Examkin

Tüm alıştırma soruları

2237 soru

Tüm türler2,237Çoktan seçmeli1,150Çoklu seçim488Sayısal30Eşleştirme350Sıralama201Kısa cevap18
Soru 41Soru →

Match each dynamic routing protocol or routing concept to its correct characteristic or functional definition.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Open Shortest Path First (OSPF)
Border Gateway Protocol (BGP)
Routing Information Protocol version 2 (RIPv2)
Administrative Distance (AD)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Open Shortest Path First (OSPF) pairs with Link-state IGP using Dijkstra's algorithm and a cost metric based on reference bandwidth. Border Gateway Protocol (BGP) pairs with Path-vector EGP that makes routing decisions based on autonomous system path and policy attributes. Routing Information Protocol version 2 (RIPv2) pairs with Distance-vector IGP using hop count (maximum 15) as its metric with 30-second periodic updates. Administrative Distance (AD) pairs with Trustworthiness metric ranging from 0 to 255 used by routers to rank route sources.
Each protocol and routing term is accurately aligned with its corresponding algorithm, metric structure, and administrative scope.

Adım Adım Çözüm

1
Analyze OSPF operational attributes.
OSPF operates as a link-state Interior Gateway Protocol (IGP) using cost computed from interface bandwidth via the Dijkstra algorithm.
Link-state protocols build full topology maps before calculating shortest path trees.
2
Analyze BGP operational attributes.
BGP functions as a path-vector Exterior Gateway Protocol (EGP) routing between Autonomous Systems using AS-Path attributes.
Path-vector protocols prevent loops at an inter-domain scale without needing link-state maps of external systems.
3
Analyze RIPv2 operational attributes.
RIPv2 is a distance-vector protocol utilizing hop count as its primary metric with a 15-hop boundary.
Distance-vector routing relies on directional vectors and periodic table updates sent to directly connected neighbors.
4
Analyze Administrative Distance.
Administrative Distance is an integer ranking from 0 (most trusted) to 255 (untrusted) used when multiple protocols advertise an identical destination path.
Routers must select a single route source to install into the IP routing table when prefix lengths are equal.

Anahtar Kavram

Dynamic Routing Protocols and Path Selection Principles
Tahmini Süre:1m 30s
Soru 42Soru →

A network administrator runs the `nslookup` command to check the mail server configuration for an enterprise domain and obtains the following output:

text
> set type=MX
> company.com
Server: dns1.internal.net
Address: 10.0.0.53

Non-authoritative answer:
company.com mail exchanger = 10 mail.company.com

Which DNS record type must be configured to map `mail.company.com` directly to its corresponding IPv4 address?

Cevabı ve açıklamayı göster

Cevap: A record

Cevap

The host requires an A record to resolve the mail server hostname to an IPv4 address.
An A record specifically maps a domain name or hostname to a 32-bit IPv4 address, which is required for client systems to initiate direct IP connectivity to `mail.company.com` over IPv4.

Adım Adım Çözüm

1
Analyze the MX record output
The MX lookup returns the hostname `mail.company.com` as the mail exchanger for `company.com`.
MX records specify destination mail servers by hostname, requiring a secondary lookup to find their IP address.
2
Identify the target address family
The requirement specifies resolving `mail.company.com` to an IPv4 address.
Standard IPv4 host resolution is performed using Host Address (A) records.

Anahtar Kavram

DNS Record Functions and Resolution
Soru 43Soru →

A network engineer is configuring access control lists (ACLs) on a perimeter firewall to support infrastructure maintenance and monitoring. The configuration must allow network routers to synchronize system clocks with an internal time server and send asynchronous event notifications to a centralized monitoring station. Which of the following port and transport protocol combinations must be permitted through the firewall? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: UDP port 123; UDP port 162

Cevap

UDP port 123 and UDP port 162 must be permitted.
Network Time Protocol (NTP) relies on UDP port 123 to synchronize device system clocks with low overhead and minimal delay. Simple Network Management Protocol (SNMP) traps use UDP port 162 to asynchronously push alert notifications from network devices to a central management server.

Adım Adım Çözüm

1
Identify the required network service for time synchronization.
Network Time Protocol (NTP) is identified, which utilizes UDP port 123.
NTP requires fast, connectionless delivery over UDP to calculate clock offsets without TCP handshake latency.
2
Identify the required service for sending asynchronous event notifications.
SNMP Trap delivery is identified, which operates over UDP port 162.
Managed devices push asynchronous trap messages to the SNMP manager on UDP port 162 (whereas standard SNMP queries use UDP port 161).
3
Select the correct protocol options matching these requirements.
UDP port 123 and UDP port 162 are selected.
Both NTP time synchronization and SNMP traps utilize UDP as their transport layer protocol.

Anahtar Kavram

Standard Well-Known Ports for Network Management (NTP and SNMP Traps)
Soru 44Soru →

A network security architect is defining address translation policies for a corporate infrastructure. Match each technical network requirement on the left with its corresponding NAT/PAT implementation method on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Providing thousands of internal workstation hosts with simultaneous outbound internet access through a single external interface IP address.
Exposing an internal application server at a fixed private IPv4 address to external partners using a permanent public IPv4 mapping.
Temporarily assigning public IPv4 addresses from a shared pool to internal hosts on a first-come, first-served basis without port multiplexing.
Redirecting external inbound connections targeting a custom public port (84438443) to an internal web server listening on standard HTTP port 8080.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Thousands of hosts sharing a single external IP maps to Port Address Translation (PAT / Interface Overload).
2. Exposing an internal server via permanent public IP mapping maps to Static 1:1 Network Address Translation.
3. Temporarily assigning public IPs from a pool without port multiplexing maps to Dynamic NAT.
4. Redirecting custom public port traffic to an internal web server port maps to Port Forwarding (Static PAT).
The mappings accurately distinguish between Layer 3 IP translation (Static 1:1 NAT and Dynamic NAT) and Layer 4 port translation/multiplexing (PAT and Port Forwarding). Multiple internal hosts sharing one public IP requires PAT (Overload). A fixed public-to-private server mapping requires Static 1:1 NAT. Temporary 1:1 allocation from a public pool without port multiplexing requires Dynamic NAT. Translating an incoming external port to a different internal IP and port requires Port Forwarding.

Adım Adım Çözüm

1
Analyze the requirement for outbound internet access for thousands of hosts using a single public IP address.
Identify that port multiplexing (Layer 4 source port tracking) is required to distinguish individual host sessions, pointing to Port Address Translation (PAT/Overload).
A single public IP address can only support multiple concurrent host connections if unique Layer 4 port numbers are assigned to each session flow.
2
Analyze the requirement for a permanent, bi-directional mapping for an internal server.
Identify that a fixed 1:1 relationship is required without port modification, corresponding to Static 1:1 NAT.
External clients must be able to initiate inbound traffic to the internal server at any time using a persistent public IP address.
3
Analyze the requirement for temporary assignment from a public IP pool without port multiplexing.
Identify 1:1 dynamic mapping from an available address block, corresponding to Dynamic NAT.
When port translation is not utilized, each active internal session consumes a dedicated public IP address from the pool for the duration of the communication.
4
Analyze the requirement for mapping incoming traffic on public port 84438443 to internal port 8080.
Identify destination port translation and IP redirection, corresponding to Port Forwarding (Static PAT).
Port Forwarding allows specific incoming external port requests to be translated to a designated internal target host IP and port number.

Anahtar Kavram

NAT and PAT Implementation Types and Address Mapping Mechanisms
Tahmini Süre:2m 0s
Soru 45Soru →

A network administrator needs to review the IP addressing schemes, subnets, VLAN assignments, and routing boundaries across an enterprise network without concern for physical cable runs or device rack positions. Which type of documentation should the administrator reference?

Cevabı ve açıklamayı göster

Cevap: Logical network diagram

Cevap

Logical network diagram
Logical network diagrams illustrate how data flows through a network by displaying IP addressing schemes, subnets, VLAN configurations, and routing protocols, completely independent of physical device locations or cable runs.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario
The requirement focuses on reviewing IP addresses, subnets, VLANs, and logical routing boundaries.
Determining whether the operational need is logical or physical guides the choice of documentation.
2
Distinguish between physical and logical documentation types
Logical diagrams represent software structures (IP addresses, VLANs, protocols), while physical diagrams represent hardware locations and cabling.
Logical network diagrams abstract physical hardware to display traffic flow and network layer configurations.

Anahtar Kavram

Logical vs Physical Network Diagrams
Soru 46Soru →

Match each Network Address Translation (NAT) implementation type on the left with its corresponding address mapping characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Static NAT
Dynamic NAT
Port Address Translation (PAT)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Static NAT matches permanent one-to-one mapping; Dynamic NAT matches translation using a dynamic pool of public IP addresses; Port Address Translation (PAT) matches translation of multiple private IP addresses to a single public IP address using unique port numbers.
Static NAT creates a permanent one-to-one mapping between a single private IP and a single public IP address. Dynamic NAT uses a pool of public IP addresses assigned dynamically to internal hosts on demand. Port Address Translation (PAT) multiplexes multiple private IP addresses onto a single public IP address using unique Layer 4 source port numbers.

