wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

CompTIA N+ N10 009 Additional Questions

Total questions: 115

Worksheet time: 59mins

Name
Class
Date
1.

An administrator enables DNS filtering on the firewall to block users from visiting malicious websites. Which of the following should the administrator also do? (Choose two.)

a)

Disable DoH in users’ internet browsers.

b)

Update NS record to point to DNS filter servers.

c)

Block port 443 to the malicious websites

d)

Block port 53 to servers on the internet.

e)

Disable TLS v1.3 in users’ internet browsers.

2.

A company's office has publicly accessible meeting rooms equipped with network ports. A recent audit revealed that visitors were able to access the corporate network by plugging personal laptops into open network ports. Which of the following should the company implement to prevent this in the future?

a)

URL filters

b)

VPN

c)

ACLs

d)

NAC

3.

A network administrator is conducting an assessment and found network devices that do not meet standards. Which of the following configurations is considered a set of rules that devices should adhere to?

a)

Production

b)

Backup

c)

Candidate

d)

Golden

4.

A network administrator is concerned with on-path attacks and wants to provide encryption of fully qualified domain names in outbound communications. Which of the following best describes the protocol that provides the proper security layer for internet communication?

a)

SSL

b)

DoH

c)

TLS

d)

DNSSEC

5.

A network technician notices a device is at EOL. For which of the following should the technician plan?

a)

Retrofitting

b)

Decommissioning

c)

Restarting

d)

Upgrading

6.

Which of the following facilities is the best example of a warm site in the event of information system disruption?

a)

A combination of public and private loud services to restore data

b)

A partial infrastructure, software, and data on site

c)

A full electrical infrastructure in place, but no customer devices on site

d)

A full infrastructure in place, but no current data on site

7.

Which of the following protocols allows automatic routing failover for an active-passive firewall pair?

a)

EIGRP

b)

OSPF

c)

VRRP

d)

BGP

8.

Which of the following can help prevent unauthorized modifications to hardware when designing an MDF closet?

a)

Lockable cabinets

b)

Uninterruptable power supply

c)

Port security

d)

Microsegmentation

9.

After installing a new 6E wireless router in a small office, a technician notices that some wireless devices are not able to achieve the rated speeds. Which of the following should the technician check to troubleshoot the issue? (Choose two.)

a)

Client device compatibility

b)

Back-end cabling

c)

Weather phenomena

d)

Voltage source requirements

e)

Interference levels

10.

Which of the following best represents north-south traffic?

a)

A connection between a computer and a public web server

b)

Data moving between a data center and a DR site

c)

Traffic between a production server and a backup server

d)

Routing updates between OSPF routers


11.

The network engineering team needs to implement a wireless network within two separate buildings. Once the network is set up, users will need to authenticate using RADIUS in order to access internal resources. Which of the following wireless technologies should the team implement?

a)

Mesh

b)

Enterprise

c)

Ad hoc

d)

Point to point

12.

Which of the following are benefits of implementing MFA and SSO in an enterprise environment? (Choose two.)

a)

Eliminating the number of password resets

b)

Centralizing user account management activities

c)

Adding an extra layer of security against compromised credentials

d)

Reducing the overhead of security tokens

e)

Enforcing conditional access policies

13.

Users report connectivity issues after a network switch is replaced. There are three separate subnets for users, voice, and servers. The users cannot reach the resources in the server subnet. Upon investigation, a separate voice switch has thousands of discarded packets, but no users report issues making or receiving calls. Which of the following is most likely the issue?

a)

Incorrect cable

b)

Port administratively disabled

c)

VLAN misconfiguration

d)

Duplex setting

14.

A junior network administrator gets a text message from a number posing as the domain registrar of the firm. The administrator is tricked into providing global administrator credentials. Which of the following attacks is taking place?

a)

DNS poisoning

b)

ARP spoofing

c)

Vishing

d)

Smishing

15.

A tourist attempts to access an online banking site on a mobile device while in a public place. Which of the following is the tourist most likely to experience?

a)

Vishing

b)

Tailgating

c)

Shoulder surfing

d)

Peripheral attack

16.

A network administrator needs to disable all inbound and outbound telnet traffic in the network. Which of the following ports should the administrator disable?

a)

23

b)

53

c)

123

d)

443

17.

