Practice Test #1 Flashcards

Question

It is 3 am on a Saturday, and you just received a call from a system administrator that reports multiple network outages across the office network. It is snowing heavily outside, and the roads are inaccessible for you to get to the building to check the configuration of the network devices. What technology should you use to connect to the datacenter's network from home in order to troubleshoot the network outages? HTTP SSH SNMP Telnet

Answer 1

SSH Overall explanation OBJ 3.5: You should use a VPN or an SSH connection to connect to your office network from home remotely. Either of these options would provide you with an encrypted tunnel to the office network and allow you to begin troubleshooting remotely just as if you were physically located inside the building. SNMP isn't used for troubleshooting but instead for network monitoring and reporting. Telnet and HTTP are both insecure and should not be used to connect to your office network from home without the fear of the information being intercepted or changed.

Answer 2

Unidirectional Overall explanation OBJ 2.3: Directional antennas broadcast radio frequencies in a single direction (unidirectional) or two directions (bidirectional) to create a zone or area of coverage. Unidirectional antennas focus the broadcast signal in a single direction instead of all directions, focusing the transmission and making the signal stronger. A specific type of unidirectional antenna is known as a Yagi antenna. Omnidirectional antennas broadcast radio frequencies in all directions creating a large sphere of coverage. The antenna has the capability to send and receive signals in a circumference around the antenna. A patch antenna is a type of antenna with a low profile that can be mounted on a surface. A patch antenna can be omnidirectional, bidirectional, or unidirectional, therefore it is not the best answer to this question and unidirectional should be chosen instead.

Answer 3

Packet Loss High Latency Overall explanation OBJ 5.4 - High latency and Packet Loss are the likely causes of the poor video conferencing quality described, for delays and choppy audio. High latency can result in significant delays, causing the video and audio data not to be synchronized properly during the conference. Packet loss is also a primary factor, since packet loss directly impacts the quality of video conferencing by causing gaps in the audio and video stream. Insufficient bandwidth primarily affects the quality and resolution of the video rather than causing delays and choppy audio. Network congestion can lead to increased latency and packet loss, making it a plausible cause for poor video conferencing quality. However, it is more of a contributing factor to the latency and packet loss rather than the primary cause.

Answer 4

Anomaly Overall explanation OBJ 3.2: An anomaly signifies an unexpected deviation from typical network behavior, essential for identifying potential security breaches or performance issues. Normalization and calibration are processes unrelated to anomaly detection. Baseline drift refers to gradual changes over time, distinct from sudden anomalies

Answer 5

Install a UPS Overall explanation OBJ 2.4: The best solution would be to install a UPS. Since you are a network technician and not an electrician, you should not install a new electrical circuit. The primary function of UPS is to provide battery backup when the electrical power fails or drops to an unacceptable voltage level. It ensures that your electrical equipment gets a consistent current so damage and device power cycling does not occur.

Answer 6

Insider Threat Overall explanation OBJ 4.2: An insider threat is a type of threat actor assigned privileges on the system that cause an intentional or unintentional incident. Insider threats can be used as unwitting pawns of external organizations or make crucial mistakes that can open up exploitable security vulnerabilities. Hacktivists, Organized Crimes, and advanced persistent threats (APT) entities do not accidentally or unwittingly target organizations. Instead, their actions are deliberate in nature. A hacktivist is an attacker that is motivated by a social issue or political cause. Organized crime is a type of threat actor that uses hacking and computer fraud for commercial gain. An advanced persistent threat (APT) is a type of threat actor who can obtain, maintain, and diversify access to network systems using exploits and malware.

Answer 7

Firewall Overall explanation OBJ 1.2: A firewall is a network security device designed to prevent systems or traffic from unauthorized access. An ACL is a list that shows which traffic or devices should be allowed into or denied from accessing the network. An intrusion detection system (IDS) is a device or software application that monitors a network or systems for malicious activity or policy violations. An IDS uses signatures, not ACLs. Content filtering is the use of a program to screen and/or exclude access to web pages or emails deemed objectionable. A load balancer distributes a set of tasks over a set of resources, with the aim of making their overall processing more efficient.

Answer 8

Ensuring Continuous Power to the Equipment Overall explanation OBJ 2.4: UPS systems maintain a steady power supply during outages, preventing downtime and ensuring equipment remains operational. While UPS systems offer surge protection, their primary role is to provide continuous power during outages, not just temporary protection. UPS systems focus on power continuity, not energy consumption. Their role is to prevent disruptions, not to optimize energy use. While UPS helps avoid data loss during power outages, its primary function is power continuity, not direct involvement in data backup processes.

Answer 9

Protocol Analyzer Overall explanation OBJ 5.5: A protocol analyzer is used to capture network traffic on a network and display it for analysis. A protocol analyzer, like Wireshark, can capture the entire network packet as it transits the network and display it according to the different layers of the OSI model. A spectrum analyzer is used to measure the magnitude of an input signal's frequency. A tone generator is used with a toner probe to accurately identify the location of a cable pair or conductor within a wiring bundle, cross-connection point, or at the remote end. A port scanner is used to determine which ports and services are open and available for communication on a target system.

