Tüm alıştırma soruları

2237 soru

Soru 1981Soru

A network administrator installs a multimode fiber optic patch cable between two rack-mounted switches in a data center. Although physical link connectivity is established, the switch management interface logs a high rate of bit errors and optical power loss. An OTDR scan reveals a sudden, localized non-reflective loss at a point where the cable is tightly zip-tied around a sharp corner of the cable tray, with no glass break detected. Which of the following physical layer issues is the most likely cause of this signal degradation?

Cevabı ve açıklamayı göster

Cevap: Exceeding the minimum bend radius of the fiber optic cable

Cevap

Exceeding the minimum bend radius of the fiber optic cable is the most likely cause of the optical signal attenuation.
Exceeding the cable's minimum bend radius causes macrobending, where light escapes from the core into the cladding due to micro-distortions in total internal reflection. This manifests as localized optical power loss and high bit error rates on an OTDR scan while still maintaining a physical link.

Adım Adım Çözüm

1
Analyze the symptom and diagnostic findings reported in the scenario.
The link establishes physically, but experiences elevated optical signal loss and bit errors, with OTDR pointing to a sharp corner where the cable is tightly secured.
Identifying the localized physical anomaly helps isolate cause between physical breakage, connector fault, or geometry distortion.
2
Evaluate the optical properties of fiber under mechanical stress.
Bending fiber cable beyond its minimum bend radius alters the internal angle of incidence, causing light rays to leak out of the core into the cladding (macrobending loss).
Macrobending creates non-reflective attenuation at the bend site without causing a total optical discontinuity.
3
Select the corrective action and physical cause.
Loosening the zip-ties and re-routing the fiber cable to respect its minimum bend radius will restore full optical signal strength.
Restoring proper bend radius eliminates macrobending optical losses.

Anahtar Kavram

Fiber Optic Bend Radius and Macrobending Loss
Tahmini Süre:1m 15s
Soru 1982Soru

A network administrator is diagnosing several switching, trunking, and physical layer issues across access and core switches in an enterprise environment. Match each switch console symptom or log output on the left with its corresponding underlying root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Console log: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on interface GigabitEthernet0/1 (1), with Switch-B GigabitEthernet0/1 (99).
Inter-VLAN traffic for VLAN 20 fails across a trunk link, while trunk status shows operational and configuration displays 'switchport trunk allowed vlan 10,30,40'.
Interface FastEthernet0/12 reports high counts of late collisions and FCS errors after connecting a server with a manually forced 100 Mbps Full-Duplex network adapter.
An unconfigured switch connected to the network unexpectedly becomes the STP Root Bridge for VLAN 1 without any explicit priority modification.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. CDP Native VLAN mismatch log matches mismatched untagged 802.1Q native VLAN numbers on opposing ends of the trunk.
2. VLAN 20 traffic failure with allowed list '10,30,40' matches omission of the target VLAN ID from the allowed list.
3. Late collisions with forced full-duplex server match duplex mismatch caused by auto-negotiation falling back to half-duplex.
4. Unconfigured switch becoming STP root bridge matches default STP priority tie (3276832768) resolved by lower MAC address.
Each switch symptom directly corresponds to a distinct Layer 2 operational failure mode: CDP log warnings indicate mismatched untagged native VLAN IDs on 802.1Q trunks; missing VLAN IDs in the allowed trunk string cause explicit frame dropping for that VLAN; forced full-duplex on a connected device breaks auto-negotiation, defaulting the switch port to half-duplex and producing late collisions; and unconfigured switches claiming root bridge status stem from default STP priority ties resolved by MAC address comparisons.

Adım Adım Çözüm

1
Analyze the CDP syslog error message for native VLAN parameters.
Identify that GigabitEthernet0/1 on the local switch uses VLAN 1 as native while Switch-B uses VLAN 99.
CDP detects mismatched native VLAN tags between link endpoints on 802.1Q trunks.
2
Examine the trunk interface allowed VLAN configuration string.
Observe that VLAN 20 is omitted from 'switchport trunk allowed vlan 10,30,40'.
Trunk ports drop traffic for any VLAN not explicitly included in the allowed VLAN list.
3
Evaluate the interface statistics for late collisions and FCS errors.
Determine that forced full-duplex on the server side causes Ethernet auto-negotiation on the switch port to fail and default to half-duplex.
Duplex mismatch occurs because the auto-negotiating side defaults to half-duplex when link pulses are detected without FLP (Fast Link Pulse) negotiation packets.
4
Investigate why a new switch with default configuration became the STP Root Bridge.
Conclude that all switches share the default priority of 3276832768, so the lowest MAC address wins the election.
STP root bridge selection evaluates Bridge Priority first, using MAC address as the secondary tie-breaker.

Anahtar Kavram

Diagnosing VLAN tagging, trunking allowed lists, Ethernet duplex auto-negotiation, and STP root election behaviors from switch symptoms.
Soru 1983Soru

A network technician is responding to a user ticket reporting a duplicate IP address error notification on VLAN 12 (10.12.0.0/2410.12.0.0/24). Place the following diagnostic and remediation steps in the correct chronological order from initial investigation to final resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with gathering client interface configuration details (`ipconfig /all`), releasing the conflicting IP (`ipconfig /release`), conducting an ARP scan to locate the rogue static host, adding a DHCP scope exclusion for that static IP address, and renewing the workstation lease (`ipconfig /renew`).
Following standard operating procedure, the technician first gathers diagnostic info (`ipconfig /all`) to identify the conflicting IP. Next, releasing the address (`ipconfig /release`) stops active IP collisions on the client. With the client quieted, an ARP query isolates the MAC address of the statically assigned rogue device. Defining a DHCP scope exclusion for that IP prevents the server from issuing it again. Finally, `ipconfig /renew` requests a clean IP address for the workstation.

Adım Adım Çözüm

1
Inspect local network settings on the affected host.
The exact conflicting IP address (10.12.0.4510.12.0.45) and current lease status are confirmed.
CompTIA troubleshooting methodology mandates identifying problem symptoms and gathering information prior to making changes.
2
Release the IP address lease on the client workstation using `ipconfig /release`.
The workstation stops broadcasting and listening on the conflicting IP address.
Releasing the lease clears local address binding so traffic on the subnet can be cleanly probed without interference from the client workstation.
3
Perform an ARP scan or ping test for 10.12.0.4510.12.0.45 from a remote administrative terminal.
The ARP table maps 10.12.0.4510.12.0.45 to the hardware MAC address of the statically misconfigured device.
Identifying the MAC address isolates the unmanaged static device causing the collision within the DHCP scope.
4
Configure an exclusion for 10.12.0.4510.12.0.45 in the DHCP scope settings.
The DHCP pool marks 10.12.0.4510.12.0.45 as unavailable for dynamic assignment.
Scope exclusions guarantee the DHCP server will not attempt to lease out statically assigned IP addresses.
5
Execute `ipconfig /renew` on the workstation.
The workstation successfully receives an unallocated, unique IP address from the DHCP pool.
Renewing after fixing the scope configuration restores full network connectivity without IP address collisions.

Anahtar Kavram

DHCP Address Conflict Remediation Workflow
Soru 1984Soru

An enterprise network operations team is establishing key performance indicators (KPIs) for a mission-critical payment gateway system. The Business Impact Analysis (BIA) specifies that data loss during a unexpected outage must not exceed 30 minutes of transaction history, and full operational capability of the network infrastructure must be restored within 2 hours of a disruption. Which TWO of the following configuration goals or metrics directly align with these specified business requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Establishing a Recovery Point Objective (RPO) target of 30 minutes or less; Establishing a Recovery Time Objective (RTO) target of 2 hours or less

Cevap

The correct strategies are establishing a Recovery Point Objective (RPO) target of 30 minutes or less and establishing a Recovery Time Objective (RTO) target of 2 hours or less.
Establishing an RPO of 30 minutes directly satisfies the constraint that data loss must not exceed 30 minutes of transaction history. Establishing an RTO of 2 hours directly satisfies the requirement that network capability must be restored within a 2-hour timeframe.

Adım Adım Çözüm

1
Evaluate the maximum tolerable data loss parameter.
The requirement bounds data loss to no more than 30 minutes of transactions.
Recovery Point Objective (RPO) measures the maximum acceptable age of data that can be lost from a system failure.
2
Evaluate the maximum tolerable downtime parameter.
The requirement specifies complete service restoration within 2 hours.
Recovery Time Objective (RTO) defines the targeted duration of time within which a network or system must be restored to service.
3
Analyze distractor strategies against recovery metrics.
MTBF measures component reliability, cold sites require long deployment lead times, and 24-hour backup cycles allow excessive data loss.
Downtime recovery speed is incompatible with unprovisioned cold sites, and MTBF is a measure of uptime frequency rather than recovery performance.

Anahtar Kavram

Business Continuity Planning Metrics (RPO vs RTO)
Soru 1985Soru

A network administrator is troubleshooting connectivity to an internal updates repository on a Windows workstation. The workstation is failing to resolve the host name update.service.internal. To resolve the issue, the administrator wants to purge any cached domain name resolution records locally on the workstation and directly test hostname resolution using a specific internal DNS server located at 192.168.10.50. Which of the following commands should the administrator execute to accomplish these tasks? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ipconfig /flushdns; nslookup update.service.internal 192.168.10.50

Cevap

The administrator must execute 'ipconfig /flushdns' to clear the local DNS resolver cache and 'nslookup update.service.internal 192.168.10.50' to send a targeted query to the designated DNS server.
Executing 'ipconfig /flushdns' purges the Windows local DNS resolver cache, removing potentially stale or incorrect host records. Appending the IP address '192.168.10.50' after the domain name in 'nslookup' instructs the utility to query that designated DNS server directly rather than using the system's default DNS server configuration.

Adım Adım Çözüm

1
Purge stale local DNS cache
Clears outdated or corrupted hostname records stored locally by Windows.
Executing 'ipconfig /flushdns' forces the client resolver to discard existing cached records so subsequent queries check the DNS server directly.
2
Test name resolution against a specific server
Sends a direct DNS lookup request for update.service.internal to 192.168.10.50.
Passing the target IP address as the second parameter in 'nslookup' overrides the default configured DNS server on the network interface.

Anahtar Kavram

Utilizing Windows CLI utilities for DNS resolver cache clearing and targeted DNS lookup queries.
Soru 1986Soru

A network engineer is evaluating wireless site survey methodologies for an upcoming enterprise WLAN deployment across a multi-story facility. Match each wireless site survey type on the left with its primary operational requirement or objective on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Predictive Site Survey
Passive Site Survey
Active Site Survey
Spectrum Analysis Survey

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Predictive Site Survey matches with modeling RF propagation using CAD blueprints prior to hardware installation. Passive Site Survey matches with capturing beacons and RSSI from all APs without network association. Active Site Survey matches with associating a client device to APs to measure throughput, latency, and packet loss. Spectrum Analysis Survey matches with using dedicated RF sensors to detect non-802.11 sources of interference.
Each survey methodology addresses a distinct phase and requirement of wireless network deployment: Predictive surveys estimate placement using software algorithms on building plans; passive surveys measure coverage across all operating Wi-Fi channels without network association; active surveys test actual network throughput and transmission parameters by connecting to access points; and spectrum analysis surveys detect physical layer RF interference from both Wi-Fi and non-Wi-Fi emitters.

Adım Adım Çözüm

1
Identify pre-deployment software modeling techniques.
Connect Predictive Site Survey to software simulation using building blueprints and material attenuation values.
Predictive modeling occurs prior to physical installation to estimate AP count and placement.
2
Differentiate between connected and un-connected physical site walkthroughs.
Map Passive Site Survey to non-associating beacon and RSSI collection, and Active Site Survey to active connection testing of throughput and packet loss.
Passive surveys listen broadly to all broadcast signals; active surveys validate actual client data transport capabilities.
3
Isolate Layer 1 physical radio frequency measurement from 802.11 frame collection.
Associate Spectrum Analysis Survey with dedicated RF sensors for detecting non-Wi-Fi interference sources.
Spectrum analyzers detect raw electromagnetic radiation across frequency bands regardless of Wi-Fi protocol structures.

Anahtar Kavram

Wireless Site Survey Methodologies
Soru 1987Soru

A system administrator suspects a Windows workstation has been compromised and is sending outbound traffic to an unknown command-and-control server. The administrator opens Command Prompt to determine which local Process ID (PID) is responsible for establishing active outbound socket connections. Which command-line utility switch combination should the administrator execute to view numerical IP addresses, active connection states, and their corresponding process IDs?

Cevabı ve açıklamayı göster

Cevap: netstat -ano

Cevap

The command 'netstat -ano' accurately lists active network connections along with numerical IP addresses, port numbers, and owning Process IDs.
Executing 'netstat -ano' combines three flags: '-a' displays all active connections and listening ports, '-n' displays IP addresses and port numbers in numerical format (avoiding slow reverse-DNS lookups), and '-o' appends the owning Process ID (PID) column to the output. This gives security analysts and system administrators the exact data required to map suspicious network connections to running system processes.

Adım Adım Çözüm

1
Identify the diagnostic goal
The goal is to inspect active TCP/UDP connections and map them to local process identifiers (PIDs).
Correlating socket connections to PIDs allows the administrator to terminate or analyze suspicious software processes.
2
Evaluate command-line options for process and socket inspection
The 'netstat' command is designed to query network statistics and protocol connections on host OS platforms.
Other utilities like 'arp' or 'nslookup' operate on different OSI layers or perform external DNS lookup functions.
3
Select the correct combination of switches
The '-a' switch displays all connections and listening ports, '-n' prevents DNS name resolution for faster numerical viewing, and '-o' appends the Process ID (PID). Combining them yields 'netstat -ano'.
This output provides the exact PID needed to correlate network connections with active running processes in Task Manager or CLI toolsets.

Anahtar Kavram

Utilizing command-line network utilities (netstat) to inspect active connections and process identifiers.
Soru 1988Soru

Users in a regional branch office report that their workstations can successfully communicate with local peers on their LAN segment but are unable to access centralized enterprise resources hosted at 10.50.0.0/2410.50.0.0/24. A network technician executes `ipconfig /all` on a affected workstation and receives the following output:

text
IPv4 Address. . . . . . . . . . . : 192.168.45.112
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.4.1
DHCP Server . . . . . . . . . . . : 192.168.45.1

Which of the following represents the root cause of the routing failure to external subnets?

Cevabı ve açıklamayı göster

Cevap: The configured default gateway address resides on a different IP subnet than the host address.

Cevap

The configured default gateway address resides on a different IP subnet than the host address.
The correct answer identifies that the default gateway (192.168.4.1) is misconfigured on a different subnet than the host (192.168.45.112/24). A default gateway must reside within the host's local IP subnet so the host can perform ARP resolution and send non-local packets to the gateway router.

Adım Adım Çözüm

1
Analyze host IP parameters from ipconfig output
Host IP is 192.168.45.112192.168.45.112 with subnet mask 255.255.255.0255.255.255.0 (/24), defining the local subnet range as 192.168.45.1192.168.45.1 to 192.168.45.254192.168.45.254.
Determines the boundaries of the local broadcast domain.
2
Evaluate the configured default gateway address
Default Gateway is set to 192.168.4.1192.168.4.1, which resides in the 192.168.4.0/24192.168.4.0/24 network range.
Identifies whether the gateway is directly reachable on the local layer 2 segment.
3
Determine the impact on traffic destined for remote networks
Because 192.168.4.1192.168.4.1 is not on the 192.168.45.0/24192.168.45.0/24 subnet, local ARP requests for the gateway's MAC address fail, rendering external subnets unreachable while local subnet traffic continues to function.
Explains why intra-subnet connectivity works but remote traffic fails.

Anahtar Kavram

Default Gateway Subnet Misconfiguration
Soru 1989Soru

A network administrator notices severe throughput degradation and high frame retransmission rates across a newly deployed 2.4 GHz2.4\text{ GHz} wireless network serving four adjacent open-office zones. Reviewing the wireless controller configuration reveals that neighboring access points are currently statically assigned to channels 1, 4, 7, and 10. Which configuration change must the administrator implement to eliminate adjacent channel interference (ACI) between the neighboring access points?

Cevabı ve açıklamayı göster

Cevap: Reassign the access points to operate using only channels 1, 6, and 11, reusing channel 1 on the access point farthest from the initial channel 1 deployment.

Cevap

Reassign the access points to operate using only channels 1, 6, and 11, reusing channel 1 on the access point farthest from the initial channel 1 deployment.
In the 2.4 GHz Wi-Fi band, each channel occupies 20 MHz of channel bandwidth while center frequencies are spaced only 5 MHz apart. Therefore, only channels 1, 6, and 11 provide complete frequency separation without spectral overlap. In a four-AP deployment, assigning adjacent APs to 1, 6, and 11 and placing the second channel 1 AP at the maximum physical distance ensures clean cell boundary separation and eliminates adjacent channel interference.

Adım Adım Çözüm

1
Identify the cause of performance degradation
Channels 1, 4, 7, and 10 each have a 20 MHz channel width (spaced only 5 MHz apart per channel step), causing their signal sidebands to overlap and create adjacent channel interference (ACI).
Adjacent channel interference occurs when overlapping Wi-Fi frequencies cause uncoordinated energy spills, leading to frame corruption and retransmissions.
2
Determine the non-overlapping channel scheme for the 2.4 GHz band
The standard non-overlapping 20 MHz channels in the 2.4 GHz ISM band (802.11b/g/n/ax) are channels 1, 6, and 11.
Each standard channel is 20 MHz wide with 5 MHz separation between center frequencies, requiring a minimum of 25 MHz (5 channels) separation between non-overlapping center frequencies.
3
Apply cellular channel reuse design
Assign channels 1, 6, and 11 to adjacent access points and repeat channel 1 on the fourth access point, ensuring maximum physical distance between the two channel 1 cells.
Proper channel reuse minimizes co-channel interference (CCI) while completely preventing adjacent channel interference (ACI).

Anahtar Kavram

2.4 GHz Non-Overlapping Channel Planning
Soru 1990Soru

During a planned network maintenance window, an administrator installs a new central switch (Switch-Core) to serve as the core switching node. After connecting Switch-Core to the access switches, network traffic follows sub-optimal paths across the campus topology. Troubleshooting reveals that an old edge switch (Switch-Access-3) with a configured Spanning Tree Protocol (STP) bridge priority of 4096 has been elected as the STP root bridge because Switch-Core is using the default STP priority of 32768. Which configuration change on Switch-Core will resolve this issue and establish Switch-Core as the STP root bridge?

Cevabı ve açıklamayı göster

Cevap: Configure the STP bridge priority value on Switch-Core to a number lower than 4096, such as 0 or 2048.

Cevap

Configure the STP bridge priority value on Switch-Core to a number lower than 4096, such as 0 or 2048.
In 802.1D and 802.1w Spanning Tree Protocol, the switch with the lowest Bridge ID (BID) is elected as the root bridge. The BID begins with the bridge priority field. Because Switch-Access-3 has a priority of 4096 and Switch-Core is at the default value of 32768, Switch-Access-3 wins the election. Assigning Switch-Core a bridge priority lower than 4096 (such as 0 or 2048) guarantees it has the lowest BID and becomes the root bridge.

Adım Adım Çözüm

1
Identify the election criteria for Spanning Tree Protocol (STP) Root Bridge selection.
STP elects the root bridge based on the lowest Bridge ID (BID), which combines Bridge Priority and the switch MAC address.
Understanding BID comparison rules determines how to influence root bridge election.
2
Compare the current bridge priority of Switch-Access-3 (4096) with Switch-Core (32768).
Switch-Access-3 has a lower numerical priority (4096 < 32768), making it the current root bridge.
Lower numerical values take precedence in STP root bridge elections.
3
Determine the necessary configuration change on Switch-Core.
Setting Switch-Core's priority to a value lower than 4096 (e.g., 0 or 2048 in standard 4096 increments) forces Switch-Core to win the root bridge election.
Configuring a lower priority than 4096 ensures Switch-Core advertises the lowest BID across the broadcast domain.

Anahtar Kavram

STP Root Bridge Priority Election
Soru 1991Soru

A network administrator is troubleshooting an issue where newly deployed host systems on a corporate subnet (10.100.40.0/2410.100.40.0/24) can communicate with local peers but fail to reach external subnets or internet services. Executing `ipconfig /all` on one of the affected hosts produces the following output:

text
IPv4 Address. . . . . . . . . . . : 10.100.40.88
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.100.4.1
DHCP Server . . . . . . . . . . . : 10.100.1.10

Which of the following options accurately identify the root cause of this connectivity failure and the appropriate corrective action? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The assigned default gateway address (10.100.4.1) resides on a different IP subnet than the host's IPv4 address (10.100.40.88/24).; Reconfigure DHCP Scope Option 003 on the server to distribute a default gateway IP within the local 10.100.40.0/24 subnet.

Cevap

The host cannot reach remote networks because its default gateway (10.100.4.1) is on a different subnet than its assigned IP address (10.100.40.88/24). Reconfiguring DHCP Scope Option 003 on the DHCP server to distribute a gateway address on the 10.100.40.0/24 subnet resolves the issue.
The client host is assigned an IP address of 10.100.40.88 with a /24 subnet mask (255.255.255.0), placing it in the 10.100.40.0/24 network segment. The configured default gateway is 10.100.4.1, which resides on a completely different IP subnet (10.100.4.0/24). A host cannot route off-subnet traffic if its default gateway does not share its local subnet prefix. Because the configuration was provided dynamically, updating DHCP Option 003 on the DHCP server to supply a gateway address within 10.100.40.0/24 resolves the issue for all affected clients.

Adım Adım Çözüm

1
Analyze client IP configuration and subnet boundaries.
Host IP is 10.100.40.88 with subnet mask 255.255.255.0 (/24). The usable host IP range for this subnet is 10.100.40.1 through 10.100.40.254.
To send packets outside the local broadcast domain, a host must forward traffic to a gateway located within its local network prefix.
2
Compare default gateway address to host subnet.
The configured default gateway address is 10.100.4.1, which falls outside the 10.100.40.0/24 subnet prefix (it belongs to 10.100.4.0/24).
Because the gateway is not on the same broadcast domain, ARP resolution fails and remote packets cannot be forwarded.
3
Determine root source of misconfiguration and appropriate remedy.
The client received this configuration from DHCP Server 10.100.1.10. Reconfiguring DHCP Scope Option 003 (Router) for the 10.100.40.0/24 scope ensures clients automatically receive a gateway address within 10.100.40.0/24.
DHCP Option 003 dictates the default gateway IP address assigned to dynamic DHCP clients.

Anahtar Kavram

Default Gateway Subnet Alignment and DHCP Scope Option 003 Configuration
Soru 1992Soru

A network administrator is systematically troubleshooting an end user's workstation that cannot access an internal web application located at `https://app.corp.local`. Place the command-line utility operations in the logical sequential order recommended for isolation, starting from basic local network interface validation up to upper-layer protocol testing.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order follows a structured bottom-up / progressive isolation approach: 1. Verify local IP settings (`ipconfig /all`), 2. Test ICMP loopback and default gateway reachability (`ping`), 3. Validate DNS name resolution (`nslookup`), 4. Identify network path failure points (`tracert`), 5. Verify transport layer port and service responsiveness (`netstat`/socket test).
The logical troubleshooting workflow progresses systematically from host interface verification (`ipconfig /all`), to local gateway reachability (`ping`), to application layer resolution (`nslookup`), to path routing analysis (`tracert`), and finally to service port level inspection (`netstat`).

Adım Adım Çözüm

1
Check local network interface status and assigned IP parameters using `ipconfig /all`.
Confirms the host has a valid IP address, subnet mask, gateway, and DNS server configuration.
Troubleshooting should start at Layer 1-3 local host verification before attempting remote target diagnosis.
2
Test ICMP ping to loopback (`127.0.0.1`) and default gateway.
Confirms the internal network stack functions and local segment connectivity is intact.
If the default gateway is unreachable, remote routing and DNS tests will fail.
3
Execute DNS lookup using `nslookup app.corp.local`.
Determines whether hostname resolution is functioning and yields the target destination IP.
Name resolution problems prevent applications from forming connections even if IP routing is fully operational.
4
Trace path hops to target server using `tracert`.
Identifies the exact intermediate router hop where latency spikes or packet loss occurs.
Path tracing isolates WAN or multi-router forwarding failures along the path to the server IP.
5
Verify target service port accessibility using transport/session tools (`netstat` / port socket check).
Distinguishes between network layer reachability and service-level firewall or application port blocks.
Upper-layer checks verify that TCP port 443 (HTTPS) is accepting connections once path reachability is confirmed.

Anahtar Kavram

Structured Command-Line Diagnostic Sequence for End-to-End Connectivity
Soru 1993Soru

Match each physical layer cabling symptom or test result on the left with its most likely root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A wiremap tester indicates pin-to-pin continuity on pins 1 through 8, yet a cable certifier reports severe Near-End Crosstalk (NEXT) failure.
An optical power meter reveals abnormal insertion loss and high back reflection localized precisely at an LC patch panel junction.
A Category 6 cable run negotiates a link speed of only 100 Mbps instead of 1 Gbps, and a continuity test reveals an open circuit on pin 4.
A Power over Ethernet (PoE+) switch port shuts down due to excessive voltage drop, and a cable analyzer reports abnormally high DC resistance.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Pin-to-pin continuity with severe NEXT matches Split pair wiring mistake. 2. Insertion loss and high back reflection at LC junction matches Contaminated fiber optic ferrule end-face. 3. 100 Mbps link fallback with open pin 4 matches Incomplete 4-pair connectivity for Gigabit. 4. High DC resistance and PoE voltage drop matches Use of Copper-Clad Aluminum (CCA) cabling.
Each physical cabling symptom maps directly to its specific physical layer failure mechanism: split pairs preserve pin continuity while causing NEXT due to untwisted pair pairing; fiber ferrule end-face debris scatters light causing insertion loss and return loss at connector junctions; pin 4 opens prevent 4-pair Gigabit autonegotiation and force a 100 Mbps fallback; and non-standard CCA cables introduce excessive DC resistance under PoE load.

Adım Adım Çözüm

1
Analyze the first scenario involving pin continuity accompanied by NEXT failure.
Identify that split pair cabling errors maintain straight-through electrical continuity but break pair twists, causing crosstalk.
Differential signaling in twisted-pair copper relies on tight twists to eliminate electromagnetic induction between adjacent pairs.
2
Analyze the second scenario involving attenuation and reflection localized at a fiber LC connector.
Determine that microscopic contamination on the ferrule surface impedes light transfer and reflects light back toward the transmitter.
Clean ferrule end-faces are essential to ensure glass-to-glass contact without air gaps.
3
Analyze the third scenario where a Cat 6 connection drops from 1 Gbps to 100 Mbps due to an open conductor on pin 4.
Recognize that 1000BASE-T autonegotiation requires all 4 pairs, whereas 100BASE-TX operates over only 2 pairs (1/2 and 3/6).
A break on pins 4, 5, 7, or 8 prevents 4-pair operation, causing the switch/NIC to downgrade the link.
4
Analyze the fourth scenario where PoE causes excessive voltage drop and high DC loop resistance.
Identify Copper-Clad Aluminum (CCA) as a non-compliant conductor material with higher DC resistance than solid copper.
Aluminum has lower conductivity than copper, leading to higher I^2R power loss and voltage drops when powering remote PoE devices.

Anahtar Kavram

Troubleshooting Physical Cabling and Connectors
Soru 1994Soru

A network technician is troubleshooting an issue on a Linux host that cannot resolve the hostname of an internal server `app.corp.local`. The technician runs `dig app.corp.local` and receives a response indicating `STATUS: SERVFAIL` from the local recursive DNS server at `192.168.1.2`. To determine whether the issue is isolated to the local recursive server or affects the authoritative server directly, the technician wants to query the domain's designated authoritative DNS server at `10.0.5.50`. Which of the following command-line entries should the technician execute?

Cevabı ve açıklamayı göster

Cevap: dig @10.0.5.50 app.corp.local

Cevap

Executing `dig @10.0.5.50 app.corp.local` sends the query directly to the authoritative DNS server at `10.0.5.50`.
In the `dig` (Domain Information Groper) command-line utility, the `@` symbol followed by an IP address or hostname tells `dig` to send the query directly to that specific DNS server. Running `dig @10.0.5.50 app.corp.local` allows the technician to bypass the local recursive resolver (`192.168.1.2`) and evaluate the authoritative server's response.

Adım Adım Çözüm

1
Identify the goal of the CLI command.
The goal is to direct a DNS resolution query for `app.corp.local` specifically to the server at `10.0.5.50` instead of the local default resolver.
Bypassing intermediate recursive resolvers helps isolate whether DNS failures originate from local cache/forwarding or the authoritative name server.
2
Analyze the syntax requirements for the `dig` utility.
In BIND `dig`, directing a query to a specific DNS server requires specifying `@server` before or after the domain name.
The `@` sign tells `dig` to bypass `/etc/resolv.conf` defaults and direct UDP/TCP port 53 packets to the specified IP address.
3
Evaluate the correct command syntax.
`dig @10.0.5.50 app.corp.local` correctly targets `10.0.5.50` for the lookup.
This isolates the DNS troubleshooting path effectively.

Anahtar Kavram

Directing DNS lookup queries to specific name servers using the `dig` utility
Soru 1995Soru

An enterprise network storage server experiences severe database corruption on a Thursday morning. To recover system functionality with zero data loss, the network team must execute a restoration plan. The organization's backup policy includes a weekly full backup performed every Sunday at 00:00, daily differential backups taken at 23:00, and continuous transaction logging. In what correct chronological order should the administrator execute the restoration steps?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct restoration sequence starts by restoring the full backup from Sunday, applying the latest differential backup from Wednesday night, replaying the transaction logs up to the moment of failure on Thursday morning, and completing post-restoration data integrity checks before reconnecting network services.
When executing a disaster recovery plan involving full and differential backups, the baseline full backup (Sunday) must be restored first. Next, because differential backups accumulate all changes since the previous full backup, only the latest differential backup (Wednesday) needs to be applied. Point-in-time transaction logs are then replayed to bring data up to the exact moment of failure on Thursday morning. Finally, verification is performed before resuming production network operations.

Adım Adım Çözüm

1
Restore the Sunday full backup image
Re-establishes the core operating environment and data baseline as of Sunday 00:00.
Full backups contain the complete data set and serve as the essential baseline required for any subsequent differential or incremental restoration.
2
Apply the Wednesday night differential backup set
Updates all modified data cumulatively from Sunday 00:00 to Wednesday 23:00.
Because differential backups record all cumulative changes made since the last full backup, only the most recent differential backup (Wednesday) is needed.
3
Replay transaction logs recorded after Wednesday 23:00
Recovers granular data deltas up to the exact point of failure on Thursday morning.
Transaction logs capture point-in-time transactions occurring after the latest differential backup to achieve a near-zero Recovery Point Objective (RPO).
4
Validate data integrity and reinstate production network connectivity
Confirms system health and restores service availability safely.
System state validation prevents serving corrupted or inconsistent data to clients when operational connectivity is restored.

Anahtar Kavram

Full and Differential Backup Restoration Sequence
Tahmini Süre:1m 30s
Soru 1996Soru

A network administrator is troubleshooting inter-switch communication between Switch-Alpha and Switch-Beta. Users on VLAN 20 attached to Switch-Alpha report complete loss of connectivity to servers on VLAN 20 attached to Switch-Beta. Additionally, syslog messages indicate that untagged management frames transmitted from Switch-Alpha on VLAN 10 are being received on VLAN 30 on Switch-Beta across trunk interface GigabitEthernet 0/1.

An inspection of the interface configuration reveals:
- Switch-Alpha (GigabitEthernet 0/1): Mode: Trunk, Native VLAN: 10, Allowed VLANs: 10, 20, 30
- Switch-Beta (GigabitEthernet 0/1): Mode: Trunk, Native VLAN: 30, Allowed VLANs: 10, 30

Which TWO configuration adjustments must be implemented on Switch-Beta to resolve both issues? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reconfigure the native VLAN on interface GigabitEthernet 0/1 to VLAN 10.; Add VLAN 20 to the list of allowed VLANs on interface GigabitEthernet 0/1.

Cevap

The administrator must reconfigure the native VLAN on interface GigabitEthernet 0/1 to VLAN 10 and add VLAN 20 to the allowed VLAN list on interface GigabitEthernet 0/1.
The correct solution requires two actions on Switch-Beta: modifying the native VLAN on interface GigabitEthernet 0/1 to VLAN 10, and adding VLAN 20 to the trunk interface allowed list. Changing the native VLAN fixes the native VLAN mismatch between Switch-Alpha (VLAN 10) and Switch-Beta (VLAN 30), preventing untagged frame leakage. Adding VLAN 20 to the allowed list permits VLAN 20 tagged frames to pass across the trunk interface.

Adım Adım Çözüm

1
Analyze the syslog symptom regarding untagged traffic misdirection.
Identify that Switch-Alpha uses Native VLAN 10 while Switch-Beta uses Native VLAN 30 on the trunk link, creating a native VLAN mismatch that causes untagged VLAN 10 frames to drop into VLAN 30 on Switch-Beta.
802.1Q trunk ports do not tag frames belonging to the configured native VLAN. The receiving switch places untagged frames into its own configured native VLAN.
2
Analyze the VLAN 20 connectivity failure.
Determine that VLAN 20 is configured on Switch-Alpha's allowed trunk list (10, 20, 30) but is missing from Switch-Beta's allowed trunk list (10, 30).
Trunk interfaces prune and drop frames for VLANs that are not explicitly included in their allowed VLAN list.
3
Identify the required remedial commands on Switch-Beta.
Change the native VLAN on GigabitEthernet 0/1 to VLAN 10 and update the trunk allowed VLAN list to include VLAN 20.
These two steps align trunk parameter configurations on both ends, restoring VLAN 20 traffic flow and correcting untagged frame mapping.

Anahtar Kavram

802.1Q Trunk Parameter Matching (Native VLAN and Allowed VLAN List)
Soru 1997Soru

A network technician is troubleshooting an existing Category 6 copper cable run that connects a workstation to a access switch. The link constantly fails to negotiate at Gigabit speed, dropping to 100 Mbps with frequent CRC frame errors under heavy traffic load. A wiremap test confirms that all eight conductors are properly pin-terminated at both ends according to TIA/EIA 568B standards with no open or short circuits. Which diagnostic instrument should the technician use to measure frequency-dependent parameters such as Near-End Crosstalk (NEXT) and return loss to determine if the run meets Category 6 specifications?

Cevabı ve açıklamayı göster

Cevap: Cable certifier

Cevap

The technician should use a cable certifier to measure frequency-dependent parameters such as Near-End Crosstalk (NEXT) and return loss against TIA/EIA Category 6 standards.
A cable certifier is specifically engineered to test copper runs at high frequencies according to TIA/EIA standards. It evaluates critical physical-layer electrical performance metrics—including Near-End Crosstalk (NEXT), attenuation, and return loss—which cause speed degradation and CRC errors even when basic pin continuity is intact.

Adım Adım Çözüm

1
Analyze the reported symptoms and initial test results
Basic continuity and wiremap testing verified proper pinouts and DC continuity, but link degradation (CRC errors and failed Gigabit auto-negotiation) persists.
Simple wiremap testers only confirm pin-to-pin DC continuity and cannot test high-frequency signal integrity.
2
Identify the required level of diagnostic measurement
Parameters like Near-End Crosstalk (NEXT), Equal-Level Far-End Crosstalk (ELFEXT), and return loss require broad frequency sweeps.
Gigabit Ethernet (1000BASE-T) relies on high-frequency signalling across all four pairs simultaneously, making it susceptible to noise and crosstalk.
3
Select the appropriate diagnostic tool
Choose a cable certifier.
Cable certifiers execute standardized test suites (ANSI/TIA-568) across specified frequencies to ensure physical copper infrastructure complies with category rating standards.

Anahtar Kavram

Copper Cable Certification vs. Basic Continuity Testing
Soru 1998Soru

A network technician is deploying a new smart HVAC controller on VLAN 55 (172.16.55.0/24172.16.55.0/24). The corporate DHCP server is centralized on VLAN 10 (172.16.10.10/24172.16.10.10/24). Upon booting up the controller, running a network diagnostics command shows the following output:

IPv4 Address. . . . . . . . . . . : 169.254.108.42
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : Yes

Other existing hosts on VLAN 10 obtain their DHCP leases without issues. Which of the following is the MOST likely cause of the HVAC controller failing to acquire an IP address?

Cevabı ve açıklamayı göster

Cevap: The router interface servicing VLAN 55 lacks an IP helper address configured to forward broadcast DHCP requests.

Cevap

The router interface servicing VLAN 55 lacks an IP helper address configured to forward broadcast DHCP requests.
The client's self-assignment of an Automatic Private IP Address (169.254.108.42169.254.108.42) indicates that its DHCPDISCOVER broadcast was never answered. Since the host resides on VLAN 55 and the DHCP server resides on VLAN 10, the Layer 3 boundary router between these subnets drops the broadcast unless an IP helper address (DHCP Relay agent) is explicitly configured on the VLAN 55 interface to convert the broadcast to unicast.

Adım Adım Çözüm

1
Analyze the terminal output from the HVAC controller.
The host assigned itself an APIPA address of 169.254.108.42/16169.254.108.42/16, indicating it sent DHCPDISCOVER broadcasts but received no DHCPOFFER responses.
When a client configured for dynamic addressing receives no response from a DHCP server, automatic private IP addressing (APIPA) assigns an address in the 169.254.0.0/16169.254.0.0/16 range.
2
Evaluate the network topology context.
The client is on VLAN 55 (172.16.55.0/24172.16.55.0/24) while the DHCP server is located on VLAN 10 (172.16.10.10/24172.16.10.10/24).
Routers drop Layer 2 broadcast frames by default, preventing broadcast DHCPDISCOVER packets from traversing subnets unless relayed.
3
Determine the required resolution mechanism.
An IP helper address (`ip helper-address 172.16.10.10`) must be configured on the VLAN 55 Layer 3 interface.
The IP helper agent converts incoming broadcast DHCPDISCOVER messages into unicast requests sent directly to the centralized DHCP server on VLAN 10.

Anahtar Kavram

Troubleshooting DHCP Relay / IP Helper across Subnets and APIPA Diagnosis
Soru 1999Soru

A financial services firm performs a full system backup every Sunday at 00:00. From Monday through Saturday, the network administration team performs cumulative differential backups every night at 23:00. If a primary database storage array suffers a total hardware failure on Friday at 14:00, which sequence of backup restorations will recover the system to its most recent available state with the shortest recovery time?

Cevabı ve açıklamayı göster

Cevap: Restore the Sunday full backup, followed by the Thursday differential backup.

Cevap

Restore the Sunday full backup, followed by the Thursday differential backup.
Differential backups store all changed data since the last full backup. Restoring the baseline Sunday full backup followed immediately by the latest Thursday differential backup recovers the system to Thursday night's state in two steps.

Adım Adım Çözüm

1
Identify the backup baseline
The foundation for restoration is the Sunday full backup at 00:00.
Full backups provide the initial system state required before any differential sets can be applied.
2
Determine the differential backup characteristics
Differential backups capture all cumulative changes since the last full backup.
The Thursday 23:00 differential backup includes all data modified from Sunday 00:00 up to Thursday 23:00.
3
Select the optimal restoration sequence
Apply the Sunday full backup first, then apply only the Thursday differential backup.
This two-step process minimizes recovery time while restoring all data backed up prior to the Friday afternoon failure.

Anahtar Kavram

Differential Backup Restoration Sequence
Soru 2000Soru

A network administrator is troubleshooting an issue on a Linux server hosting an internal HTTPS application. Users report that they cannot access the website from remote workstations, even though the server is powered on and reachable via `ping`. The administrator executes a command-line utility on the Linux server to inspect active network socket bindings and receives the following output:

State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 128 127.0.0.1:443 0.0.0.0:* users:(("httpd",pid=2048,fd=3))

Based on this output snippet, which of the following is the root cause preventing remote clients from accessing the web service?

Cevabı ve açıklamayı göster

Cevap: The web service daemon is bound exclusively to the local loopback interface rather than a physical network interface IP address.

Cevap

The web service daemon is bound exclusively to the local loopback interface rather than a physical network interface IP address.
The output snippet generated by socket troubleshooting commands (such as `ss` or `netstat`) reveals that the `httpd` process is listening on `127.0.0.1:443`. The IP address `127.0.0.1` is reserved for the host loopback interface, meaning the operating system will only accept socket connections originating from within the local machine. Remote workstations cannot reach the service until the daemon configuration is updated to bind to the server's actual interface IP address or all available network interfaces (`0.0.0.0`).

Adım Adım Çözüm

1
Analyze the command-line output socket binding table.
Identify that the process `httpd` is in the `LISTEN` state on `127.0.0.1:443`.
The `Local Address:Port` column indicates which network interface IP address and TCP port the daemon listens to for incoming traffic.
2
Evaluate the IP address scope for 127.0.0.1.
Recognize that `127.0.0.1` is reserved strictly for the local loopback interface.
Traffic directed to `127.0.0.1` is processed internally by the local host OS and cannot accept inbound IP packets arriving from external network adapters.
3
Determine the necessary corrective action for network accessibility.
The server configuration must be updated to listen on `0.0.0.0:443` (all interfaces) or the specific physical interface IP assigned to the server.
Binding to `0.0.0.0` or a public/private subnet IP allows the network stack to listen for incoming connections over the physical network interface.

Anahtar Kavram

Socket Binding and Loopback Interface Isolation in Network Troubleshooting CLI Utilities
ÖncekiSayfa 100 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin