Tüm alıştırma soruları

2237 soru

Soru 2001Soru

A network administrator connects a single-mode fiber optic patch cable to a newly installed patch panel module. Although physical link connectivity is established, optical testing shows exceptionally high optical return loss (back reflection), degrading signal quality. Upon visual inspection of the patch panel ports and connectors, the administrator notes that the patch cable has green LC connectors while the patch panel bulkhead coupler accepts blue LC connectors. Which of the following physical layer mismatched connection types is causing this issue?

Cevabı ve açıklamayı göster

Cevap: Mating an Angled Physical Contact (APC) connector with an Ultra Physical Contact (UPC) connector

Cevap

Mating an Angled Physical Contact (APC) connector with an Ultra Physical Contact (UPC) connector is causing the high optical return loss.
In fiber optic infrastructure, green connectors indicate Angled Physical Contact (APC), which features an 8-degree angled ferrule end-face designed to minimize back reflection. Blue connectors indicate Ultra Physical Contact (UPC), which features a flat or slightly dome-shaped ferrule end-face. Connecting an APC ferrule to a UPC ferrule creates an air gap between the fiber cores, causing severe signal reflection (high optical return loss) and potential physical damage to the glass end-faces.

Adım Adım Çözüm

1
Identify the connector color coding standards for optical fiber polish types.
Green bodies/boots signify Angled Physical Contact (APC), while blue bodies/boots signify Ultra Physical Contact (UPC).
Industry standards mandate strict color coding to prevent improper mating of differing physical contact geometries.
2
Analyze the physical ferrule interface differences between APC and UPC connectors.
APC ferrules are polished at an 8-degree angle to direct reflected light into the cladding, whereas UPC ferrules are polished with a flat/spherical surface.
Joining an 8-degree angled ferrule (green) to a flat/spherical ferrule (blue) prevents complete glass-to-glass contact.
3
Determine the impact of mating APC with UPC connectors.
The physical gap causes severe optical signal reflection (high return loss) and can permanently damage the fiber end-faces.
Matching physical polish types is essential for maintaining physical layer transmission integrity.

Anahtar Kavram

Fiber Optic Polish Types (APC vs. UPC Connector Mismatch)
Tahmini Süre:1m 30s
Soru 2002Soru

A network technician is investigating degraded performance and intermittent packet drops on a newly terminated Category 6 UTP cable run. When tested with a basic wiremap continuity tester, all eight pins pass with direct 1-to-1 pin mapping. However, the link experiences severe performance issues under load. Which of the following test results or physical characteristics indicate that a split pair condition is the root cause of this failure? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: A basic wiremap continuity tester reports that pin 1 connects to pin 1, pin 2 to pin 2, up to pin 8 to pin 8.; A cable certifier measures excessively high Near-End Crosstalk (NEXT) along the cable run.

Cevap

The correct characteristics indicating a split pair are that a basic wiremap tester reports full 1-to-1 pin continuity, while a cable certifier measures excessively high Near-End Crosstalk (NEXT).
A split pair condition happens when individual wires from separate twisted pairs are improperly paired together at both RJ-45 terminations. Because the pinout sequence is mirrored at both ends, a basic continuity wiremap tester shows a valid 1-to-1 connection. However, breaking the geometric pairing cancels the noise rejection mechanism inherent to twisted-pair cabling, causing severe Near-End Crosstalk (NEXT) that requires a full cable certifier to detect.

Adım Adım Çözüm

1
Understand the physical nature of a split pair fault.
A split pair occurs when two individual conductors from different twisted pairs are mistakenly swapped at both cable ends during termination (e.g., pin 3 and pin 4 swapped on both ends).
Because the miswiring is mirrored at both ends, electrical continuity is maintained from end to end.
2
Evaluate how basic continuity testers interact with split pairs.
Basic wiremap testers only verify DC continuity and pin-to-pin mapping, so they report the cable as correctly wired.
Continuity testers do not check signal frequency, phase cancellation, or crosstalk.
3
Analyze high-frequency signal interference caused by split pairs.
Twisting two specific conductors together cancels out electromagnetic interference. Splitting those pairs disrupts the cancellation effect, causing high Near-End Crosstalk (NEXT) and Far-End Crosstalk (FEXT).
Advanced cable certifiers testing high-frequency signal integrity detect this elevated NEXT noise.

Anahtar Kavram

Split Pair Diagnosis in Twisted-Pair Cabling
Tahmini Süre:1m 30s
Soru 2003Soru

A network administrator is troubleshooting a connectivity failure between two switches connected via an 802.1Q trunk link. Host devices assigned to VLAN 10 on Switch-A are unable to communicate with servers on VLAN 10 connected to Switch-B. Inspection of the switch port configurations indicates that port GigabitEthernet 0/1 on Switch-A is configured with VLAN 10 as its native VLAN, while port GigabitEthernet 0/1 on Switch-B uses default VLAN 1 as its native VLAN. Which of the following best explains why VLAN 10 traffic fails to reach its destination across the trunk?

Cevabı ve açıklamayı göster

Cevap: Switch-A transmits VLAN 10 traffic untagged over the trunk, causing Switch-B to receive the frames and place them into VLAN 1 rather than VLAN 10.

Cevap

Switch-A transmits VLAN 10 traffic untagged over the trunk, causing Switch-B to receive the frames and place them into VLAN 1 rather than VLAN 10.
The correct answer correctly identifies that an 802.1Q trunk sends frames belonging to its configured native VLAN without adding an 802.1Q VLAN tag. Because Switch-A has native VLAN 10 and Switch-B has native VLAN 1, Switch-A sends VLAN 10 frames untagged. Switch-B receives those untagged frames and places them into its own native VLAN (VLAN 1), preventing VLAN 10 hosts on Switch-A from reaching VLAN 10 servers on Switch-B.

Adım Adım Çözüm

1
Analyze how 802.1Q trunks handle native VLAN traffic.
Frames associated with the native VLAN configured on a switch interface are sent across the trunk link without an IEEE 802.1Q VLAN tag.
802.1Q standard behavior dictates that native VLAN traffic remains untagged for backward compatibility.
2
Trace the path of untagged frames sent from Switch-A to Switch-B.
Switch-A sends VLAN 10 frames untagged because VLAN 10 is configured as native on Switch-A's trunk interface. Upon arrival at Switch-B, Switch-B receives untagged frames and assigns them to its native VLAN, which is configured as VLAN 1.
Switches assign all incoming untagged frames received on a trunk port to whichever VLAN is configured locally as the native VLAN.
3
Determine the operational impact on VLAN 10 connectivity.
VLAN 10 frames from Switch-A end up on VLAN 1 on Switch-B, preventing end-to-end Layer 2 communication between VLAN 10 hosts across the switches.
Traffic is misrouted into a different broadcast domain, breaking intra-VLAN communication.

Anahtar Kavram

802.1Q Native VLAN Tagging and Mismatch Behavior
Soru 2004Soru

Match each command-line network troubleshooting command to its primary diagnostic function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

ping -f -l 1472
nslookup -type=TXT
ss -tulpn
traceroute -n

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Matching pairs: ping -f -l 1472 corresponds to testing path MTU with the Don't Fragment flag; nslookup -type=TXT corresponds to querying DNS TXT records; ss -tulpn corresponds to displaying listening TCP/UDP sockets with PIDs without resolving names; traceroute -n corresponds to tracing the Layer 3 path without hostname resolution.
Each utility switch targets a specific diagnostic capability: 'ping -f -l' checks MTU size limits, 'nslookup -type=TXT' retrieves text verification records, 'ss -tulpn' lists listening sockets and process IDs numerically on Linux, and 'traceroute -n' identifies route hops without performing time-consuming reverse DNS lookups.

Adım Adım Çözüm

1
Analyze ping switches '-f' and '-l'
Identify '-f' as Don't Fragment flag and '-l' as payload size, indicating Path MTU Discovery (PMTUD).
Setting the DF flag causes routers to drop packets exceeding MTU size and return ICMP Fragmentation Needed messages.
2
Analyze nslookup option '-type=TXT'
Recognize record type targeting domain text entries.
TXT records store descriptive text data, frequently utilized for email authentication mechanisms like SPF and DKIM.
3
Analyze ss command flags '-tulpn'
Decode Linux socket statistics options.
'-t' (TCP), '-u' (UDP), '-l' (listening), '-p' (processes), and '-n' (numeric output without DNS resolution) inspect open ports and ownership.
4
Analyze traceroute flag '-n'
Identify suppression of reverse DNS lookups.
Instructing traceroute not to perform DNS resolution speeds up execution when identifying network path hops.

Anahtar Kavram

Utilizing command-line utilities and flags for specific network troubleshooting diagnostics
Soru 2005Soru

A network engineering team is updating the disaster recovery policy for a critical real-time payment processing application. The Business Impact Analysis (BIA) establishes a Recovery Point Objective (RPO) of less than 5 minutes and a Recovery Time Objective (RTO) of less than 15 minutes. Which TWO of the following technical solutions should the team implement to meet both requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Synchronous database replication across an active-active high-availability cluster; Automated traffic redirection utilizing Global Server Load Balancing (GSLB) with continuous health checks

Cevap

The team must implement synchronous database replication across an active-active high-availability cluster and automated traffic redirection utilizing Global Server Load Balancing (GSLB) with continuous health checks.
Synchronous database replication ensures that transactions are committed to the secondary site in real time before completion, meeting the 5-minute RPO threshold. Automated GSLB health monitoring and traffic shifting immediately reroute production traffic to the active secondary site upon failure detection, fulfilling the sub-15-minute RTO requirement.

Adım Adım Çözüm

1
Analyze the RPO requirement (RPO<5 minutesRPO < 5\text{ minutes}) to determine data duplication strategy.
Near-zero data loss is mandatory. Asynchronous or interval-based backups (hourly or nightly) create windows of potential data loss far exceeding 5 minutes. Synchronous replication ensures zero to minimal data loss by writing transactions simultaneously to both locations.
RPO defines the maximum acceptable age of unrecovered data during a disruption.
2
Analyze the RTO requirement (RTO<15 minutesRTO < 15\text{ minutes}) to determine site availability and failover mechanism.
Service restoration must occur within 15 minutes. Cold or warm sites requiring manual declaration, provisioning, or DNS manual record updates take hours. Automated GSLB failover continuously monitors endpoint health and redirects active traffic automatically in real time.
RTO defines the maximum acceptable duration of service downtime.

Anahtar Kavram

Disaster Recovery Metrics (RTO and RPO) and Site Redundancy Strategies
Soru 2006Soru

A workstation on VLAN 30 (192.168.30.0/24192.168.30.0/24) fails to receive an IP address automatically and shows an APIPA address of 169.254.14.88169.254.14.88. A network administrator must systematically isolate the issue from the local host to the centralized network services. Place the troubleshooting steps in the correct logical sequence.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence starts at the local client host (`ipconfig /all`), moves to verifying the local router's DHCP relay configuration (`ip helper-address`), tests Layer 3 reachability to the server (`ping`), and finishes with inspecting DHCP scope activity and pool capacity on the server.
Structured network troubleshooting follows a logical path from local host diagnostics (`ipconfig /all`), to local gateway relay verification (`ip helper-address`), inter-device reachability testing (`ping`), and finally centralized service health checks (DHCP scope status).

Adım Adım Çözüm

1
Verify client interface state and IP configuration.
Confirms host link status and verifies APIPA (169.254.x.x169.254.x.x) autoconfiguration state.
Establishes baseline host status before analyzing upstream infrastructure.
2
Verify DHCP relay agent settings on the local gateway.
Ensures client DHCP broadcast frames are converted to unicast packets directed to the server.
Routers drop broadcasts by default; missing relay configuration stops DHCP requests at the gateway.
3
Test Layer 3 IP reachability between gateway and DHCP server.
Confirms routing and network path functionality between relay agent and server.
Relay agents cannot deliver unicast DHCPDISCOVER packets if routing to the server is down.
4
Audit server scope status and lease pool availability.
Verifies that the DHCP server can generate valid DHCPOFFER responses for the requested subnet.
Exhausted pools or disabled scopes prevent lease issuance even when requests arrive successfully.

Anahtar Kavram

DHCP Relay and IP Address Troubleshooting Sequence
Soru 2007Soru

An enterprise network operations team must select a secondary recovery facility for an internal administrative application. The Business Impact Analysis (BIA) establishes a Recovery Time Objective (RTO) of 24 hours and mandates strict budget controls. The disaster recovery strategy requires the facility to have active power, environmental controls, and telecommunications infrastructure in place, along with pre-racked server hardware, but continuous live data replication is not funded. Which disaster recovery site classification best meets these organizational requirements?

Cevabı ve açıklamayı göster

Cevap: Warm site

Cevap

Warm site
A warm site includes operational utilities, network infrastructure, and pre-installed server hardware, requiring only final data restoration and configuration upon disaster declaration. This makes it the most cost-effective solution capable of meeting a 24-hour Recovery Time Objective.

Adım Adım Çözüm

1
Evaluate the Recovery Time Objective (RTO) and budget constraints provided in the scenario.
The target recovery window is 24 hours, and budget limitations exclude continuous live active-active data mirroring.
RTO defines the maximum acceptable duration of system unavailability following a disaster.
2
Compare site recovery parameters against standard disaster recovery location tiers.
A facility equipped with power, HVAC, network links, and pre-staged server hardware that requires backup restoration upon disaster declaration matches the warm site operational model.
Warm sites balance cost and recovery speed for target recovery windows ranging from several hours to a day.

Anahtar Kavram

Disaster Recovery Site Selection Criteria (Hot vs. Warm vs. Cold Sites)
Soru 2008Soru

A network administrator receives reports that mobile devices connecting to the guest Wi-Fi network (VLAN 85, subnet 172.20.85.0/24172.20.85.0/24) are failing to access internet resources. Inspecting a network details page on an affected device reveals an IP address of 169.254.41.19169.254.41.19 with a subnet mask of 255.255.0.0255.255.0.0. Reviewing the DHCP server statistics shows that the active pool for VLAN 85 currently has 00 available IP addresses remaining out of the 254254 allocated pool entries. Which of the following actions should the administrator take to resolve the root cause of this issue?

Cevabı ve açıklamayı göster

Cevap: Expand the DHCP scope for VLAN 85 by modifying the subnet mask to a /23/23 or shortening the DHCP lease duration.

Cevap

Expanding the DHCP scope for VLAN 85 (such as by modifying the subnet mask to a /23) or reducing the lease duration will resolve the address pool exhaustion issue.
The client receiving an APIPA address (169.254.x.x169.254.x.x) combined with the DHCP server showing 00 available addresses indicates DHCP scope exhaustion. To remediate scope exhaustion in high-turnover guest wireless networks, administrators should expand the address pool (for example, expanding a /24/24 subnet to a /23/23) or decrease the DHCP lease duration so inactive leases expire sooner.

Adım Adım Çözüm

1
Analyze the client symptom and IP address output.
The IP address 169.254.41.19169.254.41.19 is an Automatic Private IP Addressing (APIPA) address, indicating the client failed to obtain a DHCP lease.
When a client cannot reach a DHCP server or receive an available lease, it self-assigns an APIPA address in the 169.254.0.0/16169.254.0.0/16 range.
2
Examine the DHCP server pool statistics.
The server logs show 00 available addresses remaining out of 254254 total entries in the scope.
This confirms DHCP scope exhaustion, where all usable host addresses have been leased out to existing clients.
3
Identify the appropriate remediation strategy.
Shortening lease times allows inactive leases to expire faster, while expanding the subnet mask to /23/23 increases usable addresses from 254254 to 510510.
Increasing scope capacity or accelerating lease turnover directly resolves scope exhaustion in high-density or guest wireless environments.

Anahtar Kavram

DHCP Scope Exhaustion and APIPA Diagnosis
Tahmini Süre:1m 30s
Soru 2009Soru

A network administrator is investigating a database connection issue on a host machine. The administrator needs to query the designated internal DNS server at 10.0.0.5310.0.0.53 directly for the record `db1.corp.internal` rather than relying on local resolver cache settings, and also inspect all active TCP socket connections along with listening ports on the local system. Which of the following command-line entries will successfully achieve these goals? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Run `nslookup db1.corp.internal 10.0.0.53` to direct the name resolution query to the specific internal server.; Run `netstat -an` to display all active connections and numerical port bindings.

Cevap

The correct actions are running `nslookup db1.corp.internal 10.0.0.53` to query the specific DNS server directly and running `netstat -an` to inspect active socket connections and listening ports numerically.
Directing an `nslookup` request to a specific server IP address (such as `nslookup db1.corp.internal 10.0.0.53`) bypasses local DNS caches to query that server directly. Additionally, `netstat -an` provides a detailed list of all listening ports and established socket connections using numerical IP addresses and port numbers.

Adım Adım Çözüm

1
Identify the CLI tool syntax required to bypass local resolver settings and query a designated DNS server directly.
Executing `nslookup <hostname> <server_ip>` sends the lookup query explicitly to the specified server IP address (10.0.0.5310.0.0.53).
Default `nslookup` queries rely on configured system resolvers unless an explicit server address parameter is provided.
2
Identify the CLI utility suited for displaying open network ports and active TCP sessions.
`netstat -an` outputs all active TCP/UDP connections and open listening ports in numerical format.
The `-a` flag includes listening ports and the `-n` flag suppresses hostname/service resolution for faster numerical rendering.

Anahtar Kavram

Utilizing command-line network utilities (`nslookup`, `netstat`, `dig`, `arp`) for protocol inspection and reachability troubleshooting.
Soru 2010Soru

During a fiber optic cabling deployment between two network racks, a technician notes high optical signal attenuation on a multi-mode fiber patch cord. The technician suspects a physical micro-fracture or excessive bend radius near one of the connector terminations where light is escaping through the buffer. Which tool should the technician use to visually locate the exact spot where light is leaking?

Cevabı ve açıklamayı göster

Cevap: Visual Fault Locator (VFL)

Cevap

The Visual Fault Locator (VFL) is the appropriate diagnostic tool to visually identify escaping light at a bend or fracture in a fiber optic cable.
The Visual Fault Locator (VFL) uses a visible red laser that bleeds through jacket damage, tight bends, or cracked fibers, enabling instant visual detection of physical fault locations.

Adım Adım Çözüm

1
Analyze the physical layer symptom
Light loss (attenuation) is occurring on a fiber patch cord due to a suspect bend or fracture emitting light.
Identifying whether light is escaping requires a visible light source operating in the visible spectrum.
2
Evaluate candidate optical troubleshooting tools
The Visual Fault Locator (VFL) injects a visible red laser (635-650 nm) into the fiber core.
Escaping red light illuminates faults through the jacket or connector buffer.
3
Select the correct diagnostic instrument
Choose the VFL over copper tools or non-visual meters.
OPMs measure loss quantitatively without pinpointing location, while TDRs and tone probes apply to copper media.

Anahtar Kavram

Fiber Optic Visual Fault Locators
Tahmini Süre:1m 0s
Soru 2011Soru

A network administrator is configuring the backup schedule for an enterprise monitoring server. Storage space at the off-site repository is limited, but the primary requirement is to minimize the Recovery Time Objective (RTO) during a total disaster recovery event. The full backup is performed every Sunday evening. Which daily backup strategy should the administrator implement to achieve the shortest recovery time while meeting storage constraints?

Cevabı ve açıklamayı göster

Cevap: Daily differential backups, because full restoration requires only the Sunday full backup and the most recent differential backup.

Cevap

Daily differential backups should be implemented because restoring a system backed up with differential backups requires only the initial full baseline backup and the single most recent differential backup, thereby optimizing the Recovery Time Objective (RTO).
Differential backups save all changes made since the last full baseline backup. When restoring a system, the administrator only needs to restore the full baseline backup and the latest differential backup set. This two-step restoration process minimizes system downtime and lowers the Recovery Time Objective (RTO).

Adım Adım Çözüm

1
Analyze the business continuity requirement.
The key constraint is minimizing Recovery Time Objective (RTO) during system restoration under limited off-site storage availability.
RTO measures the target time required to restore network operations after a failure.
2
Compare differential versus incremental backup mechanics during recovery.
Incremental backups save space during daily backup jobs but require restoring the baseline full backup plus every sequential daily incremental file. Differential backups grow larger over the week but require restoring only two recovery sets: the baseline full backup and the latest differential backup.
Restoring fewer backup files reduces total downtime and operational recovery complexity.
3
Select the optimal backup strategy.
Daily differential backups balance reasonable daily storage usage with the fastest restoration workflow.
This strategy directly satisfies the objective of minimizing RTO while using storage efficiently compared to daily full backups.

Anahtar Kavram

Differential vs Incremental Backup Restoration Trade-offs
Soru 2012Soru

A network technician executes a command-line DNS query on a workstation to troubleshoot host resolution. The technician receives the following terminal output:

text
Server: resolver.lab.corp
Address: 192.168.1.254

Non-authoritative answer:
Name: fileserver.lab.corp
Address: 10.1.50.12

Which of the following statements correctly interprets the 'Non-authoritative answer' header in this CLI output?

Cevabı ve açıklamayı göster

Cevap: The responding DNS server provided the IP address from its local cache rather than holding the master zone file for the domain.

Cevap

The responding DNS server provided the IP address from its local cache rather than holding the master zone file for the domain.
The 'Non-authoritative answer' designation indicates that the DNS server fulfilling the query obtained the host mapping from its cached memory (or via recursive queries to other name servers) rather than maintaining the original authoritative zone database for the domain.

Adım Adım Çözüm

1
Analyze the CLI output header and response structure.
The terminal shows that server resolver.lab.corp (192.168.1.254) processed the request for fileserver.lab.corp.
Identifying the responding server verifies that network DNS resolution took place rather than a local file lookup.
2
Evaluate the meaning of the 'Non-authoritative answer' designation in DNS diagnostic tools.
A non-authoritative response indicates the server answered from cached records retrieved from another server.
Authoritative answers only come from the primary or secondary DNS servers hosting the official zone database file for that specific domain.
3
Select the option matching the correct interpretation of DNS cache operations.
The statement explaining that the server answered using cached data from a recursive lookup is correct.
This directly aligns with standard DNS resolver behavior when fulfilling client queries for domains outside their hosted zones.

Anahtar Kavram

Interpreting nslookup and DNS command-line utility outputs
Soru 2013Soru

An enterprise telemetry cluster suffers a database volume corruption on Friday at 10:00 AM. The disaster recovery strategy specifies a full system backup executed every Sunday at midnight, supplemented by daily differential backups executed every night at 23:00 from Monday through Thursday. Which TWO of the following recovery steps must be performed to restore the database to its latest possible state prior to the failure while minimizing operational restore steps? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Restore the full system backup image from Sunday midnight.; Restore the differential backup created on Thursday at 23:00.

Cevap

Restoring the full system backup image from Sunday midnight and restoring the differential backup created on Thursday at 23:00.
Differential backups record all data modified since the last full baseline backup. Therefore, restoring a system utilizing a differential strategy requires exactly two files: the baseline full backup (Sunday) and the most recent differential backup (Thursday at 23:00).

Adım Adım Çözüm

1
Identify the backup baseline requirement
Determine that the full backup from Sunday midnight must be restored first to establish the baseline system state.
Differential backups only store modifications and require a full base image to build upon.
2
Analyze differential backup mechanics
Identify that Thursday night's differential backup holds all changes made between Sunday midnight and Thursday 23:00.
Differential backups record all data changed since the last full backup, making intermediate daily differential backups unnecessary.
3
Select the minimal optimal restore set
Select the Sunday full backup and the Thursday differential backup.
Combining the baseline full backup with the latest differential backup achieves full recovery with only two restore operations.

Anahtar Kavram

Differential Backup Restoration Strategy
Soru 2014Soru

A network technician is systematically troubleshooting a workstation that is unable to access an internal web portal (`app1.corp.internal`). Order the command-line network utilities in the correct logical sequence to isolate this issue, following a bottom-up methodology from local host configuration to remote transport port verification.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence is: 1) `ipconfig /all` to verify local host configuration, 2) `ping` the default gateway to confirm local subnet communication, 3) `nslookup` the FQDN to confirm proper DNS resolution, 4) `tracert` the destination IP to pinpoint routing path failures, and 5) `Test-NetConnection -Port 443` to verify remote transport port availability.
A systematic bottom-up OSI troubleshooting workflow begins at Layer 1/2/3 local host configuration (`ipconfig`), moves to local network reachability (`ping` gateway), confirms DNS resolution (`nslookup`), traces path routing to the destination IP (`tracert`), and concludes with transport port verification (`Test-NetConnection`).

Adım Adım Çözüm

1
Verify local interface configuration
Confirmed IP address, subnet mask, and gateway details using `ipconfig /all`.
Troubleshooting must begin by verifying that the local node has valid network properties assigned.
2
Verify local gateway reachability
Confirmed ICMP echo reply from gateway using `ping 192.168.1.1`.
Testing the local default gateway verifies link-layer connectivity and local Layer 3 functionality.
3
Verify name resolution
Obtained resolved IP address (10.10.50.2010.10.50.20) using `nslookup app1.corp.internal`.
Name resolution must be validated to ensure subsequent path diagnostic tools target the correct IP address.
4
Analyze intermediate routing path
Evaluated hop-by-hop latency and packet reachability using `tracert 10.10.50.20`.
Tracing the route isolates upstream network layer failures along the path to the remote host.
5
Test specific transport service port
Confirmed TCP handshake on port 443 using `Test-NetConnection 10.10.50.20 -Port 443`.
Transport port checks verify that firewall policies permit traffic and the destination daemon is listening.

Anahtar Kavram

Bottom-Up Command-Line Network Troubleshooting Sequence
Soru 2015Soru

An organization executes a full system backup every Sunday at midnight. From Monday through Saturday, differential backups are executed daily at midnight. On Wednesday afternoon, a core router's storage drive fails, requiring a bare-metal recovery. Which of the following restoration sequences must the network administrator execute to restore the router configuration to its latest backed-up state?

Cevabı ve açıklamayı göster

Cevap: Restore the Sunday full backup, then restore the Tuesday differential backup.

Cevap

Restore the Sunday full backup, then restore the Tuesday differential backup.
Differential backups store all data that has changed since the last full backup was taken. To recover a system backed up using a full-plus-differential scheme, an administrator must first restore the latest full backup (Sunday) and then apply the single most recent differential backup (Tuesday). This complete two-step procedure yields the latest data state prior to Wednesday's failure.

Adım Adım Çözüm

1
Identify the baseline backup required for recovery.
The Sunday full backup provides the complete baseline environment.
All differential and incremental restore procedures require starting from the last full backup.
2
Determine the backup type used during weekdays.
The backup policy specifies daily differential backups.
Differential backups record all changes made since the last full backup and accumulate modifications daily without clearing the archive bit.
3
Select the latest differential backup prior to the outage.
The Tuesday differential backup contains all accumulated changes from Monday and Tuesday.
Applying the latest differential backup after the full backup fully restores the system state up to Tuesday midnight with exactly two restore operations.

Anahtar Kavram

Differential Backup Restoration Procedure
Soru 2016Soru

Following an unrecoverable hardware failure at a primary data center, a network engineering team must execute a failover to a secondary warm disaster recovery site. Place the following disaster recovery procedure steps in the correct chronological order from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for failover execution is: 1) Formally declare a disaster state and activate the Disaster Recovery Plan (DRP), 2) Power on standby server infrastructure and verify system image integrity at the secondary site, 3) Apply the latest transaction logs and data replicas to bring secondary databases current, 4) Update external DNS records and network routing paths to point to the secondary site, and 5) Perform end-to-end validation testing and re-enable client access to critical applications.
Executing a disaster recovery failover requires strict operational sequencing. First, formal disaster declaration authorizes DRP invocation. Next, standby infrastructure at the secondary warm site is powered on. Data replicas and transaction logs are then applied to align with the target RPO. Once data consistency is established, network routing and DNS records are updated to redirect client traffic. Finally, system validation ensures all services operate correctly before production traffic is admitted.

Adım Adım Çözüm

1
Initiate Disaster Recovery Plan activation
Authorized failover process and mobilization of recovery resources.
A formal declaration is required to trigger disaster recovery workflows and allocate secondary site resources.
2
Bring standby recovery infrastructure online
Active secondary server host environment.
Compute platforms at a warm site must be powered up and operational before data or application layers can function.
3
Synchronize database state and apply data backups
Current and consistent database state matching the Recovery Point Objective (RPO).
Data stores must be updated to the most recent consistent snapshot prior to routing live user requests.
4
Re-route ingress network traffic
Client connections directed to secondary site IP addresses.
DNS records and BGP/routing configurations should only point to systems that are online and data-ready.
5
Validate application services and restore production access
Fully operational recovery site open to end users.
Testing verifies end-to-end connectivity, functionality, and security before business operations resume.

Anahtar Kavram

Disaster Recovery Site Failover Sequence
Tahmini Süre:1m 30s
Soru 2017Soru

A network administrator is configuring network firewall policies and establishing service baselines. Match each protocol on the left with its default port number, transport layer protocol, and primary operational function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

RADIUS
POP3S
TFTP
SMB

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

RADIUS matches Centralized network access authentication and authorization over UDP port 1812; POP3S matches Encrypted retrieval of stored user email messages from a mail server over TCP port 995; TFTP matches Unauthenticated, connectionless transfer of device configuration files over UDP port 69; SMB matches Direct network file sharing and printer access without NetBIOS over TCP port 445.
Each protocol is accurately matched with its standard port number, transport layer, and operational function: RADIUS uses UDP 1812 for authentication, POP3S uses TCP 995 for encrypted email retrieval, TFTP uses UDP 69 for simple file transfers, and SMB uses TCP 445 for direct network file sharing.

Adım Adım Çözüm

1
Identify the protocol characteristics of RADIUS.
RADIUS functions as an AAA server protocol operating on UDP port 1812 for authentication/authorization.
Centralized authentication for network logins uses UDP 1812.
2
Identify the protocol characteristics of POP3S.
POP3S is the secured SSL/TLS version of POP3, which communicates over TCP port 995.
Encrypted email download protocol uses TCP 995.
3
Identify the protocol characteristics of TFTP.
TFTP provides low-overhead file delivery over UDP port 69 without requiring user authentication.
Firmware and configuration backups use connectionless UDP 69.
4
Identify the protocol characteristics of SMB.
SMB operates over TCP port 445 for direct local network file and print sharing.
Modern Windows file sharing communicates directly via TCP 445.

Anahtar Kavram

Standard Network Protocols, Default Port Numbers, and Transport Layer Services
Soru 2018Soru

A network engineer is configuring an interface on a core router with the IP address 10.88.140.165/2610.88.140.165/26. What is the broadcast address for this IPv4 subnet?

Cevabı ve açıklamayı göster

Cevap: 10.88.140.191

Cevap

The broadcast address for the IPv4 subnet is 10.88.140.191.
With a /26 prefix length (subnet mask 255.255.255.192), subnets increment in blocks of 64 addresses. The IP 10.88.140.165 resides within the network range 10.88.140.128 through 10.88.140.191. The last address in this range, 10.88.140.191, is the broadcast address.

Adım Adım Çözüm

1
Determine the subnet block size from the CIDR prefix.
A /26 mask equals 255.255.255.192. Subtracting 192 from 256 gives a block size of 64 IP addresses per subnet.
Calculating block size establishes the increment step between subnets.
2
Locate the network ID for IP address 10.88.140.165.
Subnet boundaries in the 4th octet increase by multiples of 64: 0, 64, 128, 192. The address .165 falls into the 10.88.140.128 subnet.
The network ID identifies the beginning of the subnet block.
3
Calculate the broadcast address.
The broadcast address is one less than the next network boundary: 128 + 64 - 1 = 191, yielding 10.88.140.191.
The broadcast address is always the final IP address in a subnet block.

Anahtar Kavram

IPv4 Subnet Boundaries and Broadcast Address Calculation
Tahmini Süre:1m 0s
Soru 2019Soru

During a security audit, a network analyst identifies unencrypted directory query traffic originating from an internal application server to a domain controller over TCP port 389. To secure these identity lookup requests with TLS encryption, which protocol and default port combination must be permitted through the internal firewall?

Cevabı ve açıklamayı göster

Cevap: TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)

Cevap

TCP port 636 for Lightweight Directory Access Protocol over SSL/TLS (LDAPS)
Lightweight Directory Access Protocol over SSL/TLS (LDAPS) operates over TCP port 636 to provide encrypted communication for directory lookups and authentication services, replacing the unencrypted LDAP service on TCP port 389.

Adım Adım Çözüm

1
Identify the unencrypted service and port referenced in the scenario
TCP port 389 corresponds to unencrypted Lightweight Directory Access Protocol (LDAP).
Recognizing standard service port baselines is necessary to determine the appropriate secure alternative.
2
Determine the secure encrypted equivalent for directory service communication
LDAP over SSL/TLS (LDAPS) encrypts directory queries using TCP port 636.
LDAPS secures authentication and directory traffic using transport layer encryption.
3
Select the correct firewall rule permission entry
Permit TCP port 636 to allow secure LDAPS traffic.
Firewall ACLs must explicitly allow TCP 636 for encrypted LDAP communications to function.

Anahtar Kavram

Secure Directory Services Port Mapping (LDAP vs LDAPS)
Tahmini Süre:1m 0s
Soru 2020Soru

A network administrator is provisioning network core services across multiple VLANs in a enterprise campus network. Centralized infrastructure services, including DHCP and DNS, reside on VLAN 10 (10.10.10.0/2410.10.10.0/24), whereas user client workstations reside on VLAN 20 (10.10.20.0/2410.10.20.0/24) and VLAN 30 (10.10.30.0/2410.10.30.0/24). Which TWO of the following configuration steps must be implemented to ensure client hosts on remote VLANs can automatically acquire network configuration settings and properly resolve internal hostnames to dual-stack IPv6 resources? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure an IP helper address on the router interfaces serving VLAN 20 and VLAN 30 pointing to the IP address of the central DHCP server; Create AAAA records on the internal DNS server mapping fully qualified domain names to their assigned 128-bit IPv6 addresses

Cevap

The correct configurations are to set up an IP helper address on the router interfaces serving the client VLANs (VLAN 20 and VLAN 30) pointing to the central DHCP server IP address, and to create AAAA records on the DNS server for IPv6 hostname resolution.
Configuring an IP helper address on client-facing gateway router interfaces enables DHCP relay functionality, allowing broadcast DHCP discovery requests from client VLANs to be forwarded as unicast packets to the central DHCP server. Furthermore, DNS resolution of domain names to IPv6 addresses requires AAAA records.

Adım Adım Çözüm

1
Analyze client DHCP dynamic addressing across Layer 3 boundaries
Identify that client DHCP Discover messages are Layer 2 broadcasts that do not cross router interfaces without a relay mechanism
Configuring an IP helper address on the router interfaces for VLAN 20 and VLAN 30 allows the router to encapsulate broadcast DHCP messages into unicast UDP packets forwarded to the central DHCP server on VLAN 10.
2
Determine appropriate DNS record types for dual-stack IPv6 hostname resolution
Identify AAAA records as the standard DNS record for mapping hostnames to 128-bit IPv6 addresses
AAAA records handle IPv6 name-to-address resolution, whereas A records handle IPv4, and CNAME records map aliases to canonical domain names.

Anahtar Kavram

IP Addressing Services (DHCP Relay Agent and DNS Record Types)
Tahmini Süre:2m 0s
ÖncekiSayfa 101 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin