Tüm alıştırma soruları

A network administrator has confirmed through testing that an exhausted DHCP IP address scope was the root cause of network connectivity failures affecting wireless inventory scanners in a warehouse. According to the CompTIA troubleshooting methodology, which of the following actions should the administrator perform NEXT? (Select TWO.)

A network administrator is configuring inbound firewall rules on a perimeter security appliance for a web server located in a DMZ with IP address $192.168.50.10/32$. Public users must be able to access the secure web application, and system administrators must be able to perform remote command-line administration from an authorized external management subnet ($203.0.113.0/24$). Which of the following rule configurations are required to fulfill these security requirements? (Select TWO.)

A network engineer is conducting physical layer diagnostics across diverse enterprise copper and optical fiber cabling infrastructures. Match each physical layer testing tool on the left with the specific failure symptom or diagnostic requirement on the right.

A network administrator is implementing hardening controls on an enterprise core switch following a security audit. The audit report flagged two primary vulnerabilities: administrative monitoring data and CLI sessions are being transmitted without payload encryption, and untagged management traffic is exposed to potential VLAN hopping attacks across 802.1Q trunk lines. Which set of device hardening configurations directly remediates both identified security risks?

A network administrator is troubleshooting an industrial sensor deployment on the 2.4 GHz spectrum experiencing heavy packet loss and poor signal quality. An RF audit reveals that surrounding access points are configured on channels 2, 4, and 9 using 40 MHz channel widths. Which of the following actions should the administrator take to resolve the wireless interference issues? (Select TWO.)

A system administrator is troubleshooting outbound connectivity on a Linux server. The server shows the following IPv4 network configuration:

- IP Address: $172.16.50.22$
- Subnet Mask: $255.255.255.0$ (/$24$)
- Default Gateway: $172.16.51.1$

The server can successfully communicate with local hosts on the $172.16.50.0/24$ network but cannot reach any external subnets or the internet. Which of the following best explains why the server cannot reach remote networks?

A network administrator is systematically troubleshooting a client workstation that cannot resolve the internal domain name `app.company.local`. Arrange the following troubleshooting steps in the correct logical sequence, starting from local host verification to testing remote authoritative DNS resolution.

A network engineer is troubleshooting persistent connection drops and low throughput reported by wireless barcode scanners in a high-density logistics warehouse. A site survey reveals that neighboring 2.4 GHz access points (APs) are currently assigned to channels 2, 4, and 6, resulting in significant adjacent channel interference. Furthermore, large metal storage racks are generating severe multipath distortion in central aisles. Which of the following remediation steps should the engineer implement to resolve these signal and connectivity issues? (Select TWO.)

A network security architect is reviewing the organization's technical controls to ensure alignment with foundational security principles. Match each core security principle on the left with the technical control on the right that primarily enforces it.

A network technician is troubleshooting a newly installed Category 6 (Cat6) twisted-pair cable run that fails to establish an Ethernet link. The technician suspects there may be a physical break in the copper conductor along the wall run or an incorrect wire pinout at the RJ-45 wall jack. Which TWO of the following tools should the technician use to accurately locate the physical cable fault distance and verify pin mapping?

A network technician has completed testing a theory and confirmed that a duplicate IP address assignment is the root cause of an executive's laptop connectivity issue. According to the CompTIA troubleshooting methodology, which of the following actions should the technician perform NEXT?

A user on a Windows client workstation reports being unable to connect to an internal web application at `intranet.corp.local` after the server was migrated to a new IP address (`192.168.1.50`). A technician executes `ipconfig /displaydns` on the client workstation and receives the following output:

text
Record Name . . . . . : intranet.corp.local
Record Type . . . . . : 1
Time To Live . . . . : 86400
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 192.168.1.250

Which TWO of the following actions or events will resolve this name resolution issue on the client workstation? (Select TWO.)

A system administrator is troubleshooting DNS resolution issues on a Linux workstation. Standard hostname lookups for small A records succeed without issue. However, when requesting DNSSEC-signed responses from an internal DNS server, queries fail. The administrator runs the following command to diagnose the problem:

$ dig +dnssec @192.168.10.5 security-test.lab.internal
;; Truncated, retrying in TCP mode.
;; connection timed out; no servers could be reached

Which TWO of the following statements accurately identify the root cause of this failure and the appropriate corrective action?

A network security administrator is deploying a site-to-site Virtual Private Network (VPN) using Internet Key Exchange version 2 (IKEv2) and IPsec. Place the following operational phases and message exchanges in the correct chronological order from the first step to the final step during successful tunnel negotiation and data transfer.

A network technician is configuring a newly established small office location. The security baseline mandates protection against offline dictionary password-cracking attacks while utilizing a shared secret for authentication, as well as requiring Protected Management Frames (PMF) to safeguard against wireless deauthentication attacks. Which wireless security deployment best fulfills these requirements?

During a routine security review, a network team must update device telemetry settings on WAN edge routers to enable continuous hardware performance polling. The organization's compliance mandate requires both cryptographic user authentication and payload encryption for all management traffic. Which protocol configuration should the team implement on the devices?

A network administrator is investigating a name resolution issue on a server attempting to query an internal DNS zone for DNSSEC-signed records. When executing `dig @10.10.1.5 api.partner.corp +dnssec`, the command returns the following output:

text
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48219
;; flags: qr rd ra tc; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;api.partner.corp. IN A

;; Query time: 12 msec
;; SERVER: 10.10.1.5#53(10.10.1.5)

Subsequent attempts by applications to resolve `api.partner.corp` time out or fail. Which of the following is the most likely root cause of this failure?

A network specialist investigating a high-availability BGP routing incident has completed testing a hypothesis in a sandbox environment, confirming that an unannounced AS-path prepending modification by an upstream provider caused asymmetric routing drops. Having confirmed the root cause, the specialist is preparing for the next phase of the CompTIA troubleshooting methodology. Which TWO of the following actions should the specialist perform during this next phase? (Select TWO.)

A network security administrator needs to restrict hosts in the Finance VLAN ($10.50.10.0/24$) from accessing an internal accounting web server ($10.50.20.15$) over port 80 (HTTP), while allowing all other network traffic between the subnets. The administrator configures a standard IPv4 Access Control List (`access-list 10 deny 10.50.10.0 0.0.0.255`) and applies it inbound on the router interface servicing the Finance VLAN.

Which statement best describes the outcome of this deployment?

A network technician is troubleshooting a connectivity issue where a host with IP address 192.168.10.15/24 cannot communicate with servers on remote networks. Which TWO of the following issues are the most likely causes of this communication failure?