All practice questions

2237 questions

All types2,237 Multiple choice1,150 Multiple select488 Numeric30 Matching350 Ordering201 Short answer18

A network administrator needs to provision an IPv4 subnet for a new database cluster requiring a maximum of 28 usable host IP addresses. Which CIDR prefix length represents the smallest subnet that meets this requirement?

/27

/28

/26

/29

Show answer & explanation

Answer: /27

Answer

/27 is the smallest CIDR prefix length that provides at least 28 usable host IP addresses.

The prefix length /27 allocates 5 host bits (

32 - 27 = 5

). Calculating

2^5 - 2 = 30

usable host addresses confirms that a /27 subnet is the smallest subnet capacity that safely supports 28 host devices without wasting excess address space.

Step-by-Step Solution

Determine the required number of usable IP addresses

The network segment requires at least 28 usable host IP addresses.

Host requirement stated in the scenario.

Calculate total IP addresses needed including reserved addresses

Add 2 reserved addresses (network ID and broadcast address):

28 + 2 = 30

total IP addresses.

Every IPv4 subnet reserves the first address for the network ID and the last address for the broadcast address.

Find the smallest power of 2 that is greater than or equal to the total required addresses

2^5 = 32

total IP addresses (

32 \ge 30

). Thus, 5 host bits are required.

Subnet block sizes must be powers of 2.

Subtract the host bits from 32 to find the CIDR prefix length

32 - 5 = 27

, resulting in a prefix length of /27.

An IPv4 address consists of 32 bits divided into network bits and host bits.

Key Concept

IPv4 CIDR prefix calculation and usable host address capacity

Estimated Time:1m 0s

Question 1882Question →

A network administrator is investigating severe transmission errors and dropped frames on a newly installed Category 6 UTP cable connecting a core switch to a critical server. The administrator must verify whether the copper cable installation meets official TIA/EIA structural performance standards, including measuring Near-End Crosstalk (NEXT), return loss, and attenuation under high-frequency signal loads. Which diagnostic tool should the administrator use to perform this compliance verification?

A cable certifier

A basic cable continuity tester

A tone generator and probe kit

A network packet analyzer

Show answer & explanation

Answer: A cable certifier

Answer

A cable certifier is the correct tool because it tests high-frequency parameters such as Near-End Crosstalk (NEXT) and attenuation to verify compliance with TIA/EIA standards.

A cable certifier is specifically built to test physical cabling against official TIA/EIA performance specifications. It measures advanced physical parameters including Near-End Crosstalk (NEXT), Far-End Crosstalk (FEXT), insertion loss, and return loss at operating frequencies, confirming whether a cable run is certified for high-speed Ethernet operation.

Step-by-Step Solution

Identify the troubleshooting layer and requirement.

The requirement is at Layer 1 (Physical) to verify Category 6 electrical performance and TIA/EIA certification standards under active load.

Signal degradation issues such as Near-End Crosstalk (NEXT) and return loss require physical layer testing tools capable of sending high-frequency test signals across conductors.

Evaluate the capabilities of various physical layer testing tools.

Basic continuity testers check pin mapping only; toner probes locate cables; packet analyzers inspect Layer 2–7 protocol frames. Only a cable certifier measures NEXT, return loss, attenuation, and frequency limits required for formal compliance.

Cable certifiers are specifically engineered to validate that installed cabling meets specified category standards.

Key Concept

Cable Certification and Hardware Diagnostic Tools

Estimated Time:1m 30s

Question 1883Question →

A technician is dispatched to resolve a physical connectivity issue where a desktop computer cannot establish an Ethernet connection. To isolate the physical path, the technician needs to trace the horizontal cabling run from the workstation's wall outlet, through the punch-down block, to the specific port on the patch panel in the Intermediate Distribution Facility (IDF). Which of the following documentation artifacts should the technician consult to trace this exact cable path?

Wiring schematic

Logical topology diagram

Rack elevation diagram

Network baseline report

Show answer & explanation

Answer: Wiring schematic

Answer

Wiring schematic

A wiring schematic provides detailed information about physical copper and fiber connections, including wall outlet IDs, cable run labeling, conductor pinouts, and patch panel port mappings. This makes it the appropriate documentation artifact for physically tracing structured cabling from an endpoint to an IDF.

Step-by-Step Solution

Identify the technician's objective

The technician needs to trace a physical copper cable from a wall jack through punch-down blocks to a patch panel port.

Physical troubleshooting requires documentation that maps specific physical wire runs, pinouts, and termination labels.

Evaluate document types against the physical tracing requirement

Wiring schematics explicitly document physical cable paths, jack numbers, color codes, and patch panel port assignments.

Other diagram types focus on logical routing, rack unit positioning, or performance history rather than physical wire termination details.

Key Concept

Physical Wiring Schematics and Cable Documentation

Question 1884Question →

An IT infrastructure team is performing a post-implementation audit of network documentation following a multi-site network expansion. The lead network architect emphasizes that logical network topologies must be clearly distinguished from physical topology and cabling documentation to assist with Layer 3 routing and traffic flow troubleshooting. Which of the following components should be documented specifically within a logical network diagram? (Select TWO.)

