected
the .mp4 files in the directory, she views one of the files and believes it contains illegal material. Which of the following forensics actions should Ann perform?
A. Erase the files created by the virus
B. Stop and escalate to the proper authorities
C. Check the remaining directories for more .mp4 files
D. Copy the information to a network drive to preserve the evidence

A

B. Stop and escalate to the proper authorities

75
Q

A network technician was tasked to respond to a compromised workstation. The technician documented the scene, took the machine offline, and left the PC under a
cubicle overnight. Which of the following steps of incident handling has been incorrectly performed?
A. Document the scene
B. Forensics report
C. Evidence collection
D. Chain of custody

A

D. Chain of custody

76
Q

A network technician is using a network monitoring system and notices that every device on a particular segment has lost connectivity. Which of the following should
the network technician do NEXT?
A. Establish a theory of probable cause.
B. Document actions and findings.
C. Determine next steps to solve the problem.
D. Determine if anything has changed.

A

D. Determine if anything has changed.

77
Q

A user calls the help desk and states that he was working on a spreadsheet and was unable to print it. However, his colleagues are able to print their documents to
the same shared printer. Which of the following should be the FIRST question the helpdesk asks?
A. Does the printer have toner?
B. Are there any errors on the printer display?
C. Is the user able to access any network resources?
D. Is the printer powered up?

A

C. Is the user able to access any network resources?

78
Q

A network technician has detected duplicate IP addresses on the network. After testing the behavior of rogue DHCP servers, the technician believes that the issue is
related to an unauthorized home router. Which of the following should the technician do NEXT in the troubleshooting methodology?
A. Document the findings and action taken.
B. Establish a plan to locate the rogue DHCP server.
C. Remove the rogue DHCP server from the network.
D. Identify the root cause of the problem.

A

B. Establish a plan to locate the rogue DHCP server.

79
Q
A technician is troubleshooting a client's connection to a wireless network. The client is asked to run a "getinfo" command to list information about the existing
condition.
myClient$ wificard --getinfo
agrCtlRSSI:-72
agrExtRSSI:0
state:running
op mode: station
lastTxRate:178
MaxRate:300
802.11 auth:open
link auth:wpa2-psk
BSSID:0F:33:AE:F1:02:0A
SSID:CafeWireless
Channel:149,1
Given this output, which of the following has the technician learned about the wireless network? (Select TWO).
A. The WAP is using RC4 encryption
B. The WAP is using 802.11a
C. The WAP is using AES encryption
D. The WAP is using the 2.4GHz channel
E. The WAP is using the 5GHz channel
F. The WAP is using 802.11g
A

C. The WAP is using AES encryption

E. The WAP is using the 5GHz channel

80
Q
An administrator only has telnet access to a remote workstation. Which of the following utilities will identify if the workstation uses DHCP?
A. tracert
B. ping
C. dig
D. ipconfig
E. netstat
A

D. ipconfig

81
Q

A network technician is performing a tracert command to troubleshoot a website-related issue. The following output is received for each hop in the tracert:
1 * * * Request timed out.
2 * * * Request timed out.
3 * * * Request timed out.
The technician would like to see the results of the tracert command. Which of the following will allow the technician to perform tracert on external sites but not allow
outsiders to discover information from inside the network?
A. Enable split horizon to allow internal tracert commands to pass through the firewall
B. Enable IGMP messages out and block IGMP messages into the network
C. Configure the firewall to allow echo reply in and echo request out of the network
D. Install a backdoor to access the router to allow tracert messages to pass through

A

C. Configure the firewall to allow echo reply in and echo request out of the network

82
Q

A network technician has received comments from several users that cannot reach a particular website. Which of the following commands would provide the BEST
information about the path taken across the network to this website?
A. ping
B. netstat
C. telnet
D. tracert

A

D. tracert

83
Q

After connecting a workstation directly to a small business firewall, a network administrator is trying to manage it via HTTPS without losing its stored configuration.
The only two pieces of information that the network administrator knows about the firewall are the management interface MAC address, which is 01:4a:d1:fa:b1:0e,
and the administrator’s password. Which of the following will allow the administrator to log onto the firewall via HTTPS if the management’s IP address is unknown
and the administrator’s workstation IP address is 192.168.0.10/23?
A. Use the reset button on the back of the firewall to restore it to its factory default, and then log onto
B. Run the following command on the administrator’s workstation: arp –s 192.168.1.200 01:4a:d1:fa:b1:0e
C. Use an SNMP tool to query the firewall properties and determine the correct management IP address
D. Use a crossover cable to connect to the console port and reconfigure the firewall management IP to 192.168.0.1

A

B. Run the following command on the administrator’s workstation: arp –s 192.168.1.200 01:4a:d1:fa:b1:0e

84
Q

A network technician has detected a personal computer that has been physically connected to the corporate network. Which of the following commands would the
network technician use to locate this unauthorized computer and determine the interface it is connected to?
A. nbtstat –a
B. show mac address-table
C. show interface status
D. show ip access-list
E. nslookup hostname

A

B. show mac address-table

85
Q

A technician has verified that a recent loss of network connectivity to multiple workstations is due to a bad CAT5 cable in the server room wall. Which of the
following tools can be used to locate its physical location within the wall?
A. Cable certifier
B. Multimeter
C. Cable tester
D. Toner probe

A

D. Toner probe

86
Q

A user connects to a wireless network at the office and is able to access unfamiliar SMB shares and printers. Which of the following has happened to the user?
A. The user is connected using the wrong channel.
B. The user is connected to the wrong SSID.
C. The user is experiencing an EMI issue.
D. The user is connected to the wrong RADIUS server.