Adım Adım Çözüm

1
Identify the mapping behavior of Static NAT.
Static NAT establishes a fixed, persistent one-to-one mapping between one private IP address and one public IP address.
Static NAT is required when an internal host (such as an enterprise web or mail server) must maintain a consistent external IP address for inbound connectivity.
2
Identify the mapping behavior of Dynamic NAT.
Dynamic NAT assigns an available public IP address from a configured pool to an internal host dynamically for the duration of a session.
Dynamic NAT allows multiple devices to access the internet as long as sufficient public IP addresses exist in the pool for active sessions.
3
Identify the mapping behavior of Port Address Translation (PAT).
PAT allows many private host IPs to share one public IP address by assigning unique source port numbers to distinguish individual sessions.
PAT conserves IPv4 public address space by leveraging TCP/UDP source ports at Layer 4 to multiplex traffic over a single public address.

Anahtar Kavram

NAT and PAT Implementation Types
Tahmini Süre:1m 0s
Soru 47Soru →

A network administrator receives an alert that a server with the IPv4 address 172.24.110.99/23172.24.110.99/23 cannot communicate beyond its local segment due to a misconfiguration on the upstream switch interface. What is the correct broadcast address for the subnet to which this server belongs?

Cevabı ve açıklamayı göster

Cevap: 172.24.111.255

Cevap

172.24.111.255
For an IP address of 172.24.110.99/23172.24.110.99/23, the prefix length of /23/23 indicates a subnet mask of 255.255.254.0255.255.254.0. The third octet block size is 256−254=2256 - 254 = 2. Because 110110 is an even multiple of 22, the network boundary begins at 172.24.110.0172.24.110.0 and ends at 172.24.111.255172.24.111.255. The broadcast address is the highest address in this range, which is 172.24.111.255172.24.111.255.

Adım Adım Çözüm

1
Determine the subnet mask from CIDR notation
A /23 prefix corresponds to a subnet mask of 255.255.254.0255.255.254.0.
Converting CIDR /23 means 23 network bits and 9 host bits (32−23=932 - 23 = 9).
2
Calculate the block size in the third octet
Block size = 256−254=2256 - 254 = 2.
Subnet boundaries in the third octet occur in multiples of 2.
3
Identify the network ID and broadcast address
Network ID = 172.24.110.0172.24.110.0, Broadcast address = 172.24.111.255172.24.111.255.
Since the third octet value is 110110 (a multiple of 22), the subnet range spans 172.24.110.0172.24.110.0 through 172.24.111.255172.24.111.255.

Anahtar Kavram

IPv4 Subnet Mask and Broadcast Address Calculation
Tahmini Süre:1m 30s
Soru 48Soru →

A network administrator is configuring a dedicated IPv4 subnet for a high-availability database cluster. The cluster requires static IP address assignments for 14 active database nodes, 2 redundant monitoring interfaces, and 1 default gateway router interface. Which subnet mask provides the minimum host capacity required to accommodate all devices while conserving IP address space?

Cevabı ve açıklamayı göster

Cevap: 255.255.255.224

Cevap

The subnet mask 255.255.255.224 provides the smallest usable host capacity (30 host addresses) that accommodates the 17 required host IP assignments.
The scenario requires 17 usable IP addresses (14 nodes + 2 monitoring + 1 default gateway). The formula for usable hosts in a subnet is 2^(32 - prefix length) - 2. A /27 subnet mask (255.255.255.224) has 5 host bits, providing 2^5 - 2 = 30 usable host IP addresses, which is the smallest standard IPv4 block capable of holding 17 hosts.

Adım Adım Çözüm

1
Calculate the total number of usable host IP addresses required for the cluster.
14 database nodes + 2 monitoring interfaces + 1 gateway interface = 17 usable host IP addresses required.
Every active host and interface requiring an IP on the subnet must be counted towards the total host address requirement.
2
Determine the minimum block size needed by accounting for network and broadcast addresses.
Total IP addresses needed = 17 hosts + 1 network address + 1 broadcast address = 19 IP addresses minimum.
IPv4 subnets require 2 unassignable addresses: the network ID (all host bits 0) and the broadcast address (all host bits 1).
3
Find the smallest power of 2 greater than or equal to the total required IP addresses.
2^5 = 32 total IP addresses (which allows 32 - 2 = 30 usable hosts).
Block sizes in IPv4 CIDR subnetting must be powers of 2. A block of 16 (2^4) yields only 14 usable hosts, which is insufficient.
4
Convert the required block size to a dotted-decimal subnet mask.
32 - 5 host bits = 27 network bits (/27 prefix). In dotted-decimal format, 255.255.255.224.
A prefix length of /27 leaves 5 host bits, corresponding to a last octet value of 256 - 32 = 224.

Anahtar Kavram

IPv4 Subnet Mask Capacity and Usable Host Calculation
Soru 49Soru →

An administrator is inspecting the Network Address Translation (NAT) table on an enterprise border router to resolve a host connectivity issue. The CLI display shows the following active translation entry:

Inside global: 198.51.100.14:51022∣Inside local: 10.0.4.15:51022\text{Inside global: } 198.51.100.14:51022 \quad | \quad \text{Inside local: } 10.0.4.15:51022
Outside local: 198.51.100.80:80∣Outside global: 198.51.100.80:80\text{Outside local: } 198.51.100.80:80 \quad | \quad \text{Outside global: } 198.51.100.80:80

Which IPv4 address represents the private address assigned directly to the internal host on the local network before translation occurs?