Select all that apply

IP addressing schemes, CIDR subnet masks, and assigned VLAN IDs across routing boundaries

Rack unit height locations and enclosure slot positions for core switch hardware

Virtual IP (VIP) addresses and virtual router identifier numbers used for gateway redundancy protocols

T568A vs. T568B pinout color coding standards used for copper patch panel terminations

Physical port designations and fiber optic patch panel port-to-port cross-connect mappings

Show answer & explanation

Answer: IP addressing schemes, CIDR subnet masks, and assigned VLAN IDs across routing boundaries; Virtual IP (VIP) addresses and virtual router identifier numbers used for gateway redundancy protocols

Answer

Logical network diagrams should document IP addressing schemes with subnet masks/VLAN IDs and Virtual IP addresses associated with gateway redundancy protocols.

Logical topology diagrams depict how data flows through a network at Layer 2 and Layer 3. Therefore, IP addressing schemes with VLAN assignments and Virtual IP addresses for gateway redundancy belong on logical diagrams because they define subnets, logical boundaries, and failover traffic paths.

Step-by-Step Solution

Differentiate between logical and physical network documentation requirements.

Logical documentation focuses on data paths, subnets, protocol boundaries, and IP address mappings, whereas physical documentation focuses on hardware locations, cable paths, and pinouts.

Engineers rely on logical diagrams to visualize Layer 2 and Layer 3 traffic forwarding regardless of equipment chassis placement.

Identify elements that define logical network structure.

IP addressing schemes, subnets, VLAN IDs, and Virtual IP (VIP) addresses for redundancy protocols (such as HSRP or VRRP) explicitly define logical network boundaries.

These elements govern protocol behavior, routing decisions, and logical gateway failovers.

Filter out physical equipment and cabling artifacts.

Rack elevations, physical port cross-connects, and cable pinout schematics are classified as physical documentation.

Physical details do not describe protocol-level address relationships or logical data pathways.

Key Concept

Logical vs. Physical Network Documentation

Question 1885Question →

Match each common network attack type on the left with the primary mechanism or technical indicator that best characterizes its execution on the right.

Click a left item, then click its matching right item

Show answer & explanation

Answer

Pass-the-Hash matches authenticating using extracted credential hashes directly; Smurf Attack matches sending spoofed ICMP echo requests to a broadcast address; TCP SYN Flood matches transmitting connection requests while withholding acknowledgments; Evil Twin matches operating an unauthorized access point configured with a legitimate SSID.

Each attack type matches its distinct execution vector: Pass-the-Hash authenticates via memory-harvested credential hashes without cracking cleartext passwords; a Smurf attack relies on ICMP broadcast reflection to amplify traffic against a victim; a TCP SYN flood exhausts connection state tables with incomplete handshakes; and an Evil Twin deploys a rogue wireless access point mimicking a trusted SSID.

Step-by-Step Solution

Analyze Pass-the-Hash authentication behavior.

Pass-the-Hash uses intercepted hash values directly in authentication protocols without converting them back to plaintext passwords.

This aligns with authenticating to a remote server using extracted hashed credentials from memory.

Examine the traffic reflection mechanism of a Smurf Attack.

Smurf attacks use ICMP echo requests with a spoofed target source IP directed to an IP broadcast address.

This corresponds to sending spoofed ICMP echo requests to a broadcast address to overwhelm a target.

Evaluate transport layer resource exhaustion in a TCP SYN Flood.

SYN floods exploit the TCP handshake by leaving connection requests in a SYN-RECEIVED state, consuming buffer resources.

This matches transmitting connection initialization packets while withholding final acknowledgments.

Determine wireless access point spoofing in an Evil Twin attack.

An Evil Twin mimics a legitimate wireless network identifier (SSID) to deceive wireless clients into connecting.

This matches operating an unauthorized wireless access point configured with a legitimate network SSID.

Key Concept

Identifying common network attack vectors, indicators, and execution mechanisms across layer 2 to layer 7 threats.

Question 1886Question →

A network administrator is troubleshooting connectivity issues on a Linux backup server. The server is assigned the static IP address $172.16.88.200/25$ . Local diagnostic testing reveals that the server can communicate with hosts on its immediate local network segment, but traffic destined for remote subnets fails completely. The administrator verifies the host routing table output:

text
default via 172.16.88.1 dev eth0
172.16.88.128/25 dev eth0 proto kernel scope link src 172.16.88.200

Which of the following identifies the root cause of the external connectivity failure?

The assigned default gateway IP address resides on a different IP subnet than the host server.

The access control list on the upstream router contains an implicit deny statement blocking outbound traffic.

The server is missing a DHCP relay agent configuration on interface eth0 to negotiate remote routes.

The local interface is experiencing a duplex mismatch leading to high packet drop rates on remote frames.

Show answer & explanation

Answer: The assigned default gateway IP address resides on a different IP subnet than the host server.

Answer

The assigned default gateway IP address resides on a different IP subnet than the host server.

The server's IP address

172.16.88.200/25

places it in the

172.16.88.128/25

subnet (range

172.16.88.128

172.16.88.255

). The configured default gateway

172.16.88.1

resides in the adjacent

172.16.88.0/25

subnet. A default gateway must be on the same local subnet as the host interface for Layer 2 ARP resolution and off-subnet forwarding to function.

Step-by-Step Solution

Analyze host IP address and subnet mask.

Host IP

172.16.88.200

with CIDR

/25

(

255.255.255.128

) resides in subnet

172.16.88.128/25

. Usable host range is

172.16.88.129

172.16.88.254

Subnet math determines the boundaries of the local broadcast domain.

Evaluate the configured default gateway address.

The configured default gateway is

172.16.88.1

, which falls into subnet

172.16.88.0/25

(usable range

172.16.88.1

172.16.88.126

Default gateways must reside on the same IP subnet as the local interface.

Determine the impact on host routing.

Because

172.16.88.1

is not on the

172.16.88.128/25

local network segment, ARP resolution for the default gateway fails, preventing remote traffic delivery.

Layer 3 forwarding requires the next-hop router IP to be directly reachable at Layer 2.

Key Concept

Default Gateway Subnet Alignment

Estimated Time:1m 30s

Question 1887Question →

A network administrator is assigned the IPv4 address block $172.28.40.0/23$ to provision subnets for new departmental VLANs. Each VLAN requires a minimum of 31 usable host IP addresses. What is the maximum number of subnets meeting this requirement that can be created from the assigned block?

Show answer & explanation

Answer: 8

Answer

The maximum number of valid subnets meeting the requirement is 8.

To support a minimum of 31 usable host IPs, the usable host capacity formula

2^h - 2 \ge 31

must be evaluated. With 5 host bits,

2^5 - 2 = 30

addresses are available, which is insufficient. Therefore, 6 host bits are required, providing

2^6 - 2 = 62

usable host IPs. Subtracting 6 host bits from 32 gives a prefix length of

/26

. Dividing the parent

/23

block into

/26

subnets borrows

26 - 23 = 3

bits, yielding

2^3 = 8

maximum subnets.

Step-by-Step Solution

Determine the required host bits for each subnet

6 host bits are needed (

2^6 - 2 = 62

usable addresses). 5 host bits only yield 30 usable addresses (

2^5 - 2 = 30

), which fails the 31 host requirement.

Every IPv4 subnet reserves the first address for network identification and the last address for directed broadcast, requiring 2 addresses to be subtracted from the total host capacity.

Calculate the subnet prefix length

Subnet mask prefix length is

/26

(

32 - 6 = 26

An IPv4 address contains 32 total bits; subtracting 6 host bits leaves 26 network bits.

Calculate the total number of subnets from the parent block

2^{26 - 23} = 2^3 = 8

subnets.

Subdividing a

/23

block into

/26

subnets borrows 3 additional subnet bits (

26 - 23 = 3

Key Concept

Subnet Host Capacity Formula and Prefix Allocation

Estimated Time:1m 30s

Question 1888Question →

A network administrator is investigating a connectivity issue on a newly deployed workstation on the finance floor. The user reports being able to communicate with other devices on the local subnet, but cannot access external services or the internet. The administrator runs `ipconfig /all` on the client machine and observes the following output:

IPv4 Address . . . . . . . . . . . : $10.45.20.115$
Subnet Mask . . . . . . . . . . . . : $255.255.255.0$
Default Gateway . . . . . . . . . . : $10.45.21.1$
DHCP Server . . . . . . . . . . . . : $10.45.10.15$

Which of the following identifies the root cause of the workstation's external connectivity failure?

The configured default gateway address resides on a different IP subnet than the host IP address.

The host failed to reach the DHCP server and automatically assigned itself an APIPA address.

The router's DHCP relay agent failed to forward the DHCP lease requests across subnets.

The DHCP pool scope has exhausted all available host addresses on the

10.45.20.0/24

network.

Show answer & explanation

Answer: The configured default gateway address resides on a different IP subnet than the host IP address.

Answer

The configured default gateway address resides on a different IP subnet than the host IP address.

The host IP address (

10.45.20.115

) with mask

255.255.255.0

places the device on the

10.45.20.0/24

network. The default gateway (

10.45.21.1

) resides on the

10.45.21.0/24

network. A host cannot route packets outside its local segment if its default gateway is on a different subnet, resulting in local-only network connectivity.

Step-by-Step Solution

Calculate the workstation's local network address range

Host IP

10.45.20.115

with Subnet Mask

255.255.255.0

means the local subnet is

10.45.20.0/24

(usable host IPs:

10.45.20.1

10.45.20.254

Determines the boundaries of the local broadcast domain.

Evaluate the default gateway IP address against the local subnet boundaries

The configured gateway

10.45.21.1

falls outside the

10.45.20.0/24

subnet.

A default gateway must be a Layer 3 interface directly reachable on the local IP subnet segment.

Correlate symptoms with the configuration mismatch

Local traffic works because ARP resolves local IPs directly; remote traffic fails because the host cannot reach its default gateway on the local segment.

Explains why intra-subnet connectivity succeeds while inter-subnet/internet traffic fails.

Key Concept

Default Gateway Subnet Alignment

Question 1889Question →

A network administrator is configuring DNS records for an enterprise web service. The administrator needs to map the alias hostname `portal.corp.example.com` to the primary canonical domain name `webserver01.corp.example.com`, which ultimately resolves to IPv4 address `10.50.10.15`.

Review the DNS lookup query output below:

text
$ dig portal.corp.example.com

;; QUESTION SECTION:
;portal.corp.example.com. IN A

;; ANSWER SECTION:
portal.corp.example.com. 300 IN ???? webserver01.corp.example.com.
webserver01.corp.example.com. 300 IN A 10.50.10.15

Which DNS record type is represented by `????` in the lookup response?

CNAME

PTR

SRV

Show answer & explanation

Answer: CNAME

Answer

The CNAME record type is used to map an alias domain name (portal.corp.example.com) to a canonical domain name (webserver01.corp.example.com).

A CNAME (Canonical Name) record is used in DNS to create an alias pointing one domain name to another true (canonical) domain name. In the provided dig output, portal.corp.example.com points to webserver01.corp.example.com, which subsequently resolves to IP address 10.50.10.15.

Step-by-Step Solution

Analyze the query output structure

The query requests an A record for portal.corp.example.com, but the first entry in the answer section maps portal.corp.example.com directly to another domain name (webserver01.corp.example.com).

Understanding how DNS chains resolutions requires examining the record relationship between the requested name and target name.

Identify the record type function

The record type that aliases one fully qualified domain name (FQDN) to another canonical FQDN is a Canonical Name (CNAME) record.

CNAME records allow multiple alias hostnames to point to a single canonical record without needing separate A/AAAA records for each host.

Key Concept

DNS Record Types and Functionality (CNAME vs. PTR/SRV/NS)

Estimated Time:1m 0s

Question 1890Question →

Match each command-line network utility invocation to its primary operational purpose during a network diagnostic workflow.

Click a left item, then click its matching right item

Show answer & explanation

Answer

The command 'ipconfig /flushdns' pairs with clearing the local DNS resolver cache; 'tracert -d host.example.com' pairs with tracing path hops without resolving hostnames; 'netstat -ano' pairs with displaying active network sessions, numerical ports, and process IDs; and 'arp -a' pairs with displaying the IP-to-MAC address cache table.

Each command-line utility serves a distinct diagnostic role: 'ipconfig /flushdns' clears cached DNS resolver entries; 'tracert -d' measures hop-by-hop reachability while suppressing slow reverse DNS lookups; 'netstat -ano' details active TCP/UDP connections with numerical endpoints and process IDs; and 'arp -a' displays local subnet IP-to-MAC address mappings.

Step-by-Step Solution

Analyze DNS client utilities

Identify that 'ipconfig /flushdns' purges the DNS resolver cache.

Flushdns specifically empties cached DNS records on Windows operating systems.

Analyze ICMP path diagnostic switches

Match 'tracert -d' to path tracing with disabled reverse DNS lookup.

The '-d' flag instructs traceroute/tracert to avoid resolving IP addresses to domain names, saving diagnostic time.

Analyze socket and session monitoring tools

Match 'netstat -ano' to active session listing with numerical ports and owning process IDs.

The flags '-a' (all), '-n' (numerical), and '-o' (owning PID) combine to report local and remote connection state details.

Analyze Layer 2 mapping tools

Match 'arp -a' to viewing the host's IP-to-MAC address resolution cache table.

The Address Resolution Protocol table stores Ethernet MAC address mappings for local subnet IP addresses.

Key Concept

Selecting and interpreting command-line utilities and flags for network diagnostics

Question 1891Question →

A network operations team is reviewing disaster recovery procedures for a database server hosting critical transactional data. The current strategy includes a weekly full backup performed every Sunday at midnight, supplemented by daily backups during the workweek. The team needs to optimize for rapid system restoration while accurately understanding how file flags and data sets interact during recovery. Which of the following statements accurately describe the technical mechanics and restoration workflows of incremental and differential backups? (Select TWO.)

Select all that apply

Restoring a system configured with a differential backup strategy requires applying the Sunday full backup followed only by the single most recent differential backup taken prior to the system failure.

Incremental backup jobs clear the archive bit on processed files, whereas differential backup jobs leave the archive bit intact.

Restoring a system configured with an incremental backup strategy requires applying only the Sunday full backup and the single incremental backup taken immediately preceding the outage.

Daily differential backup files consume progressively less storage space as the week advances compared to daily incremental backup files.

Differential backups clear the archive bit after execution to ensure that the next differential job excludes previously backed-up files.

Show answer & explanation

Answer: Restoring a system configured with a differential backup strategy requires applying the Sunday full backup followed only by the single most recent differential backup taken prior to the system failure.; Incremental backup jobs clear the archive bit on processed files, whereas differential backup jobs leave the archive bit intact.

Answer

The correct statements are that differential restoration requires applying only the full backup plus the single latest differential backup, and that incremental backup jobs clear the archive bit while differential backup jobs do not clear it.

Differential backups accumulate all data modified since the baseline full backup because they do not clear the archive bit. Consequently, restoring a system running differential backups requires only two restore steps: the full backup baseline and the single most recent differential backup. Conversely, incremental backups clear the archive bit on each run so that subsequent jobs only grab newly changed files, requiring every incremental backup file to be restored sequentially after the full backup.

Step-by-Step Solution

Analyze how differential backups track changed data and manage the archive attribute.

Differential backups copy all files modified since the last full backup and do not clear the archive bit, allowing each differential backup to contain the cumulative changes of the week.

Because the archive bit is retained, every differential file contains a complete aggregate of changed data since the baseline full backup.

Determine the restoration path for a differential backup strategy.

The restoration sequence requires the baseline full backup plus the single latest differential backup file.

The latest differential backup file supersedes all earlier differential backup files taken during the same backup cycle.

Contrast incremental backup mechanics with differential backup mechanics.

Incremental backups clear the archive bit upon completion and require restoring the full backup along with every incremental file in order.

Clearing the archive bit ensures that incremental backups contain only data modified since the immediate prior backup.

Key Concept

Differential vs Incremental Backup Restoration Mechanics and Archive Attribute Management

Question 1892Question →

A network engineer is configuring static host IP addresses for infrastructure servers within the allocated CIDR block $10.240.16.0/21$ . Which of the following IP addresses are valid usable host addresses within this subnet? (Select TWO.)

Select all that apply

10.240.16.0

10.240.17.100

10.240.20.255

10.240.23.255

Show answer & explanation

Answer: $10.240.17.100$ ; $10.240.20.255$

Answer

The addresses

10.240.17.100

and

10.240.20.255

are valid usable host IP addresses within the

10.240.16.0/21

subnet.

For the subnet

10.240.16.0/21

, the usable host range spans from

10.240.16.1

through

10.240.23.254

. Both

10.240.17.100

and

10.240.20.255

fall within this valid range. Note that

10.240.20.255

is valid because the broadcast address for the entire

/21

block is

10.240.23.255

Step-by-Step Solution

Determine the subnet mask and block size from CIDR notation.

/21

mask corresponds to

255.255.248.0

. The block size in the third octet is

256 - 248 = 8

Calculating block size establishes the boundary of the subnetwork.

Identify the network ID and broadcast address for the

10.240.16.0/21

subnet.

Network ID:

10.240.16.0

. Next subnet ID:

10.240.24.0

. Broadcast Address:

10.240.23.255

The network address is the first address in the block, and the broadcast address is the last address before the next subnet boundary.

Determine the range of usable host IP addresses.

Usable host range is from

10.240.16.1

10.240.23.254

The first usable IP is Network ID

+ 1

, and the last usable IP is Broadcast ID

- 1

Evaluate the candidate options against the valid host range.

10.240.17.100

and

10.240.20.255

fall strictly between

10.240.16.1

and

10.240.23.254

10.240.16.0

is the Network ID and

10.240.23.255

is the Broadcast ID.

Only IP addresses between the network address and broadcast address can be assigned to host interfaces.

Key Concept

Subnet Host Range Boundaries & Intermediate Octet .255 Host Addresses

Question 1893Question →

A network engineer is designing a wireless deployment for a high-density corporate auditorium intended to support up to 500 active user devices simultaneously. Initial deployment testing reveals severe co-channel interference (CCI) and degraded throughput despite strong signal coverage throughout the room. Which TWO configuration changes should the engineer implement to mitigate CCI and optimize performance in this high-density environment?

Select all that apply

Reduce the radio transmit power (

Tx

power) on the access points to shrink individual cell sizes.

Disable legacy low data rates (such as

1\text{ Mbps}

and

2\text{ Mbps}

) to decrease management frame overhead and airtime utilization.

Increase the channel bonding width from

20\text{ MHz}

80\text{ MHz}

across all

2.4\text{ GHz}

and

5\text{ GHz}

access points.

Assign adjacent access points to overlapping

2.4\text{ GHz}

channels such as channels 2, 4, and 8 to spread out frequency usage.

Set omnidirectional antenna gain to maximum power on all access points to maximize coverage reach.

Show answer & explanation

Answer: Reduce the radio transmit power ( $Tx$ power) on the access points to shrink individual cell sizes.; Disable legacy low data rates (such as $1\text{ Mbps}$ and $2\text{ Mbps}$ ) to decrease management frame overhead and airtime utilization.

Answer

The two correct configuration changes are reducing radio transmit power on access points to shrink cell sizes and disabling low legacy data rates to minimize management frame overhead.

In high-density wireless deployments, optimizing performance requires mitigating co-channel interference (CCI) and maximizing airtime efficiency. Reducing access point transmit power shrinks coverage cell radii so adjacent access points operating on the same channel do not overlap or interfere. Additionally, disabling slow legacy data rates (such as

1\text{ Mbps}

2\text{ Mbps}

) reduces management frame overhead transmitted at low data rates and forces client devices to disconnect and roam to closer access points when signal quality degrades.

Step-by-Step Solution

Analyze the high-density deployment problem

Identified co-channel interference (CCI) and high airtime utilization as primary root causes of performance degradation.

When many APs operate in close proximity, large cell footprints cause APs on the same channel to hear each other and contend for airtime.

Evaluate cell sizing strategies

Lowering

Tx

power shrinks RF cell boundaries.

Smaller cell footprints allow frequency reuse without RF overlap between access points on identical channels.

Evaluate airtime efficiency measures

Disabling legacy data rates (

1\text{ Mbps}

2\text{ Mbps}

5.5\text{ Mbps}

) forces higher data rate modulations.

Management frames (beacons, probe responses) transmitted at basic rates consume significant medium time; disabling slow rates frees up channel capacity.

Key Concept

High-density wireless network optimization requires reducing AP cell size via transmit power tuning and disabling legacy basic data rates to control co-channel interference and airtime contention.

Question 1894Question →

A network administrator is documenting the primary gateway interface for a newly provisioned IPv6 network segment. The central management portal requires all IPv6 host addresses to be recorded strictly following the RFC 5952 canonical representation standard. The interface has been assigned the uncompressed address $2001:0db8:0000:0000:00ab:0000:0000:0001/64$ . Which of the following options represents the correct RFC 5952 compressed format for this address?

2001:db8::ab:0:0:1/64

2001:db8:0:0:ab::1/64

2001:db8::ab::1/64

2001:0db8::ab:0:0:1/64

Show answer & explanation

Answer: 2001:db8::ab:0:0:1/64

Answer

The correct RFC 5952 representation of the IPv6 address is 2001:db8::ab:0:0:1/64.

According to RFC 5952, canonical compression requires removing leading zeros from every 16-bit hextet (reducing '0db8' to 'db8', '00ab' to 'ab', and '0001' to '1'). When an address contains two separate sequences of zero fields of equal length (in this case, two runs of two zero hextets), the double-colon (::) must compress the first sequence on the left. This yields the canonical format 2001:db8::ab:0:0:1/64.

Step-by-Step Solution

Suppress leading zeros in all 16-bit hex fields (hextets).

2001:0db8:0000:0000:00ab:0000:0000:0001 becomes 2001:db8:0:0:ab:0:0:1.

RFC 5952 mandates that leading zeros within each 16-bit field must be removed (e.g., 0db8 becomes db8, 00ab becomes ab, 0000 becomes 0, and 0001 becomes 1).

Identify candidate consecutive zero sequences for double-colon (::) compression.

Two separate zero runs of equal length exist: fields 3-4 (0:0) and fields 6-7 (0:0).

The double-colon symbol can only be used once in an IPv6 address to represent consecutive zero fields.

Apply RFC 5952 tie-breaking rules for equal-length zero sequences.

Compress the first zero sequence (fields 3-4), producing 2001:db8::ab:0:0:1/64.

RFC 5952 Section 4.2.3 explicitly specifies that when multiple zero sequences of equal maximum length exist, the first sequence must be compressed.

Key Concept

RFC 5952 IPv6 Address Canonical Representation and Compression Rules

Question 1895Question →

A network technician is migrating a branch office segment to a new IPv4 addressing scheme ( $10.50.40.0/24$ ). Workstations on VLAN 40 successfully acquire IP addresses from the central DHCP server, but users report they cannot reach servers on other subnets or access the internet. An output inspection of `ipconfig /all` on an affected client displays the following parameters:

- IPv4 Address: $10.50.40.88$
- Subnet Mask: $255.255.255.0$
- Default Gateway: $10.50.4.1$
- DHCP Server: $10.20.10.5$

Which TWO of the following configuration changes are required to restore full routing capabilities for these workstations?

Select all that apply

Update DHCP Scope Option 003 on the DHCP server to assign a gateway address residing on the

10.50.40.0/24

subnet.

Reconfigure the switchport connected to the host to use static APIPA addressing in the

169.254.0.0/16

range.

Ensure the router interface servicing VLAN 40 is configured with an IP address on the

10.50.40.0/24

subnet.

Change the IP helper address on the VLAN 40 router interface to point directly to

10.50.4.1

Show answer & explanation

Answer: Update DHCP Scope Option 003 on the DHCP server to assign a gateway address residing on the $10.50.40.0/24$ subnet.; Ensure the router interface servicing VLAN 40 is configured with an IP address on the $10.50.40.0/24$ subnet.

Answer

To resolve the routing issue, the administrator must update DHCP Scope Option 003 on the DHCP server so clients receive a gateway address within

10.50.40.0/24

, and ensure the router interface on VLAN 40 is configured with a corresponding IP address in that same subnet.

For a host to communicate outside its local subnet, its default gateway must reside on the exact same IPv4 network segment. Updating DHCP Scope Option 003 ensures that clients receive a default gateway address within

10.50.40.0/24

, and verifying that the router interface servicing VLAN 40 has an IP address assigned in

10.50.40.0/24

establishes the required physical Layer 3 forwarding point.

Step-by-Step Solution

Analyze client IP configuration settings from the `ipconfig /all` snippet.

Identified that the client IPv4 address (

10.50.40.88/24

) and the configured default gateway (

10.50.4.1

) reside on different IP subnets.

A default gateway must reside on the same logical IP subnet as the client host to receive local Layer 2 frames destined for external routing.

Determine the necessary DHCP server scope modification.

Option 003 (Default Gateway) must be updated to an IP address within the client's local subnet range (

10.50.40.0/24

Clients automatically pull their network configuration parameters via DHCP; modifying Option 003 ensures all scope lease recipients acquire a valid local gateway address.

Verify physical/logical router interface addressing on the local VLAN gateway.

The router interface attached to VLAN 40 must be assigned an IP address within

10.50.40.0/24

matching the updated Option 003 value.

Without a corresponding active Layer 3 interface on the router inside the

10.50.40.0/24

broadcast domain, packets destined outside the subnet cannot be processed.

Key Concept

Default Gateway Subnet Alignment and DHCP Option 003 Configuration

Question 1896Question →

Match each DNS resource record type to its primary administrative function within an enterprise network infrastructure.

Click a left item, then click its matching right item

Show answer & explanation

Answer

SRV matches service location with host and port information; PTR matches reverse DNS IP-to-hostname mapping; TXT matches text data storage for email security mechanisms like SPF and DKIM; MX matches designation of recipient mail servers.

Each record type handles distinct DNS functionalities: SRV specifies service endpoints with port numbers; PTR maps IP addresses to hostnames in reverse lookups; TXT contains arbitrary text payloads used primarily for domain authentication like SPF and DKIM; MX designates the authoritative mail processing servers for a domain.

Step-by-Step Solution

Analyze the function of SRV records

SRV records include both target hostnames and destination port numbers.

Applications like VoIP (SIP) and Active Directory rely on SRV records to discover service endpoints on custom ports.

Analyze the function of PTR records

PTR records perform reverse DNS resolution in pointer zones.

PTR maps an IP address to a fully qualified domain name (FQDN).

Analyze the function of TXT records

TXT records carry text payload for domain validation and mail security.

Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) records are published within TXT record fields.

Analyze the function of MX records

MX records specify designated mail servers for a domain.

SMTP servers query MX records to route incoming messages to the correct destination host.

Key Concept

DNS Resource Record Types and Functions

Question 1897Question →

A network operations team is updating its documentation standards following an enterprise network expansion. Match each network documentation artifact with its primary operational use case.

Click a left item, then click its matching right item

Show answer & explanation

Answer

The port mapping matrix pairs with switch port to wall jack correlation; the asset management database pairs with device serial numbers and hardware lifecycle tracking; the wireless site survey heat map pairs with RF signal and attenuation evaluation; the logical network topology diagram pairs with VLAN, VRRP, and routing path visualization.

Each artifact serves a distinct operational purpose in network administration: port mapping matrices record physical interface-to-outlet links; asset management databases manage device inventory and lifecycle information; wireless heat maps visualize radio frequency coverage across physical spaces; logical network diagrams depict IP subnets, VLANs, and protocol paths.

Step-by-Step Solution

Analyze physical cabling trace documentation requirements

Identify that tracing switch port interfaces to patch panel terminations and physical wall jack IDs requires a port mapping matrix.

Structured cabling infrastructure demands precise port-to-port mapping records for cable tracing and physical troubleshooting.

Analyze hardware inventory and procurement documentation requirements

Match asset management databases with tracking device serial numbers, support contracts, and lifecycle milestones.

Asset management systems maintain financial, procurement, and inventory records rather than topology layouts.

Analyze wireless propagation and physical environment documentation

Match wireless site survey heat maps with RF coverage analysis, dead zones, and co-channel interference.

Heat maps visually map radio signal attenuation and RSSI levels across floor plans.

Analyze logical protocol and routing documentation

Match logical topology diagrams with VLAN subnets, VRRP redundancy groups, and routing protocol paths.

Logical diagrams represent software-defined and protocol-layer relationships governing network traffic flow.

Key Concept

Different network documentation artifacts serve specialized operational functions covering physical cabling mapping, inventory management, wireless propagation analysis, and logical protocol topology.

Question 1898Question →

A network technician needs to determine which port on a busy 48-port patch panel connects to an unlabeled wall outlet in a newly renovated conference room. Which hardware troubleshooting tool should the technician connect to the outlet to trace the physical cable run back to the correct patch panel port?

Tone generator and probe kit

Time-domain reflectometer (TDR)

Loopback plug

Multimeter

Show answer & explanation

Answer: Tone generator and probe kit

Answer

The tone generator and probe kit is the correct tool for placing a signal on a wire pair to audibly trace and identify the corresponding patch panel termination.

The correct tool is a tone generator and probe kit (often called a fox and hound). The tone generator injects a signal onto the copper cabling at the wall outlet, and the inductive probe picks up the generated electromagnetic tone at the patch panel end, allowing rapid identification of the unlabeled port.

Step-by-Step Solution

Identify the goal of physical cable tracing across patch panels.

Recognize that locating an unknown wire run requires placing a recognizable signal on one end and detecting it at the remote destination.

Structured cabling runs through walls and conduits, preventing visual inspection.

Evaluate hardware diagnostic tools based on their primary function.

A tone generator connects to the outlet RJ45 port and transmits a tone signal along the copper pair, allowing the non-contact inductive probe to detect the tone when brought near the correct patch panel port wire termination.

Inductive probing enables fast identification without having to individually plug into or strip wires across 48 panel ports.

Key Concept

Cable Tracing and Identification Tools

Question 1899Question →

A network technician is performing an audit on core router configuration files and identifies an uncompressed Unique Local IPv6 Address (ULA) recorded in full hexadecimal format as `fd12:0000:0000:a1b2:0000:0000:0000:0099`. To ensure compliance with enterprise documentation guidelines, the technician must format this address according to standard RFC 5952 rules. What is the correctly compressed RFC 5952 representation of this IPv6 address?

Show answer & explanation

Answer: fd12:0:0:a1b2::99

Answer

fd12:0:0:a1b2::99

Under RFC 5952 rules, leading zeros in every 16-bit hexadecimal field are suppressed, reducing `0000` to `0` and `0099` to `99`. When multiple zero runs exist, the double colon `::` must replace the single longest contiguous run of zero fields. In `fd12:0000:0000:a1b2:0000:0000:0000:0099`, the first zero run spans 2 fields (`0:0`) and the second zero run spans 3 fields (`0:0:0`). Compressing the longer 3-field sequence yields `fd12:0:0:a1b2::99`.

Step-by-Step Solution

Suppress leading zeros in each 16-bit hexadecimal field.

fd12:0:0:a1b2:0:0:0:99

RFC 5952 Section 4.1 mandates that leading zeros in a 16-bit field must be removed (e.g., '0000' becomes '0' and '0099' becomes '99').

Identify all contiguous sequences of all-zero 16-bit fields.

Sequence 1 has 2 zero fields ('0:0'); Sequence 2 has 3 zero fields ('0:0:0').

To apply double-colon ('::') compression properly, the lengths of all consecutive zero runs must be evaluated.

Apply double-colon ('::') compression strictly to the longest sequence of zero fields.

fd12:0:0:a1b2::99

RFC 5952 Section 4.2.2 requires that '::' must replace the single longest run of consecutive zero fields. Sequence 2 (3 fields) is longer than Sequence 1 (2 fields).

Key Concept

RFC 5952 IPv6 Address Text Representation and Zero Compression Rules

Estimated Time:1m 0s

Question 1900Question →

Users on a newly provisioned branch office subnet ( $172.16.40.0/24$ ) report an inability to reach intranet services or external websites. Running `ipconfig /all` on an affected client workstation yields the following output:

IPv4 Address. . . . . . . . . . . : 169.254.14.88
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCP Server . . . . . . . . . . . :

The central DHCP server is located on the headquarters data center VLAN ( $192.168.10.0/24$ ). Network operations confirms that the DHCP scope for $172.16.40.0/24$ is online and contains 150 available IP addresses. Which of the following is the most likely root cause of this issue?

The router interface serving as the default gateway for

172.16.40.0/24

lacks a configured DHCP relay agent (IP helper address).

The client workstations were manually misconfigured with static APIPA addresses that bypass the default gateway.

The DHCP scope for

172.16.40.0/24

has exhausted all usable host IP addresses due to incorrect network address calculations.

The workstations successfully leased an IP address but were provisioned with a Default Gateway residing on a different subnet.

Show answer & explanation

Answer: The router interface serving as the default gateway for $172.16.40.0/24$ lacks a configured DHCP relay agent (IP helper address).

Answer

The router interface acting as the default gateway for the branch subnet is missing a DHCP relay agent (IP helper address) to forward broadcast DHCP requests across subnets.

DHCP requests begin as Layer 2 broadcast packets. Routers drop Layer 2 broadcasts by default. When the DHCP server resides on a different network segment from the clients, the router interface facing the client subnet must be configured with a DHCP relay agent (such as `ip helper-address` in Cisco IOS) to convert broadcast requests into unicast traffic directed to the remote DHCP server. Without this, clients fallback to APIPA (

169.254.x.x

Step-by-Step Solution

Analyze the client workstation IP address output.

The client has an address of

169.254.14.88

with no Default Gateway or DHCP Server listed.

Addresses in the

169.254.0.0/16

range indicate that APIPA assigned the IP after the client sent DHCP DISCOVER requests without receiving a DHCP OFFER response.

Evaluate the network architecture and DHCP server status.

The DHCP server is on a separate subnet (

192.168.10.0/24

) and has active, unallocated leases available.

Since the server has capacity, the failure is occurring in transport between the client subnet (

172.16.40.0/24

) and the server subnet.

Identify Layer 3 boundary behavior for broadcast traffic.

DHCP DISCOVER messages are Layer 2 broadcasts (

255.255.255.255

) and do not cross routers by default.

To forward these broadcast requests as unicast packets to a DHCP server on another subnet, the local router interface must be configured with a DHCP relay agent (`ip helper-address`).

Key Concept

DHCP Relay / IP Helper Agent Configuration

PreviousPage 95 / 112Next

All practice questions

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept

Common Mistakes

Answer

Step-by-Step Solution

Key Concept