All practice questions

2237 questions

Question 1Question

A network administrator upgrades several core backbone links within an Open Shortest Path First (OSPF) routing domain from 1 Gbps to 10 Gbps. Despite the physical bandwidth upgrade, the core routers assign an identical metric cost of 1 to both the 1 Gbps and 10 Gbps interfaces, resulting in unwanted equal-cost multi-path (ECMP) load balancing across asymmetric links. Which configuration change must be applied to ensure OSPF correctly assigns a lower metric cost to the 10 Gbps interfaces?

Show answer & explanation

Answer: Increase the OSPF auto-cost reference bandwidth setting across all participating routers in the routing domain.

Answer

Increase the OSPF auto-cost reference bandwidth setting across all participating routers in the routing domain.
The correct answer highlights that default OSPF implementations use a reference bandwidth of 100 Mbps (10810^8 bps) to calculate link cost. As a result, both 1 Gbps and 10 Gbps interfaces evaluate to a cost less than 1, which rounds up to the minimum metric value of 1. Increasing the auto-cost reference bandwidth across all routers allows OSPF to assign distinct, lower cost metrics to faster links, resolving unwanted equal-cost load balancing.

Step-by-Step Solution

1
Analyze the default OSPF interface cost calculation formula.
Recognize that OSPF calculates cost as Cost=Reference BandwidthInterface Bandwidth\text{Cost} = \frac{\text{Reference Bandwidth}}{\text{Interface Bandwidth}}, where default reference bandwidth equals 100 Mbps (10810^8 bps).
For interfaces with bandwidth equal to or greater than 100 Mbps (such as 1 Gbps and 10 Gbps), the formula yields values less than 1, which are rounded up to the minimum metric integer of 1.
2
Determine how to restore metric differentiation for high-speed interfaces.
Adjust the auto-cost reference bandwidth parameter to a higher threshold (such as 100,000 Mbps or 100 Gbps).
With a 100,000 Mbps reference bandwidth, a 1 Gbps link has a metric cost of 100 (100,0001,000\frac{100,000}{1,000}), whereas a 10 Gbps link has a metric cost of 10 (100,00010,000\frac{100,000}{10,000}), successfully preferring the faster path.

Key Concept

OSPF Auto-Cost Reference Bandwidth Adjustment
Question 2Question

A client workstation on VLAN 20 (192.168.20.0/24192.168.20.0/24) broadcasts a DHCPDISCOVER message to obtain an IP configuration. The Layer 3 switch interface acting as the default gateway for VLAN 20 is configured with an IP helper address pointing to a centralized DHCP server at 10.0.99.510.0.99.5 on VLAN 99. Which of the following operations accurately describe how the relay agent processes and forwards this message? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The relay agent inserts the IP address of the VLAN 20 interface into the Gateway IP Address (giaddr) header field.; The relay agent converts the client broadcast frame into a unicast IP packet targeted to 10.0.99.510.0.99.5 using UDP port 67.

Answer

The relay agent populates the Gateway IP Address (giaddr) field with the IP address of its local receiving interface (VLAN 20 gateway) and encapsulates the client's broadcast into a unicast IP packet directed to the destination DHCP server using UDP port 67.
When a Layer 3 relay agent intercepts a broadcast DHCPDISCOVER message, it rewrites the packet payload by setting the Gateway IP Address (giaddr) field to its local client-facing interface address. It then converts the Layer 2 broadcast into a unicast IPv4 datagram and forwards it directly to the IP address specified in the helper configuration using UDP destination port 67.

Step-by-Step Solution

1
Analyze incoming broadcast and interface identification
The client issues a broadcast DHCPDISCOVER frame on VLAN 20. The Layer 3 relay agent receives this broadcast on its VLAN 20 SVI/interface.
Broadcast frames do not traverse Layer 3 boundaries natively, requiring the relay agent to intervene.
2
Modify the DHCP header giaddr field
The relay agent writes the IP address of the VLAN 20 interface into the giaddr (Gateway IP Address) field of the DHCP packet payload.
This informs the remote DHCP server which IP address pool/scope must be used for address assignment.
3
Encapsulate and forward as unicast UDP
The relay agent encapsulates the modified request into a unicast IPv4 packet with a destination address of 10.0.99.510.0.99.5 and destination UDP port 67.
Unicast packets can be routed across Layer 3 network boundaries to reach centralized servers.

Key Concept

DHCP Relay Agent Operational Mechanics and Packet Header Modification
Question 3Question

An enterprise network engineer is deploying redundant centralized DHCP servers (192.168.100.10192.168.100.10 and 192.168.100.11192.168.100.11) located in a dedicated management subnet. Workstations are partitioned across three client subnets (VLAN 20: 10.20.0.0/2410.20.0.0/24, VLAN 30: 10.30.0.0/2410.30.0.0/24, and VLAN 40: 10.40.0.0/2410.40.0.0/24) terminated on a Layer 3 core switch serving as their default gateway. Which TWO of the following statements correctly describe the technical mechanics and configuration requirements for the Layer 3 switch when relaying DHCPDISCOVER broadcast requests to the server pool?

Select all that apply

Show answer & explanation

Answer: The Layer 3 switch inserts the IP address of the ingress Switch Virtual Interface (SVI) into the Gateway IP Address (giaddrgiaddr) field of the DHCP message header before forwarding.; The Layer 3 switch converts incoming client UDP broadcast packets received on destination port 67 into unicast packets directed to both configured DHCP server IP addresses on destination port 67.

Answer

The correct statements are that the Layer 3 switch inserts the ingress SVI IP address into the Gateway IP Address (giaddrgiaddr) header field, and that it converts incoming client UDP broadcasts on port 67 into unicast UDP packets sent to both DHCP servers on destination port 67.
The correct statements accurately reflect standard DHCP relay behavior per RFC 2131: the relay agent fills the giaddrgiaddr field with the receiving interface's IP address to inform the central server of the client's subnet, and it translates client broadcast traffic into targeted unicast UDP packets sent to port 67 on all configured server endpoints.

Step-by-Step Solution

1
Analyze client broadcast reception at Layer 3 interface boundary.
Client broadcast DHCPDISCOVER packets sent to destination 255.255.255.255255.255.255.255 on UDP port 67 arrive at the SVI for VLAN 20 (10.20.0.110.20.0.1).
Layer 3 switches block Layer 2/3 broadcast frames by default unless configured with a relay agent service.
2
Evaluate header modification mechanics performed by the DHCP relay agent.
The relay agent populates giaddr=10.20.0.1giaddr = 10.20.0.1 using its receiving interface IP address.
The centralized DHCP server uses the giaddrgiaddr value to determine which pool scope (10.20.0.0/2410.20.0.0/24) to select for address allocation.
3
Evaluate transport and network layer packet forwarding to destination servers.
The Layer 3 switch sends unicast UDP packets targeting 192.168.100.10192.168.100.10 and 192.168.100.11192.168.100.11 using destination UDP port 67.
DHCP servers listen exclusively on UDP port 67; altering the destination port to 68 or failing to unicast to both configured helper targets breaks multi-server deployment.

Key Concept

DHCP Relay Agent Operational Mechanics and Header Modifications
Question 4Question

A network administrator is configuring dynamic IP addressing and name resolution services across an enterprise network. The organization requires client hostnames to be automatically registered in the internal DNS zone whenever a host receives an IPv4 address lease from the centralized DHCP server. Which TWO of the following steps must be configured to enable dynamic DNS (DDNS) updates between the DHCP and DNS servers?

Select all that apply

Show answer & explanation

Answer: Configure the DHCP server with authentication credentials to send dynamic update requests to the authoritative DNS server on behalf of clients; Configure the primary DNS zone properties to permit secure dynamic updates from the authorized DHCP server

Answer

To establish dynamic DNS (DDNS) integration, the administrator must permit secure dynamic updates on the primary DNS zone and configure the DHCP server with credentials authorized to send update requests to the authoritative DNS server on behalf of DHCP clients.
Dynamic DNS (DDNS) allows automatic updating of DNS database records when IP address leases are granted. For this to operate seamlessly, the primary DNS zone must be set to allow secure dynamic updates, and the DHCP server must be configured with authorized credentials to submit host (A) and pointer (PTR) record creation requests to the DNS server.

Step-by-Step Solution

1
Analyze how dynamic host resolution updates interact during DHCP lease allocation.
Identify that the DHCP server creates or updates Forward (A) and Reverse (PTR) DNS records when handing out leases.
Centralized DDNS offloads domain registration responsibilities from individual client endpoints to the DHCP infrastructure.
2
Determine the necessary permission settings on the DNS server.
Enable secure dynamic updates on the authoritative zone of the primary DNS server.
Authoritative DNS servers reject unauthenticated or unpermitted dynamic record update attempts by default.
3
Determine the necessary credentials on the DHCP server.
Supply the DHCP server with authentication credentials (e.g., TSIG key or account) authorized to modify DNS zone records.
The DNS server requires valid security context from the DHCP server to permit record creation and modifications.

Key Concept

Dynamic DNS (DDNS) Integration with DHCP Services
Estimated Time:1m 30s
Question 5Question

A network engineer is analyzing traffic traversing an enterprise Layer 3 switch configured for inter-VLAN routing. A client host on VLAN 10 sends a request to a destination server on VLAN 20. When the switch receives the frame on its VLAN 10 interface and routes it out through the VLAN 20 interface, which of the following best describes the de-encapsulation and re-encapsulation process performed by the switch?

Show answer & explanation

Answer: The switch strips the incoming Layer 2 Ethernet header and trailer, inspects the Layer 3 destination IP address to determine the egress interface, and encapsulates the IP packet into a new Layer 2 Ethernet frame with updated source and destination MAC addresses.

Answer

The switch strips the incoming Layer 2 Ethernet header and trailer, inspects the Layer 3 destination IP address to determine the egress interface, and encapsulates the IP packet into a new Layer 2 Ethernet frame with updated source and destination MAC addresses.
When a Layer 3 device (such as a router or Layer 3 switch) routes traffic between subnets/VLANs, it de-encapsulates the incoming Layer 2 Ethernet frame to extract the enclosed Layer 3 IP packet. It inspects the destination IP address to determine the appropriate egress interface. Before transmitting onto the destination VLAN, the device re-encapsulates the IP packet into a brand new Layer 2 Ethernet frame. The new frame uses the router's egress interface MAC as the source MAC address and the destination host's MAC (or next hop MAC) as the destination MAC address. The original IP packet payload and end-to-end IP addresses remain unchanged (except for TTL decrementing and checksum updating).

Step-by-Step Solution

1
Analyze the incoming frame at Layer 2
The Layer 3 switch receives the Ethernet frame on VLAN 10, verifies the frame check sequence (FCS) trailer, and verifies that the destination MAC matches its own gateway MAC address.
Layer 2 processing requires verifying frame integrity and confirming the frame is addressed to the default gateway.
2
De-encapsulate the packet at Layer 3
The switch strips the Layer 2 Ethernet header and trailer to expose the enclosed IP packet.
To route traffic between different subnets/VLANs, the network layer header must be inspected.
3
Perform routing lookup and update IP header fields
The switch reads the destination IP address, checks its routing table, decrements the Time to Live (TTL) value by 1, and recalculates the IP header checksum.
The Layer 3 header provides forwarding instructions across network boundaries.
4
Re-encapsulate the packet into a new Layer 2 frame
The switch appends a new Layer 2 Ethernet header containing its egress interface MAC address as the source MAC, the destination server's MAC address as the destination MAC, and recalculates the FCS trailer for VLAN 20.
Each physical or logical link (VLAN) requires local Layer 2 addressing for delivery to the destination or next-hop device.

Key Concept

Hop-by-hop encapsulation and de-encapsulation during Layer 3 routing
Estimated Time:1m 30s
Question 6Question

During data transmission across an IEEE 802.1Q trunk link, a switch inserts a 4-byte header tag into Ethernet frames for non-native VLANs. At which specific location within the standard Ethernet II frame header is this 802.1Q tag inserted?

Show answer & explanation

Answer: Between the Source MAC Address and the Type/Length fields

Answer

The 802.1Q tag is inserted between the Source MAC Address and the Type/Length fields.
IEEE 802.1Q trunking inserts a 4-byte VLAN header directly into the Layer 2 Ethernet frame between the Source MAC Address field and the original EtherType/Length field. This tag includes the Tag Protocol Identifier (TPID set to 0x8100) and Tag Control Information (TCI, containing the VLAN ID and priority bits).

Step-by-Step Solution

1
Analyze standard Ethernet II frame structure
An Ethernet II frame consists of Preamble/SFD, Destination MAC, Source MAC, EtherType, Payload, and FCS.
Understanding standard frame layout is required to identify encapsulation insertion points.
2
Identify 802.1Q trunking tag placement rules
IEEE 802.1Q modifies the Layer 2 header by inserting a 4-byte VLAN tag field (TPID 0x8100 + TCI) directly following the 6-byte Source MAC address.
This location allows receiving switches to parse the Tag Protocol Identifier (TPID) in place of the original EtherType.
3
Evaluate frame check sequence recalculation
Because the Layer 2 header is modified, the sending switch recalculates the Frame Check Sequence (FCS) trailer before transmission.
Ensures the frame passes integrity checks on the receiving switch trunk port.

Key Concept

IEEE 802.1Q Frame Tagging and Header Structure
Question 7Question

A network administrator is configuring a point-to-point interconnect between two core routers. The interface on Router A is assigned the IPv4 address 10.200.15.14/3010.200.15.14/30. What is the directed broadcast address for this subnet?

Show answer & explanation

Answer: 10.200.15.15

Answer

10.200.15.15
For the /30/30 network containing the host IP address 10.200.15.1410.200.15.14, the subnet spans from 10.200.15.1210.200.15.12 to 10.200.15.1510.200.15.15. The address 10.200.15.1210.200.15.12 is the network ID, 10.200.15.1310.200.15.13 and 10.200.15.1410.200.15.14 are usable host addresses, and 10.200.15.1510.200.15.15 is the directed broadcast address.

Step-by-Step Solution

1
Determine the subnet mask and subnet block size from the CIDR notation
A /30/30 prefix corresponds to a subnet mask of 255.255.255.252255.255.255.252, which yields a block size of 44 addresses (256252=4256 - 252 = 4) in the fourth octet.
Understanding the block size identifies subnet boundaries along increments of 4.
2
Calculate the network address for the host IP
For the host IP 10.200.15.1410.200.15.14, dividing 1414 by the block size 44 gives 33 with a remainder of 22. The network ID for this block is 10.200.15.1210.200.15.12.
The network address represents the lowest numerical boundary of the subnet.
3
Determine the directed broadcast address
The broadcast address is the highest address in the subnet block, which is 10.200.15.12+3=10.200.15.1510.200.15.12 + 3 = 10.200.15.15.
The last IP address in any IPv4 subnet block is reserved as the directed broadcast address.

Key Concept

IPv4 Subnetting and Broadcast Address Calculation
Question 8Question

Match each network documentation type to its primary operational use case.

Click a left item, then click its matching right item

Items

Physical Network Diagram
Logical Network Diagram
Rack Diagram
Wiring Schematic

Matches

Show answer & explanation

Answer

Physical Network Diagram connects to documenting actual cable runs and hardware locations; Logical Network Diagram connects to mapping IP addressing schemes and VLAN allocations; Rack Diagram connects to planning rack space availability and height requirements; Wiring Schematic connects to tracing pinouts and cable conductor pathways.
Each documentation type serves a distinct role: Physical network diagrams detail device locations and cabling paths; logical network diagrams focus on IP addressing, VLANs, and protocol boundaries; rack diagrams track cabinet slot (U) utilization and power distribution; and wiring schematics depict detailed pinouts and copper/fiber conductor paths.

Step-by-Step Solution

1
Identify the primary purpose of physical diagrams versus logical diagrams.
Physical diagrams deal with tangible hardware placement and cable routes, while logical diagrams depict IP addresses, VLAN boundaries, and traffic flow.
Differentiating between physical and logical representations is fundamental for network documentation.
2
Differentiate enclosure-level planning tools from cable termination schematics.
Rack diagrams focus on vertical unit (U) allocation and power inside equipment cabinets, whereas wiring schematics show conductor pinouts and patch panel terminations.
Proper documentation selection depends on whether troubleshooting physical cabinet space or line-level electrical connectivity.

Key Concept

Network Documentation Types and Use Cases
Question 9Question

An enterprise branch office has 500 internal workstations configured on a private IPv4 network (10.1.0.0/2210.1.0.0/22). Outbound internet access is currently handled by an edge router using Port Address Translation (PAT / NAT Overload) mapped to a single public IP address (203.0.113.5203.0.113.5). During peak operational hours, users report that while existing web sessions remain active, new outbound connection attempts to cloud services begin timing out consistently. A network administrator inspects the router's active translation table and discovers over 64,00064,000 active translation entries associated with 203.0.113.5203.0.113.5, while CPU, memory, and interface bandwidth utilization on the edge router remain below 25%25\%. Which of the following implementation changes is the most appropriate solution to resolve the connection failures?

Show answer & explanation

Answer: Configure a dynamic NAT pool containing multiple public IP addresses and bind PAT to the pool.

Answer

The correct action is to configure a dynamic NAT pool containing multiple public IP addresses and bind PAT to the pool.
Port Address Translation (PAT) uses 16-bit source port numbers to multiplex multiple private IP streams over a single public IP address. Because a 16-bit port field yields a maximum of 65,535 ports, a high-density subnet can exhaust the ephemeral port pool of a single public IP address. Configuring a NAT pool of public IP addresses and applying PAT across the pool multiplies the available transport port pool by the number of IP addresses in the pool, resolving exhaustion without sacrificing simultaneous connectivity for internal hosts.

Step-by-Step Solution

1
Analyze the symptom and diagnostic evidence.
Router hardware resources (CPU, RAM, bandwidth) are normal (<25%), but active NAT translation entries have reached over 64,000 on a single public IP address.
PAT tracks outbound connections by mapping private IP addresses and source port numbers to a single public IP address and unique external source ports. Since TCP/UDP port fields are 16-bit, the maximum theoretical port count per IP is 65,535 (with around 1,024 reserved/well-known ports, leaving ~64,500 usable ephemeral ports).
2
Identify the underlying bottleneck.
The network is suffering from PAT transport layer source port exhaustion.
Because 500 hosts are generating thousands of concurrent short-lived or long-lived sessions, the single public IP address has exhausted its available unique source port pool.
3
Evaluate candidate solutions to increase socket capacity.
Binding PAT to a pool of public IP addresses increases capacity linearly (e.g., 5 public IPs × ~64,000 ports = ~320,000 available concurrent translations).
Adding additional public IPs into a NAT pool tied to PAT overload expands the total available source port space while allowing all 500 internal hosts to maintain simultaneous outbound connectivity.

Key Concept

PAT Source Port Exhaustion and NAT Pool Scaling
Estimated Time:2m 0s
Question 10Question

A network architect is evaluating an existing industrial facility deployment that uses a hybrid physical star, logical bus network topology. Which of the following statements accurately describe the structural and operational characteristics of this hybrid network layout? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: A disruption or cable break between an individual workstation and its local switch node impacts only that specific host.; A failure along the central bus backbone segment disrupts inter-group communications across all attached star clusters.

Answer

The correct characteristics are that a single cable break between a workstation and its local hub/switch impacts only that workstation, and a failure on the main bus backbone severs communication between connected star clusters.
A hybrid physical star, logical bus topology uses star wired drops to local switch/hub clusters connected via a shared bus backbone. The physical star element ensures that a drop cable failure only disconnects the affected endpoint. Conversely, because the shared bus serves as the common interconnect for all clusters, a break in the central bus segment disables inter-segment transmission across the entire network.

Step-by-Step Solution

1
Analyze physical star topology properties.
Individual endpoint runs to central distribution devices isolate localized cable failures.
Physical star wiring isolates link-level faults to individual ports.
2
Analyze logical bus backbone properties.
The backbone serves as a shared transmission medium linking nodes together.
If the main bus backbone severs or fails, communications spanning multiple star segments cannot traverse the central bus.
3
Evaluate distractor concepts regarding OSI layers and VLAN boundaries.
VLAN boundaries always require Layer 3 routing, and topology bus access uses Layer 2 data frames.
Topologies function at the Data Link layer and do not eliminate Layer 3 boundary requirements.

Key Concept

Physical vs. Logical Network Topologies (Star-Bus Hybrid)
Question 11Question

A network engineer is configuring a Layer 3 switch to relay DHCP requests from client workstations on VLAN 35 (172.16.35.0/24172.16.35.0/24) to two redundant central DHCP servers located on VLAN 100 (10.100.0.1010.100.0.10 and 10.100.0.1110.100.0.11). Which of the following statements correctly describe the behavior and operational mechanics of the DHCP relay agent when processing these client requests? (Select TWO options.)

Select all that apply

Show answer & explanation

Answer: The relay agent inserts the IP address of its local ingress interface (VLAN 35 SVI) into the `giaddr` field of the DHCP payload before forwarding the message.; The relay agent duplicates and forwards the original broadcast `DHCPDISCOVER` frame as separate unicast IP packets addressed to each configured DHCP server.

Answer

The correct statements are that the relay agent populates the `giaddr` field with the local ingress SVI IP address to identify the client subnet, and that it replicates incoming broadcast discovery messages into individual unicast IP packets directed to each defined target server.
The statements confirming that the local ingress interface IP address is populated into the `giaddr` field and that the broadcast `DHCPDISCOVER` is duplicated into unicast UDP packets sent to each configured destination server are both correct. The `giaddr` field is critical for cross-subnet DHCP operations because central DHCP servers inspect this field to determine which IP pool scope to draw addresses from. Additionally, when redundant helper addresses are configured on a Layer 3 interface, the relay agent creates separate unicast UDP messages targeting each server address specified.

Step-by-Step Solution

1
Analyze incoming broadcast reception at the Layer 3 interface
The Layer 3 switch receives a client broadcast `DHCPDISCOVER` frame on the VLAN 35 interface.
DHCP clients initially issue Layer 2 broadcast packets (255.255.255.255255.255.255.255) because they do not possess an IP address or knowledge of the server location.
2
Evaluate relay payload modifications (`giaddr` insertion)
The relay agent writes the IP address of its VLAN 35 SVI into the `giaddr` (Gateway IP Address) field in the DHCP header.
The central DHCP server requires the `giaddr` field value to select the matching address pool (172.16.35.0/24172.16.35.0/24) and route the reply back.
3
Evaluate packet duplication and transport protocol usage
The relay agent creates two separate unicast UDP packets (destination UDP port 67) directed to 10.100.0.1010.100.0.10 and 10.100.0.1110.100.0.11.
DHCP operates entirely using UDP; when multiple relay targets exist, the agent unicasts a copy of the request to each configured helper destination address.

Key Concept

DHCP Relay Unicast Forwarding and GIADDR Field Modification
Question 12Question

A systems deployment team is provisioning a dedicated IPv4 subnet for a smart office floor. The design plan requires static IP assignments for 4242 IoT sensors, 44 wireless access points, and 22 router interfaces configured for high-availability default gateway redundancy. What is the total number of usable host IPv4 addresses provided by the smallest standard subnet mask that accommodates all required devices?

Show answer & explanation

Answer: 62

Answer

The smallest subnet that satisfies the requirement for 4848 IP addresses is a /26/26 subnet, which provides 6262 usable host IPv4 addresses.
To determine the total usable IPv4 host capacity of the smallest suitable subnet, first sum the required IP assignments: 42 (sensors)+4 (access points)+2 (gateways)=48 addresses42\text{ (sensors)} + 4\text{ (access points)} + 2\text{ (gateways)} = 48\text{ addresses}. The formula for usable host addresses is 2h22^h - 2, where hh is the number of host bits. A /27/27 block (h=5h=5) yields 252=302^5 - 2 = 30 usable addresses, which is too small. A /26/26 block (h=6h=6) yields 262=622^6 - 2 = 62 usable host addresses, which fully supports the 4848 required addresses.

Step-by-Step Solution

1
Calculate total host IP addresses required
Total host requirement = 42+4+2=4842 + 4 + 2 = 48 usable IP addresses
Every connected device and default gateway interface requires a distinct usable IPv4 address.
2
Determine the required host bit count
h=6h = 6 host bits (CIDR prefix /26/26)
252=302^5 - 2 = 30 hosts is insufficient for 4848 addresses, whereas 262=622^6 - 2 = 62 hosts satisfies the requirement.
3
Calculate the usable host capacity of the subnet
6262 usable host addresses
Subtracting 22 reserved addresses (network ID and broadcast address) from total 26=642^6 = 64 block addresses yields 6262 usable host IPs.

Key Concept

Subnet Host Capacity Calculation (2h22^h - 2 Rule)
Question 13Question

A network administrator needs to add a DNS entry that resolves the hostname `appserver.corp.local` directly to its assigned IPv6 address `2001:db8:85a3::8a2e:370:7334`. Which DNS resource record type must be configured for this resolution?

Show answer & explanation

Answer: AAAA record

Answer

An AAAA record is used to map a domain hostname directly to an IPv6 address.
An AAAA record (quad-A record) stores a 128-bit IPv6 address and maps it to a host domain name. To resolve hostnames to IPv6 destinations, DNS authoritative servers must be configured with AAAA records.

Step-by-Step Solution

1
Identify the required mapping
The scenario requires mapping a hostname (`appserver.corp.local`) to an IPv6 address (`2001:db8:85a3::8a2e:370:7334`).
Determining the network protocol version (IPv4 vs. IPv6) dictates the correct DNS record type.
2
Select the corresponding DNS record type
AAAA records are designated for 128-bit IPv6 address resolution.
Standard DNS taxonomy uses A records for IPv4 addresses and AAAA records for IPv6 addresses.

Key Concept

DNS IPv6 Host Mapping (AAAA Records)
Question 14Question

A client workstation on VLAN 20 initiates a connection and requests an IP address assignment from a centralized DHCP server residing on VLAN 100 via a Layer 3 switch interface configured with DHCP relay. Place the following stages of the relayed DHCPDISCOVER and DHCPOFFER packet lifecycle in the correct chronological sequence from first to last.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct chronological sequence is: (1) Host broadcasts DHCPDISCOVER locally on VLAN 20, (2) Relay agent populates the giaddr field with the VLAN 20 SVI address, (3) Relay agent forwards unicast DHCPDISCOVER to the server on VLAN 100, (4) Server selects scope based on giaddr and sends unicast DHCPOFFER to the relay agent, (5) Relay agent delivers DHCPOFFER back to the host on VLAN 20.
The correct sequence reflects standard DHCP relay operations across Layer 3 boundaries. The process begins when the client generates a broadcast DHCPDISCOVER packet on its local segment. The Layer 3 relay interface receives the broadcast, tags its own interface IP into the giaddrgiaddr payload field, and forwards the packet as a unicast transmission to the remote DHCP server. The DHCP server uses the giaddrgiaddr to map the request to the correct scope, then unicasts a DHCPOFFER back to the relay interface IP. Finally, the relay interface delivers the DHCPOFFER to the local client on VLAN 20.

Step-by-Step Solution

1
Identify client-side initiation
The host generates a local broadcast DHCPDISCOVER packet on UDP port 67 because it lacks an IP address.
Broadcast frames are contained within VLAN 20 and cannot traverse Layer 3 boundaries without a relay agent.
2
Relay agent interception and giaddr insertion
The SVI on VLAN 20 intercepts the packet and inserts its SVI IP into the giaddrgiaddr field.
The giaddrgiaddr field informs the remote server which logical subnet requested the lease.
3
Unicast forwarding to server
The relay agent routes a unicast packet to the designated DHCP server IP across the routing core.
Converts non-routable broadcast traffic to routable IP unicast traffic.
4
Server scope evaluation and unicast response
DHCP server matches giaddrgiaddr to the VLAN 20 scope and sends a unicast DHCPOFFER back to the relay agent address.
The server uses the giaddrgiaddr as the destination IP address for the DHCPOFFER reply.
5
Client delivery
The relay agent receives the DHCPOFFER and relays it onto the client's access segment.
Completes the initial discovery phase of the DORA process across subnets.

Key Concept

DHCP Relay Agent Architecture & GIADDR Mechanics
Question 15Question

A network engineer is reviewing an active translation table on a corporate edge gateway to verify Port Address Translation (PAT) functionality. An internal client workstation with the private IP address 172.16.10.50172.16.10.50 initiates an HTTPS session to an external web server at 198.51.100.25:443198.51.100.25:443. The gateway translates all outbound traffic using its single public interface IP address of 203.0.113.1203.0.113.1. As the outgoing IP packet leaves the firewall's public interface toward the destination server, which address and port combination accurately represents the Inside Global identifier for this session?

Show answer & explanation

Answer: 203.0.113.1203.0.113.1 paired with a dynamically assigned high-numbered source port (such as 5214452144)

Answer

The Inside Global address and port combination is the firewall's public IP address (203.0.113.1203.0.113.1) combined with a dynamic high-numbered source port (such as 5214452144).
The correct answer identifies that in NAT/PAT terminology, the Inside Global address represents the internal host as it appears to the outside network. Under Port Address Translation (PAT), the firewall replaces the private source IP with its own public WAN interface IP (203.0.113.1203.0.113.1) and substitutes the original source port with a uniquely allocated high-numbered ephemeral port (such as 5214452144) to maintain connection state mapping.

Step-by-Step Solution

1
Identify the standard CompTIA NAT terminology definitions.
Inside Local is the private client IP/port (172.16.10.50:ephemeral172.16.10.50:ephemeral). Inside Global is the public translated IP/port representing the client to the internet (203.0.113.1:translated_port203.0.113.1:translated\_port). Outside Global is the target public IP/port (198.51.100.25:443198.51.100.25:443).
CompTIA Network+ standard definitions differentiate internal local private addresses from internal global public translated addresses.
2
Analyze the impact of Port Address Translation (PAT / NAT Overload).
PAT tracks individual outbound client connections by swapping the original private source IP and source port with the public gateway IP and a newly assigned high-numbered ephemeral port.
Multiple internal hosts share a single public IP address by keeping sessions distinct at Layer 4 using unique source port numbers.
3
Determine the specific Inside Global entry for the packet exiting the WAN interface.
The packet on the public network displays the source IP 203.0.113.1203.0.113.1 and a dynamically generated source port (e.g., 5214452144).
This unique combination allows the gateway to map return traffic back to the originating client (172.16.10.50172.16.10.50).

Key Concept

NAT Terminology and PAT Port Assignment Mechanics
Estimated Time:2m 0s
Question 16Question

A network technician needs to plan the installation of a new patch panel and power distribution unit (PDU) inside an existing equipment cabinet in an IDF. Which document should the technician consult to check the available vertical space and unit height positions inside the cabinet?

Show answer & explanation

Answer: Rack diagram

Answer

The technician should consult a rack diagram.
A rack diagram provides a visual elevation view of an equipment cabinet, detailing the exact rack unit (U) positions, device heights, and available mounting slots required for physical installation planning.

Step-by-Step Solution

1
Analyze the technician's requirement.
The requirement is to determine physical unit spacing and hardware elevation inside a server/network cabinet.
Installing new physical hardware requires verified vertical space (rack unit counts) inside the rack.
2
Select the corresponding network documentation type.
A rack diagram visualizes 19-inch equipment enclosures, rack unit (U) positions, and existing hardware placement.
Rack diagrams specifically capture physical height allocations and spatial layout within equipment racks.

Key Concept

Rack Diagrams and Physical Space Planning
Estimated Time:45s
Question 17Question

During a routine internal security audit, a network analyst discovers that administrators are using Telnet to remotely configure network infrastructure devices, exposing authentication credentials in unencrypted cleartext across internal subnets. Security policy requires immediately replacing this practice with Secure Shell (SSH) to secure all interactive administrative sessions. Which default port and transport layer protocol combination must be permitted on internal firewalls to allow SSH traffic?

Show answer & explanation

Answer: TCP port 22

Answer

TCP port 22
Secure Shell (SSH) operates over TCP port 22 by default. SSH provides encrypted terminal management sessions and relies on TCP's connection-oriented delivery to maintain session integrity.

Step-by-Step Solution

1
Identify the target secure administration protocol.
The scenario requires implementing Secure Shell (SSH) to replace unencrypted Telnet sessions.
SSH encrypts management traffic, preserving confidentiality for administrative credentials and commands.
2
Determine the transport layer protocol required by SSH.
SSH requires Transmission Control Protocol (TCP) to ensure reliable, connection-oriented data delivery.
Interactive shell sessions depend on ordered delivery and error recovery provided by TCP.
3
Identify the standard IANA assigned port for SSH.
SSH operates on default port 22.
Standard network firewall rules reference IANA default port allocations for service filtering.

Key Concept

Common Ports and Protocols - SSH (TCP 22) vs Telnet (TCP 23)
Question 18Question

A network architect is designing an enterprise IPv6 deployment and reviewing address allocation strategies and autoconfiguration modes. Match each IPv6 deployment mechanism or address scope on the left with its exact functional operation and protocol behavior on the right.

Click a left item, then click its matching right item

Items

Stateless Address Autoconfiguration (SLAAC) with Stateless DHCPv6
Stateful DHCPv6 Deployment
Link-Local Unicast Addressing
Unique Local Addressing (ULA)

Matches

Show answer & explanation

Answer

SLAAC with Stateless DHCPv6 matches the configuration using RA flags M=0 and O=1; Stateful DHCPv6 Deployment matches the configuration using RA flags M=1 and O=1; Link-Local Unicast Addressing matches the fe80::/10 block for single-link communication and NDP; Unique Local Addressing matches the fc00::/7 block for non-public internal routed communication.
Each IPv6 mechanism is paired strictly according to standard RFC specifications: SLAAC with Stateless DHCPv6 relies on M=0 and O=1 RA flags; Stateful DHCPv6 requires M=1; Link-Local addressing uses the fe80::/10 prefix exclusively for local-link functions; and Unique Local Addresses utilize fc00::/7 for non-public internal routed communication.