Answer 10

A table displaying the IP-to-MAC address mappings on the network Overall explanation OBJ 5.5 - The 'show arp' command displays the ARP table, which contains the IP-to-MAC address mappings for devices on the network. This is crucial for diagnosing IP address conflicts and ensuring that the network correctly associates IP addresses with the right hardware addresses. Statistics on packets processed by the network interfaces, describes the kind of information you might see from commands like 'netstat -i' or 'ifconfig', which provide statistics on packets processed by network interfaces. A list of active TCP connections and their state, describes the output of a command like 'netstat', which shows network connections, routing tables, interface statistics, masquerade connections, and multicast memberships. The routing table with all known routes and their metrics describes the output of the 'show ip route' command, which displays the routing table, including all known routes and their details.

Answer 11

tracert Overall explanation OBJ 5.5: Tracert is a command-line utility used to trace an IP packet's path as it moves from its source to its destination. While using ping will tell you if the remote website is reachable or not, it will not tell you where the connection is broken. Tracert performs a series of ICMP echo requests to determine which device in the connection path is not responding appropriately. This will help to identify if the connectivity issue lies within your intranet or is a problem with the ISP's connection. The nslookup tool is used to troubleshoot DNS issues. The netstat tool is used to display network statistics and active connections. The ping tool is used to test an end-to-end connection, but it will not provide any data on the hops found in the connection.

Answer 12

Authoritative DNS server Overall explanation OBJ 3.4 - An Authoritative DNS server is responsible for providing answers to queries about domains it is directly responsible for. It contains the most accurate and updated information about the domain names it serves. A Non-authoritative DNS server provides answers from its cache, which might not be up to date. A Recursive DNS server queries other servers on behalf of the client until it finds the answer. A Secondary DNS server is a backup server that holds a read-only copy of the zone file from the primary DNS server.

Answer 13

Load balancing Overall explanation OBJ 3.3 - Load balancing is a technique used to spread work across multiple computers, network links, or other devices. Multiprotocol Label Switching is a routing technique in telecommunications networks that directs data from one node to the next based on short path labels rather than long network addresses, thus avoiding complex lookups in a routing table and speeding traffic flows. VLAN tagging is used to keep traffic from different networks separate when traversing shared links and devices within a network topology. Multiplexing is the technology that is able to combine multiple communication signals together in order for them to traverse an otherwise single signal communication medium simultaneously.

Answer 14

Plenum Cat 6a Overall explanation OBJ 5.2: Cat 6a can also support 10Gbps for up to 100 meters using 10GBaseT. Cat 5e can only support 1000BaseT (1 Gbps) connections. Since we are concerned with the cable's fire safety rating, we should use a Plenum cable, not a PVC cable. Plenum-rated cable has a special insulation that has low smoke and low flame characteristics. Plenum cable is mandated to be installed in any air handling space, such as the space between a drop ceiling and the standard ceiling. PVC (Polyvinyl Chloride) is what your standard Category 5e and Category 6 cable jacket are constructed of. This PVC jacket when burning or smoldering releases hydrochloric acid and dioxin which are both toxic. For this reason, PVC cannot be used in-between the drop ceiling and the standard ceiling

Answer 15

Fiber to Ethernet Overall explanation OBJ 1.5: A media converter is a Layer 1 device that changes one type of physical network connection to another. In this case, we are converting multimode (fiber) cable to Cat 5e (ethernet) cable.

Answer 16

802.1x Overall explanation OBJ 4.1: 802.1x can be used to enhance the security of wireless local area networks (WLANs). WLANs provide an authentication framework, allowing a user to be authenticated by a central authority. RADIUS (Remote Authentication Dial-In User Service) allows a company to maintain user profiles in a central database that all remote servers can share. It provides better security, allowing a company to set up a policy applied at a single administered network point. Remote users connect to one or more Remote Access Servers. The remote access servers then forward the authentication requests to the central RADIUS server. 802.1X is an IEEE Standard for Port-based Network Access Control (PNAC). It provides an authentication mechanism to devices wishing to attach to a network. 802.1X authentication involves three parties: a supplicant, an authenticator, and an authentication server. The supplicant is a client that wishes to attach to the network. The authenticator is a network device, such as an Ethernet switch, wireless access point, or in this case, a remote access server, and the authentication server is the RADIUS server.

Answer 17

VLAN Overall explanation OBJ 4.1: A virtual local area network (VLAN) is a type of network segmentation configured in your network switches that prevent communications between different VLANs without using a router. This allows two virtually separated networks to exist on one physical network and separates the two virtual network's data. A virtual private network (VPN) is a remote access capability to connect a trusted device over an untrusted network back to the corporate network. A VPN would not create the desired effect. WPA2 is a type of wireless encryption, but it will not create two different segmented networks on the same physical hardware. MAC filtering is used to allow or deny a device from connecting to a network, but it will not create two network segments, as desired.

