Tüm alıştırma soruları

2237 soru

Soru 2121Soru

A network administrator is addressing an issue where remote branch office routers intermittently drop OSPF neighbor adjacencies with the central core router following a WAN circuit bandwidth upgrade. Place the administrator's troubleshooting actions in the correct sequential order according to the CompTIA troubleshooting methodology, from the initial step to the final step.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence follows the CompTIA 6-step troubleshooting methodology: 1. Identify the problem (gathering symptoms through user interviews and log inspection), 2. Establish a theory of probable cause (hypothesizing WAN provider MTU mismatch), 3. Test the theory to determine the cause (executing ping tests with the DF bit set), 4. Establish a plan of action to resolve the problem and identify potential effects (drafting a change request and evaluating routing impacts), 5. Verify full system functionality and implement preventive measures (confirming stable OSPF FULL state and adding automated alerts), 6. Document findings, actions, and outcomes (recording resolution details in the central repository).
The correct order follows CompTIA's official 6-step sequence: 1. Identify the problem by gathering information from users and logs, 2. Establish a theory of probable cause by considering recent changes, 3. Test the theory using targeted diagnostic tools (DF-bit pings), 4. Establish a plan of action and identify potential effects before applying changes, 5. Verify full system functionality and implement preventive measures, and 6. Document findings, actions, and outcomes as the final administrative step.

Adım Adım Çözüm

1
Identify the problem
Problem symptoms and error messages are collected from users and router system logs.
Troubleshooting must begin by gathering information to accurately define the problem and establish its scope.
2
Establish a theory of probable cause
A working hypothesis linking recent WAN upgrades to MTU-related packet drops is formulated.
Formulating a theory narrows down diagnostic focus based on evidence and recent environmental changes.
3
Test the theory to determine the cause
Empirical testing with DF-bit pings confirms packet fragmentation drops at the WAN interface boundary.
Testing verifies whether the hypothesis is correct before making configuration changes in production.
4
Establish a plan of action and identify potential effects
A structured plan outlining specific MTU parameter adjustments and potential convergence impacts is developed.
A plan of action ensures changes are controlled and side effects on the live network are anticipated and minimized.
5
Verify full system functionality and implement preventive measures
OSPF neighbor stability is verified and proactive MTU monitoring alerts are established.
System verification confirms the problem is completely resolved, while preventive measures guard against recurrence.
6
Document findings, actions, and outcomes
Complete diagnostic logs, configuration steps, and outcomes are entered into the enterprise documentation portal.
Documentation completes the process by building institutional knowledge for future reference.

Anahtar Kavram

CompTIA Troubleshooting Methodology Sequence
Tahmini Süre:2m 0s
Soru 2122Soru

A network engineer is troubleshooting several complex wireless performance issues across an enterprise facility. Match each observed diagnostic symptom to its underlying wireless RF or configuration root cause.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

A laptop displays high signal strength (-52 dBm RSSI) near a metal-reinforced wall, but experiences severe throughput degradation and frame retransmission rates exceeding 40%.
Mobile devices fail to transition smoothly to nearer access points while moving through corridors, maintaining weak links to distant access points until connectivity drops completely.
Multiple 5 GHz access points located near a municipal flight path simultaneously cease broadcasting on their channels for 60 seconds before shifting to alternative frequencies.
Handheld inventory scanners experience sudden 15–20 dB drops in signal strength when warehouse operators rotate the devices from vertical to horizontal orientation.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each wireless symptom maps directly to a specific RF phenomenon: High RSSI with excessive frame retries near reflective metal maps to multipath fading; failure to roam due to unequal transmit power maps to power asymmetry; temporary 60-second 5 GHz channel drops near flight paths map to Dynamic Frequency Selection (DFS) radar detection; and orientation-dependent signal loss maps to antenna polarization mismatch.
Diagnosing these symptoms requires correlating observable wireless failures with core RF principles: multipath propagation creates signal self-interference near reflective metal; unequal transmit power creates sticky clients that fail to roam; DFS regulatory mandates force 60-second channel quiet periods when radar is detected; and physical rotation of handheld units introduces antenna polarization misalignment.

Adım Adım Çözüm

1
Analyze high RSSI combined with excessive retransmissions around metal structures.
Identified as multipath fading.
Metallic surfaces reflect RF signals, causing multiple out-of-phase copies to arrive at the receiver and degrade frame decoding despite high total signal amplitude.
2
Analyze the roaming failure where client devices remain connected to distant access points.
Identified as transmit power asymmetry (sticky client behavior).
Disproportionately high access point transmit power keeps the client's received RSSI high enough to prevent roaming, even though the low-power client cannot reach the access point reliably.
3
Analyze the 60-second broadcast hiatus on 5 GHz channels near an airport.
Identified as DFS radar detection.
IEEE 802.11h DFS requires access points operating on restricted 5 GHz bands to vacate the channel immediately upon detecting radar signals and perform a 60-second silence period.
4
Analyze orientation-dependent signal attenuation on handheld scanners.
Identified as antenna polarization mismatch.
Aligning a vertical receiving antenna horizontally relative to a vertically polarized transmitting antenna results in severe cross-polarization signal loss.

Anahtar Kavram

Troubleshooting Advanced Wireless RF Anomalies and Signal Degradation
Soru 2123Soru

A network administrator needs to ensure that a primary distribution switch is selected as the Spanning Tree Protocol (STP) root bridge across the local switching domain. Which of the following configuration modifications will achieve this goal?

Cevabı ve açıklamayı göster

Cevap: Set the switch's STP bridge priority to the lowest available numerical value.

Cevap

Set the switch's STP bridge priority to the lowest available numerical value.
In Spanning Tree Protocol (STP), the root bridge is chosen based on the lowest Bridge ID, which is a combination of the configurable bridge priority and the switch MAC address. Decreasing the bridge priority to a lower value ensures that the switch will have a smaller Bridge ID than its peers and will be elected as the root bridge.

Adım Adım Çözüm

1
Identify how Spanning Tree Protocol (STP) selects the root bridge.
STP compares Bridge IDs (Bridge Priority + MAC address) across all switches in the Layer 2 domain.
The root bridge election algorithm awards root bridge status to the switch possessing the lowest numerical Bridge ID.
2
Determine the required configuration adjustment to force a specific switch to win the root bridge election.
Lowering the bridge priority value on the target switch ensures its Bridge ID is smaller than that of all neighboring switches.
Standard STP switches use a default priority of 32768. Lowering this value (e.g., to 4096 or 0) forces the switch to become the root bridge.

Anahtar Kavram

STP Root Bridge Election and Priority Calibration
Soru 2124Soru

A workstation at 10.20.1.50/2410.20.1.50/24 cannot access an internal application server at 172.16.50.10172.16.50.10. The administrator suspects a default gateway mismatch, a missing static route, or an Access Control List (ACL) dropping the traffic on the core Layer 3 switch. Place the following troubleshooting steps in the correct sequential order according to standard network troubleshooting methodology.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence follows standard network troubleshooting methodology: 1) Run `ping` and `traceroute` from the workstation to isolate local vs. remote failure; 2) Review switch routing tables and ACL rules to establish a cause theory; 3) Test the theory using controlled CLI commands from the gateway; 4) Update the ingress ACL on the core switch; 5) Verify end-to-end host connectivity and update network documentation logs.
The proper troubleshooting sequence follows standard CompTIA methodology: gather initial host diagnostics (`ping`/`traceroute`), examine gateway configuration states to form a hypothesis, test the theory via targeted CLI tests, implement the corrective ACL statement, and verify end-to-end application functionality before documenting the outcome.

Adım Adım Çözüm

1
Gather symptoms and isolate the layer/location of failure using host CLI diagnostic commands.
Determines whether the issue resides at the local NIC, default gateway interface, or upstream routing hop.
Troubleshooting must begin by identifying the problem scope before examining network infrastructure configurations.
2
Analyze gateway routing tables (`show ip route`) and interface ACL configurations (`show ip access-lists`).
Identifies potential misconfigurations such as implicit deny ACL entries or missing summary routes.
This establishes a plausible theory of probable cause based on empirical device configuration data.
3
Test the ACL hypothesis using diagnostic command simulations from the router CLI.
Confirms whether ingress packet filtering or dynamic routing table updates caused the drops.
The theory must be empirically tested and validated prior to executing changes on production equipment.
4
Apply the updated ACL permit entry to the appropriate switch VLAN interface.
Permits host traffic through the default gateway to the remote server subnet.
Implementing the solution resolves the verified root cause.
5
Verify application-layer connectivity from the client host and document the resolution.
Ensures full system functionality and maintains accurate operational change records.
Final phases require confirming complete service restoration and recording change management details.

Anahtar Kavram

CompTIA Network Troubleshooting Methodology applied to Default Gateways, Routing, and ACLs
Soru 2125Soru

A network administrator is reviewing switch console logs and interface statistics to diagnose several Layer 2 performance and connectivity issues across the enterprise network. Match each specific switch error output or diagnostic symptom on the left with its primary underlying root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Interface statistics show a rapidly increasing count of late collisions and FCS errors during peak traffic load.
Console log persistently reports %CDP-4-NATIVE_VLAN_MISMATCH on inter-switch trunk link interface GigabitEthernet0/1.
Access port interface GigabitEthernet0/10 enters an err-disabled state with log %SPANTREE-2-BLOCK_BPDUGUARD.
Trunk port successfully forwards frames for VLAN 10 and VLAN 20, but drops all frames for VLAN 30 despite VLAN 30 existing in the active VLAN database.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Late collisions and FCS errors match with Speed/Duplex mismatch. CDP native VLAN mismatch logs match with Mismatched native VLAN configuration across 802.1Q trunk endpoints. BPDU Guard error-disabled log matches with Reception of BPDUs on an edge access port. Traffic drop for active VLAN 30 on trunk matches with VLAN 30 omitted from the trunk allowed VLAN list.
Each diagnostic log message and port metric directly aligns with a fundamental Layer 2 misconfiguration: late collisions indicate a duplex mismatch where half-duplex senses collision after slot time; CDP warnings isolate mismatched native VLAN settings; BPDU Guard messages indicate unexpected STP frames on edge ports; and selective VLAN traffic loss on trunks points to allowed-list misconfigurations.

Adım Adım Çözüm

1
Analyze interface collision and error metrics.
Identify late collisions as the classic indicator of a duplex mismatch between full-duplex and half-duplex endpoints.
The full-duplex endpoint transmits at any time, causing the half-duplex endpoint to detect collisions after sending the preamble and slot time (64 bytes).
2
Inspect CDP diagnostic log warnings.
Determine that %CDP-4-NATIVE_VLAN_MISMATCH directly indicates mismatched untagged VLAN IDs on trunk link ends.
802.1Q trunks expect identical native VLAN IDs on both ends to ensure untagged control and data frames route to the correct broadcast domain.
3
Evaluate Spanning Tree Protocol port security features.
Recognize that receiving BPDUs on a BPDU Guard enabled port triggers the %SPANTREE-2-BLOCK_BPDUGUARD error and disables the port.
BPDU Guard prevents rogue switches or unauthorized bridge connections from altering the STP topology via designated edge access ports.
4
Verify trunking allowed-list parameters against active VLANs.
Establish that omitting a VLAN from `switchport trunk allowed vlan` causes the switch to filter and drop frames for that VLAN on the trunk interface.
Global VLAN database existence is necessary but insufficient; the VLAN must also be permitted on the specific trunk interface allowed list.

Anahtar Kavram

Troubleshooting Layer 2 Switching, Trunking, Duplex, and Spanning Tree Operational Issues
Soru 2126Soru

A network technician is investigating several common Layer 2 switching and trunking issues on a campus network. Match each observed diagnostic symptom or console log message on the left with its corresponding underlying root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Console logs repeatedly display: %CDP-4-NATIVE_VLAN_MISMATCH discovered on interface GigabitEthernet0/1.
Interface statistics show an increasing count of late collisions and alignment errors on a full-duplex link.
An unexpected switch becomes the STP Root Bridge following a power outage due to default priority settings.
A workstation cannot reach its default gateway after being plugged into a newly provisioned switch port.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

CDP Native VLAN mismatch log maps to mismatched untagged VLAN IDs across trunk ends; Late collisions and alignment errors map to a duplex mismatch between connected interfaces; Unintended STP root bridge election maps to default STP priority tie-breaking via MAC address; Workstation gateway unreachability maps to incorrect switch port VLAN assignment.
Each symptom directly corresponds to a fundamental Layer 2 switching error: CDP Native VLAN logs indicate mismatched untagged trunk VLANs; late collision counters indicate a duplex negotiation mismatch; default STP priority causes root elections based on MAC address; and lack of gateway access on a new port typically indicates incorrect access VLAN assignment.

Adım Adım Çözüm

1
Analyze CDP error messages
Identify that %CDP-4-NATIVE_VLAN_MISMATCH explicitly indicates mismatched native (untagged) VLAN numbers on an 802.1Q trunk connection.
802.1Q trunks require identical native VLAN settings on both connected switch ports to prevent traffic leakage across VLAN boundaries.
2
Analyze interface error counters for late collisions
Correlate late collisions with a speed/duplex mismatch where one interface is set to half-duplex and the connected interface is set to full-duplex.
Full-duplex transmits without listening, causing the half-duplex side to detect a collision after its 64-byte collision window (late collision).
3
Evaluate Spanning Tree Protocol root election criteria
Determine that when STP priority is unconfigured (default 32768), the switch with the numerically lowest MAC address wins the root bridge election.
Bridge ID consists of Priority + System ID Extension + MAC Address; default priorities force election based on MAC address.
4
Investigate host VLAN isolation symptoms
Recognize that a host connected to a port left in default VLAN 1 cannot reach a default gateway configured on a different functional VLAN.
VLANs isolate Layer 2 broadcast domains, requiring inter-VLAN routing to communicate across different VLAN IDs.

Anahtar Kavram

Troubleshooting VLAN, Trunking, and Switching Issues
Soru 2127Soru

A network administrator is configuring a public Wi-Fi network for a city airport terminal. Corporate policy mandates that passenger data transmitted over the wireless medium must be encrypted individually per session to prevent passive eavesdropping, but the system must not require user registration, passwords, or authentication credentials. Which wireless security standard or feature should the administrator implement?

Cevabı ve açıklamayı göster

Cevap: Opportunistic Wireless Encryption (OWE)

Cevap

Opportunistic Wireless Encryption (OWE)
Opportunistic Wireless Encryption (OWE) enables wireless access points and client devices to perform an unauthenticated Diffie-Hellman key exchange. This generates unique session keys for encrypting over-the-air traffic for each client on open networks without requiring passwords or authentication credentials.

Adım Adım Çözüm

1
Analyze the access and encryption requirements stated in the scenario
The network requires per-session over-the-air data encryption without requiring users to input authentication credentials or shared passphrases.
Public access networks need friction-free onboarding while still protecting user traffic from local wireless eavesdropping.
2
Evaluate candidate wireless security protocols against authentication and encryption specifications
Opportunistic Wireless Encryption (OWE) uses Diffie-Hellman key exchange to establish unique per-client encryption keys dynamically without requiring user authentication.
OWE fulfills the requirement for encrypted open access, whereas WPA3-Personal (SAE) and WPA3-Enterprise (802.1X/RADIUS) both require authentication credentials.

Anahtar Kavram

Opportunistic Wireless Encryption (OWE) for unauthenticated public Wi-Fi encryption
Soru 2128Soru

A network administrator is troubleshooting an issue where a workstation cannot access a critical web database service hosted at `db01.corp.internal` on TCP port 8443 in a remote subnet. Following standard network troubleshooting methodology to systematically isolate the issue from the local network layer up through path routing, domain name resolution, and transport socket state, in what logical sequence should the administrator execute the command-line network utilities?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct logical execution sequence begins with local adapter configuration verification (`ipconfig /all`), followed by local gateway ICMP reachability (`ping 192.168.1.1`), then path routing analysis via destination IP (`tracert -d 10.250.32.50`), explicit DNS query resolution (`nslookup db01.corp.internal 10.1.1.5`), and concludes with transport layer socket state inspection (`netstat -ano | findstr :8443`).
Structured network troubleshooting mandates moving logically from the local host configuration outward through the network infrastructure up to higher-layer application services. Step 1 validates local interface settings (`ipconfig /all`). Step 2 tests local LAN/gateway reachability (`ping gateway`). Step 3 traces the Layer 3 path using an IP address to bypass DNS dependencies (`tracert -d IP`). Step 4 confirms domain name mapping via DNS (`nslookup FQDN DNS_IP`). Step 5 evaluates specific Layer 4 TCP port handshake and connection states (`netstat -ano`).

Adım Adım Çözüm

1
Verify local TCP/IP protocol stack and interface settings using `ipconfig /all`.
Confirms valid IP addressing, subnet mask, default gateway IP, and primary DNS server IP.
Root cause isolation must start at Layer 1-3 on the local endpoint before sending traffic across the network.
2
Test local link and default gateway communication using `ping 192.168.1.1`.
Determines whether local Layer 2 switching and local Layer 3 router interface communication is operational.
If the local gateway is unreachable, traffic cannot be routed to remote subnets.
3
Trace the Layer 3 routing path using IP address targeting with `tracert -d 10.250.32.50`.
Identifies the exact WAN/VPN router hop where packet forwarding fails or experiences severe latency.
Using `-d` bypasses DNS lookups during path tracing, preventing DNS failures from masking path routing failures.
4
Query DNS service directly using `nslookup db01.corp.internal 10.1.1.5`.
Verifies whether the internal DNS server returns the accurate A/AAAA resource record for the target FQDN.
Isolates application reachability failures caused by incorrect DNS records or DNS server unresponsiveness.
5
Analyze transport session establishment using `netstat -ano | findstr :8443`.
Displays active TCP connection states (e.g., SYN_SENT, ESTABLISHED, TIME_WAIT) for the target port.
Determines whether Layer 4 TCP three-way handshake succeeds or is blocked by access control lists (ACLs) or firewalls.

Anahtar Kavram

Bottom-Up and Layered CLI Diagnostic Workflow for Network Troubleshooting
Soru 2129Soru

A system administrator is troubleshooting a hostname resolution issue on a Linux workstation. Users report they cannot connect to an internal intranet site at `app.dev.local`. The administrator executes a diagnostic DNS query using `dig` and receives the following terminal output snippet:

;; QUESTION SECTION:
;app.dev.local. IN A

;; ANSWER SECTION:
app.dev.local. 300 IN CNAME web-server-01.dev.local.

;; AUTHORITY SECTION:
dev.local. 3600 IN NS ns1.dev.local.

The output shows an alias (CNAME) pointing to `web-server-01.dev.local`, but no corresponding IPv4 address (`A` record) is included in the response. Based on this command-line output, which command should the administrator run NEXT to directly query the designated authoritative server `ns1.dev.local` specifically for the missing `A` record of target host `web-server-01.dev.local`?

Cevabı ve açıklamayı göster

Cevap: dig @ns1.dev.local web-server-01.dev.local A

Cevap

Execute the command `dig @ns1.dev.local web-server-01.dev.local A` to query the authoritative name server directly for the missing A record.
The command `dig @ns1.dev.local web-server-01.dev.local A` is correct because using the `@` symbol instructs `dig` to bypass local DNS resolution and query `ns1.dev.local` directly. Specifying `web-server-01.dev.local` and `A` requests the IPv4 address mapped to the canonical hostname discovered in the CNAME response.

Adım Adım Çözüm

1
Analyze the initial `dig` output
The query for `app.dev.local` returns a CNAME pointing to `web-server-01.dev.local` and identifies `ns1.dev.local` in the AUTHORITY SECTION as the domain's primary name server.
The local recursive resolver did not append the target A record for the canonical name `web-server-01.dev.local` in the initial response.
2
Identify the required command-line syntax for querying specific DNS servers with `dig`
The `@` symbol is used in `dig` to designate a specific DNS server to query, followed by the domain name and record type.
Bypassing the local cache/stub resolver and querying `ns1.dev.local` directly confirms whether the authoritative server holds the valid A record.
3
Formulate the exact command
`dig @ns1.dev.local web-server-01.dev.local A`
This correctly targets `@ns1.dev.local` for the hostname `web-server-01.dev.local` requesting record type `A`.

Anahtar Kavram

Utilizing `dig` to perform directed DNS queries against specific authoritative name servers for specific record types.
Tahmini Süre:2m 0s
Soru 2130Soru

An enterprise organization is deploying a dedicated, high-speed network infrastructure designed specifically to interconnect database servers with high-capacity block-level storage arrays using Fibre Channel protocols. This infrastructure operates independently from the corporate user network to guarantee minimal latency and prevent bandwidth saturation from daily workstation operations. Which network classification specifically describes this dedicated block-level storage architecture?

Cevabı ve açıklamayı göster

Cevap: Storage Area Network (SAN)

Cevap

Storage Area Network (SAN)
The correct option is Storage Area Network (SAN) because it defines a dedicated, highly specialized network architecture engineered to provide servers with direct, block-level access to consolidated storage arrays separate from primary user traffic.

Adım Adım Çözüm

1
Analyze the scenario requirements
Identified key requirements: dedicated high-speed network, block-level storage access, Fibre Channel protocol, isolated from standard LAN client traffic.
Understanding the functional requirements isolates storage-specific network topologies from general-purpose network types.
2
Evaluate network type definitions against requirements
A Storage Area Network (SAN) is tailored specifically for block-level storage data transfer over dedicated protocols like Fibre Channel or iSCSI, satisfying all scenario criteria.
SAN architectures separate storage traffic from user network traffic to ensure predictable latency and maximum throughput.

Anahtar Kavram

Storage Area Network (SAN) Scope and Functionality
Tahmini Süre:1m 0s
Soru 2131Soru

An administrator observes network traffic arriving at an enterprise server hosting a web application. Which TWO of the following statements accurately describe the actions performed during the de-encapsulation process as the incoming frame moves up the destination host's protocol stack?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Network Interface Card (NIC) verifies data integrity using the Frame Check Sequence (FCS) and strips the Layer 2 header and trailer.; The Transport layer reads the destination port number in the TCP header to route the payload to the correct application socket.

Cevap

The Network Interface Card verifies data integrity using the Frame Check Sequence (FCS) and strips the Layer 2 header and trailer, and the Transport layer reads the destination port number in the TCP header to route the payload to the correct application socket.
During de-encapsulation on a destination host, processing proceeds bottom-up through the OSI model. At Layer 2 (Data Link), the hardware interface validates the frame using the Frame Check Sequence (FCS) in the trailer and removes the Ethernet header and trailer. At Layer 4 (Transport), the protocol stack parses the destination port in the TCP header to deliver the reassembled payload to the correct application process.

Adım Adım Çözüm

1
Analyze Layer 2 processing at the receiving Network Interface Card (NIC).
The NIC receives the raw bits, checks the FCS in the trailer for errors, and upon verification, strips the Ethernet header and trailer to expose the IP packet.
De-encapsulation moves bottom-up; Layer 2 checks integrity and strips frame control fields before passing payload to Layer 3.
2
Analyze Layer 3 processing at the Network layer.
The IP header is inspected to verify destination IP address and Protocol field value, revealing TCP.
Layer 3 removes the IP header and passes the remaining segment to the Transport layer indicated by the Protocol field.
3
Analyze Layer 4 processing at the Transport layer.
The Transport layer inspects the TCP destination port to map data to the listening service.
Port numbers at Layer 4 identify specific software applications or sockets awaiting incoming data.

Anahtar Kavram

Host De-encapsulation Stack Traversal
Tahmini Süre:1m 30s
Soru 2132Soru

A network architect is updating documentation for various enterprise network deployment models and topologies. Match each network type or physical topology on the left with its corresponding operational description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Personal Area Network (PAN)
Point-to-Multipoint (P2MP)
Campus Area Network (CAN)
Bus Topology

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Personal Area Network (PAN) matches with short-range peripheral device communication around an individual; Point-to-Multipoint (P2MP) matches with a central base station communicating with multiple fixed client locations; Campus Area Network (CAN) matches with interconnecting LANs across adjacent buildings in a single property; Bus Topology matches with a single shared cable backbone using end terminators.
Each classification aligns directly with standard networking models: PAN serves personal short-range devices; P2MP distributes wireless traffic from one central antenna to multiple clients; CAN connects multiple LANs across adjacent buildings on a shared campus; and Bus topology uses a single trunk cable terminated at both ends.

Adım Adım Çözüm

1
Analyze geographic scope and network classification definitions.
PAN represents personal short-range connections (e.g., Bluetooth), while CAN represents multi-building connections within a single contiguous campus area.
Geographic network classifications are determined by physical boundaries, device proximity, and administrative domain.
2
Analyze physical and logical topology operational characteristics.
P2MP uses a central transmitter serving multiple remote endpoints, and Bus topology relies on a linear central cable terminating at both ends.
Physical topologies dictate how nodes and cabling are laid out and how signal propagation is handled.
3
Map each item on the left to its matching operational description on the right.
Matching pairings established accurately.
Verifies key architectural boundaries and cable/wireless transmission models.

Anahtar Kavram

Network Topologies and Geographic Classifications
Tahmini Süre:1m 30s
Soru 2133Soru

A network administrator is troubleshooting a zone transfer failure between an internal primary DNS server and a newly deployed secondary DNS server across a subnet boundary controlled by an Access Control List (ACL). Standard DNS resolution queries from client workstations to the primary server are functioning normally, but automated zone sync operations consistently fail. Which ACL modification should the administrator make to allow zone transfers while maintaining standard name resolution?

Cevabı ve açıklamayı göster

Cevap: Permit traffic on TCP port 53 between the DNS servers.

Cevap

Permit traffic on TCP port 53 between the DNS servers.
The correct option correctly identifies TCP port 53 as the protocol required for DNS zone transfers. Standard name resolution uses UDP port 53 because individual requests and responses are small. However, zone transfers replicate entire domain databases between primary and secondary servers, requiring the guaranteed delivery, connection management, and larger packet handling of TCP.

Adım Adım Çözüm

1
Identify the service and traffic behavior described in the scenario.
The scenario involves DNS services functioning for standard queries (UDP 53) but failing for database synchronization/zone transfers between servers.
DNS relies on different transport protocols depending on the operation size and reliability requirements.
2
Analyze transport layer requirements for DNS zone transfers.
Zone transfers (AXFR/IXFR) transmit complete resource record databases which exceed the standard 512-byte UDP payload limit and require stateful, reliable transmission provided by TCP.
TCP port 53 ensures packet sequencing, error detection, and acknowledgement during multi-packet database replication.
3
Select the option that allows the appropriate transport protocol and port combination.
Allowing TCP port 53 explicitly addresses the missing transport rule required for server-to-server replication.
Standard client queries already work over UDP 53, confirming that UDP 53 is open while TCP 53 was blocked.

Anahtar Kavram

DNS Transport Layer Dual Behavior (UDP vs TCP Port 53)
Soru 2134Soru

A network administrator is analyzing traffic flow across a Layer 3 router connecting two separate physical IP subnets. As an IP packet travels from Host A on Subnet 1 through the router to Host B on Subnet 2, which of the following best describes how PDU encapsulation headers are processed and modified by the router?

Cevabı ve açıklamayı göster

Cevap: The router strips the incoming Layer 2 Ethernet header and trailer, decrements the TTL in the Layer 3 IP header, and encapsulates the packet into a new Layer 2 frame with updated MAC addresses for the destination subnet.

Cevap

The router strips the incoming Layer 2 Ethernet header and trailer, decrements the TTL in the Layer 3 IP header, and encapsulates the packet into a new Layer 2 frame with updated MAC addresses for the destination subnet.
When a packet traverses a Layer 3 router, the router de-encapsulates the incoming Layer 2 frame to inspect the Layer 3 destination IP address. The router updates the IP header TTL field, determines the next hop via its routing table, and encapsulates the unmodified IP packet inside a new Layer 2 Ethernet frame formatted with source and destination MAC addresses specific to the egress link.

Adım Adım Çözüm

1
Analyze incoming frame processing at the router ingress interface
The router receives the Ethernet frame, verifies the Frame Check Sequence (FCS), and de-encapsulates the Layer 2 header and trailer.
Layer 2 headers are valid only for a single network hop/segment and must be stripped to access the Layer 3 packet.
2
Inspect Layer 3 IP header and execute routing decision
The router reads the destination IP address, decrements the Time to Live (TTL) count by 1, and recalculates the IP header checksum.
The IP header remains intact to maintain end-to-end logical addressing across the path, except for hop-limiting fields.
3
Re-encapsulate the packet for the egress network segment
The IP packet is encapsulated into a new Layer 2 frame formatted for the destination link, using the router egress interface MAC as source and the next hop/host MAC as destination.
Encapsulation creates a valid data link layer frame for delivery across the next physical or logical link.

Anahtar Kavram

Hop-by-hop Layer 2 de-encapsulation and re-encapsulation by Layer 3 routing devices
Soru 2135Soru

A host workstation generates a DNS query to resolve a hostname prior to establishing a connection. In what chronological sequence does the workstation's protocol stack perform outbound encapsulation on this data, from initial generation to physical media transmission?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with application payload formatting, followed by UDP transport header encapsulation (datagram creation), then IP network header encapsulation (packet creation), and concludes with Ethernet data link framing (frame creation).
Outbound encapsulation follows a strict top-down traversal of the OSI model stack. Data originates at the Application Layer where the raw DNS payload is created. It is passed to the Transport Layer (UDP), which appends port numbers to form a datagram. Next, the Network Layer (IP) adds IP addresses to form a packet. Finally, the Data Link Layer (Ethernet) adds MAC addresses and an FCS trailer to form a frame ready for physical bit transmission.

Adım Adım Çözüm

1
Identify top-down encapsulation order through OSI protocol layers.
Encapsulation moves from Layer 7 (Application) down to Layer 2 (Data Link).
Outbound data must be progressively wrapped in lower-layer headers as it moves down the network stack.
2
Map PDU creation at each layer.
Data → Datagram (UDP) → Packet (IP) → Frame (Ethernet).
Each protocol layer adds its specific control information to the payload passed down from the layer above.

Anahtar Kavram

Outbound OSI Encapsulation Flow
Tahmini Süre:1m 0s
Soru 2136Soru

A storage administrator is deploying a network-attached storage array to host shared folders for Windows workstations on a isolated VLAN. To meet security standards, network traffic must avoid legacy NetBIOS encapsulation and operate strictly via direct file sharing over TCP/IP. Which port must be opened on the internal firewall to permit direct Server Message Block (SMB) communications?

Cevabı ve açıklamayı göster

Cevap: TCP port 445

Cevap

TCP port 445 is the standard port for direct Server Message Block (SMB) file sharing over TCP/IP without NetBIOS.
Direct Server Message Block (SMB) file sharing operates natively over TCP/IP using TCP port 445. Opening TCP port 445 allows hosts to share files and printers directly across IP subnets without relying on legacy NetBIOS session layer protocol wrappers.

Adım Adım Çözüm

1
Identify the target service protocol and requirement
The requirement specifies direct Server Message Block (SMB) traffic over TCP/IP without legacy NetBIOS transport.
Legacy SMB relied on NetBIOS framing over ports 137-139, whereas modern SMB runs directly over IP networks on a single dedicated port.
2
Map the direct SMB service to its standard transport port
Direct SMB over TCP/IP utilizes TCP port 445.
Starting with Windows 2000, Microsoft implemented SMB directly on top of the TCP transport layer via port 445.

Anahtar Kavram

Common Network Ports - Server Message Block (SMB)
Tahmini Süre:1m 0s
Soru 2137Soru

A university IT department is installing a high-speed fiber-optic backbone to interconnect networking hardware across eight distinct academic buildings situated on a single, contiguous 200-acre property owned by the institution. All cabling and networking hardware are privately owned, operated, and maintained by the university without using public utility lines or third-party service provider leased circuits. Which network classification best describes this geographic deployment?

Cevabı ve açıklamayı göster

Cevap: Campus Area Network (CAN)

Cevap

Campus Area Network (CAN)
The deployment covers multiple interlinked buildings across a single contiguous 200-acre property using self-owned fiber-optic infrastructure. This precisely defines a Campus Area Network (CAN), which bridges the gap between individual LANs and broader metropolitan/wide area networks without relying on third-party telecommunication providers.

Adım Adım Çözüm

1
Analyze the geographic scope and ownership model described in the scenario.
The infrastructure spans multiple buildings within a single contiguous 200-acre property and relies strictly on self-owned cabling rather than telecommunication service provider leased lines.
Geographic footprint and media ownership are the primary criteria for categorizing network types.
2
Evaluate the defined network types against these properties.
A network encompassing multiple adjacent LANs within a single contiguous property owned by one organization is defined as a Campus Area Network (CAN).
MAN and WAN involve broader geographic spans with service provider media, while SAN is dedicated to storage arrays.

Anahtar Kavram

Geographic classifications of networks (LAN, CAN, MAN, WAN, SAN)
Soru 2138Soru

A network systems engineer is documenting security perimeter rules and directory services infrastructure. Match each network service on the left with its corresponding default transport layer port and operational profile on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Kerberos Authentication Service
Internet Message Access Protocol Secure (IMAPS)
Internet Key Exchange (IKE)
Lightweight Directory Access Protocol (LDAP)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Kerberos Authentication Service matches TCP/UDP port 88; IMAPS matches TCP port 993; Internet Key Exchange (IKE) matches UDP port 500; Lightweight Directory Access Protocol (LDAP) matches TCP port 389.
Each service is accurately mapped to its standardized port assignment: Kerberos to TCP/UDP port 88 for authentication tokens, IMAPS to TCP port 993 for encrypted mail access, IKE to UDP port 500 for IPsec setup, and LDAP to TCP port 389 for plain text directory lookups.

Adım Adım Çözüm

1
Identify the authentication protocol operating port for domain ticketing.
Kerberos uses port 88 (TCP/UDP) for key distribution center (KDC) authentication.
Domain controllers respond to ticket granting requests on port 88.
2
Distinguish between secure mail retrieval ports and legacy unencrypted variants.
IMAPS requires TCP port 993 for implicit SSL/TLS encapsulation, whereas standard IMAP uses TCP port 143.
Secure email retrieval protocols mandate dedicated encrypted listening ports.
3
Determine the negotiation protocol for establishing IPsec tunnels.
IKE negotiates SA parameters over UDP port 500.
Phase 1 and Phase 2 ISAKMP/IKE negotiations run over UDP port 500 (or UDP 4500 when NAT-Traversal is engaged).
4
Identify the unencrypted directory access port.
LDAP runs unencrypted over TCP port 389, distinct from LDAPS which uses TCP port 636.
Standard directory access baseline services default to port 389.

Anahtar Kavram

Standard default port numbers and transport layer encapsulation for administrative, email, VPN, and directory protocols.
Soru 2139Soru

A network engineer is selecting a dynamic routing protocol for an enterprise internal network that incorporates routers from multiple hardware vendors. The network architecture requires an open-standard Interior Gateway Protocol (IGP) that uses link-state technology, supports hierarchical organization through area partitioning to constrain link-state advertisement propagation, and utilizes Dijkstra's algorithm for path determination. Which dynamic routing protocol best satisfies all of these requirements?

Cevabı ve açıklamayı göster

Cevap: Open Shortest Path First (OSPF)

Cevap

Open Shortest Path First (OSPF) is the correct dynamic routing protocol because it is an open-standard link-state IGP that uses area hierarchies and Dijkstra's Shortest Path First algorithm.
Open Shortest Path First (OSPF) satisfies all criteria: it is an open-standard IGP, uses a link-state architecture with an area hierarchy (Area 0 backbone and non-backbone areas), and runs Dijkstra's Shortest Path First algorithm to compute optimal routes.

Adım Adım Çözüm

1
Identify the protocol scope required by the scenario
The requirement specifies an Interior Gateway Protocol (IGP) for internal network routing across multi-vendor equipment.
Exterior gateway protocols like BGP handle inter-autonomous system routing, while IGPs handle intra-autonomous system routing.
2
Evaluate the underlying routing algorithm and architectural model
The scenario requires link-state protocol architecture, hierarchical area structures, and Dijkstra's algorithm execution.
OSPF maintains full link-state databases (LSDB) within areas and runs Dijkstra's Shortest Path First (SPF) algorithm to calculate loop-free paths.
3
Verify open-standard interoperability across multi-vendor devices
OSPF is fully defined by open IETF standards (RFC 2328), ensuring compatibility across all networking vendor equipment.
Open standards guarantee seamless interoperability in heterogeneous environments.

Anahtar Kavram

Link-State Dynamic Routing Protocols and OSPF Characteristics
Tahmini Süre:1m 30s
Soru 2140Soru

A network administrator is evaluating routing paths on a branch router. The router receives two updates via Routing Information Protocol (RIPv2) for destination network 192.168.50.0/24192.168.50.0/24. Path 1 traverses four intermediate routers across a high-speed 10 Gbps10\text{ Gbps} optical link. Path 2 traverses two intermediate routers across a legacy 1.544 Mbps1.544\text{ Mbps} T1 connection. Which path will the router select for insertion into its Routing Information Base (RIB), and why?

Cevabı ve açıklamayı göster

Cevap: Path 2, because RIP uses hop count as its sole metric and selects the path with fewer router hops regardless of link bandwidth.

Cevap

Path 2 will be selected because RIP uses hop count as its metric, prioritizing the path with 2 hops over the path with 4 hops regardless of underlying interface bandwidth.
Routing Information Protocol (RIP) is a distance-vector protocol that measures route desirability solely by hop count (up to a maximum of 15 hops). Even though Path 1 offers significantly higher bandwidth, RIP cannot evaluate link speed and will choose Path 2 due to its lower hop count of 2 versus 4.

Adım Adım Çözüm

1
Identify the routing protocol and its metric type
The scenario specifies RIPv2, which is a distance-vector routing protocol that uses hop count as its single routing metric.
Different dynamic routing protocols evaluate path desirability using distinct metric criteria (e.g., hop count for RIP, bandwidth/cost for OSPF).
2
Compare the metric values for both candidate paths
Path 1 has a metric of 4 hops, while Path 2 has a metric of 2 hops.
Lower metric values indicate a more desirable route within the same routing protocol.
3
Determine RIB selection based on routing logic
The router selects Path 2 with a hop metric of 2, ignoring the interface bandwidth differences (10 Gbps10\text{ Gbps} vs 1.544 Mbps1.544\text{ Mbps}).
RIP does not evaluate link speed or latency when making path selection decisions.

Anahtar Kavram

Distance-vector routing protocols like RIP base path selection strictly on hop count, ignoring interface bandwidth or speed.
ÖncekiSayfa 107 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin