All practice questions
2237 questions
A network analyst inspecting a packet capture between a wireless access point and a centralized authentication server observes that while the user password field within the Access-Request frame is obscured, the username and assigned VLAN attributes are visible in cleartext. Which operational characteristic of the RADIUS protocol accounts for this observed behavior?
During a routine maintenance window, a network administrator attempts to apply a firmware update to a core distribution switch at an unmanned remote facility. The update fails, corrupting the flash memory and placing the switch into a continuous boot loop, which brings down all VLAN interfaces and primary IP routing. The administrator needs to gain low-level CLI access to the switch's bootloader to restore the operating system image and must also be able to perform a hard power-cycle if the device hangs. Which out-of-band management configuration best fulfills these requirements?
A network administrator is configuring a new wireless deployment for a corporate headquarters. The company's security policy requires each employee to authenticate using their individual domain credentials managed by a central RADIUS server, while ensuring robust encryption for all wireless traffic. Which wireless security configuration best fulfills these operational requirements?
During a routine security audit, a systems engineer notices that remote administration sessions to a core network switch transmit credentials in plaintext. Which administrative change should be implemented to secure interactive command-line access to the switch?
An organization is deploying a centralized AAA architecture, configuring RADIUS for 802.1X wireless access and TACACS+ for administration of network infrastructure devices. Which of the following operational characteristics accurately describe these protocols in this design? (Select TWO.)
Select all that apply
A network administrator is preparing to update SNMP community strings and syslog server configurations across all data center switches to align with an updated security baseline. The administrator has already drafted the configuration syntax and conducted a risk assessment identifying potential monitoring outages. Which of the following actions should the administrator perform next in accordance with formal change management procedures?
Match each wireless signal issue with its primary cause or physical manifestation.
Click a left item, then click its matching right item
Items
Matches
A network infrastructure team is deploying an edge micro data center enclosure on an active manufacturing floor to process real-time telemetry. Due to high physical traffic, ambient dust, and unauthorized personnel in the vicinity, the team must implement appropriate physical security access controls and environmental protection measures for the enclosure. Which TWO of the following controls should be deployed to address these specific access and environmental threats?
Select all that apply
A network technician is troubleshooting a workstation that is experiencing name resolution issues. Arrange the following diagnostic and remediation steps in the correct sequential order from first to last.
Drag items to arrange them in the correct order
A senior network security architect is designing physical and environmental defense controls for a tier-four enterprise data facility housing mission-critical financial databases. Match each physical or environmental control mechanism on the left with its primary security or environmental risk mitigation capability on the right.
Click a left item, then click its matching right item
Items
Matches
During an internal penetration test, an analyst connects a laptop to a standard user access port on a Managed Layer 2 switch. Without deploying double-encapsulated 802.1Q tags or compromising any credentials, the analyst crafts specific control frames that force the switch port into an active trunking state. This allows the laptop to send and receive traffic across multiple restricted VLANs. Which attack vector was exploited to breach VLAN isolation, and what is the primary mitigation step required to prevent it?
During a wireless network performance audit of a open-plan office, a network administrator observes high frame retransmission rates and latency for clients connected to the 2.4 GHz band. A physical scan reveals that three neighboring access points (APs) mounted along the main corridor are assigned to channels 1, 3, and 6, each operating with a 20 MHz channel width. What is the primary cause of this performance degradation, and how should it be resolved?
A network administrator is setting up a secure remote access VPN that uses Layer 2 Tunneling Protocol over IPsec (L2TP/IPsec). Place the steps required to establish a fully functional L2TP/IPsec VPN connection in the correct chronological order from first to last.
Drag items to arrange them in the correct order
Following an overnight firmware upgrade on a multi-building enterprise network, users in one building report intermittent access to resources on other subnets. A network engineer systematically tests several hypotheses, eventually capturing traffic on the distribution switch and confirming that an unannounced native VLAN configuration change on a trunk link is causing tagged frame leaks and packet drops. Having successfully confirmed the root cause of the issue, which of the following actions should the engineer take next in accordance with the CompTIA troubleshooting methodology?
An IT consultant is diagnosing severe throughput degradation and high retransmission rates on a corporate suite's 2.4 GHz wireless network in a multi-tenant office building. A spectrum analyzer capture indicates that a neighboring tenant's unmanaged access point is broadcasting on Channel 4 using a standard 20 MHz channel width. To eliminate adjacent-channel interference and establish total RF spectrum isolation for the corporate suite on the 2.4 GHz band, which channel should the administrator assign to the internal access point?
A network technician is configuring a new standalone wireless access point using WPA3-Personal for a small branch office that lacks a centralized AAA/RADIUS infrastructure. Which of the following technical features are native capabilities of WPA3-Personal that directly enhance security compared to WPA2-Personal? (Select TWO.)
Select all that apply
A network engineer is drafting a formal Request for Change (RFC) to update the configuration baseline and firmware of critical core switches in a financial datacenter. Which of the following elements must be included in the RFC documentation before submitting it for Change Advisory Board (CAB) review? (Select TWO.)
Select all that apply
A system administrator executes a lookup command to test hostname resolution for a new database server. The command output is as follows:
text
$ dig db01.company.local
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
Which of the following issues is directly indicated by the response status in this output?
A network administrator is designing an enterprise monitoring and telemetry strategy. Match each monitoring technology or protocol to its primary functional characteristic.
Click a left item, then click its matching right item
Items
Matches
A network technician is performing a wireless site survey to diagnose several radio frequency (RF) signal degradation issues across an enterprise environment. Match each RF propagation phenomenon to its primary physical cause or characteristic manifestation.
Click a left item, then click its matching right item
Items
Matches