Answer 18

Port Mirroring Overall explanation OBJ 3.2: Port mirroring directs a copy of network traffic from one port (or ports) to another port for analysis, allowing monitoring without disruption. VLAN tagging separates network traffic, NAT (Network Address Translation) translates IP addresses, and STP (Spanning Tree Protocol) prevents loops; however, none specifically facilitate traffic monitoring like port mirroring.

Answer 19

-sT (Think Scan TCP) Overall explanation OBJ 5.5 - The -sT flag in Nmap initiates a TCP connect scan. This type of scan is used to establish a connection to every open port on the target host, making it effective for identifying open TCP ports. -sV scans for service version information, which, while it does probe TCP ports, its primary purpose is not to conduct a basic TCP connect scan. sU is used for scanning UDP ports and will not show open TCP ports. -O is intended for operating system detection and does not identify open TCP ports

Answer 20

HSRP (Hot Standby Router Protocol) Overall explanation OBJ 2.1: Hot Standby Router Protocol (HSRP) allows multiple routers to work together, providing a virtual IP address to ensure continuous connectivity even if the active router fails. OSPF is a link-state routing protocol, not a First Hop Redundancy Protocol (FHRP) for virtual IP address management. ARP (Address Resolution Protocol) is essential for mapping IP addresses to MAC addresses but is not an FHRP. ICMP (Internet Control Message Protocol) is used for error reporting and diagnostics and is not related to FHRP functionality.

Answer 21

LACP (Link Aggregation Control Protocol) Overall explanation OBJ 2.2: The Link Aggregation Control Protocol (LACP) enables you to assign multiple physical links to a logical interface that will appear as a single link to a route processor. LACP is used to combine multiple network connections in parallel to increase throughput beyond what a single connection could sustain and to provide redundancy in case one of the links should fail. LACP is defined in the IEEE 802.3ad standard. The Spanning Tree Protocol (STP) is a network protocol that builds a loop-free logical topology for Ethernet networks to prevent bridge loops and the broadcast storms that result from them. STP is defined in the IEEE 802.1d standard. Power over Ethernet (POE) is a technology that lets network cables carry electrical power. POE is defined in the IEEE 802.3af. SLAAC is used to automatically assign an IPv6 address to a host.

Answer 22

189.76.60.128 Overall explanation In classless subnets using variable length subnet mask (VLSM), the network ID is the first IP address associated within an assigned range. In this example, the CIDR notation is /26, so each subnet will contain 64 IP addresses. This means that there are four networks in this class C range: 189.76.60.0, 189.76.60.64, 189.76.60.128, and 189.76.60.192. Since the IP address provided is 189.76.60.164, it will be in the 189.76.60.128/26 network.

Answer 23

Bottlenecking on the file server Overall explanation OBJ 5.4 - The described scenario of slowdowns despite normal CPU and disk usage indicates bottlenecking on the file server, where the server's processing capacity is unable to keep up with the increased demand for file transfers. Overloaded switches could cause congestion but wouldn't directly affect file transfer speeds from the server. While outdated cables could impact performance, they wouldn't cause widespread slowdowns during peak hours. Bandwidth issues from the ISP would affect internet connectivity but not internal file transfer speeds.

Answer 24

Clean agent system Overall explanation OBJ 3.3 - Special suppression systems, like a clean agent system, use either a halocarbon agent or inert gas. When releases, the agents will displace the oxygen in the room with the inert gas and suffocates the fire. A fire suppression system is an engineered set of components that are designed to extinguish an accidental fire in a workplace or datacenter. A wet pipe system is the most basic type of fire suppression system, and it involved using a sprinkler system and pipes that always contain water in the pipes. A pre-action system minimizes the risk of accidental release from a wet pipe system. With a pre-action system, both a detector actuation like a smoke detector and a sprinkler must be tripped prior to water being released. Heating Ventilation and Air Conditioning (HVAC) units are responsible for maintaining the proper temperature and humidity within a datacenter.

Answer 25

VTP (VLAN Trunking Protocol) Overall explanation OBJ 2.2: The VLAN Trunking Protocol (VTP) allows a VLAN created on one switch to be propagated to other switches in a group of switches in a VTP domain. Spanning Tree Protocol (STP) is a Layer 2 protocol that runs on bridges and switches to ensure that you do not create loops when you have redundant paths in your network. Multiprotocol Label Switching is a routing technique in telecommunications networks that directs data from one node to the next based on short path labels rather than long network addresses, thus avoiding complex lookups in a routing table and speeding traffic flows. The Point-to-Point Tunneling Protocol is an obsolete method for implementing virtual private networks. MPLS, STP, and PPTP are not used to share VLAN information like VTP and the 802.1q standard do.

