Examkin

All practice questions

2237 questions

All types2,237Multiple choice1,150Multiple select488Numeric30Matching350Ordering201Short answer18
Question 441Question →

A client computer on a local network prepares to transmit a web request to a remote server. Arrange the Protocol Data Units (PDUs) and data forms in the correct order as they are created during the outbound encapsulation process, from the top of the OSI model down to physical transmission.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order of encapsulation from top to bottom is: Data, Segment, Packet, Frame, and Bits.
Outbound network transmission follows a strict top-down encapsulation sequence through the OSI layers: Application Data is encapsulated into a Transport Layer Segment, which is encapsulated into a Network Layer Packet, then into a Data Link Layer Frame, and finally converted into Physical Layer Bits for transmission.

Step-by-Step Solution

1
Identify the top layer where data originates.
Data is created at the Application layer (Layer 7).
Encapsulation always begins with the application payload at the upper layers.
2
Process data at Layer 4 (Transport layer).
Data becomes a Segment with port information attached.
The transport layer manages port-based process-to-process communication.
3
Process data at Layer 3 (Network layer).
Segment becomes a Packet with IP addressing attached.
The network layer provides logical routing across IP networks.
4
Process data at Layer 2 (Data Link layer).
Packet becomes a Frame with MAC addressing and a trailer attached.
The data link layer prepares the data for transmission on the local network segment.
5
Process data at Layer 1 (Physical layer).
Frame is converted into Bits for media transmission.
The physical layer transmits raw signals over cable, fiber, or wireless media.

Key Concept

Top-Down Encapsulation Sequence and Protocol Data Units (PDUs)
Question 442Question →

A network engineer is configuring an automated log collection system to aggregate audit logs from perimeter firewalls across a WAN link. Due to strict regulatory compliance, the network requires guaranteed delivery and ordered reception of all log events, accepting additional transmission overhead to prevent any missing records. Which protocol and operational characteristic should be selected for this transport requirement?

Show answer & explanation

Answer: TCP, because it establishes a connection-oriented session using sequence numbers and acknowledgments to guarantee ordered delivery.

Answer

TCP should be selected because it is a connection-oriented protocol that uses a three-way handshake, sequence numbers, and acknowledgments to ensure reliable and ordered delivery of log messages.
TCP (Transmission Control Protocol) is a connection-oriented protocol operating at Layer 4 of the OSI model. It establishes a session using a three-way handshake (SYN, SYN-ACK, ACK) and guarantees reliable, ordered packet delivery through sequence numbers and acknowledgment packets, satisfying the requirement for zero log data loss.

Step-by-Step Solution

1
Analyze the application requirements for log aggregation.
Identified that the application requires strict delivery guarantees, ordered sequence of events, and error checking.
Regulatory compliance mandates zero data loss for security audit trail reporting.
2
Compare transport protocol characteristics.
TCP provides connection-oriented reliability with handshakes and acknowledgments, whereas UDP provides low-overhead, best-effort connectionless delivery.
Matching application requirements against transport protocol features determines protocol choice.
3
Select the appropriate transport layer protocol.
Selected TCP due to its sequence numbering, sliding window flow control, and acknowledgment mechanisms.
TCP guarantees that all log entries arrive intact and in proper sequential order.

Key Concept

Connection-Oriented vs Connectionless Transport Protocols
Estimated Time:1m 0s
Question 443Question →

A network engineer is inspecting Layer 2 traffic behavior across two directly connected switches, Switch-A and Switch-B, linked via an 802.1Q trunk interface. Switch-A is configured with native VLAN 10 on its trunk port, while Switch-B is configured with native VLAN 20 on its corresponding trunk port. Allowed VLANs on both trunk ports include VLANs 10, 20, and 30. A host connected to an access port assigned to VLAN 10 on Switch-A generates an ARP broadcast request. Which TWO of the following statements accurately describe how the switches process, tag, and forward this frame across the trunk link?

Select all that apply

Show answer & explanation

Answer: Switch-A transmits the ARP broadcast frame out of its trunk port without an 802.1Q VLAN header.; Switch-B assigns the incoming untagged ARP broadcast frame to VLAN 20 and floods it out all active access ports in VLAN 20.

Answer

The correct statements are that Switch-A transmits the ARP broadcast frame out of its trunk port without an 802.1Q VLAN header, and Switch-B receives the untagged frame and assigns it to VLAN 20, flooding it out all active access ports in VLAN 20.
Under IEEE 802.1Q specifications, a switch transmitting traffic belonging to its configured native VLAN over a trunk interface strips the 4-byte 802.1Q VLAN header, sending standard untagged Ethernet frames. On the receiving side, Switch-B associates any incoming untagged frame with its own configured native VLAN (VLAN 20). Consequently, the broadcast frame generated in VLAN 10 on Switch-A leaks directly into VLAN 20 on Switch-B and is flooded to all VLAN 20 access ports.

Step-by-Step Solution

1
Determine frame ingress and tagging logic at Switch-A
Host frame enters Switch-A on access VLAN 10. Switch-A prepares to forward the broadcast frame out trunk port Gi0/1. Because native VLAN on Switch-A's trunk is configured as VLAN 10, the 802.1Q tag is omitted (sent untagged).
IEEE 802.1Q standard requires frames belonging to the configured native VLAN of a trunk interface to be transmitted without a 4-byte 802.1Q tag.
2
Determine frame reception and classification logic at Switch-B
Switch-B receives an untagged Ethernet frame on its trunk interface Gi0/1. Switch-B evaluates its local trunk configuration, where native VLAN is set to 20. Switch-B implicitly assigns the untagged frame to VLAN 20.
A switch receiving untagged traffic on an 802.1Q trunk port automatically maps that traffic to its own locally configured native VLAN ID.
3
Analyze Layer 2 broadcast forwarding behavior
Once classified into VLAN 20 on Switch-B, the broadcast frame is flooded to all interfaces belonging to VLAN 20's broadcast domain.
Switches flood broadcast frames to all operational ports within the destination frame's assigned VLAN broadcast domain.

Key Concept

802.1Q Native VLAN Tagging Mechanics and Mismatch Traffic Leakage
Question 444Question →

An network engineer is deploying an enterprise application that requires client workstations to discover both the hostname and the specific port number of server instances providing an internal service on the network. Which DNS resource record type should be configured on the authoritative DNS server to supply this host and port location information?

Show answer & explanation

Answer: SRV record

Answer

The SRV (Service Location) record is the required DNS resource record type to define both hostnames and port numbers for network services.
The SRV (Service Location) record allows DNS clients to locate servers providing specific services (such as SIP or Kerberos) by specifying the service name, protocol, priority, weight, port number, and target hostname in the record payload.

Step-by-Step Solution

1
Analyze the application requirements
The application requires clients to resolve both the target server hostname and the exact port number for a network service.
Standard host records (like A or AAAA) only map names to IP addresses, not port numbers.
2
Evaluate DNS record capabilities
The SRV record structure includes fields for Service, Protocol, Name, TTL, Class, Priority, Weight, Port, and Target hostname.
SRV is the only standard DNS record designed specifically to publish service location and port metadata.

Key Concept

DNS Service Location (SRV) Records
Estimated Time:1m 0s
Question 445Question →

A network engineer is configuring core IP addressing services for an enterprise network. A new web-based portal service needs to be mapped to an existing server's canonical hostname, `host01.corp.internal`, which already resolves to an IPv4 address. Simultaneously, newly deployed IP telephony endpoints require a DNS mechanism to dynamically locate the hostname and port number of their primary Session Initiation Protocol (SIP) server. Which combination of DNS record types should the engineer configure to meet these requirements?

Show answer & explanation

Answer: A CNAME record for the web portal alias and an SRV record for the SIP server location

Answer

The configuration requires a CNAME record for the web portal alias and an SRV record for SIP server discovery.
The combination of a CNAME record and an SRV record satisfies both functional requirements. The CNAME record aliases the new portal service name to the host's primary canonical domain name, while the SRV record defines the server hostname, priority, weight, and port number for SIP telephony discovery.

Step-by-Step Solution

1
Identify the DNS requirement for domain name aliasing.
Mapping `portal.corp.internal` to an existing canonical hostname `host01.corp.internal` requires a Canonical Name (CNAME) record.
CNAME records allow an administrator to map multiple service names to a single canonical host name without duplicating underlying IP address records.
2
Identify the DNS requirement for dynamic service discovery including port specifications.
Locating a specific protocol service (SIP) and its active transport port requires a Service Location (SRV) record.
SRV records follow the format `_service._proto.name TTL class SRV priority weight port target`, enabling VoIP endpoints to discover both host location and port numbers dynamically.

Key Concept

DNS Record Selection and Service Location (SRV vs CNAME)
Estimated Time:2m 0s
Question 446Question →

A secure web server receiving an HTTPS request on TCP port 443 processes the inbound network signal from its network interface card up to the web application process. As de-encapsulation occurs, which sequence correctly identifies the order of Protocol Data Units (PDUs) processed and the corresponding headers or trailers removed at each layer of the protocol stack?

