QUESTION 141
An employee plugs a personal laptop into a network jack in a secured IDF but cannot obtain a network address. A network administrator then plugs a company-issued laptop into this same jack and successfully gains access. Which of the following security features best explains this situation?
A. Untrusted zone
B. MAC filtering
C. ACL
D. Screened subnet
Correct Answer: B
QUESTION 142
Which of the following ports is associated with securely managing identity across a Windows domain?
A. 68
B. 389
C. 445
D. 636
Correct Answer: D
QUESTION 143
Several users in an organization report connectivity issues and lag during a video meeting. The network administrator performs a tcpdump and observes increased retransmissions for other non-video applications on the network Which of the following symptoms describes the users’ reported issues?
A. Latency
B. Packet loss
C. Bottlenecking
D. Jitter
Correct Answer: B
QUESTION 144
A company’s servers experience a malware attack, which causes a network outage. The source of the attack is traced back to an employee’s infected laptop. Which of the following solutions should a network technician implement to mitigate this attack?
A. IPS
B. NAC
C. MFA
D. SSL
Correct Answer: B
QUESTION 145
A company lost the ability to connect to the internet at a satellite office. Logging tools capture the last recorded event as a login from the router’s default credentials. The network administrator is unable to access the router. Which of the following should the administrator do to prevent this issue in the future?
A. Change the name of the router.
B. Document the configuration of the router.
C. Modify the local username and password of the router.
D. Install a secondary router.
Correct Answer: C
QUESTION 146
A security team updates a web server to require https:// in the URL. Although the IP address does not change, users report that they are unable to reach the site. Which of the following should the security team do to allow users to reach the server again?
A. Configure the switchport with the correct VLAN.
B. Configure inbound firewall rules to allow traffic to port 443.
C. Configure the router to include the subnet of the server.
D. Configure the server with a default route.
Correct Answer: B
QUESTION 147
Which of the following troubleshooting steps provides a change advisory board with the information needed to make a decision?
A. Identify the problem.
B. Develop a theory of probable cause.
C. Test the theory to determine cause.
D. Establish a plan of action.
Correct Answer: D
QUESTION 148
A network technician is setting up a server in an internet-accessible, screened subnet that is mimicking a production server. Which of the following has the technician created?
A. IDS
B. Firewall
C. Rogue device
D. Honeypot
Correct Answer: D
QUESTION 149
Which of the following physical installation factors is the most important when a network switch is installed in a sealed enclosure?
A. Fire suppression
B. Power budget
C. Temperature
D. Humidity
Correct Answer: C
QUESTION 150
A customer wants to segment the local network into eight sections with 30 devices each. A junior network technician needs to select the appropriate subnet mask for the customer’s chosen Class C network. Which of the following meets the requirement?
A. /25
B. /26
C. /27
D. /28
Correct Answer: B
QUESTION 151
Which of the following algorithms does OSPF use to calculate the shortest path between routers?
A. Bellman-Ford
B. Dijkstra’s
C. Best path
D. Diffusing update
Correct Answer: B
QUESTION 152
A global company has acquired a local company. The companies are geographically separate. The fully utilized IP address ranges for the two companies are as follows:
1. Global company:10.0.0.0/16
2. Local company: 10.0.0.0/24
Which of the following can the network engineer do to quickly connect the two companies and minimize user disruption?
A. Assign static routing to advertise the local company’s network.
B. Assign an overlapping IP address range to both companies.
C. Assign a new IP address range to the local company.
D. Assign a NAT range to the local company.
Correct Answer: D
QUESTION 153
While analyzing network access logs, a network administrator determines that a user was able to retrieve restricted data. Which of the following would have prevented the user from gaining unauthorized access?
A. Separation of duties
B. Microsegmentation
C. Multifactor authentication
D. Principle of least privilege
Correct Answer: D
QUESTION 154
Which of the following would most likely be used to implement encryption in transit when using HTTPS?
A. SSH
B. TLS
C. SCADA
D. RADIUS
Correct Answer: B
QUESTION 155
Which of the following public cloud features allows customers to make use of the same physical resources?
A. Multitenancy
B. Scalability
C. Elasticity
D. Geo-redundancy
Correct Answer: A
QUESTION 156
Which of the following should be implemented to add an additional layer of security between a corporate network and network management interfaces?
A. Jump box
B. Console server
C. API interface
D. In-band management
Correct Answer: A
QUESTION 157
A company is setting up its network to assign IP addresses to the sales department with 200 hosts. Which of the following subnet masks should the company use?
A. 255.0.0.0
B. 255.255.0.0
C. 255.255.240.0
D. 255.255.255.0
Correct Answer: D
QUESTION 158
A network administrator is conducting an assessment and finds network devices that do not meet standards. Which of the following configurations is considered a set of rules that devices should adhere to?
A. Production
B. Backup
C. Candidate
D. Golden
Correct Answer: D
QUESTION 159
Which of the following are benefits for a corporation that is implementing an IPAM solution?(Select two).
A. Simplified network resource administration
B. Ability to streamline patches and bug fixes
C. Centralized repository for accurate records
D. Change management compliance
E. Increased warranty support
F. Improved accuracy of physical diagrams
Correct Answer: AC
QUESTION 160
A hotel wants to present a welcome page that includes an acceptable use policy for guests who are connecting to a wireless network. Which of the following should the hotel use?
A. Proxy server
B. Captive portal
C. CDN
D. NAC
Correct Answer: B