Answer 26

The bend radius of the cable has been exceeded Overall explanation OBJ 5.2: The most likely explanation for this issue is the coiled up the excess cable was wound too tightly and exceeded the bend radius for the cable. Bend radius is the measure of how sharply a cable can safely bend without causing damage by creating micro cracks on the glass fibers. By tightly coiling the cable, the cable may have broken or cracked the fiber connected to the transmit portion of the SFP. It is unlikely that the SFP failed since only the transmit portion is registering as weak. If you used the wrong type of cable (MTRJ vs. ST), you would not have been able to connect it to the SFP module as it wouldn't fit. Similarly, if you used an MMF instead of an SMF cable, you would not receive a weak connection but would instead get no connection.

Answer 27

Create an out-of-band management network Overall explanation OBJ 3.5: You should create an out-of-band management network using an SSH (console) connection to the router. Telnet and HTTP are not encrypted channels and should not be used for remote connections. Using a modem is also a bad security practice since these are subject to war dialing and provide slow connectivity speeds.

Answer 28

Switch racks are primarily used for housing network switches and routers, allowing for better airflow management specific to these devices, while server racks are designed for denser configurations. Overall explanation OBJ 2.4 - Switch racks are designed to accommodate network switches and routers, focusing on airflow management that suits the operational requirements of these devices. Server racks are engineered to handle denser configurations that servers often necessitate due to their size and power requirements. Both server racks and switch racks can utilize the data center's cooling systems. Built-in cooling within racks is not exclusively a feature of server racks. EMI shielding is a consideration for all types of racks housing electronic equipment, not just server racks, depending on the data center's design and security requirements. Security features, including biometric locks, can be implemented on any rack type depending on the security policy of the data center and not specifically more critical to switch racks.

Answer 29

In-band management utilizes wireless communication for device management, while out-of-band management relies on wired connections Overall explanation OBJ 3.5 - In-band management uses dedicated interfaces for management, distinct from regular data traffic. Out-of-band management doesn't require physical access, both can use wired or wireless connections and both methods apply to devices within the network perimeter.

Answer 30

Site survey report Overall explanation OBJ 3.1: A wireless site survey report will usually take the form of a floorplan with a color-coded series of rings on it to show the signal strengths of wireless network signals in various locations. This is often referred to as a "heat map" by technicians. The technician performing the survey will document this information and use it as a tool during troubleshooting and optimization efforts concerning the wireless coverage in a specific office or building. A logical network diagram illustrates the flow of information through a network and shows how devices communicate with each other. It typically includes elements like subnets, network objects and devices, routing protocols and domains, voice gateways, traffic flow, and network segments. Network baselining is the act of measuring and rating the performance of a network in real-time situations. Providing a network baseline requires testing and reporting of the physical connectivity, normal network utilization, protocol usage, peak network utilization, and average throughput of the network usage. A network audit entails collecting data, identifying threats and areas of weakness, and compiling a formal audit report. This report is then sent on to network administrators and other relevant parties.

Answer 31

Add a rule to the ACL to allow traffic on ports 53, 80, and 443 Overall explanation OBJ 4.3: The Hypertext Transfer Protocol (HTTP) uses port 80 and is an application layer protocol for distributed, collaborative, hypermedia information systems using unencrypted data transfer. Port 443 is for Hypertext Transfer Protocol Secure (HTTPS), the secure version of HTTP that is more widely used in modern webservers. The Domain Name System (DNS) uses port 53 and is a hierarchical and decentralized naming system for computers, services, or other resources connected to the Internet or a private network. If the outbound port 80 (and 443 for its secure version) is not open, then users will not be able to connect to a remote webserver. If the outbound port 443 is not open, the users will not be able to connect to a secure remote webserver, which is the more widely used. If the outbound port 53 is not open, then the users will be unable to conduct a DNS name resolution and determine the IP address of the given webserver based on its domain name. Port 22 is used for SSH/SCP/SFTP. Port 143 is used for IMAP. Port 139 and 445 are used for SMB. Port 389 is used for LDAP. Port 110 is used for POP3.

Answer 32

Brute force occurs within 11,000 combinations Overall explanation OBJ 2.3: The most prominent attack against WPS enabled wireless networks involves brute-forcing the 8-digit PIN that client uses to enroll their devices without knowing the pre-shared key. WPS checks each half of the PIN individually, reducing the number of possible combinations from a maximum of 100,000,000 to only 11,000. This only takes a few minutes to crack on most modern computers, as long as the WAP doesn't have a lockout after a certain number of failures. The lockout mechanism may also be triggered based on the client's MAC, so you can often spoof MAC to bypass this defense.

Answer 33

Least privilege Overall explanation OBJ 4.1: Least privilege is the concept and practice of restricting access rights for users, accounts, and computing processes to only those resources absolutely required to perform routine, legitimate activities. Privilege itself refers to the authorization to bypass certain security restraints. Zero-trust is a security framework that requires all users, whether in or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. Defense in Depth is an approach to cybersecurity in which a series of defensive mechanisms are layered in order to protect valuable data and information. An acceptable use policy (AUP) is a set of rules applied by the owner, creator, or administrator of a network, website, or service, that restrict the ways in which the network, website, or system may be used and sets guidelines as to how it should be used.

