Network Troubleshooting

486 questions

Question 201Question

A network technician is troubleshooting a laptop that was moved from an executive office to a newly created conference room VLAN. The laptop cannot access internal resources, and executing `ipconfig /all` displays an IPv4 address of 169.254.88.15169.254.88.15 with a subnet mask of 255.255.0.0255.255.0.0. Which of the following statements correctly identify the cause of this issue and the appropriate next diagnostic step? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The host automatically self-assigned an Automatic Private IP Addressing (APIPA) address because it did not receive a lease response from a DHCP server.; The technician should verify if a DHCP relay agent (IP helper address) is configured on the router interface for the new conference room VLAN.

Answer

The workstation assigned itself an APIPA address because it failed to obtain a DHCP lease, and the network technician should check whether a DHCP relay agent (IP helper address) is configured on the router interface serving the new VLAN.
Addresses in the 169.254.0.0/16169.254.0.0/16 range are self-assigned APIPA addresses generated by client host operating systems when DHCP discovery fails. When a host is relocated to a new VLAN separated from the central DHCP server, DHCP broadcast requests fail unless a DHCP relay agent (IP helper address) is configured on the default gateway router interface to forward the packets.

Step-by-Step Solution

1
Examine the output of the command showing 169.254.88.15169.254.88.15.
Identify that addresses starting with 169.254.x.x169.254.x.x represent APIPA addresses.
APIPA is activated by the client operating system when DHCP broadcast requests yield no lease response.
2
Analyze the network scenario involving a newly provisioned VLAN.
Recognize that DHCP broadcasts cannot cross subnets without relay intervention.
Routers block broadcast traffic by default; a DHCP relay agent (IP helper address) must be enabled on the local router interface to forward requests to a central DHCP server.

Key Concept

Diagnosing APIPA address assignment and resolving cross-VLAN DHCP request failures using DHCP relay agents.
Question 202Question

A network engineer is troubleshooting performance degradation on an enterprise Storage Area Network (SAN) uplink. After analyzing link metrics and performing diagnostic tests, the engineer successfully confirms their hypothesis that excessive frame errors are caused by an over-subscribed switch interface. Which of the following is the NEXT step the engineer should take according to the CompTIA troubleshooting methodology?

Show answer & explanation

Answer: Establish a plan of action to resolve the problem and identify potential effects.

Answer

Establish a plan of action to resolve the problem and identify potential effects.
According to the CompTIA troubleshooting methodology, once a theory of probable cause is tested and confirmed, the network professional must establish a plan of action to resolve the problem while identifying potential side effects before implementing changes.

Step-by-Step Solution

1
Identify the completed phase described in the scenario.
The engineer has completed gathering information (Step 1), forming a theory (Step 2), and testing the theory to confirm the root cause (Step 3).
Determining the completed step is necessary to select the immediate next step in the CompTIA sequence.
2
Determine the next sequential step in the CompTIA troubleshooting methodology.
Following Step 3 (Test the theory to determine cause), the immediate next step is Step 4: Establish a plan of action to resolve the problem and identify potential effects.
Network alterations require a clear plan of action to minimize disruption and avoid unintended consequences before executing changes.

Key Concept

CompTIA Troubleshooting Methodology Sequence
Estimated Time:1m 0s
Question 203Question

A network technician replaces a damaged modular plug on a Category 6 UTP cable. A basic continuity test shows that all eight conductors line up end-to-end, but the network link suffers from severe Near-End Crosstalk (NEXT) and high packet loss. Which physical cabling mistake is the most likely cause of this issue?

Show answer & explanation

Answer: The conductor pairs were untwisted excessively before being inserted into the RJ-45 connector.

Answer

The conductor pairs were untwisted excessively before being inserted into the RJ-45 connector.
In twisted-pair Ethernet cabling, the tight twisting of conductor pairs provides cancellation against electromagnetic interference and crosstalk. When terminating a Category 6 cable, untwisting the pairs more than 0.5 inches (13 mm) destroys this shielding effect at the connector base, causing signals from one pair to bleed into adjacent pairs (Near-End Crosstalk). A basic continuity tester will still show a pass because electrical connectivity is maintained.

Step-by-Step Solution

1
Analyze the reported physical symptoms.
Electrical continuity passes across all pins, eliminating open breaks or short circuits as the primary fault.
Basic wiremap tests verify end-to-end pin conductivity.
2
Identify the root physical cause of Near-End Crosstalk (NEXT).
Excessive untwisting of wire pairs removes the natural electromagnetic cancellation provided by the twists.
Maintaining pair twisting up to the point of termination (within 0.5 inches / 13 mm for Cat 6) is mandatory to prevent NEXT.

Key Concept

Excessive untwisting of copper conductor pairs during RJ-45 connector termination causes Near-End Crosstalk (NEXT).
Question 204Question

A network technician is troubleshooting an issue where a workstation fails to connect to an internal web application after a recent server migration. The technician executes two command-line utilities on the client workstation and receives the following output:

C:\> nslookup portal.company.local
Server: dns01.company.local
Address: 10.10.5.2

Name: portal.company.local
Address: 10.10.20.100

C:\> ping portal.company.local
Pinging portal.company.local [10.10.5.50] with 32 bytes of data:
Request timed out.

Based on the diagnostic output, which of the following is the most likely cause of this discrepancy?

Show answer & explanation

Answer: A stale cached entry or static entry in the client workstation's local resolution files is overriding DNS server queries.

Answer

A stale cached entry or static entry in the client workstation's local resolution files is overriding DNS server queries.
The nslookup utility bypasses local system resolution mechanisms (such as the client DNS cache and local HOSTS file) and queries the designated DNS server directly, returning the updated IP address (10.10.20.100). In contrast, standard applications and utilities like ping rely on the operating system's DNS client service, which checks local cache and static HOSTS file entries first. The discrepancy indicates that the local workstation is resolving the host via a stale cached entry or static file entry.

Step-by-Step Solution

1
Analyze the nslookup output.
The nslookup command queries the primary DNS server directly and obtains the current IP address 10.10.20.100 for portal.company.local.
nslookup bypasses the OS client resolver cache and local HOSTS file by default.
2
Analyze the ping output.
The ping command attempts to send packets to 10.10.5.50, which is an outdated IP address.
Standard OS applications use the local resolver mechanism, which checks the HOSTS file and local DNS cache before querying external DNS servers.
3
Synthesize the cause of the discrepancy.
The workstation is using stale cached DNS data or a hardcoded entry in the HOSTS file for hostname resolution.
Clearing the cache using ipconfig /flushdns or removing the static entry from the HOSTS file will align local resolution with the authoritative DNS server.

Key Concept

DNS Name Resolution Order and Client Resolver Cache vs. Direct Server Queries
Estimated Time:1m 30s
Question 205Question

A client workstation on VLAN 10 (192.168.10.45/24192.168.10.45/24) cannot reach a database server located on VLAN 30 (10.0.30.100/2410.0.30.100/24) across an enterprise Layer 3 switch with Access Control Lists (ACLs). Following the CompTIA network troubleshooting methodology, place the diagnostic and remediation actions in the correct sequential order from first step to last step.

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct logical order begins with checking local host configuration, testing local default gateway reachability, performing a traceroute to identify the blocking network hop, inspecting the switch routing table and ACLs at that hop, and finally applying the configuration fix and verifying service connectivity.
The correct sequence follows the CompTIA troubleshooting methodology by starting at the local host (verifying host IP settings), testing the local link to the default gateway, executing path analysis to pinpoint the failure point (traceroute), inspecting infrastructure configuration files (routes and ACLs), and concluding with remediation and verification.

Step-by-Step Solution

1
Check host IP configuration
Confirms the host has valid IP settings and points to the correct gateway IP.
Always eliminate basic host-level misconfigurations before investigating network infrastructure.
2
Test local default gateway reachability using ICMP ping
Verifies Layer 2 link integrity and local router interface accessibility.
If the local gateway does not respond, remote routing cannot be evaluated.
3
Perform path tracing with traceroute
Identifies the exact intermediate router hop where communication fails.
Traceroute narrows down the problem domain to a specific gateway or filtering device.
4
Examine device routing tables and active ACL statements
Reveals root cause such as a missing route entry or an explicit/implicit ACL block.
Diagnoses the precise administrative or policy configuration issue on the failing node.
5
Remediate configuration and perform end-to-end test
Restores traffic flow and confirms application access is functional.
Finalizes the troubleshooting methodology cycle by validating system functionality.

Key Concept

Sequential isolation of routing, gateway, and ACL issues using CompTIA troubleshooting methodology
Estimated Time:2m 0s
Question 206Question

A user's workstation is assigned the static IP address 192.168.10.45192.168.10.45 with a subnet mask of 255.255.255.0255.255.255.0 (/24). The user can successfully communicate with other devices on the local subnet, but cannot access any remote subnets or external websites. Running diagnostic checks shows that the workstation's default gateway is configured as 192.168.20.1192.168.20.1. Which of the following is the root cause of the gateway connectivity failure?

Show answer & explanation

Answer: The configured default gateway address resides on a different IP subnet than the workstation.

Answer

The configured default gateway address resides on a different IP subnet than the workstation.
For a host to communicate with remote networks, its default gateway IP address must be an IP address located on the same local subnet. Because 192.168.10.45/24192.168.10.45/24 and 192.168.20.1/24192.168.20.1/24 are on separate subnets, local ARP requests for the gateway fail and traffic destined outside the subnet cannot be routed.

Step-by-Step Solution

1
Determine the host's subnet boundary.
For IP 192.168.10.45192.168.10.45 with mask 255.255.255.0255.255.255.0 (/24), the network segment is 192.168.10.0/24192.168.10.0/24, covering usable host IPs from 192.168.10.1192.168.10.1 to 192.168.10.254192.168.10.254.
Host IP configuration dictates which addresses are considered local vs remote.
2
Evaluate the configured default gateway address.
The gateway address 192.168.20.1192.168.20.1 belongs to the 192.168.20.0/24192.168.20.0/24 network segment.
A host must be on the same Layer 3 subnet as its default gateway to send frames directly to the gateway's MAC address.
3
Identify the underlying connectivity problem.
The host cannot communicate with the gateway because it expects its default gateway to be reachable within its local broadcast domain.
A misconfigured gateway IP on a foreign subnet prevents all off-subnet forwarding.

Key Concept

Default Gateway Subnet Alignment
Question 207Question

A network engineer provisions a new subinterface `GigabitEthernet0/0.40` on a branch router to serve an isolated IoT subnet (172.16.40.0/24172.16.40.0/24). Devices connected to VLAN 40 are unable to reach external resources and auto-assign link-local IPv4 addresses in the 169.254.x.x169.254.x.x range. A terminal capture on the router shows the following configuration:

text
interface GigabitEthernet0/0.10
description Corporate_Users
encapsulation dot1Q 10
ip address 172.16.10.1 255.255.255.0
ip helper-address 10.10.10.50
!
interface GigabitEthernet0/0.40
description IoT_Devices
encapsulation dot1Q 40
ip address 172.16.40.1 255.255.255.0

Existing client workstations on `GigabitEthernet0/0.10` receive leases dynamically from the central DHCP server at 10.10.10.5010.10.10.50 without issue. Which configuration change on the branch router will resolve the IP addressing failure for VLAN 40?

Show answer & explanation

Answer: Add the command `ip helper-address 10.10.10.50` under the `GigabitEthernet0/0.40` subinterface interface configuration mode.

Answer

Add the command `ip helper-address 10.10.10.50` under the `GigabitEthernet0/0.40` subinterface interface configuration mode.
DHCP broadcasts (UDP ports 67 and 68) are confined to their local Layer 2 broadcast domain and do not pass through Layer 3 boundaries. Subinterface `GigabitEthernet0/0.40` acts as the default gateway for VLAN 40. Without the `ip helper-address` command on this specific subinterface, the router drops the client DHCPDISCOVER broadcast frames. Adding `ip helper-address 10.10.10.50` configures the router to act as a DHCP relay agent for VLAN 40, converting incoming client broadcasts into unicast UDP packets sent directly to the central DHCP server at 10.10.10.5010.10.10.50.

Step-by-Step Solution

1
Analyze client symptoms and subinterface configuration.
IoT devices on VLAN 40 receive 169.254.x.x addresses, indicating APIPA assignment caused by a failure to complete the DHCP DORA process.
DHCP client broadcast requests (DHCPDISCOVER) are stopped by default at Layer 3 router interfaces unless a relay agent is configured.
2
Compare working subinterface `GigabitEthernet0/0.10` with non-working subinterface `GigabitEthernet0/0.40`.
`GigabitEthernet0/0.10` has `ip helper-address 10.10.10.50` configured, while `GigabitEthernet0/0.40` is missing any relay statement.
DHCP relay agent directives must be explicitly applied to each routed logical interface/subinterface that receives client broadcasts.
3
Identify the required remediation step.
Applying `ip helper-address 10.10.10.50` to subinterface `GigabitEthernet0/0.40` allows the router to convert client UDP broadcasts into unicast packets routed to the centralized server.
This establishes the necessary Layer 3 relay mechanism for VLAN 40.

Key Concept

DHCP Relay Agent and IP Helper Placement on VLAN Subinterfaces
Estimated Time:2m 0s
Question 208Question

A network administrator has confirmed through diagnostic testing that an outdated firmware version on a core distribution switch caused intermittent BGP route flapping. Having confirmed this theory, the administrator is now preparing to execute the 'Establish a plan of action to resolve the problem and identify potential effects' step in the CompTIA troubleshooting methodology. Which of the following specific tasks should be conducted as part of this step? (Select TWO)

Select all that apply

Show answer & explanation

Answer: Identify potential side effects and downstream consequences of upgrading the switch firmware during production hours.; Develop a detailed rollback procedure to restore previous operations if the firmware installation fails.

Answer

The correct actions are identifying potential side effects/downstream impacts of the switch firmware upgrade and developing a detailed rollback procedure to restore previous operations if the installation fails.
Establishing a plan of action (Step 4) specifically involves designing a clear, step-by-step remediation path, assessing potential side effects on network infrastructure, and preparing rollback/contingency plans prior to making changes.

Step-by-Step Solution

1
Analyze the target phase of the CompTIA Troubleshooting Methodology
The current scenario is at Step 4: Establish a plan of action to resolve the problem and identify potential effects.
The technician has already identified the problem (Step 1), established a theory (Step 2), and tested the theory to confirm the cause (Step 3).
2
Evaluate candidate troubleshooting tasks against Step 4 requirements
Establishing a plan of action requires building a structured remediation plan, analyzing potential side effects, and creating a backup/rollback plan before implementation.
Anticipating unintended consequences and establishing contingency rollback plans ensures operational continuity during implementation.
3
Filter out tasks belonging to other methodology phases
User interviews (Step 1), full system verification/prevention (Step 5), and ticketing documentation (Step 6) are placed in different phases of the 6-step framework.
CompTIA methodology strictly sequences tasks to prevent unnecessary risk or premature action.

Key Concept

CompTIA 6-Step Troubleshooting Methodology (Step 4: Establish Plan of Action)
Question 209Question

A network administrator is troubleshooting an issue where internal workstations on subnet 10.10.10.0/2410.10.10.0/24 cannot access a web server at 10.10.50.25/2410.10.50.25/24 using HTTPS. Upon inspecting the inbound Access Control List (ACL) on the destination interface, the administrator views the following configuration:

text
access-list 105 permit tcp 10.10.10.0 0.0.0.255 host 10.10.50.25 eq 80
access-list 105 deny ip any host 10.10.50.25
access-list 105 permit tcp 10.10.10.0 0.0.0.255 host 10.10.50.25 eq 443

Which of the following describes the root cause of the connection failure?

Show answer & explanation

Answer: The rule permitting HTTPS traffic on port 443 is shadowed by a preceding explicit deny statement.

Answer

The rule permitting HTTPS traffic on port 443 is shadowed by a preceding explicit deny statement.
Router access control lists evaluate rules in top-down order until the first matching rule is found. In this configuration, line 20 explicitly blocks all IP traffic from any source to host 10.10.50.2510.10.50.25. Because line 20 is evaluated before line 30, any incoming HTTPS packet on port 443 matches line 20 and is dropped immediately, rendering line 30 ineffective (shadowed). To resolve this, the permit rule for port 443 must be placed before the broad deny rule.

Step-by-Step Solution

1
Analyze the sequential evaluation order of the ACL entries.
Network ACLs process packets sequentially from top to bottom and stop evaluating as soon as a matching rule is encountered.
Top-down processing determines which rule action applies to matched traffic.
2
Trace HTTPS packet matching through the rule list.
An HTTPS packet targeted at port 443 fails to match line 10 (port 80), but matches line 20 (deny ip any host 10.10.50.25).
Line 20 covers all IP protocols and source addresses destined for the server host.
3
Identify why line 30 is ineffective.
Line 30 is shadowed because matching traffic has already been dropped by line 20.
Rules placed after a broader matching deny statement will never be evaluated.

Key Concept

ACL Rule Shadowing and Sequential Processing
Question 210Question

A network administrator is troubleshooting an issue where database servers deployed on a new broadcast domain (VLAN 104, 10.104.0.0/2210.104.0.0/22) fail to acquire dynamic IPv4 addresses and assign themselves 169.254.x.x169.254.x.x addresses instead. A packet capture on the local router subinterface `GigabitEthernet0/0.104` shows incoming broadcast DHCP DISCOVER frames from clients, but no DHCP OFFER packets return. The central DHCP server is located on VLAN 10 (10.10.10.210.10.10.2). The configuration of the local subinterface is as follows:

interface GigabitEthernet0/0.104
encapsulation dot1Q 104
ip address 10.104.0.1 255.255.252.0

Which of the following actions should the network administrator perform to resolve this issue and enable dynamic address assignment for clients in VLAN 104? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Configure the command `ip helper-address 10.10.10.2` under the `GigabitEthernet0/0.104` subinterface.; Ensure intermediate firewalls and router Access Control Lists (ACLs) permit UDP ports 67 and 68 traffic between the router relay interface and the central DHCP server.

Answer

The administrator must configure the DHCP relay agent using `ip helper-address 10.10.10.2` on the client-facing router subinterface `GigabitEthernet0/0.104` and ensure that router ACLs/firewalls allow UDP ports 67 and 68 traffic between the relay agent and the central DHCP server.
When clients are located on a separate subnet or VLAN from the central DHCP server, routers block the initial client DHCP DISCOVER broadcast packets by default. To fix this, the router subinterface serving as the client gateway (`GigabitEthernet0/0.104`) must be configured with `ip helper-address 10.10.10.2` to convert local broadcasts into unicast packets directed to the DHCP server. Additionally, because DHCP relay relies on UDP ports 67 and 68, any network ACLs or firewalls along the traffic path between the router interface and the DHCP server must explicitly permit UDP 67/68 traffic.

Step-by-Step Solution

1
Analyze client symptoms and packet capture output
Clients acquiring 169.254.x.x (APIPA) addresses indicates complete DHCP lease acquisition failure. DHCP DISCOVER broadcast packets reach the default gateway subinterface but cannot traverse Layer 3 boundaries without a relay agent.
DHCP DISCOVER messages are Layer 2/3 broadcasts (255.255.255.255) that routers drop by default.
2
Identify the missing router subinterface configuration
Configuring `ip helper-address 10.10.10.2` on `GigabitEthernet0/0.104` intercepts client broadcast requests and unicasts them to the DHCP server at 10.10.10.2.
Cross-subnet DHCP deployment requires explicit relay agent configuration on the client's gateway interface.
3
Verify network transport security and ACL rules between relay agent and server
Ensuring UDP ports 67 (DHCP server) and 68 (DHCP client) are allowed on intermediate ACLs guarantees unhindered transmission of DHCP DISCOVER/REQUEST unicast relays and server DHCP OFFER/ACK replies.
Firewalls or implicit deny statements in router ACLs blocking UDP 67/68 prevent communication between the relay agent and the DHCP server.

Key Concept

DHCP Relay (IP Helper) and Traffic Permitting across Layer 3 Boundaries
Question 211Question

A network administrator attempts to force Switch-B to become the primary Spanning Tree Protocol (STP) root bridge for VLAN 10 during an upcoming maintenance window. The administrator executes the CLI command `spanning-tree vlan 10 priority 61440` on Switch-B. After taking the existing core switch offline, host traffic experiences unexpected latency, and diagnostic logs reveal that Switch-C—which has a default configuration—was elected root bridge instead of Switch-B. Switch-C has an STP priority of 32768 for VLAN 10. Which of the following explains why Switch-C became the root bridge instead of Switch-B?

Show answer & explanation

Answer: Spanning Tree Protocol elects the root bridge based on the lowest priority numerical value, making Switch-C's default priority of 32768 preferred over Switch-B's priority of 61440.

Answer

Spanning Tree Protocol elects the root bridge based on the lowest numerical priority value. Setting Switch-B's priority to 61440 made it less preferred than Switch-C's default priority of 32768.
In Spanning Tree Protocol (IEEE 802.1D / 802.1w), the root bridge election selects the switch with the lowest Bridge ID, which is composed of the priority value and MAC address. Because the administrator set Switch-B's priority to 61440, Switch-C (with the default priority of 32768) possessed a lower priority value and was successfully elected root bridge.

Step-by-Step Solution

1
Analyze the Bridge ID structure used in STP root bridge selection.
The Bridge ID consists of a configurable Priority value plus the switch MAC address.
STP uses Bridge IDs to determine which switch in the Layer 2 domain serves as the root.
2
Compare the priority values configured on Switch-B and Switch-C.
Switch-B has a priority of 61440, while Switch-C has the default priority of 32768.
The administrator incorrectly assumed a higher numerical value increases election priority.
3
Apply STP election criteria (lowest Bridge ID wins).
Switch-C wins the root bridge election because 32768 is numerically lower than 61440.
Lower priority numbers represent higher precedence in Spanning Tree Protocol.

Key Concept

STP Root Bridge Priority Selection
Question 212Question

A network administrator is troubleshooting a client workstation that receives a name resolution error when attempting to reach an internal portal at `hrportal.contoso.com`. In what sequence should the administrator execute the following steps to systematically isolate the issue according to standard operating system name resolution precedence?

Drag items to arrange them in the correct order

Show answer & explanation

Answer

The correct order follows operating system resolution precedence: first inspect the local static HOSTS file, second flush the OS DNS resolver cache, third perform a direct `nslookup` against the DNS server, and fourth verify Layer 3 IP reachability using `ping`.
Troubleshooting follows OS resolution precedence: checking local HOSTS entries first, clearing the local resolver cache second, querying the DNS server directly via `nslookup` third, and testing IP connectivity via `ping` fourth once an IP is obtained.

Step-by-Step Solution

1
Examine the local HOSTS file.
Determines whether a local static text mapping is overriding network DNS resolution.
The OS evaluates the local HOSTS file prior to checking local DNS cache or issuing network queries.
2
Flush the client DNS cache using `ipconfig /flushdns`.
Purges cached negative responses or outdated A/AAAA records.
If no static HOSTS entry exists, the OS checks the local cache next.
3
Perform a direct DNS lookup using `nslookup hrportal.contoso.com`.
Verifies if the configured local DNS server has a valid, reachable record.
Bypasses local client caching mechanisms to isolate DNS server availability and record accuracy.
4
Test IP connectivity using `ping` to the resolved IP address.
Confirms whether network routing, firewalls, and server ports allow communication.
IP-level testing is only meaningful once name resolution yields an IP address.

Key Concept

OS Name Resolution Order and Systematic DNS Troubleshooting Sequence
Question 213Question

A network administrator is troubleshooting an issue where a client workstation cannot reach an internal database server located at 172.28.15.100172.28.15.100. The administrator collects the host settings and router interface details:

Host Settings:
- IP Address: 10.50.10.4510.50.10.45
- Subnet Mask: 255.255.255.192255.255.255.192 (/26/26)
- Default Gateway: 10.50.10.6510.50.10.65

Router Interface (GigabitEthernet0/0) & Inbound ACL:
- Interface IP: 10.50.10.1/2610.50.10.1/26
- Applied Inbound Access Control List:
- `line 10: permit tcp 10.50.10.0 0.0.0.63 host 172.28.15.100 eq 3306`
- `line 20: deny ip any any`

Which TWO of the following issues are directly preventing or obstructing successful communication and verification between the workstation and the database server?

Select all that apply

Show answer & explanation

Answer: The host's configured default gateway (10.50.10.6510.50.10.65) falls outside the usable IP range (10.50.10.110.50.10.110.50.10.6210.50.10.62) of the configured /26/26 subnet.; The inbound ACL on GigabitEthernet0/0 permits only TCP port 3306, causing standard diagnostic ICMP ping tests to be blocked by the explicit deny rule.

Answer

The host's default gateway is misconfigured outside its /26/26 subnet boundary, and the router ACL drops ICMP diagnostic traffic due to permitting only TCP port 3306.
The host cannot reach external networks because its gateway IP (10.50.10.6510.50.10.65) is outside its local /26/26 subnet (10.50.10.0/2610.50.10.0/26, usable IPs 10.50.10.110.50.10.110.50.10.6210.50.10.62). Additionally, network troubleshooting via ICMP ping fails because the inbound ACL only permits TCP port 3306 traffic, causing ICMP to hit the explicit deny rule on line 20.

Step-by-Step Solution

1
Analyze the subnet boundaries for the host IP configuration.
A subnet mask of 255.255.255.192255.255.255.192 (/26/26) yields 256192=64256 - 192 = 64 addresses per subnet. Subnet range: 10.50.10.010.50.10.0 to 10.50.10.6310.50.10.63. Usable range: 10.50.10.110.50.10.1 to 10.50.10.6210.50.10.62.
The configured default gateway 10.50.10.6510.50.10.65 resides on subnet 10.50.10.64/2610.50.10.64/26, making it unreachable to the host on 10.50.10.45/2610.50.10.45/26.
2
Evaluate the Access Control List (ACL) entries on interface GigabitEthernet0/0.
Line 10 permits only `tcp` traffic on port 3306. ICMP traffic hits line 20 (`deny ip any any`).
Network administrators commonly use `ping` (ICMP) for initial diagnostic tests. Since ICMP is not explicitly permitted before line 20, ICMP diagnostic traffic will fail even if Layer 3 routing is established.

Key Concept

Subnet Boundary & Default Gateway Verification, ACL Rule Filtering
Question 214Question

A network technician is investigating intermittent connectivity and framing errors on a trunk link between two distribution switches. The technician has established a theory that a native VLAN mismatch is causing untagged traffic to drop and has confirmed this cause by inspecting packet captures on both switch interfaces. According to the CompTIA troubleshooting methodology, which of the following actions should the technician take NEXT?

Show answer & explanation

Answer: Establish a plan of action to align the native VLAN configurations across the trunk link and identify potential side effects.

Answer

Establish a plan of action to align the native VLAN configurations across the trunk link and identify potential side effects.
The technician has completed Step 3 of the CompTIA troubleshooting methodology by testing the theory and confirming that a native VLAN mismatch is the root cause. The next step (Step 4) requires establishing a plan of action to resolve the issue while identifying potential side effects before implementing the solution.

Step-by-Step Solution

1
Determine the current stage of the troubleshooting process from the scenario stem.
The technician has established a theory and tested it via packet captures to confirm the root cause, satisfying Step 3 (Test the theory to determine cause).
Identifying the completed step is necessary to accurately select the next logical phase.
2
Map the next phase in the official CompTIA 6-step troubleshooting methodology.
Step 1: Identify problem → Step 2: Establish theory → Step 3: Test theory → Step 4: Establish plan of action & identify potential effects → Step 5: Verify full system functionality & preventive measures → Step 6: Document findings.
CompTIA standards require strictly following sequential methodology.
3
Select the correct action corresponding to Step 4.
Formulating a plan of action to change the native VLAN settings while considering potential network disruptions represents Step 4.
A plan of action ensures that changes are systematically planned and risks are identified before implementation.

Key Concept

CompTIA Troubleshooting Methodology Sequence
Question 215Question

A network administrator is troubleshooting an issue where an application host with IPv4 address 192.168.4.25/24192.168.4.25/24 cannot transmit HTTPS management data to a target server at 10.200.5.50/2410.200.5.50/24. Diagnostic tests reveal that the host can successfully ping its default gateway (192.168.4.1192.168.4.1), but a traceroute to 10.200.5.5010.200.5.50 stops at 192.168.4.1192.168.4.1. Inspecting the gateway router shows the following configuration details:

text
ip route 10.200.5.0 255.255.255.0 192.168.4.1
access-list 105 permit udp host 192.168.4.25 host 10.200.5.50 eq 514

Which TWO of the following factors explain why HTTPS traffic (TCP port 443) fails to reach the destination? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: The static route entry uses the gateway router's local LAN IP address as the next hop rather than the upstream router's IP address.; The access control list lacks an explicit permit rule for TCP port 443, resulting in the traffic being blocked by the implicit deny.

Answer

The routing failure occurs because the static route incorrectly references the local gateway's own interface IP address (192.168.4.1192.168.4.1) as the next hop, and the Access Control List lacks a permit statement for TCP port 443, causing HTTPS packets to be dropped by the ACL implicit deny.
The issue stems from two distinct network layer misconfigurations: first, pointing a static route next hop to the router's own inbound interface IP address prevents proper forwarding to the next router; second, ACL 105 only permits UDP port 514 traffic, meaning TCP port 443 traffic hits the implicit deny rule at the end of the ACL.

Step-by-Step Solution

1
Analyze the static route statement: 'ip route 10.200.5.0 255.255.255.0 192.168.4.1'.
Identify that 192.168.4.1 is the router's local LAN interface address, which is invalid as a next hop for outgoing traffic.
Static routes must point to a remote next-hop IP address on an adjacent router interface or an egress interface identifier.
2
Analyze the Access Control List: 'access-list 105 permit udp host 192.168.4.25 host 10.200.5.50 eq 514'.
Determine that only UDP syslog traffic (port 514) is explicitly permitted.
Standard ACL processing matches top-down and drops unmatched traffic at the final implicit deny all statement, blocking TCP port 443 (HTTPS).

Key Concept

Troubleshooting Static Routes and ACL Rules
Question 216Question

A network technician is troubleshooting an intermittent 10GBASE-LR single-mode fiber optic backbone link between two core switches. Interface telemetry reveals elevated bit error rates (BER) and an optical receiver power level well below the specified threshold. Which TWO of the following diagnostic steps or tools should the technician use to isolate the physical layer defect?

Select all that apply

Show answer & explanation

Answer: Measure the optical power loss across the link using an optical power meter calibrated to the 1310 nm operating wavelength.; Inspect the fiber connector ferrule end-faces using a specialized fiber inspection probe to check for dust or surface scratches.

Answer

The technician should measure optical loss using an optical power meter calibrated to 1310 nm and inspect the fiber end-faces with a fiber inspection scope.
Measuring optical attenuation with an optical power meter set to 1310 nm directly quantifies signal loss on single-mode fiber links, while using a fiber inspection scope inspects connector end-faces for microscopic contamination or scratches that cause high insertion loss.

Step-by-Step Solution

1
Identify the media type and reported symptoms.
The link uses 10GBASE-LR single-mode fiber operating at 1310 nm, experiencing low optical power and high BER.
Choosing the appropriate physical troubleshooting tools requires matching tools to optical fiber media characteristics rather than copper twisted-pair.
2
Evaluate optical signal testing methods.
An optical power meter (OPM) calibrated for 1310 nm verifies actual light levels arriving at the receiver.
OPMs measure absolute optical power and signal attenuation against baseline standards.
3
Evaluate physical connector inspection requirements.
A fiber inspection scope allows visual verification of the polished ferrule surface.
Microscopic dust, oils, or scratches on fiber end-faces attenuate light signals and introduce optical return loss.

Key Concept

Fiber Optic Physical Layer Diagnostics and Tool Selection
Question 217Question

A network technician is troubleshooting a wireless point-to-point bridge between two campus buildings situated 250 meters apart. Following a storm, maintenance crews re-anchored the directional antenna on Building B. Although there is a completely clear line of sight and transmit power settings remain unchanged on both units, the received signal strength indicator (RSSI) has dropped significantly from -58 dBm to -80 dBm. Inspection reveals that the antenna on Building A remains oriented with vertical polarization, whereas the antenna on Building B was reinstalled turned 90 degrees in horizontal polarization. Which of the following is the primary cause of the link degradation?

Show answer & explanation

Answer: Antenna polarization mismatch between the transmitter and receiver

Answer

Antenna polarization mismatch between the transmitter and receiver is the primary cause of the severe RSSI drop.
Wireless signals travel as electromagnetic waves oriented in a specific spatial plane (polarization). For maximum energy transfer, directional bridge antennas must share the same polarization alignment. A 90-degree alignment difference between vertical and horizontal polarization introduces cross-polarization discrimination loss, typically causing a 20 dB to 30 dB drop in received signal power.

Step-by-Step Solution

1
Analyze the physical and RF symptoms reported in the scenario.
The visual line of sight is clear, distance is unchanged, and transmit power settings are identical, yet RSSI dropped by 22 dB after physical reinstallation.
This isolates the problem to a physical radio antenna installation parameter rather than path distance, attenuation obstacles, or radio transmit power.
2
Evaluate the orientation difference between the two directional antennas.
Building A utilizes vertical polarization while Building B's antenna was rotated 90 degrees to horizontal polarization.
Radio waves propagate with electric field vectors aligned to the antenna orientation. Mismatched polarization planes between transmitter and receiver cause significant signal loss (typically 20 dB or more).
3
Select the correct root cause matching the physical findings.
Antenna polarization mismatch correctly accounts for the dramatic drop in RSSI.
Aligning both antennas back to the same spatial polarization plane (both vertical or both horizontal) will restore full RSSI.

Key Concept

Antenna Polarization and Alignment in Wireless Systems
Question 218Question

A network technician is investigating poor application throughput and significant packet loss on an enterprise host connected to switch interface FastEthernet 0/12. Output from the switch console reveals a high count of late collisions, frame check sequence (FCS) errors, and deferred transmissions on the port. A review of device settings shows that the host network interface card (NIC) was manually forced to 100 Mbps Full Duplex, while the connected switchport is configured with default auto-negotiation parameters. Which of the following best explains the root cause of this performance issue?

Show answer & explanation

Answer: The switchport failed auto-negotiation, defaulting to half-duplex mode and creating a duplex mismatch with the full-duplex host.

Answer

The switchport failed auto-negotiation, defaulting to half-duplex mode and creating a duplex mismatch with the full-duplex host.
When an Ethernet interface configured for auto-negotiation connects to a link partner configured for forced (manual) full-duplex, auto-negotiation fails to detect the duplex mode. By IEEE standard convention, the auto-negotiation interface sets its speed using parallel detection but defaults its duplex setting to half-duplex. This mismatch causes the full-duplex side to transmit at will while the half-duplex side detects collisions during transmission after the standard 64-byte slot time (late collisions), leading to FCS errors and severe throughput degradation.

Step-by-Step Solution

1
Analyze the interface statistics and configuration settings.
The switch interface records late collisions and FCS errors, while the host NIC is set to forced 100 Mbps Full Duplex and the switch port is set to Auto-Negotiation.
Late collisions are a signature symptom of a duplex mismatch on an Ethernet segment.
2
Apply Ethernet auto-negotiation standard behavior rules (IEEE 802.3).
Because the host NIC does not transmit auto-negotiation pulses, the switch cannot negotiate duplex and falls back to half-duplex mode.
Standard Ethernet auto-negotiation defaults to half-duplex when speed can be sensed via parallel detection but duplex cannot be negotiated.
3
Determine the impact of half-duplex operating against full-duplex.
The host transmits whenever it has data ready (full-duplex), while the switch listens before transmitting and senses collisions after the 64-byte window (late collisions), causing corrupted frames and FCS errors.
This confirms a duplex mismatch as the root cause.

Key Concept

Duplex Mismatch Troubleshooting & Auto-Negotiation Fallback Rules
Question 219Question

A network technician is troubleshooting an Ethernet connection in an office building and suspects that an unshielded twisted-pair (UTP) cable run inside a wall has been physically severed. Which hardware tool should the technician use to determine the exact distance along the cable to the location of the break?

Show answer & explanation

Answer: Time Domain Reflectometer (TDR)

Answer

Time Domain Reflectometer (TDR)
The correct tool is a Time Domain Reflectometer (TDR). TDRs send electrical pulses along copper conductors and analyze the reflected waveforms to determine the distance to opens, shorts, or impedance mismatches.

Step-by-Step Solution

1
Identify the primary requirement of the scenario
The technician needs to locate the specific physical location (distance) of a cable break in a UTP run.
Knowing that a cable is broken is insufficient; locating the distance pinpoints where the cable run needs repair.
2
Evaluate the capabilities of network testing tools
A Time Domain Reflectometer (TDR) transmits a signal down a copper cable and calculates distance based on the time it takes for the signal to bounce back from an impedance mismatch or open wire.
TDR technology specifically measures signal reflection time to estimate distance to faults.

Key Concept

Using Time Domain Reflectometry (TDR) to pinpoint cable fault locations.
Estimated Time:45s
Question 220Question

A client computer configured with the IP address 10.0.1.25/2410.0.1.25/24 is unable to access resources on remote networks. An administrator inspects the IP configuration and discovers that the default gateway is set to 10.0.2.110.0.2.1. Which TWO statements accurately describe the cause of this issue and the necessary resolution?

Select all that apply

Show answer & explanation

Answer: The host cannot communicate with the gateway because the configured default gateway IP address resides on a different subnet.; Updating the default gateway address on the host to a valid router interface address within 10.0.1.0/2410.0.1.0/24 will resolve the issue.

Answer

The client computer cannot reach remote networks because its configured default gateway resides on an adjacent subnet rather than its own local IP subnet. Reconfiguring the default gateway address to a valid IP within the local subnet resolves the connectivity failure.
For an IP endpoint to send traffic to external networks, its configured default gateway must be on the same logical IP subnet as the host itself. The host's IP of 10.0.1.25/2410.0.1.25/24 places it on the 10.0.1.0/2410.0.1.0/24 subnet, whereas the configured gateway of 10.0.2.110.0.2.1 resides on the 10.0.2.0/2410.0.2.0/24 subnet. Reconfiguring the host's default gateway address to a router interface within the local 10.0.1.0/2410.0.1.0/24 subnet allows the host to send ARP requests for the gateway and route traffic off the local network.

Step-by-Step Solution

1
Analyze host IP address and subnet mask.
Host IP 10.0.1.2510.0.1.25 with a /24/24 mask (255.255.255.0255.255.255.0) defines the local subnet range as 10.0.1.110.0.1.1 through 10.0.1.25410.0.1.254.
Determines the boundaries of the host's local broadcast domain and valid local IPs.
2
Evaluate the configured default gateway IP address.
The configured gateway 10.0.2.110.0.2.1 falls outside the local 10.0.1.0/2410.0.1.0/24 subnet.
A host cannot send packets to a default gateway unless the gateway's IP address resides within the host's local subnet.
3
Identify corrective actions to restore routing.
Change the default gateway setting on the host to an active router interface IP within the 10.0.1.0/2410.0.1.0/24 subnet.
Allows the host to resolve the gateway's MAC address using ARP and forward off-network traffic properly.

Key Concept

Default Gateway Subnet Mismatch
PreviousPage 11 / 25Next
Network Troubleshooting Practice Questions — CompTIA Network+ — Page 11 | Examkin