All practice questions
488 questions
A client workstation on VLAN 20 () broadcasts a DHCPDISCOVER message to obtain an IP configuration. The Layer 3 switch interface acting as the default gateway for VLAN 20 is configured with an IP helper address pointing to a centralized DHCP server at on VLAN 99. Which of the following operations accurately describe how the relay agent processes and forwards this message? (Select TWO.)
Select all that apply
An enterprise network engineer is deploying redundant centralized DHCP servers ( and ) located in a dedicated management subnet. Workstations are partitioned across three client subnets (VLAN 20: , VLAN 30: , and VLAN 40: ) terminated on a Layer 3 core switch serving as their default gateway. Which TWO of the following statements correctly describe the technical mechanics and configuration requirements for the Layer 3 switch when relaying DHCPDISCOVER broadcast requests to the server pool?
Select all that apply
A network administrator is configuring dynamic IP addressing and name resolution services across an enterprise network. The organization requires client hostnames to be automatically registered in the internal DNS zone whenever a host receives an IPv4 address lease from the centralized DHCP server. Which TWO of the following steps must be configured to enable dynamic DNS (DDNS) updates between the DHCP and DNS servers?
Select all that apply
A network architect is evaluating an existing industrial facility deployment that uses a hybrid physical star, logical bus network topology. Which of the following statements accurately describe the structural and operational characteristics of this hybrid network layout? (Select TWO.)
Select all that apply
A network engineer is configuring a Layer 3 switch to relay DHCP requests from client workstations on VLAN 35 () to two redundant central DHCP servers located on VLAN 100 ( and ). Which of the following statements correctly describe the behavior and operational mechanics of the DHCP relay agent when processing these client requests? (Select TWO options.)
Select all that apply
An IT infrastructure team is upgrading a data center's storage and core network architecture by introducing a dedicated Storage Area Network (SAN) alongside a full-mesh topology for core switches. Which of the following statements correctly describe the technical characteristics and operational trade-offs of these implementations? (Select TWO.)
Select all that apply
A network technician is configuring DNS resources for a newly deployed web server that must support dual-stack network connectivity. Which TWO of the following DNS record types must be created to resolve the server's hostname directly to its assigned IPv4 and IPv6 addresses?
Select all that apply
Two enterprise switches, Switch-1 and Switch-2, run Rapid Spanning Tree Protocol (IEEE 802.1w). Switch-1 is the elected Root Bridge. Switch-2 connects to Switch-1 via a direct full-duplex Ethernet link. Additionally, Switch-2 has two redundant physical links connected directly to the same downstream shared hub. Which TWO of the following statements correctly describe the RSTP port roles and operational behaviors in this scenario?
Select all that apply
An enterprise firewall is configured to handle traffic between an internal network () and the Internet. The administrator configures Port Address Translation (PAT / NAT Overload) using the firewall's public interface IP address () for internal host outbound access. Simultaneously, a Static NAT rule is configured to map an internal web server () to a dedicated public IP address (). Which of the following statements accurately describe how address translation operates in this environment? (Select TWO.)
Select all that apply
A network engineer is configuring access control lists (ACLs) on a perimeter firewall to support infrastructure maintenance and monitoring. The configuration must allow network routers to synchronize system clocks with an internal time server and send asynchronous event notifications to a centralized monitoring station. Which of the following port and transport protocol combinations must be permitted through the firewall? (Select TWO.)
Select all that apply
A network engineer is updating physical documentation for an enterprise server room to ensure rapid hardware tracing and electrical load auditing during maintenance. Which of the following parameters are essential components of physical rack and power inventory documentation? (Select TWO.)
Select all that apply
A network administrator is designing a high-density enterprise wireless network using Wi-Fi 6 (802.11ax) access points. The goal is to optimize spectrum efficiency, reduce co-channel interference (CCI) in overlapping coverage areas, and efficiently support a large volume of concurrent client connections. Which of the following features or deployment strategies should the administrator implement? (Select TWO.)
Select all that apply
A network administrator is troubleshooting an issue with a newly deployed Power over Ethernet (PoE+) pan-tilt-zoom (PTZ) IP camera installed at the end of a 85-meter Category 6 UTP cable run. The camera initializes and streams video normally during daylight, but repeatedly reboots whenever its infrared (IR) illuminators turn on at night. A basic wiremapper confirms all eight conductors have pin-to-pin continuity and proper T568B pinout. Which TWO of the following physical layer causes or diagnostic approaches are most appropriate to identify and resolve this failure?
Select all that apply
A network engineering team is designing a multi-floor high-density enterprise wireless deployment using IEEE 802.11ax access points operating in both the 2.4 GHz and 5 GHz bands. During the predictive site survey phase, the team must configure the deployment to minimize co-channel interference (CCI), prevent coverage overlap issues, and optimize client band steering toward 5 GHz. Which of the following technical design decisions and configuration strategies should the team implement? (Select THREE).
Select all that apply
A network systems engineer is configuring edge firewall access control lists (ACLs) to allow administrators to deploy a secure web management portal that authenticates domain users against an encrypted centralized directory server. Which TWO of the following port and transport protocol combinations must be permitted through the firewall to support these services? (Select TWO.)
Select all that apply
A network administrator is designing security controls for transmitting sensitive corporate financial records between two remote office sites over an untrusted public network. The controls must ensure that unauthorized parties cannot intercept and read the data, and that any tampering during transit is immediately detected. Which TWO of the following technical mechanisms should the administrator implement to satisfy these requirements? (Select TWO.)
Select all that apply
A network security engineer is deploying a remote access VPN solution using L2TP over IPsec (L2TP/IPsec) to support remote workers connecting from behind residential NAT routers. Authentication will be offloaded to a central enterprise AAA server. Which of the following port and protocol configurations must be permitted on the network firewalls and VPN gateway to ensure successful connection establishment and authentication? (Select TWO.)
Select all that apply
An organization is deploying an enterprise remote access VPN solution for mobile users who frequently operate behind Carrier-Grade NAT (CGNAT) and restrictive corporate firewalls. The network security team requires mutual certificate authentication, complete confidentiality of internal IP headers, and seamless NAT traversal without dropping integrity checks. Which of the following technical configurations and protocol mechanisms must be selected to satisfy these requirements? (Select TWO.)
Select all that apply
A network administrator is designing a secure transport mechanism for automated database replication traffic sent between two geographically separated data centers over the public internet. The design must specifically ensure both the confidentiality of the database records and the integrity of the data while in transit. Which TWO of the following technical controls should the administrator implement to satisfy these core security objectives?
Select all that apply
An enterprise organization is updating its security architecture to protect internal application servers. The solution must achieve two primary objectives: first, detect zero-day exploit attempts against server kernel processes that receive encrypted transport payloads; second, monitor network-wide bandwidth and protocol utilization patterns without introducing packet delivery latency or creating a single point of failure on the network link. Which of the following deployment choices will meet these requirements? (Select TWO.)
Select all that apply