Answer 34

514 Overall explanation OBJ 1.4: System Logging Protocol (Syslog) uses port 514, and is a way network devices, clients, and servers can use a standard message format to communicate with a logging server. It was designed specifically to make it easy to monitor network devices. Devices can use a Syslog agent to send out notification messages under a wide range of specific conditions. Server Message Block (SMB) uses ports 139 and 445, and is a network file sharing protocol that runs on top of the NetBIOS architecture in Windows environments. SQLnet uses ports 1521, and is a relational database management system developed by Oracle that is fully compatible with the structured query language (SQL). The Simple Network Management Protocol (SNMP) uses ports 161 and 162, and it is a networking protocol used for the management and monitoring of network-connected devices in Internet Protocol networks.

Answer 35

OTDR (Optical Time Domain Reflectometer) Overall explanation OBJ 5.2: An Optical Time Domain Reflectometer (OTDR) is used by organizations to certify the performance of new fiber optics links and detect problems with existing fiber links. An OTDR can identify if a fiber cable is broken and provide an approximate location for the break in meters or feet. A fiber light meter, also known as an optical power meter, is used to measure the power in an optical signal over a fiber optic cable. A fiber light meter could be used to test if the cable is broken, but it would not be able to determine where the break in the fiber cable is located. A tone generator is used with a toner probe to accurately identify the location of a cable pair or conductor within a wiring bundle, cross-connection point, or at the remote end. A tone generator is used with copper cables, not fiber optic cables. A media converter is a layer 1 networking device that connects two different media types, such as a copper twisted pair cable and a fiber optic cable.

Answer 36

NAC (Network Access Control) Overall explanation OBJ 4.3: Network Access Control (NAC) is an approach to computer security that attempts to unify endpoint security technology (such as anti-virus, host intrusion prevention, and vulnerability assessment), user or system authentication, and network security enforcement. When a remote workstation connects to the network, NAC will place it into a segmented portion of the network (sandbox), scan it for malware and validate its security controls, and then based on the results of those scans, either connect it to the company’s networks or place the workstation into a separate quarantined portion of the network for further remediation. An access control list (ACL) is a network traffic filter that can control incoming or outgoing traffic. An ACL alone would not have prevented this issue. MAC Filtering refers to a security access control method whereby the MAC address assigned to each network card is used to determine access to the network. MAC filtering operates at layer 2 and is easy to bypass. Sender Policy Framework (SPF) is an email authentication method designed to detect forging sender addresses during email delivery.

Answer 37

Link-state advertisements Overall explanation OBJ 2.1 - OSPF uses link-state advertisements (LSAs) to exchange routing information between routers, ensuring accurate and consistent routing tables across the network. Distance-vector updates are used by protocols like RIP, not OSPF. Path vector protocols describe BGP, which is used for routing between autonomous systems. Static route redistribution allows static routes to be shared with dynamic routing protocols but is not a mechanism specific to OSPF.

Answer 38

1 Overall explanation OBJ 3.1 - The severity levels range from zero to seven, with zero being the most severe and seven being the least severe. Level 0 is used for an emergency and is considered the most severe condition because the system has become unstable. Level 1 is used for an alert condition and means that there is a condition that should be corrected immediately. Level 2 is used for a critical condition, and it means that there is a failure in the system’s primary application and it requires immediate attention. Level 3 is used for an error condition, and it means that something is happening to the system that is preventing the proper function. Level 4 is used for warning conditions and it may indicate that an error will occur if action is not taken soon. Level 5 is used for notice conditions and it means that the events are unusual, but they are not error conditions. Level 6 is used for information conditions and it is a normal operational message that requires no action. Level 7 is used for debugging conditions and is just information that is useful to developers as they are debugging their networks and applications.

Answer 39

Access Layer Overall explanation OBJ 1.6 - Configuring VLANs for network segmentation primarily falls under the responsibility of the access layer, which connects end devices to the network and handles user access control. The application layer is in the OSI model, not the 3 tier model and it deals with software applications and protocols, not network infrastructure configuration like VLANs. While the distribution layer aggregates data and provides routing between VLANs, the task of configuring VLANs itself is primarily handled at the access layer. The core layer is responsible for high-speed packet switching and inter-network routing, not VLAN configuration.

Answer 40

Something you can locate Overall explanation OBJ 4.1: "Something you can locate" is not considered a separate factor in MFA. "Something you know" refers to knowledge-based authentication, such as passwords, which is a type of MFA. "Something you have" involves possession-based authentication, like smart cards, which is another type of MFA. "Something you are" utilizes biometric characteristics, like fingerprints, which is also a type of MFA.

Answer 41

993 Overall explanation OBJ 1.4: Internet Message Access Protocol (IMAP) over SSL uses port 993, and is an Internet standard protocol used by email clients to retrieve email messages from a mail server over a TCP/IP connection. Internet Message Access Protocol (IMAP) uses port 143 and is an Internet standard protocol used by email clients to retrieve email messages from a mail server over a TCP/IP connection. Post Office Protocol version 3 over SSL (POP3 over SSL) uses port 995 and is an application-layer Internet standard protocol used by e-mail clients to retrieve e-mail from a mail server that operates using an SSL or TLS encrypted tunnel. Post Office Protocol version 3 (POP3) uses port 110 and is an application-layer Internet standard protocol used by e-mail clients to retrieve e-mail from a mail server.

