Font size
WorksheetsNet+ Final Review
Total questions: 108
Worksheet time: 56mins
A network technician has just verified the user’s issue. According to CompTIA’s troubleshooting methodology, what should the technician do next?
Document the findings and solution
Establish a theory of probable cause
Implement preventive measures
Escalate the issue to a higher tier
Multiple compromised computers under remote control are used to perform a coordinated DDoS attack. What is this network of systems called?
Trojan farm
Command cluster
Zombie hub
Botnet
Which protocol is responsible for encrypting communications within HTTPS?
SSL
IPsec
TLS
SSH
You need a subnet that supports at least 260 usable hosts. Which network fits this requirement?
192.168.1.0/24
192.168.1.0/25
192.168.1.0/23
192.168.1.0/26
A company needs a disaster recovery site that is fully equipped with hardware, software, and data replication ready for immediate use. Which site type should they use?
Hot site
Cold site
Warm site
Hybrid site
Which best describes the purpose of Private VLANs (PVLANs)?
To allow multiple VLANs to share the same subnet
To isolate devices within the same VLAN for security
To extend VLANs across multiple switches
To tag VLAN traffic across trunk links
One user is redirected to an unexpected website when typing a familiar URL, while others are unaffected. What is the most likely cause?
DNS cache poisoning
ARP spoofing attack
Browser proxy misconfiguration
Incorrect hosts file entry
What is a heat map used for in wireless networking?
To identify areas of overlapping IP address ranges
To visualize wireless signal coverage and strength
To show CPU temperatures of network devices
To display bandwidth utilization across a WAN
What does the Recovery Point Objective (RPO) define?
The maximum time it takes to recover a system
The acceptable amount of data loss measured in time
The frequency of incremental backups
The order in which systems are restored
A 2.4 GHz wireless network experiences interference from nearby industrial equipment. What two actions could reduce interference?
Switch to 5 GHz frequency or use non-overlapping 2.4 GHz channels
Replace APs with fiber uplinks
Disable SSID broadcasting or shorten beacon intervals
Increase transmit power or use overlapping channels
What does the Encapsulating Security Payload (ESP) component of IPsec provide?
Only authentication
Only encryption
Encryption, integrity, and authentication
Compression and tunneling only
Why would an administrator temporarily reduce the TTL (Time To Live) of a DNS record before changing an MX record?
To prevent DNS caching errors and speed up propagation
To reduce latency for DNS lookups
To improve load balancing across mail servers
To force DNS servers to switch to IPv6
When configuring SNMP, what is the role of a Management Information Base (MIB)?
Stores user credentials for SNMP authentication
Encrypts SNMP messages between devices
Collects raw network statistics
Contains definitions of network objects and events
A user cannot connect to the network. You confirm that all cables are properly connected, but there are no activity lights on either the NIC or the switchport. What is the most likely issue?
DHCP server is offline
The switchport is administratively shut down
The NIC driver is outdated
The cable is a crossover instead of straight-through
A network administrator is implementing a software-defined WAN (SD-WAN) solution to connect multiple branch offices. Which of the following BEST describes a primary benefit of using SD-WAN compared to traditional WAN technologies?
It requires only dedicated MPLS circuits for reliable performance
It centralizes control and allows dynamic path selection based on real-time conditions
It eliminates the need for encryption across WAN links
It uses static routing to simplify configuration at branch sites
When designing a new server room rack, which two measurements are important to consider?
Server height (U) and switch depth
Cable color and server voltage
Switch width and rack airflow direction
UPS wattage and grounding cable gauge
Why would a network engineer tag voice traffic on a switch?
To encrypt VoIP data
To prioritize voice packets for QoS
To block voice packets from other VLANs
To compress voice packets for bandwidth efficiency
What is the goal of a MAC flooding attack?
Overload the DHCP pool with requests
Disable VLAN tagging on a trunk
Capture DNS queries between clients and servers
Flood the switch’s MAC table to force broadcast forwarding
Why are Network Time Protocol (NTP) servers important?
They synchronize system clocks across network devices
They monitor latency between routers
They manage DNS resolution
They encrypt log transmissions
Which routing protocol uses an Autonomous System Number (ASN)?
OSPF
EIGRP
RIP
BGP
Two routers need to connect in a point-to-point (PTP) configuration. Which subnet mask is best?
/24
/30
/27
/29
Why would an organization implement a Hybrid Cloud deployment?
To completely eliminate on-premises hardware
To combine private and public resources for flexibility
To reduce all security requirements
To outsource all network functions
What is the primary purpose of the tracert command?
Test DNS name resolution
Display MAC address table entries
Identify the path packets take to a destination
Measure available bandwidth on a link
Which fiber connector type is commonly used with network interface cards (NICs)?
ST
LC
SC
RJ-45
A computer shows IP address 169.254.12.15/16 and cannot reach the Internet. What is the most likely issue?
DHCP server offline or unreachable
DNS cache corruption
Incorrect default gateway
Duplicate IP conflict
While troubleshooting a fiber-optic connection, a network technician suspects that the transmit (TX) and receive (RX) fibers may be crossed. What should the technician do first to verify and correct the issue?
Replace the fiber connectors with new ones
Reverse the TX and RX fibers at one end of the connection
Run an optical time-domain reflectometer (OTDR) test
Clean the fiber ends and test again
What is a primary feature of a full-tunnel VPN?
Routes only company traffic through the VPN
Allows simultaneous direct Internet and VPN access
Routes all user data through the company network
Encrypts only VoIP packets
Which routing protocol has a default administrative distance (AD) of 90?
RIP
OSPF
BGP
EIGRP
What is the main cost-effective advantage of using a split-tunnel VPN configuration?
It reduces bandwidth usage by allowing direct Internet access
It encrypts all user traffic through the corporate network
It provides the highest level of packet inspection
It blocks local network communication when VPN is active
What are the three core services provided by the RADIUS protocol?
Identification, Isolation, and Inspection
Authentication, Authorization, and Accounting
Allocation, Access, and Assignment
Encryption, Encoding, and Evaluation
Which regulation governs the security and handling of personal data in the European Union?
HIPAA
SOX
GDPR
CCPA
Which command gives you this output?
tracert
ipconfig
nslookup
dig
Which type of attack could result in duplicate IP addresses and network instability?
DNS poisoning
MAC flooding
ARP spoofing
Rogue DHCP server
What is the default priority value for Spanning Tree Protocol (STP)?
0
100
32768
65535
During troubleshooting, which step confirms your theory of probable cause?
Duplicate the problem
Implement a solution
Document findings
Identify the problem
If a DHCP server runs out of available IP addresses, what issue will users experience?
Intermittent DNS failures
Network congestion
No network connectivity
Duplicate MAC addresses
A company discovers that they have employees using their ISP service to download large torrent files. What could the company have its cybersecurity experts do to stop this?
Content filtering
Port forwarding
Network address translation
QoS shaping
Which of the following IPsec components provides data integrity and authentication but does NOT encrypt the payload?
ESP
AH
IKE
SSL
During the establishment of an IPsec tunnel, which protocol handles the negotiation of security parameters and key exchange?
SSL
GRE
IKE
ESP
What is the function of 802.1Q tagging?
Encrypt VLAN traffic
Balance traffic between VLANs
Create private VLANs
Mark VLAN traffic on trunk links
When would an administrator use the netstat command?
To view open network connections and listening ports
To verify DNS resolution
To map network topology
To monitor CPU usage
Why would a technician decommission and replace a switch?
End of support from manufacturer
Low CPU usage
VLAN configuration error
MAC address overflow
After testing and confirming the root cause of a problem, what comes next in CompTIA’s troubleshooting methodology?
Implement the solution
Document findings
Identify the problem again
Escalate the issue
A company wants to enforce port-based authentication for all wired and wireless devices. Which standard should be used?
802.11ax
802.1Q
802.1X
802.3af
Which attack could redirect legitimate traffic from a company’s website to a malicious one?
ARP poisoning
DNS poisoning
MAC flooding
DHCP starvation
When adding Operational Technology (OT) devices to a corporate network, which logical security control should be implemented?
VLAN trunking
Network segmentation
Port mirroring
Jumbo frame support
Which two environmental factors should always be considered for IT systems in a datacenter?
Humidity and fire suppression
Rack height and UPS wattage
Cable color and patch panel type
Power outlet brand and label color
What does an Extended Service Set Identifier (ESSID) offer that a regular SSID does not?
WPA3 encryption
Roaming between multiple access points
Higher frequency channel width
VLAN tagging
You need to split a 192.168.10.0/24 network into two equal subnets. Which subnet mask should you use?
255.255.255.0
255.255.255.128
255.255.255.192
255.255.255.224
What is the valid IPv4 multicast address range?
169.254.0.0–169.254.255.255
192.168.0.0–192.168.255.255
224.0.0.0–239.255.255.255
240.0.0.0–255.255.255.255
What is the purpose of link aggregation?
Provide fault tolerance and increased bandwidth by combining multiple interfaces
Enable VLAN hopping between switches
Segment broadcast domains
Encrypt Ethernet frames
What does Mean Time Between Failures (MTBF) measure?
The average time to restore a system after failure
The average operating time before a system fails
The time to detect a network intrusion
The total uptime of a network
What is the primary function of an Access Control List (ACL) on a router or firewall?
Encrypt packets in transit
Translate public to private IP addresses
Store DHCP lease records
Filter traffic based on IP, protocol, or port
What is the advantage of out-of-band management?
It allows device management even if the primary network is down
It uses encryption to hide management traffic
It allows users to bypass authentication
It increases bandwidth for management traffic
Which best describes a VLAN hopping attack?
A user gains access to restricted VLANs by sending tagged packets
A device overloads a VLAN trunk to cause a DoS
VLANs are merged during a firmware upgrade
A rogue DHCP server assigns VLAN tags
What is a CNAME (Canonical Name) record used for in DNS?
Points a domain name to an IP address
Maps one domain name to another domain name
Stores mail exchange (MX) data
Defines authoritative name servers
What does Administrative Distance indicate in routing?
The reliability of a route source
Bandwidth consumption
Network latency
Number of hops to a destination
What are subinterfaces used for?
Segmenting a single physical interface into multiple logical ones
Converting IPv4 to IPv6
Bridging VLANs with wireless
Encrypting management traffic
What is the purpose of creating security zones on a network?
Improve network speed
Encrypt switch management traffic
Reduce VLAN overhead
Separate and control access between different areas
In the 2.4 GHz band, why should channels 1, 6, and 11 be used?
They provide higher data rates
They are non-overlapping and reduce interference
They automatically switch to 5 GHz
They support WPA3 exclusively
In the CompTIA troubleshooting process, reviewing recent system logs for changes occurs during which step?
Identify the problem
Establish a theory
Verify full functionality
Implement preventive measures
What is the main purpose of a Virtual Private Cloud (VPC)?
To separate multiple customers’ computing resources in a shared cloud
To replace local servers entirely
To eliminate the need for subnets
To provide dedicated fiber connectivity to a data center
How does a clientless VPN differ from a traditional VPN?
It requires a VPN software installation
It uses a standard web browser for secure access
It only supports wired connections
It provides no encryption
You need a subnet that provides 6 usable IP addresses. What subnet mask should be used?
255.255.255.240 (/28)
255.255.255.248 (/29)
255.255.255.224 (/27)
255.255.255.192 (/26)
What is the purpose of Link Layer Discovery Protocol (LLDP)?
To encrypt link-layer traffic
To advertise device identity and capabilities to neighbors
To monitor spanning tree convergence
To balance VLAN traffic
What must a user do before gaining access through a captive portal?
Enter a static IP
Configure a VPN
Disable DHCP
Interact with the portal (e.g., accept terms or log in)
What does the principle of least privilege ensure in network access?
Users receive access to all VLANs
Users have only the minimum rights required to perform their tasks
Only administrators can use wireless
All devices share the same credentials
What is the difference between a honeypot and a honeynet?
A honeynet is a collection of honeypots designed to mimic a full network
A honeypot contains real production data
A honeynet is used for load balancing
There is no difference between them
What is multitenancy in cloud computing?
Each user gets a dedicated hardware server
Multiple customers share the same physical resources securely
Each customer manages their own hypervisor
Tenants share the same credentials
Which protocol uses datagrams to transfer data without establishing a session?
TCP
UDP
ICMP
ARP
What happens if a PoE switch exceeds its power budget?
All ports shut down immediately
Non-essential ports lose power first
Newly connected PoE devices fail to power on
Switch fans increase speed
Which two functions occur at OSI Layer 2?
Routing and fragmentation
Local addressing and error detection
Encryption and decryption
Session management and synchronization
What is the primary purpose of a captive portal?
To provide access to administrative consoles
To control guest network access via authentication page
To encrypt all user data end-to-end
To block wireless signal interference
Which routing protocol has a default administrative distance of 110?
RIP
EIGRP
OSPF
BGP
Which cloud model primarily focuses on application delivery rather than infrastructure management?
Infrastructure as a Service (IaaS)
Software as a Service (SaaS)
Platform as a Service (PaaS)
Anything as a Service (XaaS)
What is the main purpose of a tamper-evident seal on network hardware?
To prevent devices from overheating
To alert technicians if a device has been opened or accessed
To identify firmware version
To ensure redundancy in data backup
Which configuration can help prevent VLAN hopping attacks?
Disable trunking on unneeded ports
Enable dynamic ARP inspection
Increase switch MTU size
Use broadcast storm control
A datacenter fire may have destroyed data backups. Which metric defines how much data loss is acceptable between backups?
RTO
SLA
RPO
MTTR
What does a split-tunnel VPN do?
Routes all user traffic through the VPN connection
Sends only corporate traffic through the VPN while allowing direct Internet access
Requires manual switching between tunnels
Blocks non-encrypted traffic entirely
Which disaster recovery site type is fully operational and ready for immediate failover?
Cold site
Warm site
Hot site
Mobile site
Which tool helps discover hosts and open ports across a network for troubleshooting?
nmap
ipconfig
nslookup
netstat
What is the main goal of a hot aisle/cold aisle datacenter layout?
Improve cabling organization
Simplify power distribution
Prevent dust buildup on servers
Enhance cooling efficiency by separating airflow
X.509 certificates are most commonly associated with which technology?
Public Key Infrastructure (PKI)
SNMP
MAC filtering
IPSec tunneling
What improvement does SNMPv3 introduce over previous versions?
VLAN management support
Data compression
Authentication and encryption for management traffic
Automatic device reboot capability
What is the function of an NS (Name Server) record in DNS?
Identifies the mail server for a domain
Points to authoritative DNS servers for the domain
Stores domain aliases
Caches A-record lookups locally
What is the main advantage of 802.11ax (Wi-Fi 6) over previous Wi-Fi standards?
Designed for high-density environments and improved efficiency
Uses 6 GHz exclusively
Operates only on 2.4 GHz channels
Replaces wired Ethernet connections entirely
What is the function of an SVI on a switch?
Provides Layer 3 gateway access for a VLAN
Controls port security on trunk links
Mirrors packets between interfaces
Authenticates users via RADIUS
When should Jumbo Frames be used?
On networks carrying large data transfers such as backups or virtualization
On slow legacy networks
Only for wireless traffic
When multicast traffic is disabled
What is the purpose of the 127.0.0.1 loopback address?
Checks physical NIC operation only
Verifies DNS server availability
Routes packets to the default gateway
Tests connectivity to the local TCP/IP stack
Which statement best describes GSM technology?
A wired LAN authentication protocol
A global mobile standard using SIM cards for subscriber identity
A satellite-based Internet technology
A short-range Bluetooth variant
To set up a wireless connection that uses MIMO and non-overlapping channels, which 802.11 standard should be selected?
802.11ac
802.11g
802.11ax
802.11n
What is the purpose of band steering on a wireless access point?
Forcing legacy devices to disconnect
Directing capable clients to the 5 GHz band
Combining 2.4 GHz and 5 GHz into one SSID
Restricting access to 2.4 GHz only
Which routing protocol is primarily used for interconnecting WANs and ISPs on the Internet?
OSPF
RIP
BGP
EIGRP
What is the main advantage of Network Functions Virtualization (NFV)?
Replaces physical network devices with virtualized services
Increases wireless signal range
Eliminates the need for routing protocols
Encrypts network management traffic
What algorithm does OSPF use to determine the best path to a destination?
Distance-Vector
Bellman-Ford
Dijkstra’s Link-State Algorithm
Spanning Tree
What does an IP Helper Address enable?
Allows DHCP broadcast requests to cross routers
Prevents IP spoofing on a VLAN
Encrypts management traffic
Assigns static IPs to routers
Why is IPSec considered one of the most secure methods for site-to-site VPNs?
It supports load balancing
It provides encryption, authentication, and data integrity
It compresses traffic for efficiency
It operates only at the transport layer
What is the purpose of the Virtual Router Redundancy Protocol (VRRP)?
Provides automatic routing failover between routers or firewalls
Balances traffic between VLANs
Encrypts routing updates
Synchronizes switch MAC tables
Match the following
Layer 1
Physical
Layer 5
Session
Layer 4
Transport
Layer 2
Data link
Layer 3
Network
Match each fiber connector image description or characteristic to its connector name.
Round bayonet-style connector that locks with a twist
ST
Small form-factor connector, typically used on NICs and SFP modules
LC
Square push-pull connector, common in older fiber networks
SC
A network technician is connecting two 10 Gb Ethernet switches that are located in the same rack. Which type of cable would provide a low-cost, low-latency connection without the need for additional transceivers?
Fiber-optic patch cable
CAT6A Ethernet cable
Twinaxial (DAC) cable
Coaxial RG-6 cable
A network administrator is reviewing traffic patterns in a virtualized data center. Which of the following best describes east-west traffic?
Data traveling between a client and a public-facing web server
Traffic flowing between devices within the same data center or VLAN
Internet-bound traffic leaving the internal network
Management traffic between a workstation and a route
A network administrator is configuring a new subnet with the address 172.16.0.0.
Which of the following IPv4 address classes does this network belong to?
Class A
Class B
Class C
Class D
A network administrator is implementing IPv6 on an existing IPv4 network. The goal is to maintain communication between IPv6 and IPv4 hosts during the transition period. Which of the following techniques allows both IPv4 and IPv6 to run simultaneously on network devices?
Tunneling
NAT64
Dual stack
Proxy ARP
A user is unable to access the internet from their workstation, but they can access resources on the local network. The network administrator checks the NIC configuration and notices the default gateway is set incorrectly. Which of the following is the MOST likely cause of the connectivity issue?
Incorrect IP address
Incorrect default gateway
Incorrect subnet mask
Duplicate IP address
A network administrator wants to determine which switch port a particular device is connected to. Which command would MOST likely provide this information?
show vlan
show mac-address-table
show arp
show route
A technician cannot communicate with a device on the same subnet. They want to verify the MAC address associated with a specific IP address on the local network. Which command provides this information?
show mac-address-table
show route
show interface
show arp
A switch is not properly segmenting traffic for different departments. The network engineer wants to verify the VLANs configured on the switch. Which command should be used?
show vlan
show interface
show arp
show mac-address-table
