N10-007 Exam - Free Actual Q&as, Page 1 - ExamTopics

7/17/2020 N10-007 Exam – Free Actual Q&As, Page 1 | ExamTopics
- Expert Veri ed, Online, Free.
 Custom View Settings
Topic 1 - Single Topic
Question #1 Topic 1
A UTM is deployed on the external edge of the main corporate o ce. The o ce connects to the WAN port of the edge router. The edge router at
the main o ce connects to the remote o ces using GRE IPSec tunnels. A network administrator notices that a worm that was not detected by the
UTM has spread from the remote sites into the corporate network. The UTM currently has tra c rules applied that should block the port used by
the worm. Which of the following steps would MOST likely correct this issue?
A. Move the UTM onto the LAN side of the network
B. Enable TLS inspection on the UTM
C. Enable stateful inspection on the UTM
D. Con gure the UTM to deny encrypted les from being transferred
Correct Answer: C
https://www.examtopics.com/exams/comptia/n10-007/custom-view/ 1/271
Question #2 Topic 1
A technician has racked a new access switch and has run multimode ber to a new location. After installing an extended-range 10Gb SFP in the
core switch, the technician installed a 10Gb SFP in the access switch and connected the port to the new extension with a ber jumper. However,
the link does not display, and the technician cannot see light emitting from the core switch. Which of the following solutions is MOST likely to
resolve the problem?
A. Swap the ber pairs in one of the SFPs
B. Replace the jumpers with single-mode ber
C. Set the correct MTU on the new interface
D. Install an optic that matches the ber type
Correct Answer: B
  Cneo6 7 months, 3 weeks ago

Is it safe to say that we are making the educated assumption that the new location that is at an unspecified distance from the core switch is farther
than the max range of the MMFiber specs due to the use of the extended range SPFs?
upvoted 3 times
  Gdhhd 6 months ago

Swap the fiber at either end to see if a link is established would the quickest potential fix..why the hell would i swap the jumper for a single mode
whem the trunk fiber is multimode
upvoted 4 times
  PerkDizzzle 6 months ago

From multiple sites, while it seems possible that A is the answer, B seems to be correct based upon other third party sites.
upvoted 2 times
  jason24 1 month ago

"extended-range 10Gb SFP" is the key here. And their use of the word "jumpers" means all the mm fiber is getting changed.
upvoted 1 times
Question #3 Topic 1
A network technician has implemented ACLs to limit access to cloud-based le storage. Which of the following security mechanisms has the
technician enforced?
A. DLP
B. IDS
C. WAF
D. WPA
E. TPM
Correct Answer: C
  alex19 5 months, 3 weeks ago

Answer should be DLP
upvoted 4 times
  Scryptic 5 months, 3 weeks ago

Ir is DLP Not Web Application Firewall
upvoted 2 times
  zordss 4 months ago

It is WAF because the technician wants to limit access to the cloud which is possible by using WAF since it can decrypt whats going out and
permit/deny the packets.
upvoted 14 times

DLP can be enforced. You don't "enforce" a firewall. And cloud-based file storage isn't (necessarily) web based. Don't know how this can NOT be
DLP.
upvoted 1 times
Question #4 Topic 1
A network technician receives a call from a user in the accounting department stating that Internet connectivity has been lost after receiving a
new workstation. No other users in accounting are reporting similar issues. The network technician is able to ping the machine from the
accounting department's router, but is not able to ping the machine from the IT network. Which of the following is MOST likely the cause?
A. Incorrect default gateway
B. Duplicate IP address
C. Miscon gured OSPF
D. Improper VLAN assignment
Correct Answer: A
  pds1974 5 months ago

Answer should be D. Improper VLAN assignment because if no other users are having a problem getting to the internet then the issue would not
be the default gateway because then all users would have a problem.
upvoted 10 times
  Poppins 1 month, 1 week ago

Just that workstation is having an issue. The default gateway is programmed per machine.
upvoted 3 times
  Scott_brily 1 week, 4 days ago

You're assuming that the default gateway is given within a DHCP lease scope and not manually configured. If it is the wrong VLAN then it is
likely that the subnet mask, default gateway, and everything else is gonna be misconfigured.
upvoted 1 times
Question #5 Topic 1
A rewall administrator is implementing a rule that directs HTTP tra c to an internal server listening on a non-standard socket. Which of the
following types of rules is the administrator implementing?
A. NAT
B. PAT
C. STP
D. SNAT
E. ARP
Correct Answer: B
  olad89 3 months, 4 weeks ago

the answer should be SNAT
upvoted 2 times
  Rob6789 2 months, 2 weeks ago

The answer is PAT.
Static Network Address Translation (SNAT) would be used to translate from one address to another. The question asks how to convert from one
port to another; this is called Port Address Translation (PAT)
upvoted 6 times
Question #6 Topic 1
A technician is installing a new wireless badging system on a hospital network. The requirements of the badging system are for it to have its own
SSID and low power levels. The badging system has to cover 99.9% of the hospital. Which of the following is the BEST action to take to meet the
system requirements?
A. Install additional WAPs
B. Install external antennas
C. Move the WAPs closer to the more populated area
D. Change the antenna types
Correct Answer: A
Question #7 Topic 1
A technician attempts to replace a switch with a new one of similar model from the same vendor. When the technician moves the ber and SFP
plug, the switch does not completely boot up. Considering that the con g les are the same, which of the following is the MOST likely cause of the
failure?
A. Damaged ber
B. Corrupted operating system
C. VLAN mismatch
D. Bad port
Correct Answer: B
Question #8 Topic 1
A company has hundreds of nodes on a single subnet and has decided to implement VLANs. Which of the following BEST describes the bene t of
this approach?
A. It segments broadcast domains in the network infrastructure
B. It provides a faster port to all servers
C. It provides multiple collision domains on one switchport
D. It provides multiple broadcast domains within a single collision domain
Correct Answer: A
Question #9 Topic 1
A company has completed construction of a new datacenter, and the IT staff is now planning to relocate all server and network equipment from
the old site to the new site. Which of the following should the IT staff reference to determine the location of the equipment being moved?
A. Rack diagrams
B. Network topology
C. Standard operating procedures
D. Wiring documentation
Correct Answer: A
Question #10 Topic 1
Which of the following would allow a device to maintain the same IP address lease based on the physical address of the network card?
A. MAC address reservation
B. Static IP address
C. IP address exclusion
D. Custom DNS server entry
Correct Answer: A
A technician wants to prevent an unauthorized host from connecting to the network via Ethernet. Which of the following is a Layer 2 access
control the technician should implement?
A. Access control lists
B. Captive portal
C. WPA2
D. Port security
Correct Answer: D
A network engineer is con guring wireless access for guests at an organization. Access to other areas in the organization should not be
accessible to guests.
Which of the following represents the MOST secure method to con gure guest access to the wireless network?
A. Guests should log into a separate wireless network using a captive portal
B. Guests should log into the current wireless network using credentials obtained upon entering the facility
C. The existing wireless network should be con gured to allow guest access
D. An additional wireless network should be con gured to allow guest access
Correct Answer: A
  Rilla 1 month, 2 weeks ago

what is a captive portal?
upvoted 2 times
  pshimsmart 1 month ago

Because the other answers are dumb.
upvoted 1 times
  cgaie 4 weeks ago

A captive portal is a Web page that the user of a public-access network is obliged to view and interact with before access is granted.
upvoted 4 times
The server team has just installed an application across three different servers. They are asking that all requests to the application are spread
evenly across the three servers. Which of the following should the network team implement to ful l the request?
A. Proxy server
B. UTM appliance
C. Content lter
D. Load balancer
Correct Answer: D
A network technician is deploying mobile phones for a company's sales staff. Salespeople frequently travel nationally and internationally to meet
with clients, and often have to roam or switch cellular providers. Which of the following standards is the BEST option to t the requirements?
A. GSM
B. TDM
C. CDMA
D. PSTN
E. MIMO
Correct Answer: A
A network administrator has been given a network of 172.16.85.0/21 and wants to know the usable range of IP addresses on that subnet. Which
of the following indicates the correct IP address range?
A. 172.16.80.0-172.16.85.254
B. 172.16.80.0-172.16.88.255
C. 172.16.80.1-172.16.87.254
D. 172.16.80.1-172.16.85.255
Correct Answer: C
A network technician is troubleshooting wireless network issues in a crowded o ce complex and suspects there is interference from nearby
wireless networks.
Which of the following should the technician perform to discover possible interference?
A. Site survey
B. Vulnerability scanning
C. Wardriving
D. Checking logical diagram
E. Bandwidth test
Correct Answer: A
  Gbecker 1 year ago

Why is not the answer E?
upvoted 2 times
  enigmavi 10 months, 2 weeks ago

The site survey will allow us to see the overlap of networks, being able to pinpoint where the interference is coming from.
upvoted 11 times
  Kemared 1 month ago

Steve says it's A
upvoted 1 times
A network technician is troubleshooting an issue and has established a theory of probable cause. Which of the following steps should the network
technician take
NEXT?
A. Test the possible solution
B. Question the users
C. Determine what has changed
D. Document the theory
Correct Answer: A
A network technician has discovered a rogue access point under an empty cubicle desk. Which of the following should the technician perform to
ensure another cannot be placed on the network?
A. Disable unused ports on switches
B. Enable DHCP guard to detect rogue servers
C. Con gure WPA2 on all access points
D. Use TACACS+ authentication
Correct Answer: B

This question has nothing to do with DHCP.
I believe the correct answer should be:
A. Disable unused ports on switches
Read below for what DHCP Guard is. There is not mention of this having anything to do with Hyper-V or virtual machines.
With DHCP Guard VMs talks to Active Directory and retrieve the list of valid
DHCP servers on the network.
One activated it drops DHCP server messages from unauthorized virtual
machines pretending to be DHCP servers.
upvoted 3 times
  Andy71 4 months ago

The answer is B, not A. Read about DHCP GUARD
upvoted 4 times
  Reez 5 months, 2 weeks ago

I feel the same, I think its A disable unused ports.
upvoted 3 times
  Jerald 5 months, 2 weeks ago

I think the term is misused it should probably be" dhcp" guarding
which only allows authorized dhcp servers to offer leases to other devices on the network.
upvoted 1 times
  pds1974 4 months, 4 weeks ago

I agree the answer here is A because any unused switch ports should always be disable to prevent unauthorized access to the network
upvoted 3 times
  ha zpus 2 months, 2 weeks ago

answer B is correct. if you say to disable the unused port yeah that answer could be correct. But read the question properly, if u disable the unused
port I would still be used to a rough router by connecting the router to my own open port on the switch. so prevent that from happening u can do
both by the way but in this context I will have to go with answer B.
upvoted 5 times
  iyke2k4 2 months, 1 week ago

Which is the correct answer? It seems both A and B are being debated now. How do we know the exact answer?
upvoted 2 times

"Which of the following should the technician perform to ensure another cannot be placed on the network?"
It's not saying anything about rogue dhcp servers at all. And having dhcp guard would do nothing to prevent you from putting a rogue switch on
your own open port. Locking down unused ports is the right answer in this context.
upvoted 2 times

The AP isn't necessarily a dhcp server, or a server at all. It can just be providing a means for wireless users to log into the network (using the normal
dhcp server) with it's own password/login. DHCP guarding wouldn't help with that at all.
upvoted 2 times
  Mimi 2 weeks, 4 days ago

I believe the answer is B. It's better to think along the lines that the port was in use by a computer or some type of device. The user can unplug
their computer/ device and setup an rouge AP. A DHCP guard would prevent this. Answer A would not be a good choice because you would make
the port inactive for all devices when the user needs to use it.
upvoted 3 times
Which of the following provides the ability to deploy consistent access point con gurations from a central location?
A. Wireless controller
B. AAA server
C. WiFi-protected setup
D. Proxy server
E. VPN concentrator
Correct Answer: A
A network technician is con guring a wireless network at a branch o ce. Users at this o ce work with large les and must be able to access their
les on the server quickly. Which of the following 802.11 standards provides the MOST bandwidth?
A. a
B. ac
C. g
D. n
Correct Answer: B
A network administrator con gures a router with the following IP address information:
Gigabit Ethernet 1 Interface: 10.10.0.1/24
Serial 0 Interface: 10.10.0.253/30
Clients are connected to a switch on the gigabit Ethernet interface; the ISP is connected to the Serial 0 interface. When the router con guration is
complete and client devices are recon gured, all clients report that they are unable to connect to the Internet. Which of the following is the MOST
likely reason?
A. The router was con gured with an incorrect IP address
B. The router was con gured with an incorrect default gateway
C. The router was con gured with an incorrect subnet mask
D. The router was con gured with an incorrect loopback address
Correct Answer: C
  Bones 8 months, 2 weeks ago

The only logical answer I could find is A since Serial 0 is configured with a private ISP address. It should be configured with a public IP address since
it is the ISP-facing interface.
upvoted 4 times
  Rz10 6 months, 1 week ago

Both IP addresses are private IP, the subnetting will change the Subnet make value. hence the given answer is correct.
upvoted 7 times
  uffyuranus 5 months, 3 weeks ago

The serial interface and the internal Ethernet network shouldn't have overlapping IP addressing schemes. IP address is incorrect. A is the correct
answer.
upvoted 2 times

I think that Bones is correct. Serail 0 can be any IP that is on the ISP side. (172, 192 etc) a route statement will direct traffic from the ethernet
network to the ISP network. I feel the question itself may be incorrectly written.
upvoted 1 times
  Eye_Tea 5 months, 2 weeks ago

I believe the answer is correct, just as "fluff's" answer is partly correct...
The router cannot have overlapping network assignment's on different interfaces as it wouldn't know which to route to.
By assigning that IP a /24, which is only a default class c mask, it's usable IP range includes the ISP.
upvoted 2 times
  Eye_Tea 5 months, 2 weeks ago

I believe the answer is correct, just as "fluff's" answer is most closely correct...
The router cannot have overlapping network assignment's on different interfaces as it wouldn't know which to route to.
By using a /24, which is simply a default class c mask, it's usable IP range includes the assignment associated to the ISP.
With a /25 or more (255.255.255.128), the IP range would have been out of the scope of the ISP, and thus on separate networks.
Router should be 10.10.0.1 /25

subnet mask = 255.255.255.128
upvoted 4 times
  Emago 4 months, 1 week ago

I agree with Eye_Tea. Different IP assigned to the LAN interface could be .2 .3 etc. and it would be still causing the issue. Moreover, its totally
normal when WAN IP is a private one
upvoted 1 times
  Erodriguez812 2 months, 2 weeks ago

Ok so first check out professor messers video on 7 second subnetting. Its difficult but once you get it. You got it. The answer is C
The subnet mask is incorrectly configured.
A /30 would give you a subnet mask of 255.255.255.252
First available would be 10.10.255.253
If the (ISP) is conNECTED to the 253 itS WRONG
It should be 252 which is the network ID
stop giving bogus replies because you got it wrong. Your wrong simple. Study subnetting and stop posting bs replies because you got the answer
100,000% WRONG.
upvoted 9 times
Answer is A. The Router has the wrong IP address on either the serial interface or the Ethernet interface. As configured, both the serial interface and
the interface are on the same network (10.10.0.0/24) but they should be on different networks.
As an example, assume that the serial interface is correctly configured. This network has two IPS: one that is assigned to the serial interface
(10.10.0.253/30) and other is assigned to the ISPs interface (10.10.0.254/30).
The Ethernet interface would need to be a different network, such as with an IP address of 192.168.1.1/24
upvoted 2 times
  Babelaz 1 week, 2 days ago

Private IPs are non-routable.
Therefore it's Switching and not Routing anything.
Bones and Mimi are correct.
Answer is A
upvoted 1 times
A penetration tester has been tasked with reconnaissance to determine which ports are open on the network. Which of the following tasks should
be done FIRST?
(Choose two.)
A. Network scan
B. Banner grab
C. Tracert
D. DHCP server check
E. Brute-force attack
Correct Answer: AC
  BOT007 5 months, 1 week ago

The answer should be Port Scan & Banner Grab(so A and B)
upvoted 6 times

No its AC study you should study the exam objectives alittle more
upvoted 4 times
  Realityishere1995 1 month, 3 weeks ago

The answer should be A and B. Network Scan: Network scanning refers to the use of a computer network to gather information regarding
computing systems | Banner grab: Banner grabbing is a technique used to gain information about a computer system on a network and the
services running on its open ports
upvoted 2 times
  Poppins 1 month, 2 weeks ago

The answer definitely includes B. I mean that's EXACTLY what be does. It literally tells you everything running on every open port.
upvoted 2 times
  waveyzalgos 1 month, 2 weeks ago

The answer is A and C because the question is asking what they should do FIRST. Banner Grab is done AFTER you determine what systems have
open ports.
upvoted 1 times
Users are reporting Internet connectivity issues. The network administrator wants to determine if the issues are internal to the company network
or if there is an issue with the ISP. Which of the following tools should be used to BEST determine where the outage is occurring?
A. traceroute
B. ping
C. nslookup
D. netstat
Correct Answer: A
  deadman54 1 month, 1 week ago

It doesn't specify a Linux machine so I think it would be B (Ping).
upvoted 1 times
  IanBilbo12 3 weeks, 4 days ago

I know it is annoying, but the answer is traceroute for two reasons. 1) It doesn't matter whether it's written as tracert or traceroute. What matters
is what it DOES. 2) Using traceroute, you can see where the connection drops and determine whether that specific point is located within your
network or on the way to the ISP.
upvoted 4 times
Which of the following security mechanisms dynamically assigns a Layer 2 address and restricts tra c only to that Layer 2 address?
A. Sticky MAC
B. 802.1x
C. ACL
D. NAC
Correct Answer: A
  exampreper 1 month, 4 weeks ago

where is Sticky Mac on the exam objectives?
upvoted 4 times
  DianeBLE 1 week, 5 days ago

You can't use Sticky Mac to both assign and limit traffic?
upvoted 1 times
Which of the following is a vulnerable system designed to detect and log unauthorized access?
A. SIEM
B. Honeypot
C. DMZ
D. Proxy server
Correct Answer: B
According to the OSI model, at which of the following layers is data encapsulated into a packet?
A. Layer 2
B. Layer 3
C. Layer 4
D. Layer 5
E. Layer 6
Correct Answer: B

Data at the TRANSPORT layer is a SEGMENT.
Data at the NETWORK layer is a PACKET. (I had to look this up, as I was confused)
upvoted 5 times
  PerkDizzzle 5 months, 3 weeks ago

Start at layer four and work down:
Some -- Segments
People -- Packets
Fear -- Frames
Birthdays -Bits
upvoted 14 times
  ArcRiseGen 4 months, 3 weeks ago

Just to be sure, that's set in the order of
Data Link
Network
Transport
Session
?
Cause I am so used to the top down model of Please Do Not Throw Sausage Pizza Away
upvoted 3 times

Some -- Segments --> Layer 4
People -- Packets --> Layer 3
Fear -- Frames --> Layer 2
Birthdays -Bits --> Layer 1
Birthdays
upvoted 1 times

This is the best one
Mines is
Some
People
Fear
Bears
upvoted 2 times
Which of the following WAN technologies is MOST preferred when developing a VoIP system with 23 concurrent channels?
A. DSL
B. POTS
C. T1
D. DOCSIS
Correct Answer: C

Yea I figured this was the answer but... yall go it wrong . A T1 has 24 channels not 23. Just saying
upvoted 1 times
  AG87 2 months, 2 weeks ago

23 B channels
upvoted 5 times
A junior network technician is setting up a new email server on the company network. Which of the following default ports should the technician
ensure is open on the rewall so the new email server can relay email?
A. 23
B. 25
C. 110
D. 143
Correct Answer: B
  Arjjra 1 year, 3 months ago

This one kinda throws you off as it says default ports. And it doesn't tell you to select 1 or multiple answers
upvoted 1 times

I disagree. POP (110) and IMAP (143) are used in receiving and retrieving emails, respectively. The question clearly asks which port is to be left open
so the server can relay/send emails. This is clearly the function of SMTP (25).
https://www.siteground.com/tutorials/email/protocols-pop3-smtp-imap/
upvoted 15 times
  Bobisha 2 months, 2 weeks ago

Step #1: After composing a message and hitting send, your email client - whether it's Outlook Express or Gmail - connects to your domain's SMTP
server. This server can be named many things; a standard example would be smtp.example.com.
Step #2: Your email client communicates with the SMTP server, giving it your email address, the recipient's email address, the message body and
any attachments.
So answer is port 25 which is B

upvoted 1 times
  mdarab 2 months, 1 week ago

This one is simple. Shouldn't even be debated
upvoted 2 times
Which of the following policies would Joe, a user, have to agree to when he brings in his personal tablet to connect to the company's guest
wireless Internet?
A. NDA
B. IRP
C. BYOD
D. SLA
Correct Answer: C
In a service provider network, a company has an existing IP address scheme. Company A's network currently uses the following scheme:
Company b uses the following scheme:
Subnet 1: 192.168.1.50/28 -
The network administrator cannot force the customer to update its IP scheme. Considering this, which of the following is the BEST way for the
company to connect these networks?
A. DMZ
B. PAT
C. NAT
D. VLAN
Correct Answer: C

I'm still a little confused about how NAT works. Can someone explain why it's NAT for this question? (I literally have no IT job experience,
everything is self taught at home)
upvoted 3 times

in a nutshell: when you are at home on your private network your devices have a private Ip normally in the 192.168.1.0/24 range. These devices use
their assigned private ip's to communicate locally however when a private ip needs to talk to a website like amazon, NAT will
assigns/masks/translates (however you want to say it) that private IP to your public IP. Your public ip is provided by your ISP. NAT was created to
address the ever depleting usable IPv4 address
upvoted 4 times
  Mornay 1 week, 5 days ago

Also add that NAT has some security capabilities too, a common scenario is NAT / Proxy servers - they have cache , request and receive / analyze
traffic on behalf of their private hosts. Often Web filtering ( allowing / blocking web traffic, SSL inspections, Application and DNS filtering are
included in these layer 7 devices, also known as NGFW (Next generation Firewalls)
upvoted 1 times
A network engineer is designing a new network for a remote site. The remote site consists of ten desktop computers, ten VoIP phones, and two
network printers.
In addition, two of the desktop computers at the remote site will be used by managers who should be on a separate network from the other eight
computers.
Which of the following represents the BEST con guration for the remote site?
A. One router connected to one 24-port switch con gured with three VLANS: one for the manager's computers and printer, one for the other
computers and printer, and one for the VoIP phones
B. Two routers with each router connected to a 12-port switch, with a rewall connected to the switch connected to the manager's desktop
computers, VoIP phones, and printer
C. One router connected to one 12-port switch con gured for the manager's computers, phones, and printer, and one 12-port switch con gured
for the other computers, VoIP phones, and printer
D. One router connected to one 24-port switch con gured with two VLANS: one for the manager's computers, VoIP phones, and printer, and
one for the other computers, VoIP phones, and printer
Correct Answer: A
A network technician is troubleshooting an end-user connectivity problem. The network technician goes to the appropriate IDF but is unable to
identify the appropriate cable due to poor labeling. Which of the following should the network technician use to help identify the appropriate
cable?
A. Tone generator
B. Multimeter
C. OTDR
D. Loopback adapter
Correct Answer: A
A network technician notices the site-to-site VPN and Internet connection have not come back up at a branch o ce after a recent power outage.
Which of the following is an out-of-band method the technician would MOST likely utilize to check the branch o ce's router status?
A. Use a modem to console into the router
B. Walk a user through troubleshooting the connection
C. Travel to the branch o ce
D. Hire a contractor to go on-site
Correct Answer: A
A network technician is considering opening ports on the rewall for an upcoming VoIP PBX implementation. Which of the following protocols is
the technician
MOST likely to consider? (Choose three.)
A. SIP
B. NTP
C. H.323
D. SMB
E. ICMP
F. RTP
G. IPSec
H. RDP
Correct Answer: ACF
A device operating at Layer 3 of the OSI model uses which of the following protocols to determine the path to a different network?
A. STP
B. RTP
C. RIP
D. NTP
E. SIP
Correct Answer: C

Wow the wording of these questions are super important.
If you are studying for this exam good luck. And READ CAREFULLY. Comptia likes to words thing a certain way to man SURE you know what your
doing
upvoted 4 times
A network administrator is setting up a web-based application that needs to be continually accessible to the end users. Which of the following
concepts would
BEST ensure this requirement?
A. High availability
B. Snapshots
C. NIC teaming
D. Cold site
Correct Answer: A
Which of the following devices should a network administrator con gure on the outermost part of the network?
A. Media converter
B. Switch
C. Modem
D. Firewall
Correct Answer: D
  Digo 3 days, 1 hour ago

I would say C, the modem is the outermost device
upvoted 1 times
A company nds that many desktops are being reported as missing or lost. Which of the following would BEST assist in recovering these devices?
A. Asset tracking tags
B. Motion detectors
C. Security guards
D. Computer locks
Correct Answer: D
  KC 1 year, 3 months ago

Why wouldn't this be A, "Asset tracking tags?" How would a computer lock help you recover the device? Locks would be the BEST asset in
preventing the desktops from going missing at the start. But in this scenario,the desktops are already missing or lost, the locks won't do anything
for recovery. However, asset tracking tags (if they had been applied) could aid in the identification and recovery. If I'm mistaken, please let me
know.
upvoted 24 times
  Arjjra 1 year, 3 months ago

I agree with you. When i revealed the answer i was shocked. I second it should be Asset Tag.
upvoted 11 times
  vt2019 8 months, 3 weeks ago

A should be right.
upvoted 5 times
  grantley 7 months, 3 weeks ago

Is there anyone on staff that could explain why the answer is D and not A?
upvoted 2 times
  bassmonster 6 months, 2 weeks ago

i didnt' realise lock have built in GPS trackers....
upvoted 8 times
  LadyJ_Okonkwo 6 months, 1 week ago

I am unable to find any research to back up this newer as D however everything appears to point to A. Can any one provide clarity?
upvoted 1 times
  Peacges1 6 months ago

If it was locked, it wouldn't be missing....
upvoted 6 times
  LadyJ_Okonkwo 5 months, 4 weeks ago

That is preventing not recovering and the question clearly says recovery
upvoted 8 times

Moderator, please fix this answer, it has 8 (now 9) disagreements posted.
upvoted 4 times
  Tatoom 5 months, 2 weeks ago

It is mentioned in the official book "The tags are entered into a tracking database, which also usually has a map of the coverage area so that a
particular asset can be located."
So, the correct answer is A !
upvoted 7 times
  Cib5 4 months ago

The answer should be A. Locks prevent them from going missing. Locks don't help you if they are already missing, in which case you need asset
tracking tags.
upvoted 3 times

Yikes... This kind of makes me questions the validity of any answers now!
upvoted 1 times
  Anon6606 1 month, 2 weeks ago

Computer Locks prevents the theft not recover the assets
upvoted 2 times
  xGAM3Rxx 1 month, 1 week ago

How would a computer lock help recover missing devices?! When i chose to reveal answer i was shocked lol. It really should be "A" shouldn't it?
upvoted 2 times

Answer is A. Since it says "recovery." If this were to "prevent" then the answer would be D; computer locks
upvoted 2 times
  DianeBLE 1 week, 4 days ago

The mods still have not chimed in.
upvoted 1 times
A technician is connecting a router directly to a PC using the G1/0/1 interface. Without the use of auto-sensing ports, which of the following
cables should be used?
A. Straight-through
B. Console
C. Rollover
D. Crossover
Correct Answer: D
  aniket2610 1 year, 2 months ago

It should be straight through not cross over - cross over should be used for same devices on both ends. such as computer to computer or router to
router.
upvoted 7 times
  Te onJimmy 9 months, 3 weeks ago

It is "D" because the question states "...without the use of autosensing ports...". If you had autosensing ports then you could use a straight cable
upvoted 11 times
  rook7474 7 months, 2 weeks ago

Routers use a NIC, the same as computers. Therefore, you would use a straight-through cable. The router is the special device to remember when
understanding the straight-through vs. crossover rules for devices.
upvoted 1 times
  rook7474 7 months, 2 weeks ago

I meant to say you would use a crossover cable. The correct answer is CROSSOVER. A router uses a NIC, so it is a CROSSOVER.
upvoted 3 times

looks like layer3 switch. Which requires a straight through Cable. has the Router designed with auto-sensing then either could be used.
upvoted 1 times
  iyke2k4 2 months ago

I think a straight-through cable is correct but I am not sure. A crossover cable should be used if it`s the same type of device.
upvoted 1 times

I did some in depth searching online. It's definitely a crossover cable. The Auto-sensing is the key phrase in this question.
upvoted 1 times

Answer is D. Connecting a Router Ethernet port to PC NIC needs to be a crossover
http://www.cables-solutions.com/difference-between-straight-through-and-crossover-cable.html
upvoted 1 times
A technician is diagnosing an issue with a new T1 connection. The router is con gured, the cable is connected, but the T1 is down. To verify the
con guration of the router, which of the following tools should the technician use?
A. Loopback adapter
B. Cable tester
C. Tone generator
D. Multimeter
Correct Answer: A
A network technician receives a call from a user who is experiencing network connectivity issues. The network technician questions the user and
learns the user brought in a personal wired router to use multiple computers and connect to the network. Which of the following has the user
MOST likely introduced to the network?
A. Rogue DHCP server
B. Evil twin
C. VLAN mismatch
D. Honeypot
Correct Answer: A
A technician is setting up a direct connection between two older PCs so they can communicate but not be on the corporate network. The
technician does not have access to a spare switch but does have spare Cat 6 cables, RJ-45 plugs, and a crimping tool. The technician cuts off one
end of the cable. Which of the following should the technician do to make a crossover cable before crimping the new plug?
A. Reverse the wires leading to pins 1 and 2
B. Reverse the wires leading to pins 1 and 3
C. Reverse the wires leading to pins 2 and 3
D. Reverse the wires leading to pins 2 and 4
Correct Answer: D
  radu 1 year, 2 months ago

How is this possible?You should reverse 1 with 3 and 2 with 6.
upvoted 6 times
  TT 1 year, 1 month ago

This is wrong. Pins 4, 5, 7, and 8 never change. I think the answer should be B
upvoted 3 times

On second thought, the answer should be A. It asks which pins you REVERSE. You have to reverse pin 1 so that it connects to pinout 3 and pin 2 so
that it connects to pinout 6.
upvoted 1 times

The answer to this question should be "B". Like radu and TT pointed out, to make a crossover cable you need to reverse the wires going to pin 1
and pin 3, and then reverse the wires going to pin 2 and pin 6. Since "B" is the only answer that matches one of these steps it should be "B".
upvoted 4 times

B should be the correct answer as pin 4 5 7 8 won't change, either pin 1&3 or 2&6.
upvoted 4 times
  grantley 7 months, 3 weeks ago

The correct answer is pin 1,2,3,6 should be reverse which is not in the multiple choice answers
upvoted 1 times

Remember, this is an OLDER PC, so we'll assume 10/100, not gig. Only four wires used out of eight.
upvoted 4 times

Quizlet says B
upvoted 1 times

Great... So no one was able to find an explanation for this.
upvoted 2 times
  Mimi 1 month ago

I was looking at other websites as well. This should be 1 and 3. Pin 4, 5, 7 , and 8 does not change.
upvoted 1 times
  Tart 1 week ago

Cross-checking this question on other places confirms the answer is D when that clearly isn't the case. Is there even any guarantee that this
question shows up on the exam when the answer listed here is not right?
upvoted 1 times
Which of the following is the number of broadcast domain that are created when using an unmanaged 12-port switch?
A. 0
B. 1
C. 2
D. 6
E. 12
Correct Answer: B
A network engineer wants to a segment the network into multiple broadcast domains. Which of the following devices would allow for
communication between the segments?
A. Layer 2 switch
B. Layer 3 switch
C. Bridge
D. Load balancer
Correct Answer: B
The Chief Information O cer (CIO) has noticed the corporate wireless signal is available in the parking lot. Management requests that the
wireless network be changed so it is no longer accessible in public areas, without affecting the availability inside the building. Which of the
following should be changed on the network?
A. Power levels
B. Overcapacity
C. Distance limitations
D. Channel overlap
Correct Answer: A
A network technician is assisting the security team with some tra c captures. The security team wants to capture all tra c on a single subnet
between the router and the core switch. To do so, the team must ensure there is only a single collision and broadcast domain between the router
and the switch from which they will collect tra c. Which of the following should the technician install to BEST meet the goal?
A. Bridge
B. Crossover cable
C. Hub
D. Media converter
Correct Answer: C
Based on networks 10.8.16.0/22 and 10.8.31.0/21, which of the following is the BEST summarized CIDR notation?
A. 10.8.0.0/16
B. 10.8.0.0/19
C. 10.8.0.0/20
D. 10.0.0.0/24
Correct Answer: A

Wouldn't this one be B? My understanding is the BEST summarized CIDR would be the summarization that is the most specific. Both of these
networks fall under the mask range of 11111111: 11111111: 11100000: 00000000. The answer were A, 10.8.0.0/16, then it would be the BEST
classful notation. If I'm wrong, please let me know how.
upvoted 4 times
  aniket2610 1 year, 2 months ago

I agree. B would be the best answer for this question.
upvoted 3 times

C
00001010.00001000.00010000.00000000 (10.8.16.0)
00001010.00001000.00011111.00000000 (10.8.31.0)
The last bit that they have in common is the 3rd octet 4th bit. (bit 20)
It would normally be a /21 but the best choice of the ones given is /20
upvoted 14 times
  Mark0P0L0 2 weeks, 2 days ago

Unfortuntely no! /20 will give you 10.8.15.255 (count your own bits- there are 16+3=19) as the broadcast, but /19 will cover 10.8.31.255- so /19
is the BEST at this particular logic. But I guess our BEST involves VLMS( Variable Length Subnet Masking) where we choose sufficient but not
excessive subnet masking and following that logic- it should be /19. BUT, CompTIA disregards it and focuses on full octet usage, which since
.16.0 and .31.0 in example showing such- means /21. That is the only logical explanation I have!
upvoted 1 times

TT is 99.9999% right. The answer is "C" but to do the summarization you have to count how many bits the common pattern has and the common
pattern for this question is:
00001010.00001000.0001 (20)
upvoted 7 times
  viro340 5 months, 4 weeks ago

10.8.31.0/21 is an abnormal Network address CIDR but based on this the IP range is. 10.8.31.0-10.8.38.255. the best cidr here should be 10.8.0.0/18.
and since that's not an option you got to use the lowest possible CIDR that closest to the /18. Now if they said a host IP address was 10.8.31.0/21
then the Network address would of been 10.8.24.0/21 last IP would be 10.8.31.255 making a network address of 10.8.0.0/19 the right answer.
upvoted 2 times
  zordss 3 months, 3 weeks ago

The correct answer here should is 10.8.16.0/20.
upvoted 1 times

I did the calculation based on the training on cbt nuggets.
upvoted 2 times
  Dane_d 1 month, 2 weeks ago

Why b and not d, if d encompasses both the /20 and 21 networks?
upvoted 1 times
  KLT316 1 week, 4 days ago

NO Answer D does NOT encompass both networks in the Q. 10.0.0.0 - 10.0.0.255
NO Answer C does NOT encompass both networks in the Q. 10.8.0.0 - 10.8.15.255
YES Answer B DOES encompass both networks in the Q. 10.8.0.0 - 10.8.31.255
KINDA Answer A DOES encompass both networks in the Q. 10.8.0.0 - 10.8.255.255
However answer A wastes a great deal of addresses (10.8.32.0 - 10.8.255.255).
SO answer B SHOULD be the BEST summarized answer.
upvoted 1 times

C is correct.
Confirmed my math with multiple subnet calcs.
upvoted 2 times

Actually it's B 10.8.0.0/19
Would be C if it was 10.8.16.0/20
upvoted 2 times

Good trick question, have to look closely
upvoted 2 times
  nick1970 5 days, 16 hours ago

Answer is B
16 - 10.8.0.1 - 10.8.255.254
19 - 10.8.0.1 - 10.8.31.254 - This one is the only that includes10.8.16.0/22 and 10.8.31.0/21
20 - 10.8.0.1 - 10.8.15.254
upvoted 1 times
A technician discovers that multiple switches require a major update. Which of the following policies should be followed?
A. Change management policy
B. Remote access policy
C. Acceptable use policy
D. Memorandum of understanding
Correct Answer: A
A technician is troubleshooting a point-to-point ber-optic connection. The technician is at a remote site and has no connectivity to the main site.
The technician con rms the switch and the send-and-receive light levels are within acceptable range. Both ber SFPs are con rmed as working.
Which of the following should the technician use to reveal the location of the fault?
A. OTDR
B. Light meter
C. Tone generator
D. CSU/DSU
Correct Answer: A
A Chief Information O cer (CIO) wants to move some IT services to a cloud service offering. However, the network administrator still wants to be
able to control some parts of the cloud service's networking components. Which of the following should be leveraged to complete this task?
A. IaaS
B. PaaS
C. SaaS
D. DaaS
Correct Answer: B
  Elle 5 months, 1 week ago

Wouldn't the answer be IaaS since it gives the admin more direct control over operating systems and not just flexibility in the ease of operations
like PaaS would
upvoted 3 times