Answer 42

UPS Overall explanation OBJ 2.4 - An uninterruptible power supply (UPS) is a battery system that can supply short-term power to electrical units. Since all the devices are restarting simultaneously, it is likely due to a power outage. In this case, a UPS would continue to supply power to the network equipment during outages or blackouts. An uninterruptible power supply (UPS) is a battery system that can supply short-term power to electrical units. Since all the devices are restarting simultaneously, it is likely due to a power outage. In this case, a UPS would continue to supply power to the network equipment during outages or blackouts. An uninterruptible power supply (UPS) is a battery system that can supply short-term power to electrical units. Since all the devices are restarting simultaneously, it is likely due to a power outage. In this case, a UPS would continue to supply power to the network equipment during outages or blackouts. An uninterruptible power supply (UPS) is a battery system that can supply short-term power to electrical units. Since all the devices are restarting simultaneously, it is likely due to a power outage. In this case, a UPS would continue to supply power to the network equipment during outages or blackouts.

Answer 43

Layer 1 Overall explanation OBJ 1.1: Data is transmitted at Layers 5, 6, and 7 of the OSI model. At Layer 4, the data is encapsulated into segments. At layer 3, the segments are encapsulated into packets. At layer 2, the packets are encapsulated into frames. At layer 1, the frames are encapsulated into bits.

Answer 44

Band steering Overall explanation OBJ 2.3 - Band steering directs devices to connect to the less congested frequency band, optimizing the performance of the wireless network by balancing the load between the 2.4 GHz and 5 GHz bands. Channel bonding combines multiple channels to increase bandwidth but does not direct devices to connect to specific frequency bands. Beamforming focuses wireless signals in specific directions to improve signal strength but does not manage frequency band selection. QoS prioritizes certain types of traffic over others but does not specifically manage the distribution of devices across frequency bands.

Answer 45

Default Routes Routing Tables Overall explanation OBJ 5.3 - Default Routes should be examined to ensure that they direct traffic efficiently for destinations not found in the routing table, possibly adjusting them to take advantage of more direct routes. The routing table should also be reviewed for accuracy and optimization to ensure that all routes are the most efficient paths to their destinations. QoS settings prioritize traffic but do not influence route paths. DHCP leases pertain to IP address assignment durations and do not affect routing. VLAN assignments segment networks but are unrelated to the routing paths between different network segments.

Answer 46

Use the same SSIDs on different channels and AP isolation Overall explanation OBJ 2.3: For users to be able to seamlessly migrate between the two buildings, both Access Points (AP) must use the same SSIDs. To prevent frequency interference, though, each device needs to select a different and non-overlapping channel to utilize. Finally, the AP isolation should be enabled. Access Point (AP) isolation is a technique for preventing mobile devices connected to an AP from communicating directly with each other.

Answer 47

Check if the wavelength specifications of the transceivers on both ends match Overall explanation OBJ 5.2 - The mismatch in wavelength specifications between transceivers at either end of a fiber optic link can prevent the connection from being established. Ensuring compatibility in terms of speed, type (single-mode/multimode), and wavelength is critical for successful communication. Redesigning the network topology to reduce distance is unnecessary if the initial setup meets the operational range of the deployed fiber and transceivers. Replacing the fiber optic cables without identifying the root cause, such as a transceiver mismatch, may not resolve the issue. Verifying the IP address configuration is crucial for network communication but would not affect the physical layer's ability to establish a connection.

Answer 48

NTS (Network Time Security) Overall explanation OBJ 3.4 - Network Time Security (NTS) provides the necessary security enhancements to the NTP process, protecting against tampering and man-in-the-middle attacks by ensuring the integrity and authenticity of the time synchronization data. Precision Time Protocol (PTP) focuses on precision rather than security and may not protect against the mentioned vulnerabilities. Network Time Protocol (NTP) is widely used for time synchronization, it does not inherently provide protection against tampering or on-path attacks without additional security measures. Manual time setting is impractical for large networks, does not scale, and cannot ensure continuous synchronization over time.

Answer 49

110 Overall explanation OBJ 1.4: Post Office Protocol version 3 (POP3) uses port 110 and is an application-layer Internet standard protocol used by e-mail clients to retrieve e-mail from a mail server. Post Office Protocol version 3 over SSL (POP3 over SSL) uses port 995 and is an application-layer Internet standard protocol used by e-mail clients to retrieve e-mail from a mail server that operates using an SSL or TLS encrypted tunnel. Internet Message Access Protocol (IMAP) uses port 143 and is an Internet standard protocol used by email clients to retrieve email messages from a mail server over a TCP/IP connection. Internet Message Access Protocol (IMAP) over SSL uses port 993 and is an Internet standard protocol used by email clients to retrieve email messages from a mail server over a TCP/IP connection.

Answer 50

389 Overall explanation OBJ 1.4: LDAP uses port 389 by default. LDAP (Lightweight Directory Access Protocol) Standard for accessing and updating information in an X.500-style network resource directory. Unless secure communications are used, LDAP is vulnerable to packet sniffing and Man-in-the-Middle attacks. It is also usually necessary to configure user permissions on the directory. LDAP version 3 supports simple authentication or Simple Authentication and Security Layer, which integrates it with Kerberos or TLS.

Answer 51

NAT (Network Address Translation) Overall explanation OBJ 2.1: Network address translation (NAT) is a method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. Using NAT, you can have the internal IP address of each workstation mapped to a public IP address or port when it crosses the router to access the WAN. A DMZ or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external-facing services to an untrusted, usually larger, network such as the Internet. A virtual private network extends a private network across a public network and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. Open Shortest Path First (OSPF) is a link-state routing protocol that was developed for IP networks and is based on the Shortest Path First (SPF) algorithm. OSPF is an Interior Gateway Protocol (IGP).

Answer 52

Enable port mirroring on the switch, copying all traffic from the uplink port to a dedicated port that has a network analyzer connected. Overall explanation OBJ 3.2 - Enabling port mirroring on the switch allows you to send a copy of all traffic from the uplink port to another port where a network analyzer is connected. This method enables you to monitor and analyze network traffic in real-time without affecting the network's performance, making it an effective tool for identifying unauthorized use of bandwidth-intensive services. Setting up a DHCP server to assign IP addresses helps manage network devices but does not directly facilitate the monitoring of specific types of traffic. Implementing QoS rules can prioritize traffic but does not provide the means to analyze traffic to identify unauthorized streaming services. Configuring a VLAN specifically for this purpose does not provide a direct method for analyzing traffic; it primarily segregates network traffic.

Answer 53

MX (Mail Exchange) Overall explanation OBJ 3.4 - The Mail Exchange (MX) record specifies mail servers responsible for receiving email on behalf of a domain. When someone sends an email to an address within a domain, the MX record directs the email to the specified mail servers. By configuring these MX records, Norah can direct incoming email traffic to the designated mail servers, ensuring efficient email delivery within the organization. A Canonical Name (CNAME) is for aliasing one domain name to another, AAAA is used to map a domain name to an IPv6 address, a Name Server (NS) is for identifying authoritative name servers.

Answer 54

The operating system details of the target server. Overall explanation OBJ 5.5 - The -O flag in Nmap is used for operating system detection. This flag tells Nmap to use a series of tests to guess the operating system running on the target machine. Showing IP addresses and the protocols they use would require a different Nmap scan, such as a simple scan without specific flags for operating system detection. The -sV flag is used to determine the versions of services running on open ports, not -O. Listing open ports is the default behavior of Nmap without specifying any flags for operating system detection.

Answer 55

Firewall Overall explanation OBJ 2.4: You should FIRST configure the firewall since the firewall is installed at the network's external boundary (perimeter). By allowing the VPN connection through the firewall, the two networks can be connected and function as a single intranet (internal network). After configuring the firewall, you will need to verify the router is properly configured to route traffic between the two sites using the site-to-site VPN connection. A modem modulates and demodulates electrical signals sent through phone lines, coaxial cables, or other types of wiring. A layer 2 switch is a type of network switch or device that works on the data link layer (OSI Layer 2) and utilizes MAC Address to determine the path through where the frames are to be forwarded. It uses hardware-based switching techniques to connect and transmit data in a local area network (LAN).

Answer 56

Cyclic Redundancy Check Overall explanation OBJ 5.2: A Cyclic Redundancy Check detects errors by calculating a checksum on data packets, ideal for detecting corruption. NIC Configuration deals with settings like speed and duplex but doesn't detect data corruption. DNS Resolution resolves domain names to IP addresses but doesn't check data integrity. IP Address Allocation assigns IP addresses but doesn't verify data integrity.

Answer 57

/26 Overall explanation OBJ 1.7: Since the company provided you with a Class C range of IP addresses, you begin with a /24 network (256 total IPs, 254 usable IPs) for this question. Remember, for each subnet you will create you need to add the number of clients plus one IP for the network ID and a second IP for the broadcast address. The Sales department needs 55 usable IPs, so you should have used a /26 (62 usable IPs, 64 total IPs). The Finance department needs 32 usable IPs, so you should have used a /26 (62 usable IPs, 64 total IPs). The HR department needs 25 usable IPs, so you should have used a /27 (30 usable IPs, 32 total IPs). The IT department needs 13 usable IPs, so you should have used a /28 (14 usable IPs, 16 total IPs). The Marketing department needs 11 usable IPs, so you should have used a /28 (14 usable IPs, 16 total IPs). By adding up these subnets, you have used up 192 of the 256 possible IP addresses from the originally assigned Class C range. To calculate this, you would calculate 256 – 64 – 64 – 32 – 16 – 16, and you get a total of 64 IPs left (or a /26). This gives us the answer for the unused portion of the IP space for this question.

Answer 58

To perform a realistic simulation of disaster scenarios to confirm the effectiveness of the DR and BCP. Overall explanation OBJ 3.3 - A person would advocate for conducting validation tests to perform realistic simulations of disaster scenarios, thereby confirming the effectiveness of the updated disaster recovery and business continuity plans. Validation tests are designed to mimic actual adverse events or conditions that can disrupt operations, allowing the organization to assess and refine their response strategies, recovery procedures, and continuity plans in a controlled yet realistic environment. Conducting a comprehensive audit of the company's compliance with international data protection regulations is crucial for legal and regulatory compliance but does not simulate disaster scenarios or test the operational effectiveness of DR and BCP. Assessing the physical security measures of the company's data centers and backup sites is important for overall security but does not directly test the practical effectiveness of DR and BCP in disaster scenarios. Providing hands-on technical training for the IT staff on new software and hardware tools is beneficial for skill development but does not validate the overall effectiveness of the disaster recovery and business continuity plans.

Answer 59

NAT64 Overall explanation OBJ 1.8 - NAT64 allows IPv6-only devices to access IPv4 resources by translating IPv6 packets to IPv4 and vice versa. DHCPv6 is used for IPv6 address allocation but doesn't facilitate communication between IPv6 and IPv4 networks. ICMPv6 is a protocol used for error reporting and diagnostics in IPv6 networks but doesn't provide IPv4-IPv6 translation. OSPFv3 is a routing protocol for IPv6 networks and doesn't address the IPv4-IPv6 interoperability challenge.

Answer 60

South Overall explanation OBJ 1.6: North-South traffic or communication refers to traffic that enters or leaves the data center from a system physically residing outside the datacenter. North traffic is traffic exiting the datacenter. South traffic is traffic entering the data center. In both cases, the data is exiting or entering the data center through a firewall or other network infrastructure boundary device, such as a router. East-West traffic or communication refers to data flow within a datacenter. For example, if we are using a spine and leaf architecture, any data flow between the various servers in the datacenter, even if it goes between different leaves, would be considered east-west traffic.

Answer 61

205.12.35.31 Overall explanation OBJ 1.7: In classless subnets using variable length subnet mask (VLSM), the broadcast address is the last IP address associated within an assigned range. In this example, the CIDR notation is /27, so each subnet will contain 32 IP addresses. Since the IP address provided is 205.12.35.26, the broadcast address will be 205.12.35.31.

Answer 62

Show interface Overall explanation OBJ 5.5 - To view detailed information about the status of a specific interface on a router, Jonathan should use the command "show interface." This command provides comprehensive details about the operational state of the interface, including its bandwidth, duplex mode, MAC address, IP address, input/output errors, and drops. show vlan, show config, and show power are commands used for different purposes, such as viewing VLAN information, configuration settings, and power supply status, respectively.

Answer 63

The new VLAN is not allowed on the trunk link Overall explanation OBJ 5.3 - If the new VLAN is not allowed on the trunk link, traffic from that VLAN cannot traverse the network to reach the router for internet access. Ensuring the trunk link is configured to allow the new VLAN resolves the issue. Incorrect subnet masks would affect local communication, not specifically internet access. If the DHCP server ran out of IP addresses, users would not receive any IP configuration. While the firewall could block internet access, it's less likely if the issue is isolated to a newly created VLAN.

Answer 64

A reverse zone Overall explanation OBJ 3.4 - Reverse zones are used in DNS to map IP addresses to domain names, which is essential for IP address management and troubleshooting by enabling reverse DNS lookups. This is precisely what Nancy aims to achieve. Stub zones contain only the necessary information to identify the authoritative DNS servers of a zone, aiding in DNS queries but not in mapping IP addresses to domain names. Forward zones map domain names to IP addresses. Secondary zones are copies of primary zones, used for load balancing and redundancy.

Answer 65

Jitter Overall explanation OBJ 5.4 - Jitter is a variation in the delay of received packets, with irregular arrival times causing intermittent disruptions such as freezes and delays. Packet loss refers to data packets being lost in transit, causing gaps in audio or video more severe than intermittent freezes or delays. Latency is the delay between the sending and receiving of data packets, it doesn't directly cause intermittent disruptions. Bandwidth congestion occurs when the network's capacity is exceeded, leading to slow data transmission or dropped packets that are less likely to result in intermittent disruptions.

Answer 66

DHCP redirect Overall explanation OBJ 4.3 - In general, captive portals are implemented by using an HTTP redirect, an ICMP redirect, or a DNS redirect. A captive portal is a web page accessed with a web browser that is displayed to newly connected users of a wireless network before they are granted broader access to network resources. Captive portals are commonly used to present a landing or log-in page which may require authentication, payment, acceptance of an end-user license agreement, acceptable use policy, survey completion, or other information prior to allowing access to the network and its resources.

Practice Test #1 Flashcards

(90 cards)