Show answer & explanation

Answer: Frame (Ethernet header and trailer removed) →\rightarrow Packet (IP header removed) →\rightarrow Segment (TCP header removed) →\rightarrow Data payload delivered to the application

Answer

The correct sequence processes the Frame (removing Ethernet header/trailer), then the Packet (removing IP header), followed by the Segment (removing TCP header), and finally delivers the raw Data payload to the application.
During de-encapsulation on a receiving host, processing proceeds bottom-up through the protocol stack. The Network Interface Card first processes the Layer 2 Frame by removing the Ethernet header and FCS trailer. The network stack then processes the Layer 3 IP Packet by stripping the IP header. Next, the transport layer parses the Layer 4 TCP Segment, strips the TCP header based on port 443 identification, and delivers the remaining application Data payload to the listening web service.

Step-by-Step Solution

1
Analyze Layer 2 de-encapsulation at the Physical/Data Link interface
The NIC receives physical signals, frames them, verifies the Frame Check Sequence (FCS) trailer, strips the Ethernet header and trailer, and yields a Layer 3 PDU (Packet).
Layer 2 headers must be processed first to confirm local hardware delivery and frame integrity.
2
Analyze Layer 3 de-encapsulation within the OS kernel network stack
The IP protocol module examines the Layer 3 header, validates the destination IP address, strips the IP header, and identifies the upper-layer protocol (TCP).
Layer 3 processing routes the packet to the local host and uncovers the enclosed Layer 4 segment.
3
Analyze Layer 4 de-encapsulation for port matching
The TCP module parses the Layer 4 segment header, reassembles sequence numbers, identifies destination port 443, strips the TCP header, and passes the remaining payload up to the application.
Layer 4 headers contain port numbers needed to direct traffic to the correct application process.

Key Concept

De-encapsulation sequence from Layer 2 to Layer 7 (Frame -> Packet -> Segment -> Data)
Estimated Time:1m 30s
Question 447Question →

A financial firm operates four distinct branch offices located across a single city. To connect the offices, the firm leases dedicated dark fiber circuits that physically link the edge routers at each site in a redundant closed loop. However, to meet strict auditing standards, all inter-subnet traffic between branches is required to pass through a centralized security gateway at the headquarters office for Layer 3 policy enforcement before being forwarded to its destination. Which of the following best classifies the geographic scope of this inter-branch network and describes its logical traffic topology?

Show answer & explanation

Answer: Metropolitan Area Network (MAN) with a logical star topology

Answer

Metropolitan Area Network (MAN) with a logical star topology
The network spans across a single city, which fits the standard definition of a Metropolitan Area Network (MAN). While the physical dark fiber cabling forms a closed loop between edge routers (physical ring topology), all inter-subnet data flows are constrained to pass through a single central security gateway at headquarters before reaching their final destination. This centralized data path forms a hub-and-spoke pattern, which defines a logical star topology.

Step-by-Step Solution

1
Determine the geographic classification of the network
The network connects multiple distinct sites within the bounds of a single city, which defines a Metropolitan Area Network (MAN).
Geographic scope definitions classify single-building networks as LANs, contiguous multi-building sites as CANs, city-wide networks as MANs, and regional/global networks as WANs.
2
Differentiate between physical layout and logical traffic flow
The physical layout is a ring (closed loop of dark fiber), but the logical flow is a star (hub-and-spoke).
Physical topology describes how cables and devices are physically interconnected. Logical topology describes how data actually flows through the network. Because all traffic must traverse the central gateway at headquarters before reaching its destination, data flows in a hub-and-spoke pattern regardless of the physical fiber paths.

Key Concept

Physical vs. Logical Topologies and Geographic Network Classifications
Question 448Question →

A network engineer is auditing Layer 2 switch operations to ensure proper frame encapsulation, VLAN trunking, CAM table management, and port access controls across campus switches. Match each switching concept on the left with its corresponding operational behavior on the right.

Click a left item, then click its matching right item

Items

IEEE 802.1Q Tagging
Native VLAN Processing
MAC Address Table Aging
Sticky Port Security

Matches

Show answer & explanation

Answer

IEEE 802.1Q Tagging matches insertion of a 4-byte header containing a TPID and VLAN ID; Native VLAN Processing matches assigning untagged trunk frames to a default internal broadcast domain without adding tags; MAC Address Table Aging matches clearing dynamic CAM entries following inactivity; Sticky Port Security matches converting dynamically learned MAC addresses into running configuration entries.
Each concept correctly maps to its foundational Layer 2 operational role: IEEE 802.1Q handles 4-byte header insertion, Native VLAN handles untagged trunk traffic mapping, MAC table aging handles CAM cache flushing upon inactivity, and sticky port security writes dynamic MAC addresses to the running configuration.

Step-by-Step Solution

1
Analyze frame encapsulation mechanisms for VLAN trunking.
Identify IEEE 802.1Q tagging as the process of inserting a 4-byte tag field into the Ethernet frame structure between the Source MAC address and the EtherType field.
This allows trunk links to multiplex traffic from multiple VLANs over a single physical connection.
2
Evaluate trunk handling of untagged traffic.
Identify Native VLAN processing as the mechanism that routes untagged frames received on an 802.1Q trunk into the configured native VLAN without adding explicit 802.1Q tags.
Backward compatibility and control traffic (such as CDP or STP) rely on untagged transmission across trunks.
3
Determine Layer 2 switch CAM table maintenance procedures.
Associate MAC Address Table Aging with the automatic removal of idle dynamic MAC entries from the CAM table after the aging timer expires.
This ensures the switch adapts dynamically when network hosts disconnect or move to different switch ports.
4
Examine port security persistence features.
Connect Sticky Port Security to the automatic conversion of dynamically learned source MAC addresses into running configuration statements.
Sticky learning avoids manual static MAC configuration while preserving host port restrictions across interface reboots.

Key Concept

Layer 2 Switching Mechanisms and VLAN Trunking Operations
Question 449Question →

A network administrator is manually configuring a static IPv6 default route on a router and needs to enter the compressed representation of the full 128-bit address 2001:0db8:0000:0000:0000:0ab0:0000:0012. Which of the following is the correct shorthand representation following standard RFC 5952 IPv6 address compression rules?

Show answer & explanation

Answer: 2001:db8::ab0:0:12

Answer

2001:db8::ab0:0:12
The format 2001:db8::ab0:0:12 complies with standard RFC 5952 IPv6 compression rules by stripping leading zeros from each field (0db8 to db8, 0ab0 to ab0, 0012 to 12) and compressing the longest contiguous sequence of 16-bit zero fields (three blocks) using a single double colon (::).

Step-by-Step Solution

1
Suppress leading zeros in each 16-bit hexadecimal field.
2001:0db8 becomes 2001:db8, 0ab0 becomes ab0, 0000 becomes 0, and 0012 becomes 12.
RFC 5952 requires leading zeros within a 16-bit field to be omitted.
2
Locate contiguous runs of zero fields and identify the longest run.
The three contiguous zero fields (0000:0000:0000) between 0db8 and 0ab0 form the longest run.
The double colon (::) must be used to replace the longest run of consecutive 16-bit zero fields.
3
Replace the longest run of zero fields with a single double colon (::).
2001:db8::ab0:0:12
The double colon can only be used once per IPv6 address to prevent parsing ambiguity.

Key Concept

IPv6 Address Compression Rules (RFC 5952)
Question 450Question →

A network security administrator is configuring stateful firewall rules to integrate a newly deployed Security Information and Event Management (SIEM) appliance within an enterprise network. Per company compliance requirements, all remote system logging sent from internal infrastructure switches to the SIEM must be encrypted over the wire using Transport Layer Security (TLS) to guarantee confidentiality and data integrity. Which protocol and transport layer port combination must the administrator permit on the firewall to allow this secure log transmission?

Show answer & explanation

Answer: TCP port 6514

Answer

TCP port 6514
The standard port designated by IANA for secure, TLS-encrypted Syslog traffic (as defined in RFC 5425) is TCP port 6514. TLS requires TCP to handle session negotiation, cryptographic certificates, and reliable packet delivery.

Step-by-Step Solution

1
Identify the base service and security requirements specified in the scenario
The requirement calls for remote system logging (Syslog) secured with Transport Layer Security (TLS) encryption.
Standard Syslog operates unencrypted, but enterprise compliance mandates TLS encapsulation.
2
Determine the transport protocol required for TLS operation
TLS requires TCP due to its connection-oriented nature and reliable stream handling during key exchange.
UDP is connectionless and cannot host standard TLS sessions without specialized protocols like DTLS.
3
Select the standard well-known/registered port number assigned for Syslog over TLS
IANA specifies TCP port 65146514 for Syslog over TLS (RFC 5425), whereas unencrypted Syslog defaults to UDP port 514514.
Matching the correct port and protocol ensures compliance and proper firewall rule baseline.

Key Concept

Syslog over TLS (TCP Port 6514) vs Standard Syslog (UDP Port 514)
Question 451Question →

A network engineer is analyzing protocol analyzer traces and configuration files during an IPv6 deployment. The engineer needs to verify the operational mechanics of the IPv6 base header and validate IPv6 address formatting rules. Which of the following statements correctly describe the characteristics of the IPv6 base header or valid IPv6 address compression mechanics? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The Next Header field specifies the protocol type of the encapsulated payload or identifies an incoming extension header, serving a function equivalent to the IPv4 Protocol field.; The Hop Limit field is an 8-bit field decremented by each router that forwards the packet, replacing the IPv4 Time to Live (TTL) field to prevent routing loops.

Answer

The correct statements are that the Next Header field specifies the protocol type of the encapsulated payload or extension header (equivalent to the IPv4 Protocol field) and the Hop Limit field is decremented at each router hop to replace the IPv4 Time to Live (TTL) field.
The statements describing Next Header as the equivalent of IPv4 Protocol and Hop Limit as the 8-bit replacement for IPv4 TTL are technically correct. Next Header defines the encapsulated layer 4 payload or extension header, while Hop Limit is decremented by 1 at each router to stop loop propagation.

Step-by-Step Solution

1
Evaluate the statement regarding the Next Header field function.
Identified that Next Header points directly to the next protocol (e.g., TCP value 6, UDP value 17) or an extension header, matching IPv4 Protocol field functionality.
IPv6 simplified the header structure by replacing variable IPv4 options with chained extension headers referenced by the Next Header field.
2
Evaluate IPv6 address compression rules for zero suppression.
Recognized that using double-colons twice in one address renders the expanded length ambiguous.
RFC 4291 and RFC 5952 mandate that the double-colon notation (::) can appear only once in an IPv6 address string.
3
Evaluate the role and field size of Hop Limit.
Confirmed Hop Limit is an 8-bit field replacing TTL for loop control.
Routers discard packets when Hop Limit reaches zero, preventing infinite loop transmission.
4
Evaluate the IPv6 base header length specification.
Confirmed the IPv6 base header size is strictly fixed at 40 bytes.
Unlike IPv4 headers which range from 20 to 60 bytes due to inline options, IPv6 keeps a fixed 40-byte base header for fast hardware processing.

Key Concept

IPv6 Header Fields and Compression Syntax Rules
Estimated Time:1m 30s
Question 452Question →

An enterprise network engineering team is designing a highly resilient architecture to connect 6 core regional data centers while also deploying a dedicated block-level storage network for database clustering. The design must maximize fault tolerance across the core sites while maintaining strict isolation for storage traffic. Which of the following technical requirements and design characteristics accurately apply to this network topology and network type deployment? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Interconnecting all 6 core data centers in a physical full-mesh topology requires exactly 15 dedicated point-to-point WAN links.; A Storage Area Network (SAN) provides block-level storage consolidation over a dedicated high-speed infrastructure isolated from local area network (LAN) client traffic.

Answer

The correct answers are the statement calculating 15 dedicated links for a 6-node full-mesh topology and the statement defining a Storage Area Network (SAN) as a dedicated block-level storage infrastructure.
The full-mesh link equation N(N−1)2\frac{N(N-1)}{2} yields 6×52=15\frac{6 \times 5}{2} = 15 physical links for 6 sites, ensuring complete point-to-point path redundancy. Additionally, a SAN specifically delivers block-level storage traffic across a specialized high-speed network isolated from client LAN traffic.

Step-by-Step Solution

1
Calculate the physical link requirements for a full-mesh topology connecting 6 sites.
Using the full-mesh link formula L=N(N−1)2L = \frac{N(N-1)}{2} where N=6N = 6, we calculate L=6×52=15L = \frac{6 \times 5}{2} = 15 links. This provides maximum redundancy and eliminates single points of failure.
Full-mesh physical topologies require direct links between every pair of nodes.
2
Identify the classification and architectural purpose of a Storage Area Network (SAN).
A SAN is a high-speed network type specifically designed for block-level storage transfer using protocols like Fibre Channel or iSCSI, separate from general LAN traffic.
Distinguishing network types (LAN, WAN, SAN, CAN, MAN) by performance profile and storage access protocols is essential for enterprise design.
3
Evaluate distractor options regarding VLAN isolation and default gateway subnets.
VLANs mandate Layer 3 routing for inter-VLAN communication. Default gateways must be on the same subnet as the host interface to be reachable.
Logical topology and broadcast domain rules enforce strict Layer 2 and Layer 3 boundaries.

Key Concept

Physical Mesh Link Calculations and SAN Architecture
Question 453Question →

During the outbound encapsulation process on a host system, application data is passed down the protocol stack. At the Transport layer (Layer 4), a TCP header containing source and destination port numbers is attached to the data payload. Which Protocol Data Unit (PDU) is generated at this specific layer?

Show answer & explanation

Answer: Segment

Answer

Segment
The correct answer is Segment. When data moves down to Layer 4 (Transport layer) during encapsulation, a header containing control information—such as TCP source/destination port numbers and sequence numbers—is added to the data payload, forming a Segment.

Step-by-Step Solution

1
Identify the OSI layer referenced in the scenario.
The scenario explicitly describes adding Transport layer headers (Layer 4) such as port numbers.
Different protocol layers produce specific Protocol Data Units (PDUs) during data encapsulation.
2
Map Layer 4 to its corresponding Protocol Data Unit term.
Layer 4 produces Segments (for TCP) or Datagrams (for UDP).
Encapsulation naming conventions designate Data at Layers 5-7, Segment at Layer 4, Packet at Layer 3, Frame at Layer 2, and Bits at Layer 1.

Key Concept

OSI Protocol Data Unit (PDU) Encapsulation Terminology
Estimated Time:45s
Question 454Question →

When a router receives a packet and evaluates multiple potential routes to a destination network, it uses specific criteria in a strict sequence to determine the best path. Order the following route selection criteria from FIRST (highest priority) to LAST (lowest priority).

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order from first to last criteria evaluated is: Longest Prefix Match, followed by Lowest Administrative Distance, and finally Lowest Metric.
Routing engines follow a strict tie-breaking sequence: Longest Prefix Match is evaluated first to find the most specific network destination. If routes have equal prefix lengths, Administrative Distance is checked next to pick the most reliable routing source. If routes stem from the same protocol with equal AD, the lowest Metric value determines the final path.

Step-by-Step Solution

1
Evaluate subnet specificity across all available routes.
The route with the longest prefix match (e.g., /26 over /24) is selected first.
Longest prefix match always takes precedence in IP routing decisions.
2
Compare Administrative Distance if prefix lengths are equal.
The route from the protocol with the lower AD value (e.g., OSPF at 110 over RIP at 120) is chosen.
Administrative distance measures the trustworthiness of the route source.
3
Compare path metrics if routes originate from the same protocol.
The route with the lowest metric/cost (e.g., hop count or bandwidth-based cost) is preferred.
Metric acts as a tie-breaker among routes from the same routing protocol.

Key Concept

IP Routing Table Path Selection Hierarchy
Question 455Question →

A network administrator is analyzing transport layer requirements for two network services: an interactive database management session and a local network host discovery service. When evaluating the connectionless transport protocol (UDP) used by the discovery service compared to the connection-oriented transport protocol (TCP) used by the database session, which of the following operational traits specifically characterize the connectionless protocol? (SELECT TWO).

Select all that apply

Show answer & explanation

Answer: Payload delivery begins immediately without performing a preliminary three-way handshake to establish session state.; The protocol header maintains a minimalist 8-byte header structure that lacks sequence numbers and acknowledgment fields.

Answer

The correct options state that payload delivery begins immediately without a preliminary three-way handshake and that the protocol header maintains a minimalist 8-byte header structure lacking sequence and acknowledgment fields.
Connectionless transport protocols like UDP do not establish a formal session prior to data transmission, eliminating the latency of a three-way handshake. Additionally, UDP overhead is minimized by using a fixed 8-byte header that omits sequence numbering, acknowledgment tracking, and window size fields required by connection-oriented protocols like TCP.

Step-by-Step Solution

1
Identify the protocol model operating in a connectionless environment.
UDP (User Datagram Protocol) is identified as the connectionless transport protocol.
Connectionless protocols send data statelessly without session establishment or guaranteed delivery mechanics.
2
Differentiate session initiation mechanisms between connectionless and connection-oriented protocols.
Connectionless transmission sends datagrams without requiring a TCP three-way handshake (SYN, SYN-ACK, ACK).
Eliminating handshake overhead reduces latency for stateless communications like service discovery.
3
Examine transport header structures.
UDP uses a compact 8-byte header comprising Source Port, Destination Port, Length, and Checksum.
Fields related to sequence numbers, acknowledgment numbers, and window size are absent because UDP does not track segment order or congestion states.

Key Concept

Connection-Oriented (TCP) vs. Connectionless (UDP) Protocol Characteristics
Question 456Question →

A network administrator is reviewing default firewall port permissions for common infrastructure protocols. Match each network service description on the left with its corresponding default port assignment and transport layer protocol on the right.

Click a left item, then click its matching right item

Items

Host name to IP address resolution service
Secure encrypted command-line remote administration
Outbound server-to-server email transmission
Encrypted web session traffic over TLS

Matches

Show answer & explanation

Answer

The correct pairings are: Host name to IP address resolution service matches UDP/TCP Port 53; Secure encrypted command-line remote administration matches TCP Port 22; Outbound server-to-server email transmission matches TCP Port 25; Encrypted web session traffic over TLS matches TCP Port 443.
Each service uses standard well-known port definitions: DNS name resolution uses UDP/TCP port 53; SSH encrypted remote administration uses TCP port 22; SMTP email relaying uses TCP port 25; HTTPS encrypted web communication uses TCP port 443.

Step-by-Step Solution

1
Identify the standard protocol associated with each service description.
Host name resolution corresponds to DNS; secure CLI administration corresponds to SSH; outbound mail relay corresponds to SMTP; secure web traffic corresponds to HTTPS.
Service descriptions directly reflect the fundamental functions of standard Network+ core protocols.
2
Map each protocol to its standard IANA default port assignment and transport protocol.
DNS maps to UDP/TCP port 53, SSH maps to TCP port 22, SMTP maps to TCP port 25, and HTTPS maps to TCP port 443.
These default well-known port allocations are standardized for enterprise firewall and ACL rules.

Key Concept

Standard IANA well-known port assignments and transport layer mechanisms for core network services.
Question 457Question →

An enterprise network deployment uses Per-VLAN Spanning Tree Plus (PVST+) across three interconnected Layer 2 switches (SW1, SW2, and SW3). The switches are configured with the following parameters:

- SW1: Base bridge priority set to 3276832768, MAC address `00:11:22:33:44:55`
- SW2: Base bridge priority set to 2867228672, MAC address `00:AA:BB:CC:DD:EE`
- SW3: Base bridge priority set to 2867228672, MAC address `00:AA:BB:CC:DD:11`

No explicit per-VLAN priority override commands have been configured for VLAN 100. Which switch is elected as the Spanning Tree Protocol (STP) Root Bridge for VLAN 100, and what is its calculated priority field within its Bridge Identifier (BID)?

Show answer & explanation

Answer: SW3 is elected as the Root Bridge with a total BID priority of 28772.

Answer

SW3 is elected as the Root Bridge for VLAN 100 with a total BID priority of 28772.
The Spanning Tree Protocol (STP) Root Bridge election evaluates the 8-byte Bridge Identifier (BID), which consists of a 2-byte Priority field and a 6-byte MAC address. In PVST+, the 2-byte Priority field is divided into a 4-bit Priority multiplier (in increments of 4096) and a 12-bit System ID Extension representing the VLAN ID. For VLAN 100, the effective priorities are: SW1 = 32768+100=3286832768 + 100 = 32868, SW2 = 28672+100=2877228672 + 100 = 28772, and SW3 = 28672+100=2877228672 + 100 = 28772. SW2 and SW3 tie with the lowest priority value of 28772. To break the tie, the MAC addresses are compared. Comparing `00:AA:BB:CC:DD:EE` (SW2) and `00:AA:BB:CC:DD:11` (SW3), SW3 has the lower MAC address because hexadecimal `11` is smaller than `EE`. Thus, SW3 becomes the Root Bridge for VLAN 100 with a total BID priority of 28772.

Step-by-Step Solution

1
Calculate the effective Bridge Priority for each switch for VLAN 100.
SW1 priority = 32768+100=3286832768 + 100 = 32868; SW2 priority = 28672+100=2877228672 + 100 = 28772; SW3 priority = 28672+100=2877228672 + 100 = 28772.
PVST+ incorporates the 12-bit System ID Extension (VLAN ID) into the 16-bit Priority field of the Bridge ID (BID).
2
Compare the calculated Bridge Priorities to find the lowest numerical value.
SW2 and SW3 tie with the lowest priority of 28772 (SW1 is eliminated with 32868).
STP selects the switch with the lowest Bridge Priority as the Root Bridge.
3
Break the tie between SW2 and SW3 by comparing their 48-bit MAC addresses.
SW3 (`00:AA:BB:CC:DD:11`) is lower than SW2 (`00:AA:BB:CC:DD:EE`).
When priority values are identical, STP uses the numerically lowest MAC address as the tiebreaker. Comparing byte-by-byte in hexadecimal: `11` (171017_{10}) is less than `EE` (23810238_{10}).

Key Concept

PVST+ System ID Extension and Root Bridge Election Priority/MAC Tiebreaker
Question 458Question →

Match each network core IP addressing service on the left with its primary function on the right.

Click a left item, then click its matching right item

Items

DHCP
DNS
NTP
IPAM

Matches

Show answer & explanation

Answer

DHCP pairs with dynamically assigning IP settings to host endpoints; DNS pairs with translating fully qualified domain names to IP addresses; NTP pairs with synchronizing clock times across infrastructure hardware; IPAM pairs with providing centralized tracking and inventory of IP address space.
DHCP provisions dynamic IP addresses to endpoints, DNS translates domain names into network IP addresses, NTP keeps network infrastructure device clocks synchronized, and IPAM tracks and manages enterprise IP inventory.

Step-by-Step Solution

1
Analyze each service listed on the left and identify its administrative role in IP network operations.
DHCP manages dynamic host configuration, DNS performs name resolution, NTP handles clock synchronization, and IPAM manages address space inventory.
Each core IP addressing service addresses a specific operational requirement in network management.

Key Concept

Core IP Addressing Services and Functions
Question 459Question →

A network technician is configuring a new subnet to accommodate a cluster of 4040 usable host interfaces. What is the minimum IPv4 prefix length (in CIDR notation, e.g., 2424 for /24/24) required to support this number of hosts?

Show answer & explanation

Answer: 26

Answer

The minimum IPv4 prefix length required is 26.
To support 4040 usable hosts, a subnet requires 66 host bits because 26−2=622^6 - 2 = 62 usable IP addresses (25−2=302^5 - 2 = 30 is too small). Subtracting 66 host bits from 3232 total IPv4 bits results in a prefix length of 2626 (or /26/26).

Step-by-Step Solution

1
Determine host capacity requirement
Need a subnet that provides at least 4040 usable host IP addresses.
Each subnet reserves two IP addresses: one for the network ID and one for the broadcast address.
2
Find host bits needed
66 host bits are required (26−2=622^6 - 2 = 62 usable hosts).
55 host bits only yield 3030 usable addresses, which fails the requirement of 4040 hosts.
3
Compute CIDR prefix length
32−6=2632 - 6 = 26.
An IPv4 address consists of 3232 total bits; subtracting the host bits gives the network prefix bits.

Key Concept

Host capacity formula and CIDR prefix length calculation
Question 460Question →

A network technician is configuring dynamic routing on an enterprise network to ensure efficient traffic forwarding across multiple subnets. The technician needs a interior gateway protocol that maintains a complete topological database of the network using link-state information. Which of the following dynamic routing protocols meets this requirement?

Show answer & explanation

Answer: Open Shortest Path First (OSPF)

Answer

Open Shortest Path First (OSPF) is an Interior Gateway Protocol that uses link-state advertisements to build a full map of the network topology and dynamically route Layer 3 traffic.
Open Shortest Path First (OSPF) is a link-state Interior Gateway Protocol (IGP) designed to exchange routing information within a single autonomous system. Each OSPF router collects link-state advertisements (LSAs) from neighbor routers to build a complete link-state database (LSDB), representing a map of the network topology.

Step-by-Step Solution

1
Identify the routing requirement stated in the scenario
The requirement specifies an Interior Gateway Protocol (IGP) that uses link-state information to build a complete topological map of the network.
Different routing protocols use distinct operational metrics and algorithms (e.g., link-state vs. distance-vector).
2
Evaluate the functional role of Open Shortest Path First (OSPF)
OSPF is an open standard Layer 3 link-state protocol that uses Link-State Advertisements (LSAs) to form neighbor relationships and calculate optimal paths.
OSPF satisfies both the link-state criteria and the interior network routing requirement.
3
Differentiate OSPF from non-routing protocols presented in the choices
Protocols such as STP, DHCP, and ARP perform switching, address assignment, and Layer 2 resolution functions rather than dynamic inter-network routing.
Only Layer 3 dynamic routing protocols exchange network reachability metrics to populate IP routing tables.

Key Concept

Link-state dynamic routing protocols (such as OSPF) flood network topology information to build complete network maps and calculate shortest paths across Layer 3 subnets.
Estimated Time:45s
PreviousPage 23 / 112Next
All practice questions — CompTIA Network+ | Examkin