Several users report poor performance when accessing shared drives on a file server named Filed. While troubleshooting the issue, the network administrator swaps the Ethernet connections between File01 and another server named File02. Shortly thereafter, users report issues with File02, but Filed is no longer an issue. Which of the following is most likely impacting performance?

a)

Port security

b)

Speed/duplex mismatch

c)

PoE power budget reduction

d)

Keep-alive beacon failure

18.

A data center administrator is evaluating the use of jumbo frames within a storage environment. Which of the following describes the best reason to use jumbo frames in the storage environment?

a)

To reduce device overhead

b)

To report on the current root switch in the STP

c)

To improve routing convergence

d)

To increase drive throughput

19.

Which of the following cloud deployment models is most commonly associated with multitenancy and is generally offered by a service provider?

a)

Private

b)

Community

c)

Public

d)

Hybrid

20.

A network administrator needs to efficiently deploy 200 systems using RFC1918 addresses. Which of the following networks should the administrator use?

a)

10.10.10.0/8

b)

150.200.1.0/24

c)

192.168.1.0/24

d)

254.169.0.0/24

21.

While conducting a network audit, an administrator notices the spanning tree root in VLAN 300 does not match the configuration baseline, which could cause network outages due to spanning tree update failures. Which of the following should the administrator do to restore consistency?

a)

Change the designated port on the misconfigured switch to a root port.

b)

Change the root port to a listening port on the misconfigured switch.

c)

Change the blocked port of the misconfigured switch to a learning port.

d)

Increase the bridge ID/priority on the misconfigured switch.

22.

Which of the following architecture types is most commonly associated with east-west traffic?

a)

Colocated VMs

b)

Hybrid cloud

c)

Client-server

d)

Hub and spoke

23.

Which of the following actions happen during the first step of the troubleshooting methodology? (Choose two.)

a)

Question the obvious.

b)

Divide and conquer.

c)

Identify symptoms.

d)

Establish a theory.

e)

Question users.

24.

A network administrator determines that some switch ports have more errors present than expected. The administrator traces the cabling associated with these ports. Which of the following would most likely be causing the errors?

a)

Shielded conduit

b)

Plenum spaces

c)

Voltage transformers

d)

Hydraulic lifts

25.

Which of the following will most likely allow a network administrator to work with current data after a disaster?

a)

Review backup tapes.

b)

Recover from cloud storage.

c)

Fail over to a hot site.

d)

Restore from a snapshot.

26.

A network technician is attempting to map networking devices. When logged in to the local switch, the technician uses LLDP and discovers only those devices that are connected directly to the switch. Which of the following should the technician perform to discover all the networking devices?

a)

Reconfigure the management IP addresses of the networking devices on the same subnet.

b)

Enable Spanning Tree Protocol to allow the switches on the network to be discovered.

c)

Log in to each of the connected networking devices and perform the process again.

d)

Upgrade the OS on the networking devices to the current version of LLDP.

27.

Which of the following is a location where a plenum cable is recommended?

a)

Frequently traveled areas

b)

Outdoor environments

c)

Inside conduits

d)

Airspaces above a ceiling

28.

A network administrator is performing a refresh of a wireless environment. As the APs are being placed, they overlap a little bit with each other. Which of the following 2.4GHz channels should be selected to ensure that they do not conflict?

a)

1, 3, 5

b)

1, 6, 11

c)

2, 6, 10

d)

3, 6, 9

29.

Application software systems can no longer receive updates and security patches, and continuing to use the application software might expose the system to attacks. Which of the following best describes this scenario?

a)

SLA

b)

Licensing

c)

SIEM

d)

EOL

30.

Which of the following technologies uses a VIP to provide gateway redundancy between two routers?

a)

LACP

b)

PAT

c)

FHRP

d)

BGP

31.

A network administrator is setting up a firewall to protect the organization's network from external threats. Which of the following should the administrator consider first when configuring the firewall?

a)

Required ports, protocols, and services

b)

Inclusion of a deny all rule

c)

VPN access

d)

Outbound access originating from customer-facing servers

32.

A VoIP phone powers up, but it is unable to receive or place calls. After connecting to another switchport, the issue is resolved. Which of the following was most likely the issue with the previous port?

a)

The port had a half-duplex configuration.

b)

The port was in an error-disabled state.

c)

The port had an incorrect VLAN assignment.

d)

The port exceeded its PoE budget.

33.

Which of the following technologies is most appropriate for a business that requires high-speed access to frequently used web content, such as images and videos?

a)

CDN

b)

SAN

c)

Firewall

d)

Switch

34.

Which of the following should be included in an SLA?

a)

Patches and bug fixes

b)

Licensing

c)

Inventory management

d)

Stakeholders

35.

A network administrator thinks a change was made to mail servers at comptia.org. Which of the following should the administrator execute to verify the change?

b)

dig comptia.org ANY

c)

nslookup -type=ns coir.ptia.org

d)

tracert comptia.org

36.

A network administrator installs new cabling to connect new computers and access points. After deploying the equipment, the administrator notices a few of the devices are not connecting properly. The administrator moves the devices to a different port, but it does not resolve the issue. Which of the following should the administrator verify next?

a)

Power budget

b)

Device requirements

c)

Port status

d)

Cable termination

37.

A server administrator deploys a new web server with an IP address of 192.168.16.100. The security policy dictates that all non-secure connection methods should be blocked. Which of the following security rules will satisfy the request without prohibiting other traffic?

a)

Deny any 192.168.16.0 255.255.255.0 80

b)

Deny 192.168.16.100 255.255.255.255 any

c)

Deny any 192.168.16.100 255.255.255.255 80

d)

Permit any 192.168.16.100 255.255.255.255 80

e)

Permit 192.168.16.100 255.255.255.255 any

38.

A newly opened retail shop uses a combination of new tablets, PCs, printers, and legacy card readers. Which of the following wireless encryption types is the most secure and compatible?

a)

WPA3

b)

WPA2

c)

WPA2 / WPA3 mixed mode

d)

WPA / WPA2 mixed mode

39.

A technician is troubleshooting wireless connectivity near a break room. Whenever a user turns on the microwave, connectivity to the user's laptop is lost. Which of the following frequency bands is the laptop most likely using?

a)

2.4GHz

b)

5GHz

c)

6GHz

d)

900MHz

40.

Which of the following would allow a network administrator to remotely access a secure subnet from a shared, secure workstation?

a)

Enable SSH through the firewall.

b)

Dial into an in-band modem.

c)

Connect through a jump host.

d)

Configure a site-to-site VPN.

41.

A network administrator is creating a subnet that will include 45 separate hosts on a small private network within a large network architecture. Which of the following options is the most efficient use of network addresses when assigning this network?

a)

10.0.50.128/25

b)

10.7.142.128/27

c)

10.152.4.192/26

d)

10.192.1.64/28

42.

Which of the following protocols is commonly associated with TCP port 443?

a)

Telnet

b)

SMTP

c)

HTTPS

d)

SNMP

43.

After a networking intern plugged in a switch, a significant number of the users in a building lost connectivity. Which of the following is the most likely root cause?

a)

VTP update

b)

Port security issue

c)

LLDP misconfiguration

d)

Native VLAN mismatch

44.

A technician wants to experiment with NAC in a wireless environment. Which of the following NAC techniques should be implemented for wireless networking if ease of implementation is the most important factor?

a)

Port security

b)

EAPoL

c)

802.1X

d)

MAC filtering

45.

A network administrator received complaints of intermittent network connectivity issues. The administrator investigates and finds that the network design contains potential loop scenarios. Which of the following should the administrator do?

a)

Enable spanning tree.

b)

Configure port security.

c)

Change switch port speed limits.

d)

Enforce 802.1Q tagging.

46.

A network administrator wants to update a geofencing policy to limit access to the corporate network based on location. Which of the following will the administrator most likely leverage?

a)

MAC filtering

b)

Administrative distance

c)

Bluetooth beacon signals

d)

IP address blocks

47.

An organization is concerned about rogue devices connecting to the network and wants the network team to implement a solution. Which of the following types of filtering should the network team use to address this concern?

a)

MAC

b)

Content

c)

URL

d)

IP

48.

A network administrator is redesigning a wireless network in which corporate and guest users share a single SSID that is configured with WPA2 PSK. Which of the following capabilities should be configured in order to improve security? (Choose two.)

a)

Wi-Fi Protected Access

b)

New SSID for contractors

c)

Password authentication

d)

Wired Equivalent Privacy

e)

Captive portal

49.

Which of the following will resolve the issue?

a)

Set up link aggregation between Switch A and Switch B on Gi0/9 and Gi0/10.

b)

Configure spanning tree on Switch A and Switch B.

c)

Establish a trunk connection between Switch A and Switch B.

d)

Put Computer A and Computer B in the same /24 subnet.

50.

Which of the following most directly secures sensitive information on a network?

a)

Data-in-transit encryption

b)

Principle of least privilege

c)

Role-based access controls

d)

Multifactor authentication

51.

A user is unable to reach a website and wants to verify its IP information. Which of the following tools is used to resolve the authoritative server to its FQDN?

a)

ipconfig

b)

arp

c)

nslookup

d)

ping

52.

Which of the following routing technologies uses a successor and a feasible successor?

a)

IS-IS

b)

OSPF

c)

BGP

d)

EIGRP

53.

Users in one building on the campus network report very slow network access. A network technician logs in to the router to see if there are any errors associated with traffic to and from that particular building. Which of the following commands will the technician most likely run?

a)

show arp

b)

show config

c)

show route

d)

show interface

54.

Which of the following actions should be taken as part of the first step of the troubleshooting methodology?

a)

Conduct tests to verify ideas

b)

Handle multiple problems individually.

c)

Create a theory about the possible root cause.

d)

Use a top-down approach.

55.

After extremely high temperatures cause a power outage, the servers automatically shut down, even though the UPSs for the servers still have hours of battery life. Which of the following should a technician recommend?

a)

Include backup power for air-conditioning units.

b)

Configure door locks to automatically lock during power outages.

c)

Increase UPS battery size.

d)

Add an IoT-enabled thermostat.

56.

While deploying a new fleet of computers on a DHCP network, a network administrator notices that new computers cannot connect to the internet. Which of the following is most likely the problem?

a)

Incorrect default gateway

b)

Address pool exhaustion

c)

Duplicate IP address

d)

Incorrect subnet mask

57.

A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10Gb connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

a)

Port mirroring

b)

Log aggregation

c)

Flow data

d)

Packet capture

58.

A technician is alarmed after noticing more than 5,000 CRCs on a switchport. Which of the following should the technician do next?

a)

Move to a different switchport.

b)

Check for errdisable,

c)

Swap out the patch cable.

d)

Enable class-of-service.

59.

A network administrator needs to deploy a new wireless solution at a customer site. All external users must provide credentials before being granted access to the wireless solution. Which of the following would best meet the requirements of this installation?

a)

Adjust the bands to be non-overlapping.

b)

Set up lightweight access points.

c)

Enable enterprise authentication.

d)

Add a captive portal for the guest network.

60.

Which of the following best describes what an organization would use port address translation for?

a)

VLANs on the perimeter

b)

Public address on the perimeter router

c)

Non-routable address on the perimeter router

d)

Servers on the perimeter

61.

A systems administrator installs multiple web servers and intends to use the First Hop Redundancy Protocol to control routing to the servers. Which of the following types of IP addresses should the administrator use to support this routing approach?

a)

Virtual

b)

Gateway

c)

Static

d)

Dynamic

62.

Which of the following should a junior security administrator recommend implementing to mitigate malicious network activity?

a)

IPS

b)

Honeypot

c)

SIEM

d)

VPN

63.

A company uses a solution to rotate the password that engineers use to connect to critical systems. Which of the following best describes this solution?

a)

Network access control

b)

TACACS+

c)

Key management

d)

Multifactor authentication

64.

After installing a new wireless access point, an engineer tests the device and sees that it is not performing at the rated speeds. Which of the following should the engineer do to troubleshoot the issue? (Choose two.)

a)

Ensure a bottleneck is not coming from other devices on the network.

b)

Install the latest firmware for the device.

c)

Create a new VLAN for the access point.

d)

Make sure the SSID is not longer than 16 characters.

e)

Configure the AP in autonomous mode.

65.

A network administrator needs to securely connect to an Ubuntu server for management purposes. Which of the following protocols will most likely address this requirement?

a)

HTTPS

b)

SFTP

c)

RDP

d)

SSH

66.

Which of the following cable types provides the highest possible transmission speed?

a)

Plenum

b)

Ethernet

c)

Fiber-optic

d)

DAC

67.

Which of the following describes a malicious application that takes advantage of a software flaw?

a)

Risk

b)

Vulnerability

c)

Exploit

d)

Threat

68.

Which of the following describes the capability of a cloud service to adjust resources on demand?

a)

Elasticity

b)

Multitenancy

c)

Containers

d)

Scalability


69.

A company’s Chief Information Security Officer requires that servers and firewalls have accurate time stamps when creating log files so that security analysts can correlate events during incident investigations. Which of the following should be implemented?

a)

Syslog server

b)

SMTP

c)

NTP

d)

SNMP

70.

A new backup system takes too long to copy files to the new SAN each night. A network administrator makes a simple change to the network and the devices to decrease backup times. Which of the following does the network administrator change?

a)

QoS

b)

SDN

c)

MTU

d)

VXLAN

e)

TTL

71.

Which of the following layers of the OSI model is responsible for end-to-end encryption?

a)

Presentation

b)

Application

c)

Session

d)

Transport

72.

Users are experiencing significant lag while connecting to a cloud-based application during peak hours. An examination of the network reveals that the bandwidth is being heavily utilized. Further analysis shows that only a few users are using the application at any given time. Which of the following is the most cost-effective solution for this issue?

a)

Limit the number of users who can access the application.

b)

Lease a Direct Connect connection to the cloud service provider.

c)

Implement QoS to prioritize application traffic.

d)

Use a CDN to service the application.

73.

Users in a company report that after walking from one room to another, wireless connectivity is lost. The SSID is available, but the users have to manually reconnect every time they change rooms. Which of the following is most likely the cause of this issue?

a)

Each room has wireless interference.

b)

There is poor wireless coverage.

c)

MAC filtering is applied in the WLAN.

d)

Roaming configuration is disabled.

74.

A network security administrator needs to monitor the contents of data sent between a secure network and the rest of the company. Which of the following monitoring methods will accomplish this task?

a)

Port mirroring

b)

Flow data

c)

Syslog entries

d)

SNMP traps

75.

Which of the following does a full-tunnel VPN provide?

a)

Lower bandwidth requirements

b)

The ability to reset local computer passwords

c)

Corporate inspection of all network traffic

d)

Access to blocked sites

76.

Which of the following does a hash provide?

a)

Non-repudiation

b)

Integrity

c)

Confidentiality

d)

Availability

77.

Which of the following routing technologies uses unequal cost load balancing and port 88?

a)

EIGRP

b)

BGP

c)

RIP

d)

OSPF

78.

Which of the following network topologies involves sending all traffic through a single point?

a)

Mesh

b)

Hybrid

c)

Hub-and-spoke

d)

Point-to-point

79.

Which of the following functions is used to prioritize network traffic based on the type of traffic?

a)

QoS

b)

VPN

c)

CDN

d)

TTL

80.

Which of the following does OSPF use to communicate routing updates?

a)

Unicast

b)

Anycast

c)

Multicast

d)

Broadcast

81.

A network administrator logs on to a router and sees an interface with an IP address of 10.61.52.34 255.255.255.252. Which of the following best describes how this interface IP address is being used?

a)

As a point-to-point connection

b)

To connect to the internet

c)

As a virtual address for redundancy

d)

For out-of-band management

82.

A network administrator is troubleshooting an application issue after a firewall change. The administrator has confirmed that the port and protocol are accessible to the user, but the application is still having issues. Which of the following tools allows the administrator to look at traffic on the application layer of the OSI model?

a)

ifconfig

b)

tcpdump

c)

nslookup

d)

traceroute

83.

Which of the following diagrams would most likely include specifications about fiber connector types?

a)

Logical

b)

Physical

c)

Rack

d)

Routing

84.

Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?

a)

To encrypt sensitive data in transit

b)

To secure the endpoints

c)

To maintain contractual agreements

d)

To comply with data retention requirements

85.

A customer lost the connection to the telephone system. The administration console is configured with multiple network interfaces and is connected to multiple switches. The network administrator troubleshoots and verifies the following:

The support team is able to connect remotely to the administration console.

Rebooting the switch shows solid link and activity lights even on unused ports.

Rebooting the telephone system does not bring the system back online.

The console is able to connect directly to individual modules successfully.

Which of the following is the most likely reason the customer lost the connection?

a)

A switch failed.

b)

The console software needs to be reinstalled

c)

The cables to the modules need to be replaced.

d)

A module failed.

86.

A network administrator needs to connect two network closets that are 492ft (150m) away from each other. Which of the following cable types should the administrator install between the closets?

a)

Single-mode fiber

b)

Coaxial

c)

DAC

d)

STP

87.

A technician is troubleshooting a user's laptop that is unable to connect to a corporate server. The technician thinks the issue pertains to routing. Which of the following commands should the technician use to identify the issue?

a)

tcpdump

b)

dig

c)

tracert

d)

arp

88.

A small business is deploying new phones, and some of the phones have full HD videoconferencing features. The Chief Information Officer is concerned that the network might not be able to handle the traffic if the traffic reaches a certain threshold. Which of the following can the network engineer configure to help ease these concerns?

a)

A VLAN with 100Mbps speed limits

b)

An IP helper to direct VoIP traffic

c)

A smaller subnet mask

d)

Full duplex on all user ports

89.

A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

a)

A separate scope for the file server using a /32 subnet

b)

A reservation for the server based on the MAC address

c)

A static IP address within the DHCP IP range

d)

A SLAAC for the server

90.

An office is experiencing intermittent connection issues. A network engineer identifies that the issue occurs whenever someone uses the fax machine that is connected to a switch. Which of the following should the engineer do first to resolve the issue?

a)

Run a new Cat 5 line.

b)

Enable 802.1Q tagging

c)

Change the MTU.

d)

Configure a VLAN.

91.

A manager is evaluating the environmental design of a data center. Which of the following setups should the manager implement if the maximum thermal dissipation is the highest concern?

a)

A blue-green

b)

A hot-cold

c)

An east-west

d)

An active-passive

92.

A network rack has four servers and four switches with dual power supplies. Only one intelligent PDU is installed in the rack. Which of the following is the reason to add a second PDU?

a)

Power redundancy

b)

Failed PSU monitoring

c)

Surge protection

d)

Electricity conservation

93.

A network engineer is troubleshooting an issue with a VoIP network. After performing analysis, the engineer found that when users upload large files, voice quality is severely degraded. When no other traffic is on the network, voice quality is fine. Which of the following should the engineer do to most likely resolve the issue?

a)

Enable MAC filtering.

b)

Reduce the VLAN database.

c)

Configure QoS on the router.

d)

Implement ACLs.

94.

A network administrator needs to improve network monitoring. Which of the following should the administrator do first?

a)

Establish baseline metrics.

b)

Implement a SIEM.

c)

Perform regular packet captures.

d)

Conduct availability monitoring.

95.

Which of the following configurations exempts traffic to the internet from traversing a VPN?

a)

Client-to-site

b)

Active-passive

c)

Split-tunnel

d)

Out-of-band

96.

An administrator is evaluating the use of authentication within SNMP. Which of the following is the most secure way of authenticating devices using only SNMP?

a)

Use version 1 of SNMP and use a community string to serve as a PSK

b)

Use version 3 of SNMP and set up trap messages for critical events on the network

c)

Use version 2c of SNMP and use informs to validate device authentication

d)

Use version 2u of SNMP to authenticate devices for network monitoring

97.

Cloud computing has the capability to meet increased and decreased demands for computing infrastructure for a short period of time. Which of the following best describes this characteristic?

a)

Efficiency

b)

Elasticity

c)

Multitenancy

d)

Scalability

98.

Which of the following is most likely to work with an FC connection and offers more scalability?

a)

DAS

b)

SAN

c)

SSE

d)

NAS

99.

A company is moving to a hybrid cloud model. As part of this move the mail server will be moved to the cloud. The systems administrator needs to ensure the mail server continues to receive email. Which of the following types of DNS records should the systems administrator update?

a)

NS

b)

PTR

c)

MX

d)

A

100.

A network administrator is expanding a network and wants to ensure no unauthorized redundant links are present. Which of the following should the administrator use to identify and block redundant links?

a)

SDN

b)

STP

c)

LLDP

d)

OSPF

101.

A company recently acquired a number of sites and no documentation was provided. A network administrator needs to identify and document all of the digital assets in use. Which of the following is the best method for the administrator to use?

a)

Availability monitoring

b)

Packet capture

c)

Physical inventory

d)

Network discovery

102.

A new server is deployed in a trusted zone and is validated to be online with all appropriate services running. However, users in a perimeter network cannot access the server. Which of the following should a network administrator do to resolve the reported issue?

a)

Create a TXT record on the DNS server for the new server.

b)

Update the firewall ACL to allow access to the new server.

c)

Configure a static route for the user VLAN to the new server.

d)

Insert a static ARP entry for the new server on the Layer 3 switch.

103.

A network engineer wants to implement a solution where all web servers will send event data over port 514. Which of the following services will accomplish this task?

a)

Syslog

b)

SMTP

c)

DNS

d)

DHCP

104.

A security administrator wants to discover zero-day attacks before they can be used on the company’s network. Which of the following can the administrator use to accomplish this task?

a)

Central repository

b)

Honeypot

c)

Next-generation firewall

d)

Evil twin

105.

A network administrator is trying to locate the switch interface a PC is connected to. The administrator accesses the local switch, pings the PC IP address, and then uses the command show arp. Which of the following commands should the administrator use next?

a)

show route

b)

show mac-address-table

c)

show vlan

d)

show interface

106.

Which of the following types of routes will take precedence when building a routing table for a given subnet?

a)

Static

b)

BGP

c)

OSPF

d)

Default

107.

Which of the following would an adversary do while conducting an evil twin attack?

a)

Trick users into using an AP witTrick users into using an AP with an SSID that is identical to a legitimate network.h an SSID that is identical to a legitimate network.

b)

Manipulate address resolution to point devices to a malicious endpoint.

c)

Present an identical MAC to gain unauthorized access to network resources.

d)

Capture data in transit between two legitimate endpoints to steal data.

108.

A network administrator is troubleshooting a connection between two switches that is experiencing intermittent errors. The administrator needs to determine which port on the remote switch the faulty cable is connected to. Which of the following is the best tool to use to identify the error?

a)

tracert

b)

LLDP run

c)

nmap

d)

ping

109.

Which of the following is a difference between EOL and EOS?

a)

EOL discontinues the product but may offer support.

b)

EOS replaces free support with a subscription model.

c)

EOS only applies to physical products.

d)

EOL still guarantees warranty service.

110.

A small coffee shop wants to set up multiple 2.4GHz wireless access points. The access points will support a large number of users, and the network technician wants to mitigate interference as much as possible. Which of the following is the number of 22MHz channels that the equipment can support?

a)

1

b)

2

c)

3

d)

4

111.

Which of the following are the main differences between ESP and AH? (Choose two.)

a)

AH provides confidentiality through the use of encryption.

b)

ESP provides authentication for IP headers and their payloads.

c)

ESP provides confidentiality through the use of encryption.

d)

AH provides authentication for IP headers and their payloads.

e)

AH provides data origin authorization over shared secret.

112.

Which of the following is the most likely function to be decremented when a tool is used to measure the distance between two locations on the internet?

a)

GRE

b)

TTL

c)

VPN

d)

QoS

113.

A network engineer implements a 192.168.100.0/25 subnet for a building without obtaining sizing requirements. It is later determined that the building will house 700 people. Which of the following subnet masks will most efficiently support that number of people?

a)

255.255.252.0

b)

255.255.254.0

c)

255.255.255.0

d)

255.255.255.128

114.

A company is building a new campus that will have wired and wireless devices. The network will be designed to support casual internet usage for guests and break rooms for employees. Which of the following authentication methods is best suited for guests given the requirements of this scenario?

a)

ESP

b)

PSK

c)

WPA

d)

IKE

115.

Following the troubleshooting methodology, a technician implements a solution that resolves the reported issue. Which of the following should the technician do next?

a)

Document the findings.

b)

Create a plan of action.

c)

Establish a theory.

d)

Identify the problem.