21
b. 153.101.24.3
c. ::9F53
d. FE80::32:1CA3:B0E2
e. D0:00:00:00
41. Which of the following services would be most important to disable on a
Windows workstation?
a. SSH
b. DHCP
c. Telnet
d. FTP
e. RDP
42. It’s Friday night, and you have just settled in with some hot cocoa and
popcorn to watch one of your favorite movies on Netflix. Five minutes into
the movie, you realize you’re getting more stressed than relaxed, and then
you realize the problem is that the movie keeps lagging, buffering, and
skipping. What transmission flaw is probably the source of the problem?
a. Crosstalk
b. Jitter
22
c. EMI
d. Latency
e. Attenuation
43. A SIP trunk would most likely work in conjunction with which device?
a. Wireless controller
b. VoIP gateway
c. NGFW
d. VPN concentrator
e. Satellite dish
44. Which technology can SIP trunking most adequately replace?
a. DMVPN
b. IDS
c. T1
d. PRI
e. DSL
45. Your network manager has purchased a dozen new, dual-band access points
and all are configured to use the new 802.11ac standard on the 5-GHz band.
23
These access points will be backward-compatible with older access points
that run which of the following standards? Choose all that apply.
a. 802.11g
b. 802.11n
c. 802.11b
d. Bluetooth
e. None of the above.
46. You suspect that a machine on your network with the host name PRTSRV is
issuing excessive broadcast traffic on your network. What command can you
use to determine this host’s IP address?
a. netstat PRTSRV
b. ipconfig PRTSRV
c. nslookup PRTSRV
d. ifconfig PRTSRV
e. iptables PRTSRV
47. You’re installing a network management system on your network and need
to install software on various devices. What software must be installed on a
managed device, such as a router?
24
a. SIEM
b. OID
c. NMS
d. Agent
e. Syslog
48. You work for a small ISP. Several of your customers have called to complain
about slow responses from a popular website. You suspect that network
congestion is at fault. Which TCP/IP utility would help you determine where
the congestion is occurring?
a. FTP
b. Nslookup
c. Arp
d. Tracert
e. Telnet
49. You are a network administrator for a WAN that connects two regional
insurance company officesthe main office and a satellite officeto each
other by a T3. The main office is also connected to the Internet using a T3.
This T3 provides Internet access for both offices. To ensure that your private
network is not compromised by unauthorized access through the Internet
25
connection, you install a firewall between the main office and the Internet.
Shortly thereafter, users in your satellite office complain that they cannot
access the file server in the main office, but users in the main office can still
access the Internet. What configurations should you check? Choose two.
a. Whether the firewall has been configured to run in promiscuous mode
b. Whether the firewall is placed in the appropriate location on the network
c. Whether the firewall has been configured to allow access from IP
addresses in the satellite office
d. Whether the firewall has been configured to receive and transmit UDP-
based packets
e. Whether the firewall has been configured to allow Internet access over the
main office’s T3
Answer:
50. In IPv6, which of the following is the loopback address?
a. 1.0.0.1
b. 127::1
c. FE80::1
d. ::1
26
e. 127.0.0.1
51. In the process of troubleshooting an intermittent performance problem with
your network’s Internet connection, you attempt to run a tracert test to
microsoft.com. The tracert response displays the first 12 hops in the route,
but then presents several “Request timed out” messages in a row. What is the
most likely reason for this?
a. Your network’s ISP is experiencing connectivity problems.
b. Microsoft’s network is bounded by firewalls that do not accept incoming
ICMP traffic.
c. The Internet backbone is experiencing traffic congestion.
d. Your client’s TCP/IP service limits the tracert command to a maximum of
12 hops.
e. Your IP gateway failed while you were attempting the tracert test.
52. You are setting up a new Windows 10 client to connect with your LAN,
which relies on DHCP. Which of the following must you do to ensure that the
client obtains correct TCP/IP information via DHCP?
a. Make certain the client’s computer name and host name are identical.
b. Enter the client’s MAC address in the DHCP server’s ARP table.
27
c. Enter the DHCP server address in the Windows TCP/IP configuration.
d. Nothing; in Windows 10, the DHCP option is selected by default.
e. Enter a default gateway address in the Windows TCP/IP configuration.
53. Due to popular demand from employees who need to roam from one floor of
your office building to another, you are expanding your wireless network.
You want to ensure that mobile users enjoy uninterrupted network
connectivity without having to reconfigure their workstations’ wireless
network connection settings as they travel throughout the office space.
Which of the following variables must you configure on your new access
points to match the settings on existing access points?
a. Administrator password
b. Scanning rate
c. SSID
d. IP address
e. Signal strength
54. You have installed a protocol analyzer on your laptop and connected the
laptop to a switch on your network’s backbone. You want to monitor all
traffic on a specific VLAN. Which feature must you configure on the switch
to make this work?
28
a. Trunking
b. Port mirroring
c. Looping
d. Spanning Tree Protocol
e. Caching
55. Which of the following does not accurately describe TACACS+ in
comparison to RADIUS?
a. TACACS+ relies on TCP, not UDP, at the Transport layer.
b. TACACS+ is typically installed on a router or switch, rather than on a
server.
c. TACACS+ encrypts all information transmitted for AAA rather than just
the password.
d. TACACS+ was developed for proprietary use on Cisco products.
e. TACACS+ operates as a software application on a remote access server.
56. You are part of a team participating in a posture assessment of your
company’s LAN. Which of the following tools or strategies will help you gain
a broad understanding of your network’s security vulnerabilities?
a. MIB
29
b. War driving
c. Nmap
d. DHCP snooping
e. CCMP
57. Which of the following devices separates broadcast domains?
a. Router
b. Switch
c. Bridge
d. Repeater
e. Hub
58. About a year ago, you purchased and installed a new router at one of your
company’s satellite offices, and you have had nothing but problems with the
router since. Today you called the vendor for the third time to have them
send a technician to repair the router. They estimate the repair will be
completed by the end of business tomorrow. In the meantime, you have
decided that you would prefer to replace the router the next time it fails.
What factor should you carefully investigate when shopping for a
replacement so you won’t face this same scenario with the next router?
a. MTTR
30
b. UPS
c. MTBF
d. SLA
e. MIB
59. You have just returned from a business conference and you’re anxious to
catch up on some projects. First thing in the morning, you unpack your
laptop and get to work. Thirty minutes later, your boss calls and asks why
you’re late to the morning’s staff meeting. You know the weekly meeting was
scheduled into your calendar on your computer and the reminder has
worked consistently for months. What is the most likely reason your
computer did not remind you of your meeting?
a. Windows was unable to connect to the network.
b. Windows has registered the wrong time zone.
c. Windows is configured with an IP address that is the same as another host
on the network.
d. Windows is configured with the wrong default gateway.
e. Windows Firewall blocked the calendar app from communicating with the
network.
31
60. Which of the following figures reflects the type of physical topology most
likely to be used on a 1000Base-T network?
a.
[[Insert Figure D-Q60A here]]
b.
[[Insert Figure D-Q60B here]]
c.
[[Insert Figure D-Q60C here]]
d.
[[Insert Figure D-Q60D here]]
e.
[[Insert Figure D-Q60E here]]
61. Your study partner is trying to access the Internet on her laptop and it’s not
working. In the browser, you try to go to google.com, and it doesn’t work. In
a Command Prompt window, you ping google.com, and it doesn’t work. You
then ping 8.8.8.8, and it still doesn’t work. You try to ping the network’s
gateway, and it fails. You ping your own computer, which is logged onto the
same network, and it works. What is the most likely diagnosis of this
problem?
a. Exhausted DHCP scope
b. Incorrect DNS server
c. Incorrect gateway
d. Duplicate IP address
e. Incorrect netmask
62. You work for a small fashion design firm. Because of a video that recently
went viral, your company has received national recognition. Within a few
days, your web server crashes. What kind of attack most likely caused the
crash?
a. Phishing
b. Friendly DoS
c. Spoofing
d. Ransomware
e. Logic bomb
33
63. You have just installed Linux on an old laptop to bring it new life. Which of
the following applications will provide the most protection for the computer
when you connect it to the Internet?
a. Defender
b. ufw
c. tcpdump
d. iptables
e. Wireshark
64. You are the network administrator for a large university whose network
currently contains nearly 10,000 workstations, over 80 routers, 250 switches,
and 500 printers. You are researching a proposal to upgrade the routers and
switches on your network to primarily use multi-layer switches instead. At
the same time, you want to improve the management of your network
devices. Which of the following protocols will help automate network
management across all the new devices?
a. TFTP
b. SMTP
c. NTP
d. ICMP
e. SNMP
65. Which of the following devices operate only at the Physical layer of the OSI
model? Choose two.
a. Hub
b. Switch
c. Router
d. Bridge
e. Repeater
66. While making some configuration changes to a client’s network, you need to
connect your laptop to a router’s console port. Which of the following
connector types might be used for this purpose, depending on the age of the
router? Choose two.
a. RJ-11
b. DB-9
c. MTRJ
d. RJ-45
e. F-type
35
67. You have connected to your bank’s home page. Its URL begins with https://.
Based on this information, what type of security can you assume the bank
employs for clients receiving and transmitting data to and from its web
server?
a. Kerberos
b. TLS
c. IPsec
d. L2TP
e. Packet-filtering firewall
68. Which of the following routing protocols has the poorest convergence time?
a. EIGRP
b. RIP
c. BGP
d. OSPF
e. ISIS
69. You need to gather some information about the traffic being broadcast and
received on a Linux workstation. Unfortunately, you don’t have time to
install Wireshark. Which command can you use instead?
a. tcpdump
b. pathping
c. traceroute
d. dig
e. nslookup
70. To provide redundancy, you have set up three links from a critical server to
two redundant switches, both of which operate on the same subnet. Two
connections from the server go to one switch, and the third link connects the
other switch to the server. The server is running Windows Server 2016. What
feature should you configure on the server to make these redundant links
work together for load balancing and failover protection?
a. Port aggregation
b. NIC teaming
c. Bottleneck
d. Server cluster
e. Virtual IP address
71. A Windows workstation is configured to use DHCP, but cannot find a DHCP
server. You run ipconfig at the Command Prompt. Which of the following IP
addresses is most likely reported by Windows?