Step-by-Step Solution

1
Analyze SLAAC with Stateless DHCPv6 flag settings.
Determined that M=0 delegates IP creation to SLAAC, while O=1 requests non-IP settings from DHCPv6.
Stateless DHCPv6 does not issue IP leases; it only supplies auxiliary options.
2
Analyze Stateful DHCPv6 flag settings.
Determined that M=1 instructs hosts to obtain IP address leases statefully from the DHCPv6 server.
Stateful operation centralizes address tracking and lease management.
3
Evaluate Link-Local addressing scope and purpose.
Associated fe80::/10 with mandatory single-link protocol operations.
Link-Local addresses are automatically assigned on all enabled interfaces and cannot cross routers.
4
Evaluate Unique Local Addressing scope and purpose.
Associated fc00::/7 (fd00::/8) with enterprise internal private routing.
ULAs function similarly to IPv4 RFC 1918 addresses within internal networks.

Key Concept

IPv6 Addressing Scopes and Neighbor Discovery RA Flag Autoconfiguration
Question 19Question

A network technician is configuring switch ports on an enterprise switch to handle 802.1Q trunking and VLAN operations. Match each switchport interface configuration command on the left with its corresponding frame processing or trunk negotiation behavior on the right.

Click a left item, then click its matching right item

Items

switchport trunk native vlan 99
switchport mode access
switchport trunk allowed vlan 10,20
switchport mode dynamic auto

Matches

Show answer & explanation

Answer

The correct pairings align each command with its operational behavior: native VLAN 99 sends untagged frames across trunks; access mode locks the interface to a single untagged VLAN; allowed vlan 10,20 drops unlisted VLAN traffic; and dynamic auto passively awaits trunk negotiation.
Each switchport configuration statement defines specific frame processing or trunk negotiation behaviors: native VLAN 99 handles untagged trunk traffic; access mode establishes single-VLAN operational ports; allowed VLAN lists prune unapproved VLAN traffic; and dynamic auto passively responds to DTP negotiation.

Step-by-Step Solution

1
Analyze native VLAN behavior for `switchport trunk native vlan 99`.
Identified that VLAN 99 traffic crosses the trunk without 802.1Q tag headers.
By 802.1Q standard design, native VLAN frames are transmitted untagged across trunk connections.
2
Analyze static access port behavior for `switchport mode access`.
Identified that the port operates exclusively in a single untagged VLAN and rejects trunking.
Access mode explicitly disables trunking encapsulation and assigns the port to one access VLAN.
3
Analyze trunk filtering for `switchport trunk allowed vlan 10,20`.
Identified that unlisted VLANs (e.g., VLAN 30) are blocked while VLAN 10 and 20 are permitted.
The allowed VLAN list acts as a trunk filter, permitting only explicitly allowed VLAN IDs.
4
Analyze negotiation behavior for `switchport mode dynamic auto`.
Identified that the interface passively waits for DTP negotiation requests from its neighbor.
Dynamic auto interfaces will convert to a trunk only if the remote end initiates negotiation via dynamic desirable or trunk modes.

Key Concept

802.1Q trunking port modes, native VLAN untagged behavior, allowed VLAN filtering, and DTP negotiation dynamics.
Question 20Question

A network administrator is documenting a host configuration and needs to compress the IPv6 address fe80:0000:0000:0000:0202:b3ff:fe1e:8329 using standard RFC 5952 rules. Which of the following is the correctly compressed IPv6 address?

Show answer & explanation

Answer: fe80::202:b3ff:fe1e:8329

Answer

The correctly compressed IPv6 address is fe80::202:b3ff:fe1e:8329.
The notation fe80::202:b3ff:fe1e:8329 follows RFC 5952 standards by replacing three contiguous zero hextets with a single double colon (::) and dropping the leading zero in the fifth hextet (0202 to 202).

Step-by-Step Solution

1
Identify contiguous blocks of 16-bit zero fields (hextets).
The block 0000:0000:0000 contains three consecutive zero hextets.
RFC 5952 mandates shortening the longest run of consecutive zero hextets using double-colon (::) notation.
2
Suppress all leading zeros in each 16-bit field.
The hextet 0202 becomes 202, while 0000 hextets reduce to single zeros before double-colon compression.
Leading zeros in an IPv6 hextet carry no numerical value and must be omitted.
3
Replace the single longest contiguous run of zero fields with a single double colon (::).
fe80:0000:0000:0000:0202:b3ff:fe1e:8329 compresses to fe80::202:b3ff:fe1e:8329.
Using double colon exactly once creates a unique, fully deterministic 128-bit IPv6 representation.

Key Concept

IPv6 Address Compression Rules (RFC 5952)
Estimated Time:45s
Page 1 / 112Next