rtw43fzxs51.70

A network administrator is designing a new datacenter in a different region that will need to communicate to the old datacenter with a secure connection. Which of the following access methods would provide the BEST security for this new datacenter?

• Virtual network computing

• Secure Socket Shell

• In-band connection

• Site-to-site VPN

Answer explanation

Site-to-site VPN provides the best security for connecting a new datacenter to an old one because it creates a secure tunnel between the two locations, protecting data in transit. Reference: CompTIA Network+ Certification Study Guide, Chapter 5: Network Security.

An attacker is attempting to find the password to a network by inputting common words and phrases in plaintext to the password prompt. Which of the following attack types BEST describes this action?

• Pass-the-hash attack

• Rainbow table attack

• Brute-force attack

• Dictionary attack

Answer explanation

The attacker attempting to find the password to a network by inputting common words and phrasesin plaintext to the password prompt is using a dictionary attack. Reference: CompTIA Network+ Certification Study Guide, Chapter 6: Network Attacks and Mitigation.

Which of the following technologies provides a failover mechanism for the default gateway?

• FHRP

• LACP

• OSPF

• STP

Answer explanation

First Hop Redundancy Protocol (FHRP) provides a failover mechanism for the default gateway, allowing a backup gateway to take over if the primary gateway fails. Reference: CompTIA Network+ Certification Study Guide, Chapter 4: Infrastructure.

The following configuration is applied to a DHCP server connected to a VPN concentrator:

There are 300 non-concurrentsales representatives who log in for one hour a day to upload reports, and 252 of these representatives are able to connect to the VPN without any Issues. The remaining sales representatives cannot connect to the VPN over the course of the day. Which of the following can be done to resolve the issue without utilizing additional resources?

• Decrease the lease duration

• Rebootthe DHCP server

• Install a new VPN concentrator

• Configure a new router

A technician needs to configure a Linux computer for network monitoring. The technician hasthe following information:
look at image:

After connecting the Linux computer to the mirror port on the switch, which of the following commands should the technician run on the Linux computer?

• ifconfig ecth0 promisc

• ifconfig eth1 up

• ifconfig eth0 10.1.2.3

• ifconfig eth1 hw ether A1:B2:C3:D4:E5:F6

Answer explanation

The ifconfig eth0 promisc command should be run on the Linux computer to enable promiscuous mode, which allows the computer to capture all network traffic passing through the switch mirror port. Reference: CompTIA Network+ Certification Study Guide, Chapter 7: Network Devices.

A network engineer is investigating reports of poor network performance. Upon reviewing a device configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following would be the MOST likely result of this finding?

• Increased CRC errors

• Increased giants and runts

• . Increased switching loops

• Increased device temperature

Answer explanation

Mismatched duplex settings can cause an increase in CRC errors, which are errorsin data transmission that can result in corrupted data. Reference: CompTIA Network+ Certification Study Guide, Chapter 4: Infrastructure.

Which of the following devices would be used to manage a corporate WLAN?

• A wireless NAS

• A wireless bridge

• . A wireless router

• A wireless controller

Answer explanation

A wireless controller is used to manage a corporate WLAN, providing centralized management and configuration of access points. Reference: CompTIA Network+ Certification Study Guide, Chapter 8: Wireless Networks.

Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

• . Layer 3 switch

• VPN headend

• Next-generation firewall

• Proxy server

• Intrusion prevention

Answer explanation

Next-generation firewalls can provide content filtering and threat protection, and can manage multiple IPSec site-to-site connections. Reference: CompTIA Network+ Certification Study Guide, Chapter 5: Network Security

An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both ends of the connection are configured for half duplex. Which of the following is the MOST likely cause of this issue?

• The link is improperly terminated

• One of the devices is misconfigured

• The cable length is excessive

• One of the devices has a hardware issue

Answer explanation

In a half-duplex link, devices can only send or receive data at one time, not simultaneously. Late collisions occur when devices transmit data at the same time after waiting for a clear channel. One of the causes of late collisions is excessive cable length, which increases the propagation delay and makes it harder for devices to detect collisions. The link termination, device configuration, and device hardware are not likely to cause late collisions on a half-duplex link.

A network administrator is configuring a load balancer for two systems. Which of the following must the administrator configure to ensure connectivity during a failover?

• VIP

• NAT

• APIPA

• IPv6 tunneling

• Broadcast IP

Answer explanation

A virtual IP (VIP) address must be configured to ensure connectivity during a failover. A VIP address is a single IP address that is assigned to a group of servers or network devices. When one device fails, traffic is automatically rerouted to the remaining devices, and the VIP address is reassigned to the backup device, allowing clients to continue to access the service without interruption.