A

B. The user is connected to the wrong SSID.

87
Q

QUESTION 89
A technician is troubleshooting a wired device on the network. The technician notices that the link light on the NIC does not illuminate. After testing the device on a
different RJ-45 port, the device connects successfully. Which of the following is causing this issue?
A. EMI
B. RFI
C. Cross-talk
D. Bad wiring

A

D. Bad wiring

88
Q

A technician is tasked with connecting a router to a DWDM. The technician connects the router to the multiplexer and confirms that there is a good signal level.
However, the interface on the router will not come up. Which of the following is the MOST likely cause?
A. The wrong wavelength was demuxed from the multiplexer.
B. The SFP in the multiplexer is malfunctioning.
C. There is a dirty connector on the fiber optic cable.
D. The fiber optic cable is bent in the management tray.

A

A. The wrong wavelength was demuxed from the multiplexer

89
Q

While troubleshooting a network outage, a technician finds a 100-meter fiber cable with a small service loop and suspects it might be the cause of the outage.
Which of the following is MOST likely the issue?
A. Maximum cable length exceeded
B. Dirty connectors
C. RF interference caused by impedance mismatch
D. Bend radius exceeded

A

D. Bend radius exceeded

90
Q

A network technician has been assigned to install an additional router on a wireless network. The router has a different SSID and frequency. All users on the new
access point and the main network can ping each other and utilize the network printer, but all users on the new router cannot get to the Internet. Which of the
following is the MOST likely cause of this issue?
A. The gateway is misconfigured on the new router.
B. The subnet mask is incorrect on the new router.
C. The gateway is misconfigured on the edge router.
D. The SSID is incorrect on the new router.

A

A. The gateway is misconfigured on the new router.

91
Q

While troubleshooting a connectivity issue, a network technician determines the IP address of a number of workstations is 169.254.0.0/16 and the workstations
cannot access the Internet. Which of the following should the technician check to resolve the problem?
A. Default gateway address
B. Misconfigured DNS
C. DHCP server
D. NIC failure

A

C. DHCP server

92
Q

A network engineer is troubleshooting an issue with a computer that is unable to connect to the Internet. The network engineer analyzes the following output from a
command line utility:
Network DestinationNetmaskGatewayInterface
192.168.1.0 255.255.255.0192.168.1.254eth0
192.168.1.10255.255.255.255192.168.1.10eth0
127.0.0.1255.0.0.0On-Linlo
127.0.0.0255.0.0.0On-Linklo
255.255.255.255255.255.255.255102.168.1.10eth0
Which of the following is the reason for the computer issue, given the above output?
A. Wrong default gateway netmask
B. Incorrect default gateway address
C. Default gateway on the wrong interface
D. Missing default gateway

A

D. Missing default gateway

93
Q

A company has changed ISPs for their office and ordered a new 250 Mbps symmetrical Internet connection. As a result, they have been given a new IP range. The
ISP has assigned the company 10.10.150.16 /28. The company gateway router has the following interface configuration facing the ISP:
Interface A:
IP address: 10.10.150.16
Subnet mask: 255.255.255.240
Default gateway: 10.10.150.32
Speed: 1000 Mbps
Duplex: Auto
State: No Shutdown
None of the workstations at the company are able to access the Internet. Which of the following are the reasons? (Select TWO).
A. There is a duplex mismatch between the router and ISP.
B. The router interface is turned off.
C. The interface is set to the incorrect speed.
D. The router is configured with the incorrect subnet mask.
E. The router interface is configured with the incorrect IP address.
F. The default gateway is configured incorrectly.

A

E. The router interface is configured with the incorrect IP address.
F. The default gateway is configured incorrectly.

94
Q

A PC technician has installed a new network printer that was preconfigured with the correct static IP address, subnet mask, and default gateway. The printer was
installed with a new cable and appears to have link activity, but the printer will not respond to any network communication attempts. Which of the following is MOST
likely the cause of the problem?

A. Damaged cable
B. Duplex mismatch
C. Incorrect VLAN assignment
D. Speed mismatch

A

C. Incorrect VLAN assignment

95
Q

A network administrator recently installed a web proxy server at a customer’s site. The following week, a system administrator replaced the DNS server overnight.
The next day, customers began having issues accessing public websites. Which of the following will resolve the issue?
A. Update the DNS server with the proxy server information.
B. Implement a split horizon DNS server.
C. Reboot the web proxy and then reboot the DNS server.
D. Put the proxy server on the other side of the demarc.

A

A. Update the DNS server with the proxy server information.

96
Q

Two weeks after installation, a network technician is now unable to log onto any of the newly installed company switches. The technician suspects that a malicious
user may have changed the switches’ settings before they were installed in secure areas. Which of the following is the MOST likely way in which the malicious user
gained access to the switches?
A. Via SSH using the RADIUS shared secret
B. Via HTTP using the default username and password
C. Via console using the administrator’s password
D. Via SNMP using the default RO community

A

B. Via HTTP using the default username and password

97
Q

A network technician is troubleshooting a problem at a remote site. It has been determined that the connection from router A to router B is down. The technician at
the remote site re-terminates the CAT5 cable that connects the two routers as a straight through cable. The cable is then tested and is plugged into the correct
interface. Which of the following would be the result of this action?
A. The normal amount of errors and the connection problem has been resolved.
B. The interface status will indicate that the port is administratively down.
C. The traffic will flow, but with excessive errors.
D. The interface status will show line protocol down.

A

D. The interface status will show line protocol down.