Font size
WorksheetsCompTIA N+ (Q259 - Q332)
Total questions: 74
Worksheet time: 1hrs 14mins
A security engineer is trying to connect cameras to a 12-port PoE switch, but only eight cameras turn
on. Which of the following should the engineer check first?
Ethernet cable type
Voltage
Transceiver compatibility
DHCP addressing
Which of the following is the most secure way to provide site-to-site connectivity?
VXLAN
IKE
GRE
IPsec
A network engineer receives a vendor alert regarding a vulnerability in a router CPU. Which of the
following should the engineer do to resolve the issue?
Update the firmware.
Replace the system board.
Patch the OS.
Isolate the system
Which of the following network cables involves bounding light off of protective cladding?
Twinaxial
Coaxial
Single-mode
Multimode
Which of the following IP transmission types encrypts all of the transmitted data?
ESP
AH
GRE
UDP
TCP
A network administrator wants to increase network security by preventing client devices from
communicating directly with each other on the same subnet. Which of the following technologies
should be implemented?
ACL
Trunking
Port security
Private VLAN
A network administrator for a small office is adding a passive IDS to its network switch for the
purpose of inspecting network traffic. Which of the following should the administrator use?
SNMP trap
Port mirroring
Syslog collection
API integration
A network administrator wants users to be able to authenticate to the corporate network using a
port-based authentication framework when accessing both wired and wireless devices. Which of the
following is the best security feature to accomplish this task?
802.1X
Access control list
Port security
MAC filtering
A network administrator is planning to host a company application in the cloud, making the
application available for all internal and third-party users. Which of the following concepts describes
this arrangement?
Multitenancy
VPC
NFV
SaaS
Which of the following troubleshooting steps would provide a change advisory board with the
information needed to make a decision?
Identify the problem.
Develop a theory of probable cause.
Test the theory to determine cause.
Establish a plan of action.
Which of the following is the most likely benefit of installing server equipment in a rack?
Simplified troubleshooting process
Decreased power consumption
Improved network performance
Increased compute density
Which of the following is the best VPN to use for reducing data bandwidth requirements of the
corporate network?
Split-tunnel
Site-to-site
Full-tunnel client
GRE tunnel
Which of the following is the most closely associated with segmenting compute resources within a
single cloud account?
Network security group
laaS
VPC
Hybrid cloud
A company is expanding to another floor in the same building. The network engineer configures a
new switch with the same VLANs as the existing stack. When the network engineer connects the new
switch to the existing stack, all users lose connectivity. Which of the following is the MOST likely
reason?
The new switch has unused ports disabled
The new switch does not have a default gateway
The new switch is connected to an access port
The new switch is in a spanning tree loop
An organization wants better network visibility. The organization's requirements include:
Multivendor/OS-monitoring capabilities
Real-time collection
Data correlation
Which of the following meets these requirements?
SNMP
SIEM
Nmap
Syslog
A secure communication link needs to be configured between data centers via the internet. The data
centers are located in different regions. Which of the following is the best protocol for the network
administrator to use?
DCI
GRE
XVLAN
IPSec
A technician is designing a cloud service solution that will accommodate the company's current size,
compute capacity, and storage capacity. Which of the following cloud deployment models will fulfill
these requirements?
SaaS
PssS
IaaS
IaC
A network administrator configured a router interface as 10.0.0.95 255.255.255.240. The
administrator discovers that the router is not routing packets to a web server with IP 10.0.0.81/28.
Which of the following is the best explanation?
Theweb server Is In adifferent subnet.
Therouter interface isa broadcast address.
TheIP address spaceis a class A network
Thesubnet is in a private address space
Which of the following can also provide a security feature when implemented?
NAT
BGP
FHRP
EIGRP
A network administrator deploys several new desk phones and workstation cubicles. Each cubicle
has one assigned switchport. The administrator runs the following commands:
nginx
CopyEdit
switchport mode access
switchport voice vlan 69
With which of the following VLANs will the workstation traffic be tagged?
Private VLAN
Voice VLAN
Native VLAN
Data VLAN
A network administrator needs to connect a multimode fiber cable from the MDF to the server room.
The administrator connects the cable to Switch 2, but there is no link light. The administrator tests
the fiber and finds it does not have any issues. Swapping the connection to Switch 1 in a working port
is successful, but the swapped connection does not work on Switch 2. Which of the following should
the administrator verify next?
Fiber length
Transceiver model
Connector type
Port speed
A network technician is installing a new switch that does not support STP at the access layer of a
network. The technician wants a redundant connection to the distribution switch. Which of the
following should the technician use?
Link aggregation
Subinterfaces
Switch virtual interfaces
Half-duplex connections
Users are experiencing significant lag while connecting to a cloud-based application during peak
hours. An examination of the network reveals that the bandwidth is being heavily utilized. Further
analysis shows that only a few users are using the application at any given time. Which of the
following is the most cost-effective solution for this issue?
Limit the number of users who can access the application
Lease a Direct Connect connection to the cloud service provider.
Implement QoS to prioritize application traffic.
Use a CDN to service the application
Which of the following layers in the OSI model is responsible for establishing, maintaining, and
terminating connections between nodes?
Physical
Network
Session
Transport
Which of the following is the best way to reduce the likelihood of electrostatic discharge?
Uninterruptible power supply
Surge protector
Power distribution units
Temperature and humidity control
Which of the following can be used when a server at a remote site is physically unreachable?
OOB management
Crash cart
Jump box
Console
A network engineer is designing an internal network that needs to support both IPv4 and IPv6
routing. Which of the following routing protocols is capable of supporting both IPv4 and IPv6?
OSPFv3
RIPv2
BGP
EIGRP
A network engineer is deploying switches at a new remote office. The switches have been
preconfigured with hostnames and STP priority values. Based on the following table:
Switch Name
Priority
core-sw01
24576
access-sw01
28672
distribution-sw01
32768
access-sw02
36864
Which of the following switches will become the root bridge?
core-sw01
access-sw01
distribution-sw01
access-sw02
Which of the following is enforced through legislation?
AUP
GDPR
Code of conduct
EULA
A network administrator wants to restrict inbound traffic to allow only HTTPS to the company
website, denying all other inbound traffic from the internet. Which of the following would best
accomplish this goal?
ACL on the edge firewall
Port security on an access switch
Content filtering on a web gateway
URL filtering on an outbound proxy
Which of the following indicates a computer has reached end-of-support?
The computer does not have any users.
The antivirus protection is expired
The operating system license is expired
No more patches or bug fixes are available indefinitely
Which of the following source control features allows an administrator to test a new configuration
without changing the primary configuration?
Central repository
Conflict identification
Branching
Version control
A network engineer needs to add a boundary network to isolate and separate the internal network
from the public-facing internet. Which of the following security defense solutions would best
accomplish this task?
Trusted zones
URL filtering
ACLs
Screened subnet
Which of the following is the greatest advantage of maintaining a cold DR site compared to other DR
sites?
Redundancy
Availability
Security
Cost
Which of the following allows for interactive, secure remote management of a network
infrastructure device?
SSH
VNC
RDP
SNMP
A data center administrator is evaluating the use of jumbo frames within a storage environment.
Which of the following describes the best reason to use jumbo frames in the storage environment?
To reduce device overhead
To report on the current root switch in the STP
To improve routing convergence
To increase drive throughput
Which of the following should a company implement in order to share a single IP address among all
the employees in the office?
STP
BGP
PAT
VXLAN
Which of the following OSI model layers can utilize a connectionless protocol for data transmission?
Physical
Network
Transport
Application
A network engineer runs ipconfig and notices that the default gateway is 0.0.0.0. Which of the
following address types is in use?
APIPA
Multicast
Class C
Experimental
A network administrator needs to monitor data from recently installed firewalls in multiple locations.
Which of the following solutions would best meet the administrator's needs?
IDS
IPS
SIEM
SNMPv2
Which of the following allows a standard user to log in to multiple resources with one account?
RADIUS
MFA
TACASCS+
SSO
Which of the following should an installer orient a port-side exhaust to when installing equipment?
The patch panel
The front of the IDF
The warm aisle
The administrator console
Which of the following kinds of targeted attacks uses multiple computers or bots to request the same
resource repeatedly?
On-path
DDoS
ARP spoofing
MAC flooding
A network technician is troubleshooting the connection to the company website. The traceroute
command produces the following output:
Traceroute towww.mysite.com(8.8.8.8) over a maximum of 30 hops
10.1.1.1 <1 ms 2. * <1 ms <1 ms k k
k kTraceroute completeWhich of the following should the technician do to identify the path to the
server?
Review the router's ACL.
Execute netstat.
Perform an nslookup.
Enable LLDP
A technician is deploying new networking hardware for company branch offices. The bridge priority
must be properly set. Which of the following should the technician configure?
Spanning tree protocol
Jumbo frames
Perimeter network
Port security
Which of the following is the most cost-effective way to safely expand outlet capacity in an IDF?
PDU
Surge protector
UPS
Power strip
Which of the following ports is a secure protocol?
20
23
443
445
Which of the following connector types is most commonly associated with Wi-Fi antennas?
BNC
SFP
MPO
RJ45
A network technician is attempting to harden a commercial switch that was recently purchased.
Which of the following hardening techniques best mitigates the use of publicly available
information?
Changing the default password
Blocking inbound SSH connections
Removing the gateway from the network configuration
Restricting physical access to the switch
A network administrator upgraded the wireless access points and wants to implement a
configuration that will give users higher speed and less channel overlap based on device
compatibility. Which of the following will accomplish this goal?
802.1X
MIMO
ESSID
Band steering
An employee has a new laptop and reports slow performance when using the wireless network.
Switch firmware was updated the previous night. A network administrator logs in to the switch and
sees the following statistics on the switch interface for that employee:
98469 packets input, 1681937 bytes, 0 no buffer
Received 1548 broadcasts (25285 multicasts)
65335 runts, 0 giants, 0 throttles
11546 input errors, 5 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
22781 packets output, 858040 bytes, 0 underruns
0 output errors, 89920 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Which of the following is most likely the cause of the issue?
The patch cord from the wall jack is faulty.
The switchport bandwidth needs to be increased
Multicast is not configured correctly on the switch
The NIC is set to half duplex.
Which of the following uses the longest prefix match to determine an exit interface?
ARP table
MAC address table
Routing table
Netstat table
Which of the following is the best way to keep devices on during a loss of power?
UPS
Power load
PDU
Voltage
A major natural disaster strikes a company's headquarters, causing significant destruction and data
loss. The company needs to quickly recover and resume operations. Which of the following will a
network administrator need to do first?
Conduct a damage assessment
Migrate to the cold site
Notify customers of the disaster
Establish a communication plan
After installing a new wireless access point, an engineer tests the device and sees that it is not
performing at the rated speeds. Which of the following should the engineer do to troubleshoot the
issue? (Select two.)
Ensure a bottleneck is not coming from other devices on the network.
Install the latest firmware for the device
Create a new VLAN for the access point
Make sure the SSID is not longer than 16 characters
Configure the AP in autonomous mode
A junior network administrator is auditing the company network and notices incrementing input
errors on a long-range microwave interface. Which of the following is the most likely reason for the
errors?
The parabolic signal is misaligned
The omnidirectional signal is being jammed
The omnidirectional signal is not strong enough to receive properly.
The parabolic signal uses improper routing protocols
A network manager connects two switches together and uses two connecting links. Which of the
following configurations will prevent Layer 2 loops?
802.1Q tagging
Full duplex
Link aggregation
QoS
A network engineer is setting up a new VoIP network for a customer. The current network is
segmented only for computers and servers. No additional switchports can be used in the new
network. Which of the following does the engineer need to do to configure the network correctly?
(Select two).
Change network translation definitions
Enable 802.1Q
Implement a routing protocol
Set up voice VLANs
Reconfigure the DNS
A user reports having intermittent connectivity issues to the company network. The network
configuration for the user reveals the following:
IP address: 192.168.1.10
Subnet mask: 255.255.255.0
Default gateway: 192.168.1.254
The network switch shows the following ARP table: Which of the following is the most likely cause of the user's connection issues?
A port with incorrect VLAN assigned
A switch with spanning tree conflict
Another PC with manually configured IP
A router with overlapping route tables
Which of the following is associated with avoidance, acceptance, mitigation, and transfer?
Risk
Exploit
Threat
Vulnerability
Which of the following routing technologies uses an attribute list for path selection?
BGP
RIP
EIGRP
OSPF
Which of the following is the step that a troubleshooter should take immediately after implementing
a solution?
Review lessons learned during the process
Establish a plan of action
Verify full system functionality.
Document actions and outcomes.
Which of the following protocols uses the Dijkstra's Link State Algorithm to establish routes inside its
routing table?
OSPF
EIGRP
BGP
RIP
After a recent security awareness phishing campaign, the cybersecurity team discovers that
additional security measures need to be set up when users access potentially malicious websites.
Which of the following security measures will best address this concern?
Implement DNS filtering
Update ACLs to only allow HTTPS.
Configure new IPS hardware
Deploy 802.1X security features.
Which of the following offers the ability to manage access at the cloud VM instance?
Security group
Internet gateway
Direct Connect
Network ACL
A network administrator is creating a subnet that will include 45 separate hosts on a small private
network within a large network architecture. Which of the following options is the most efficient use
of network addresses when assigning this network?
10.0.50.128/25
10.7.142.128/27
10.152.4.192/26
10.192.1.64/28
A network engineer needs to deploy an access point at a remote office so that it will not communicate back to the wireless LAN controller. Which of the following deployment methods must
the engineer use to accomplish this task?
Lightweight
Autonomous
Mesh
Ad hoc
Which of the following is used to store and deliver content to clients in a geographically distributed
manner using edge servers?
Load balancer
CDN
DNS server
SAN
Which of the following ports should a network administrator enable for encrypted login to a network
switch?
22
23
80
123
Which of the following would allow a network administrator to analyze attacks coming from the
internet without affecting latency?
IPS
IDS
Load balancer
Firewall
A network engineer needs to change, update, and control APs remotely, with real-time visibility over
HTTPS. Which of the following will best allow these actions?
Web interface
Command line
SNMP console
API gateway
A detective is investigating an identity theft case in which the target had an RFID-protected payment
card issued and compromised in the same day. The only place the target claims to have used the card
was at a local convenience store. The detective notices a video camera at the store is placed in such a
way that customers' credentials can be seen when they pay. Which of the following best explains this
social engineering technique?
Shoulder surfing
Impersonation
Vishing
Tailgating
A user called the help desk after business hours to complain that files on a device are inaccessible
and the wallpaper was changed. The network administrator thinks that this issue is an isolated
incident, but the security analyst thinks the issue might be a ransomware attack. Which of the
following troubleshooting steps should be taken first?
Identify the problem
Establish a theory
Document findings
Create a plan of action
A network technician is designing a LAN for a new facility. The company is expecting more than 300
devices to connect to the network. Which of the following masks will provide the most efficient
subnet?
255.255.0.0
255.255.192.0
255.255.254.0
255.255.255.254
