Test 1 Flashcards

Question 1

Q

Which of the following is a system of notation that uses base 16 rather than base 10?

A. Hex
B. Octal
C. Binary
D. CIDR

Answer

A

A. Hex

hexadecimal is known as base-16, hex alone is base-6.

The question is formatted wrong.

Question 2

Q

A network administrator would like to collect information from several networking devices using SNMP. Which of the following SNMP options should a network administrator use to ensure the data transferred is confidential?

A. authpriv
B. SHA
C. MD5
D. Authentication passphrase

Answer

A

A. authpriv

AuthPriv is the most correct answer. SNMPv3 defines communication with authentication and privacy (AuthPriv) as one of three mechanisms available. It uses MD5 and SHA for authentication and either DES or AES for privacy.
While both SHA and MD5 are used in the solution, they are insufficient on their own.
A passphrase would be insufficient to sustain confidentiality of the data.

Question 3

Q

The IT manager at a small firm is in the process of renegotiating an SLA with the organization’s ISP. As part of the agreement, the organization will agree to a dynamic bandwidth plan to provide 150Mbps of bandwidth. However, if the ISP determines that a host on the organizationג€™s internal network produces malicious traffic, the ISP reserves the right to reduce available bandwidth to 1.5 Mbps. Which of the following policies is being agreed to in the SLA?

A. Session hijacking
B. Blocking
C. Throttling
D. Data usage limits
E. Bandwidth quotas

Answer

A

C. Throttling

Throttling: is the intentional slowing or speeding network (internet service)

Question 4

Q

A network technician has just configured NAC for connections using Cat 6 cables. However, none of the Windows clients can connect to the network.
Which of the following components should the technician check on the Windows workstations? (Choose two.)

A. Start the Wired AutoConfig service in the Services console
B. Enable IEEE 802.1q Authentication in Network Interface Card Properties
C. Enable IEEE 802.1x Authentication in Network Interface Card Properties
D. Start the Wireless AutoConfig service in the Services console
E. Enable IEEE 802.3 Ethernet IPv6 in Network Interface Card Properties

Answer

A

A. Start the Wired AutoConfig service in the Services console
C. Enable IEEE 802.1x Authentication in Network Interface Card Properties

Question 5

Q

The security manager reports that individual systems involved in policy or security violations or incidents cannot be located quickly. The security manager notices the hostnames all appear to be randomly generated characters. Which of the following would BEST assist the security manager identifying systems involved in security incidents?

A. Enforce port security to require system authentication
B. Implement a standardized UNC
C. Label existing systems with current hostnames
D. Forward the DHCP logs to the security manager every day

Answer

A

B. Implement a standardized UNC

A Universal Naming Convention (UNC) format name defines the location of files and other resources that exist on a network. UNC provides a format so that each shared resource can be identified with a unique address.

Question 6

Q

A building is equipped with light sensors that turn off the fluorescent lights when natural light is above a certain brightness. Users report experiencing network connection issues only during certain hours. The west side of the building experiences connectivity issues in the morning hours and the east side near the end of the day. At night the connectivity issues affect the entire building. Which of the following could be the cause of the connectivity issues?

A. Light sensors are interfering with the network
B. EMI from the lights is interfering with the network cables
C. Network wiring is run perpendicular to electrical conduit
D. Temperature changes are causing attenuation in copper cabling

Answer

A

C. Network wiring is run perpendicular to electrical conduit

Question 7

Q

A network technician configures a firewalls ACL to allow outgoing traffic for several popular services such as email and web browsing. However, after the firewalls deployment, users are still unable to retrieve their emails. Which of the following would BEST resolve this issue?

A. Allow the firewall to accept inbound traffic to ports 25, 67, 179, and 3389
B. Allow the firewall to accept inbound traffic to ports 80, 110, 143, and 443
C. Set the firewall to operate in transparent mode
D. Allow the firewall to accept inbound traffic to ports 21, 53, 69, and 123

Answer

A

B. Allow the firewall to accept inbound traffic to ports 80, 110, 143, and 443

Question 8

Q

A network security technician observes multiple attempts to scan network hosts and devices. All the attempts originate from a single host on the network. Which of the following threats is MOST likely involved?

A. Smurf attack
B. Rogue AP
C. Compromised system
D. Unintentional DoS

Answer

A

C. Compromised system

Question 9

Q

Which of the following would be the MOST efficient subnet mask for a point-to-point link?

A. /28
B. /29
C. /31
D. /32

Answer

A

C. /31

/31 is correct for Point to Point links because you dont need a network ID or a Broadcast address.

Question 10

Q

An office user cannot access local network drives but has full access to the Internet. A technician troubleshoots the issue and observes the following output of the ipconfig command:

Which of the following would MOST likely allow the network drives to be accessed?

A. Update the WLAN adapter driver
B. Disable the WLAN adapter
C. Check the wireless DHCP configuration
D. Disable the LAN adapter

Answer

A

B. Disable the WLAN adapter

If you look at the DNS Suffix you can see that one of the domains is guestwifi.local whilst the other one is comtia.net. Assuming that Guest Wifi is segmented from the rest of the corporate network, you wouldnt be able to access corporate resources on the guest wifi.

Question 11

Q

Ann, a network technician, has just installed a fiber switch in a datacenter. To run the fiber cabling, Ann plans the cable route over the top of the rack using the cable trays, down to the switch, coiling up any excess cable. As Ann configures the switch, she notices several messages in the logging buffer stating the receive signal of the SFP is too weak. Which of the following is MOST likely the cause of the errors in the logging buffer?

A. Bend radius exceeded
B. Fiber cable mismatch
C. Fiber type mismatch
D. Bad fiber switch

Answer

A

A. Bend radius exceeded

Question 12

Q

Which of the following wireless connection types utilize MIMO on non-overlapping channels? (Choose two.)

A. 802.11a
B. 802.11ac
C. 802.11b
D. 802.11g
E. 802.11n

Answer

A

B. 802.11ac
E. 802.11n

Mu mimo Supports devices that use 5GHz
so 802.11ac and 802.11n are correct though typically 802.11n is dual band and seen only as mimo. A,G,B dont support mimo.

Question 13

Q

A network technician is creating a new subnet for 488 host machines. The technician is told to use a class B address scheme when making the subnet and is instructed to leave as much room as possible for additional subnets of the same size. Which of the following subnets would fulfill these requirements?

A. 10.5.4.0/22
B. 10.233.2.0/23
C. 172.16.0.0/22
D. 172.18.0.0/23
E. 192.168.25.0/24

Answer

A

D. 172.18.0.0/23

Class B IP (between 128.0.0.1 - 191.255.255.254)
/23 Allows 510 Hosts 172.18.0.1 - 172.18.1.254
There’s additional subnets of the same size for future use
e.g 172.18.2.1 - 172.18.3.254 for hosts
/22 is a waste, therefore C is incorrect

Question 14

Q

A network engineer is designing a new IDF in an old building. The engineer determines the equipment will fit in a two-post rack, and there is power available for this equipment. Which of the following would be the FIRST issue to remediate?

A. Air flow and cooling
B. UPS capability
C. Circuit labeling
D. Power redundancy

Answer

A

A. Air flow and cooling

They specify an “old building”. I believe the point here is to check the ventilation of the actual room where the rack will be placed.

Question 15

Q

Which of the following DNS records needs to be configured for SMTP traffic?

A. MX
B. CNAME
C. AAAA
D. PTR

Answer

A

A. MX

MX is the most correct answer.
MX records are for mail exchangers.
CNAME is the canonical name record, which maps one domain to another.
AAAA records are for human names to IPv6 domains or hosts.
PTR records are for pointers, which give the hostname for an IP address (reverse lookup).

Question 16

Q

In which of the following ways does a DDoS attack differ from a spoofing attack?

A. DDoS attacks target multiple networks
B. Spoofing attacks originate from a single host
C. DDoS attacks are launched from multiple hosts
D. Spoofing attacks require physical presence

Answer

A

C. DDoS attacks are launched from multiple hosts

A DDoS targets a single host or server or any part of the network from ‘multiple’ sources

Question 17

Q

A user checks an IP address using an external website. The address is different than the one the user sees when opening a command prompt and typing in ipconfig/all. The user does not understand why the two tools show different IP addresses. This is BEST explained by the interworking of:

A. network devices
B. packet flow
C. public/private networks
D. traffic-routing protocols

Answer

A

C. public/private networks

NAT translation.

Question 18

Q

Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?

A. Broadband
B. Baseband
C. Analog modem
D. CSMA

Answer

A

A. Broadband

Question 19

Q

To replace a defective UPS, the network administrator must take the switch offline. The administrator wants to be able to perform maintenance UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?

A. Add a redundant power supply to the switch
B. Implement stacking on the switches in the rack
C. Add a second UPS into the rack
D. Install a power converter for the switch

Answer

A

A. Add a redundant power supply to the switch

A redundant power supply is when a single piece of networking equipment operates using two or more physical power supplies. Each of the power supplies will have the capacity to run the device on its own. This makes sure that the device could operate normally even if one power supply fails.

Question 20

Q

A forensic first responder arrives at the scene where an employee is suspected to have committed a computer-based crime. Which of the following should the first responder do FIRST?

A. Document the scene
B. Take pictures upon arrival
C. Secure the area
D. Implement chain of custody

Answer

A

C. Secure the area

From Mike Meyer’s book:

In general, when you are in a situation where you are the first
responder, you need to

Secure the area
Document the scene
Collect evidence
Interface with authorities

Question 21

Q

A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer being asked to implement?

A. LAN
B. PAN
C. MAN
D. WAN

Answer

A

C. MAN

MAN stands for metropolitan area network. It covers the largest area than LAN such as small towns, cities, etc. MAN connects two or more computers that reside within the same or completely different cities. MAN is expensive and should or might not be owned by one organization.

LAN stands for local area network. It is a group of network devices that allow communication between various connected devices. Private ownership has control over the local area network rather than the public. LAN has a short propagation delay than MAN as well as WAN. It covers the smallest area such as colleges, schools, hospitals, and so on.

WAN stands for wide area network. It covers a large area than LAN as well as a MAN such as country/continent etc. WAN is expensive and should or might not be owned by one organization. PSTN or satellite medium is used for wide area networks.

Question 22

Q

An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business trips. Which of the following is needed to protect BOTH the employee and the company?

A. An NDA ensuring work data stored on the personal phone remains confidential
B. An AUP covering how a personal phone may be used for work matters
C. A consent to monitoring policy covering company audits of the personal phone
D. Real-time remote monitoring of the phoneגs activity and usage

Answer

A

D. Real-time remote monitoring of the phoneג€™s activity and usage

Question 23

Q

Which of the following protocols can be both connection-oriented and connectionless?

A. 20 FTP
B. 53 DNS
C. 67 DHCP
D. 80 HTTP

Answer

A

B. 53 DNS

DNS is the most correct answer, using both TCP and UDP ports 53 natively.
FTP uses TCP port 20 and 21.
DHCP uses UDP ports 67 and 68.
HTTP uses TCP port 80, but can also use UDP if adapted to do so. DNS remains the most correct answer because HTTP must be adapted to support UDP, while DNS has always supported both.

Question 24

Q

Which of the following BEST describes the differences between VLAN hopping and session hijacking?

A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a users web connection to execute commands
B. VLAN hopping is a brute force attack executed to gain additional access. Session hijacking involves physically disrupting a network connection
C. VLAN hopping involves overriding a user network connection to execute malicious commands. Session hijacking involves compromising a host to elevate privileges
D. VLAN hopping is the act of exploiting poor VLAN tagging. Session hijacking is a web-based attack aimed at privilege escalation

Answer

A

A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a users web connection to execute commands

Question 25

Q

An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organizations network. As part of the attack, the analyst launches a fake access point matching the SSID of the organizations guest access network. When a user connects to the fake access point, the analyst allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for the latest analysis and exploitation. Which of the following attacks has the analyst successfully performed in this scenario?

A. Bluesnarfing
B. Session hijacking
C. MAC spoofing
D. VLAN hopping
E. Man-in-the-middle

Answer

A

E. Man-in-the-middle

Question 26

Q

A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company’s firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)

A. Document the reason for the request
B. Scan the file for malware to protect the sales departments computers
C. Follow the company’s approval process for the implementation
D. Install a TFTP server for the customers to use for the transfer
E. Create a honeypot to store the file on for the customers to use
F. Write the SLA for the sales department authorizing the change

Answer

A

A. Document the reason for the request

C. Follow the company’s approval process for the implementation

Question 27

Q

A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not modify the laptop in any way, and the wireless Internet is functional on other users laptops. Which of the following issues should be reviewed to help the user to connect to the wireless network?

A. Wireless switch toggled off
B. WAP settings
C. WLAN IP address out of scope
D. Wireless controller misconfiguration

Answer

A

A. Wireless switch toggled off

Question 28

Q

A network administrator wants to increase the confidentiality of the system by hardening the authentication process. Currently, the users log in using usernames and passwords to access the system. Which of the following will increase the authentication factor to three?

A. Adding a fingerprint reader to each workstation and providing a RSA authentication token
B. Adding a fingerprint reader and retina scanner
C. Using a smart card and RSA token
D. Enforcing a stronger password policy and using a hand geometry scan

Answer

A

A. Adding a fingerprint reader to each workstation and providing a RSA authentication token

There are three common factors used for authentication: Something you know (such as a password)
Something you have (such as a smart card)
Something you are (such as a fingerprint or other biometric method)

Question 29

Q

A network technician is building a network for a small office. The office currently has cable TV and now requires access to the Internet without adding any cabling other than what is already in place. Which of the following solutions should the technician install to meet these requirements?

A. DOCSIS modem
B. Wireless router
C. DSL modem
D. Access point

Answer

A

A. DOCSIS modem

Question 30

Q

A network engineer arrives at work and discovers that many users are having problems when attempting to connect to the company network shared drives. The network operations center (NOC) technician just completed server upgrades the night before. To which of the following documents should the NOC technician refer to determine what potentially caused the connectivity problem?

A. Network maps
B. Cable management
C. Release notes
D. Change management

Answer

A

D. Change management

Question 31

Q

Which of the following VPN protocols establishes a secure session that can be initiated using a browser?

A. IPSec
B. SSL VPN
C. PTP
D. PPTP

Answer

A

B. SSL VPN

Question 32

Q

A technician is setting up a public guest network for visitors to access the Internet that must be separate from the corporate network. Which of the following are the BEST steps for the technician to take with minimum overhead configuration? (Choose two.)

A. Enable SSID broadcasting to identify the guest network
B. Configure visitor devices to use static IP addresses
C. Enable two-factor authentication on visitor devices
D. Configure the access point to use WPA2-AES encryption
E. Ensure the access point is not running in mixed mode

Answer

A

A. Enable SSID broadcasting to identify the guest network

E. Ensure the access point is not running in mixed mode

Question 33

Q

When choosing a type of storage that integrates with the existing network infrastructure, the storage must be easily configurable to share files and can communicate with all existing clients over TCP/IP. Which of the following is the BEST technology for the network administrator to implement?

A. iSCSI
B. Fibre Channel
C. NAS
D. DAS

Question 34

Q

A network technician is installing a new network switch is looking for an appropriate fiber optic patch cable. The fiber optic patch panel uses a twist-style connector. The switch uses a SFP module. Which of the following connector types should the fiber patch cable have?

A. LC
B. ST
C. SC
D. MTRJ
E. MTP

Answer

A

B. ST

ST (Straight Tip) connections twist similar to BNC

ST connectors: These connectors are the most common type of commercial fiber optic connector. These connectors utilize an exposed plastic tube housing the optical fiber. This requires a connection to a matching cable on the other side, incorporating a connector that mates to the other. These combine in a spring-loaded twist, reminiscent of BNC connectors, and are noted for their reliability. ST connector is very popular in communication applications, such as LANs and CCTV systems.

Question 35

Q

Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?

A. ISDN
B. MPLS
C. PRI
D. Broadband cable
E. Frame relay

Answer

A

E. Frame relay

Answer is fram relay, remember to answer what comptia wants you to hear. When they talk about MPLS they will mention labels

Question 36

Q

A network administrator wishes to ensure there are no unnecessary open communication paths into a server. Using a port scanner, the administrator finds that ports are reported as closed. Which of the following BEST explains this response?

A. The ports belong to an active system and are denying requests
B. The ports are associated with deprecated services
C. The ports do not belong to a live system
D. The ports replied with a SYN/ACK response

Answer

A

B. The ports are associated with deprecated services

B is correct. Popular port scanner “Nmap” defines a closed port as follows:

“A closed port is accessible (it receives and responds to Nmap probe packets), but there is no application listening on it.”

Question 37

Q

Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are intermittent but seem to occur most often around midday. Which of the following is the MOST likely cause?

A. There is interference from small appliances
B. The signal coverage area is too small
C. Not enough DHCP addresses have been allotted
D. The DNS cache on the users computers has become corrupt

Answer

A

C. Not enough DHCP addresses have been allotted

An exhausted DHCP pool would also suggest a lot of users taking up bandwidth which would cause slow speeds. The exhausted DHCP pool would prevent others from accessing the network all together.

Question 38

Q

A user reports difficulties connecting a PC to a wired network. The PC connects to an IP phone, which is working correctly. A network technician can verify that other devices successfully connect to the phone. At which of the following layers of the OSI model is the problem MOST likely located?

A. Network
B. Physical
C. Transport
D. Application

Answer

A

A. Network

Looks like physical layer but it does not say any cable but the wired network (device). So, network is the issue.

Question 39

Q

Which of the following physical security controls is MOST likely to be susceptible to a false positive?

A. Identification card
B. Biometric device
C. Proximity reader
D. Video camera

Answer

A

C. Proximity reader

a proximity reader will grant access to a user with proximity card that it recognizes. It doesn’t need to know if the user is legitimate or not.

Question 40

Q

An assistant systems analyst reports the following findings of an investigation of slow Internet connections in a remote office to the senior systems analyst:

Which of the following devices is causing the issue?
A. Router
B. Firewall
C. Switch 1
D. Switch 2

Answer

A

B. Firewall

Question 41

Q

A small business developed an in-house application that is very sensitive to network latency when communicating between servers. Due to a lack of funds, the business had to build its own network for workstations and servers. Now a network administrator must redesign the network due to performance issues with the application. Which of the following would be the MOST cost effective for the administrator to recommend?

A. Create Ethernet VLANs
B. Disable autonegotiation on the servers
C. Install 10Gb Ethernet NICs in the servers
D. Install Fibre Channel for the server network

Answer

A

C. Install 10Gb Ethernet NICs in the servers

Two factors are involved and must be considered together: network latency and cost-effective. A is cost-effective but doesn’t solve the issue of network latency. C solves the issue of network latency and it’s equally cost-effective.

Question 42

Q

A network technician is configuring a firewall access list to secure incoming connections to an email server. The internal address of this email server is
192.168.1.143. The firewall should allow external email servers to send email to the email server. The email server also supports client access via a web browser.
Only secure protocols should be used, and only the necessary ports should be open. Which of the following ACL rules should be configured in the firewallג€™s WAN port? (Choose two.)

A. Permit 192.168.1.143.25
B. Permit 192.168.1.143.80
C. Permit 192.168.1.143.110
D. Permit 192.168.1.143.143
E. Permit 192.168.1.143.443
F. Permit 192.168.1.143.587

Answer

A

E. Permit 192.168.1.143.443
F. Permit 192.168.1.143.587

Port 587 is the default port for SMTP submission on the modern web. While you can use other ports for submission (more on those next), you should always start with port 587 as the default and only use a different port if circumstances dictate (like your host blocking port 587 for some reason).
Port 587 also supports TLS, which means that you can securely submit mail.

Port 443 for secure protocols to supports client access via a web browser, port 443 the standard port for HTTPS traffic.
On the modern web, there’s not a single SMTP port. Instead, there are four common SMTP ports:25,587,465,2525

Question 43

Q

A network administrator is testing connectivity at a new corporate site. The site has a wireless guest as well as a wired employee network. After verifying connectivity, the administrator checks link speeds by using a speed testing website. The speed testing website shows lower download and upload speeds for the wired network than the wireless network. Which of the following is the MOST likely explanation?

A. There is less local congestion on the wireless network
B. The testing server for the wired network was farther away
C. The firewall is configured to throttle traffic to specific websites
D. The wireless access points were misconfigured

Answer

A

A. There is less local congestion on the wireless network

“The site has a wireless guest as well as a wired employee network.”

That is the important line. A guest wireless is going to have less traffic than the wired employee. That’s why they chose those two networks. Also, having a testing site farther away isn’t going to change the speed, only the latency.

Question 44

Q

A technician replaces a failed router with a spare that has been in inventory for some time. After attempting to enable HTTPS on the spare router, the technician discovers the feature is unavailable. The support office was able to connect to the previous router. Which of the following actions should the technician perform to enable HTTPS access for the support team?

A. Reboot the router
B. Enable HTTP on the router
C. Update the firmware of the spare router
D. Perform a factory reset on the router

Answer

A

C. Update the firmware of the spare router

Key phrases for this question: “has been in inventory for some time”, and “the feature is
unavailable”.
In addition, if the office was able to connect to HTTPS on the router that was replaced, then they should be able to connect to the spare. Simply perform a firmware update.

Question 45

Q

A technician is trying to configure a previously owned WAP. The technician successfully logs into the administrative console and attempts to input the IP address on the WAP. However, the WAP is not accepting the command. Which of the following is causing the problem?

A. The WAP antenna is damaged
B. The WAP transmitter light is dim
C. The terminal emulation software is misconfigured
D. The LWAPP image is installed on the WAP

Answer

A

D. The LWAPP image is installed on the WAP

When the LWAPP firmware is installed the only way for manage the AP is with Controller. So you can still login to the device, but not alter it.

Question 46

Q

A technician has installed a Linux server in the tax office. The server can access most of the resources on the network, but it cannot connect to another server that has a share for backup. The technician learns that the target server is on a different subnet. Which of the following tools should the technician use to ensure the
Linux server can reach the backup location?

A. netstat
B. traceroute
C. route
D. dig
E. ifconfig

Answer

A

B. traceroute

I believe in this case, ensure means “How do we know that Linux server can reach the target server?” Well, if traceroute is successful, you just ensured that it reached.

Question 47

Q

Which of the following WAN technologies provides a guaranteed throughput rate?

A. DSL
B. T-1
C. Cable broadband
D. Dial-up

Question 48

Q

Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?

A. 2001::d58::95:7565:1
B. 2001:0:d58:0:0:95:7565:1
C. 2001:0:d58::95:7565:1
D. 2001:0:0d58::95:7565:1

Answer

A

C. 2001:0:d58::95:7565:1

For anyone wondering, it’s C and not A because you can’t use the :: twice

Question 49

Q

A network administrator needs to transmit traffic to geographically diverse sites to improve performance. Which of the following devices would BEST direct traffic to the remote sites?

A. Hub
B. Bridge
C. Switch
D. Router

Answer

A

D. Router

Question 50

Q

Which of the following should a technician investigate when using a network baseline to troubleshoot?

A. Tracing a network wire connectivity issue from the datacenter to a host.
B. Determining if the server performance is degraded.
C. Changes that have been made to the network configuration.
D. Location of networking equipment in a rack.

Answer

A

B. Determining if the server performance is degraded.

The only way to know when a problem is brewing on your network
is to know how things perform when all’s well with the network.
Part of any proper performance monitor is the facility to create a
baseline: a log of performance indicators such as CPU usage,
network utilization, and other values to give you a picture of your
network and servers when they are working correctly. A major
change in these values can point to problems on a server or the
network as a whole.

Question 51

Q

A technician needs to upgrade a SOHO wireless routers firmware. The technician resets the router to factory settings and installs the new firmware. The technician enters the DHCP information and sets the SSID. Which of the following configurations would provide the MOST protection from advance hackers?

A. Disable the broadcasting of the SSID.
B. Enable WPA2 authentication for all hosts.
C. Use private addressing for the DHCP scope.
D. Install unidirectional antennas.

Answer

A

B. Enable WPA2 authentication for all hosts.

Question 52

Q

A technician notices clients are receiving a 169.254.x.x IP address following the upgrade of a server. Which of the following ports should the technician check on the local server firewall?

A. ports 20 and 21
B. ports 67 and 68
C. ports 80 and 443
D. port 123 and 8080

Answer

A

B. ports 67 and 68

Addresses starting with 169.x.x.x are APIPA addresses. APIPA addresses are assigned when DHCP fails to assign an address first. Ports 67 and 68 are DHCP ports that need to be turned on for DHCP to work.

Question 53

Q

Which of the following datacenter security methodologies is MOST likely to remain usable during a network outage?

A. biometric scanners
B. door locks
C. video surveillance
D. motion detectors

Answer

A

B. door locks

Door locks is the most correct answer. No level of network outage will ever impact a traditional door and lock.
All other answers may rely on network resources or reporting mechanisms that could be compromised or delayed in the event of a network outage.

Question 54

Q

A network technician is implementing a solution on the network to hide the workstation internal IP addresses across a WAN. Which of the following is the technician configuring?

A. QoS
B. DMZ
C. RIP
D. NAT

Answer

A

D. NAT

Network address translation (NAT), don’t forget it makes private IP’s into a pubic one (personal network to the internet). While Port address translation does very similar things, making private IP’s into public IP’s but with the help of ports.

Question 55

Q

Employees want the ability to use personal devices on the guest network while working out at the company gym. In order to meet the request, which of the following policies requires employee adherence?

A. AUP
B. SLA
C. NDA
D. MOU

Answer

A

A. AUP

Stands for “Acceptable Use Policy.” An AUP is list of rules you must follow in order to use a website or Internet service. It is similar to a software license agreement (SLA), but is used specifically for Internet services.

Question 56

Q

Which of the following BEST describes the BGP routing protocol?

A. distance vector
B. hybrid
C. static
D. link state

Answer

A

B. hybrid

BGP - Border Gateway Protocol is considered a hybrid protocol in the CompTIA objectives as it employs elements of both Link-state and distance-vector protocols. Technically it is classified as an advanced protocol.

Question 57

Q

A customer is reporting difficulty connecting some devices after replacing a wireless router with a new wireless 802.11ac router. The SSID, encryption and password are the same as the previous router. A technician goes on-site and notices the devices that are no longer connecting appear to be several years ago. Which of the following is MOST likely the problem?

A. the password needs to be re-entered.
B. there is a security type mismatch.
C. there is insufficient antenna power.
D. there is a frequency mismatch.
E. the channel has changed.

Answer

A

D. there is a frequency mismatch.

802.11ac utilizes 5 GHz and since it is already ‘several’ years. The devices that are connected to the replaced WAP are probably 802.11b/g compliant devices. cheers!

Question 58

Q

SIM Question

Multiple users are reporting that they are unable to access the network. The ENTIRE network is shown in the diagram. PCs are not statically assigned IP addresses. The following devices will display settings:
✑ WorkstationA
✑ WorkstationB
✑ WorkstationC
✑ WorkstationD

WorkstationE -

✑ WorkstationF
✑ WorkstationG
✑ Laptop1
✑ Laptop2
✑ DHCP server1
✑ DHCP server2
Instructions:
Review the settings and select the box in the diagram that identifies the device causing the issue. Only one device can be selected at a time.
After checking the device that is causing the issue, select the second tab in the lower left hand corner. Identify the reason as to why some users are unable to access the network.
When the simulation is complete, select the Done button to submit.

Part 2 -
Identify the reason as to why some users are unable to access the network.
A. Workstation(s) are plugged into switch ports configured with half duplex.
B. The site-to-site router was configured with the incorrect ACL.
C. The DHCP server scope is full and is not providing IP addresses.
D. WAN and LAN ports are reversed on the router.
E. STP has disabled some of the ports on the switch.
F. The NIC driver is not installed.
G. A wireless client is unable to associate to the AP.

Answer

A

The secret to this question is why does Workstation C have APIPA (169.254.200.67). SOHO Router 1 has its interfaces plugged into the wrong network segments. The correct answer is SOHO Router 1 should be checked in Part 1, and “D” The WAN/LAN ports are reversed on the router should be selected in Part 2.

D. WAN and LAN ports are reversed on the router.

or

G. A wireless client is unable to associate to the AP.

Question 59

Q

Which of the following should be performed to verify that unnecessary services are disabled on all switches in an environment?

A. Packet capturing
B. Port scanning
C. Log scanning
D. Baseline review

Answer

A

B. Port scanning

Question 60

Q

A technician is sent to a remote office to set up a device to connect to the Internet. The company standards document requires stateful inspection. Which of the following should the technician install?

A. Router
B. Multiplayer switch
C. Firewall
D. Bridge

Answer

A

C. Firewall

“stateful inspection” = firewall.

Question 61

Q

A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform this task?
(Choose two.)

A. RDP
B. SNMP
C. WPA2
D. EAP
E. SSL

Answer

A

C. WPA2
D. EAP

WPA2 and EAP are the most correct answers.
WPA2 is the only wireless security protocol on the list.
Extensible Authentication Protocol is used by WPA2 to enhance its security features in a granular way.
Remote Desktop Protocol is used for remote access to hosts, and has no ability to secure a network, wired or wireless.
Simple Network Management Protocol is used for collecting and manipulating network information to form a baseline that is used in a general report. This is used to determine overall network health. Can send alarms but does not solidify wireless security.
Secure Sockets Layer is used for establishing authenticated and encrypted links between networked computers. While a secure technology, it does not have the innate capacity to secure a wireless network.

Question 62

Q

A technician is investigating the cause of a network outage. Which of the following documents should be checked to rule out configuration issues?

A. Change management records
B. Inventory management
C. Network log files
D. Logical diagrams

Answer

A

A. Change management records

A seems to make the most sense (in CompTIA’s perspective) as checking the change management documentation would state what recent equipment or configuration changes were recently made that might’ve affected the network. The network log files would list logical topology changes, but most likely wouldn’t list any recent physical changes with networking equipment. Thus, A makes the most sense.

Question 63

Q

A junior network technician receives a help desk ticket from an end user who is having trouble accessing a web application that was working the previous day.
After talking with the end user and gathering information about the issue, which of the following would be the most likely course of action for the technician to perform NEXT?

A. Establish a theory of probable cause.
B. Escalate the ticket to a senior technician.
C. Implement the solution.
D. Document the findings and outcomes.

Answer

A

A. Establish a theory of probable cause.

Question 64

Q

A system administrator receives reports from users of odd behavior in regard to a recently installed server. While reviewing the server network configuration, the systems administrator does both a forward and a reverse DNS lookup on the host, along with the network adapter configuration.

Which of the following is the problem identified in the output above?
A. There is no reverse DNS entry for this host.
B. The server IP address is incorrectly configured.
C. The DNS lookup entry is incorrectly configured.
D. The reverse DNS entry is pointing to a different host.

Answer

A

C. The DNS lookup entry is incorrectly configured.

first commandline is a DNS query of what IP address is stored for server.company.com

$host server.company.com

it gives the result 129.168.0.100 (note the first octet is 129, not 192)

the scond command is a reverse DNS, called ARP, looking for the name that is associated with an it yields a result of web.company.com

the last command ifconfig is a command run on the server locally to see what IP it is configured with and it yields 192.168.0.100

so the conclusion is the server on itself is configured with 192.168.0.100 and in DNS it is configured as 129.168.0.100

since DNS is the master record file for all network devices, the issue seen is that the DNS record for this machine (in DNS) is wrong.

Answer 63

A

C. The device is connected to the switch.

Answer 64

A

D. Captive portal

Answer 65

A

D. Logical and physical diagrams

If someone assigned you a task to configure the Firewall, you as a technician don’t magically know where exactly in the network the Firewall has been placed. Especially considering you did not plan for and install the device yourself.

You would need to refer to the physical and logical diagram to determine where the Firewall is in the network layout to be able to proceed with configuring it properly. You might be able to puzzle this out by examining rack diagrams and MDF/IDF documentation, but that to me seems to be the wrong way to go about it.

Only once everything is configured would you then take your baselines.

Answer 66

A

B. SAN

SAN used to block-level technology while,
NAS provide file level access.
I used to put this is mind like “SUN BLOCK”

Answer 67

A

C. Insider threat

Answer 68

A

D. Connect utilizing client-to-site VPN.

its very tpical with the VPN logon process that as you log on, the usual logon scripts run on your machine and map the network shares provided on the corporate network to local “logical” drives on your machine. So lets say you are in accounting and there is a share on the accounting server called “accounting-share”, well when you logon to VPN succescully there will be a script or commmand that runs in the background to create a logical drive like “M:" on your local machine and then point it to the network share… hope this explains it…

Answer 69

A

C. Reflection

Reflection/Refraction:
Is when a signal passes through an object and exists at a different angle. The presence of glass or water (especially during weather) can cause this.

Answer 70

A

C. SOP

SOP = Standard Operating Procedure, keyword: implementation

Answer 71

A

A. A trap message is sent via UDP to the monitoring workstation.

“An NMS can tell an agent to make changes to the information it queries and sends through a Set PDU, specifically SetRequest”
“An agent can send a Trap with or without prior action from the SNMP manager.”
-Mike Meyers, Network+, page 702-703

In this question, there isn’t a change being requested (therefore it’s not Set). It’s a Trap message letting the technician know that a prescribed value or threshold has been exceeded. An example the book uses is a printer letting technicians automatically know when it is out of ink.

Answer 72

A

E. PC to PC

Answer 73

A

D. Access point

Answer 74

A

A. Disable unnecessary services.
F. Upgrade to the latest firmware.

It can be assumed that upgrading to the latest firmware will (for the most part) prevent attackers from accessing a router that is not fully updated and there may be exploits in outdated firmware. Hence, updating it to the latest version. As for disabling the unnecessary services, again, it isn’t implied, but there could be paths or vectors that attackers could detect through running services on the router and use that to get in.

Answer 75

A

B. DTLS

DTLS VPNS
Datagram TLS (DTLS) VPNs optimize connections for delaysensitive applications, such as voice and video over a VPN. After establishing a traditional TLS tunnel, DTLS VPNs use UDP datagrams rather than TCP segments for communication.

TFTP - Port 69 simple FTP service that is unencrypted
DNS - Port 53 Domain Name System
SNMP - Port 161 Simple Network Management Protocol

Answer 76

A

D. Spanning tree

The source of the broadcasts is from a second port, so from inside the network. ARP poisoning is a MITM attack and comes from outside the network. What is happening here is a routing loop. To prevent routing loops you use STP.

Answer 77

A

D. Out-of-band console router

Out of Band management uses a dedicated wire connection between the Network admin’s computer and a critical device.

Answer 78

A

C. Distance

The correct answere is C. Distance.
802.11ac has maximum range 35 m, and it operates in 5Ghz frequencey band only.

Answer 79

A

A. Firewall

Answer 80

A

C. The technician should configure a virtual switch.

Answer 81

A

C. Check for updated firmware.

Answer 82

A

A. Use a pre-shared key.

The pre-shared key would be one that the shop provides to customers by means of an inside sign or a printed receipt.

Answer 83

A

A. Cold site

A cold site is a location that consists of a building, facilities, desks, toilets, parking—everything that a business needs …except computers. A cold site will generally take more than afew days to bring online.
A warm site is the same as a cold site, but adds computers loaded with software and functioning servers—a complete hardware infrastructure. A warm site lacks current data and may not have functioning Internet/network links. Bringing this site up to speed may start with activating your network links, and it most certainly requires loading data from recent backups. A warm site should only take a day or two to bring online.
A hot site has everything a warm site does, but also includes very recent backups. It might need just a little data restored from a backup to be current, but in many cases a hot site is a complete duplicate of the primary site. A proper hot site should only take a few hours to bring online.

Answer 84

A

B. Perform a hash on the file for comparison with the vendors hash.

Answer 85

A

C. Omnidirectional

Answer 86

A

D. The SSL certificate has expired.

Answer 87

A

B. Network

Layer 3 of the OSI model

Answer 88

A

A. CNAME
C. PTR
G. SRV

DNS Record types:
A (Host address)
AAAA (IPv6 host address)
ALIAS (Auto resolved alias)
CNAME (Canonical name for an alias)
MX (Mail eXchange)
NS (Name Server)
PTR (Pointer)
SOA (Start Of Authority)
SRV (location of service)
TXT (Descriptive text)

Answer 89

A

C. Differential

Answer 90

A

D. Standard operating procedures

the question states, “Which… would BEST help the administrator and users during hands-on troubleshooting?” SOPs (or work instructions) are the IT staff’s documented procedures used during certain network conditions or technical issues.

For example, the SOP can illustrate step-by-step procedures for dealing with an Internet outage; the procedures (SOP) could aid the technician to resolve the issue quickly; it can also be used to coach the user to remediate the problem.

Answer 91

A

B. Install a UPS

A UPS is a band aid for this situation. Clearly there is a problem with the switch. HOWEVER, you would first install a UPS to prevent interruption of service THEN a new switch.

Answer 92

A

A. Consistent labeling

Answer 93

A

A. Data link

ATM operates at the data link layer — Layer 2 in the OSI model — over either fiber or twisted-pair cable

Answer 94

A

D. PRP wireless

The given answer is correct, but only because every other answer does not make sense. This may be a question in the exam that is not weighted and simply used for calibration and statistic purposes. Realistically, fiber or a series of repeaters would be suitable for this scenario.

Brainscape's Knowledge GenomeTM

Test 1 Flashcards

Brainscape's Knowledge Genome^TM