IaaS is associated also with hardware which hasn't been menitioned in the question.
upvoted 3 times

Looking at my book by Mike Myers PAAS "gives programmers all the tools they need to deploy, administer, and maintain a web application. They
have some form of infrastructure," While IAAS provides all the hardware "While you are no longer responsible for the hardware, you're still
responsible for configuring and maintaining the operating systems and software of any virtual machine you create." . The CEO wants to move some
of the company to the cloud and the "Network Administrator" still wants to have some control. This question is vague but IAAS sounds like the
correct answer. It moves the company into the cloud and still gives the control to the administrator. I am very curious to the actual answer.
upvoted 2 times
  neo20011 1 month, 1 week ago

Answer should be A, IaaS
upvoted 1 times

All hardware is hosted by a vendor/ company/ service provider
This is how I break it down the different platforms:
•IaaS - Choose hardware, software (or develop), manage/ configure everything
•PaaS - OS is pre-configured and hardware. Room for engineers to develop software
•SaaS - Everything is managed by the service
In this case answer is PaaS.

upvoted 2 times
  Astrodarl 1 day, 21 hours ago

The answer is IaaS. In PaaS You only manage Applications and data which IaaS has as well
upvoted 1 times
Client PCs are unable to receive addressing information from a newly con gured interface on a router. Which of the following should be added to
allow the clients to connect?
A. DHCP lease time
B. IP helper
C. TTL
D. DNS record type
Correct Answer: B
When enabling jumbo frames on a network device, which of the following parameters is being adjusted?
A. Speed
B. Duplex
C. MTU
D. TTL
Correct Answer: C
A technician logs onto a system using Telnet because SSH is unavailable. SSH is enabled on the target device, and access is allowed from all
subnets. The technician discovers a critical step was missed. Which of the following would allow SSH to function properly?
A. Perform le hashing
B. Generate new keys
C. Update rmware
D. Change default credentials
Correct Answer: B
A network administrator wants to ensure sensitive data is not ex ltrated from the system electronically. Which of the following should be
implemented?
A. DLP
B. AUP
C. NDA
D. SLA
Correct Answer: A
An o ce network consists of one two-port router connected to a 12-port switch. A four-port hub is also connected to the switch. On this particular
network, which of the following is the number of collision domain that exist?
A. 3
B. 12
C. 13
D. 14
E. 15
Correct Answer: D

I believe the answer to this question should be C. The switch and router share a collision domain, which leaves 12 collision domains on the switch.
The router has 1 more collision domain (not 2 more, because the other is already accounted for on the switch). The hub shares a collision domain
with the switch also, and it's all on one collision domain that is accounted for on the switch. So 13. If I'm incorrect, please explain.
upvoted 9 times

I guess the only issue that I have with this assumption is what if the router port is connected to the same switch? The scenario is not explained
clearly to get a correct answer. But I do agree that it is 13 if the scenario is the one you just explained.
upvoted 1 times

I agree with you KC (and study-ccna.com seems to as well). https://study-ccna.com/collision-broadcast-domain/
upvoted 3 times
  Pierrek 6 months, 1 week ago

This link confirm the solution 14 collision domains, because the connection switch-router is a collision domain non included int he 12 ports of
the switch
upvoted 3 times
  Beccken 3 months, 3 weeks ago

The answer is 14. All the ports on the router and the hub are considered as one domain or collision point, while "each" port on the switch is
considered one domain or collision point. So one point on the router, one point on the hub, and 12 points on the switch is 14 points. Think
about how the switch works vs how the router and hub work. Routers and hubs send data to all the ports at one time regardless of which
port asks for it, while the switch sends data to "each" port individually according to which port asks for it. Again: switch 12 individual, hub 1,
router 1=14 domains collision points.
upvoted 3 times

According to Quora it should be 15.
https://www.quora.com/What-is-the-difference-between-collision-domain-and-broadcast-domain
upvoted 2 times

I reading 'Broadcast domains' in this question. Sheesh.
upvoted 1 times

The way I understand it it is still 14 link to router and hub are accounted for on the switch so that is still 12 plus the hub is its own collision domain
makes 13 and the extra port on the router makes 14 so the answer is 14
upvoted 3 times

considered one domain or collision point. So one point on the router, one point on the hub, and 12 points on the switch is 14 points. Think
about how the switch works vs how the router and hub work. Routers and hubs send data to all the ports at one time regardless of which port
asks for it, while the switch sends data to "each" port individually according to which port asks for it. Again: switch 12 individual, hub 1, router
1=14 domains collision points.
upvoted 1 times

This question was very similar to one seen in Jason Dion's test on udemy. He explained that every port on a router is a collision domain but
since the port is shared with the switch, it creates one collision domain with the switch along with one other port on the router. The answer is
C
upvoted 1 times

considered one domain or collision point. So one point on the router, one point on the hub, and 12 points on the switch is 14 points. Think about
how the switch works vs how the router and hub work. Routers and hubs send data to all the ports at one time regardless of which port asks for it,
while the switch sends data to "each" port individually according to which port asks for it. Again: switch 12 individual, hub 1, router 1=14 domains
collision points.
upvoted 1 times
  TOXICO 2 months, 4 weeks ago

Guys a router with two ports has two collision domain,a switch with 12 ports has 12 collision domain and a hub with 4 ports has 4 collision domain
therefore 12+2+1=15. E IS THE RIGHT ANSWER
upvoted 1 times
  TOXICO 2 months, 4 weeks ago

SORRY A HUB WITH 4 PORTS HAS 1 COLLISION DOMAIN
upvoted 2 times

only 1 port on the router is in use so 1 for the router. all 12 ports on the switch are collision domains 12 for the switch and a hub is always 1
collision domain 1+12+1=14
https://study-ccna.com/collision-broadcast-domain/
upvoted 1 times
  PatrickH 1 month ago

CCNA seems to clearly state the answer should be 15. 12 seperate from the Switch, 2 seperate on the Router and 1 from the HUB. 12+2+1 = 15
https://study-ccna.com/collision-broadcast-
domain/#:~:text=Collision%20domain&text=The%20packets%20collide%20and%20both,in%20a%20separate%20collision%20domain.
upvoted 1 times
A network technician wants to remotely and securely access the desktop of a Linux workstation. The desktop is running remote control software
without encryption. Which of the following should the technician use to secure the connection?
A. SSH in tunnel mode
B. RDP set to console connection
C. EAP-PEAP
D. SFTP
Correct Answer: A
Which of the following should current network performance be compared against to determine network anomalies?
A. Baseline
B. Tra c analysis
C. Packet capture
D. Logs
Correct Answer: A
A network administrator con gures an email server to use secure protocols. When the upgrade is completed, which of the following ports on the
rewall should be con gured to allow for connectivity? (Choose three.)
A. TCP 25
B. TCP 110
C. TCP 143
D. TCP 389
E. TCP 587
F. TCP 993
G. TCP 995
Correct Answer: EFG

ports 587,993, and 995 are not on the exam objectives for N10-007
upvoted 4 times

maybe SMTP mentions the secure version but the exam objectives do not state those ports
upvoted 2 times
  Tart 2 weeks, 1 day ago

it may not be stated on the Network+ objectives but it's best to study all secure protocols. Can anyone confirm that the Network+ has
questions like this?
upvoted 1 times
  Javier25 1 week, 3 days ago

search for port cheat sheet 587 is SMTP
993 is IMAP over SSL
995 is POP3 over SSL
upvoted 1 times
After a server outage, a technician discovers that a physically damaged ber cable appears to be the problem. After replacing the cable, the server
will still not connect to the network. Upon inspecting the cable at the server end, the technician discovers light can be seen through one of the two
ber strands. Which of the following should the technician do FIRST to reconnect the server to the network?
A. Reverse the ber strands of the cable and reconnect them to the server
B. Use a TDR to test both strands of a new replacement cable prior to connecting it to the server
C. Replace the server's single-mode ber cable with multimode ber
D. Move the ber cable to different port on the switch where both strands function
Correct Answer: A
The backups server connects to a NAS device using block-level storage over Ethernet. The performance is very slow, however, and the network
technician suspects the performance issues are network related. Which of the following should the technician do to improve performance?
A. Utilize UDP to eliminate packet overhead
B. Turn off MDIX settings on the NAS and server switchports
C. Enable jumbo frames on the NAS and server
D. Encapsulate the storage tra c in a GRE tunnel
Correct Answer: C
A technician is trying to determine the IP address of a customer's router. The customer has an IP address of 192.168.1.55/24. Which of the
following is the address of the customer's router?
A. 192.168.0.55
B. 192.168.1.0
C. 192.168.1.1
D. 192.168.5.5
E. 255.255.255.0
Correct Answer: C
A network technician is able to connect the switches between two o ces, but the o ces cannot communicate with each other, as each o ce
uses a different IP addressing scheme. Which of the following devices needs to be installed between the switches to allow communication?
A. Bridge
B. Access point
C. Router
D. Range extender
Correct Answer: C
A network technician is working on a proposal for email migration from an on-premises email system to a vendor-hosted email in the cloud. The
technician needs to explain to management what type of cloud model will be utilized with the cloud-hosted email. Which of the following cloud
models should the technician identify in the proposal?
A. IaaS
B. PaaS
C. SaaS
D. MaaS
Correct Answer: C
Which of the following is the correct port number for NTP?
A. 25
B. 69
C. 123
D. 161
Correct Answer: C
A network technician is connecting two switches together. Which of the following protocols should the technician use to increase speed and fault
tolerance?
A. SIP
B. BGP
C. LACP
D. LLDP
Correct Answer: C
A company has a web-based application that is used by many different departments. The company has experienced some overload of resources
on the database server. The network administrator implements a network device in between the servers and the database. Which of the following
BEST describes the purpose of this device?
A. Content ltering and network analysis
B. Load balancing and providing high availability
C. Port sni ng and protocol analysis
D. Clustering and NIC teaming
Correct Answer: B
  Skuhx 1 week, 4 days ago

There's only one database server, I don't see how load balancing applies with no other server to balance to.
upvoted 1 times
  Tart 1 week ago

Keyword is "overload of resources" and the only plausible answer for that would be load balancing
upvoted 1 times
  Mornay 1 week ago

Load balancing can also happen on the client traffic, that being that each client connecting only get a portion instead of the traffic being one open
pipe
upvoted 1 times
A technician is replacing a switch at a branch o ce and discovers the existing backbone cable does not t in the new switch. The ber patch
panel has circular connections. The new switch has a transceiver that accepts a smaller square adapter of two strands. Which of the following
patch cables would the technician need to complete the installation?
A. LC to SC
B. SC to ST
C. LC to ST
D. ST to ST
E. SC to SC
Correct Answer: C
A computer lab on a campus network was recently recon gured using recycled network cables. One of the 24 computers in the lab is unable to
connect to the network after the upgrade. A network technician successfully uses the cable in question to connect directly to another computer.
Which of the following is MOST likely issue with the cable?
A. The cable is a crossover cable
B. The cable is rollover cable
C. The cable has bent pins
D. The cable is a Cat 5 cable
Correct Answer: A

"A network technician successfully uses the cable in question to connect directly to another computer"...... From the Wall or the Computer??? There
should never be room for interpretation in exam questions. It doesn't test a persons knowledge of the information. All it does is show that
someone doesn't know how to properly phrase a question.
upvoted 5 times
Which of the following is a reason why a business may be hesitant to move sensitive data to a SaaS cloud service?
A. Decreased performance of internal network
B. Loss of full control over data resources
C. Increased malware exposure
D. Incompatibility with the current network
Correct Answer: B
Users have been experiencing slow network response times, and management has asked the network technician to provide evidence of network
improvement.
After optimizing the network, which of the following would be required?
A. IDF/MDF documentation
B. Change management
C. Performance baseline
D. Physical diagram
Correct Answer: C
A network technician has created a network that consists of a router, a rewall, a switch, and several PCs. Which of the following physical network
topologies was created?
A. Star
B. Mesh
C. Ring
D. Bus
Correct Answer: D
  CarDougles 7 months, 2 weeks ago

Could someone explain why it wouldn't be a star topology? Maybe I'm confused over the wording of the question but if you have a switch why
would you use a bus over a star topology?
upvoted 2 times
  hi_Zeus 7 months, 2 weeks ago

I think they meant you to think of it as the router, firewall, and switch connecting in a line, then after the switch, you have the PCs. It would still
be more of a star. I don't get it.
upvoted 2 times
  Rz10 6 months ago

To me looks like star is the correct answer. As long as the PCs connection connects to a centralized station, switch/router, than it would consider a
start.
upvoted 2 times
  Toldaso 6 months ago

I would think it would be bus since all the nodes would be connected to a single cable or a "backbone"
upvoted 1 times

There is no way to infer how the network is connected. I'm 99% sure that this is a Star typology. Answer A.
upvoted 3 times

I think the question is asking about the overall network topology, router, firewall, and switch are in a line creating a bus. yes the switch topology is
a star but I think that part is to just throw you off.
upvoted 3 times
  amishpimp 2 months ago

Yup, review Mike Myers chapter 2 about physical network. Star is just with the device in the middle, but the firewall/router/switch lineup makes
it a BUS.
upvoted 3 times

Sheesh, people. It's a star. You can't have a switch with multiple computers in a bus. I mean... really now.
upvoted 2 times
A technician is setting up a branch o ce on a point-to-point connection. Which of the following IP network blocks is the MOST e cient use of IP
address space for the router connections between the two sites?
A. /24
B. /25
C. /30
D. /32
Correct Answer: C
  bassmonster 6 months, 2 weeks ago

can someone please explain why C is the correct answer. thank you.
upvoted 1 times
  pds1974 6 months, 1 week ago

because a /30 network can only have 2 hosts there for in a point to point connection you only need 2 host IP addresses.
upvoted 2 times

a /30 would give you a total of 62 subnet and 2 host per each subnet. to me this is wring. I'd say /25 will give you two subnet and 126 host per
each subnet. Since this is a point to point, you need only two subnets. Hence, /25 looks the correct answer.
upvoted 1 times
  Rz10 5 months, 3 weeks ago

I may miss read the question, we need two host, hence /30 is the correct answer.
upvoted 5 times

Further clarification for anyone who has never set this up: Interfact on router a 9which connects to interface on router b) needs to have a common
subnet with each other. /30 has 4 IP's, two usable. Put on IP on router A's interface, and the other usable IP on router B's interface. Configure each
routers interface to have the same network and broadcast IP. If you have a larger subnet, the other IP's would go to waste.
upvoted 3 times

Always subtract one from the total value of the 0s. Since it's /30, it means the 1&2 are available as hosts.
1+2 = 3 hosts
3-1 = 2 hosts
upvoted 1 times
A technician is upgrading the rmware on an older KVM switch. The speci cations call for a serial port to connect to the computer on one side,
and an Ethernet jack to connect to the switch on the other side. Which of the following connectors does the technician need for this cable?
(Choose two.)
A. RG-9
B. DB-9
C. RJ-11
D. DB-25
E. RJ-45
F. BNC
Correct Answer: BE
  reggieb1 8 months ago

I'm not sure if I understand the difference between B, E and D, E. Couldn't the answer really go either way?
upvoted 3 times

a DB-25 I think could technically be used, however I haven't seen a DB-25 port on anything in a long time. I doubt you would find anything other
than a DB9 on any console cable (ethernet or USB). DB-25 is a legacy connector
upvoted 3 times
  Tzu 4 months, 2 weeks ago

Older KVMs would use an older interface like a DB9, possibly
upvoted 2 times
  neo20011 1 month, 1 week ago

db9 to connect to the serial port on the computer, rj-45 to connect to the console port on the router
upvoted 1 times

Not sure why db-25 isn't a valid answer too. And why the non-plural use of "cable" when it's talking about two cables? Sloppy.
upvoted 1 times
An end-user device requires a speci c IP address every time it connects to the corporate network; however, corporate policy does not allow the
use of static IP addresses. Which of the following will allow the request to be ful lled without breaking the corporate policy?
A. DHCP relay
B. DHCP exclusion
C. DHCP option
D. DHCP reservation
Correct Answer: D
A technician is planning a remote-access strategy to manage routers and switches on a dedicated management network. The management
network is segregated from the production network and uses site-to-site VPN connections. Some of the equipment does not support encryption.
Which of the following should the technician choose that all the equipment would support?
A. Telnet
B. SSL
C. SSH
D. IPSec
Correct Answer: A
Which of the following protocols do MOST MITM attacks utilize?
A. ARP
B. SIP
C. FTP
D. SCP
Correct Answer: A
An ISP technician gets a call from a business that just changed equipment but can no longer connect to the Internet. The technician checks the
ARP table on the
ISP switch, and there is no corresponding MAC address present. Instead, the entry is "Incomplete". Which of the following could cause this
condition?
A. VLAN mismatch
B. Duplex/Speed mismatch
C. Duplicate IP address
D. TX/RX reverse
Correct Answer: B

D should be the correct answer since B only effects the performance.
upvoted 6 times

Duplex would affect performance, Speed mismatch just plain won't work. (Link will never go up/up)
upvoted 2 times

A Duplex/Speed mismatch will lead to a very slow connection, but some packets would still get through, therefore allowing the arp table to
populate. A TX/RX reverse makes communication impossible.
upvoted 2 times

The correct answer would be C. The ARP table is looking for Mac address of the device with duplicated IP address and can not resolve it.
upvoted 3 times

I believe it to be C
upvoted 2 times
  liztorres78 2 months, 3 weeks ago

I think in this particular situation, even though there may be an IP address in the ARP table, the "incomplete" MAC address would result in no ARP
reply being received for the ARP request sent out. It's an encapsulation failure and the packets aren't being forwarded...which will result in the
incomplete entry becoming purged from the ARP table after a while. It could be that the cabling was replaced (possibility) and auto-negotiation of
speed/duplex on the NIC/switch didn't resolve the issue. Therefore, you'd have to hardcode the speed and duplex settings to make it work again. It
doesn't specifically say which "equipment" was replaced, so I'm just making a guess that makes sense to me with the answer that was given.
upvoted 3 times
  ANDREVOX 1 week ago

According to Cisco Community - A will create this problem...
https://community.cisco.com/t5/networking-documents/packets-are-not-being-forwarded-due-to-incomplete-entries-in-the/ta-
p/3130612#:~:text=In%20certain%20situations%2C%20a%20Cisco,request%20that%20was%20sent%20out.
upvoted 1 times
A systems administrator has recently purchased and installed a large electronic signage screen for the company's parking garage. The screen's
management software was installed on a server with public IP address to allow remote management. The systems administrator is now
troubleshooting an issue with the screen displaying unknown, random, and inappropriate messages. Which of the following is MOST effective in
resolving this issue?
A. Changing the management software's default credentials
B. Disabling unnecessary services from the server and management software
C. Changing the management software's default port
D. Replacing the management software's self-signed certi cate with a valid certi cate
Correct Answer: A
A technician is investigating a server performance issue. The technician has gathered the server utilization statistics. Which of the following
should the technician use to determine which statistics are not in the normal range?
A. Baseline review
B. Vulnerability scan
C. System life-cycle report
D. Archiving logs
Correct Answer: A
Which of the following devices, if implemented, would result in decreased administration time of an 802.11 network running centralized
authentication services?
(Choose two.)
A. VPN concentrator
B. Proxy server
C. Wireless controller
D. RADIUS server
E. Multilayer switch
Correct Answer: CD
A technician must determine if a web page user's visits are connecting to a suspicious website's IP address in the background. Which of the
following tools would provide the information on TCP connections?
A. netstat
B. tracert
C. arp
D. ipcon g
E. route
Correct Answer: A
An administrator is moving to a new o ce. There will be several network runs through the ceiling area of the o ce. Which of the following is the
BEST to utilize in these areas?
A. Single-mode ber-optic cabling
B. Cat 5e-rated cabling
C. Cat 6-rated cabling
D. Plenum-rated cabling
Correct Answer: D

Why Plenum, it's in the ceiling area, NOT in any ductwork?
upvoted 1 times

my guess would be they are implying a drop ceiling which you will usually see air ducts above it.
upvoted 2 times
  pshimsmart 2 months, 1 week ago

This question is so basic should even be discussed.
upvoted 3 times
  BobJenkins2022 1 month, 3 weeks ago

Plenum helps reduce the chances of people dying from toxic fumes when a building is burning down. If its going into the walls, use plenum.
upvoted 5 times
A network technician receives a spool of Cat 6a cable and is asked to build several cables for a new set of Ethernet runs between devices. Which
of the following tools are MOST likely needed to complete the task? (Choose three.)
A. Wire stripper
B. Cable crimper
C. RJ-11 connectors
D. RJ-45 connectors
E. Multimeter
F. Punchdown tool
G. Tone generator
Correct Answer: ABD
As part of a transition from a static to a dynamic routing protocol on an organization's internal network, the routing protocol must support IPv4
and VLSM. Based on those requirements, which of the following should the network administrator use? (Choose two.)
A. OSPF
B. IS-IS
C. RIPv1
D. BGP
E. VRRP
Correct Answer: AB
A telecommunications provider has just deployed a new OC-12 circuit at a customer site. While the circuit showed no errors from the provider end
to the customer's demarcation point, a network administrator is trying to determine the cause of dropped packets and errors on the circuit. Which
of the following should the network administrator do to rule out any problems at Layer 1? (Choose two.)
A. Use a loopback at the demark and router, and check for a link light
B. Use an OTDR to validate the cable integrity
C. Use a pinout tester to validate the cable integrity
D. Use a multimeter to validate the cable integrity
E. Check for any devices that may be causing EMI on the cable
F. Clean the cables to be sure they are free of dust and debris
Correct Answer: AB
A single PRI can deliver multiple voice calls simultaneously using which of the following Layer 1 technologies?
A. Time division multiplexing
B. Analog circuit switching
C. CSMA/CD
D. Time division spread spectrum
Correct Answer: A
A network technician is diagnosing a time-out issue generated from an end user's web browser. The web browser issues standard HTTP get and
post commands to interact with the website. Given this information, the technician would like to analyze the entire TCP handshake of the HTTP
requests o ine. Which of the following tools would allow the technician to view the handshake?
A. Packet analyzer
B. Port analyzer
C. SNMP traps
D. Spectrum analyzer
Correct Answer: A
A customer cannot access a company's secure website. The company's network security is reviewing the rewall for the server and nds the
following output:
Which of the following changes should be made to allow all customers to access the company's secure website?
A. Allow any any 10.5.0.10 443
B. Allow any any 12.73.15.5 443
C. Allow 10.5.0.10 443 any any
D. Allow 10.5.0.10 any 10.5.0.10 80
Correct Answer: C

Correct answer is A.
upvoted 10 times
  Rajan 7 months, 2 weeks ago

It Should be 1. The sysntax format is already in the question
upvoted 3 times

sounds stupid but emulator says C
upvoted 2 times
Which of the following MUST be implemented to share metrics between routing protocols within the same router?
A. Routing loop
B. Routing table
C. Route redistribution
D. Dynamic routes
Correct Answer: B

This one is quite confusing. By "sharing", I was thinking of RIP translating its metrics to that of OSPF (and vice versa) so that routes from RIP can be
advertised to OSPF (and again, vice versa). So I think the answer is C.
upvoted 2 times
  tyler55 5 months, 3 weeks ago

Routers acheive convergence by sharing their routing tables - the correct answer is B
upvoted 6 times

I agree with Bones question stated “within SAME router” so C would be the best choice
upvoted 2 times
An engineer is reviewing the implementation requirements for an upcoming project. The basic requirements identi ed by the customer include the
following:
✑ WLAN architecture supporting speeds in excess of 150 Mbps
✑ Clientless remote network access
✑ Port-based network access control
Which of the following solution sets properly addresses all of the identi ed requirements?
A. 802.11a, IPSec VPN, 802.1x
B. 802.11ac, MPLS, 802.3
C. 802.11b, PPTP, 802.1x
D. 802.11g, MS-CHAP, 802.16
E. 802.11n, SSL-VPN, 802.1x
Correct Answer: E
Which of the following is used to classify network data for the purpose of providing QoS?
A. STP
B. VLANs
C. SIP
D. DSCP
Correct Answer: D
A network technician needs to separate a web server listening on port 80 from the internal LAN and secure the server from the public Internet. The
web server should be accessible to the public Internet over port 80 but not the private LAN. Currently, the network is segmented with a network-
based rewall using the following IP addressing scheme on each interface:
Which of the following ones should the technician use to place the web server and which of the following rewall rules should the technician
con gure?
A. Place the web server in the public zone with an inbound rule from eth0 interface to accept tra c over port 80 designated to the web server
B. Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept tra c over port 80 designated to the web server
C. Place the web server in the private zone with an inbound rule from eth2 interface to eth1 to accept tra c over port 80 designated to the
web server
D. Place the web server in the DMZ with an inbound rule from eth1 interface to eth0 to accept tra c over port 80 designated to the web server
Correct Answer: B
A company recently upgraded all of its printers to networked multifunction devices. Users can print to the new devices, but they would also like
the ability to scan and fax les from their computers. Which of the following should the technician update to allow this functionality?
A. Device software
B. Printer drivers
C. Printer rmware
D. NIC drivers
Correct Answer: C

Shouldn't it be A - device software, this would allow users to scan and fax.
upvoted 3 times
  GJEF 8 months, 1 week ago

The question is on software additional functionality, which of course most printers can perform these functions. It is assumed the device software is
already installed. The trick here is the keyword 'update' not 'install'. So C goes well in that respect.
upvoted 4 times

I disagree. The printer drivers are all that is needed to print, even the basic OS version will print. You can't scan with printer drivers, you need the
additional scanning and faxing software. I can plug in an MFD to Windows, and the OS will install the Microsoft drivers for it to print with, no
scanning or faxing ability until you install the full suite of software.
upvoted 2 times
  hickory14 5 months, 2 weeks ago

My leaning was C but I went with A because a MFD is not just a printer. Even though it's sometimes called a multi functional printer(MFP) it's
actually a printer, fax machine, and scanner so to say you're updated the printers firmware seems incorrect. If answer C was MFD firmware instead
of Printer Firmware it would be a easy answer.
upvoted 1 times
  RajRulz 3 months ago

i was leaning towards A myself, however re reading the question notice the word functionality... and not option... that i feel is the trick..... firmware
would give you access to more functions of that device while the software would give users the option to use those additional functions
upvoted 2 times

Why would the non-updated firmware of "multi-function" devices not have the basic multi-function abilities already there? You need the software
for that--but of course...they said "updating" so all bets are off as to which way to guess their intetions. Gotta love so many questions that have
nothing to do with network knowledge, just the ability to parse horribly worded trick questions.
upvoted 1 times
A disgruntled employee executes a man-in-the-middle attack on the company network. Layer 2 tra c destined for the gateway is redirected to the
employee's computer. This type of attack is an example of:
A. ARP cache poisoning
B. IP spoo ng
C. ampli ed DNS attack
D. evil twin
Correct Answer: A
The process of attempting to exploit a weakness in a network after being given permission by the company is known as:
A. penetration testing
B. vulnerability scanning
C. reconnaissance
D. social engineering
Correct Answer: A
A company has contracted with an outside vendor to perform a service that will provide hardware, software, and procedures in case of a
catastrophic failure of the primary datacenter. The Chief Information O cer (CIO) is concerned because this contract does not include a long-term
strategy for extended outages. Which of the following should the CIO complete?
A. Disaster recovery plan
B. Business continuity plan
C. Service level agreement
D. First responder training
Correct Answer: B
A typical cell tower will have microwave and cellular antennas. Which of the following network topologies do these represent? (Choose two.)
A. Point-to-multipoint
B. Bus
C. Point-to-point
D. Mesh
E. Peer-peer
F. Ring
Correct Answer: CD
A network administrator has a monitoring system in place that is currently polling hundreds of network devices at regular intervals. The
continuous polling is causing high CPU utilization on the server. Which of the following tasks should the administrator perform to resolve the CPU
issue while maintaining full monitoring capabilities?
A. Remove SNMP polling and con gure SNMP traps on each network device
B. Remove SNMP polling and implement snmpwalk on each network device
C. Upgrade SNMP to the latest version to mitigate vulnerabilities
D. Modify SNMP polling to poll only during business hours
Correct Answer: A
A contractor is setting up and con guring conference rooms for a convention. The contractor sets up each room in the conference center to allow
wired Internet access going to individual tables. The contractor measured the distance between the hotel's patch panel to the jack, and the
distance is within Cat 5e speci cations. The contractor is concerned that the room will be out of speci cation if cables are run in each room from
the wall jacks. Which of the following actions should the contractor take to ensure the cable runs meet speci cations and the network functions
properly?
A. Place a switch at the hotel's patch panel for connecting each room's cables
B. Place a switch on each table to ensure strong connectivity
C. Place repeaters between the patch panel and the rooms
D. place a switch at the wall jack and run the cables in the room from there
Correct Answer: A
  Mark0P0L0 1 month, 1 week ago

I don't understand- how switch in the patch panel place will improve cat5e length concern? It doesn't add-up. Repeaters in between, switches on
wall jacks on other hand would do the job. But from sysadmin point of view-to eliminate client-equipment unnecessary interaction- repeaters will
be the best option. Correct me if I am wrong!
upvoted 1 times
  FE80 1 month, 1 week ago

Ans is D
upvoted 1 times
  pshimsmart 4 weeks, 1 day ago

The given Answer is correct FE80 is a dead wrong google patch panel then talk later.
upvoted 1 times
Users are reporting their network is extremely slow. The technician discovers pings to external host have excessive response times. However,
internal pings to printers and other PCs have acceptable response times. Which of the following steps should the technician take NEXT?
A. Determine if any network equipment was replaced recently
B. Verify malware has not disabled the users' PC rewalls
C. Replace users' network cables with known-good network cables
D. Power cycle the web server
Correct Answer: A
  Parti 2 months ago

Could anyone shed some light why the correct answer is not D?
upvoted 2 times
  PatrickH 1 month ago

I initially choose D also BUT the troubleshooting process says to determine if any changes have been made to the network therefore A is the better
answer.
upvoted 1 times
Which of the following is a system of notation that uses base 16 rather than base 10?
A. Hex
B. Octal
C. Binary
D. CIDR
Correct Answer: A
A network administrator would like to collect information from several networking devices using SNMP. Which of the following SNMP options
should a network administrator use to ensure the data transferred is con dential?
A. authpriv
B. SHA
C. MD5
D. Authentication passphrase
Correct Answer: A
The IT manager at a small rm is in the process of renegotiating an SLA with the organization's ISP. As part of the agreement, the organization will
agree to a dynamic bandwidth plan to provide 150Mbps of bandwidth. However, if the ISP determines that a host on the organization's internal
network produces malicious tra c, the ISP reserves the right to reduce available bandwidth to 1.5 Mbps. Which of the following policies is being
agreed to in the SLA?
A. Session hijacking
B. Blocking
C. Throttling
D. Data usage limits
E. Bandwidth quotas
Correct Answer: C
A network technician has just con gured NAC for connections using Cat 6 cables. However, none of the Windows clients can connect to the
network.
Which of the following components should the technician check on the Windows workstations? (Choose two.)
A. Start the Wired AutoCon g service in the Services console
B. Enable IEEE 802.1q Authentication in Network Interface Card Properties
C. Enable IEEE 802.1x Authentication in Network Interface Card Properties
D. Start the Wireless AutoCon g service in the Services console
E. Enable IEEE 802.3 Ethernet IPv6 in Network Interface Card Properties
Correct Answer: AC
The security manager reports that individual systems involved in policy or security violations or incidents cannot be located quickly. The security
manager notices the hostnames all appear to be randomly generated characters. Which of the following would BEST assist the security manager
identifying systems involved in security incidents?
A. Enforce port security to require system authentication
B. Implement a standardized UNC
C. Label existing systems with current hostnames
D. Forward the DHCP logs to the security manager every day
Correct Answer: B
A building is equipped with light sensors that turn off the uorescent lights when natural light is above a certain brightness. Users report
experiencing network connection issues only during certain hours. The west side of the building experiences connectivity issues in the morning
hours and the east side near the end of the day. At night the connectivity issues affect the entire building. Which of the following could be the
cause of the connectivity issues?
A. Light sensors are interfering with the network
B. EMI from the lights is interfering with the network cables
C. Network wiring is run perpendicular to electrical conduit
D. Temperature changes are causing attenuation in copper cabling
Correct Answer: C

I believe this answer is incorrect. The cable isn't supposed to be run parallel to electrical conduit. But perpendicular should be okay. So B would
make more sense as being the problem, since the entire building is affected at night.
upvoted 10 times

I am fairly certain you are **supposed** to run network cable perpendicular to the electrical conduit to preserve communication and minimize
disruption. I think the answer is "B" as well.
upvoted 10 times

B should be the correct answer.
upvoted 2 times
  GJEF 7 months, 2 weeks ago

Options A and B mean the same thing, though B is technically more appropriate and suitable for this scenario.
upvoted 1 times
  Beccken 4 months, 1 week ago

Electricity runs through the cables for the light regardless whether they are on or off. If that was the case, then each side of the building will
experience problems all the time instead of certain times of the day. The issue is the lights creating EMI, because they come on at different times
during the day. The answer should be "B"
upvoted 3 times
A network technician con gures a rewall's ACL to allow outgoing tra c for several popular services such as email and web browsing. However,
after the rewall's deployment, users are still unable to retrieve their emails. Which of the following would BEST resolve this issue?
A. Allow the rewall to accept inbound tra c to ports 25, 67, 179, and 3389
B. Allow the rewall to accept inbound tra c to ports 80, 110, 143, and 443
C. Set the rewall to operate in transparent mode
D. Allow the rewall to accept inbound tra c to ports 21, 53, 69, and 123
Correct Answer: B
A network security technician observes multiple attempts to scan network hosts and devices. All the attempts originate from a single host on the
network. Which of the following threats is MOST likely involved?
A. Smurf attack
B. Rogue AP
C. Compromised system
D. Unintentional DoS
Correct Answer: C
  alphaomega 4 months, 3 weeks ago

The answer should be "A", for more explanation, check this.
https://en.wikipedia.org/wiki/Smurf_attack
upvoted 1 times
  ZiggyZach 3 months, 3 weeks ago

Smurf Attack isn't on the exam objectives at all though
upvoted 1 times
  rbrink2001 3 months, 2 weeks ago

That source does not describe what is happening in the question at all, which means to me that the answer is 'C'
upvoted 3 times
Which of the following would be the MOST e cient subnet mask for a point-to-point link?
A. /28
B. /29
C. /31
D. /32
Correct Answer: command:C
  Jkiernan 4 months, 3 weeks ago

this would be b /29 because there are no available hosts on a /31 address because they would be taken up by the network and broadcast address
upvoted 2 times

Agreed, just did the sub net calculations, answer is '/29'
upvoted 1 times

I’m guessing if you’re configuring a Boarder Router / WAN Link a /31 should work.
upvoted 2 times
  chtl 2 months, 3 weeks ago

It is /31 ! It works well ! just test it or google just a minute...
upvoted 4 times
  BMS0598 2 months, 1 week ago

Since this is for a PPP connection a /31 is the best option. Look for RFC 3021 on Google
upvoted 4 times
  MonkeyScent 2 months, 1 week ago

Some of you need extensive studies.. you can't use the final two bits. /31 and /32 are off limits.
upvoted 1 times

From what I've found everywhere online, the answer is /31.
upvoted 1 times
  MarMar08 2 months, 1 week ago

Although /29 sounds correct, I am pretty sure its /31
upvoted 2 times
  Astrodarl 2 weeks, 3 days ago

RFC 3021 was introduced to allow the use of /31 subnets specifically for point-to-point links that don’t require a local broadcast. In these networks,
any packet sent by one node must be intended for the other node, as there are no other possibilities
upvoted 2 times
An o ce user cannot access local network drives but has full access to the Internet. A technician troubleshoots the issue and observes the
following output of the ipcon g
Which of the following would MOST likely allow the network drives to be accessed?
A. Update the WLAN adapter driver
B. Disable the WLAN adapter
C. Check the wireless DHCP con guration
D. Disable the LAN adapter
Correct Answer: B
Ann, a network technician, has just installed a ber switch in a datacenter. To run the ber cabling, Ann plans the cable route over the top of the
rack using the cable trays, down to the switch, coiling up any excess cable. As Ann con gures the switch, she notices several messages in the
logging buffer stating the receive signal of the SFP is too weak. Which of the following is MOST likely the cause of the errors in the logging buffer?
A. Bend radius exceeded
B. Fiber cable mismatch
C. Fiber type mismatch
D. Bad ber switch
Correct Answer: A
Which of the following wireless connection types utilize MIMO on non-overlapping channels? (Choose two.)
A. 802.11a
B. 802.11ac
C. 802.11b
D. 802.11g
E. 802.11n
Correct Answer: BE
A network technician is creating a new subnet for 488 host machines. The technician is told to use a class B address scheme when making the
subnet and is instructed to leave as much room as possible for additional subnets of the same size. Which of the following subnets would ful ll
these requirements?
A. 10.5.4.0/22
B. 10.233.2.0/23
C. 172.16.0.0/22
D. 172.18.0.0/23
E. 192.168.25.0/24
Correct Answer: D

How come this one is D
upvoted 1 times

Firstly, it can be either option C or D - "technician is told to use a class B address scheme"
Secondly, both /22 and /23 match minimum host requirements - "network technician is creating a new subnet for 488 host machines"
Thirdly, the /23 provides you more subnets - "instructed to leave as much room as possible for additional subnets of the same size"
upvoted 4 times
  Mark0P0L0 1 week, 6 days ago

I will say 1 thing: 172 is nothing like B-class IP, but C-class. 10 on other hand is just that and falls the category
"technician instructed to leave as much room as possible for additional subnets of the same size"- means efficiency and of not utilizing extra,
(which brings us to /22), unnecessary address.
A. will fit all the described.
upvoted 1 times
  Tart 6 days, 12 hours ago

...what? 10 falls under Class A scheme. 172 falls under Class C.
Please do not spread misinformation.
upvoted 1 times

Sorry, I meant 172 falls under Class B, but my point still stands.
upvoted 1 times
  Babelaz 1 week ago

D is correct as this is a Class B IP (between 128.0.0.1 - 191.255.255.254)
/23 Allows 510 Hosts 172.18.0.1 - 172.18.1.254
There's additional subnets of the same size for future use
e.g 172.18.2.1 - 172.18.3.254 for hosts
/22 is a waste, therefore C is incorrect
upvoted 1 times
A network engineer is designing a new IDF in an old building. The engineer determines the equipment will t in a two-post rack, and there is power
available for this equipment. Which of the following would be the FIRST issue to remediate?
A. Air ow and cooling
B. UPS capability
C. Circuit labeling
D. Power redundancy
Correct Answer: A
  Parti 2 months ago

Is this correct? "Advantages of 2-Post racks include:
Cooling – Since 2 post racks are not enclosed, airflow is circulated easily. Fans on rack-mounted equipment will easily disperse the heat out into the
open area. (https://www.racksolutions.com/news/blog/2-post-rack-vs-4-post/)
upvoted 2 times
Which of the following DNS records needs to be con gured for SMTP tra c?
A. MX
B. CNAME
C. AAAA
D. PTR
Correct Answer: A
In which of the following ways does a DDoS attack differ from a spoo ng attack?
A. DDoS attacks target multiple networks
B. Spoo ng attacks originate from a single host
C. DDoS attacks are launched from multiple hosts
D. Spoo ng attacks require physical presence
Correct Answer: C
A user checks an IP address using an external website. The address is different than the one the user sees when opening a command prompt and
typing in
. The user does not understand why the two tools show different IP addresses. This is BEST explained by the interworking of: ipcon g/all
A. network devices
B. packet ow
C. public/private networks
D. tra c-routing protocols
Correct Answer: C
Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?
A. Broadband
B. Baseband
C. Analog modem
D. CSMA
Correct Answer: A
To replace a defective UPS, the network administrator must take the switch o ine. The administrator wants to be able to perform maintenance
UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?
A. Add a redundant power supply to the switch
B. Implement stacking on the switches in the rack
C. Add a second UPS into the rack
D. Install a power converter for the switch
Correct Answer: A
  K123 9 months ago

Two power supplies plugged into one UPS would still take down the switch if the UPS was down, right? I think an additional UPS and an additional
power supply would be a better answer.
upvoted 3 times

Agreed with K123, that made C is a better answer.
upvoted 1 times
  Darktrine 8 months, 1 week ago

I also thought that at first, unless the redundant power supply is plugged into the wall and not the ups and only used when changing out or
servicing the UPS. The only way another UPS would work is if there is another power supply, which makes A still correct. If you plugged one UPS
into the other, you would still need to shut down the whole system to service the UPS plugged directly into the server.
upvoted 10 times
A forensic rst responder arrives at the scene where an employee is suspected to have committed a computer-based crime. Which of the
following should the rst responder do FIRST?
A. Document the scene
B. Take pictures upon arrival
C. Secure the area
D. Implement chain of custody
Correct Answer: C

I agree with the answer and even chose that answer. However, this isn't covered in ANY network+ study material or compTIA's criteria for the exam.
So why is it even on here?
upvoted 2 times

I believe that this topic is covered in the A+, which is considered fair game for the Network+ since Comptia assumes you have the knowledge.
upvoted 1 times
A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing
the ve-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following
is the network engineer being asked to implement?
A. LAN
B. PAN
C. MAN
D. WAN
Correct Answer: C
An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business
trips. Which of the following is needed to protect BOTH the employee and the company?
A. An NDA ensuring work data stored on the personal phone remains con dential
B. An AUP covering how a personal phone may be used for work matters
C. A consent to monitoring policy covering company audits of the personal phone
D. Real-time remote monitoring of the phone's activity and usage
Correct Answer: D
  drlarkins 8 months, 3 weeks ago

Real-Time Remote Monitoring does NOT protect the employee nor the employer from how the personal phone is being ‘used’. Furthermore, RTRM
is NOT IN WRITING. The answer is B. An AUP covering how a personal phone may be used for work matters.
upvoted 5 times
  Matty 8 months, 2 weeks ago

I agree. Correct answer is b) AUP
upvoted 3 times

A test I did with Jason Dion training that was worded very similar had the same correct answer as this. So its very likely in CompTIAs mind this is the
correct answer. I was shocked as well the first time I saw a question answered like this. Who in their right mind is going to allow their company to
monitor their PERSONAL phone in real-time?!
upvoted 6 times

At the same time, its the employee who wants to bring in his device, the employer is not asking to do so. So I believe the answer is correct.
upvoted 1 times

I work for a fortune 100 company and D is what is most popular from what I can see. D is correct in the real world. The reality is that you have the
option to put work on your phone, if you don't want it, you don't have to have it monitored either.
upvoted 1 times

I'm sure this is the correct answer, but like many other answers, I disagree with what should be done.
upvoted 1 times
Which of the following protocols can be both connection-oriented and connectionless?
A. 20 FTP
B. 53 DNS
C. 67 DHCP
D. 80 HTTP
Correct Answer: B
Which of the following BEST describes the differences between VLAN hopping and session hijacking?
A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves
overriding a user's web connection to execute commands
B. VLAN hopping is a brute force attack executed to gain additional access. Session hijacking involves physically disrupting a network
connection
C. VLAN hopping involves overriding a user network connection to execute malicious commands. Session hijacking involves compromising a
host to elevate privileges
D. VLAN hopping is the act of exploiting poor VLAN tagging. Session hijacking is a web-based attack aimed at privilege escalation
Correct Answer: A
An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organization's network. As part of
the attack, the analyst launches a fake access point matching the SSID of the organization's guest access network. When a user connects to the
fake access point, the analyst allows the tra c to ow through the access point to the legitimate site while the data traversing the network is
logged for latest analysis and exploitation. Which of the following attacks has the analyst successfully performed in this scenario?
A. Bluesnar ng
B. Session hijacking
C. MAC spoo ng
D. VLAN hopping
E. Man-in-the-middle
Correct Answer: E
A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's rewall to allow
customers to retrieve a large le. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)
A. Document the reason for the request
B. Scan the le for malware to protect the sales department's computers
C. Follow the company's approval process for the implementation
D. Install a TFTP server for the customers to use for the transfer
E. Create a honeypot to store the le on for the customers to use
F. Write the SLA for the sales department authorizing the change
Correct Answer: AC
A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not
modify the laptop in any way, and the wireless Internet is functional on other users' laptops. Which of the following issues should be reviewed to
help the user to connect to the wireless network?
A. Wireless switch toggled off
B. WAP settings
C. WLAN IP address out of scope
D. Wireless controller miscon guration
Correct Answer: A

Uhmmm. Wouldn't that fall under "The user did not modify the laptop in any way,"
upvoted 4 times
  nicedongers33 5 months, 1 week ago

My thoughts exactly, this is just a terrible question in general. Just gonna hope this one doesn't show up on the test.
upvoted 1 times
  Rigatoni 4 months, 3 weeks ago

Consider this..."The user CLAIMS they did not modify the laptop in any way,.."
Does that appear a little more clearer for you?

upvoted 1 times

Yes, but that's not what the question says.
upvoted 1 times
  Eye_Tea 5 months, 1 week ago

You're thinking slightly too logically.
They want us to assume that the user turned on airplane mode, thus disabling wifi.
The average user won't even investigate much themselves, they'll simply put in a ticket and wait for support to fix the "problem", except the real
problem is in the chair.
upvoted 6 times
  Shunglee 4 months, 1 week ago

I've had this exact same question on many Net+ practice tests. Another way this could be interpreted would be that he didn't change anything
manually but perhaps when he took the laptop out of his backpack or moved it to another location the user might have accidentally turned the
physical wireless switch off.
upvoted 2 times

"The user did not modify the laptop in any way"... Therefore the Wifi would still be on, on the laptop. Not modifying a laptop in "any way" indicates
that everything in exactly the same on the laptop as it was before. Exam questions should not be misleading or open to interpretation. They should
be specific and factual. This question is NOT factual. It in fact it actually lies to you. Don't get me wrong, the answer is still where I would start, but it
doesn't indicate whether the statement came from. If it came from the user, then yeah, you can assume that something could have accidentally
changed on the laptop without them knowing. If the statement came from compTIA and is strictly information about the situation in the question,
then you are to assume the problem isn't with the laptop... because compTIA told you that themselves! This is a poorly written question.
upvoted 3 times

They maintain a percentage of poorly worded, ambiguous questions to allow them to dial in the desired pass/fail ratio by just altering the number
of those type of questions in a given test cycle. "Too many passing this month? Sprinkle in some more of the 50/50 questions!"
upvoted 2 times
  felcar0817 2 weeks, 2 days ago

we are assuming that the user accidentally turn off the wireless switch, uhmm. Weird
upvoted 1 times
A network administrator wants to increase the con dentiality of the system by hardening the authentication process. Currently, the users log in
using usernames and passwords to access the system. Which of the following will increase the authentication factor to three?
A. Adding a ngerprint reader to each workstation and providing a RSA authentication token
B. Adding a ngerprint reader and retina scanner
C. Using a smart card and RSA token
D. Enforcing a stronger password policy and using a hand geometry scan
Correct Answer: A
A network technician is building a network for a small o ce. The o ce currently has cable TV and now requires access to the Internet without
adding any cabling other than what is already in place. Which of the following solutions should the technician install to meet these requirements?
A. DOCSIS modem
B. Wireless router
C. DSL modem
D. Access point
Correct Answer: A
A network engineer arrives at work and discovers that many users are having problems when attempting to connect to the company network
shared drives. The network operations center (NOC) technician just completed server upgrades the night before. To which of the following
documents should the NOC technician refer to determine what potentially caused the connectivity problem?
A. Network maps
B. Cable management
C. Release notes
D. Change management
Correct Answer: D
Which of the following VPN protocols establishes a secure session that can be initiated using a browser?
A. IPSec
B. SSL VPN
C. PTP
D. PPTP
Correct Answer: B
A technician is setting up a public guest network for visitors to access the Internet that must be separate from the corporate network. Which of
the following are the
BEST steps for the technician to take with minimum overhead con guration? (Choose two.)
A. Enable SSID broadcasting to identify the guest network
B. Con gure visitor devices to use static IP addresses
C. Enable two-factor authentication on visitor devices
D. Con gure the access point to use WPA2-AES encryption
E. Ensure the access point is not running in mixed mode
Correct Answer: AB

Correct answer should be A & D. Since B is required max overhead.
upvoted 13 times

Also, what are the chances a network administrator can physically configure "all" guest devices to use static IP addresses?
upvoted 2 times
  Matty 8 months, 2 weeks ago

Agreed!
upvoted 6 times
  gandal 6 months, 1 week ago

A&D should be the correct answers.
upvoted 3 times
  csgx 3 months, 3 weeks ago

Why not A and E?
upvoted 2 times

My immediate assumption was A and D. You know what? It still is.
upvoted 3 times
When choosing a type of storage that integrates with the existing network infrastructure, the storage must be easily con gurable to share les and
can communicate with all existing clients over TCP/IP. Which of the following is the BEST technology for the network administrator to implement?
A. iSCSI
B. Fibre Channel
C. NAS
D. DAS
Correct Answer: C
A network technician is installing a new network switch is looking for an appropriate ber optic patch cable. The ber optic patch panel uses a
twist-style connector. The switch uses a SFP module. Which of the following connector types should the ber patch cable have?
A. LC
B. ST
C. SC
D. MTRJ
E. MTP
Correct Answer: B
  Core7 6 months, 1 week ago

twist-style SC connector
upvoted 1 times

The given answer is correct:
SC connectors also use a round 2.5mm ferrule to hold a single fiber. They use a push-on/pull-off mating mechanism which is generally easier to
use than the twist-style ST connector when in tight spaces.
https://www.cablestogo.com/learning/connector-guides/fiber-networking
upvoted 4 times

SC is a square plug though LoL
upvoted 1 times
  Babelaz 1 week ago

ST is Twist
upvoted 1 times
Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?
A. ISDN
B. MPLS
C. PRI
D. Broadband cable
E. Frame relay
Correct Answer: E
  FatPac 8 months ago

Frame relay has already been replaced by MPLS so shouldn't B be the answer?
upvoted 4 times
  Shunglee 4 months, 1 week ago

Yea I thought that same thing @FatPac
upvoted 1 times
  FE80 1 month, 1 week ago

Ans is B
upvoted 1 times
A network administrator wishes to ensure there are no unnecessary open communication paths into a server. Using a port scanner, the
administrator nds that ports are reported as closed. Which of the following BEST explains this response?
A. The ports belong to an active system and are denying requests
B. The ports are associated with deprecated services
C. The ports do not belong to a live system
D. The ports replied with a SYN/ACK response
Correct Answer: B
  pshimsmart 3 months ago

A is correct. If you send an SYN packet to a closed port, an RST flag will be sent back.
“When a port is closed, RFC 793 behavior is to respond with an RST “reset” packet.”
upvoted 2 times
  markychaz 2 months ago

This is exactly what I was thinking
upvoted 2 times
  Javier25 1 month, 3 weeks ago

question says he used a port scanner
upvoted 2 times
Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are
intermittent but seem to occur most often around midday. Which of the following is the MOST likely cause?
A. There is interference from small appliances
B. The signal coverage area is too small
C. Not enough DHCP addresses have been allotted
D. The DNS cache on the users' computers has become corrupt
Correct Answer: C

The answer is:
A. There is interference from small appliances.
This is because at lunch (midday) the microwaves are being used at the 2.4GHz range. It has nothing to do with DHCP. They’re ‘losing’ connectivity,
which indicates that they’ve already received a DHCP address.
upvoted 16 times

Agree!
upvoted 2 times
  InfoSec 7 months ago

Interference from Microwave (specifically mid-day lunch hour) that's the reason.
upvoted 4 times

I picked up A for the best answer, the other answers are not even making sense to the given scenario. However, i didn't think of using microwave
would cause losing connection.
upvoted 1 times

i agree with A... staff are on lunch.. hence DHCP does not have to issue alot of IPs
upvoted 1 times

Why is every "interference" question wrong on this site? This could really hurt people that don't know any better!
upvoted 1 times

Perhaps, it is C because as the day goes on, the DHCP runs out of addresses. It just happens around Mid-Day. The answer A may be a red herring.
How close is this network to these small appliances that it causes network issues?
upvoted 1 times

This is a good explanation for the answer.
upvoted 2 times
  Digo 3 days, 21 hours ago

but out of address DHCP does not result slow connection speeds
upvoted 1 times
A user reports di culties connecting a PC to a wired network. The PC connects to an IP phone, which is working correctly. A network technician
can verify that other devices successfully connect to the phone. At which of the following layers of the OSI model is the problem MOST likely
located?
A. Network
B. Physical
C. Transport
D. Application
Correct Answer: A

What does it mean by ‘connecting’ ? Do they mean physically or can’t ‘connect’ logically ? This question is BOGUS. What if it’s the NIC card in the
PC ? What if it’s the network cable ? The question doesn’t say if the SAME cable is being used ! The answer could in fact be ANY of the OSI Layers
as the issue. I’m going with Physical.
upvoted 8 times

I think physical also makes the most sense.
upvoted 1 times

Physical connection.
upvoted 1 times

I think the issue is "logical".
upvoted 1 times

Physical is the correct answer. Other devices are successfully connecting the IP phone which routs VoIP. the problem stays with PC, type of cable
which is consider as Physical layer.
upvoted 2 times

If it were physical the phone wouldn't work with the PC... That's why they added that bit of information.
upvoted 1 times
  MarleyChao 5 months ago

I had run into this issue many times and normally it was because the PC had static IP instead of DHCP. An IP related issue should be layer 3,
network layer.
upvoted 4 times

I agree
upvoted 1 times
Which of the following physical security controls is MOST likely to be susceptible to a false positive?
A. Identi cation card
B. Biometric device
C. Proximity reader
D. Video camera
Correct Answer: C

MOST likely to me would be Cameras because someone could be falsely identified more easily than a proximity reader.
upvoted 1 times
  Accurate1 3 weeks, 2 days ago

I thought biometric devices cause more false positives
upvoted 1 times
An assistant systems analyst reports the following ndings of an investigation of slow Internet connections in a remote o ce to the senior
systems analyst:
Which of the following devices is causing the issue?
A. Router
B. Firewall
C. Switch 1
D. Switch 2
Correct Answer: B
A small business developed an in-house application that is very sensitive to network latency when a communicating between servers. Due to a
lack of funds, the business had to build its own network for workstations and servers. Now a network administrator must redesign the network
due to performance issues with the application. Which of the following would be the MOST cost effective for the administrator to recommend?
A. Create Ethernet VLANs
B. Disable autonegotiation on the servers
C. Install 10Gb Ethernet NICs in the servers
D. Install Fibre Channel for the server network
Correct Answer: C

Answer is A - most COST effective
upvoted 5 times

Two factors are involved and must be considered together: network latency and cost-effective. A is cost-effective but doesn't solve the issue of
network latency. C solves the issue of network latency and it's equally cost-effective.
upvoted 7 times

I believe this is correct - Creating VLANS are cost-effective but the keyword here is "sensitive to network latency" - which is what C would solve.
CompTIA seems to word these questions in a very particular manner and throw you off.
upvoted 1 times

Answer is A-- While C is still cost effective the question hinges on the fact that he/she "must redesign a network." Both NICs and VLANS are
definitely included when thinking through redesigning a network. However, pertaining to the actual question itself, "MOST cost effective for the
administrator to recommend?" Answer A, is still the most cost effective portion even though it may not solve the initial latency. The point is that
he/she is redesigning the network which would leave us @ A.
upvoted 2 times
  jason24 4 weeks, 1 day ago

Reducing all the broadcast traffic hitting the routers will likely reduce latency. VLANs are free (if you have the switch). Absolutely the answer is A.
upvoted 2 times

Answer = A
https://www.solarwindsmsp.com/blog/what-are-
vlans#:~:text=VLANs%20circumvent%20the%20physical%20limitations,measures%2C%20and%20decrease%20network%20latency.
upvoted 1 times
A network technician is con guring a rewall access list to secure incoming connections to an email server. The internal address of this email
server is
192.168.1.143. The rewall should allow external email servers to send email to the email server. The email server also supports client access via
a web browser.
Only secure protocols should be used, and only the necessary ports should be open. Which of the following ACL rules should be con gured in the
rewall's WAN port? (Choose two.)
A. Permit 192.168.1.143.25
B. Permit 192.168.1.143.80
C. Permit 192.168.1.143.110
D. Permit 192.168.1.143.143
E. Permit 192.168.1.143.443
F. Permit 192.168.1.143.587
Correct Answer: EF
A network administrator is testing connectivity at a new corporate site. The site has a wireless guest as well as a wired employee network. After
verifying connectivity, the administrator checks link speeds by using a speed testing website. The speed testing website shows lower download
and upload speeds for the wired network than the wireless network. Which of the following is the MOST likely explanation?
A. There is less local congestion on the wireless network
B. The testing server for the wired network was farther away
C. The rewall is con gured to throttle tra c to speci c websites
D. The wireless access points were miscon gured
Correct Answer: B

In my opinion, the answer must be:
C. The firewall is configured to throttle traffic to specific websites
Their answer doesn’t make any sense.
upvoted 1 times

I think B is still correct. When doing internet speed test, you can choose the location to send the test packets to, if the location is far from the host
you will get lower speed than a closer one.
upvoted 6 times

I felt strongly towards A but the question doesn't give enough information in my opinion to give a correct answer. My reasoning was it' possible
that the company has very few guests yet the companies employees are likely to be using up much of the available bandwidth.
upvoted 4 times

The answer S/B "A" We don't typically specify which site to use when performing speed tests...really? We just do it. Both wired and wireless tests are
going to the same site. Chances are, there are less wireless guests than there are wired employees running tests. The wired tests are crowding the
site. I would say the answer should be "A".
upvoted 2 times

A for sure. The other one (further away test site!? LOL) is rather idiotic.
upvoted 1 times

The answer = B
See Section on - What factors may impact my Speedtest result?
https://www.speedtest.net/about/knowledge/faq#factors
upvoted 1 times

I would say A. https://www.speedtest.net/about/knowledge/faq#factors.
"Devices (phones, tablets, PCs, etc…) can have very different Wi-Fi and cellular radio capabilities. This means you might get one Speedtest result on
one device and a different result on another, even using the same provider. Some devices may not be able to measure the full speed of your
internet service. It’s also possible that your Wi-Fi router doesn’t support the full speed of your service."
upvoted 1 times
A technician replaces a failed router with a spare that has been in inventory for some time. After attempting to enable HTTPS on the spare router,
the technician discovers the feature is unavailable. The support o ce was able to connect to the previous router. Which of the following actions
should the technician perform to enable HTTPS access for the support team?
A. Reboot the router
B. Enable HTTP on the router
C. Update the rmware of the spare router
D. Perform a factory reset on the router
Correct Answer: C
A technician is trying to con gure a previously owned WAP. The technician successfully logs into the administrative console and attempts to input
the IP address on the WAP. However, the WAP is not accepting the command. Which of the following is causing the problem?
A. The WAP antenna is damaged
B. The WAP transmitter light is dim
C. The terminal emulation software is miscon gured
D. The LWAPP image is installed on the WAP
Correct Answer: C
SIMULATION -
Your company recently purchased a new building down the street from the existing o ce. For each of the tasks below, select the appropriate
antenna type and encryption object for all wireless access point (AP).
1. Create an encrypted wireless connection between the two buildings that BEST controls signal propagation, while maximizing security.
2. Restrict the wireless signal generated by the access points (APs) inside Building 1, so that it minimizes broadcast beyond the building.
3. Maximize wireless coverage inside Building 1.
4. Building 1's internal wireless network is for visitors only and must not require any special con guration on the visitor's device to connect.
Instructions: When you have completed the simulation, select the Done button to submit.
Correct Answer: See explanation below.
  ArcRiseGen 4 months ago

So for the rooms on the bottom left/right in Building 1, why do we use Directional Right and Directional Left respectively?
upvoted 1 times
  Jaqknife 3 months, 2 weeks ago

for AP4 and AP5 the 2 buildings need to communicate with each other.
upvoted 2 times
  Jaqknife 3 months, 2 weeks ago

for AP1 and AP3 I'm assuming to prevent the single from spilling outside of the building.
upvoted 2 times

Open wifi with no security... I don't care how direction their antennas are. You don't do open Wifi!
upvoted 1 times

They did say that it's a network for visitors and to not have any special configuration, so that means open. In reality, that's wild.
upvoted 1 times
A technician has installed a Linux server in the tax o ce. The server can access most of the resources on the network, but it cannot connect to
another server that has a share for backup. The technician learns that the target server is on a different subnet. Which of the following tools
should the technician use to ensure the
Linux server can reach the backup location?
A. netstat
B. traceroute
C. route
D. dig
E. ifcon g
Correct Answer: B
  connorhoehn 3 months ago

Route - add an entry
upvoted 2 times
  zahiton 1 month, 1 week ago

traceroute are computer network diagnostic commands for
displaying the route and measuring transit delays of packets across an Internet Protocol network.
With the "route" command the technician can add a static route to reach the backup location.
I think the correct answer here is C
upvoted 1 times
  neo20011 1 month ago

these questions are really so badly written, from the perspective of a "tool" to confirm the network path then traceroute is correct, however to
make it work then you need to add a route statement. Within the context of this question though, it seems traceroute is what they are looking for,
but their questions are horribly written.
upvoted 2 times

Route. Traceroute might confirm it can reach it, but can't ensure it can reach it. Route can.
upvoted 1 times

I believe in this case, ensure means "How do we know that Linux server can reach the target server?" Well, if traceroute is successful, you just
ensured that it reached.
The question did not ask you to create a route.
But, yeah. They're written this way on purpose and I hate it.
upvoted 2 times

IanBilbo12 is indeed correct. The wording of these questions are designed to be confusing and it's best to re-read what they're TRULY asking - it
was asking what tool the tech can use to ENSURE that it can reach the target server.
upvoted 1 times
Which of the following WAN technologies provides a guaranteed throughput rate?
A. DSL
B. T-1
C. Cable broadband
D. Dial-up
Correct Answer: B
Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?
A. 2001::d58::95:7565:1
B. 2001:0:d58:0:0:95:7565:1
C. 2001:0:d58::95:7565:1
D. 2001:0:0d58::95:7565:1
Correct Answer: C
A network administrator needs to transmit tra c to geographically diverse sites to improve performance. Which of the following devices would
BEST direct tra c to the remote sites?
A. Hub
B. Bridge
C. Switch
D. Router
Correct Answer: D
Which of the following should a technician investigate when using a network baseline to troubleshoot?
A. Tracing a network wire connectivity issue from the datacenter to a host.
B. Determining if the server performance is degraded.
C. Changes that have been made to the network con guration.
D. Location of networking equipment in a rack.
Correct Answer: B

How can you "investigate" "determining if server performance has degraded"? That doesn't even work as a sentence. You can investigate "changes"
though.
upvoted 4 times
A technician needs to upgrade a SOHO wireless router's rmware. The technician resets the router to factory settings and installs the new
rmware. The technician enters the DHCP information and sets the SSID. Which of the following con gurations would provide the MOST
protection from advance hackers?
A. Disable the broadcasting of the SSID.
B. Enable WPA2 authentication for all hosts.
C. Use private addressing for the DHCP scope.
D. Install unidirectional antennas.
Correct Answer: B
A technician notices clients are receiving a 169.254.x.x IP address following the upgrade of a server. Which of the following ports should the
technician check on the local server rewall?
A. ports 20 and 21
B. ports 67 and 68
C. ports 80 and 443
D. port 123 and 8080
Correct Answer: B
Which of the following datacenter security methodologies is MOST likely to remain usable during a network outage?
A. biometric scanners
B. door locks
C. video surveillance
D. motion detectors
Correct Answer: B
A network technician is implementing a solution on the network to hide the workstation internal IP addresses across a WAN. Which of the
following is the technician con guring?
A. QoS
B. DMZ
C. RIP
D. NAT
Correct Answer: D
Employees want the ability to use personal devices on the guest network while working out at the company gym. In order to meet the request,
which of the following policies requires employee adherence?
A. AUP
B. SLA
C. NDA
D. MOU
Correct Answer: A
Which of the following BEST describes the BGP routing protocol?
A. distance vector
B. hybrid
C. static
D. link state
Correct Answer: B

BGP is a distance vector routing protocol. EIRGP is a hybrid.
upvoted 7 times
  SilentJumper 4 months, 1 week ago

No its not, its hybrid
upvoted 3 times

Professor Messer says BGP is hybrid. Going with him
upvoted 3 times

BGP is Border Gateway Protocol. Classified as a Path Vector Protocol but is sometimes also classed as a Distance Vector Routing Protocol.
upvoted 6 times
  aga84 2 months, 1 week ago

According to the official Comptia Network+ Guide : BGP is not a pure distance-vector algorithm but uses a hybrid approach. In fact, BGP is more
usually classed a path vector routing protocol. A very confusion question.
upvoted 3 times
  krand 3 weeks ago

According to certblaster: "The Border Gateway Protocol is considered a hybrid protocol in the CompTIA objectives as it employs elements of both
Link-state and distance-vector protocols."
upvoted 1 times

According to Mike Meyers the BGP is a hybrid model and EIRGP is listed a distance vector for CompTIA exam.
upvoted 1 times
  Aras 2 days, 4 hours ago

According to Anthony Sequeira, CCIE No. 15626 (Network+ N10-007), 'some literature classifies BGP as a distance- vector routing protocol, it can
more accurately be described as a path- vector routing protocol'.
upvoted 1 times
A customer is reporting di culty connecting some devices after replacing a wireless router with a new wireless 802.11ac router. The SSID,
encryption and password are the same as the previous router. A technician goes on-site and notices the devices that are no longer connecting
appear to be several years ago.
Which of the following is MOST likely the problem?
A. the password needs to be re-entered.
B. there is a security type mismatch.
C. there is insu cient antenna power.
D. there is a frequency mismatch.
E. the channel has changed.
Correct Answer: D
Multiple users are reporting that they are unable to access the network. The ENTIRE network is shown in the diagram. PCs are not statically
assigned IP addresses. The following devices will display settings:
✑ WorkstationA
✑ WorkstationB
✑ WorkstationC
✑ WorkstationD
✑ WorkstationE
✑ WorkstationF
✑ WorkstationG
✑ Laptop1
✑ Laptop2
DHCP server1 -
✑ DHCP server2
Review the settings and select the box in the diagram that identi es the device causing the issue. Only one device can be selected at a time.
After checking the device that is causing the issue, select the second tab in the lower left hand corner. Identify the reason as to why some users
are unable to access the network.
Instructions:
When the simulation is complete, select the Done button to submit.
Part 1 -
Part 2 -
Identify the reason as to why some users are unable to access the network.
A. Workstation(s) are plugged into switch ports con gured with half duplex.
B. The site-to-site router was con gured with the incorrect ACL.
C. DHCP server scope is full and is not providing IP addresses.
D. WAN and LAN ports are reversed on the router.
E. STP had disabled some of the ports on the switch.
F. The NIC driver is not installed.
G. A wireless client is unable to associate to the AP.
Correct Answer: G
  Estiva 8 months, 1 week ago

What’s the answer of part 1?
upvoted 3 times
  GeraltofRivia 6 months, 1 week ago

DHCP Server 2 has wrong IP address. The default gateway is 172.16.0.1 and the IP address is 172.30.0.5. Need to assign DHCP server an IP
address in the 172.16.0.0/24 network.
upvoted 11 times

There are many of devices has problem.
Station A:
workstation C : Apipa Address
Station B:
Workstation D, E, Laptop1 All has wrong Default gateway assigned to them.
DHCP 2: is on a different subnet 172.30.0.5 Needs a sub net range of 172.16.10.0.1-255
upvoted 3 times
  IhcimYmra 5 months ago

For Part 1, I agree with your answer for Site A, Workstation C (APIPA address) as well as your answer for Site B, DHCP2 (needs an IP address
that's within the DHCP Scope of 172.16.0.1-255 because its Gateway is 172.16.0.1). However, I disagree with your answer for Site B, Workstation
D, Workstation E, and Laptop 1. The Default Gateway for these should all be 172.16.0.1 (Router A).
upvoted 5 times

Ok, let me add some here too>>
Site A:
WS C- APIPA address, no Gateway assigned.
Site B:
DHCP2 IP address is same as 1st one- which is wrong considering that it is not even same subnet, so 172.30.0.5 should kind of become
172.16.0.5 for 2nd DHCP.
Laptop 1, WS D, WS E - I see no problem with it, enlight me if I am wrong, where it is and why their def gateway is wrong?.
WS F and WS G have wrong IP: 172.16.10.43 & 172.16.10.1 (10 instead of 0, which is separate subnet) respectively and seem have their SOHO
router as Gateway instead Router B.
Have I missed anything?
Oh yeah- regarding wireless devices- i would separate them, but here they all are on respectively same subnet as the rest of their site. well
VLAN will do the job then.
upvoted 1 times
Which of the following should be performed to verify that unnecessary services are disabled on all switches in an environment?
A. Packet capturing
B. Port scanning
C. Log scanning
D. Baseline review
Correct Answer: B
A technician is sent to a remote o ce to set up a device to connect to the Internet. The company standards document requires stateful
inspection. Which of the following should the technician install?
A. Router
B. Multiplayer switch
C. Firewall
D. Bridge
Correct Answer: C
A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform
this task?
(Choose two.)
A. RDP
B. SNMP
C. WPA2
D. EAP
E. SSL
Correct Answer: CD
A technician is investigating the cause of a network outage. Which of the following documents should be checked to rule out con guration
issues?
A. Change management records
B. Inventory management
C. Network log les
D. Logical diagrams
Correct Answer: A
  Soulo 2 weeks, 6 days ago

C should be the answer
upvoted 1 times
  Tart 1 week, 3 days ago

While "C. Network log files" could be a plausible answer, A seems to make the most sense (in CompTIA's perspective) as checking the change
management documentation would state what recent equipment or configuration changes were recently made that might've affected the network.
The network log files would list logical topology changes, but most likely wouldn't list any recent physical changes with networking equipment.
Thus, A makes the most sense.
upvoted 2 times
A junior network technician receives a help desk ticket from an end user who is having trouble accessing a web application that was working the
previous day.
After talking with the end user and gathering information about the issue, which of the following would be the most likely course of action for the
technician to perform NEXT?
A. Establish a theory of probable cause.
B. Escalate the ticket to a senior technician.
C. Implement the solution.
D. Document the ndings and outcomes.
Correct Answer: A
A system administrator receives reports from users of odd behavior in regard to a recently installed server. While reviewing the server network
con guration, the systems administrator does both a forward and a reverse DNS lookup on the host, along with the network adapter con guration.
Which of the following is the problem identi ed in the output above?
A. There is no reverse DNS entry for this host.
B. The server IP address is incorrectly con gured.
C. The DNS lookup entry is incorrectly con gured.
D. The reverse DNS entry is pointing to a different host.
Correct Answer: C
  ArcRiseGen 4 months ago

How did we approach C as the answer?
upvoted 4 times

I'd also like to know, don't quite understand this one
upvoted 1 times

first commandline is a DNS query of what IP address is stored for server.company.com
$host server.company.com
it gives the result 129.168.0.100 (note the first octet is 129, not 192)
the scond command is a reverse DNS, called ARP, looking for the name that is associated with an it yields a result of web.company.com
the last command ifconfig is a command run on the server locally to see what IP it is configured with and it yields 192.168.0.100
so the conclusion is the server on itself is configured with 192.168.0.100 and in DNS it is configured as 129.168.0.100
since DNS is the master record file for all network devices, the issue seen is that the DNS record for this machine (in DNS) is wrong.
upvoted 3 times
A network technician at a small o ce upgrades the LAN switch. After the upgrade, a user reports being unable to access network resources.
When the technician checks the switchport, the LED light is not lit. Which of the following should the technician check FIRST?
A. The device is using the correct cable type.
B. The switchport is functioning properly.
C. The device is connected to the switch.
D. The switch is connected to the router.
Correct Answer: C
A network administrator wants to employ a username and password authentication system for guest WiFi. Which of the following is the BEST
option to provide this type of authentication?
A. Port security
B. MAC ltering
C. Network access control
D. Captive portal
Correct Answer: D
A technician is responsible for con guring a new rewall. The hardware team has already installed, powered, and connected the system. Which of
the following types of documentation should the technician utilize to complete the task?
A. Rack diagram
B. IDF/MDF documentation
C. Network performance baseline
D. Logical and physical diagrams
Correct Answer: D
Which of the following storage network technologies inherently leverages block-level storage?
A. NAS
B. SAN
C. FCoE
D. iSCSI
E. FTP
Correct Answer: A
  ratu68 9 months, 1 week ago

I think SAN (B) is the correct answer, NAS doesn't use block level technology
upvoted 13 times
  Galle 9 months ago

SAN use block level technology
upvoted 12 times
  Estiva 8 months, 1 week ago

SAN not NAS
upvoted 9 times
  Icen 4 months, 2 weeks ago

NAS provides File Level Access, SAN provides Block Level Access, the correct answer is B.
upvoted 4 times

"SAN - A storage area network or storage network is a computer network which provides access to consolidated, block-level data storage"
upvoted 1 times
  Crisp 1 month ago

I was confused on this at first but after doing research and reading the question again A is the answer. The question asks what " Leverages"
meaning what is better than Block-level. NAS uses File-Level Storage in which is a more simple way to store files and have them easily accessible
and available.
upvoted 1 times

To Leverage something means to use something to its ability. I thing B SAN is the answer. When things come down to semantics of a word
Comptia needs to rethink the question
upvoted 2 times

the correct answer is SAN. This incorrect answer is atrocious and needs to be changed.
upvoted 2 times

If Crisp is correct about how the word "leverage" is being used, then NAS is the answer.
Think of it this way - Comptia did not word this question to ask what technology USES block-level. This is how they trick people.
upvoted 3 times
Which of the following networking devices operates at Layer1?
A. Router
B. Firewall
C. Hub
D. Bridge
Correct Answer: C
A disgruntled employee decides to leak critical information about a company's new product. The employee places keyloggers on the department's
computers, allowing the information to be sent out to the Internet. Which of the following attacks is occurring?
A. Man-in-the-middle
B. Logic bomb
C. Insider threat
D. Social engineering
Correct Answer: C
A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources
to perform her job. Which of the following would provide secure access to the corporate resources?
A. Utilize an SSH connection to the corporate server.
B. Use TFTP to transfer les to corporate resources.
C. Allow RDP through an external rewall.
D. Connect utilizing client-to-site VPN.
Correct Answer: D

"Ann needs to locally mapped corporate resources to perform her job"... What?
upvoted 4 times

its very tpical with the VPN logon process that as you log on, the usual logon scripts run on your machine and map the network shares provided on
the corporate network to local "logical" drives on your machine. So lets say you are in accounting and there is a share on the accounting server
called "accounting-share", well when you logon to VPN succescully there will be a script or commmand that runs in the background to create a
logical drive like "M:\" on your local machine and then point it to the network share... hope this explains it...
upvoted 2 times

Also, I would like to add that the option with SSH specifically mentions a server. She needs access to corporate resources, not just one server.
upvoted 2 times
Which of the following DNS record types is an alias?
A. CNAME
B. PTR
C. NS
D. SRV
Correct Answer: A
A recently constructed building makes use of glass and natural light. Users in the building are reporting poor cellular connectivity and speeds.
Which of the following is MOST likely the cause?
A. Absorption
B. Channel overlap
C. Re ection
D. Frequency mismatch
Correct Answer: C
A network technician is working on a new switch implementation to expand the network. Which of the following is the BEST option to ensure the
implementation goes according to business requirements?
A. AUP
B. NDA
C. SOP
D. SLA
Correct Answer: C
A technician is utilizing SNMPv3 to monitor network statistics. Which of the following actions would occur immediately of a server's utilization
spikes above the prescribed value?
A. A trap message is sent via UDP to the monitoring workstation.
B. The SET function pushes an alert to the MIB database.
C. The object identi er is modi ed and reported during the next monitoring cycle.
D. A response message is sent from the agent to the manager.
Correct Answer: A
In which of the following scenarios should a technician use a cross-over cable to provide connectivity?
A. PC to switch
B. Switch to AP
C. Router to switch
D. Router to modem
E. PC to PC
Correct Answer: E
802.11n clients currently have no way to connect to the network. Which of the following devices should be implemented to let the clients connect?
A. Router
B. Range extender
C. VoIP endpoint
D. Access point
Correct Answer: D
A network technician is setting up a new router. Since it is exposed to the public, which of the following are the BEST steps the technician should
take when setting up this device? (Choose two.)
A. Disable unnecessary services.
B. Use private IP addresses.
C. Allow remote management access.
D. Disable the console port.
E. Enable encryption.
F. Upgrade to the latest rmware.
Correct Answer: AF

I would appreciate it if someone explained why A and F. Thank you.
upvoted 1 times

It can be assumed that upgrading to the latest firmware will (for the most part) prevent attackers from accessing a router that is not fully
updated and there may be exploits in outdated firmware. Hence, updating it to the latest version. As for disabling the unnecessary services,
again, it isn't implied, but there could be paths or vectors that attackers could detect through running services on the router and use that to get
in. Just my best guess.
upvoted 1 times
A network technician is con guring user access to a VPN concentrator and has been advised to use a protocol that supports encryption over UDP.
Which of the following protocols has the technician MOST likely con gured for client use?
A. TFTP
B. DTLS
C. DNS
D. SNMP
Correct Answer: B
A switch has detected duplicate broadcast messages sourced from a second port. The broadcasts continue to be transmitted and duplicated until
the amount of tra c causes severe performance issues. Which of the following should be con gured to prevent this behavior?
A. BPDU guard
B. DHCP snooping
C. ARP protection
D. Spanning tree
Correct Answer: D
A Chief Information O cer (CIO) is concentrated about an attacker gaining administrative access to the company's network devices. Which of the
following is the
MOST secure way to prevent this?
A. ACL allowing only HTTP
B. ACL allowing only Telnet
C. Out-of-band modem
D. Out-of-band console router
Correct Answer: D
Currently there are no comments in this discussion, be the rst to comment!
The Chief Executive O cer's (CEO's) tablet cannot connect to the wireless network from the corner o ce. A network technician veri ed the tablet
can connect to the wireless network in other areas of the building. The distance between the o ce and the 802.11ac WAP is 150ft (46m), and
there are a few cubicles in between. Which of the following is the MOST likely cause of the tablet not connecting?
A. Absorption
B. Re ection
C. Distance
D. Refraction
E. Attenuation
Correct Answer: C
  Bones 8 months, 1 week ago

I think the answer here is A since the distance between the office and the WAP is fine (230 feet is the maximum range for 802.11ac). The cubicles in
between are the problem. Signals are absorbed by the materials in the cubicles, which causes connectivity issues for the tablet.
upvoted 3 times

Since the distance is specification borderline and there are cubicles exists so A is the correct answer.
upvoted 1 times
  Bobisha 2 months, 1 week ago

Make few steps towards the WAP and will connect. The thing is there is the signal but u are not close enough. Trick question
upvoted 2 times
  Abiye 2 months, 1 week ago

Distance range for ac is 35 m / 115 ft, so the answer makes sense.
upvoted 2 times
  nick1970 2 days ago

Right. https://www.geckoandfly.com/10041/wireless-wifi-802-11-abgn-router-range-and-distance-comparison/
upvoted 1 times
A company has two geographically separate locations that need to connect using a VPN. Which of the following devices must be speci cally
con gured to allow
VPN tra c into the network?
A. Firewall
B. Switch
C. Router
D. Modem
Correct Answer: A
A technician is working on a new machine that has been procured for testing and development. The machine will run a hypervisor and host several
operating systems of various types so the development team can test the company's applications in a variety of environments. The technician
wants the virtual machines to be available to communicate with each other without leaving the hypervisor. Which of the following is the BEST
solution to the problem?
A. The technician should connect the machine to its own separate switch.
B. The technician should add a route in each virtual machine to the default gateway.
C. The technician should con gure a virtual switch.
D. The technician should set up individual routes between the machines.
Correct Answer: C
A network technician is repurposing a switch that has been in storage for some time. The device has been wiped to factory defaults. Which of the
following should be done FIRST to ensure the device has been hardened before con guration?
A. Generate new keys.
B. Disable unused ports.
C. Check for updated rmware.
D. Con gure the default VLAN.
Correct Answer: C
A technician is setting up a wireless access point in a coffee shop. The shop is not concerned with security but only wants to allow customers to
have access.
Which of the following con gurations should the technician deploy?
A. Use a pre-shared key.
B. Set up EAP.
C. Con gure RADIUS.
D. Con gure MAC ltering.
Correct Answer: A
A network administrator is assigned to run and connect a Cat 6e Ethernet cable between two nodes in a datacenter. Which of the following
connector types should the network administrator use to terminate this cable?
A. DB-9
B. RS-232
C. DB-25
D. RJ-45
Correct Answer: D
Management has requested that services be available within 72 hours of a disaster. Budget is a major concern. A contract is signed with a
company that has plenty of space, and the technician will have the option of putting infrastructure equipment in place. Which of the following
BEST describes this business continuity strategy?
A. Cold site
B. Differential backup
C. Hot site
D. Incremental backup
E. Warm site
F. Full backup
Correct Answer: A

Warm site
upvoted 2 times
  browncaleob 2 months, 1 week ago

Respectfully I disagree. I believe there would need to be equipment there to be a warm site. At the moment it's just an empty space and the
have the OPTION to bring in hardware.
upvoted 6 times

Are they going to put in the infrastructure or not? The business continuity plan is incomplete at this point.
upvoted 1 times

poorly worded, but since the scenario does not state that some equipment is put in place, and that there is option to bring in hardware, then its
more approproiately viewed as a cold site.
upvoted 1 times

Not poorly worded--strategically worded. They aren't stupid. Adding/removing arbitrary questions with arbitrary answers are how they keep the
pass/fail rate wherever they want it.
upvoted 1 times
  rav76v 4 weeks ago

Cold site 100%, as they put the infrastructure it will be Warm site. To insert and to be able to insert are two different things
upvoted 1 times

It should be a Warm Site, ready to go withing 3 days. Cold site can take several weeks to get service to and equipment
upvoted 1 times
A network technician is planning to update the rmware on a router on the network. The technician has downloaded the le from the vendor's
website. Before installing the rmware update, which of the following steps should the technician perform to ensure le integrity?
A. Perform antivirus and anti-malware scans of the le.
B. Perform a hash on the le for comparison with the vendor's hash.
C. Download the le a second time and compare the version numbers.
D. Compare the hash of the le to the previous rmware update.
Correct Answer: B
A network technician performs a wireless site survey at a company building and identi es that the cafeteria is not covered by a wireless signal.
The cafeteria is located in a medium-size, square-shaped room. Which of the following types of WAP antenna should the technician install in the
center of the cafeteria to provide the BEST coverage?
A. Unidirectional
B. Parabolic
C. Omnidirectional
D. Yagi
Correct Answer: C
An entire enterprise cannot access a speci c website. The network technician knows the website was accessible last week. The technician can
also ping the website. Which of the following is the technician MOST likely to nd upon investigation?
A. The rewall is miscon gured.
B. The network is being hit by a zero-day attack.
C. The SSL certi cate is untrusted.
D. The SSL certi cate has expired.
Correct Answer: D

You can still access a website if the certificate expires. You just get a warning.
upvoted 1 times

what about pinging? Can you still ping a website after the certificate expires?
upvoted 1 times
  ha zpus 3 months ago

this is a paid certificate, once its expire you have no access anymore
upvoted 1 times
At which of the following OSI model layers would a router operate?
A. Physical
B. Network
C. Transport
D. Data link
Correct Answer: B
Which of the following are DNS record types? (Choose three.)
A. CNAME
B. NTP
C. PTR
D. LDAP
E. DHCP
F. TTL
G. SRV
H. SSH
Correct Answer: ACG
Which of the following backup techniques is used to capture all the data that has changed since the last full backup?
A. Incremental
B. Replica
C. Differential
D. Snapshot
Correct Answer: C
A network administrator frequently needs to assist users with troubleshooting network hardware remotely, but the users are non-technical and
unfamiliar with network devices. Which of the following would BEST help the administrator and users during hands-on troubleshooting?
A. Logical diagrams
B. MDF documentation
C. Equipment labeling
D. Standard operating procedures
Correct Answer: D

Users are non-technical, shouldn't be 'Equipment Labeling' is a better answer when doing hands-on troubleshooting?
upvoted 7 times
  afsanaislam715 7 months, 3 weeks ago

No because the net admin is trying to help the user with remote login and labeling wouldn't really help, i can look @ labels and not understand
what each functionality is of the equipment... the operating procedures is a better answer because it would give a more thorough explanation
upvoted 2 times

It doesn't matter whether you understand how each piece of equipment functions. What matters is that you can physically locate it by the
labels. Once you locate the piece, then just follow what the administrator tells you to do. Just like working on a vehicle...locate the "battery",
then remove the screw on the cable with the "red" covering/sleeve. Basically he's telling you to remove the hot connector from the hot
terminal. Anyone can do this as long as they can read and follow directions.
upvoted 1 times

D cant be a correct answer . The SOP is a standard on how an organization will operate effectively. Equipment labeling is what would help the
None-tech user to identify the hardware.
upvoted 7 times
  Ryan_Nelson 4 months, 3 weeks ago

C: Equipment labeling is the correct answer
upvoted 2 times

well in my view and understanding, I think we are missing the keyword "troubleshooting" and not identification. I believe through the SOP u will b
able to see all equipment and their operating procedures. With SOP it will give more description of equipment including what is written on the
devices
upvoted 1 times
  pshimsmart 1 month, 3 weeks ago

Equipment Labeling is not in the Comptia Objectives Please do not listen to these guys you will fail the exam if you do.
upvoted 1 times

Labeling is 3.1 in the objectives. And it makes sense. SOP has nothing to do with trouble-shooting network devices.
upvoted 1 times

It should be remote access or remote desktop, not listed here
upvoted 1 times
A technician is observing brownout issues at a smaller o ce. At least once a week, the edge switch power cycles. Which of the following should
the technician do to resolve the issue?
A. Install a new switch
B. Install a UPS
C. Replace the switch uplink cable.
D. Install a new electrical circuit.
Correct Answer: B
A technician is troubleshooting a workstation's network connectivity and wants to con rm which switchport corresponds to the wall jack the PC is
using. Which of the following concepts would BEST help the technician?
A. Consistent labeling
C. Standard work instructions
D. Inventory management
E. Network baseline
Correct Answer: A
Under which of the following layers of the OSI model do ATM cells operate?
A. Data link
B. Network
C. Session
D. Transport
E. Presentation
Correct Answer: A

The correct answer is B-Network, reference: Exam Cram Network+ by Emmett Dulaney
upvoted 1 times

ATM operates at the data link layer — Layer 2 in the OSI model — over either fiber or twisted-pair cable. source -
https://www.lifewire.com/asynchronous-transfer-mode-817942
upvoted 7 times
A new building needs to be joined to an existing network, but management has decided that running ber is too expensive. Since the buildings are
about 1000ft
(305m) apart, the IT department has been asked to propose alternatives. Which of the following is the BEST device to add to each building to
facilitate the extension of the network while meeting budgetary demands?
A. Switch
B. Router
C. Media converter
D. PRP wireless
Correct Answer: D
  geek5711 1 month, 1 week ago

is PRP wireless in network+ objectives?
upvoted 2 times

Nope. I believe CompTia can get away with these questions because they assume you have work knowledge or something like that.
upvoted 2 times
A junior network technician is working in the eld and needs to connect to the company's remote server, however, doing so will require the junior
technician to use the public Internet. Because security is a concern, which of the following is the BEST method to use?
A. Telnet
B. SSH
C. SFTP
D. VNC
Correct Answer: B
  momunah 8 months, 2 weeks ago

Is the answer to this not D-VPN?
upvoted 2 times

Im sorry i thought that was VPN
upvoted 2 times
  neo20011 4 weeks, 1 day ago

A. Telnet - not encrypted, not secure
B. SSH - secure shell, encrypted, port 22, typical secure way to access Linux servers
C. SFTP - ftp over ssh but only limited to file transfers
D. VNC - not encrypted by default, hence not secure
upvoted 1 times

Since when VNC is not encrypted? Nope- VNC IS encrypted. another thing is VNC is GUI and SSH is sort of command line tool.
upvoted 1 times

Figured what you meant neo20011 (VNC encrypts initial connection and password transfer, while rest of the session is unsecure). So it is
reccomended to add SSH for it's reliability.
upvoted 1 times
A home user has purchased a new smart TV to stream online video services. The smart TV is unable to connect to the wireless network after
several attempts.
After returning from vacation, the home user tries again and can connect the TV to the wireless network. However, the user notices a laptop is no
longer able to connect to the network. Which of the following is the MOST likely cause?
A. The DHCP scope has been exhausted.
B. The security passcode has been changed.
C. The SSID is hidden.
D. The AP con guration was reset.
Correct Answer: A

An average home router has a DHCP scope size of 200 IP addresses. You mean to tell me that a home user has over 200 items connected to the
internet in their house? Yeah, I think not. Another irrational and illogical answer.
upvoted 4 times

I agree makes no sense at all
upvoted 1 times
  neo20011 4 weeks, 1 day ago

with these questions, eliminate first, here goes
A. The DHCP scope has been exhausted.

B. The security passcode has been changed - eliminated
C. The SSID is hidden - eliminated
D. The AP configuration was reset - eliminated
the reason I support A is that all home routers I have come across can have their DHCP scope reduced to a handful of IPs. In my home that number
is 10. To make sure my own devices always get an IP, I also add a DHCP reservation for their MAC addresses.
This behavior of not getting an IP is due to DHCP scope exhaustion.

upvoted 2 times

Yep. But it's definitely the correct answer considering the alternatives. But absolutely not what any tech would consider as the first, second, or 50th
likely cause of the issue.
upvoted 2 times
A security guard notices an authorized individual, who is dressed like a lab technician, has entered a secure area of the hospital with a large
group. Which of the following security attacks is taking place?
A. Evil twin
B. Social engineering
C. Insider threat
D. Phishing
Correct Answer: B

in my view, this cannot be social engineering because the individual is authorized personnel who dress like a lab technician heading to a secure
area... this answer could be inside threat
upvoted 1 times

i cant understand how this is social engineering.... why not inside treat
upvoted 1 times

It's not an insider threat because the individual is "posing" as someone who is credible and convincing. It's obvious that the security guard
recognized the person, but knows that the individual doesn't have the required access. IF that individual went unnoticed and carried out some sort
of malicious intent, then it would be an insider threat. However, the person was trying to use a disguise in hopes of unwittingly fooling people into
thinking that [they] had every right to be there.
upvoted 4 times

"A security guard notices an authorized individual, who is dressed like a lab technician, has entered a secure area of the hospital with a large group.
Which of the following security attacks is taking place?"
"authorized individual"... They're allowed to be there. "a large group"... Doesn't say whether they are or aren't allowed to be there. It also doesn't
say whether dressing like a lab technician is or isn't out of the normal or allowed... There's WAY too much missing information! Is the attack the
group of people, the authorized person, the fact that they're dressed like a lab tech??? Tell me what the threat is and I'll tell you what kind of attack
this is. The exam better be significantly more specific than this!
upvoted 2 times

After thinking it through, I believe that B. Social engineering is the correct answer. Just as liztorres78 mentioned, it's not considered an insider
threat because it doesn't state that the individual is committing a malicious act or is directing an attack from WITHIN the company. Social
engineering is defined as fooling or deceiving others into thinking that you are from a company, and that's exactly what this individual is trying to
do. So yes, B makes sense, but it helps to re-read the question and understand the different types of threats.
upvoted 1 times
Which of the following DNS record types allows IPv6 records to be resolved to DNS names?
A. PTR
B. A
C. AAAA
D. SRV
Correct Answer: C
A network technician has recently installed new VoIP phones at all employee's desks to support a new SIP cloud VoIP solution. However, the
technician is unable to make a call from the device after testing. Which of the following should the technician verify? (Choose two.)
A. TCP 443 is allowed.
B. UDP 1720 is allowed.
C. UDP 5060 is allowed.
D. UDP 5061 is allowed.
E. TCP 8080 is allowed.
F. TCP 8181 is allowed.
Correct Answer: CD

How in the world would UDP 5061 be an answer when UDP, according to my research, does not work on that port?
upvoted 1 times

the two ports 5060 & 5061 both are on UDP/TCP and are both associated SIP by IANA. In particular, port 5060 is assigned to clear text SIP, and
port 5061 is assigned to encrypted SIP, also known as SIP-TLS (SIP over a TLS, Transport Layer Security, encrypted channel). Unfortunately, the
standard TLS (successor of SSL) can only be established over TCP. Does this mean SIP UDP-based communications have to travel unencrypted?
Fortunately not. An IETF draft covering SIP-DTLS is on the queue (DTLS is Datagram TLS, that is, UDP.
upvoted 3 times
Which of the following would allow a network technician to access les on a remote system? (Choose two.)
A. FTP
B. TFTP
C. VLSM
D. SIP
E. SMTP
F. IMAP
Correct Answer: AB
Which of the following provides two-factor authentication?
A. Username + password
B. Smart card + PIN
C. Fingerprint + retina scan
D. Key fob + ID card
Correct Answer: B
A technician set up a new SOHO network recently. The installed router has four Ethernet ports, however, the customer has seven devices that need
wired connections. Which of the following should the technician do to BEST meet the customer's requirements?
A. Install a six-port switch.
B. Con gure port forwarding on the router.
C. Install WAPs near the devices.
D. Con gure the switchports as EtherChannel ports.
Correct Answer: A
A technician is performing a maintenance task on a weekly basis and wants to ensure the task is properly documented and able to be performed
by other technicians. Which of the following types of documentation should the technician complete?
A. Standard operating procedure
B. Work order
C. Performance baseline
D. Logical diagram
E. Change management
Correct Answer: A

In my opinion, answer should be E, to let other technicians know what changes were made.
upvoted 4 times
  Caleb 4 months, 1 week ago

Doesnt say any changes were made. Just talkes about maintainance. Maintainance could be going down a checklist and verifying that
everything is as it should be.
upvoted 3 times
  Matty 8 months, 1 week ago

I disagree. It says DOCUMENT so others know how to perform
upvoted 9 times
  Bones 8 months ago

I agree with this. The SOP would document the routine operations done in a maintenance, thus informing technicians on how to do it properly.
upvoted 10 times
  Beccken 4 months ago

Definately should be SOP. SOP is a manual or set of detailed instructions to ensure anyone can come on the scene and conduct business as
usual in the absence of management or other familiar persons.
upvoted 3 times
A company is allowing its employees to use their personal computers, tablets, and IoT devices while at work. However, there are rules and
guidelines to which employees must adhere. Which of the following documents applies to these employees?
A. NDA
B. SOP
C. BYOD
D. SLA
Correct Answer: C
Which of the following are characteristics of jumbo frames? (Choose two.)
A. Commonly used on SAN
B. MTU size greater than 1500
C. MTU size greater than 10000
D. Commonly used on IaaS
E. MTU size greater than 12000
Correct Answer: AB

Commonly used on iaas
upvoted 2 times
  MarMar08 2 months, 1 week ago

its SaaN
upvoted 2 times

....no
upvoted 1 times
A network administrator gets a call regarding intermittent network outages across the country. Which of the following should be used to connect
to the network so the administrator can troubleshoot this issue from home? (Choose two.)
A. FTP
B. SMTP
C. VPN
D. SSH
E. SNMP
Correct Answer: CD
A network technician downloaded new rmware for the company rewall. Which of the following should the network technician verify to ensure
the downloaded le is correct and complete?
A. File hash
B. File date
C. File type
D. File size
Correct Answer: A
A technician is troubleshooting network connectivity issues with a remote host. Which of the following tools would BEST inform the technician of
nodes between the client and the remote host? (Choose two.)
A. tracert
B. ping
C. tcpdump
D. pathping
E. netstat
F. nslookup
G. route
Correct Answer: AD
Which of the following will listen on the line to ensure there is no tra c transmitting and implement a back-off timer if a collision occurs?
A. CSMA/CD
B. CSMA/CA
C. MPLS
D. OSPF
Correct Answer: A
A network technician receives a call from a branch o ce about a problem with its wireless connectivity. The user states the o ce is hosting a
large meeting that includes some online training with local businesses. The guest users have all brought devices to connect to the guest network
at the branch o ce. All users are connected to a single WAP and are reporting that connections keep dropping and network spends are unusable.
Which of the following is the MOST likely cause of this issue?
A. DHCP exhaustion
B. Channel overlapping
C. Interference
D. Overcapacity
Correct Answer: D

both DHCP exhaustion and overcapacity can be the right answer here. But why overcapacity?
upvoted 2 times
  akamran12 2 days, 21 hours ago

if DCHP exhaustion happened, they never are connected with the network,...after assigning IP they have an issue of dropping
upvoted 1 times

overcapacity because guest network always have a limited number of host
upvoted 2 times
Which of the following BEST describes an exploit?
A. A router with default credentials
B. An open mail relay server
C. An SNMPv1 private community
D. A privilege escalation script
Correct Answer: D
  BigWilli 5 months, 2 weeks ago

Shouldnt the answer be A?
upvoted 2 times

A is a vulnerability not an actual exploit
upvoted 3 times
  bykhie 3 months, 3 weeks ago

i thought the answer was B
upvoted 1 times
  Bobisha 1 month, 3 weeks ago

The verb exploit means to use someone or something. so with script u can make it.
upvoted 1 times
  Ko Collins 1 month, 2 weeks ago

Windows Privilege Escalation Scripts & Techniques. Privilege escalation is an important process part of post exploitation in a penetration test that
allow an attacker to obtain a higher level of permissions on a system or network.
upvoted 1 times

is this site actually good for passing Network+?
upvoted 1 times
A server in a LAN was con gured to act as a gateway between all company computers and an external network. Which of the following networking
devices offers the ability to increase both performance and security?
A. Load balancer
B. IDS
C. Proxy server
D. Wireless controller
Correct Answer: C

Poorly worded question. Security could be interpreted in multiple ways here.
upvoted 1 times

Is it really though? I think the key word is "gateway" here which is what a proxy server does, at least to my understanding - devices can "hide"
behind it and it answers the question based on what it's asking...Load balances increases performance but doesn't offer security, an IDS doesn't
help because it simply detects and doesn't prevent and doesn't increase performance...and a wireless controller does nothing in this situation.
So narrowing it down to a proxy server does make it the most plausible answer.
upvoted 2 times
A technician is setting up VoIP phones on a wireless network. Users report that calls are choppy and sometimes dropped. The technician has
measured two characteristics using simple command-line tools that verify the problem. Which of the following characteristics did the technician
measure? (Choose two.)
A. Re ection
B. Latency
C. Interference
D. Packet loss
E. Signal-to-noise ratio
F. Attenuation
Correct Answer: BD
Which of the following ports should a network technician open on a rewall to back up the con guration and operating system les of a router to a
remote server using the FASTEST method possible?
A. UDP port 22
B. TCP port 22
C. TCP port 25
D. UDP port 53
E. UDP port 69
Correct Answer: E
A technician is replacing a failed SOHO router for a customer who has an existing switch, cable modem, and static IP address. The user has a web
server that faces the Internet so users can visit and leave comments. Which of the following BEST describes the correct con guration for this
customer's requirements?
A. The modem is placed in bridge mode, the router is placed behind the modem, and the web server is placed behind the router.
B. The router is placed in bridge mode, the modem is placed behind the router, and the web server is placed behind the modem.
C. The web server is placed in bridge mode, the router is placed behind the web server, and the modem is placed behind the router.
D. The switch is placed in bridge mode, the modem is placed behind the router, and the router is placed behind the modem.
Correct Answer: A
A network technician is attempting to troubleshoot a connectivity issue. The issue is only reported during the evening hours, and only a single
workstation loses connectivity. Which of the following is the MOST likely cause of the issue?
A. The router has a time-based ACL, applied for the network segment.
B. A light source is creating EMI interference, affecting the UTP cabling.
C. Nightly backups are consuming excessive bandwidth.
D. The user has violated the AUP, and Internet access has been restricted.
Correct Answer: D
  IhcimYmra 4 months, 4 weeks ago

I think the correct answer should be "B. A light source is creating EMI interference, affecting the UTP cabling." If the cabling was optical fiber, then I
would agree with the given answer. However, the issue is only reported during evening hours (likely due to the overhead lighting turning on when
it gets dark) and only a single workstation loses connectivity (likely due to the workstation location and overhead lighting location) -- additionally,
UTP cables are susceptible to electromagnetic interference.
upvoted 1 times

Further, UTP cabling is more commonly used inside an office building than optical fiber, due to cost. As such, I think option B is the MOST likely
cause of the issue.
upvoted 1 times

With A B & C the whole network will be affected. Even though D seems wrong, it’s the only situation where only one system is affected. Annoying
but correct.
upvoted 8 times
  bubbly 4 months, 1 week ago

The light source might only affect the user's computer though, depending on where it is.
upvoted 1 times
  nick1970 1 day, 21 hours ago

The question is: "a connectivity issue." Answer D only refers to internet access and not the LAN.
upvoted 1 times
A network administrator is redesigning network security after an attack. During the attack, an attacker used open cubicle locations to attach
devices to the network. The administrator wants to be able to monitor future attacks in a safe environment and determine the method of attack.
Which of the following should the administrator do to BEST meet this requirement?
A. Create a VLAN for the unused ports and create a honeyspot on the VLAN.
B. Install a BPDU guard on switchports and enable STP.
C. Create a DMZ for public servers and secure a segment for the internal network.
D. Install antivirus software and set an ACL on the servers.
Correct Answer: A

Is creating a honeypot really a safe environment though?
upvoted 1 times

In this case, safe environment means a place where nothing can affect your network. What happens in a honeypot, presumably stays in there.
AND it answers admin's requirement that they can monitor what is going on.
upvoted 1 times
A company has just refreshed the hardware in its datacenter with new 10G Ethernet switches. A technician wishes to set up a new storage area
network but must use existing infrastructure. Which of the following storage standards should the technician use?
A. iSCSI
B. Fibre Channel
C. NAS
D. In niBand
Correct Answer: C
  sp123 4 months, 2 weeks ago

I am fairly certain the answer is actually iSCSI. iSCI carries SCSI commands over IP using standard Ethernet switches and is optimized for IP
networks.
upvoted 3 times

the question refers to 'storage standards' not packets carriers
upvoted 6 times
  Mark0P0L0 1 week ago

"A technician wishes to set up a new storage area network but must use existing infrastructure. Which of the following storage standards
should the technician use?"
Pretty contradictory I should say. Following what technician wants- it is SAN, as of question formulated and options given- NAS is the only
storage standart among other answers. Shitty formulation, contradictory in itself.
upvoted 1 times

I agree that it should be iSCSI. The question states the tech wants to use the "existing" network "before" he sets up a NAS. It's obvious the NAS
doesn't exist yet. So how could the answer be NAS.
upvoted 2 times
  YoungPapi 2 months, 1 week ago

It says the technician "wishes" to set up a new storage area network but "must" use existing infrastructure. So the NAS does already exist.
upvoted 4 times
  sirpetey 2 months, 1 week ago

"use existing infrastructure" I assume it means not needing another server.
NAS; Network is attached to storage, so no new independent server?
upvoted 3 times

NAS is only storage standards out of answers....
upvoted 3 times
A network technician needs to install a new access switch. After installing the new switch, the technician begins to move connections from the
old switch to the new switch. The old switch used a GBIC with SC connectors, and the new switch uses an SFP with LC connectors. After
connecting the SC connector to the SC- to-LC adapter and plugging it into the switch, the link does not come up as expected. Which of the
following should a network technician perform NEXT?
A. Replace SFP with a new one.
B. Fall back to the old switch.
C. Transpose the ber pairs.
D. Replace multimode with single-mode cable.
Correct Answer: C
A network technician is installing a new SOHO branch o ce that requires the use of a DOCSIS-compatible modem. The modem needs to be
connected to the
ISP's network at the demarc. Which of the following cable types should be used?
A. UTP
B. Multimode
C. Coaxial
D. Serial
Correct Answer: C
A technician needs to order cable that meets 10GBaseT and re safety requirements for an installation between a drop ceiling and a standard
ceiling. Which of the following should the technician order to ensure compliance with the requirements?
A. PVC Cat 5
B. Plenum Cat 5e
C. Plenum Cat 6a
D. PVC Cat 7
Correct Answer: C
Which of the following physical security devices is used to detect unauthorized server room access?
A. Access badge
B. Biometrics
C. Smart card
D. Video surveillance
Correct Answer: D

This question is bogus
upvoted 3 times
  oakzd 3 months ago

This question is to general
upvoted 3 times
  AG87 2 months, 1 week ago

Keyword here is "detect" as opposed to prevent.
upvoted 8 times

wow you're right.
upvoted 1 times
A network technician recently installed a new server on a network. The technician must ensure the server does not have any unnecessary services
running. The
IP address of the server is 204.211.38.50. Which of the following commands would allow the technician to make this determination?
A. nmap
B. pathping
C. route
D. nslookup
Correct Answer: A
Joe, an employee at a large regional bank, wants to receive company email on his personal smartphone and tablet. To authenticate on the mail
server, he must rst install a custom security application on those mobile devices. Which of the following policies would BEST enforce this
requirement?
A. Incident response policy
B. BYOD policy
C. DLP policy
D. Remote access policy
Correct Answer: B
  mdarab 2 months ago

How would downloading work email on a personal phone be related to BYOD policy? He may not even bring that phone or tablet to work. Just
keep it at home. So then, what would it be?
upvoted 1 times
  Dobbs 4 weeks, 1 day ago

Using a non company owned device for work is considered BYOD. It doesn't really matter where the device is located.
upvoted 4 times
A technician is allocating the IP address space needed for a new remote o ce. This o ce will contain the engineering staff with six employees
and the digital marketing staff with 55 employees. The technician has decided to allocate the 192.168.1.0/24 block to the remote o ce. The
engineering staff has been allocated the 192.168.1.64/29 subnet. Using the LEAST amount of space possible, which of the following would be the
last usable IP address in the engineering subnet?
A. 192.168.1.62
B. 192.168.1.63
C. 192.168.1.70
D. 192.168.1.71
Correct Answer: A
  TriBiT 7 months, 3 weeks ago

I think the answer should be C... if they are sub-netting even further 192.168.1.64/29 wold be the start of a new sub net with 8 address 6 usable
after you take out the id and broadcast making it 192.168.1.70...the answer A just added 55+6 on the default sub-net for the remote office. the way
i read the question it is asking for the engineering sub-net... am i wrong?
upvoted 7 times

The answer is C.
A is not on the same subnet
upvoted 5 times

I'm thinking, the sub is .64 , and you are adding another 8 ids, out of which 6 can be used. So, 64 is network id, and 72 is the broadcast id, then you
have the last one .71 hence D w'd be correct.
upvoted 1 times

.72 would be the network ID of the next SN (64 + 8 = 72), so .71 would be the BC ID and .70 would be the last usable host.
upvoted 1 times

I agree with answer being C.
upvoted 3 times
  FransRSA 5 months, 3 weeks ago

Answer is C, as D's .71 will be the broadcast ip
https://ip.rst.im/ip/192.168.1.64/29
upvoted 3 times
  elevator44 5 months, 2 weeks ago

CIDR calculator says : First IP 192.168.1.64, Last IP 192.168.1.71 so last usable host is minus one from last IP so C should be answer.
upvoted 4 times
  Eye_Tea 5 months ago

THE ANSWER IS NOT "A". THE ANSWER IS "C", ALL DAY -- EVERY WAY!
Engineering staff has 6 users.
engineering subnet = 192.168.1.64/29; /29 means 3 host bits, block size = 8
thus subnet mask = 255.255.255.248
Network ID= 192.168.1.64
First host ip= 192.168.1.65
Last host ip= 192.168.1.70
Broadcast ID= 192.168.1.71
Next network address= 192.168.1.72
That provided answer is a joke

upvoted 6 times
  AbiolaBad 4 months, 3 weeks ago

It's definitely C
upvoted 2 times
  Bingo 2 months ago

Answer is C
upvoted 2 times

So when I wrote it all out, I got 192.168.1.70 for the last valid host. Which is C.
upvoted 3 times
An administrator is troubleshooting a user's intermittent wireless connectivity issue. Other users across the hallway can connect and use the
wireless network properly. Upon inspection of the connection details, the administrator nds the following:
Which of the following is MOST likely the cause of the poor wireless connection?
A. Channel overlap
B. Overcapacity
C. Incorrect antenna type
D. Latency
Correct Answer: C
A VoIP system will require 23 concurrent voice channels and one signaling channel. Which of the following types of WAN service would provide
the BEST connectivity to the PSTN?
A. PRI
B. BRI
C. E1/E3
D. DSL
Correct Answer: A
A network administrator is going to be performing a major upgrade to the network. Which of the following should the administrator use in case of
a failure?
A. Baseline report
B. Vulnerability report
C. Rollback plan
D. Business continuity plan
Correct Answer: C
  Ryan_Nelson 4 months, 3 weeks ago

The answer should be D. The key word is "upgrade" not update.
upvoted 1 times

The key word is 'in case of a failure"
upvoted 2 times

That's multiple words... You can't fool me!
upvoted 1 times

I disagree. I think the answer is C.
upvoted 10 times
A web application is unable to authenticate customers so they can access their bills. The server administrator has tested the LDAP query but is
not receiving results. Which of the following is the NEXT step the server administrator should take to correct the problem?
A. Check port 636 to see if it is being blocked.
B. Change service port 636 to port 389.
C. Restart the web server.
D. Verify the browser is using port 443.
Correct Answer: A
  fathydd 2 months, 3 weeks ago

B is the correct answer
upvoted 1 times
  chtl 2 months, 2 weeks ago

It is LDAP and not LDAPS
upvoted 1 times

@fathydd...if you change from port 636 to port 389, you just made the connection unsecure. Customers reviewing billing information should do so
on a secure connection. Doesn't specifically say what kind of billing information in the question, but there's no telling what kind of PPI is stored on
the user's account then they log in to view their bill.
upvoted 5 times
  pshimsmart 2 months, 1 week ago

This Question is stupidly easy if you're not studying and listening to people like fathydd you will FAIL.
upvoted 5 times
  nick1970 1 week, 1 day ago

I think the answer is D. If we are talking about billing information we should use HTTPS (port 443).
upvoted 1 times
Which of the following is networking stand-alone hardware that will permit any WiFi-compliant device to connect to a wired network?
A. Wireless hub
B. Wireless rewall
C. Wireless access point
D. Wireless bridge
Correct Answer: C
Which of the following devices are MOST often responsible for 802.1q tagging? (Choose two.)
A. Switch
B. Router
C. IDS
D. Hub
E. IPS
F. Network tap
Correct Answer: AB
A network technician is installing a new wireless network in a small o ce. Due to environmental concerns, the customer wants the network to run
exclusively on the 5GHz frequency. Which of the following wireless technologies should the technician install to BEST meet this requirement?
(Choose two.)
A. 802.11ac
B. 802.11b
C. 802.11g
D. 802.11n
E. Bluetooth
F. Z-Wave
Correct Answer: AD
Which of the following concepts would BEST describe when a company chooses to use a third-party vendor to host and administer a critical
application?
A. SaaS
B. IaaS
C. PaaS
D. CASB
Correct Answer: C

Isn't PaaS used by developers? shouldn't the answer be A?
upvoted 4 times
  Abbas565 3 months, 1 week ago

IaaS is correct answer
upvoted 1 times

"application" is the keyword
upvoted 2 times

The 3rd party is hosting your app. That means you're the one developing it, hence PaaS
upvoted 1 times
  Astrodarl 3 weeks, 1 day ago

The answer is SAAS. Under IAAS and PAAS You manage the application. Under SAAS the application is administered
upvoted 6 times
  ANDREVOX 2 weeks ago

"host and ADMINISTER a critical application" = SAAS
SaaS uses the web to deliver applications that are managed by a third-party vendor
upvoted 1 times
A content lter is set to analyze XML and JSON that users access from the Internet. At which of the following layers is this analysis taking place?
A. 1
B. 3
C. 5
D. 7
E. 6
Correct Answer: E

I think that this is layer 7
upvoted 1 times

No, it is Presentation layer (6). Presentation layer involves decoding/translating data types like xml and JSON. https://osi-
model.com/presentation-layer/
upvoted 13 times
  sharpe 1 month, 1 week ago

Layer 7
upvoted 2 times

Layer 7 defines the process that enables applications to use network services. XML and JSON are not applications, so it can't be Layer 7.
upvoted 2 times
Ann, a new employee within a department, cannot print to any of the printers in the department or access any of the resources that others can.
However, she can access the Internet. The network engineer has con rmed that Ann's account has been set up the same as the others. There are
no access lists restricting Ann's access. Which of the following could be the issue for this lack of access?
A. Duplex/speed mismatch
B. VLAN mismatch
C. DNS server issue
D. DHCP server issue
E. Spanning tree blocked ports
Correct Answer: B
A technician is con guring a printer for a client. The technician connects the printer to the network, but is unsure how to determine its switchport.
Which of the following should the technician do FIRST to locate the switchport?
A. Perform a DNS lookup on the server.
B. Set up an SSH session to the desktop.
C. Reference the ARP table in the router.
D. Con gure port security on the switch.
Correct Answer: C
A router is set up to utilize RIPv2 to route tra c throughout the network. Which of the following routing metrics is used to determine the path?
A. Distance
B. Bandwidth
C. Speed
D. Hop count
Correct Answer: D
A second router was installed on a network to be used as a backup for the primary router that works as a gateway. The infrastructure team does
not want to change the IP address of the gateway on the devices. Which of the following network components should be used in this scenario?
A. Loopback IP
B. Virtual IP
C. Reserved IP
D. Public IP
Correct Answer: B
  mdarab 2 months ago

Why not Reserved IP?
upvoted 1 times

Reserved IP is a DHCP concept. You wouldn't assign a router an address with DHCP.
upvoted 2 times
Which of the following can be done to implement network device hardening? (Choose two.)
A. Implement spanning tree
B. Perform VLAN hopping
C. Patch and update
D. Perform backups
E. Enable port mirroring
F. Change default admin password
Correct Answer: CF
A critical vulnerability is discovered on a network device. The vendor states it has already patched this vulnerability in its current release. Which of
the following actions should an administrator take?
A. Change the default password
B. Use a rewall in front of the device.
C. Update the rmware.
D. Upgrade the con guration.
Correct Answer: C
A technician has been alerted of incoming HTTP tra c on the LAN segment that should not contain any web servers. The technician has the IP
address of the destination host and wants to determine if the socket for HTTP is open. Which of the following should the technician perform?
A. Baseline assessment
B. Packet analysis
C. Port scan
D. Patch-level assessment
Correct Answer: C
Which of the following creates a secure remote connection at the OSI network layer?
A. L2TP
B. SSL
C. DTLS
D. IPSec
Correct Answer: D
A network technician has salvaged several Ethernet cables from a datacenter. The technician attempts to use the cables to connect desktops to
the network without success. Which of the following is MOST likely the issue?
A. The cables have an incorrect pin-out.
B. The cables are UTP instead of STP.
C. The cables are Cat 6 instead of Cat 5.
D. The cables are not plenum rated.
Correct Answer: A
A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could
potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?
A. Install an IDS to monitor all tra c to and from the kiosks.
B. Install honeypots on the network to detect and analyze potential kiosk attacks before they occur.
C. Enable switchport security on the ports to which the kiosks are connected to prevent network-level attacks.
D. Create a new network segment with ACLs, limiting kiosks' tra c with the internal network.
Correct Answer: D

It's not an answer, but wouldn't you just disable the ports? This seems like a lot less work.
upvoted 1 times

Yep. The answers to the questions aren't always what you would really do. You just have to pick the best answer from what is given, even though
the choices are really poor options. I'll also mention the extremely poor wording of this question. Ports are not "open source". The writer of the
question is mixing terms from two completely separate computing concepts.
upvoted 2 times
While working on a Linux-based OS, a technician experiences an issue accessing some servers and some sites by name. Which of the following
command-line tools should the technician use to assist in troubleshooting?
A. dig
B. iptables
C. ifcon g
D. traceroute
Correct Answer: A
A network administrator has had di culty keeping track of IP address assignments on networking devices and clients recently. Which of the
following is the BEST technology to aid in this scenario?
A. DNS
B. DHCP
C. IPAM
D. NTP
Correct Answer: C
  Heartolearn 2 months ago

I believe the answer for this is DHCP
upvoted 1 times
  Heartolearn 2 months ago

I take this back IPAM involves both DNS and DHCP so the answer is correct
upvoted 7 times
  krand 2 weeks, 3 days ago

IPAM is just IP Address Management. DHCP wouldn't assist in helping him track the addresses, because then they wouldn't even be assigning
static IPs.
upvoted 2 times
A technician is surveying a college's network equipment rooms and connectivity. Which of the following types of documentation does the
technician need to perform a detailed site survey? (Choose three.)
A. IDF/MDF documentation.
B. Cable run label documentation.
C. Network con guration documentation.
D. Performance baseline documentation.
E. Standard operating procedure documentation.
F. Change management documentation.
G. Rack diagram documentation.
Correct Answer: ACG

B,E,G make more sense imo
upvoted 2 times

The given answers are correct !
upvoted 13 times

I`d say A,B,G
upvoted 1 times
A technician is connecting a PC to a switchport. At the wiring closet, the technician is unable to identify which cable goes from patch panel A
connected to the switch to patch panel B connected to the PC. Which of the following tools should the technician use to resolve the issue?
A. Cable tester
B. Multimeter
C. Tone generator
D. OTDR
Correct Answer: C
A technician wants to deploy a network that will require wireless client devices to prompt for a username and password before granting access to
the wireless network. Which of the following must be con gured to implement this solution?
A. EAP-PEAP
B. CCMP-AES
C. WPA2-PSK
D. TKIP-RC4
Correct Answer: A
  rbrink2001 3 months, 1 week ago

I believe the answer should be C
upvoted 2 times
  Abbas565 3 months, 1 week ago

The correct answer is C.
upvoted 2 times

guys, I think the answer is right. the question is talking about username and password before you can be allowed access but for WPA2-PSK you
only need a password to get access
upvoted 18 times
  Mimi 2 weeks, 1 day ago

I agree with hafizpus. EAP deals with both authentication and authorization. If you look at the exam objectives on Comptia it is listed there as
well.
upvoted 3 times
Which of the following protocols are classi ed as connectionless? (Choose two.)
A. TFTP
B. FTP
C. HTTP
D. SNMP
E. SSH
F. IMAP
Correct Answer: AD
Users in a school lab are reporting slow connections to the servers and the Internet. Other users in the school have no issues. The lab has 25
computers and is connected with a single 1Gb Ethernet connection on Cat 5e wiring to an unmanaged switch. There are also three spare Cat 5e
cable runs, which are not in use.
The school wants to double the connection speed between the lab and the servers without running new cables. Which of the following would be
the BEST solution?
A. Plug in a second spare cable at each end to double the speed.
B. Replace the switches with ones that utilize port bonding and use the spare cables.
C. Replace the switches with 10Gb switches and utilize the existing cabling.
D. Plug in a second cable and set one port to TX and one port to RX.
Correct Answer: B
A technician is downloading an ISO from a vendor's website. To ensure the integrity of the download, which of the following should be veri ed?
A. File size
B. Vendor URL
C. File hashing
D. Encryption
Correct Answer: C
An administrator wants to implement an additional authentication factor to the remote SSH servers. Which of the following accomplishes this
goal with the principle of "something you have"?
A. Certi cate
B. Pattern
C. Password
D. Fingerprint
Correct Answer: A
A junior technician is setting up a voice control device so the Chief Executive O cer (CEO) will be able to control various things in the o ce. Of
which of the following types of IoT technologies is this an example?
A. LAN
B. WAN
C. SAN
D. PAN
Correct Answer: D
Users on a LAN segment are reporting a loss of connectivity to network services. The client PCs have been assigned with 169.254.X.X IP
addresses. Which of the following IP address schemas is being utilized?
A. Private IP
B. Static IP
C. APIPA
D. Loopback
Correct Answer: C
A network administrator has created a new VLAN for the server and clients within the accounting department and wants to outline how it
integrates with the existing network. Which of the following should the administrator create?
A. Logical diagram
B. Physical diagram
C. Rack diagram
D. Con guration diagram
Correct Answer: A
Which of the following would indicate that a circuit speed should be increased?
A. Low latency
B. Low bandwidth consumption
C. High number of SIEM alerts
D. High packet drops
Correct Answer: D
  kelly_mon 4 months, 2 weeks ago

Doesn't Latency make more sense, should the answer be A ?
upvoted 2 times

Sorry ignore that, didn't realise low latency is good. Duh
upvoted 6 times
  MarMar08 2 months ago

LMAOO!!! i thought the same exact thing... till i read your comment
upvoted 2 times
A technician has installed an older IP camera as a temporary replacement for a recently failed newer one. The technician notices that when the
camera's video stream is off, the ping roundtrip time between the camera and the network DVR is consistently less than 1ms without dropped
packets. When the camera video stream is turned on, the ping roundtrip time increases dramatically, and network communication is slow and
inconsistent. Which of the following is MOST likely the issue in this scenario?
A. VLAN mismatch
B. Duplex mismatch
C. Cat 6 RX/TX reversed
D. Damaged cable
Correct Answer: B
Wireless users have been experiencing connectivity problems. Investigation shows neighboring wireless appliances, which are not connected to
the network, have been on the same 5GHz frequency to communicate. Which of the following wireless performance problem concepts de nes this
issue?
A. Interference
B. Distance limitation
C. Signal-to-noise ratio
D. Absorption
Correct Answer: A
Which of the following BEST explains the purpose of signature management as a mitigation technique?
A. Hardening devices
B. Segmenting the network
C. Detecting malicious activity
D. Restricting user credentials
Correct Answer: C
A network technician installs a web server on the rewall. Which of the following methods should the technician implement to allow access to
outside users without giving access to the inside network?
A. VLAN
B. DMZ
C. SNMP
D. NTP
Correct Answer: B
A Chief Information O cer (CIO) tasks the network engineer with protecting the network from outside attacks. Placing which of the following
devices on the network perimeter would provide the MOST security for the system?
A. Firewall
B. NGFW
C. Content lter
D. IDS/IPS
Correct Answer: B
Topic 2 - More Questions.
Question #1 Topic 2
Management has requested that a wireless solution be installed at a new o ce. Which of the following is the FIRST thing the network technician
should do?
A. Order equipment
B. Create network diagrams
C. Perform a site survey
D. Create an SSID.
Correct Answer: C
Question #2 Topic 2
A technician has deployed an additional DHCP server for redundancy. Clients in certain subnets are not receiving DHCP leases from the new DHCP
server.
Which of the following is the MOST likely cause?
A. The new DHCP server's IP address was not added to the router's IP helper list.
B. The new DHCP server is not receiving the requests from the clients.
C. The ARP cache of the new DHCP server needs to be updated.
D. The ARP table on the router needs to be cleared.
Correct Answer: A
Question #3 Topic 2
Greater bandwidth and availability are required between two switches. Each switch has multiple 100Mb Ethernet ports available. Which of the
following should a technician implement to help achieve these requirements?
A. Spanning tree
B. Clustering
C. Power management
D. Port aggregation
Correct Answer: D
Question #4 Topic 2
A technician is con guring a new server with an IP address of 10.35.113.47 on the 10.35.112.0 subnet to allow for the maximum number of hosts.
When con guring network settings, which of the following is the correct subnet mask?
A. 10.35.112.0/30
B. 10.35.112.0/24
C. 255.255.240.0
D. 255.255.248.0
E. 255.255.255.0
Correct Answer: C
  Parti 1 month ago

Now, I had to think about it for a moment, thinking that we only had to find the correct mask based on the subnet and IP addresses, then both
255.255.240.0 and 255.255.248.0 could be possible. I just did not bother to finish the actual question, the key aspect being: the MAXIMUM
NUMBER OF HOSTS...
Answers A and B are IP addresses so we can get rid of them, not valid subnet masks.
Since the values 10 and 35 are the only ones repeated in both IP addresses we have to assume that the subnet mask will start with two full octet
values: 255.255. That rules out answer E.
The number values for each bit of the third octet would run as follows:
128 192 224 240 248 252 254 255
11111111
a subnet mask of 255.255.248.0 leaves us with three bits for hosts (2046).
a subnet mask of 255.255.240.0 leaves us with 4 bits for possible host calculation (4094) and is the answer.
upvoted 9 times
  EhabMJ 3 weeks, 4 days ago

Great explanation Parti, it really helps!
upvoted 1 times
Question #5 Topic 2
Ann, a customer, recently upgraded her SOHO Internet to gigabit ber from cable. She was previously getting speeds around 75Mbps down and
25Mbps up. After the upgrade, Ann runs a speed test on her desktop and gets results of 1000Mbps down and 100Mbps up. A technician connects
directly to the router and sees the correct 1000Mbps speeds. Which of the following is MOST likely the cause? (Select two).
A. All ports should be con gured for full duplex.
B. There is a 10/100 switch on the network.
C. The connections are using Cat 5 cable.
D. The connections are using Cat 6 cable.
E. There is a transceiver mismatch at the ber termination point.
F. Signal attenuation on the new ber has reached the upper limits.
Correct Answer: AC

How can it be C, the question clearly states switched from cable to fibre ?
upvoted 2 times

She upgraded internet access not the LAN
upvoted 1 times

I think answer should be AB, please; the more knowledgeable, advise, explain.
upvoted 1 times
  Abbas565 2 months, 3 weeks ago

I think the question has typo and download is 100Mbps not 1000Mbps!
upvoted 6 times
  sirpetey 2 months, 1 week ago

I believe so since the answer is saying she is using cat5, which limit is 100Mbps
upvoted 2 times
  Scott_brily 1 week, 1 day ago

Cat 5 can support 1G connections.
upvoted 1 times
  Mark0P0L0 1 week ago

Cat 5e MAX is actually 1Gbps
upvoted 1 times
  Digo 3 days, 20 hours ago

if so, think it would be BC as both limit the speed to 100MB
upvoted 1 times
Question #6 Topic 2
A user reports intermittent performance issues on a segment of the network. According to the troubleshooting methodology, which of the
following steps should the technician do NEXT after collecting initial information from the customer?
A. Document ndings, actions, and outcomes.
B. Establish a theory of probable cause.
C. Establish a plan of action to resolve the problem.
D. Duplicate the problem, if possible.
Correct Answer: D

Why is this not Establish a Theory of Probably Cause?
upvoted 3 times
  cycoghost 6 months, 2 weeks ago

After duplicating the problem. You will have a better way of understanding how to determine a probable cause.
upvoted 5 times
  alphaomega 5 months ago

The answer should be B.
The six steps are:

Identify the problem.
Establish a theory of probable cause.
Test the theory to determine cause.
Establish a plan of action to resolve the problem and implement the solution.
Verify full system functionality and if applicable implement preventative measures.
Document findings, actions, and outcomes.
https://www.dummies.com/programming/certification/comptia-troubleshooting-process-certification-exams/
upvoted 8 times
  SpacePeanut 4 months, 2 weeks ago

Duplicating the problem is part of 'Identifying the problem' so you're still on step one. D is the correct answer.
upvoted 5 times

the first step is to identify the issue which is possible if u can duplicate the issue.
upvoted 3 times

This is such a trick question, should not be on the exam hopefully
upvoted 3 times
  obi1 2 months, 2 weeks ago

thinking through this, the reason why D is the answer is because the technician is trying to ensure that what he was told is actually true. as in, doing
it yourself not depending alone on the information that was provided to you. another tricky thing is that I would categorize this as "questioning the
obvious" which falls under Establishing a theory of probable cause.
upvoted 2 times

The gold standard for troubleshooting is duplication of the problem. Simply put, duplication is the ability to reliably recreate a particular failure
condition. The word “reliable” is key: it should be something you can summon forth on demand every time.
upvoted 1 times
Question #7 Topic 2
Which of the following protocols is associated with a three-way handshake?
A. UDP
B. ICMP
C. GRE
D. TCP
Correct Answer: D
Question #8 Topic 2
Which of the following would a company place at the edge of its network if it wants to view and control which Internet applications are being
used?
A. VPN concentrator
B. NGFW
C. IDS/IPS
D. Proxy server
Correct Answer: B
Question #9 Topic 2
A technician wants to physically connect two o ce buildings' networks. The o ce buildings are located 600ft (183m) apart. Which of the
following cable types is the BEST choice?
A. Cat 5e
B. Cat 6a
C. Multimode
D. Coaxial
Correct Answer: C
A network engineer at a multinational company is asked to purchase mobile phones for senior executives who often travel internationally. The
executives want their phones to work with wireless carriers in multiple countries when they travel. Which of the following cellular standards
should these new phones support?
A. GSM
B. TDM
C. CDMA
D. PSTN
Correct Answer: A
Which of the following should a network administrator use to con gure Layer 3 routes? (Select TWO).
A. Multilayer switch
B. Firewall
C. Hub
D. Bridge
E. Modem
F. Media converter
Correct Answer: AB
While logged into a nancial application, a user gets errors when trying to write to the database. The network administrator is not familiar with the
application and how it communicates with the database. Which of the following documentation types should the network administrator use to
troubleshoot the data ow?
A. Logical diagram
B. Physical diagram
C. Network baseline
D. Change management log
Correct Answer: A
Joe, a network engineer, is attempting to install wireless in a large work area. He installs the access point in the middle of the work space. When
testing, he notices a -60dB reading on one side of the room and a -92dB reading on the other side. Which of the following is MOST likely the issue?
A. External interference
B. Distance limitations
C. Channel overlap
D. Incorrect antenna type
Correct Answer: D
A network technician wants to address PCs on a subnet with IPv6 in addition to IPv4. The subnet currently uses a DHCP server that only supports
IPv4. Which of the following should the technician use to assign IPv6 addresses automatically without DHCP?
A. APIPA
B. MAC reservations
C. EUI-64
D. IPv4 to IPv6 tunnel
Correct Answer: C
A technician is establishing connectivity through a VPN for remote server access. Which of the following protocols should be utilized to con gure
this VPN connection securely?
A. IPSec
B. IGRP
C. L2TP
D. PPTP
Correct Answer: A

Wouldn't it be D.?
upvoted 3 times

A is a minimum requirements
upvoted 1 times
  bykhie 1 month, 3 weeks ago

PPTP is definitely the correct answer
upvoted 1 times
  pshimsmart 1 month ago

The answer is right please do not listen to these people. It's not in the Comptia Objectives.
upvoted 6 times
  Mimi 2 weeks, 1 day ago

Answer is right. Please refer to this link: https://proprivacy.com/vpn/guides/vpn-encryption-the-complete-guide. L2TP does not provide encryption
unless used with IPSec. PPTP is an older encryption method that uses MSCHAPv2 and is now obsolete. Thus this makes IPSec the correct answer.
upvoted 2 times
A network technician receives a request for a disaster recovery solution. Management has requested no downtime in the event of a disaster.
Which of the following recovery solutions is the appropriate choice?
A. Hot site
B. Business continuity
C. File backups
D. Virtual snapshot
Correct Answer: B

Answer ‘B’ is INCORRECT. Business Continuity is a ‘Plan’. It’s part of the solution, but not the solution. You definitely want a ‘Hot Site’. Wouldn’t you
rather have a ‘Hot Site’ ready to go in lieu of a BCP ? You can get away with NOT having a BCP, bit can’t get away with not having a ‘Hot Site’.
upvoted 12 times

Business continuity is an organization's ability to ensure operations and core business functions are not severely impacted by a disaster or
unplanned incident that take critical systems offline. Answer is B
upvoted 1 times

No downtime solution is required, therefore A - Hot site
upvoted 10 times
  honeypot2020 7 months ago

The correct answer is A. Hot Site!
upvoted 5 times
  chivo 4 months, 1 week ago

It's business continuity plan. Business continuity planning (BCP) is a broad disaster recovery approach whereby enterprises plan for recovery of the
entire business process.
upvoted 1 times

A business continuity plan is just what it says...a "plan". It is not a solution. The Hot Site is a "solution" that could be mentioned in the "plan".
upvoted 1 times
  Letu 4 months ago

The answer is A guys, the question is asking for the solution, which must be implemented.
upvoted 2 times

there are only 3 recovery solution:
hot
warm
and cold
upvoted 1 times

The answer is "Hot Site". The key work here is "solution" and not plan. Business continuity is the plan that actually outlines what is to be done after
a disaster. The "hot site" is the actual solution that will enable business to continue with interruption.
upvoted 1 times
  obi1 2 months, 2 weeks ago

thought through it. answer is A. Hot site. it is a solution guys.
upvoted 1 times
  Abiye 2 months, 1 week ago

My answer was Hot Site, but after thinking about the answer given, I believe it makes more sense. The technician was asked to come up with a
disaster recovery solution but the exact disaster type isn't specified. While a hot site is a the best option compared to warm and cold, not all
disasters need the implementation of a hot site. Also, not all companies out there have the capability to have a hot site available. So, when coming
up with a disaster recovery solution, the technician needs consider such thoughts. The solution that can entertain such thoughts is the Business
Continuity Plan.
upvoted 5 times
Hot site is the only answer here that guarantees no downtime. A BCP must specify the allowable downtime, but it could specify a day or two just as
easily as it could specify zero. A is definitely the correct answer.
upvoted 1 times

According to many 3rd party sites, the answer is B. So, even though a lot of feel the answer is A, most likely the exam will mark that as wrong.
upvoted 3 times
  ANDREVOX 2 weeks ago

Business continuity planning (BCP) is the process involved in creating a system of prevention and recovery from potential threats/disaster to a
company i.e. "THE SOLUTION". The plan ensures that personnel and assets are protected and are able to function quickly in the event of a disaster.
The BCP is generally conceived in advance and involves input from key stakeholders and personnel.
upvoted 1 times
A network technician receives a new rmware update for a network device. The technician wants to ensure the le has not been tampered with.
Which of the following techniques should the technician use to ensure the integrity of the le?
A. Cyclic redundancy check
B. System integrity check
C. Hash comparison
D. Root guard
Correct Answer: C
An AP is con gured to authenticate clients by using their Active Directory username and password. The AP uses UDP to connect to the
authentication service, which then queries Active Directory. Which of the following authentication services is being used by the AP in this
scenario?
A. RADIUS
B. TACACS+
C. LDAP
D. Kerberos
Correct Answer: A
Which of the following should be con gured on the network to achieve performance for the FCoE storage tra c?
A. PoE
B. DHCP snooping
C. Jumbo frames
D. Virtual IP
Correct Answer: C
A network administrator wants to narrow the scope of a subnet to two usable IP addresses within a class C network. Which of the following is the
correct CIDR notation?
A. 10.10.50.0/30
B. 172.16.20.0/30
C. 192.1.0.124/30
D. 192.168.0.192/24
E. 192.170.10.0/24
Correct Answer: C
A network technician notices that most of the nodes in the 10.10.74.0/23 address space return either 1 or 2 node hop after running a tracert,
however, some of the new servers are showing a hop count larger than 10. Which of the following is the MOST likely reason for this?
A. New servers are being provisioned in the cloud.
B. Those servers have host-based rewalls.
C. Some of the servers are con gured to use different gateways.
D. Part of the subnet is con gured to use different VLANs.
Correct Answer: A

Why can’t it be ‘C’ ?
C. Some of the servers are configured to use different gateways.
upvoted 4 times

Both A and C can be right, however assumed the servers are in the same company which probably don't use that many routers/gateway, so answer
A makes more sense imo.
upvoted 8 times

Right on vt2019
upvoted 2 times

This is a dumb question that leave out important information to answer it properly.
upvoted 1 times
A technician has a remote site that often has congestion issues. When this happens, the remote router cannot be managed using SSH because
the session drops. Which of the following is a possible solution to the issue?
A. Out-of-band management
B. HTTPS management URL
C. Client-to-site VPN
D. Router ACL
Correct Answer: A
  Coconut 4 months, 2 weeks ago

I dont get this. Isn't he already using out-of-band management and it isnt working because the session drops?
upvoted 2 times

No, the question states the session starts dropping when the congestion occurs, implying the user is connecting via the existing problematic
network connection.
upvoted 6 times
A technician has installed multiple new PC clients and is connecting them to the network. Only one client is receiving IP addressing information.
Which of the following should the technician verify as the NEXT troubleshooting step?
A. DHCP scrope
B. DHCP lease
C. Default gateway
D. DNS zone
Correct Answer: A

What is a ''scrope''? I thought it's 'scope'!
upvoted 2 times

they keep coming up with new terminologies ha!
upvoted 1 times
  plopez16 2 months, 3 weeks ago

DHCP Scope*
upvoted 2 times

Definitely the Scrope!
upvoted 2 times
Which of the following WAN technologies swaps the header on a packet when internally switching from one provider router to another?
A. ATM
B. Frame relay
C. MPLS
D. PPP
Correct Answer: C
A network administrator is purchasing a mobile phone for a manager who is traveling internationally. The phone needs to be able to make and
receive calls in multiple countries outside of North America. Which of the following cellular technologies should the administrator look for in the
phone?
A. CDMA
B. GSM
C. TDMA
D. CSMA
Correct Answer: B
A network administrator is downloading a large patch that will be uploaded to several enterprise switches simultaneously during the day's upgrade
cycle. Which of the following should the administrator do to help ensure the upgrade process will be less likely to cause problems with the
switches?
A. Con rm the patch's MD5 hash prior to the upgrade.
B. Schedule the switches to reboot after an appropriate amount of time.
C. Download each switch's current con guration before the upgrade.
D. Utilize FTP rather than TFTP to upload the patch.
Correct Answer: C
  Emago 4 months, 2 weeks ago

Shouldn't it be A? How a backup config can 'help ensure the upgrade process will be less likely to cause problems with the switches'? This solution
can make a recovery process less troublesome but not the upgrade process.
upvoted 3 times
  AG87 2 months, 1 week ago

I think this answer's more along the lines of reverting back to the previous configuration if there is an issue.
upvoted 4 times
  Peacges1 1 month, 3 weeks ago

A: Best to ensure you are not uploading corrupt files...
upvoted 1 times

backup backup backup first. prevention 1st
upvoted 1 times

This has nothing to do with ensuring the upgrade process will be less likely to cause problems!
upvoted 1 times
A network technician is segmenting network tra c into various broadcast domains. Which of the following should the network technician utilize?
A. VLAN
B. STP
C. ACL
D. BPDU
Correct Answer: A
After rebooting a PC, a user is no longer able to connect to the corporate network. As a test, the technician plugs a different laptop into the same
network jack and receives an IP address of 169.254.112.137. Which of the following is MOST likely causing the issue?
A. DHCP scope exhaustion
B. Improper DNS setting
C. Incorrect ACL setting
D. Port-security violation
Correct Answer: A
A network administrator is concerned about clients being able to access the local Internet while connected to the corporate VPN. Which of the
following should be disabled on the client to prevent this?
A. TLS
B. Remote le access
C. Split tunneling
D. HTTPS
Correct Answer: C
A network technician travels to a remote o ce to set up a new SOHO for the company. Wireless networking should be used at the remote o ce.
The network technician sets up all the related wireless network equipment, and the last step is to connect the users' devices to the company
network. To complete this step, which of the following should be used to secure the remote network location?
A. Host-based rewalls
B. WPA2/WPA
C. Open access
D. Port ltering
Correct Answer: B
The length of an IPv6 address is:
A. 32 bits
B. 64 bits
C. 128 bits
D. 256 bits
Correct Answer: C
A network technician is troubleshooting a problem with a user's client-to-site VPN connection. The user is unable to establish a connection to the
server, but the error message that appears on screen does not contain useful information. Which of the following should the technician do NEXT
to troubleshoot the issue?
A. Recon gure the user's VPN connection in the router to x pro le corruption.
B. Inform the user that provisioning sometimes fails and the connection needs to be attempted again.
C. Review the logs in the VPN client to check for any informational messages.
D. Verify the system has the latest OS patches installed.
Correct Answer: C
Management requires remote access to network devices when the ISP is down. Which of the following devices would provide the BEST solution?
A. Router
B. Firewall
C. Bridge
D. Modem
Correct Answer: D
A network technician is performing a rmware upgrade on a switch. The rmware needs to be downloaded to the device. Which of the following
methods should the technician use to retrieve the updated rmware?
A. RDP
B. SSH
C. TFTP
D. Telnet
Correct Answer: C
A network technician is assisting a user who is experiencing connectivity problems with the VPN. The technician has con rmed the VPN is
functioning and other users at the site cannot access the Internet. Which of the following commands would MOST likely be used to further
troubleshoot?
A. tracert
B. netstat
C. arp
D. dig
Correct Answer: A
Which of the following MUST be installed on an employee's computer if the remote access VPN implements an SSL VPN with PKI authentication?
A. Shared secret
B. HTTPS server
C. Soft spoken
D. Private certi cate
Correct Answer: D
Which of the following default ports should be opened on a rewall to allow for SSH and Telnet? (Select TWO)
A. 21
B. 22
C. 23
D. 25
E. 123
F. 443
Correct Answer: BC
Two computers are connected to a multilayer switch, and both can access the corporate le server. The computers cannot talk to one another.
Which of the following is MOST likley the cause?
A. Duplex/speed mismatch
B. ACL miscon guration
C. Bad port
D. Crosstalk
Correct Answer: B
A user calls the help desk for assistance with setting up a new SOHO router. The user has three employees who all have laptops that need to
connect to the wireless network. The users need to have rewall rules allowing access to an internal server, but cannot be con gured with static IP
addresses. Which of the following BEST describes what the technician should implement?
A. CNAME record in the users' dynamic DNS accounts
B. Additional lease time for the laptop computers
C. IP helper relay system for con guration hops
D. DHCP reservation for the laptops' MACs
Correct Answer: D

Says cannot be configured with a static IP address in the question. Isn't that what DHCP reservation basically makes use of?
upvoted 2 times
  Kate_v 5 months ago

Exactly, I agree. It says cannot be configured with static IP addresses; so why the answer is D?
upvoted 2 times

Because you're not setting up a static IP on the host device itself. The end result is the same but it's the DHCP server issuing the reserved address.
The host is still set up for DHCP, not static, per company policy..
upvoted 10 times

I think the answer is correct. A DHCP reservation is a permanent IP address assignment. It is a specific IP address within a DHCP scope that is
permanently reserved for leased use to a specific DHCP client. Users can configure a DHCP reservation in their DHCP server when they need to
reserve a permanent IP address assignment
upvoted 7 times
A home user is unable to get to the Internet from a workstation that is connected to a wireless network. When reviewing the results of the ipcon g
command, the user wants to verity the default gateway is correct. Which of the following devices should be the gateway?
A. Cable modem
B. SOHO router
C. DNS server
D. Layer 2 switch
Correct Answer: A

If the user is using a router which behind a modem then the router IP should be the gateway, answer should be B - SOHO router.
upvoted 5 times

modem has a router and switch like all in one. so nothing behind a cable modem
upvoted 1 times

why cable modem though? The answer should be B- SOHO router
upvoted 2 times
  ktbird y 8 months ago

The key to this is the word "home user" most homes are connected via cable using a modem.
upvoted 10 times

Yes, but it is not just a modem that most homes use. It is a multifunction device (modem/router). The answer is incorrect. It is SOHO Router.
upvoted 4 times
  SoggyToast101 7 months, 3 weeks ago

NANI that should be B
upvoted 3 times

So comptia is telling us, if its a user from home then they always have a cable network?
upvoted 3 times

i think the answer is correct. it all boils down how you prefer the configuration to be done. Some modem give dhcp through their router. For
example, in my home I have separate router that is connected to the modem, I configure my router in a way to allow me to get DHCP directly from
the modem instead of the router. with that it helps not to have two DHCP server.
upvoted 3 times

This answer is wrong. Everywhere I lookup online says the answer is router... Including compTIA!
upvoted 3 times
  C_Allen989 12 hours, 47 minutes ago

The Correct answer is A- Cable Modem because the probability of the company allowing you use to a SOHO router at home is highly unlikely
because of cost, therefore most end users will have access to the workstation through the cable modem.
upvoted 1 times
A technician is troubleshooting intermittent connectivity on a line-of-sight wireless bridge. Which of the following tools should the technician use
to determine the cause of the packet loss?
A. Spectrum analyzer
B. OTDR
C. Packet sniffer
D. Multimeter
Correct Answer: A
Which of the following should be con gured to allow for IP-to-name resolutions?
A. CNAME
B. A
C. PTR
D. NS
Correct Answer: C
When con guring a new switch in a packet-switched network, which of the following helps protect against network loops?
A. Spanning tree
B. Flood guard
C. BPDU guard
D. DHCP snooping
Correct Answer: A
A company has just installed a new cloud VoIP solution, however, users occasionally report poor call quality or dead air being present. Which of
the following describes the NEXT troubleshooting step the technician should take?
A. The technician should check the internal diagnostics on all the phones to look for a common thread.
B. The technician should reset all the phones and deprovision information from the provider
C. The technician should use a packet tracer to see if the tra c is getting out of the network
D. The technician should run ping tests on the Internet line to monitor for packet loss and latency
Correct Answer: D
A network technician needs to con gure a device with an embedded OS so it can be connected to a wireless handheld scanner. Which of the
following technologies should be con gured on the OS to create the wireless connection?
A. Partial mesh
B. Ad hoc
C. Ring
D. Bus
Correct Answer: B
An NGFW alerts that a web server in the DMZ is sending suspicious tra c. A network administrator nds that port 25 is open, and the tra c is
originating from this port. The only purpose of this server is to deliver website tra c. Which of the following should the network administrator
recommend to the systems administrator?
A. Disable Telnet service on the server.
B. Disable DHCP service on the server.
C. Disable the SMTP service on the server
D. Disable FTP service on the server.
Correct Answer: C
Joe, a network technician, wants to locally back up several router and switch con gurations. He wants to store them on a server that can be
accessed easily for recovery without authentication. Which of the following servers should Joe use?
A. Telnet
B. LDAP
C. TFTP
D. Samba
Correct Answer: C
  Mark0P0L0 6 days, 19 hours ago

Non of those are servers. Question is mis-formulated.
upvoted 1 times
According to the troubleshooting methodology, which of the following steps will help a technician gather information about a network problem?
(Select TWO).
A. Test solutions.
B. Duplicate the problem
C. Establish a theory of probable cause
D. Question users
E. Implement preventive measures.
F. Document ndings
Correct Answer: BD
A user reports network resources can no longer be accessed. The PC reports a link but will only accept static IP addresses. The technician pings
other devices on the subnet, but the PC displays the message Destination unreachable. Which of the following are MOST likley the causes of this
issue? (Select TWO).
A. Damaged cables
B. Crosstalk
C. Bent pins
D. TX/RX reverse
E. VLAN mismatch
F. Duplex mismatch
Correct Answer: CE

Something doesn't add up here. If it has bent pins it wouldn't discriminate between static and dynamic IP addresses.
upvoted 3 times
  awesome_album 1 month ago

I think most likely is A and E
upvoted 2 times
  Mark0P0L0 6 days, 19 hours ago

The PC reports established link-1, PC accept's only static IPs-2.
Out of those mentioned- broken pins or cables are noooot the first or MOST obvious (it will simply get no link).
VLAN- is most probably and falls into picture.
TX/RX reverse- will have no static IP address difference and will simply not work.
CROSSTALK- will have nothing with IPs and will have packet loss and low bandwith.
DUPLEX/HALF DUPLEX MISMATCH- IPs do not matter, there will be ping with no traffic.
Strange choice CompTIA, but ok.
upvoted 1 times
While testing an ACL on the default gateway router to allow only web browsing, ports TCP 80 and TCP 443 were the only ports open. When tested,
no websites were accessible via their URLs inside the network. Which of the following con gurations should be added to the ACL?
A. permit tcp any any eq 20
B. permit udp any any eq 25
C. permit udp any any eq 53
D. permit udp any any eq 68
E. permit tcp any any eq 110
F. permit tcp any any eq 8080
Correct Answer: C
Users have been experiencing connection timeout issues when using a web-based program. The network technician determines the problem
happened due to a
TTL setting that was set too low on the rewall. Which of the following BEST enabled the network technician to reach this conclusion?
A. Reviewing application logs
B. Reviewing a baseline report
C. Reviewing a vulnerability scan
D. Reviewing SLA requirements
Correct Answer: A
A network technician is installing a new wireless network for a client. The client has experienced issues with other building tenants connecting to
the wireless network and utilizing the bandwidth. The client wants to prevent this from happening by using certi cate-based authentication. Which
of the following technologies should the network administrator implement?
A. WPA-PSK
B. EAP-TLS
C. AES-CCMP
D. WEP-TKIP
Correct Answer: B
A network administrator is installing a campus network of two routers, 24 switches, 76 APs, and 492 VoIP phone sets. Which of the following
additional devices should the administrator install to help manage this network?
A. VoIP PBX
B. Content lter
C. RADIUS server
D. Wireless controller
Correct Answer: D
A technician arrives at a new building to nd cabling has been run and terminated, but only the wall ports have been labeled. Which of the
following tools should be utilized to BEST facilitate labeling the patch panel?
A. Tone generator
B. Cable tester
C. Multimeter
D. Loopback adapter
Correct Answer: B

Answer B is incorrect. How’s a cable tested going to help you locate which wire is which ?
You’re going to use a Tone Generator to facilitate locating each wire run.
upvoted 19 times

Answer should be A
upvoted 12 times

Answer should be A
upvoted 11 times

A. Tone generator is the right answer!
upvoted 7 times
  AbiolaBad 4 months, 3 weeks ago

Definitely A
upvoted 3 times
  cgaie 2 weeks ago

Should be A. Misleading answer
upvoted 1 times
  nepa 5 days, 11 hours ago

Fix this answer. A cable tester checks for contuinity if a cable can run a signal it's entire length. In no way-shape-or-form can it help locate a run of
cable. Does this website even check for correct answers? I've noticed atleast 15 OBVIOUSLY wrong answers with many people people debating and
agreeing that the answer is wrong. Do not be mislead and always use the internet to find a consensus on misleading answers like this one that's
listed as correct
upvoted 2 times
  C_Allen989 8 hours, 58 minutes ago

A cable tester is correct because the question states that the tech arrives and the cables have been terminated. Nothing about the question is
talking about a device that couldn't connect to the network.
upvoted 1 times
Which of the following policies prohibits a network administrator from using spare servers in the datacenter to mine bitcoins?
A. NDA
B. BYOD
C. AUP
D. MOU
Correct Answer: C
Which of the following technologies is used when multiple Ethernet adapters work to increase speed and fault tolerance?
A. Clustering
B. Load balancing
C. Redundant circuits
D. NIC teaming
Correct Answer: D
A network technician has nished con guring a new DHCP for a network. To ensure proper functionality, which of the following ports should be
allowed on the server's local rewall? (Select TWO).
A. 20
B. 21
C. 53
D. 67
E. 68
F. 389
Correct Answer: DE
A network technician is reviewing switch ACLs to determine if they are causing communication issues with one PC. The PC's IP address is
192.168.12.66. Which of the following is the network range found in the ACL that could have affected this PC?
A. 192.168.12.97 255.255.255.192
B. 192.168.12.97 255.255.255.224
C. 192.168.12.97 255.255.255.240
D. 192.168.12.97 255.255.255.248
Correct Answer: A

Wouldn’t all of these options affect the PC’s address of 66 ?
upvoted 2 times

it either all (or none), the question is most likely incorrect
upvoted 1 times

Only A would have made sense because both (192.168.12.66 and 192.168.12.97) would be usable addresses in the same subnet of
255.255.255.192 (/64).
upvoted 9 times

When you do subnet, you wanna make sure you have the required number of IPs in a subnet. Basically, you don't wanna chop your IP into a large
number of network, and IPs.
/224 would provide 3 NID, and 30 IPs. Your NIDs wd be like:
NID 1 = 0-30
NID 2 = 32 -92 ,<--- the number 66 falls here with less number IPs in NID not being used.
....
upvoted 4 times

I literally have no idea how to figure out the answer for this question. Is it missing some information?
upvoted 1 times
  Aziz_Q8 2 weeks, 3 days ago

the idea is to have 1 subnet that fits both IPs (192.168.12.66 & .97).
checking OPTION 1:
subnet mask: 255.255.255.192
this leads to 2 bit network and 6 bit host = 64 hosts
setting network ranges: 1-64-128- ...etc.
we can see both IPs in the SAME SUBNET (64 - 127).
meanwhile; other subnet mask leads to fit IPs (.66 & .97) in different subnets.
i.e OPTION 2
subnet mask: 255.255.255.224
this leads to 3 bit network and 5 bit host = 32 hosts
1-32-64-96-128 ...etc.
we can see both IPs in the DIFFERENT SUBNETS.
remaining options don't fit as well.

upvoted 2 times
A new technician is connecting an access switch to a distribution switch uplink in a datacenter using ber cables. Which of the following are
transceivers the technician should use to perform this job? (Select TWO).
A. RJ45
B. DB-9
C. LC
D. SFTP
E. GBIC
F. SC
Correct Answer: CF

I really think there is no correct answer in this question unless D is meant to be SFP instead of SFTP. SC and LC are connector types, not
transceivers.
upvoted 1 times

For clarification, I meant E would be one correct answer but that would be it unless (as I mentioned above) D is meant to be SFP.
upvoted 1 times

^ Agreed. SFP and GBIC are transceivers and SC and LC are connector types....
upvoted 6 times
  Tzu 4 months, 1 week ago

The question is asking for transceivers that can accept fiber connector terminals (LC and SC).
Gigabit Interface Converter (GBIC) takes in RJ45 Signals (electric signals) and CONVERTS them to optical signals.
Secure FTP is a protocol
LC and SC are correct. (Questions are pretty tricky haha)
upvoted 5 times

LC and SC aren't transceivers.
upvoted 1 times
  IDTENT 1 month ago

GBIC accepts fiber cables and is a transceiver just as SFP is a fiber transceiver and are the only answers that meet the question criteria.
upvoted 1 times
  PJBlackmore 3 months, 4 weeks ago

SFTP should be SFP. LC and SC are connector types. GBIC and SFP would be answer
upvoted 1 times
  Asadullah 1 week, 2 days ago

The correct answer is SFP and GBIC.
upvoted 1 times
Which of the following physical security devices is used to prevent unauthorized access into a datacenter?
A. Motion detector
B. Video camera
C. Asset tracking
D. Smart card reader
Correct Answer: D
A technician is installing two new servers that collect logs. After installing the servers, the technician reviews the logical output from various
commands. Which of the following should be included in a logical network diagram?
A. Rack location
B. Room number
C. Media type
D. Hostname
Correct Answer: D
A few weeks after starting a new position, Joe, a junior network administrator, receives a call from an internal number asking for his username and
password to update some records. Joe realizes this may be a type of attack on the network, since he has full access to network resources. Which
of the following attacks is described?
A. Logic bomb
B. Social engineering
C. Trojan horse
D. Insider threat
Correct Answer: B
A technician is sent to troubleshoot a faulty network connection. The technician tests the cable, and data passes through successfully. No
changes were made in the environment, however, when a network device is connected to the switch using the cable, the switchport will not light
up. Which of the following should the technician attempt NEXT?
A. Modify the speed and duplex
B. Plug in to another port
C. Replace the NIC
D. Change the switch
Correct Answer: B
  manassah 4 months, 2 weeks ago

Okay so I'm not debating it being B but I need to know why it can't be D. Because the question said that they verified data could pass through the
cable but that doesn't say much about the switch being fully operational.
upvoted 1 times
  Shunglee 4 months, 2 weeks ago

Because as a tech you usually want to start with the most obvious solutions first before you move on to more complex and time consuming
solutions. In this case it made sense to try another port FIRST before he did anything drastic like change the whole switch
upvoted 8 times
  James009 2 months, 1 week ago

It was verified the cable was good, that was a troubleshooting to confirm the cable was good. The step was to moved the cable to a diff port on
the switch to confirm if the port was faulty.
upvoted 2 times
  MarMar08 2 months ago

The tricky part about the question is "The" cable. I referring to a specific cable port.
upvoted 1 times
A technician has been assigned to capture packets on a speci c switchport. Which of the following switch feature MUST be used to accomplish
this?
A. Spanning tree
B. Trunking
C. Port aggregation
D. Port mirroring
Correct Answer: D
Which of the following operate only within the UDP protocol?
A. Frames
B. Datagrams
C. Segments
D. Packets
Correct Answer: B
  Charcoal2899 1 day, 2 hours ago

Can someone please explain how B is the answer? Surely its C because segments operate at the transport layer of which UDP is found in the OSI
model ?
upvoted 1 times
  Brittany 8 hours, 30 minutes ago

UDP stands for User Datagram Protocol. TCP works with segments.
upvoted 1 times
An employee reports an error when visiting a website using SSL, and a message is displayed warning of an invalid certi cate. Which of the
following could be occurring?
A. Phishing
B. DDoS
C. Evil twin
D. MITM
E. OCSP stapling
Correct Answer: C

Evil Twin? or OCSP stapling
upvoted 4 times
  viro340 6 months ago

Can someone explain how this is evil twin? I think its the wrong answer.
upvoted 1 times

Its not Evil Twin. A ET w'd be a rouge AP acting as a DHCP, or so ...
OSCP Stapling based on a google search makes more sense:
"OCSP stapling is a method for quickly and safely determining whether or not an SSL certificate is valid. It allows a web server to provide
information on the validity of its own certificates rather than having to request the information from the certificate's vendor."
upvoted 3 times

Evil twin is the correct answer. OSCP helps in determining SSL certificata validity and the question is not saying the user is using OSCP to do this, he
is simply trying to access a website.
upvoted 3 times
  markychaz 1 month, 4 weeks ago

OCSP stapling is the correct answer, Evil Twin is a rouge WAP used for MITM attacks.
upvoted 2 times
A network technician is troubleshooting a connectivity issue and determines the cause is related to the VLAN assignment on one of the access
switches in the network. After resolving the issue, the network technician decides to update the documentation to refer to the correct VLAN.
Which of the following should the technician update?
A. Physical diagram
B. Logical diagram
C. IDF documentation
D. Change management documentation
E. Incident rÃ©ponse plan
Correct Answer: B
  oakzd 3 months ago

How is it not change management?????
upvoted 3 times
  Dobbs 4 weeks ago

The logical diagram describes the network layout, blanks etc. Change management is more about how to implement changes. You would probably
put a note in change management to say you did this work, but the primary document you need to update is the logical diagram,
upvoted 2 times
A university has a lecture hall containing 100 students. Currently, the lecture hall has two 802.11ac wireless access points, which can
accommodate up to 50 devices each. Several students report they are unable to connect devices to the wireless network. Which of the following is
MOST likely the issue?
A. One of the wireless access points is on the wrong frequency
B. The students are attempting to connect 802.11g devices
C. The students are using more than one wireless device port seat.
D. Distance limitations are preventing the students from connecting.
Correct Answer: D

This has nothing to do with distance from the scenario given. There is a possibility of a wrong configuration with the two 802.11ac WAPs. This is
pointing to the frequency.
upvoted 4 times

Different frequency a good thing if both the same frequency then there be interference with each other. I think the answer is C but not certain.
upvoted 2 times
  Scott_brily 1 day, 16 hours ago

You;re talking bout channels, not frequency. Frequency needs to be the same if they are bridging the APs
upvoted 1 times

OverCapacity- C is more likely the correct answer. there are higher chances that a student connect more than one device to the Wifi. Frequency, on
the other hand, will be an issue of intermittent connection, or low signals.
upvoted 2 times

802.11ac uses only 5GHz frequency and the question doesn't say anything abt the device type the students are using. So i think the distance is the
correct answer here.
upvoted 4 times

I was going to say channel overlap, but that wasn't an option.
upvoted 1 times
  Legg 2 weeks, 4 days ago

Many students would have a laptop and mobile phone connecting to the wifi. A full lecture hall would definitely saturate the WAPs.
upvoted 2 times
A WAP has been dropping off the network sporadically and reconnecting shortly thereafter. The Cat5 wire connecting the access point is a long
run of 265ft (81m) and goes through the business area and the mechanical room. Which of the following should the technician do to x the AP
connectivity issue?
A. Install a repeater to boost the signal to its destination
B. Replace the UTP cable with plenum cable.
C. Upgrade the cable from Cat 5 to Cat 5e.
D. Set the AP to half duplex to compensate for signal loss.
Correct Answer: C
  FatPac 6 months, 1 week ago

Why is the answer not plenum? what would cat 5e solve here?
upvoted 1 times

Plenum, is fire-rated cable. Has nothing to do with boosting signal. 5e has the capacity rate of 1GB over 100m distance.
upvoted 5 times

Agree with Rz10, this is mainly about throughput limitation issues.
upvoted 2 times
A technician wants to con gure a SOHO network to use a speci c public DNS server. Which of the following network components should the
technician con gure to point all clients on a network to a new DNS server?
A. Router
B. Switch
C. Load balancer
D. Proxy server
Correct Answer: A

I say ‘Proxy Server’. That’s what their used for !
Each client is configured with the PS address and voila !
upvoted 2 times

i think the answer is proxy Server too. why would it be a Router though?
upvoted 1 times
  michael365 7 months, 3 weeks ago

I may be wrong but I believe that the answer is Router. Since you are directing 'all clients' to the same DNS. Within a router you can set the DNS
server settings which would be the solution to this question I guess? :)
upvoted 4 times

It's a weird and confusing question since A and D are both possible answers. I initially thought D was the correct answer as well. But after reading
the question again and again I realized that the main point right here is that in a SOHO network, a router would be much more of a necessity than
a proxy server. That's what makes me lean more towards A.
upvoted 11 times

A, cause is a SOHO (Small Office, Home Office) network. Remember all come integrated in the router.
upvoted 8 times
  Scott_brily 1 week, 1 day ago

I think A is right because I'm thinking of DCHP
upvoted 1 times
A company wishes to allow employees with company-owned mobile devices to connect automatically to the corporate wireless network upon
entering the facility.
Which of the following would BEST accomplish this objective?
A. Open wireless
B. Geofencing
C. Pre-shared key
D. MAC ltering
Correct Answer: C
  Generalist 2 months, 2 weeks ago

Why wouldn't this one be Mac filtering?
upvoted 1 times

Mac filtering does make sense...
upvoted 1 times
  minelayer 1 month, 1 week ago

Mac Filtering allows only people with specific IP addresses to access the network. The question states that employees upon entering the company
can immediately access the wifi, so a pre-shared key has to be the answer. Open wireless is for anybody especially people who are just guests of
the company to access the network. Geofencing is for location services that has nothing to do with connecting to the wifi. That is why the answer is
C. Pre-Shared Key.
upvoted 3 times
A network engineer for a manufacturing company is implementing a wireless network that provides reliable coverage throughout the facility. There
are several large, electric, motorized machines installed on the shop oor for automating the manufacturing process. These machines are known
to be signi cant sources of
RF interference. Which of the following frequencies should the wireless network use to MINIMIZE this interference?
A. 2.4 GHz
B. 56MHz
C. 5GHz
D. 900MHz
Correct Answer: C
A company has procured a new o ce building and started the process of assigning employees to work at that location. The company has also
purchased equipment for the new location. There are 5033 laptops, 6000 monitors, and 857 printers. Which of the following steps is the
technician most likely to complete
FIRST?
A. Create a rack diagram
B. Create a network baseline
C. Create an inventory database
D. Create a port location diagram
Correct Answer: C
Which of the following is created on a 48-port switch with ve active VLANs?
A. 48 networks, ve segments
B. 48 collision domains, ve broadcast domains
C. 240 private networks
D. 240 usable IP addresses
Correct Answer: B
A corporate manager says wireless phones do not work properly inside the main building. After a troubleshooting process, the network
administrator detects that the voice packets are arriving on the wireless phones with different delay times. Which of the following performance
issues is the company facing?
A. Jitter
B. Latency
C. Attenuation
D. Frequency mismatch
Correct Answer: A

Shouldn't it be B???
upvoted 1 times

"Jitter is the uneven arrival of packets. For example, imagine a VoIP conversation where packet 1 arrives at a destination router. Then, 20 ms
later, packet 2 arrives. After another 70 ms, packet 3 arrives, and then packet 4 arrives 20 ms behind packet 3. This variation in arrival times (that
is, variable delay) is not dropping packets, but the jitter might be interpreted by the listener as dropped packets."
"Latency: Refers to the time lapse between sending or requesting

information and the time it takes to return. As you might expect, satellite communication experiences high latency due to the distance it has to
travel.
[...]
Closely tied to latency, which was discussed earlier, jitter differs in that the length of the delay between received packets differs. While the
sender continues to transmit packets in a continuous stream and space them evenly apart, the delay between packets received varies instead of
remaining constant. This can be caused by network congestion, improper queuing, or configuration errors."
upvoted 13 times
  Mornay 3 weeks ago

Thanks Emago, Great explanation
upvoted 1 times
Which of the following technologies is used to attach multiple guest operating systems to a single physical network port?
A. Virtual switch
B. FCoE
C. VPC
D. vSAN
E. Fibre Channel
Correct Answer: A
When speaking with a client, an employee realizes a proposed solution may contain a speci c cryptographic technology that is prohibited for non-
domestic use.
Which of the following documents or regulations should be consulted for con rmation?
A. Incident response policy
B. International export controls
C. Data loss prevention
D. Remote access policies
E. Licensing restrictions
Correct Answer: B
A network technician is installing a new network switch in the MDF. The technician is using ber to connect the switch back to the core. Which of
the following transceiver types should the technician use?
A. MT-RJ
B. BNC
C. GBIC
D. F-type
Correct Answer: C

I don’t see why MT-RJ is included as a ‘viable’ answer when this question doesn’t say ANYTHING about fiber/network speeds.
An MT-RJ can be and are used in real world environments. They’re absolutely used on CISCO gear for both 100Mb and 1Gb !
upvoted 1 times

MT-RJ is a connector type. The question is pertaining to a transceiver, which makes GBIC the correct answer.
upvoted 11 times
A network technician notices a router that repeatedly reboots. When contacting technical support, the technician discovers this is a known
problem in which an attacker can craft packets and send them to the router through an obsolete protocol port, causing the router to reboot. Which
of the following did the network technician fail to do? (Select TWO).
A. Generate new crypto keys.
B. Keep patches updated.
C. Disable unnecessary services.
D. Shut down unused interfaces.
E. Avoid using common passwords.
F. Implement le hashing.
Correct Answer: BC
A technician has replaced a customer's desktop with a known-good model from storage. However, the replacement desktop will not connect to
network resources.
The technician suspects the desktop has not been kept up to date with security patches. Which of the following is MOST likely in place?
A. ACL
B. NAC
C. Tra c shaping
D. SDN
E. NTP
Correct Answer: B
A network technician wants to gain a better understanding of network trends to determine if they are over capacity. Which of the following
processes should the technician use?
A. Log review
B. Port scanning
C. Vulnerability scanning
D. Tra c analysis
Correct Answer: D
A network technician is con guring network addresses and port numbers for a router ACL to block a peer-to-peer application. Which of the
following is the
HIGHEST layer of the OSI model at which this router ACL operates?
A. Transport
B. Network
C. Session
D. Application
Correct Answer: A
An attacker has ooded the hardware tables of a switch to forward tra c to the attacker's IP address rather than the default router. The tra c
received is copied in real time, and then forwarded to the default router transparently from the end-user perspective. Which of the following
attacks are occurring in this scenario?
(Select TWO).
A. DNS poisoning
B. ARP poisoning
C. Man-in-the-middle
D. Ransomware
E. Evil twin
F. Re ective
Correct Answer: BC
A remote user is required to upload weekly reports to a server at the main o ce. Both the remote user and the server are using a Windows-based
OS. Which of the following represents the BEST method for the remote user to connect to the server?
A. RDP
B. Telnet
C. SSH
D. VNC
Correct Answer: A

This is ridiculous. RDP is mainly used for troubleshooting purposes. Why would a user go through all the trouble to Remote Desktop into a server ?
#1) The System/Network Administrator should be fired for having the RDP Service running on Windows Server.
#2) Why would a user RDP into a server just to link back across the link to upload/copy over a file ? They could’ve just mapped a network drive and
be done with it.
upvoted 3 times

Now, IF they mean the remote user is an ‘Administrator’ or other ‘Special Permissions’ user, and they’re required to be AT the server (as it’s a duty
they regularly perform while at the office ON the server), then I could see using RDP. Otherwise, the Windows Server would likely already be
running as an FTP Server (with the FTP Server Service running), and they’d just remotely Telnet into it.
If this is what the question means, then the question should read; ‘At the Server’.
upvoted 2 times

When they state that the remote client and the server are both Windows-based, you can assume that it is RDP, since Microsoft created it.
upvoted 8 times
  Peacges1 2 months, 3 weeks ago

Since when does RDP allow file transfer?
upvoted 2 times
  DrVirtual 1 month, 3 weeks ago

you can map drives through the RDP client
upvoted 1 times

No one is using remote desktop to upload files to a server.
upvoted 1 times
  Peacges1 3 weeks ago

By default, Windows Dedicated Servers have no FTP server installed or setup. The easiest way to securely transfer files between the server and your
computer is use Remote Desktop.
Click the Start menu on your PC and search for Remote Desktop Connection.
Launch Remote Desktop Connection and click on Show Options.
Select the Local Resources tab and click More.
Under Drives, check the box for your C: drive or the drives that contain the files you will transfer and click OK.
Enter your connection details and click Connect.
Once connected, open Windows Explorer or My Computer from your server and you will be able to see the drives you shared. Drag and drop files
to a folder on your server to transfer the files.
upvoted 2 times
  cgaie 1 week, 3 days ago

I have never ever use RDP for copying files. Always we use at work FTP client (filezilla) RDP is more for troubleshooting. Any way I learned
something new today
upvoted 1 times
  Scott_brily 1 week ago

I knew the answer would be RDP because SSH isn't built for uploading files. WHich leaves RDP as the ONLY sensible option. I agree RDP shouldnt
be used for uploading files as it's way out of scope for the purpose of file uploads
upvoted 1 times
At which of the following layers of the OSI model would TCP/UDP operate?
A. Layer 3
B. Layer 4
C. Layer 5
D. Layer 6
Correct Answer: B
A technician is troubleshooting a server in the nance o ce that hosts an internal accounting program. The ticketing desk has received several
calls from users reporting that access to the accounting program is degraded, and they are experiencing severe delays, sometimes timing out
entirely. The problem has been isolated to the server. Which of the following tools should the technician use on the server to narrow down the
issue?
A. nslookup
B. iptables
C. pathping
D. netstat
Correct Answer: C

why pathping ?
upvoted 1 times

because rest of the answers are even more dumber
upvoted 11 times

Noice answer
upvoted 4 times
  neo20011 3 weeks, 4 days ago

pathping combines (ICMP) ping with network latency and loss over several hops, so first it does a traceroute and identifies all the hops between
two points, and then it calculates the latency and loss and provides a nice report. So it is a good answer.
upvoted 4 times
  ItachiUchiha 1 week, 5 days ago

Good explanation neo
upvoted 1 times
A technician is reviewing network device logs in an attempt to trace an attack that occurred on the network. Which of the following protocols
would affect whether or not the technician can properly trace the attack through the network using the logs?
A. HTTP
B. SMTP
C. NTP
D. RDP
Correct Answer: C
Which of the following is BEST for providing real-time equipment theft alerts to the security staff?
A. Biometric locks
B. Smart card reader
C. Asset tracking tags
D. Motion detection
Correct Answer: B
  mail 7 months, 3 weeks ago

answer should be motion detector
upvoted 2 times

Wouldn't C be a better answer? You can literally track an asset tag through GPS.
upvoted 1 times

agree with Bones, its definitely C
upvoted 1 times

nevermind! it is smart card reader necause a smart card reader has realtime tracking capabilities
upvoted 4 times

Not sure about any of these answers, key word is "real time alert" which of these would let you know the moment it was stolen.
upvoted 1 times

C. is the correct answer:
https://www.wexinc.com/insights/blog/fleet/gps-asset-tracking-how-to-keep-tabs-on-valuable-remote-assets-in-real-time/
upvoted 1 times

smart card reader because if the equipment(inside office) is attached with a smart card, then the reader alarm would go off in real time just like the
way they have it in shoppig malls.
upvoted 1 times

I think B works. Like motion detection setting off an alarm in real time, Smart Card readers can also be setup to set off an alarm in real time when
used, and they include addition information from the reader like who set the alarm off. Like the quest asked for "BEST".
upvoted 1 times

I feel the answer should be C. A smart card is a device, used in multifactor authentication (something you have). An asset tracking tag uses RFID
that can be detected by sensors, much like the devices used in retail stores and libraries, to give immediate alerts when someone tries to steal
something.
upvoted 1 times

From the official Comptia Network+ student guide: "RFID asset tracking tags allow electronic surveillance of managed assets. The tags can be
detected at entry/exit points to prevent theft. "
upvoted 1 times
A development team has been testing a web server on a virtual server to create a web application. Once satis ed, the development team clones
the entire virtual server into production. The development team needs to use HTTP, HTTPS, and SSH to connect to the new server. Which of the
following should the network administrator do to help secure this new production VM? (Choose two.)
A. Disable the HTTP port in the host rewall.
B. Upgrade the rmware on the rewall.
C. Generate new SSH host keys.
D. Remove unnecessary testing accounts.
E. Issue a new self-signed certi cate.
Correct Answer: CE

Cd. You don’t use self signed for production web apps
upvoted 2 times

self signed ?
upvoted 2 times

It's because a self-signed certificate gives SSL protection, so it does fit the criteria of securing the VM
upvoted 1 times
  Peacges1 3 weeks ago

Self signed certs will fail a PCI compliance scan...
upvoted 1 times

CE is right. I'm guessing the question is asking how to secure the VM WHILE in production. Self-signed is often used in non-production
environment.
upvoted 1 times
A wireless client is having issues staying connected to the wireless network even though the client is less than 20ft (6m) from the access point.
Which if the following is MOST likely the cause?
A. Distance limitations
B. Latency
C. Security type mismatch
D. Absorption
Correct Answer: D
Which of the following is a network device that is responsible for separating collision domains?
A. Switch
B. Router
C. Hub
D. Modem
Correct Answer: A
  Boyii 1 month, 2 weeks ago

isn't B besides A also right? https://study-ccna.com/collision-broadcast-domain/
upvoted 1 times
  Dave1212 3 weeks, 3 days ago

Broadcast domain is different
upvoted 1 times
Which of the following network topologies is primarily used to connect servers to large network disk arrays?
A. SAN
B. MAN
C. CAN
D. PAN
E. LAN
Correct Answer: A
After setting up in a temporary o ce, Joe tries to access the company's wireless network. Following several attempts, Joe is able to get an IP, but
cannot access network resources. Which of the following is the MOST likely cause of this error when trying to connect to the company's wireless
network?
A. Incorrect passphrase
B. Incorrect power levels
C. Incorrect workstation certi cate
D. Incorrect encryption
Correct Answer: C
A network technician is assisting a user who is having problems accessing a particular website. Other users are reporting that the website is
accessible outside of the o ce. The technician suspects the problem is with the company's rewall. Which of the follwing should the technician
use to troubleshoot?
A. WiFi analyzer
B. Bandwidth speed tester
C. Dig
D. Packet sniffer
Correct Answer: C
Which of the following protocols are used to con gure an email client to receive email? (Choose two.)
A. IMAP
B. SMTP
C. POP
D. SFTP
E. TFTP
Correct Answer: AC
A network extension needs to be run to a location 500ft(152m) from the nearest switch. Which of the following solutions would work BEST?
(Choose two.)
A. Cat 6 with a repeater placed in the middle of the run
B. Cat 7
C. Crossover cable
D. Fiber-optic cabling
E. Cat 7 with a patch panel placed in the middle of the run
Correct Answer: AD
  FatPac 7 months, 4 weeks ago

Shouldn't cat 7 with a repeater be the answer? since cat 6 has a max distance of 55 meters you would need at least 2 repeaters to cover the 152m
upvoted 1 times

The maximum cabling length of Cat6 network cable is 100 m. and the option for a CAT7 with a repeater is not given only
https://medium.com/@fsjoanna/cat6-vs-cat7-cable-which-is-optimum-for-a-new-house-a9240408efe5
upvoted 2 times
A network administrator wants to connect to a remote device via SSH. Which of the following layers of the OSI model is the protocol using?
A. 3
B. 4
C. 5
D. 6
E. 7
Correct Answer: E
A technician has received a report that details the need for a patch and a complete list of the affected systems. Which of the following activities
MOST likely generated the report?
A. Port enumeration
B. Baseline review
D. Packet analysis
Correct Answer: C
A small company has decided to use a single virtual appliance to lter spam as well as reverse proxy and lter tra c to its internal web server.
Which of the following has the company MOST likely deployed?
A. IPS
B. Firewall
C. SIEM
D. UTM
E. Content lter
Correct Answer: E

The correct answer should be D. A UTM can act as a proxy, a content filter can't.
upvoted 2 times

UTM includes functions such as anti-virus, anti-spam, content filtering, and web filtering.
upvoted 1 times

A virtual web content filtering appliance , UTM not virtual ,
upvoted 7 times

virtual UTM's are available all over the place !!
upvoted 1 times

maybe this question was made when there were no virtual UTMs available. haha
upvoted 1 times

anyway!
The company is small. A virtual UTM is usually used in a large organisation
upvoted 1 times
  Peacges1 2 months, 3 weeks ago

UTM has a DMZ?
upvoted 1 times
  DrVirtual 1 month, 3 weeks ago

yes refer to Sophos UTM doc or any other UTM's
upvoted 1 times

Reverse proxy isn't part of a content filter! Really starting to question this website.
upvoted 1 times
Which of the following devices would allow a network administrator to block an application at Layer7 on the network?
A. Firewall
B. NGFW
C. Router
D. Spam lter
Correct Answer: B
A client requests a new dynamic address and receives a response from two DHCP servers. Which of the following addressing information would
the client use?
A. The IP addressing information received last
B. The IP addressing information from the highest server MAC address
C. The IP addressing information from the highest server IP address
D. The IP addressing information received rst
Correct Answer: D
A technician is preparing to dispose of old network devices. Which of the following policies and best practices would outline procedues for
removing sensitive information and con gurations from surplus equipment?
A. System life-cycle procedures
B. Off-boarding procedures
C. Safety procedures
D. Appropriate use policy
Correct Answer: B

Offboarding refers more to the process of an emplotee leaving a company rather than dealing with sensitive information in equipment which are
to be disposed of. I say A is the correct answer on this one.
upvoted 9 times

Yes, it is definitely A.
upvoted 4 times

I agree with Bones as shown in the attached article "Disposition/Disposal/End-of-Life: A well-rounded life cycle identifies and decommissions
surplus or obsolete assets at the end of their life cycle. Included in this phase is the secure retrieval of data and information for preservation, as well
as, the physical disposition of an asset."
https://www.smartsheet.com/system-development-life-cycle-guide
upvoted 2 times

Offboarding procedures also refer to removing devices from a network according to CompTIA. The answer is correct as provided.
upvoted 5 times

DAMN comptia, complicating all the ENGLISH words
upvoted 3 times
  Emago 4 months, 2 weeks ago

"Offboarding is the process of removing company-owned resources when it is no longer needed (often done with a wipe or factory reset).": E.
Dulaney - Exam Cram: CompTIA Network+ N10-007
upvoted 1 times
  Jimred 3 months, 1 week ago

system life -cycle procedures … when a system reaches its end of life... it end of life procedures covers the disposal of the system. Off boarding is
the removal of an employee or service and the process to follow in doing so. So in the case of off boarding a company that is doing a service and is
not an employee (third party)we have a policy in place to off board the 3rd party service, its access, and decommission the hardware and data. This
may include who owns the data, how the data is collected, and what the data can be used for. In the question above we are tasked with disposal of
old network devices and not services…. therefore the answer is (A) system life - cycle procedures. If the question was about a 3rd party service then
(B) could be the answer. https://www.youtube.com/watch?v=BTnH3W3y6hU is based on CISSP an authority rated higher than CompTIA
upvoted 1 times
  Javier25 1 month ago

Question says " is preparing to dispose of old network devices" not the system inside the devices.
upvoted 1 times

From the official Comptia Network+ student guide:
offboarding
The process of ensuring that all HR and other requirements are covered when an employee leaves an organization.
Not related to hardware disposal. Answer is A.

upvoted 1 times
Ann, a network technician, is told to disable unused ports on a switch. Another technician tells her the policy is to move those ports into a non-
routed VLAN and leave them enabled. Which of the following documents should Ann use to ensure she is employing the correct method?
A. Inventory management
B. Wiring and port location
C. Con guration baseline
D. Standard operating procedure
Correct Answer: D
A company is experiencing exponential growth and has hired many new employees. New users are reporting they cannot log into their systems,
even though they are on the same network. The technician can see physical connectivity to the network switch along with their MAC addresses.
Which of the following should the technician check NEXT?
A. VLAN routing
B. Server-based rewall con guration issue
C. Patch cable type
D. DHCP scope availability
Correct Answer: D
A network technician is installing and con guring a new router for the sales department. Once the task is complete, which of the following needs
to be done to record the change the technician is masking to the company network?
A. Change management
B. Network diagrams
C. Inventory report
D. Labeling report
Correct Answer: A
  Jimred 3 months, 1 week ago

change management should be contacted and approval is required before any change is made. So all parties affected by the change must sign off
on the change. So change management is totally aware of this new router. Change management records these changes so should a change go bad
or bring instability to the network they can roll back to the previous settings. The next thing needing updating is the network diagram as a new
physical router has been added.
upvoted 9 times

There was a very similar question on here and the answer was logical network diagram, so I;m kinda confused...
upvoted 2 times
A network technician receives reports indicating some users are unable to gain access to any network resources. During troubleshooting, the
technician discovers the workstations have an IP address of 169.254.x.x. Which of the following is the MOST likely cause?
A. Expired IP address
B. Exhausted dynamic scope
C. Miscon gured VLSM
D. Rogue DHCP server
Correct Answer: B
A customer has submitted a request for a new wireless connection in the main o ce so visitors can reach the Internet to check their email. The
customer is concerned about security and does not want visitors to be able to access the internal nance server. Which of the following BEST
describes the correct con guration?
A. The LAN and WLAN should be con gured in the same zone with dynamic DENY ALL rules.
B. The LAN and WLAN should be con gured in the DMZ so tra c is denied automatically.
C. The LAN and WLAN should be marked as trusted during work hours and untrusted during off hours.
D. The LAN and WLAN should be con gured in separate zones with a rewall in between.
Correct Answer: D
Which of the following technologies should be used in high-throughput network to reduce network overhead?
A. iSCSI
B. QoS tags
C. Port aggregation
D. Jumbo frames
Correct Answer: D
A network topology requires a switch to be placed in an unsecured location. Which of the following techniques should be used to prevent
unauthorized access?
(Choose two.)
A. Disabling unused ports
B. Upgrading rmware
C. Using secure protocols
D. File hashing
E. MAC ltering
F. Con guring a honeypot
Correct Answer: AE
A network technician is assisting a user who has relocated to a newly constructed o ce space. The user has no network connectivity. A cable
tester was used on the port and is reporting that the pairs are open. Which of the following should be used to remedy this problem?
A. Loopback adapter
B. Tone generator
C. Multimeter
D. Punchdown tool
Correct Answer: D
  Soulo 3 weeks ago

A should be the right answer
upvoted 1 times

A can't be the right answer because a cable tester was used and already reported that the cables were open, thus they need to be terminated
with a punchdown tool. Using a loopback adapter is testing for the connectivity, which won't work due to an open cable.
upvoted 1 times

The answer should be correct as D
upvoted 2 times
A technician needs to add ten additional Ethernet ports to a small o ce network. A new basic function switch is added. Hosts connected to the
new switch are unable to see any computers on the network other than those connected to the new switch. Which of the following should the
technician perform to ensure the hosts on the new switch can communicate with the existing network?
A. Replace the new switch with a hub to ensure Layer1 connectivity on the new network segment.
B. Move the straight-through Ethernet cable connecting the switches to the rst port on both switches.
C. Connect the switches with a cable that has a TIA/EIA 586A wired connector end and a TIA/EIA 586B wired end.
D. Add a second cable connecting the switches for redundancy and disabling STP on both switches.
Correct Answer: C
Before upgrading the rmware on several routers, a technician must verify the rmware le received is the same one the vendor provided. Which
of the following should the technician use?
A. 3DES encryption
B. SSL certi cate
C. Digital signatures
D. MD5 hash
Correct Answer: D
Which of the following is the MOST secure type of remote administration?
A. SSH over IPsec client-to-site VPN
B. RDP over SSLv2 HTTPS terminal services gateway
C. HTTP over WPA2-TKIP WiFi
D. Telnet over PSTN
Correct Answer: A
A wireless access point that was working in a large warehouse last week is now o ine. The technician observes there is no power to the device.
The technician veri es PoE is working on the switchport, and then con rms the wireless access point is still not powering up. Which of the
following is the MOST likely issue?
A. Attenuation
B. Incorrect pin-out
C. Damaged cable
D. Switch con guration
Correct Answer: C
A network engineer is trying to determine where to place a rewall based on the ow of tra c. Which of the following types of documentation
would assist the engineer in doing this?
A. Change management
B. Rack diagram
C. Network con guration
D. Network diagram
Correct Answer: D
A user believes a work email account has been compromised. A technician discovers that an email seeming to be from the user's bank shares the
same origin IP address as the last login to the email account. Which of the following types of attack is described in this scenario?
A. Spam
B. Ransomware
C. Man-in-the-middle
D. Phishing
Correct Answer: C

This is a clear case of a phishing attack. The attacker obviously made it look like a legitimate email from the user's bank. User clicked links, provided
credentials/personal information. Attacker gains access to the user's email account.
upvoted 8 times

"same origin IP address as the last login to the email account."
the fake email is showing the address of the last place the user logged in at ie internet cafe or something so the MIT was used to get the
address and account information for user email and hack into it....i think
upvoted 11 times

You are correct.
upvoted 1 times
  Shunglee 4 months, 2 weeks ago

I agree with bones. It most likely has something to do with an end user providing sensitive information to an email that was made to imitate
their real bank.
upvoted 1 times

are you someone from CompTIA trying to sabotage. It's obviously MIT
upvoted 3 times
  Parti 2 months, 2 weeks ago

If it was phishing the question would probably mention some sort of personal information eliciting. An IP is mentioned, as the clue, and i also
think man-in-the-middle is right.
upvoted 5 times

You are right Parti. It is a man in the middle attack.
upvoted 2 times
A customer wants to set up a guest wireless network for visitors. The customer prefers to not have a password on the network. Which of the
following should a technician set up to force guests to provide information before using the network?
A. Single sign-on
B. RADIUS
C. TACACS+
D. Captive portal
Correct Answer: D
A zero-day vulnerability is discoverd that affects a speci c network device. This vulnerability only affects services on port 21. This network device
is restricted to use only secure protocols and services. Which of the following explains why this device is secure?
A. Because secure protocols would reject malicious packets
B. Because SCP is not a secure service
C. Because FTP is not a secure service
D. Because a secure rewall will protect the device
Correct Answer: C
Which of the following protocols is used by Active Directory for authentication?
A. SSH
B. SFTP
C. LDAP
D. TLS
Correct Answer: C
When deploying UTP cables in a networking environment, which of the following are acceptable standards? (Choose two.)
A. 10Base2
B. 10Base5
C. 10GBaseT
D. 1000BaseLX
E. 1000BaseSX
F. 1000BaseT
Correct Answer: CF
Which of the following is the physical location where the customer-premise equipment comes together with the ISP or third-party
telecommunications equipment?
A. Server room
B. Equipment closet
C. Demarcation point
D. Intermediate distribution frame
Correct Answer: C
A vulnerability that would allow an unauthenticated, remote attacker to originate a DoS attack was found in a DHCP client implementation of a
switch. Which of the following would BEST resolve the issue?
A. Verify the default passwords have been changed.
B. Upgrade to the latest rmware
C. Generate new SSH keys.
D. Review and modify the rewall rules.
Correct Answer: B
A human resources manager noti es the IT manager the night before an employee will be terminated so the employee's access rights can be
removed. Which of the following policies is being exercised?
A. Privileged user agreement
B. AUP
C. Non-disclosure agreement
D. Offboarding
Correct Answer: D
Log les show the admin user has logged into a public-facing device on several occasions in the evening. None of the technicians admit to doing
any after-hours work, and the password has been changed several times but failed to prevent the logins. Which of the following should be the
NEXT step to attempt to harden the device?
A. Disable unused ports.
B. Reset the two-factor token.
C. Disable virtual ports.
D. Upgrade the rmware.
Correct Answer: A
A network technician is setting up the wireless network for a company's new branch o ce. After doing a site survey, the technician discovers
there is a lot of interference from 2.4GHz devices at the location on channel 11. Which of the following would be the BEST channel on which to set
up the WAPs?
A. Channel 6
B. Channel 7
C. Channel 9
D. Channel 10
Correct Answer: A
A network technician has deployed a new 802.11ac network and discovers some of the legacy POS equipment only supports WPA and 802.11a.
Which of the following is the MOST secure method of connecting all devices while avoiding a performance impact to modern wireless devices?
A. Con gure the APs to use LEAP authentication to support WPA rather than WPA2 for full compatibility.
B. Con gure modern devices under the 5GHz band while dedicating the 2.4GHz band to legacy devices.
C. Connect the legacy devices with a PSK while the modern devices should use the more secure EAP.
D. Create two SSIDs, one to support CCMP-AES encryption and one with TKIP-RC4 encryption.
Correct Answer: C
Which of the following BEST describes the characteristics of a differential backup solution?
A. Backs up les with the creation or modi ed date as the current date.
B. Backs up all les and sets the archive bit.
C. Backs up les with a date earlier than today's date with a clear archive bit.
D. Backs up les with the archive bit set but does not clear the bit.
Correct Answer: A

I believe the correct answer should be D
https://www.computerweekly.com/news/1347703/Incremental-vs-differential-backup-A-comparison
upvoted 11 times

A would be correct if differential backup is done everyday. I think for D to be correct, after backup the archive bit should be cleared, otherwise the
files would be constantly backup up
upvoted 1 times

Yeah I think its D as well
upvoted 2 times

The answer is D for sure. None of the three backup types taught use the date to decide what to backup, so A and C are out. B backs up all files -
that's a full. The last option remaining is D. The official CompTIA Network + student guide says:
Differential All data modified since the last full backup.
backup/restore time: Moderate/moderate (no more than two sets)
attribute: Not Cleared
upvoted 2 times
A technician has been asked to diagnose problems with DHCP addressing on a VLAN. The DHCP server responds to pings from the technician's
machine. Which of the following should the technician use to help diagnose the problem?
A. Packet sniffer
B. netstat
C. nslookup
D. Spectrum analyzer
Correct Answer: A
Which of the following allow for higher fault tolerance, availability, and performance across multiple systems? (Choose two.)
A. Load balancer
B. Jumbo frames
C. Clustering
D. Round robin
E. TCP o oading
Correct Answer: AC
A technician is investigating an issue related to a single host that is unable to access the Internet. The technician records the following
information: Host IP
169.254.1.10. The network IP address range on the DHCP server is 10.10.5.2-10.10.5.250 with a default gateway 10.10.5.1 and a DNS of 8.8.8.8.
Which of the following should the technician perform to troubleshoot the issue?
A. Change the IP scope on the DHCP server to a public IP address range.
B. Perform a traceroute command to identify the router that is not functioning.
C. Verify the host has physical connectivity and is on the correct VLAN.
D. Con gure the DNS address in the DHCP scope to a 10.10.5.0/24 address.
Correct Answer: C

If the host didn't have physical connectivity how would it get the APIPA ?
upvoted 1 times
  nsothapatrick 5 months, 1 week ago

It might have a physical connectivity, but is on the wrong VLAN (The one with no DHCP server available)
upvoted 6 times

APPIPA doesn't require physical connectivity. It is a locally created address for when Windows can't reach a DHCP server for whatever reason.
upvoted 3 times
A network administrator wants to reduce the amount of time each user takes to log in to different systems in the network. Which of the following
would reduce the time spent authenticating?
A. Kerberos
B. RADIUS
C. Certi cate
D. SSO
E. MFA
F. NAC
Correct Answer: D
A network technician arrives at a remote o ce and is unable to connect a laptop to corporate resources using the wireless network. After
checking the IP address, the network technician notices the assigned IP address does not belong to the corporate network IP scheme. Which of
the following has the network technician discovered?
A. Evil twin
B. ARP poisoning
C. DHCP exhaustion
Correct Answer: A

This can actually also be C. If an APIPA address has been assigned to the laptop, it can be due to DHCP exhaustion. The question doesn't explicitly
say as well that an attack was happening.
upvoted 1 times

The main reason why I was able to get A as the answer is because it doesn't mention that an APIPA address is assigned, and says the address it
has isn't in the scope provided by their servers.
upvoted 13 times
Which of the following is an object held within an MIB?
A. OUI
B. OTDR
C. OID
D. SNMP host
E. SNMP agent
F. SNMP trap
Correct Answer: C
Which of the following storage network technologies has the HIGHEST throughput?
A. FCoE
B. In niBand
C. iSCSI
D. OC3
Correct Answer: B
A network administrator is con guring the 172.16.40.0/22 network for a new building. Which of the following is the number of hosts that will be
supported on this network?
A. 510
B. 512
C. 1022
D. 1024
E. 2046
F. 2048
Correct Answer: C

The correct answer is 1024. Its 2 to the power of 10 host bits.
upvoted 2 times
  Andy71 4 months ago

You are close, but don't forget to take away 2 hosts for NID and BID. So, the correct answer is 1024 - 2 = 1022.
upvoted 11 times

minus 2 for the network and broadcast address
upvoted 5 times
At which of the following layers of the OSI model does compression occur?
A. Session
B. Transport
C. Data link
D. Presentation
Correct Answer: D
Users report that the network is slow. Upon investigation, the technician notices all users are on one large subnet. Which of the following devices
should be used to break up broadcast domains?
A. Layer 2 switch
B. Layer 3 switch
C. Signal repeater
D. Bridge
E. Domain server
Correct Answer: B
Ann, a user, reports that her desktop phone is not working on one cable. However, that cable provides connectivity to her laptop. A technician
determines PoE is not provided to the end device. Which of the following is MOST likely the cause?
A. Transceiver mismatch
B. Crosstalk
C. Jitter
D. Open/short on the cable
Correct Answer: A
  alexz123 1 month, 2 weeks ago

this cant be right, transceiver mismatch would mean no signal on laptop, and fiber doesn't deliver PoE to phones?!
upvoted 1 times

It should be D. A is wrong. The only references I could find online to Transceiver Mismatch came back with fiber optic issues. Crosstalk and Jitter are
unrelated to POE. A bad cable has to be the problem.
upvoted 2 times

D cannot be the answer as it says `However that cable provides connectivity to her laptop` so no short/open cable, cable`s fine. The only
possible answer is mismatch.
upvoted 1 times
A network technician has been asked to create secure private networks between a company's headquarters and several branch locations. The
company has provided the on-premises equipment, but each branch has a different ISP. Which of the following technologies should the technician
consider using to accomplish this?
A. Site-to-site
B. Client-to-site
C. Point-to-point
D. Point-to-multipoint
Correct Answer: A
A department is reporting network issues. Users can ping each other and the switch, but not the default gateway. When looking at a wiring
diagram and a physical blueprint, a technician notices the 1000BaseLX SFP connects to a distribution switch via a cable that runs behind a large
industrial refrigerator. The technician also notices both switches have been worked on recently. Which of the following is MOST likely the issue?
A. EMI
B. TX/RX reverse
C. Open/short
D. Attenuation
Correct Answer: A

Fiber is immune to EMI so A is incorrect. C and D also pertain to copper cables, so the correct answer should be B.
upvoted 10 times

Yes, Answer is B. You can't short fiber, and it is immune to EMI. Also attenuation only occurs in very long distances, which doesn't seem to be the
case here.
upvoted 4 times

Also, the switches have been worked on recently. Someone could have plugged the patches incorrectly.
upvoted 2 times

Open/short
upvoted 3 times

its true fiber is not affected by EMI.
All the answers are dumb. None of them make sense here
upvoted 2 times
  markychaz 1 month, 3 weeks ago

I am assuming that the transceiver is going from UTP to fiber. that was my initial thought.
upvoted 1 times

This is a hideous insult to basic networking concepts. True fiber uses light and is immune to EMI for the most part. I'm seriously starting to doubt
the authenticity of this website and its administrators for not fact checking a site that is suppose to prepare you for an official certificiation.
upvoted 1 times
HOTSPOT -
You have been tasked with testing a CAT5e cable. A summary of the test results can be found on the screen.
Instructions -
Step 1: Select the tool that was used to create the cable test results.
Step 2: Interpret the test results and select the option that explains the results. After you are done with your analysis, click the "˜Submit' button.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Hot Area:
Correct Answer: Explanation

COMPLETE QUESTIION WITHOUT THE PICTURES, SORRY
You have been tasked with testing a CAT5e cable. A summary of the test results can be found on the screen. Step 1: Select the tool that was used to
create the cable test results.
CABLE TEST RESULTS
1,2 Open 7ft
3,6 Short 7ft
4,5 Open 7ft
7,8 Open 7ft
TOOL CHOICES
A. Crimper
B. Cable Certifier
C. Multimeter
D. Punch Down Tool
E. Protocol Analyzer
F. OTDR
G. Toner Probe
Step 2: Interpret the test results and select the option that explains the results.
A. Correctly crimped cable
B. Incorrectly crimped cable
After you are done with your analysis, click the ‘Submit Cable Test Analysis’ button.
ANSWER
STEP 1
B. Cable Certifier
STEP 2
B. Incorrectly crimped cable

upvoted 10 times

CompTIA Network+ Simulation 1
You have been tasked with testing a CAT5e cable. A summary of the test results can be found on the screen. Step 1: Select the tool that was used to
create the cable test results.
Step 2: Interpret the test results and select the option that explains the results. After you are done with your analysis, click the ‘Submit Cable Test
Analysis’ button.
upvoted 1 times

Step 1: Select Cable Certifier
Sterp 2: Select Incorrectly Crimped Cable
upvoted 4 times
A shop owner wants to ensure that only a speci ed group of devices can access the wireless network. Which of the following methodologies will
BEST ensure unauthorized devices cannot consume the shop owner's limited Internet bandwidth?
A. Disable the SSID broadcast.
B. Implement WEP authentication.
C. Change the WiFi password.
D. Activate MAC address ltering.
Correct Answer: D
A large company uses an AAA server to manage network device access. The engineers can use their domain credentials to access all other
servers. Currently, the network engineers cannot access the AAA server using domain credentials, but they can access it using a local account.
Which of the following should the engineers update?
A. Host-based rewall settings
B. TACAS+ server time
C. Server IP address
D. DNS SRV record
Correct Answer: B
  Jimred 3 months, 2 weeks ago

you can rule out host based firewall as the ports are open (49) for local access and it works!
1) down
TACACS +Server Time
I take it they are increasing the time the server will allow a login attempt to remain for processing? If so why did they not receive a time out error? I
would debug the connection and see what is happening. It may well be that due to latency that more time is needed. But to assume that is wrong.
Test and verify! So my 1st question is has this ever worked? If so when? what changed btw when it last worked and now? Where is the baseline for
comparison? I've done networking for years and I must say these questions significantly lack crucial information! No wonder my network
credentialed newbies come to me …. Look at what you are teaching them.... half truths and guess work.
upvoted 8 times
A network technician has been asked to install an additional switch in an IDF, but all of the single-mode ber is in use between the IDF and MDF.
The technician has deployed new transceivers that allow for the use of a single ber stand, providing the additional ber needed for the new
switch. Which of the following has the technician deployed?
A. 1000BaseLX SFP
B. Duplex GBIC
C. Duplex SFP+
D. Bidirectional SFP
Correct Answer: D

This answer makes complete sense as it increases the density of the switch. But remember it must be used at both ends of the cable to work.see
http://www.cables-solutions.com/differences-between-sfp-bidi-sfp-and-compact-sfp.html
upvoted 4 times
A network administrator wants to ensure all tra c is inspected and abides by the AUP, and that malicious tra c is stopped. Which of the following
features should be enabled on a rewall to meet this requirement?
A. Intrusion detection
B. Proxy service
C. Dynamic DNS
D. Content ltering
Correct Answer: D
A network technician has purchased a 10GBase-T switch and wishes to connect it to 30 computers with 10GB network cards. The computers are
225ft (69m) away, and all need to establish a 10 Gbps connection to meet business requirements. To minimize costs while still meeting these
requirements, which of the following cable types should the technician choose?
A. Cat 5e
B. Cat 6
C. Cat 6a
D. Cat 7
Correct Answer: C
A technician is con guring a new email server and needs to modify DNS records. Which of the following records should the technician update to
ensure email functions as expected?
A. MX
B. CNAME
C. AAAA
D. SRV
Correct Answer: A
Which of the following BEST describes the functionality of the root guard feature on a switch?
A. BPDUs entering the root bridge are ignored.
B. The STP root bridge cannot be changed.
C. Broadcast storms entering from a root port are blocked.
D. Loop protection is enabled on the root port of a switch.
Correct Answer: B
  TP_James 3 months, 2 weeks ago

Answer A should be the better one. Refer to Network+ Student Guide, Lesson 3: Installing and Configuring Switched Networks | Topic B | Page 82
upvoted 1 times

dont think so man check out: https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/5234-5.html
root guard and bpdu guard are different products also
upvoted 1 times
  Parti 1 month, 2 weeks ago

B seems to be correct.
after https://www.rogerperkin.co.uk/spanning-tree/spanning-tree-root-guard/
"Unlike the BPDU Guard which will disable a port upon receipt of a BPDU, the Spanning Tree Root Guard feature will allow BPDU’s through a port
to maintain the spanning tree topology, however if it receives a superior BPDU, which indicates that another switch is trying to become the root
bridge it will err-disable the port.
This feature is used to protect your root bridges from misconfiguration or a layer 2 man in the middle attack."
upvoted 4 times
A network administrator is adding a new WAN circuit from the ISP to a new building. In which of the following locations would the network
administrator nd the utility entry point?
A. DMZ
B. Data tier
C. IDF
D. Demarc
Correct Answer: D
The help desk is receiving reports of intermittent connections to a server. A help desk tehnician suspects the server is unable to establish a three-
way handshake due to a DoS attack. Which of the following commands should a network administrator use to con rm the help desk technician's
claim?
A. nmap
B. arp
C. tcpdump
D. dig
Correct Answer: C
A technician discovered a company computer had a virus but was unable to remove it. The technician decided to erase the hard drive to eliminate
the threat.
Which of the following policies did the technician violate?
A. Data loss prevention
B. Incident response
C. Asset disposal
D. Acceptable use
Correct Answer: A

The stickler here is the tech is taking it upon himself to delete data. If it were me I would notify my supervisor of my findings and seek additional
support. I may not have the latest virus removal tools. Remember there are many resources to remove virus or quarantine them and this tech never
contacted any of them. The files on the computer may not be backed up so deleting them without receiving proper authority could violate the DLP
policy
upvoted 5 times

So true Jimred
upvoted 1 times
  IDTENT 1 month ago

Jimred makes a good point but we need to stay withing the confines of the domain objectives.
DLP detects potential data breaches/data ex-filtration transmissions and prevents them by monitoring, detecting and blocking sensitive data while
in use, in motion (network traffic), and at rest (data storage). CompTIA doesn't refer to DLP as a policy but rather an action taken or device
performing the functions above.
An incident response IS a policy and it would absolutely include detailed information about preserving data/devices involved in an incident.
upvoted 3 times
A company hires another rm to test the integrity of its information security controls. This is an example of:
A. role separation
B. device hardening
C. risk assessment
D. penetration testing
Correct Answer: D

This is a trick question in that pen testing might be a way we verify controls but not why we call in another company. Think of it this way auditors
outside the company audit the company because they are not affiliated or beholding to employees of the company. No conflict of interest. Its this
type of separation that keeps a check and balance of the system. If I want to get paid and I installed the controls … I may tell you they work or
fudge the reports even if they don't. By bringing in another company we are doing due diligence eliminating conflicts and dealing in verifiable
facts.
upvoted 2 times

I agree with you there but the question literally asks "a company hires another firm..." and pen testing is just that, no trick question here
upvoted 1 times
A network technician is troubleshooting an issue routing TCP packets to an email server. At which of the following OSI layers is the issue
occurring?
A. Layer 1 ""Physical
B. Layer 3 ""Network
C. Layer 4 ""Transport
D. Layer 7 ""Application
Correct Answer: C

Should be network layer, B IMO. Segments are at the Transport layer. Packets are at the Network layer.
upvoted 1 times

TCP operates on layer 4.
upvoted 2 times
  nsothapatrick 5 months, 1 week ago

I think the keyword here is TCP
upvoted 3 times

The question says they are having a problem routing tcp packets to the mail server. Layer 3 deals with routing and packets. So the answer is the
network layer!
upvoted 1 times

gentlemen please do not lead others astray: https://osi-model.com/transport-layer/
correct answer is layer4
upvoted 5 times
  deyb 3 weeks, 3 days ago

I believe the answer is the transport layer. The question says they are having issue routing only TCP packets, which means any other traffic is routed
with no issues. TCP is the key word. It's definaltly the Transport Layer.
upvoted 1 times
A vendor is installing an Ethernet network in a new hospital wing. The cabling is primarily run above the celling grid near air conditioning ducts and
sprinkler pipes.
Which of the following cable types is required for this installation?
A. Plenum
B. PVC
C. Single-mode
D. Cat 7
Correct Answer: A
A network technician works in a large environment with several thousand users. Due to the needs of the organization, the network manager has
asked the technician to design a solution that accommodates the data needs of all the users, while keeping all data on site. Which of the following
solutions should the technician implement?
A. SaaS
B. SAN
C. NAS
D. IaaS
Correct Answer: B

It could be san or nas. SAN is block based while NAS is file based. NAS is more likely easy to install as SAN may require some hardware changes.
upvoted 1 times

I think the key here is 'several thousand users' which indicates the need for enterprise-grade/level deployment capabilities which includes
availability & redundancy
upvoted 5 times
  Parti 1 month, 2 weeks ago

could easily be. the question does not make it obvious...
upvoted 2 times

for less than 20-30 users a redundant NAS solution would be ok, but for thousands of users, it must be a SAN
upvoted 2 times
Which of the following can be used to prevent unauthorized employees from entering restricted areas?
A. Sign-in sheets
B. Video cameras
C. Motion sensors
D. Swipe badges
Correct Answer: D
A Chief Information Security O cer (CISO) has decided to implement a secure and user-friendly way to connect to the corporate wireless network.
Each workstation will be authenticated individually using a unique certi cate that will be deployed to the workstation by the organization's
certi cate authority. Which of the following authentication methods would meet this requirement?
A. PEAP
B. WP2-PSK
C. Captive portal
D. EAP-TLS
Correct Answer: D
A bookstore uses a Faraday cage to comply with credit card regulations. Customers report that their cellular phones have no signal when they are
in the bookstore. Which of the following is the MOST likely cause?
A. The Faraday cage is creating interference within the bookstore.
B. The Faraday cage prevents access by redirecting signals.
C. The Faraday cage is creating latency on the cellular network.
D. The Faraday cage is creating attenuation of the cellular network.
Correct Answer: B
  Peacges1 1 week, 3 days ago

The reception or transmission of radio waves, a form of electromagnetic radiation, to or from an antenna within a Faraday cage is heavily
attenuated or blocked by the cage
upvoted 2 times
An administrator is redesigning a company's network and wants to reduce the amount of hardware needed. Currently, all VLAN routing goes out a
single switch interface to a router.
Which of the following would reduce the number of devices in this con guration?
A. Bridge
B. Multilayer switch
C. Switch
D. Next-generation rewall
Correct Answer: B
A network technician needs to distribute an updated OS for all network switches at company locations throughout the world. The technician wants
to ensure le integrity since several locations do not have high-quality connectivity to the Internet.
Which of the following methods should be used to distribute the images while ensuring integrity?
A. Use a TFTP server and UDP protocol.
B. Use an FTP server and provide the le hash.
C. Use an HTTP server to share the le.
D. Use a modem and dial-up connection.
Correct Answer: B
Which of the following OSI layers do TCP and UDP operate within?
A. Data link
B. Network
C. Session
D. Transport
E. Presentation
F. Application
Correct Answer: D
A company has decided to allow certain users to work remotely by opening up a VPN connection through the rewall. The security policy has been
updated to allow VPN connections only from certain users and to speci c areas on the network. Along with con guring the correct policies on the
rewall, which of the following also needs to be con gured on users' mobile devices to allow these VPN connections?
A. VNC application
B. Kerberos
C. Geotagging application
D. Credentials
Correct Answer: D
A network engineer is working on a network connectivity problem between a site in California and a site in New York. The connection went down
overnight, and the engineer is unsure where the connection failed. The technician is logged into the primary switch in the customer's network,
which is also the company's connection to the WAN.
Which of the following tools should the technician use to determine the last available network hop?
A. netstat
B. Nmap
C. traceroute
D. pathping
Correct Answer: C
A network manager is concerned about visitors taking advantage of open cubicies at a company's facilities. Which of the following would mitigate
this issue?
A. Create a VLAN for all unused switchports.
B. Implement a DMZ for all external services.
C. Implement root guard on all switches.
D. Create a honeypot to attract attackers.
Correct Answer: A
Which of the following is used to de ne the duration during which a client can use an IP address?
A. MAC reservation
B. IP helper
C. Pool
D. Lease time
Correct Answer: D
A small company is requesting a quote to refresh its wireless network. The company currently runs 60 autonomous APs and has plans to increase
wireless density by 50% in the near future. The requirements state that the chosen solution should signi cantly decrease the management
overhead of the current wireless network.
Which of the following should the vendors recommend in response to the quote request?
A. The use of lightweight APs with a load balancer
B. The use of autonomous APs with a wireless controller
C. The use of autonomous APs with a load balancer
D. The use of lightweight APs with a wireless controller
Correct Answer: D
A network support specialist is setting up wireless networks for several small companies that are leasing adjacent spaces in an o ce building.
The network support specialist has already con gured an access point for each o ce with WPA2-AES encryption and minimized any overlap of the
wireless channels. Several of the companies have expressed concerns about performance and security issues due to the high volume of wireless
networks being installed in close proximity.
Which of the following actions will BEST mitigate the companies' concerns?
A. Reduce the TX power on each access point.
B. Enable MAC address ltering on each access point.
C. Disable the SSID broadcast on each access point.
D. Enable AP isolation on each access point.
Correct Answer: A
A network technician receives a trouble ticket and speaks to the user who is experiencing the issues with the application. Which of the following
should the technician perform NEXT?
A. Gather information.
B. Determine the symptoms.
C. Establish a plan of action.
D. Document the ndings
Correct Answer: A

"A network technician receives a trouble ticket and speaks to the user who is experiencing the issues with the application. Which of the following
should the technician perform NEXT?"... The tech is ALREADY gathering information. The question doesn't say continue performing... It says
"perform NEXT!"
upvoted 5 times
A company wants to implement a wireless infrastructure on its campus to meet the needs of its BYOD initiative. The company has users with
legacy devices and wants to accommodate them while delivering speed to other users who have modern systems.
Which of the following standards BEST ts these requirements?
A. 802.11a
B. 802.11ac
C. 802.11b
D. 802.11g
Correct Answer: B
  RajRulz 2 weeks, 5 days ago

shouldn't 802.11n be an option here .... since the question speaks of both legacy and modern devices
upvoted 6 times
  krand 1 week, 3 days ago

That's what I was thinking, considering N supports both frequencies.
upvoted 2 times
Joe, a technician, is attempting to resolve an issue with an off-site router remotely. Joe needs to reset the WAN connection settings and wants to
ensure he will have access to the router at all times to monitor the changes.
Which of the following solutions would BEST meet this goal?
A. Use a secure SSH connection over the WAN link.
B. Telnet into the router over the company VPN.
C. Implement a modem on the AUX port.
D. Con gure a DSL router to the console port.
Correct Answer: C
To achieve a more e cient and secure work environment, a company needs a way to control what is being accessed on the Internet using
corporate resources.
Which of the following devices should be used to accomplish this task? (Choose two.)
A. Proxy server
B. IDS
C. Load balancer
D. Content lter
E. VPN concentrator
F. IPS
Correct Answer: AD
The network support team is responsible for managing connections in a large, multipurpose venue where maintaining physical security is di cult.
Implementing which of the following standards would BEST help to prevent unauthorized connections to the wired network?
A. 802.1X
B. 802.1q
C. 802.3at
D. 802.3af
Correct Answer: A
A utility company has installed a wireless device at a residence that allows the company to view power consumption online. The resident reports
the 802.11ac home wireless intermittently loses connectivity for about 15 minutes twice a day.
Which of the following is the MOST likely cause?
A. The utility company throttles power during peak hours.
B. There is additional data being transferred over the wireless network.
C. There is interference with the smart reader.
D. An IoT device is causing a DoS attack on the wireless network.
Correct Answer: B

The question doesn't say that the utility companies device is connected to the residents personal home WiFi, therefore you should assume it
wouldn't be on their network. No company would be stealing paid internet service from their customers.
upvoted 4 times
A technician has been asked to install biometric controls at the entrance of a new datacenter. Which of the following would be appropriate
authentication methods to meet this requirement? (Choose two.)
A. Badge reader
B. Retina scanner
C. Random number-generating token
D. Device proximity sensor
E. Challenge question
F. Combination lock
G. Fingerprint reader
Correct Answer: BG
Two buildings used to be connected by a wireless bridge, but they are upgrading to ber. Which of the following new devices would be required at
the demarcation points?
A. Wireless access point
B. Router
C. Media converter
D. Firewall
Correct Answer: C
A company is expanding and building a new remote branch o ce. Marketing will need 78 IP addresses, nance will need 150 IP addresses, legal
will need 39 IP addresses, and R&D will need 12 IP addresses. The network administrator gives the technician a network of 172.16.48.0/23 and
wants the technician to use
VLSM for the design. Which of the following are possible solutions? (Choose three.)
A. The marketing department should receive a /25 network.
B. The R&D department should have 172.16.49.207 as a broadcast address.
C. The R&D department should receive a /27 network.
D. The nance department should have 172.16.49.127 as a broadcast address.
E. The marketing department should have usable IPs ranging from 172.16.49.129 to 172.16.49.190.
F. The legal department should have a rst usable IP address of 172.16.49.190
G. The legal department should have usable IPs ranging from 172.16.49.129 to 172.16.49.190.
H. The R&D department should have a last usable IP address of 172.16.49.190.
Correct Answer: ABG
After several changes to the network, a technician needs to ensure a client is checking for new hostname and IP pairings. Which of the following
commands should the technician use to force new lookups?
A. ipcon g / ushdns
B. ipcon g /release
C. ipcon g /renew
D. ipcon g /all
Correct Answer: A
A network technician is setting up a WiFi network in a multi-tenant building. When trying to determine the best channel, which of the following is
the BEST tool to use?
A. Protocol analyzer
B. Tone generator
C. Spectrum analyzer
D. Multimeter
Correct Answer: C
Due to regulatory requirements, a college bookstore prohibits customers from accessing the wireless network in the building. Which of the
following would be the
BEST method to prevent customers from accessing the wireless network while in the bookstore?
A. Use MAC ltering for authorization to the wireless network.
B. Require PEAP for authentication to the wireless network.
C. Implement a Faraday cage within the bookstore premises.
D. Require a pre-shared key for authentication to the wireless network.
Correct Answer: C
  Djay 1 month, 1 week ago

if you implement the faraday cage the whole building not getting any wifi connection due to signal diversion,
D is the best answer to use preshare key!
upvoted 1 times
  Djay 1 month ago

oh it's my bad C is the best answer
upvoted 2 times
A network technician sets up a new schedule on the backup server. Management has informed the technician that a full backup does not need to
be completed every day. The technician sets up weekly full backups. Which of the following should the technician con gure for the remaining days
to MINIMIZE the daily backup size?
A. Snapshots
B. Incremental
C. Replica
D. Differential
Correct Answer: B
Which of the following network topologies typically has all devices on a network directly connected to every other network device?
A. Mesh
B. Star
C. Ad hoc
D. Ring
Correct Answer: A
A technician wants to set an IP address to a speci c MAC address on a host machine. Which of the following commands should the technician
use?
A. ipcon g
B. nslookup
C. arp
D. dig
Correct Answer: C
A network technician is designing a network cable upgrade in a newly acquired o ce space. The IT manager wants to install a standardized
twisted pair cable solution that supports speeds up to 1 Gbps and terminates with a standard RJ45 connector. Which of the following cable types
should the technician suggest?
A. SMF
B. Cat 3
C. Cat 5
D. Cat 6
E. RG-6
Correct Answer: D
  Scott_brily 6 days, 15 hours ago

with both CAT5 & 6 supporting 1Gpbs, anyone knows why CAT 6 is the answer?
upvoted 1 times
  kjkjheyo 5 days, 22 hours ago

CAT5 only supports 100Mbps. You need Cat5e minimum to get 1Gpbs.
upvoted 1 times

A good explanation here https://www.home-network-help.com/transmission-speed.html
upvoted 1 times
Which of the following policies would be the MOST useful for de ning the proper procedures when an employee is terminated abruptly?
A. Offboarding
B. Remote access
C. AUP
D. Incident response
E. DLP
Correct Answer: A
A technician wants to have the ability to transfer les from home to the company's network on a regular basis. Which of the following is a remote
access protocol the technician can utilize to bypass interactive user authentication by using a list of known host public keys?
A. FTP
B. SCP
C. TFTP
D. Telnet
Correct Answer: B
A company runs Linux servers in its own datacenter and also on a popular public cloud service provider. The servers hosted by the cloud provider
can only be accessed with proper authorization and are only accessed by the company's datacenter. Which of the following BEST describes the
type of cloud architecture being used? (Choose two.)
A. Private
B. Hybrid
C. Public
D. IaaS
E. PaaS
F. SaaS
Correct Answer: BD

Its not laas, it's paas
upvoted 1 times
A company's web-based application has a database that is set up for high availability in case of a failure. Which of the following is necessary to
achieve this type of setup?
A. A virtual IP pointing to the active DB
B. A static IP pointing to the passive DB
C. A private IP pointing to the web front end
D. A private IP pointing to the web proxy
Correct Answer: A
A network technician is creating a diagram of network termination points in the building. The technician diagrammed the core network room and
now needs to diagram the auxiliary network closets. Which of the following is the technician MOST likely going to add to the diagram?
A. IDF
B. MDF
C. VRF
D. TDM
Correct Answer: A
A network technician has installed multiple new lightweight access points across the network. Which of the following devices should the
technician use to manage the new access points?
B. SSH
C. DHCP server
D. Content lter
E. WiFi analyzer
Correct Answer: A
Management is concerned there is excessive tra c on the network. A network technician wants to run a quick port scan to see any systems that
have open ports.
Which of the following tools should be used to do this?
A. tcpdump
B. dig
C. nmap
D. netstat
Correct Answer: C
Allowing data to be centrally stored and accessed by multiple devices on an isolated subnet is BEST understood as:
A. NAS
B. iSCSI
C. SAN
D. FCoE
Correct Answer: C
During a weekend event, several people reported they were unable to get onto the wireless network. On Monday, the technician could not nd a
problem. Which of the following is the MOST likely cause?
A. Cross talk
B. Overcapacity
C. Channel overlap
D. Wrong passphrase
Correct Answer: B
After deployment of a second network link to load balance the network tra c, the quality of voice calls degrades. The network administrator
discovers the voice packets are arriving at uneven intervals that cannot be handled by the voice application buffer. Which of the following actions
will improve the quality of the voice calls?
A. Control the attenuation of the non-voice tra c across the network links
B. Control the latency of tra c across the network links
C. Control the EMI of the multimedia tra c across the network links
D. Control the jitter of the affected tra c across the network links
Correct Answer: D
Which of the following can a network administrator use to access a network switch using standard AAA con gurations?
A. TACACS+
B. Single sign-on
C. LDAP
D. Local authentication
Correct Answer: A
A network technician receives a switch that is con gured to support VLANs on its ports. At which of the following layers is this switch operating?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 4
Correct Answer: B
  alexz123 1 month, 1 week ago

is this not layer3 switch?
upvoted 2 times
  n00000pe 1 month ago

I thought so as well but did some digging and found on this on wiki "VLANs operate at the data link layer of the OSI model. Administrators
often configure a VLAN to map directly to an IP network, or subnet, which gives the appearance of involving the network layer."
https://en.wikipedia.org/wiki/Virtual_LAN#:~:text=VLANs%20operate%20at%20the%20data,of%20involving%20the%20network%20layer.
upvoted 4 times
  Parti 1 month, 1 week ago

I think so too. Layer 2 typically interacts with devices using MAC addresses, Layer 3 uses IP routing (to allow VLANs).
upvoted 1 times
  Djay 1 month ago

B is the right answer , switch and bridge is working at layer 2 (data link layer)
upvoted 2 times
Which of the following protocols is used to transport outgoing mail across networks?
A. POP
B. SMTP
C. IMAP
D. LDAP
Correct Answer: B
Management at a company wants to increase the bandwidth available to users after receiving several complaints. A technician reports to
management that 50% of the company bandwidth is being utilized by wireless devices outside the company's property. Given budget constraints,
which of the following solutions should the technician propose to management?
A. Have the ISP double the bandwidth
B. Move from WPA2 to WEP
C. Enable WPA and change the SSID
D. Con gure geofencing
Correct Answer: D
To increase speed and availability, a high-tra c web application was split into three servers recently and moved behind a load balancer. Which of
the following should be con gured on the load balancer to allow for a single destination?
A. SIP
B. PAT
C. NAT
D. VIP
Correct Answer: D
A network technician is reading a network diagram and looking for the edge router. Which of the following is MOST likely the symbol used for the
router?
A. A circle with four outward arrows
B. A rectangle with two horizontal arrows
C. A square with two circular arrows
D. A triangle with three outward arrows
Correct Answer: A
Which of the following would a network technician MOST likely connect to power wireless access points in drop ceilings?
A. Powerline extender
B. Ethernet-over-power adapter
C. Power-over-Ethernet switch
D. Power distribution unit
E. Ethernet power controller
Correct Answer: C
A network technician needs to monitor the tra c going to a mission-critical server in the datacenter. Which of the following is the BEST method to
perform this?
A. Use port mirroring
B. Install an inline tap
C. Periodically view the server logs
D. Con gure port aggregation
Correct Answer: B
  alexz123 1 month, 1 week ago

because its in a datacenter?
upvoted 2 times

mission-critical is key, port mirroring can drop some data in the process as well. Tap in gives you a 100% accurate picture of data flow.
upvoted 4 times
A network engineer at a large company is restricting Internet browsing on the corporate WAN to only business-related external websites. Which of
the following is the BEST solution to achieve this goal while avoiding the need to con gure this restriction on each PC?
A. Web application rewall
B. Content lter
C. IPS
D. VPN concentrator
Correct Answer: B
  Patrick_Nedjou1 3 weeks, 6 days ago

Why not a WAF ?
upvoted 1 times
  Javier25 3 weeks, 1 day ago

the company wants to restrict some web sites, not just web applications
upvoted 4 times
Which of the following types of attacks is characterized by encrypting data and locking out a user from access to certain data within a
workstation?
A. Ransomware
B. Phishing
C. DDoS
E. Spoo ng
Correct Answer: A
The process of searching for open or weakly secured wireless networks in a geographic area is known as:
A. phishing.
B. social engineering.
C. war driving.
D. an evil twin.
Correct Answer: C
A request is made to open an additional port on a rewall. The request is approved, and the port is opened. Which of the following BEST describes
this process?
A. Standard operating procedure
B. Process management
C. Project management
D. Change management
Correct Answer: D
A network technician notices that switches of the same model have different commands and security features while administering them. Which of
the following hardening techniques should the technician perform on a regular schedule to ensure all switches have the same features and
security functionality?
A. Change the default credentials.
B. Verify the rmware le hash.
C. Disable unused switchports.
D. Apply patches and updates.
Correct Answer: D
A network administrator has deployed a secure wireless network that authenticates using Active Directory network credentials so individual users
are uniquely identi ed when connected to the WLAN. Which of the following wireless technologies has the administrator con gured?
A. WEP
B. EAP-PEAP
C. PSK
D. CCMP-AES
Correct Answer: B
A SAN serves out storage to a company's virtual environment and provides low-level disk access. The company wants to use its existing IP
network and equipment to access the virtual disks. Which of the following network connection types would BEST accomplish this task?
A. In niBand
B. iSCSI
C. Fibre Channel
D. CIFS
Correct Answer: B
When using a network monitoring system, a network technician notices that a switch returns many object identi ers that do not have descriptions.
Which of the following should be imported into the monitoring system to describe these object identi ers?
A. SNMPv3
B. SIEM
C. MIB
D. SYSLOG
Correct Answer: C
A company hires some temporary workers. On day one, the temporary employees report they are unable to connect to the network. A network
technician uses a packet analysis tool and nds that many clients are continuously sending out requests for an IP address, but many of them are
not receiving a response. Which of the following could be the cause of this issue?
A. Exhausted DHCP scope
B. Untrusted SSL certi cates
C. Duplicate MAC addresses
D. Incorrect rewall settings
Correct Answer: A
A network administrator is responding to a help desk ticket, which states an unknown wireless access point is broadcasting in a speci c area.
Upon investigation, the administrator nds that a user brought a wireless access point from home and plugged it into the corporate network. This
resulted in an attacker using the unsecured wireless LAN to gain access to the network. Which of the following should the network administrator
have done to BEST prevent this problem?
A. Changed the default credentials on the network switches
B. Installed a Layer 7 rewall
C. Implemented port security
D. Disabled unnecessary services on the network switches
Correct Answer: C
A small team is overloaded with requests for database resources. The Chief Information O cer (CIO) is concerned the company does not have the
resources to deploy and manage these additional services e ciently. Which of the following types of cloud services would be the MOST effective?
A. PaaS
B. IaaS
C. BaaS
D. SaaS
Correct Answer: C

resources to "deploy and manage" associates with IaaS
upvoted 1 times
  Javier25 3 weeks, 1 day ago

Correct
upvoted 1 times

No..the question is saying the company does "NOT have the resources to deploy and manage" meaning they don't have the necessary
infrastructure for a IaaS.
Although BaaS isn't in the CompTIA Network+ objectives, the given answer is correct. Check this out.
https://www.cloudflare.com/learning/serverless/glossary/backend-as-a-service-baas/
upvoted 1 times

BaaS is Backend as a Service. Part of this Vendor supplies Database Management. I believe the answer given is correct
upvoted 3 times
Which of the following should be performed on a regular basis to prevent unauthorized access to a company network? (Choose two.)
A. Packet analysis
B. Reviewing baselines
D. Patch management
E. Log archiving
Correct Answer: CD
A network technician receives a report that the company's intranet web server is not responding. The technician veri es successful connectivity to
the server via the ping and tracert commands. The technician also veri es the routers and switches are online and operational, and then runs
Telnet to port 80 and receives a response. Which of the following troubleshooting steps should the technician perform NEXT?
A. Establish a plan to reset the company router.
B. Escalate the issue to the server administrator.
C. Duplicate the issue and continue testing.
D. Report that an issue was not identi ed.
Correct Answer: C
Which of the following ports are used for electronic mail protocols? (Choose three.)
A. 23
B. 25
C. 110
D. 123
E. 143
F. 161
G. 389
H. 443
Correct Answer: BCE
A technician needs to connect two routers using copper cables. Which of the following cables would utilize both the TIA/EIA 568a and TIA/EIA
568b standards?
A. Cat5 crossover
B. Cat5e straight-through
C. Cat5e rollover
D. Cat6 console
E. Cat6a straight-through
Correct Answer: A
The engineering department wants to bring a legacy computer online to test a failed component. When patching the device into the switch, there
are no link lights or connectivity. The legacy computer can ping its loopback address successfully. Another device can connect to that same port
without issues. Which of the following should the network technician check NEXT? (Choose two.)
A. Speed setting on the switch
B. Duplex requirements
C. Firmware version
D. Protocols the legacy computer supports
E. Network card drivers
F. VLAN settings
Correct Answer: CE
A user in the marketing department reports the email server is down. The user has not received email for more than 24 hours. Which of the
following should the network technician do to investigate this issue?
A. Question other users in the marketing department to see if they are also having connectivity issues.
B. Reboot the email server and verify connectivity once it is up again.
C. Check the router and rewall to see if ACLs or rmware have changed in the last 24 hours.
D. Check for network connectivity on the user's PC and reinstall the email client.
Correct Answer: A
A network technician has provisioned a new Linux instance in public cloud provider's IaaS environment. The technician did not install a graphical
user interface.
The technician wants to connect to the server's public IP address securely to start a console session. Which of the following remote access
methods should the technician use?
A. SSH
B. Telnet
C. VNC
D. RDP
Correct Answer: A
A user does not have access to network services but has Internet access. The technician notices the computer has an IP address of
192.168.1.144 when the network is 10.10.10.0. Which of the following is MOST likely the issue?
A. Rogue DHCP server
B. Duplicate IP addresses
C. Incorrect gateway
D. Server permission changes
Correct Answer: A
A technician is trying to identify the cause of an issue several wireless users are experiencing at an o ce. The o ce is in a square-shaped
building, with four
802.11b WAPs with omnidirectional antennas located in the four corners of the building. Users near the center of the building report sporadic
issues connecting to resources. The technician checks the signal strength in the middle of the building and determines it is adequate. Which of
the following is causing the reported issue?
A. The antenna types are incorrect, and unidirectional should be used.
B. MAC ltering has not been updated.
C. There is channel overlap of the access points.
D. The power levels are set too low on the WAPs.
Correct Answer: C
A network technician is performing an initial con guration of a new network switch. Per company policy, the only authorized manner for remotely
administering the switch is through a command line. Which of the following protocols should the technician disable to adhere to the company
policy?
A. HTTP
B. Telnet
C. SSH
D. TFTP
Correct Answer: A
A network technician is troubleshooting a connectivity issue with Joe, a user. Joe has reported that when he attempts to RDP to machine1
(192.168.21.21) by name, he is connected to machine3 (192.168.21.23). When the network technician runs the command nslookup machine1, it
returns the IP address
192.168.21.23; but when the ping ""a 192.168.21.23 command is run, the results return the hostname machine3. Which of the following DNS
records should be updated to allow RDP connections to machine1 by hostname?
A. A
B. SRV
C. PTR
D. TXT
Correct Answer: A
Company policy dictates that full backups are taken every Sunday evening, and incremental backups occur Monday through Saturday in the
evening. If data loss were to occur on a Thursday before the backup window, which of the following is the number of backup sets that would be
needed to retrieve the lost data come
Friday morning?
A. 1
B. 2
C. 3
D. 4
E. 5
Correct Answer: C

Answer is 4 not 3
upvoted 2 times
  Javier25 4 days, 4 hours ago

The question says before the Thursday back up. so from Thursday night to Saturday evening.
upvoted 1 times
  Javier25 4 days, 4 hours ago

I take this back. Now I'm not sure where 3 comes in when it said come friday morning, or maybe because it has missed one backup and it
needs to back up everythin by sunday. so it should need 3 sets since thursday?
What do yo think?
upvoted 1 times
  Astrodarl 3 days, 18 hours ago

I think the Answer is 4. Restore is for Friday morning, but Data loss took place before Thursday backup. 1) Sunday Full Backup set 2) Monday
Incremental Set 3) Tuesday Incremental set 4) Wednesday Incremental Set. Thursday Incremental Set Not available. Am I missing something or
interpreting something incorrectly
upvoted 2 times
A network technician is setting up a new web server on the company network. One of the requirements for the web server is to ensure the end
users can securely authenticate to the application to perform their job duties. Which of the following ports should the network technician request
from the rewall team to comply with this requirement?
A. 22
B. 69
C. 80
D. 389
E. 443
Correct Answer: E
The network team at a university, which has on-campus residences, recently expanded the WiFi offerings to the dormitories. Each dormitory
houses approximately 75 students, who each have multiple wireless devices. The WLAN utilizes an intelligent wireless controller for con guration
and management. While the WiFi in academic buildings continues to receive few to no complaints, dormitory complaints are on the rise. Which of
the following is MOST likely causing the complaints?
A. Frequency mismatch
B. Crosstalk
C. Interference
D. Channel overlap
Correct Answer: B

The answer is NOT crosstalk.
upvoted 2 times

FIX this answer. This is bogus, Crosstalk is not present in wireless systems since it doesn't use twisted pair wires. This website is seriously making me
doubt it's authenticity and ability to prepare students for an actual exam. This is embarrasling wrong and have seen atleast 20 GROSSLY wrong
answers on other questions with people all discussing the actual true answer which is verifiable on compTIA website.
upvoted 1 times
  carlo479 3 days, 12 hours ago

The answer should be D
upvoted 1 times
A company's server-naming convention is overly complicated. The systems administrator wants to change the naming convention to make it
easier for users to remember which hosts they should log into. However, renaming servers is complicated and requires some downtime. Which of
the following DNS record types would accomplish this goal without requiring servers to be renamed?
A. TXT
B. A
C. SRV
D. CNAME
Correct Answer: D
A network technician is working on a way to set up a new branch o ce securely. The network manager con rms the company does not have any
plans to expand to any other new sites and wants to implement the most cost-effective solution. Which of the following would be the BEST type of
VPN to implement?
A. Client-to-site VPN
B. DMVPN
C. Site-to-site VPN
D. MPLS VPN
Correct Answer: C

Please correct me if I'm wrong. Question asks for cost effective. According to Mike Meyers book. Client to Site connection is slow, but inexpensive
compared to Site to Site VPN connection
upvoted 1 times

Site-to-site means connection is sat behind two VPN concentrators. Two office, it'd make sense that the answer is right
upvoted 1 times
  Astrodarl 18 hours, 12 minutes ago

Thank you
upvoted 1 times
A network administrator has noticed many systems on the network have tra c that is anomalous and may be part of a botnet. The administrator
wants to implement an access control method that requires a computer to have antivirus software installed before being granted network access.
Which of the following should the administrator deploy?
A. 802.1X
B. Captive portal
C. Port security
D. NAC
Correct Answer: D
A user claims to have no Internet access but can access local resources. A technician determines the issue is with a con guration because a ping
to a working public website shows a response that starts with:
Ping request could not nd host
Which of the following is the MOST likely miscon guration?
A. Incorrect netmask
B. DNS
C. DHCP
D. SSL certi cate
Correct Answer: B
A network engineer wants to implement a technology that allows for an all-in-one approach to incoming and outgoing tra c from the Internet.
This device should be able to lter content and scan for malicious information in each packet. Which of the following types of devices would be
necessary?
A. UTM appliance
B. IDS appliance
C. Proxy server
D. RADIUS server
Correct Answer: A
Which of the following technologies allows network tra c to come into the network on a certain port and go to a destination server with a
different port?
A. Spanning port
B. Port forwarding
C. Port mirroring
D. Port tagging
Correct Answer: B
An attacker has inserted a hub into a trunk link on the local network in an attempt to access the management subnet to attack the networking
devices. Which of the following attacks can be used on a trunk link to provide access to the management subnet?
A. Brute force
B. VLAN hopping
C. Evil twin
D. DNS poisoning
Correct Answer: B
A developer has asked a network engineer for a small network segment of ve computers connected via a Layer 1 device, con gured in a star
topology, and segregated from the corporate network. Which of the following would BEST ful ll the developer's request?
A. Connect the ve PCs to a hub that is not connected to the corporate network.
B. Connect the ve PCs to a switching router and assign the PCs to a separate VLAN.
C. Connect the ve PCs to a hardware rewall that is connected to the router.
D. Connect the ve PCs to a switch and con gure the ports with implicit deny ACLs for outbound tra c.
Correct Answer: A
A network engineer wants to change how employees authenticate to the wireless network. Rather than providing a pre-shared key, the engineer
wants employees to be able to authenticate with the same unique company user ID and password they use for accessing other services, such as
email and document sharing. The engineer also wants to receive daily reports of login attempts on the wireless network. Which of the following
should be installed to achieve this goal?
A. LDAP server
B. UTM appliance
C. Multilayer switch
D. AAA/RADIUS server
Correct Answer: D
Which of the following provides information about how often some devices fail so the IT department can take proactive measures?
A. MTBF
B. MTTR
C. SLA
D. UPS
Correct Answer: A
Which of the following additional capabilities does a next generation rewall provide beyond a standard network rewall? (Choose two.)
A. Application control
B. User identi cation
C. Network address translation
D. Virtual private networking
E. High availability
F. Access control rules
Correct Answer: AB
First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the
following types of documentation should the on-call network administrator consult FIRST?
A. Firewall con guration documentation
B. Change management documentation
C. Network performance baseline
D. Logical diagram
Correct Answer: B
A network team at a large company has received funding for a WiFi refresh. One of the requirements in the RFP is the new WLAN infrastructure
must provide APs that support multiple streams of information at the same time. For which of the following WiFi features is the network team
looking?
A. MU-MIMO
B. MIMO
C. Channel bonding
D. TDM
E. Automatic channel selection
Correct Answer: A
Multiple users are experiencing slow performance when downloading large les from a speci c site. Which of the following should the technician
do to check the connection to the external site?
A. Check the latency by running a continuous ping to the site.
B. Perform the ipcon g/ ushdns command on the affected users' PCs.
C. Run a speedtest from a user's PC to a site on the Internet.
D. Verify if there is MTU mismatch in the path to the site.
Correct Answer: A
A user has reported an issue with wireless VoIP phones dropping calls during business hours. When working late or in the evenings, the user does
not experience call drops. When the network technician investigates the issue, all WAPs have balanced the number of connections evenly and are
not dropping off the network.
The network technician connects to the wireless network in the user's o ce and starts a continuous ping to an external server. The results show a
drastic and varied response time for each packet. Which of the following is the MOST likely cause of the dropped calls?
A. No QoS con gured on the network
B. Signal-to-noise ratio
C. Interference from the microwave in the breakroom
D. Rogue AP installed in the o ce
Correct Answer: B
Which of the following components can be used to manage network tra c to all nodes in a hypervisor?
A. Virtual switch
B. Virtual NIC
C. Media converter
D. Load balancer
E. Multilayer switch
Correct Answer: A
A network technician is investigating reports of blocked downloads from a rewall. Which of the following should be used to determine which
protocols are being blocked?
A. Ping
B. Log review
C. Vulnerability scans
D. Alerts
Correct Answer: B
Which of the following IPv6 transition methods requires all network devices to support IPv4 and IPv6?
A. 6to4
B. Teredo
C. ISATAP
D. Dual stack
Correct Answer: D
A network administrator is con guring a new Internet connection. The ISP provided a ber-optic handoff, but the company's rewall only supports
copper Ethernet interfaces. The administrator wants to connect the devices as easily as possible. Which of the following would be the BEST way
to provide the connectivity needed?
A. Bridge
B. Router
C. Multilayer switch
D. Media converter
Correct Answer: D
A network technician is responding to a user's trouble ticket. After replacing the network patch cable with a longer cable, the user is no longer
connecting to the network. The network administrator tests the patch cable with a tester and con rms the cable is not faulty. Which of the
following is the issue with the newly installed cable?
A. The user ordered Cat5e cable instead of Cat3.
B. A crossover cable was installed.
C. The total cable run exceeds the maximum distance.
D. There is a network speed mismatch between the computer and the switch.
Correct Answer: C
A brokerage rm requires high-speed network connectivity between several buildings in the nancial district. Which of the following topologies
would BEST meet this requirement?
A. PAN
B. WLAN
C. SAN
D. MAN
Correct Answer: D
Which of the following is a policy that communicates the guidelines for connecting personal employee devices to the corporate network?
A. Remote access
B. NDA
C. SLA
D. BYOD
E. Incident response
Correct Answer: D
A security administrator wants to implement the ability to prevent an authorized user from tailgating into the o ce building. Which of the
following should be implemented?
A. Badge reader
B. Bluetooth reader
C. Cipher lock
D. Mantrap
Correct Answer: D
A network manager notices several outages have occurred due to modi cations that were made without being properly tested. Which of the
following will the network manager MOST likely implement to prevent future occurrences?
A. Logical diagram
C. IDF documentation
D. Con guration baseline
Correct Answer: B
Due to an increase in wireless demand, 50 additional access points were installed as part of an expansion project. Each device was con gured
and managed separately, working with its own con guration. Which of the following network devices would assist the network team with reducing
complexity and enforcing policies on the WLAN?
B. Wireless range extender
C. Wireless load balancer
D. Wireless analyzer
Correct Answer: A
Joe, a user, reports intermittent connectivity issues, but a technician notices that the only time Joe has issues is when he is logged into the
database. Losing connection after authenticating to a database, but still having access to network resources such as le/print services and email,
would MOST likely be caused by:
A. an incorrect DHCP gateway setting
B. a duplicate IP address
C. NTP synchronization
D. ACL con guration
Correct Answer: D
A server rack was moved from one oor to another. The network engineer needs to determine what physical changes to make on the network to
ensure the server rack has connectivity. Which of the following should the network engineer consult?
A. Standard operating procedures
B. Wiring diagram
C. Inventory documentation
D. Network baseline
Correct Answer: B
An email server, which is called "Frederick," has an IPv6 address of 2001:5689:23:ABCD:6A, but most users call it "Fred" for short. Which of the
following DNS entries is needed so the alias "Fred" can also be used?
A. MX
B. AAAA
C. SRV
D. CNAME
E. TXT
F. NS
Correct Answer: D
A network administrator needs to be able to burst datacenter capacity during peak times, but does not want to pay for on-premises hardware that
is not used during off-peak times. Which of the following would aid in this scenario?
A. Public cloud
B. SaaS
C. PaaS
D. Hybrid cloud
Correct Answer: C

PaaS = Platform as a service.
This answer is wrong and hurts the integrity and authenticity of this website. If the datacenter is running it's own private cloud and needs
assistance from a seperate third-party cloud to enable bursting the capacity at peak hours, this is called hybrid cloud. Platform as a Service in no
way shape-or-form helps at all with this unless you wan't to offload the ENTIRE workload onto the hosting partie's platform and use none of your
datacenter. The answer is bogus and should be changed ASAP
upvoted 2 times

nepa is Correct. PaaS is mainly used for Developers who need to create applications with an infrastructure in place
upvoted 1 times
A user wants to secure a network closet and be able to tell if anyone makes changes in the closet. Which of the following would be the BEST
detective physical security devices in this situation? (Choose two.)
A. Anti-tampering
B. Badges
C. Door locks
D. Key fob
E. Motion detection
F. Video surveillance
Correct Answer: AF
A network technician needs to subnet the network. The marketing department has 28 devices. Which of the following private IP address spaces
should be used to ensure the MINIMUM number of unused IP addresses?
A. Gateway: 10.10.10.1 Netmask: 255.255.255.192
B. Gateway: 172.15.18.128 Netmask: 255.255.255.224
C. Gateway: 192.168.1.97 Netmask: 255.255.255.224
D. Gateway: 224.102.113.65 Netmask: 255.255.255.192
Correct Answer: C
A company has experienced a major security breach. Which of the following should the network administrator reference to determine the next
steps?
A. Non-disclosure policy
B. Data loss prevention policy
C. Acceptable use policy
D. Incident response policy
Correct Answer: D
A technician restored network connectivity on a user's laptop. After validating full system functionality, which of the following steps should the
technician take
NEXT?
A. Duplicate the problem, if possible
B. Determine if anything has changed
C. Test the theory to determine the cause
D. Document the ndings, actions, and outcomes
Correct Answer: D
Which of the following is an IPv6 transition mechanism in which network devices utilize IPv4 and IPv6 at the same time?
A. 6to4
B. ISATAP
C. Teredo
D. Dual stack
Correct Answer: D
Which of the following protocols operates at Layer 4 of the OSI model?
A. TCP
B. ARP
C. IMAP
D. POP3
Correct Answer: A
In the past, users brought personal laptops to the o ce to bypass some of the security protocols on their desktops. Due to new security
initiatives, management has asked that users not be allowed to attach personal devices to the network. Which of the following should a technician
use to BEST meet this goal?
A. Shut down unused ports on switches
B. Upgrade rmware on network devices
C. Allow only secure protocols on the network
D. Disable unnecessary services
Correct Answer: C
A technician is installing a SOHO router. Which of the following should be performed on every installation and periodically maintained to prevent
unauthorized access? (Choose two.)
A. Disable remote management
B. Update the router rmware
C. Disable port forwarding
D. Use complex passwords
E. Disable the SSID broadcast
Correct Answer: BD
A network analyst is providing access to an FTP server that stores les that are needed by external contractors who are working on a project. In
which of the following network locations should the FTP server be placed to achieve the MOST secure environment?
A. DMZ network
B. Server network
C. External network
D. Internal network
Correct Answer: A
A company is contracting a new third-party organization that will handle storage of the company's critical data. Which of the following policies
would ensure the data remains con dential?
A. SLA
B. NDA
C. MOU
D. BYOD
Correct Answer: B
A technician must install and con gure a network device in a building with 20 classrooms. Each room must be on a separate subnet and should
not be able to see tra c from other subnets. Which of the following is the MOST cost-effective solution?
A. A switch with VLANs created for each segment
B. A router with interfaces connected to a switch in each room
C. A VoIP endpoint connected to a hub for each network
D. A rewall with DHCP pools for each subnet
Correct Answer: A
Which of the following WAN transmission mediums is the fastest and can travel the longest distance?
A. Satellite
B. Copper
C. Wireless
D. Fiber
Correct Answer: D
The process of grouping network interfaces together to increase throughput is called:
A. VLAN tagging
B. load balancing
C. port aggregation
D. fault tolerance
Correct Answer: C
Which of the following is used to purposely attack a system to exploit vulnerabilities?
A. Honeypot
B. Vulnerability scan
C. Device hardening
D. Penetration testing
Correct Answer: D
A network technician is adding a 10/100 switch with RJ45 connectors to the company network to accommodate new computers being added to a
network segment. There is no auto-MDIX port on the switch that needs to be connected to the existing switch on the segment. Which of the
following should the technician use to make the connection?
A. An RG-59 cable with BNC connectors
B. A multi-mode ber cable
C. A straight-through Cat5 UTP cable
D. A cable with TIA/EIA 568a and 568b on each end
Correct Answer: D
A company must create a way for partners to access a web portal to update documents for a project. This should be done only via web browser in
a transparent way for the users. Which of the following should be used?
A. Site-to-site connection
B. SSL VPN
C. GRE tunnel
D. VNC
Correct Answer: B
A network technician needs to install the latest rmware on the switch to address a recently discovered vulnerability. Which of the following
should the technician do to have a rollback plan in case of issues with the new rmware? (Choose two.)
A. Label the switch with IP address and rmware version
B. Draw the switchport diagram
C. Create a change management document
D. Draw the network rack logical diagram
E. Con rm standard operating procedures documentation
F. Create a performance baseline of the switch
Correct Answer: CF
Which of the following statements about the OSI model is true?
A. The application layer does not need to know what type of network is being used because that is dealt with by a layer below it.
B. The network layer deals with the network cabling and network device interface compatibility.
C. The transport layer deals with how the data is transported from one router to another based on the IP header.
D. The model consists of four layers that describe the requirements a technician follows to troubleshoot and support a network.
Correct Answer: A
Which of the following storage connection types should be used to allow the consolidation of the physical connections for SAN and LAN in just
one Layer 2 protocol?
A. Fibre Channel
B. SCSI
C. T1/E1
D. FCoE
Correct Answer: D
A network administrator is securing the wireless network in a multitenant building. The network uses a passphrase for authentication so it is easy
to allow guests onto the wireless network, but management would like to prevent users from outside the o ce space from accessing the network.
Which of the following security mechanisms would BEST meet this requirement?
A. MAC ltering
B. WPA-PSK
C. 802.1X
D. Geofencing
Correct Answer: D
A technician is asked to provide centralized SSID management across the entire WAN. The BEST solution would be to:
A. use a con guration management server
B. con gure a multilayer switch
C. install a wireless controller
D. use a proxy server
Correct Answer: C
A network technician is coordinating the upgrade of the company's WAP rmware with all the remote locations. The company has occasionally
experienced errors when transferring large les to some of the remote o ces. Which of the following should be used to ensure les arrive without
modi cations?
A. File hash
B. Encryption
C. FCS
D. Compression
Correct Answer: A
A network administrator needs to implement a new IP subnet containing 29 hosts. It is possible that the number of hosts in that subnet could
eventually double.
The company only has a single, unused public IP network left to work with: 164.10.12.0/24. Which of the following would be the BEST way to
divide this network without wasting addresses?
A. 164.10.12.0/24
B. 164.10.12.64/29
C. 164.10.12.128/26
D. 164.10.12.191/28
Correct Answer: C
A network technician is reviewing the company phone system to make the necessary changes to a rewall con guration. Which of the following
protocols are used in VoIP communication? (Choose two.)
A. SIP
B. NTP
C. H.323
D. SNMP
E. IMAP
F. SMB
G. CSMA
Correct Answer: AC
A school is implementing a wireless network and wants to ensure there is adequate coverage. The gymnasium has thick cinder-block walls, and
there are several o ces adjacent to it. Which of the following should the network technician recommend to ensure full coverage while minimizing
the total number of APs purchased?
A. Deploy two APs to the gymnasium with the maximum power level transmitting to cover the adjacent o ces.
B. Deploy a single AP to each adjacent o ce set to transmit at maximum power.
C. Use a high-gain antenna on the AP in the gymnasium and install an AP in every other adjacent o ce.
D. Use a spectrum analyzer to generate a heat map of the gymnasium to pinpoint AP placement.
Correct Answer: D
Which of the following BEST describe the differences between an IDS and an IPS? (Choose two.)
A. An IDS will detect tra c anomalies and a prede ned signature pattern, alert and log them, and allow them through the network.
B. An IDS will detect tra c anomalies, alert and log them, and block the tra c.
C. An IDS will detect previously unknown tra c anomalies, alert and log them, and block the tra c.
D. An IPS will detect tra c anomalies, alert and log them, and allow them through the network.
E. An IPS will detect previously unknown tra c signatures, and alert and log them.
F. An IPS will detect tra c anomalies and a prede ned signature pattern, alert and log them, and block the tra c.
Correct Answer: AF
A technician is required to install a new DOCSIS-based Internet connection. Which of the following medium types does this use?
A. Cat6a
B. RG-6
C. UTP
D. Multimode
E. Single mode
Correct Answer: B
While reviewing switch logs, a network analyst notices many failed logon attempts followed by a successful logon from an unknown IP address.
Which of the following hardening techniques should be utilized to prevent unauthorized access?
A. Avoiding common passwords
B. File hashing
C. Disabling unused IP ports
D. Using secure protocols
Correct Answer: A
A small business utilizes a SOHO router and wishes to secure its existing wireless infrastructure. The business has fewer than ten devices, which
are a mixture of old and new machines. Due to the varying ages of the machines, the latest wireless encryption methods may not be supported on
all devices. Which of the following would be the MOST cost-effective method to add a layer of security while allowing all machines to connect?
A. WPA2
B. EAP-FAST
C. MAC ltering
D. 802.1X
Correct Answer: A

CHANGE THE ANSWER. Do the people making these questions even know how to read? Some devices that don't support modern encryption? And
the answer is WPA-2? Are you kidding me? This website's reputation has gone down the gutter as well as its authenticity. You can not prepare for a
test with this website. The correct answer is MAC filtering since legacy devices do not always support 802.1X or WPA/WPA2 Enterprise networks
with AAA. MAC filtering is arbitrary security for a small network and can be attacked easily but atleast its a another layer of security.
upvoted 3 times

I disagree. WAP2 also has a personal mode where legacy should be able to connect. MAC filtering can be bypassed with spoofing.
upvoted 1 times
Which of the following routing conventions is known as a link-state protocol?
A. RIP
B. BGP
C. EIGRP
D. OSPF
Correct Answer: D
A technician is making the population of routers more secure. Which of the following are the BEST options for making authentication more
secure? (Choose two.)
A. Add a login banner.
B. Disable unused services.
C. Upgrade the rmware.
D. Disable Telnet.
E. Implement AAA.
F. Disable SSH.
Correct Answer: DE
  krand 1 week, 1 day ago

Wow, for once the answer isn't "upgrade the firmware".
upvoted 3 times
A technician is installing six PCs and six VoIP telephones on a small o ce LAN. The VoIP telephones require QoS to be con gured for proper
operation. The customer router does not have QoS capability. Which of the following network devices should the technician purchase and install
at this o ce?
A. Managed PoE switch
B. Load balancer
C. Layer 3 switch
D. Unmanaged PoE switch
Correct Answer: A
A network administrator has signed up for service with a new ISP. The administrator was given the IP address of 172.17.10.254/30 to use on the
external interface of the Internet-facing router. However, the network administrator cannot reach the Internet using that address. Which of the
following is the MOST likely explanation?
A. The address provided by the ISP has a mask that is too small to be used and needs a larger mask.
B. The address provided by the ISP is a private IP address space and is not routable on the Internet.
C. The address provided by the ISP is the wrong one; they should be using 172.17.10.252/30.
D. The address provided by the ISP is part of the reserved loopback address space and cannot be used.
Correct Answer: B
A company deploys many workers in the eld who remotely access les from a server at headquarters. Leadership is concerned about the risks
posed when eld workers update these les from unsecured networks. Which of the following policy changes can the company make to MOST
improve the con dentiality of connections when connecting remotely? (Choose two.)
A. Implement SSL VPN connections from the remote devices to headquarters.
B. Change le access protocols from SFTP to FTP on the remote devices.
C. Utilize HTTPS to access the company intranet from remote devices.
D. Con gure WPA2 on the wireless networks at headquarters.
E. Con gure IMAP over port 143 for email access on remote devices.
Correct Answer: AC
A manufacturing company has signed an agreement with another company to collaborate on an upcoming project. Both companies require secure
and persistent access to resources on each others' networks. Which of the following remote access technologies should the companies
implement to satisfy their requirements?
A. Out-of-band management
B. Site-to-site VPN
C. DMZ networks
D. SFTP site
Correct Answer: B
A security administrator wants to implement the ability to prevent an unauthorized user from tailgating into the o ce building. Which of the
following should be implemented?
A. Badge reader
B. Bluetooth reader
C. Cipher lock
D. Mantrap
Correct Answer: D
Joe, a technician, was able to copy data at a site with no network equipment between two new laptops, featuring gigabit Ethernet ports, by using a
regular straight- through patch cable. Joe then unsuccessfully tried to accomplish the same thing at a different site from his laptop with a gigabit
Ethernet port to an older customer unit, which had a 10/100 network port. Which of the following is the cause of this?
A. The customer's laptop does not support auto-MDIX.
B. Joe's laptop does not support auto-MDIX.
C. Straight-through patch cables are prone to crosstalk.
D. The customer's laptop NIC does not support full duplex.
Correct Answer: A
A network engineer has connected the storefront with the maintenance shed on the other side of a golf course using 802.11 wireless bridges and
omnidirectional antennas. However, the signal strength is too weak. Which of the following is the MOST e cient and cost-effective solution to
solve the issue?
A. Replace the omnidirectional antennas with unidirectional antennas.
B. Put protective enclosures around the omnidirectional antennas to prevent damage from golf balls.
C. Replace the 802.11 wireless standard and use GSM instead.
D. Replace the wireless bridges with wireless routers.
Correct Answer: A
Which of the following would block access to an untagged port when connected to a Layer 2 device?
A. BPDU guard
B. Spanning tree
C. Flood guard
D. Root guard
Correct Answer: B
Which of the following OSI layers contains the LLC function?
A. Network
B. Data link
C. Session
D. Transport
Correct Answer: B
  Cybersec1989 2 days, 1 hour ago

I think LLC and IPwork on layer 3 please correct ne ?
upvoted 1 times
Which of the following BEST describes the RADIUS authentication service protocol?
A. A protocol that sends passwords to the authentication server
B. A protocol that sends encrypted tickets from the authentication server
C. A protocol that sends X.500 service requests to the authentication server
D. A protocol that sends con guration information from the authentication server
Correct Answer: D
A company needs a secure way to provide building blueprints to an engineering partner frequently. The Chief Information O cer (CIO) states that
a secure protocol must be used for transfer, and the partner needs to initiate a secure connection to the company's router. Which of the following
would BEST meet the requirements? (Choose two.)
A. Site-to-site VPN
B. Client-to-site VPN
C. RDP
D. SSH
E. SFTP
F. Captive portal
Correct Answer: BE

N10-007 Exam - Free Actual Q&as, Page 1 - ExamTopics

Uploaded by

Copyright:

Available Formats

N10-007 Exam - Free Actual Q&as, Page 1 - ExamTopics

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

N10-007 Exam - Free Actual Q&as, Page 1 - ExamTopics

Uploaded by

Copyright:

Available Formats

7/17/2020 N10-007 Exam – Free Actual Q&As, Page 1 | ExamTopics

- Expert Veri ed, Online, Free.

 Custom View Settings

Topic 1 - Single Topic

A. Move the UTM onto the LAN side of the network

B. Enable TLS inspection on the UTM

C. Enable stateful inspection on the UTM

A. Swap the ber pairs in one of the SFPs

B. Replace the jumpers with single-mode ber

C. Set the correct MTU on the new interface

D. Install an optic that matches the ber type

  Cneo6 7 months, 3 weeks ago

  Gdhhd 6 months ago

  PerkDizzzle 6 months ago

  jason24 1 month ago

  alex19 5 months, 3 weeks ago

  Scryptic 5 months, 3 weeks ago

  zordss 4 months ago

  jason24 1 month ago

A. Incorrect default gateway

C. Miscon gured OSPF

D. Improper VLAN assignment

  pds1974 5 months ago

  Poppins 1 month, 1 week ago

  Scott_brily 1 week, 4 days ago

  olad89 3 months, 4 weeks ago

  Rob6789 2 months, 2 weeks ago

A. Install additional WAPs

B. Install external antennas

C. Move the WAPs closer to the more populated area

D. Change the antenna types

B. Corrupted operating system

A. It segments broadcast domains in the network infrastructure

B. It provides a faster port to all servers

C. It provides multiple collision domains on one switchport

D. It provides multiple broadcast domains within a single collision domain

C. Standard operating procedures

Question #10 Topic 1

A. MAC address reservation

D. Custom DNS server entry

Question #11 Topic 1

A. Access control lists

Question #12 Topic 1

D. An additional wireless network should be con gured to allow guest access

  Rilla 1 month, 2 weeks ago

  pshimsmart 1 month ago

  cgaie 4 weeks ago

Question #13 Topic 1

Question #14 Topic 1

Question #15 Topic 1

Question #16 Topic 1

D. Checking logical diagram

  Gbecker 1 year ago

  enigmavi 10 months, 2 weeks ago

  Kemared 1 month ago

Question #17 Topic 1

A. Test the possible solution

B. Question the users

C. Determine what has changed