Cevabı ve açıklamayı göster

Cevap: 10.0.4.15

Cevap

10.0.4.15 represents the Inside Local address, which is the un-translated private IPv4 address configured directly on the internal host.
In standard network address translation terminology, 'Inside Local' refers specifically to the private IP address assigned to a host on the internal network. In the provided translation table, 10.0.4.15 is listed under Inside Local, making it the un-translated private IPv4 address of the local client.

Adım Adım Çözüm

1
Identify the standard CompTIA / Cisco NAT terminology components in the translation table
Inside Local is defined as the IP address assigned to a host on the inside network; Inside Global is the translated public IP address of the inside host.
Understanding NAT address categories is required to interpret translation tables.
2
Locate the 'Inside local' field in the translation output
The entry displays 'Inside local: 10.0.4.15:51022'.
The IP portion preceding the colon indicates the Layer 3 host IP address on the internal network segment.
3
Extract the IP address from the Inside Local socket pair
10.0.4.15 is isolated as the client private address.
Port 51022 is the ephemeral Layer 4 port used by PAT, while 10.0.4.15 is the private IPv4 host address.

Anahtar Kavram

NAT / PAT Address Types (Inside Local, Inside Global, Outside Local, Outside Global)
Tahmini Süre:1m 15s
Soru 50Soru →

A network engineer is updating physical documentation for an enterprise server room to ensure rapid hardware tracing and electrical load auditing during maintenance. Which of the following parameters are essential components of physical rack and power inventory documentation? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The exact vertical rack unit position occupied by each network chassis; The specific power distribution unit outlet and circuit breaker feeding each power supply unit

Cevap

The correct options state that physical equipment placement and power inventory documentation must include the exact vertical rack unit positions of hardware chassis and the specific power distribution unit outlet and circuit feeding each power supply.
Physical infrastructure documentation accurately captures tangible hardware positioning and power source assignments. Recording vertical rack unit locations allows field technicians to quickly spot equipment during maintenance, while mapping power supply units to specific power distribution unit outlets ensures proper electrical load distribution and redundant power auditing.

Adım Adım Çözüm

1
Analyze the requirement for physical infrastructure documentation
Identify that physical documentation focuses on tangible spatial dimensions, hardware enclosure mounting, and physical power/cable connectivity.
Physical documentation assists on-site technicians with hardware installation, thermal management, physical maintenance, and power redundancy verification.
2
Evaluate candidate items against physical versus logical documentation criteria
Confirm that vertical rack unit placement and power distribution unit circuit mapping are physical attributes, whereas IP subnets, default gateways, Spanning Tree Protocol priorities, and SNMP credentials represent logical or protocol settings.
Logical attributes describe software configuration and data path behavior, which are maintained in separate logical topology maps and configuration baselines.

Anahtar Kavram

Physical Infrastructure and Power Documentation
Soru 51Soru →

A network administrator configures a stateless extended IPv4 Access Control List (ACL) on a router interface to allow workstations on the internal subnet 172.20.5.0/24172.20.5.0/24 to issue domain name queries to an external DNS server at 8.8.8.88.8.8.8. The administrator applies the following rule inbound on the LAN-facing interface:

`permit udp 172.20.5.0 0.0.0.255 host 8.8.8.8 eq 53`

Host 172.20.5.50172.20.5.50 sends DNS queries to 8.8.8.88.8.8.8, but all lookups time out. Packet captures show that outgoing requests reach the DNS server, but the responses never arrive back at the workstation. Which of the following best explains why the return traffic is failing?

Cevabı ve açıklamayı göster

Cevap: The stateless ACL does not automatically track connection state, so returning traffic from 8.8.8.88.8.8.8 is blocked by the implicit deny rule on the WAN interface.

Cevap

The stateless ACL does not automatically track connection state, so returning traffic from the external DNS server is blocked by the implicit deny rule on the returning interface.
Stateless Access Control Lists evaluate packets individually without recording connection states. While stateful firewalls track outbound sessions and dynamically permit return traffic, a stateless ACL requires explicit rules for both outbound request traffic and inbound response traffic. Without an explicit rule permitting return packets from 8.8.8.88.8.8.8 on UDP port 53 back to the client's high-numbered ephemeral port, return traffic is dropped by the default implicit deny at the end of the ACL.

Adım Adım Çözüm

1
Analyze the ACL type and traffic direction.
The configured filter is a stateless ACL operating on inbound LAN traffic.
Stateless filtering inspects individual packet headers independently and does not maintain a state table of active connections.
2
Trace the outbound and return packet flows.
Outbound traffic (source: 172.20.5.50172.20.5.50, destination: 8.8.8.8:538.8.8.8:53) matches the permit rule. Return traffic (source: 8.8.8.8:538.8.8.8:53, destination: 172.20.5.50172.20.5.50:ephemeral_port) encounters the WAN interface on the return path.
Because stateless ACLs do not automatically allow return traffic associated with outbound sessions, an explicit inbound ACL rule on the WAN interface is necessary to permit return UDP packets from source port 53.
3
Determine the cause of packet drop.
Without an explicit return permit rule, the return packets hit the mandatory implicit deny rule at the end of the return ACL.
All standard router ACLs conclude with an implicit deny all statement.

Anahtar Kavram

Stateless vs Stateful ACL Packet Handling & Return Traffic Filtering
Tahmini Süre:1m 30s
Soru 52Soru →

An IT technician is deploying three access points in a line along an office corridor to provide continuous wireless coverage on the 2.4 GHz2.4\text{ GHz} spectrum. Which channel assignment pattern should be applied across the three adjacent access points to completely avoid adjacent-channel interference?

Cevabı ve açıklamayı göster

Cevap: Channels 1, 6, and 11

Cevap

Channels 1, 6, and 11 should be assigned across the three adjacent access points.
In the 2.4 GHz2.4\text{ GHz} ISM band, individual standard Wi-Fi channels are 20 MHz20\text{ MHz} wide while center frequencies are spaced 5 MHz5\text{ MHz} apart. Channels 1, 6, and 11 are the three non-overlapping channels available under North American regulatory domains.

Adım Adım Çözüm

1
Analyze the frequency band requirements.
The network operates on the 2.4 GHz2.4\text{ GHz} band where each channel requires 20 MHz20\text{ MHz} of bandwidth, but channel numbers are spaced only 5 MHz5\text{ MHz} apart.
Understanding channel bandwidth vs channel spacing is required to determine spectral overlap.
2
Identify non-overlapping channel combinations.
To maintain a minimum separation of 20 MHz20\text{ MHz} between channel boundaries (or 25 MHz25\text{ MHz} between center frequencies), channels 1, 6, and 11 are selected.
This configuration ensures zero spectrum overlap between adjacent access points.

Anahtar Kavram

2.4 GHz Non-Overlapping Channels
Soru 53Soru →

Match each network classification or physical/logical topology on the left with its corresponding architectural design characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Storage Area Network (SAN)
Campus Area Network (CAN)
Full Mesh Topology
Logical Bus Topology

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Storage Area Network (SAN) matches with 'Dedicated high-speed network providing block-level storage access to servers using specialized storage protocols.' Campus Area Network (CAN) matches with 'Network connecting multiple distinct local area networks across adjacent buildings within a contiguous geographical boundary.' Full Mesh Topology matches with 'Redundant layout where every node maintains a direct point-to-point connection to every other node, maximizing fault tolerance.' Logical Bus Topology matches with 'Data transmission arrangement where all nodes share a common broadcast medium and single collision domain regardless of physical wiring.'
Each network concept is correctly paired with its specific operational scope and structural characteristic: SAN for block-level storage networking, CAN for multi-building contiguous campus connections, Full Mesh for complete point-to-point node redundancy, and Logical Bus for shared broadcast/collision domain behavior.

Adım Adım Çözüm

1
Analyze storage-specific network architectures.
Identified Storage Area Network (SAN) as the dedicated network designed for block-level storage transfer.
SANs isolate storage traffic from enterprise LAN traffic using protocols like Fibre Channel or iSCSI.
2
Differentiate geographic network scopes.
Identified Campus Area Network (CAN) as the link between multiple LANs across contiguous corporate or university buildings.
CAN scope is larger than a single LAN but smaller and more geographically unified than a Metropolitan Area Network (MAN).
3
Evaluate high-availability physical topologies.
Matched Full Mesh Topology to the design requiring direct connections between all node pairs.
Full mesh formula n(n-1)/2 calculates total required links ensuring maximum redundancy.
4
Distinguish physical wiring from logical traffic flow.
Matched Logical Bus Topology to shared medium access and single collision domain behavior.
Logical topology defines electrical signal path and media access rules independently of physical cabling arrangement.

Anahtar Kavram

Network Topologies and Geographic Classifications
Tahmini Süre:1m 30s
Soru 54Soru →

A network engineer is configuring network address translation on an enterprise edge firewall with a public IPv4 allocation of 203.0.113.0/29203.0.113.0/29. The network architecture requires an internal database management server (192.168.10.5192.168.10.5) to accept persistent inbound management connections from authorized external partners while concealing its internal address. Simultaneously, 350 internal user workstations on the 192.168.10.0/24192.168.10.0/24 subnet require outbound internet access. Which address translation configuration strategy correctly satisfies all connectivity and access requirements while optimizing public IP address consumption?

Cevabı ve açıklamayı göster

Cevap: Configure a Static NAT mapping for 192.168.10.5192.168.10.5 to public IP 203.0.113.2203.0.113.2, and configure PAT (NAT Overload) using 203.0.113.1203.0.113.1 for the 192.168.10.0/24192.168.10.0/24 workstation subnet.

Cevap

Configure a Static NAT mapping for the database server to a dedicated public IP address, and configure PAT (NAT Overload) for the workstation subnet using a separate public IP address.
Static NAT provides a persistent, bidirectional one-to-one translation between a private IP address and a public IP address, allowing external hosts to initiate inbound connections to internal resources such as servers. PAT (NAT Overload) allows multiple internal hosts to share a single public IP address by mapping internal IP addresses and source port numbers to unique port numbers on the public IP, effectively optimizing IP address utilization for large workstation subnets.

Adım Adım Çözüm

1
Analyze inbound connectivity requirements for the database server
Identified that external clients must initiate inbound connections to an internal host (192.168.10.5192.168.10.5)
Inbound initiation requires a permanent, predictable one-to-one IP mapping (Static NAT) so external systems can reach the destination public IP.
2
Analyze outbound connectivity and capacity requirements for internal workstations
Identified 350 internal hosts needing outbound internet access with limited public IP resources (203.0.113.0/29203.0.113.0/29 has 6 usable host IPs)
Port Address Translation (PAT / NAT Overload) allows thousands of internal private IP addresses to share a single public IP by tracking source port numbers.
3
Synthesize NAT configuration strategy
Assign Static NAT (192.168.10.5↔203.0.113.2192.168.10.5 ↔ 203.0.113.2) for the server and PAT (192.168.10.0/24↔203.0.113.1192.168.10.0/24 ↔ 203.0.113.1) for workstations
This combination minimizes IP consumption (uses only 2 public IPs out of 6 available) while meeting all functional traffic patterns.

Anahtar Kavram

NAT and PAT Implementation Types (Static NAT vs PAT/Overload)
Tahmini Süre:1m 30s
Soru 55Soru →

A network administrator needs to restore a critical network monitoring server after a hard drive failure on Thursday morning. The backup strategy consists of a full backup performed every Sunday at midnight and incremental backups performed each night from Monday through Wednesday at midnight. Place the backup recovery steps in the correct sequential order required to fully restore the system.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

To restore a system managed with incremental backups, first restore the latest full backup (Sunday), followed by each incremental backup in chronological order (Monday, then Tuesday, then Wednesday).
An incremental backup sets up a chain where each backup relies on the previous one. To recover the system completely, the baseline full backup from Sunday must be restored first, followed by every individual incremental backup taken since then (Monday, Tuesday, Wednesday) in chronological order.

Adım Adım Çözüm

1
Select and restore the base system image
The Sunday full backup is restored
All incremental restoration operations require the baseline full backup to establish the file structure and initial state.
2
Apply subsequent incremental backups chronologically
Apply Monday, Tuesday, and Wednesday incremental backups in exact sequential order
Each incremental backup contains only the delta since the immediately preceding backup. Skipping or misordering any day results in missing or corrupted files.

Anahtar Kavram

Incremental Backup Restoration Sequence
Tahmini Süre:1m 0s
Soru 56Soru →

A network administrator is conducting a comprehensive documentation review to prepare for a multi-site network migration. The administrator needs to verify the precise subnets, VLAN assignments, IP address scopes, and default gateway mappings across all broadcast domains, but currently only has access to physical rack elevation drawings and cabling schedules. Which documentation source must the administrator consult to obtain this specific Layer 3 addressing and segmentation details?

Cevabı ve açıklamayı göster

Cevap: IP Address Management (IPAM) and logical addressing documentation

Cevap

IP Address Management (IPAM) and logical addressing documentation
IP Address Management (IPAM) repositories and logical network documentation map out non-physical network attributes, including IP subnet masks, VLAN associations, network gateways, and active scopes. This provides the exact Layer 3 context required for network migrations.

Adım Adım Çözüm

1
Analyze the requirements stated in the scenario
The goal is to locate documentation specifying IP subnets, VLAN assignments, DHCP scopes, and Layer 3 gateway mappings.
Identifying the required data types (Layer 3 parameters and logical boundaries) directs which documentation category contains the authoritative source.
2
Evaluate the limitation of the existing physical documentation
Physical rack elevation drawings and cabling schedules only show hardware positioning, rack unit spacing, and physical cable paths.
Physical documentation lacks information regarding logical IP addressing, broadcast domain boundaries, and protocol configurations.
3
Match the required logical information to the correct documentation type
IPAM systems and logical addressing schemas maintain structured records of assigned IP ranges, subnet masks, VLAN IDs, and default gateways.
Logical network documentation abstracts physical hardware details to present network-layer topologies and addressing architectures.

Anahtar Kavram

Logical Documentation vs. Physical Documentation
Soru 57Soru →

A network administrator is designing a high-density enterprise wireless network using Wi-Fi 6 (802.11ax) access points. The goal is to optimize spectrum efficiency, reduce co-channel interference (CCI) in overlapping coverage areas, and efficiently support a large volume of concurrent client connections. Which of the following features or deployment strategies should the administrator implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enable Orthogonal Frequency-Division Multiple Access (OFDMA) to divide channels into smaller subcarriers for concurrent multi-user transmissions.; Implement BSS Coloring to differentiate between overlapping Basic Service Sets and allow spatial reuse of frequencies.

Cevap

Enabling Orthogonal Frequency-Division Multiple Access (OFDMA) and implementing BSS Coloring.
The correct responses are enabling Orthogonal Frequency-Division Multiple Access (OFDMA) and implementing BSS Coloring. OFDMA allows an AP to split a single channel into smaller frequency allocations (Resource Units), serving multiple clients concurrently to maximize airtime efficiency. BSS Coloring tags frames with a color field in the 802.11ax header, allowing devices to differentiate between their own BSS and neighboring overlapping BSSs on the same channel, thereby allowing adaptive clear channel assessment (CCA) thresholds and spatial reuse.

Adım Adım Çözüm

1
Analyze high-density Wi-Fi 6 multi-user requirements.
Identify that OFDMA divides channels into Resource Units (RUs), allowing parallel transmissions to multiple low-throughput and high-density devices simultaneously.
OFDMA addresses contention and latency issues in crowded wireless environments.
2
Evaluate co-channel interference (CCI) mitigation techniques in 802.11ax.
Identify that BSS Coloring marks frames with a BSS color identifier so APs and clients can ignore transmissions from neighboring overlapping BSSs operating on the same channel.
BSS Coloring enables spatial reuse, reducing unnecessary channel contention back-offs caused by co-channel interference.
3
Verify incorrect options regarding channel planning.
Discard options suggesting overlapping 2.4 GHz channel assignments (channels 1, 2, 3), 40 MHz channel bonding in 2.4 GHz, or disabling 5 GHz radios, as all these introduce extreme co-channel and adjacent-channel interference.
Proper 2.4 GHz channel design strictly uses non-overlapping channels 1, 6, and 11 with 20 MHz width, and relies on 5 GHz / 6 GHz for high-density capacity.

Anahtar Kavram

Wi-Fi 6 (802.11ax) High-Density Features & Channel Planning
Tahmini Süre:1m 30s
Soru 58Soru →

A network engineer is configuring an interface using Stateless Address Autoconfiguration (SLAAC) with modified EUI-64 to derive the host portion of the IPv6 address. The network card has a MAC address of 00:1A:2B:3C:4D:5E, and the designated link-local prefix is fe80::/64. Which of the following represents the correctly formatted IPv6 link-local address for this host?

Cevabı ve açıklamayı göster

Cevap: fe80::21a:2bff:fe3c:4d5e

Cevap

fe80::21a:2bff:fe3c:4d5e
The address fe80::21a:2bff:fe3c:4d5e correctly follows EUI-64 address generation by inserting FFFE into the center of the MAC address, flipping the 7th bit of the first byte from 0 to 1 (changing 00 to 02), and dropping the leading zero in 021a per RFC 5952 compression rules.

Adım Adım Çözüm

1
Split the MAC address into two 24-bit halves and insert FFFE in the middle.
00:1A:2B:FF:FE:3C:4D:5E
EUI-64 generation requires expanding a 48-bit MAC address into a 64-bit interface identifier by inserting 0xFFFE into the center.
2
Invert the 7th bit (the Universal/Local bit) of the first byte.
First byte 00 (0000 0000 in binary) becomes 02 (0000 0010 in binary). The 64-bit identifier becomes 021A:2BFF:FE3C:4D5E.
IEEE EUI-64 standards mandate toggling the 7th bit to indicate a unique locally administered or globally unique address.
3
Combine the fe80::/64 link-local prefix with the derived 64-bit interface identifier and apply RFC 5952 zero compression rules.
fe80::21a:2bff:fe3c:4d5e
Leading zeros within hex fields must be suppressed (021a becomes 21a).

Anahtar Kavram

Modified EUI-64 Interface Identifier Derivation
Tahmini Süre:1m 30s
Soru 59Soru →

A network administrator is troubleshooting an issue with a newly deployed Power over Ethernet (PoE+) pan-tilt-zoom (PTZ) IP camera installed at the end of a 85-meter Category 6 UTP cable run. The camera initializes and streams video normally during daylight, but repeatedly reboots whenever its infrared (IR) illuminators turn on at night. A basic wiremapper confirms all eight conductors have pin-to-pin continuity and proper T568B pinout. Which TWO of the following physical layer causes or diagnostic approaches are most appropriate to identify and resolve this failure?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Using a cable certifier capable of testing DC resistance unbalance across conductor pairs to check for high resistance in the cable run.; Verifying whether Copper-Clad Aluminum (CCA) cabling was installed instead of solid bare copper conductors for the long horizontal run.

Cevap

The correct approaches are using a cable certifier to test DC resistance unbalance and verifying that solid bare copper cabling was used instead of Copper-Clad Aluminum (CCA) wire.
The combination of daytime operation and nighttime reboots indicates that data transmission works fine, but power delivery fails when current demand increases. Cable certifiers that measure DC resistance unbalance evaluate the cable's electrical resistance under load, identifying high-resistance points. Furthermore, verifying that solid bare copper (rather than Copper-Clad Aluminum) was installed addresses the root cause, as CCA cabling exhibits much higher resistance, violating TIA standards and leading to significant voltage drops over long runs.

Adım Adım Çözüm

1
Analyze the reported failure symptoms
The IP camera functions during low-power daytime operations but reboots when high-power IR illuminators engage at night, indicating a voltage drop under higher current draw (PoE+ power delivery issue).
Wiremappers only verify basic pin continuity at negligible electrical current; they cannot detect high DC resistance under load.
2
Evaluate physical cable properties affecting PoE delivery
Substandard cabling materials like Copper-Clad Aluminum (CCA) have much higher resistance than pure copper, which causes excessive voltage drops over long distances (such as 85 meters).
ANSI/TIA standards explicitly require solid copper conductors for horizontal cabling carrying PoE.
3
Select the appropriate diagnostic tool for advanced electrical testing
A advanced cable certifier measures DC resistance and DC resistance unbalance between conductor pairs.
This pinpoints poor terminations, oxidized punch-downs, or improper cable gauge/material causing power delivery failures.

Anahtar Kavram

DC Resistance and PoE Troubleshooting in Twisted-Pair Cabling
Tahmini Süre:1m 30s
Soru 60Soru →

Three enterprise switches (SW1, SW2, and SW3) are connected in a triangular loop running standard IEEE 802.1D Spanning Tree Protocol (STP). All three switches retain the default bridge priority of 32768, and their MAC addresses are as follows:
- SW1: 00:1A:2B:3C:4D:01
- SW2: 00:1A:2B:3C:4D:02
- SW3: 00:1A:2B:3C:4D:03

The physical links and their associated STP path costs are:
- Link between SW3 and SW1: 100 Mbps (STP path cost = 19)
- Link between SW3 and SW2: 1 Gbps (STP path cost = 4)
- Link between SW2 and SW1: 1 Gbps (STP path cost = 4)

Which switch port on SW3 will be elected as the Root Port, and what is its calculated Root Path Cost?

Cevabı ve açıklamayı göster

Cevap: The port connected to SW2, with a Root Path Cost of 8

Cevap

The port connected to SW2, with a Root Path Cost of 8
Because all switches share the default priority of 32768, SW1 is elected as the Root Bridge based on having the lowest MAC address (00:1A:2B:3C:4D:01). SW3 must select a single Root Port that offers the lowest cumulative cost to reach SW1. The direct link from SW3 to SW1 operates at 100 Mbps with a cost of 19. The indirect path from SW3 through SW2 to SW1 uses two 1 Gbps links, resulting in a total path cost of 4 + 4 = 8. Since 8 is less than 19, SW3 elects the port facing SW2 as its Root Port with a Root Path Cost of 8.

Adım Adım Çözüm

1
Determine the Root Bridge by comparing Switch Priority and MAC Address.
All switches have equal priority (32768). SW1 has the lowest MAC address (00:1A:2B:3C:4D:01) and is elected as the Root Bridge.
STP selects the switch with the lowest Bridge ID (Priority + MAC) as the Root Bridge.
2
Calculate the cumulative Root Path Cost for all possible paths from SW3 to the Root Bridge (SW1).
Direct path (SW3 → SW1): Cost = 19. Indirect path (SW3 → SW2 → SW1): Cost = 4 + 4 = 8.
Root Path Cost is the sum of all ingress port path costs along the path toward the Root Bridge.
3
Select the Root Port on SW3 based on the lowest cumulative Root Path Cost.
The port connected to SW2 has a lower total cost (8 < 19) and is elected as SW3's Root Port.
Every non-root switch elects exactly one Root Port corresponding to its shortest path to the Root Bridge.

Anahtar Kavram

STP Root Bridge election and cumulative Root Path Cost calculation for Root Port selection.
Tahmini Süre:1m 30s
ÖncekiSayfa 3 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin