Tüm alıştırma soruları

2237 soru

Soru 1501Soru

A network operations center team notices periodic bandwidth spikes on a branch office WAN router interface. While SNMP counter polling indicates overall interface throughput, it fails to reveal which internal endpoints or protocols are responsible for the spikes. Which network performance telemetry technology should be implemented on the router interface to capture per-flow traffic details, including source and destination IP addresses?

Cevabı ve açıklamayı göster

Cevap: IPFIX (IP Flow Information Export) flow telemetry

Cevap

IPFIX (IP Flow Information Export) flow telemetry is the correct choice because it exports granular flow data (including source/destination IP addresses, port numbers, and byte counts) required to identify specific endpoints and applications causing traffic spikes.
IPFIX (IP Flow Information Export) provides flow-level granularity by summarizing packet streams based on key fields (source IP, destination IP, source port, destination port, and protocol). This allows network engineers to identify top talkers and specific application usage during throughput anomalies.

Adım Adım Çözüm

1
Analyze the monitoring requirement
The requirement demands tracking granular per-flow traffic details (source/destination IP addresses and application protocols) rather than aggregate interface bandwidth.
SNMP interface counters only show total byte/packet counts passing through an interface over time.
2
Evaluate candidate telemetry technologies
IPFIX/NetFlow extracts key fields from packet headers to build flow records containing IP addresses, ports, and protocols.
Flow telemetry specifically addresses the visibility gap between overall interface utilization and per-host activity.

Anahtar Kavram

Flow-Based Telemetry vs. Device State/Metric Monitoring
Tahmini Süre:1m 30s
Soru 1502Soru

A network administrator is troubleshooting an issue where a client workstation is resolving an outdated IP address for a local server. Arrange the standard operating system name resolution steps in order from FIRST evaluated source to LAST evaluated source during a hostname lookup request.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct order of name resolution sources evaluated by the client operating system is: (1) Local HOSTS file, (2) Local DNS resolver cache, (3) Configured primary DNS server, and (4) Link-Local Multicast Name Resolution (LLMNR) / NetBIOS local broadcast fallback.
Standard client operating systems perform hostname resolution by inspecting local static overrides (HOSTS file) first, followed by the memory-resident DNS resolver cache, then issuing a DNS query to the designated primary DNS server, and finally using multicast/broadcast methods (such as LLMNR or NetBIOS) as a fallback mechanism if DNS resolution is unsuccessful.

Adım Adım Çözüm

1
Evaluate local file-based overrides
The operating system checks the HOSTS file on disk to see if a manual IP mapping overrides network resolution.
Local static mappings take absolute priority in standard operating system resolution logic.
2
Inspect client resolver memory cache
If no entry exists in HOSTS, the OS checks volatile RAM cache managed by the DNS client service.
Checking cache minimizes network overhead and avoids unnecessary DNS queries across the LAN.
3
Query network-configured primary DNS server
If absent from local cache, a unicast DNS query is sent to the primary DNS IP address configured via DHCP or static IP settings.
This queries the authoritative infrastructure to resolve central domain names.
4
Execute local broadcast/multicast fallback mechanisms
If standard DNS infrastructure resolution yields no answer, local multicast (LLMNR) or broadcast (NetBIOS) packets are sent to adjacent subnet peers.
Broadcast mechanisms serve as a last resort for peer-to-peer name resolution within the same broadcast domain.

Anahtar Kavram

Standard Operating System Hostname Resolution Order
Soru 1503Soru

During a network audit, a technician discovers that Switch-1 has its trunk interface native VLAN set to VLAN 10, while Switch-2 on the opposite end of the trunk link has its native VLAN set to VLAN 20. Which of the following issues will occur as a direct result of this misconfiguration?

Cevabı ve açıklamayı göster

Cevap: Untagged frames transmitted by Switch-1 will be processed on VLAN 20 by Switch-2, causing cross-VLAN traffic leakage.

Cevap

Untagged frames transmitted by Switch-1 will be processed on VLAN 20 by Switch-2, causing cross-VLAN traffic leakage.
Under 802.1Q encapsulation, frames in the native VLAN travel untagged across trunk links. When the receiving switch has a different native VLAN configured, it places all incoming untagged frames into its own configured native VLAN, causing traffic leakage between two distinct VLANs.

Adım Adım Çözüm

1
Identify how 802.1Q trunking handles native VLAN traffic.
802.1Q trunks send frames belonging to the configured native VLAN without an 802.1Q header (untagged).
Native VLANs are designed to carry untagged control and legacy traffic across trunk links.
2
Analyze the impact of a native VLAN mismatch across the link.
Switch-1 sends untagged frames intended for VLAN 10. Switch-2 receives these untagged frames and assigns them to its own native VLAN (VLAN 20).
Switches assume any incoming untagged frame on a trunk interface belongs to their locally configured native VLAN.
3
Select the option that correctly describes this behavior.
Cross-VLAN traffic leakage occurs between VLAN 10 and VLAN 20.
This matches the technical consequence of an 802.1Q native VLAN mismatch.

Anahtar Kavram

Native VLAN Mismatch Behavior on 802.1Q Trunks
Soru 1504Soru

A network administrator installs a new single-mode fiber-optic cable run between two network switches in adjacent buildings. Which tool should the administrator use to measure signal attenuation and pinpoint light loss along the fiber link?

Cevabı ve açıklamayı göster

Cevap: Optical Time-Domain Reflectometer (OTDR)

Cevap

Optical Time-Domain Reflectometer (OTDR)
An Optical Time-Domain Reflectometer (OTDR) is designed for optical fiber testing. It sends light pulses through the fiber cable and measures the power and timing of reflected light backscatter to determine total attenuation and locate splices, breaks, or signal loss points.

Adım Adım Çözüm

1
Identify the transmission medium specified in the scenario.
The cable run consists of single-mode optical fiber.
Fiber-optic cables carry light signals rather than electrical currents, requiring diagnostic tools specifically designed for optical analysis.
2
Determine the diagnostic requirement.
The objective is to measure signal attenuation and locate light loss along the fiber cable.
Optical Time-Domain Reflectometers (OTDRs) measure light degradation and calculate distance to faults by evaluating backscattered light pulses.

Anahtar Kavram

Utilizing Hardware Testers and Packet Analyzers
Soru 1505Soru

A network engineer configures an extended Access Control List (ACL) on an enterprise edge router to allow internal workstations on the subnet 10.100.4.0/2410.100.4.0/24 to perform domain name queries against an external DNS server at IP address 8.8.8.88.8.8.8. The engineer enters the following rule on the outbound interface:

`permit udp 10.100.4.0 0.0.0.255 host 8.8.8.8 eq 53`

Users report that basic DNS lookups succeed, but certain applications fail when DNS response payloads exceed 512512 bytes or when performing DNSSEC lookups that require switching transport protocols. Which modification to the ACL configuration will resolve this issue while adhering to the principle of least privilege?

Cevabı ve açıklamayı göster

Cevap: Add a complementary extended ACL rule permitting TCP traffic from subnet 10.100.4.0/24 to host 8.8.8.8 on destination port 53.

Cevap

Add a complementary extended ACL rule permitting TCP traffic from the internal subnet to the external DNS server IP address on destination port 53.
DNS relies on both UDP and TCP transport protocols on destination port 53. Standard DNS queries less than 512 bytes use UDP. However, when queries exceed 512 bytes or utilize DNSSEC extensions, DNS automatically switches to TCP port 53. Adding an explicit rule permitting TCP port 53 to the destination host resolves fallback issues while strictly limiting access according to least privilege.

Adım Adım Çözüm

1
Analyze transport protocol dependencies for DNS operations.
DNS uses UDP port 53 for typical queries under 512 bytes, but requires TCP port 53 when responses exceed 512 bytes (such as with DNSSEC or large responses) or during zone transfers.
When a DNS response over UDP is truncated (TC flag set), the client re-issues the query using TCP port 53.
2
Evaluate the current ACL statement.
The current rule only matches UDP destination port 53 (`permit udp ... eq 53`), causing all TCP-based DNS traffic to hit the implicit deny rule at the end of the ACL.
Extended ACLs filter explicitly by protocol type (UDP vs TCP).
3
Determine the least-privilege configuration change required.
Adding `permit tcp 10.100.4.0 0.0.0.255 host 8.8.8.8 eq 53` allows fallback TCP DNS traffic without opening unnecessary ports or protocols.
This precisely allows TCP port 53 to the specific target server while maintaining strict perimeter filtering.

Anahtar Kavram

DNS Dual Transport Layer Protocols (UDP/TCP Port 53) in ACL Rules
Soru 1506Soru

A network technician is troubleshooting an intermittent Gigabit Ethernet connection over a 70-meter Category 6 UTP cabling run between a core switch and a high-density wireless access point. Although a basic continuity wiremapper shows all eight conductors properly connected pin-to-pin, the link frequently drops or negotiates down to 100 Mbps under high traffic loads. Which of the following diagnostic steps or corrective actions should the technician take to identify and resolve this issue? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Utilize a cable certifier to test for split pairs and measure Near-End Crosstalk (NEXT) along the cable run.; Inspect patch panel terminations to ensure the untwisted length of wire pair conductors does not exceed 0.5 inches (13 mm).

Cevap

The technician should utilize a cable certifier to test for split pairs/NEXT and inspect patch panel terminations to ensure wire pair untwisting does not exceed 0.5 inches (13 mm).
Simple continuity testers verify that pin 1 connects to pin 1, pin 2 to pin 2, and so forth. However, if conductors from different pairs are crossed (split pair), electrical continuity still succeeds while differential signal noise cancellation fails completely. A cable certifier tests high-frequency parameters like Near-End Crosstalk (NEXT) to uncover split pairs. Furthermore, TIA/EIA Category 6 standards specify that pair twists must be maintained as close to the termination point as possible, with no more than 0.5 inches (13 mm) of untwisted wire. Exceeding this limit causes crosstalk at the connector, causing Gigabit links to drop down to 100 Mbps or lose packets under load.

Adım Adım Çözüm

1
Analyze why basic continuity testing failed to diagnose the intermittent Gigabit performance issue.
Basic wiremappers only check electrical continuity from end to end; they cannot measure high-frequency performance or detect split pairs.
Split pairs maintain pin-to-pin electrical mapping but separate the twisted pairs, causing significant Near-End Crosstalk (NEXT).
2
Select the appropriate diagnostic tool to measure high-frequency signal integrity and crosstalk.
Identify that a cable certifier or TDR equipped with frequency testing is needed to detect NEXT and pinpoint split pairs.
Cable certifiers evaluate parameters across the full frequency spectrum required for Cat 6 standards.
3
Review physical termination standards at punch-down blocks and connectors.
Verify that untwisted conductor lengths are kept within TIA/EIA specifications of 0.5 inches (13 mm).
Maintaining pair twist up to the point of termination prevents magnetic coupling and crosstalk between adjacent pairs.

Anahtar Kavram

Distinguishing basic continuity testing from cable certification and understanding how split pairs and excessive pair untwisting cause Near-End Crosstalk (NEXT).
Tahmini Süre:2m 0s
Soru 1507Soru

A network technician needs to verify basic ICMP IP reachability and trace the hop-by-hop route from a Windows workstation to a remote server at 10.0.4.15. Which of the following command-line utilities should the technician use? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: ping 10.0.4.15; tracert 10.0.4.15

Cevap

The correct utilities to use are ping 10.0.4.15 to check reachability and tracert 10.0.4.15 to trace the network path.
The ping command tests basic Layer 3 connectivity by sending ICMP Echo Request messages, while tracert displays the step-by-step router path packets take to reach the destination IP address.

Adım Adım Çözüm

1
Identify the diagnostic requirement for verifying basic IP reachability.
Recognize that ping uses ICMP Echo Requests to verify if the destination host is active and reachable.
Ping provides an immediate test of connectivity between source and target hosts.
2
Identify the diagnostic requirement for route tracing.
Recognize that tracert tracks the intermediate router hops to the destination.
Tracert identifies each hop along the path and highlights potential latency or routing failures along the way.

Anahtar Kavram

Utilizing basic ICMP network utilities (ping and tracert) for reachability and path troubleshooting.
Tahmini Süre:45s
Soru 1508Soru

A network engineer is troubleshooting high optical attenuation along a 1,500-meter single-mode fiber-optic link between two data center facilities. While an optical power meter confirms that overall signal strength drops below acceptable thresholds, it cannot identify where along the cable run the issue exists. Which hardware tool should the engineer use to pinpoint the exact distance to the microbend or splice failure causing the signal loss?

Cevabı ve açıklamayı göster

Cevap: Optical time-domain reflectometer (OTDR)

Cevap

An optical time-domain reflectometer (OTDR) is the appropriate diagnostic tool to locate physical faults along a fiber-optic cable run.
An optical time-domain reflectometer (OTDR) operates by transmitting light pulses down a fiber-optic strand and capturing reflected light signals over time. By measuring the elapsed time and intensity of backscattered light, it generates a visual trace showing attenuation rates and exact meter distances to splices, connectors, microbends, or physical breaks.

Adım Adım Çözüm

1
Identify the physical medium and problem layer.
The issue involves physical signal degradation (attenuation) at Layer 1 on a single-mode optical fiber run.
Optical fiber uses light signals rather than electrical signals, requiring fiber-specific physical layer diagnostic equipment.
2
Evaluate the limitations of the current tool.
An optical power meter measures overall signal loss (dB) end-to-end but lacks reflection time-of-flight capabilities to locate fault positions.
End-to-end power testing only confirms total loss, not the specific location of cable damage.
3
Select the hardware tool capable of distance-to-fault measurements on optical media.
An optical time-domain reflectometer (OTDR) sends light pulses down the fiber and measures Rayleigh backscattering and Fresnel reflections to plot attenuation against distance.
OTDR technology accurately identifies the location, type, and magnitude of optical cable anomalies.

Anahtar Kavram

Selecting Appropriate Hardware Testers for Optical Fiber Diagnostics
Soru 1509Soru

A user connects a laptop to a wired network jack in a remote conference room but cannot access any internal or external network resources. A technician executes `ipconfig /all` on the workstation and receives the following output:

IPv4 Address. . . . . . . . . . . : 169.254.22.81
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :

Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The client failed to reach a DHCP server and generated an Automatic Private IP Addressing (APIPA) address.

Cevap

The client failed to reach a DHCP server and generated an Automatic Private IP Addressing (APIPA) address.
An IPv4 address beginning with 169.254 (specifically within 169.254.0.1 to 169.254.255.254) indicates that the host operating system self-assigned an Automatic Private IP Addressing (APIPA) address. This occurs automatically when a client configured for DHCP fails to receive a DHCPOFFER message from a DHCP server.

Adım Adım Çözüm

1
Examine the IP address snippet obtained from ipconfig.
The IPv4 address is 169.254.22.81 with subnet mask 255.255.0.0.
Addresses within the 169.254.0.1 – 169.254.255.254 range are reserved for APIPA (link-local) addressing.
2
Determine why APIPA was assigned.
The client attempted to obtain an IP via DHCP, but no DHCP server responded to the DHCPDISCOVER broadcast.
Operating systems automatically assign an APIPA address when dynamic configuration fails so local link communication remains possible.

Anahtar Kavram

APIPA (Automatic Private IP Addressing) Diagnosis
Soru 1510Soru

A network technician is troubleshooting connectivity failures on a newly provisioned branch office subnet, VLAN 70 (10.70.0.0/2310.70.0.0/23). Client workstations connected to VLAN 70 fail to access corporate resources and receive autoconfigured IP addresses in the range 169.254.18.1169.254.18.1 to 169.254.18.254169.254.18.254 with a subnet mask of 255.255.0.0255.255.0.0. The centralized DHCP server resides on VLAN 10 (10.10.0.5010.10.0.50). Inspection of the Layer 3 switch reveals that Interface VLAN 70 is configured with IP address 10.70.0.1/2310.70.0.1/23, but no IP helper address is configured, and logging on the DHCP server indicates that the IP pool for 10.70.0.0/2310.70.0.0/23 has reached 100%100\% capacity.

Which of the following factors explain why client devices are assigned 169.254.x.x169.254.x.x addresses and detail the required remediation steps? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The generation of 169.254.x.x169.254.x.x IP addresses indicates that client endpoints entered Automatic Private IP Addressing (APIPA) mode after failing to receive a valid DHCP lease response.; The Layer 3 interface for VLAN 70 must be configured with `ip helper-address 10.10.0.50` and the DHCP server scope for VLAN 70 must be expanded.

Cevap

Clients receive APIPA addresses (169.254.x.x) because DHCPDISCOVER broadcasts fail to receive a lease response across subnets. Resolving the issue requires configuring `ip helper-address 10.10.0.50` on Interface VLAN 70 to relay DHCP broadcasts to the central server and expanding the exhausted DHCP scope for VLAN 70.
Client endpoints assign themselves APIPA addresses (169.254.x.x169.254.x.x) when DHCPDISCOVER broadcast requests receive no response. Because the central DHCP server resides on a different subnet (VLAN 10), the Layer 3 switch interface serving VLAN 70 requires an `ip helper-address 10.10.0.50` statement to relay broadcast DHCP packets as unicast traffic to the server. Furthermore, because the server scope for VLAN 70 is at 100% capacity, the scope pool size must be expanded to grant new leases.

Adım Adım Çözüm

1
Diagnose the symptom associated with the 169.254.x.x169.254.x.x address block.
Identify that 169.254.0.0/16169.254.0.0/16 is an Automatic Private IP Addressing (APIPA) address assigned automatically when an endpoint fails to locate or receive a response from a DHCP server.
Client operating systems invoke APIPA when DHCP lease requests (DORA process) time out.
2
Analyze cross-subnet DHCP traffic requirements.
Recognize that DHCPDISCOVER messages are Layer 2 broadcasts that cannot cross Layer 3 router boundaries by default.
The Layer 3 switch interface serving VLAN 70 must be configured with a DHCP relay command (`ip helper-address 10.10.0.50`) to convert broadcast requests into targeted unicast traffic directed to the DHCP server on VLAN 10.
3
Evaluate DHCP server pool utilization.
Identify scope exhaustion on the DHCP server as a secondary blocking factor for IP address allocation.
Even if relaying is functional, an exhausted scope prevents the DHCP server from offering valid IP leases to requesting endpoints.

Anahtar Kavram

DHCP Relay (IP Helper) Configuration and APIPA Fallback Behavior
Tahmini Süre:2m 0s
Soru 1511Soru

Match each network troubleshooting task to the most appropriate hardware tester or protocol analysis tool.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Testing battery voltage and checking electrical continuity of a power cable
Pinpointing the exact distance to a break in a single-mode fiber-optic run
Tracing an unlabeled UTP copper cable from an office wall jack to a patch panel port
Decoding packet header fields and analyzing live traffic on an Ethernet interface

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Multimeter pairs with electrical/continuity testing; OTDR pairs with pinpointing fiber optic distances and breaks; Tone generator and probe pairs with tracing copper cable runs; Packet analyzer pairs with decoding packet headers and inspecting network traffic.
Each tool is designed for a specific medium and function: multimeters handle electrical circuits; OTDRs analyze optical fiber runs; tone generators trace copper cables; packet analyzers capture and decode protocol traffic.

Adım Adım Çözüm

1
Identify the diagnostic tool required for electrical measurements.
Checking DC voltage and cable continuity requires a multimeter.
Multimeters measure resistance, voltage, and continuity across conductive pathways.
2
Identify the diagnostic tool required for optical fiber fault distance measurements.
Finding the distance to a fiber break requires an Optical Time-Domain Reflectometer (OTDR).
OTDRs measure light reflection over time to calculate physical distance to optical anomalies.
3
Identify the diagnostic tool required for non-destructive copper wire tracing.
Locating an unlabeled copper connection requires a tone generator and probe.
The tone generator places a signal on the wire which is picked up acoustically by the inductive probe.
4
Identify the diagnostic tool required for inspecting frame headers and packet payloads.
Analyzing live network traffic requires a packet analyzer.
Packet analyzers capture raw frames from network interfaces and decode header structures.

Anahtar Kavram

Matching network diagnostic tools to their appropriate OSI layer and transmission media context.
Soru 1512Soru

A network technician is investigating a situation where users at a remote branch office cannot reach external websites following a WAN router update. The technician gathered information and established a theory that an access control list (ACL) on the edge router was inadvertently blocking outbound DNS traffic on UDP port 53. The technician then applied a temporary test rule and performed a lookup, confirming that the ACL was indeed the root cause of the failure. According to the CompTIA troubleshooting methodology, which of the following actions should the technician perform NEXT?

Cevabı ve açıklamayı göster

Cevap: Establish a plan of action to resolve the issue and implement the solution.

Cevap

Establish a plan of action to resolve the issue and implement the solution.
Under the CompTIA troubleshooting methodology, once a technician tests a theory of probable cause and confirms the underlying issue (Step 3), the immediate next step is to establish a plan of action to resolve the problem and implement the solution (Step 4).

Adım Adım Çözüm

1
Identify the completed methodology phase from the scenario.
The technician completed identifying the problem (Step 1), establishing a theory (Step 2), and testing the theory to confirm the cause (Step 3).
Testing a temporary test rule to confirm the ACL root cause completes the 'Test the theory to determine cause' phase.
2
Determine the next sequential phase in the 6-step CompTIA troubleshooting methodology.
Following Step 3 (Test the theory), the next sequential phase is Step 4: Establish a plan of action to resolve the problem and implement the solution.
The CompTIA methodology strictly requires establishing a solution plan and implementing it before verifying system functionality or documenting results.

Anahtar Kavram

CompTIA 6-Step Troubleshooting Methodology Sequence
Tahmini Süre:1m 15s
Soru 1513Soru

A network administrator is troubleshooting an intermittent reachability issue affecting a Linux web server located in a corporate DMZ subnet (10.50.100.0/2410.50.100.0/24). Internal workstations on the LAN (192.168.10.0/24192.168.10.0/24) can ping their local default gateway (192.168.10.1192.168.10.1), but cannot reach the web server at 10.50.100.4510.50.100.45 on TCP port 443. The administrator executes diagnostic commands and observes the following output:

text C:\Users\admin> traceroute 10.50.100.45 traceroute to 10.50.100.45, 30 hops max, 60 byte packets 1 192.168.10.1 (192.168.10.1) 1.102 ms 0.985 ms 0.950 ms 2 10.200.1.1 (10.200.1.1) 3.421 ms 3.211 ms 3.105 ms 3 * * * 4 * * *

A inspect of the gateway router (10.200.1.110.200.1.1) inbound Access Control List (ACL) on the interface facing the core router reveals:

text 10 permit tcp 192.168.10.0 0.0.0.255 10.50.100.0 0.0.0.255 eq 80 20 permit icmp 192.168.10.0 0.0.0.255 10.50.100.0 0.0.0.255 30 deny ip any any

Additionally, direct diagnostic checks on the web server (10.50.100.4510.50.100.45) show its IPv4 address is configured as 10.50.100.45/2410.50.100.45/24 with a default gateway configured as 10.50.101.110.50.101.1.

Which TWO of the following underlying issues are preventing workstation connections to the web server over HTTPS?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The Access Control List on the gateway router lacks a rule permitting TCP port 443 traffic, causing HTTPS packets to trigger the implicit or explicit deny rule.; The web server's default gateway IP address resides on a different IP subnet than its assigned interface address, preventing it from routing return packets.

Cevap

The two issues preventing HTTPS connectivity are: 1) The ACL lacks a rule permitting TCP port 443 traffic (causing packets to be denied), and 2) The web server's default gateway is configured on a completely different subnet (10.50.101.110.50.101.1 vs 10.50.100.0/2410.50.100.0/24).
Two independent issues prevent HTTPS connections. First, the ACL permits TCP port 80 and ICMP, but lacks a rule for TCP port 443, causing HTTPS packets to hit line 30 ('deny ip any any'). Second, the server's IP address is on subnet 10.50.100.0/2410.50.100.0/24, but its gateway is set to 10.50.101.110.50.101.1, which is on a different subnet. A default gateway must reside on the local subnet to be reachable.

Adım Adım Çözüm

1
Analyze the Access Control List entries on gateway router 10.200.1.1
The ACL permits TCP port 80 and ICMP, but has no entry for TCP port 443. Port 443 traffic matches line 30 ('deny ip any any') and gets dropped.
HTTPS connections require TCP port 443 to be permitted through intermediate firewall/ACL filters.
2
Evaluate host IP address configuration on the destination server
The server's IP address 10.50.100.45/2410.50.100.45/24 belongs to subnet 10.50.100.0/2410.50.100.0/24. Its configured default gateway 10.50.101.110.50.101.1 belongs to 10.50.101.0/2410.50.101.0/24.
A host must have a default gateway that resides within its own local IP subnet scope to communicate with out-of-subnet hosts.

Anahtar Kavram

Routing, Default Gateway Subnet Alignment, and ACL Traffic Filtering
Soru 1514Soru

Users in an office building report frequent dropouts and poor throughput on the 2.4 GHz wireless network. A network administrator conducts a frequency audit and discovers that neighboring access points are assigned to non-overlapping channels 1, 6, and 11. However, the internal access point experiencing issues is configured to use Channel 3 with a 40 MHz channel bonding width. Which of the following identifies the primary root cause of the wireless performance degradation?

Cevabı ve açıklamayı göster

Cevap: The 40 MHz channel width centered on Channel 3 overlaps across channels 1 through 7, creating severe adjacent-channel interference with surrounding access points.

Cevap

The 40 MHz channel width centered on Channel 3 spans channels 1 through 7, causing severe adjacent-channel interference with neighboring access points on channels 1 and 6.
In 2.4 GHz Wi-Fi deployments, using a 40 MHz channel width on an overlapping channel such as Channel 3 causes the signal footprint to cover channels 1 through 7. This creates massive adjacent-channel interference with nearby access points configured on channels 1 and 6, resulting in packet retransmissions, latency, and frequent disconnections.

Adım Adım Çözüm

1
Analyze the RF spectrum requirements in the 2.4 GHz Wi-Fi frequency band.
Standard 20 MHz channels in 2.4 GHz only allow three non-overlapping channels: 1, 6, and 11.
Each 20 MHz channel occupies 22 MHz of frequency spectrum spaced at 5 MHz intervals.
2
Evaluate the effect of configuring a 40 MHz channel width on Channel 3.
A 40 MHz channel spans 8 consecutive 5 MHz sub-channels (channels 1 through 7).
Bonding two 20 MHz channels doubles bandwidth but expands the spectrum footprint significantly.
3
Compare the 40 MHz Channel 3 footprint against neighboring AP assignments.
Severe overlap occurs with APs operating on Channel 1 and Channel 6.
Because it spans channels 1 to 7, it interferes directly with both adjacent non-overlapping channels.

Anahtar Kavram

2.4 GHz Channel Overlap and Channel Width Configurations
Soru 1515Soru

A network administrator is implementing a telemetry and metric collection framework across core edge routers. The management policy mandates cryptographic authentication and payload encryption for device health polling, alongside flow-level traffic analysis to identify bandwidth-intensive applications. Which of the following solutions should the administrator deploy to fulfill these monitoring objectives? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: SNMPv3 configured with authPriv to encrypt polling traffic and authenticate management requests for hardware metrics.; IPFIX flow telemetry exported to a centralized collector to analyze protocol distribution and bandwidth consumption per flow.

Cevap

The administrator should deploy SNMPv3 configured with authPriv for encrypted health polling and IPFIX flow telemetry for tracking application bandwidth consumption.
Deploying SNMPv3 with authPriv satisfies security requirements by providing authenticated and encrypted polling for router CPU, memory, and interface metrics. Implementing IPFIX provides flow-based telemetry to track volume and application-level bandwidth usage across network interfaces.

Adım Adım Çözüm

1
Evaluate secure polling requirements for hardware health metrics.
Identified SNMPv3 with authPriv mode as the only standard SNMP version that enforces both message integrity/authentication and privacy/encryption.
Legacy versions like SNMPv2c transmit data and credentials unencrypted in cleartext.
2
Evaluate traffic flow analysis requirements for application bandwidth consumption.
Selected IPFIX flow telemetry export.
Flow telemetry protocols such as IPFIX gather detailed layer 3/4 metadata to analyze flow-level throughput, top talkers, and protocol breakdowns.

Anahtar Kavram

Network Telemetry Protocol Selection and SNMP Security Levels
Soru 1516Soru

A network technician is hardening an access switch installed in a publicly accessible building lobby. A vulnerability audit indicates that the switch port connected to the lobby Ethernet jack is transmitting detailed hardware specifications, system capabilities, and native device hostnames to connected client devices. Which of the following configuration changes should the technician implement on this interface to resolve the information disclosure vulnerability?

Cevabı ve açıklamayı göster

Cevap: Disable Layer 2 discovery protocols (such as CDP or LLDP) on the untrusted interface.

Cevap

Disable Layer 2 discovery protocols (such as CDP or LLDP) on the untrusted interface.
Disabling Layer 2 discovery protocols (CDP/LLDP) on untrusted access ports is a core device hardening best practice. CDP and LLDP continuously broadcast system details—such as device capabilities, platform specifications, native VLAN IDs, and switch port identifiers—in plain text. Turn off these protocols on public-facing or user-accessible interfaces to prevent malicious reconnaissance.

Adım Adım Çözüm

1
Analyze the reported security vulnerability.
The device is emitting broadcast messages containing internal switch characteristics (hostname, hardware model, OS version, and capability flags) out a public-facing port.
Layer 2 discovery protocols like Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP) transmit periodic unencrypted advertisements by default.
2
Evaluate network device hardening best practices for untrusted access ports.
Identify that discovery protocols should be globally disabled or turned off specifically on edge ports facing untrusted/public areas to mitigate reconnaissance attacks.
Attackers can intercept CDP/LLDP frames to map out internal network infrastructure without authenticating.
3
Select the correct interface hardening control.
Disabling CDP/LLDP on the public interface stops outbound advertisements while maintaining normal network connectivity for legitimate connected devices.
This directly eliminates the information disclosure vector at Layer 2.

Anahtar Kavram

Disabling Layer 2 Discovery Protocols on Untrusted Ports
Tahmini Süre:1m 0s
Soru 1517Soru

A network administrator loses all network access to a remote branch router following a fiber cut on the primary WAN circuit. The administrator needs to establish a command-line interface (CLI) session to inspect the router's boot process and interface status without relying on the down IP network link. Which mechanism provides remote management capabilities in this out-of-band scenario?

Cevabı ve açıklamayı göster

Cevap: A terminal server attached to the router's serial console port and connected to an external cellular modem

Cevap

Connecting a terminal server to the router's serial console port backed by a cellular modem provides true out-of-band management isolated from primary network outages.
Out-of-band (OOB) management provides a dedicated, alternative access path to network hardware that functions independently of the primary data network. A cellular modem connected to a terminal server allows direct serial console connection to the router's CLI, enabling administrators to troubleshoot even when the main WAN fiber link is completely cut.

Adım Adım Çözüm

1
Analyze the operational failure constraint.
The primary WAN link is down due to a fiber cut, rendering all in-band IP communication mechanisms inaccessible.
In-band management relies on the operational state of the primary network interfaces and routing infrastructure.
2
Identify the required management architecture.
An out-of-band (OOB) solution is required to bypass the main network path entirely.
Out-of-band management utilizes an independent physical or wireless communication channel (e.g., cellular network or POTS dial-up) to access device console/serial ports.
3
Evaluate the valid technical deployment.
A cellular modem paired with a terminal server connected directly to the device's RS-232/RJ-45 console port provides direct CLI access regardless of primary WAN state.
This setup allows system administrators to troubleshoot hardware, view system boot logs, and reconfigure settings remotely during total network outages.

Anahtar Kavram

Out-of-Band (OOB) Management
Soru 1518Soru

A network administrator observing traffic on a managed switch detects unauthorized Ethernet frames originating from a host on VLAN 10 arriving at a server isolated on VLAN 20 without passing through an intervening router. Packet analysis shows that the frames contain two 802.1Q headers: an outer tag corresponding to VLAN 10 (the native VLAN of the trunk link) and an inner tag specifying VLAN 20. Which of the following attack types is being executed?

Cevabı ve açıklamayı göster

Cevap: Double-tagging VLAN hopping

Cevap

Double-tagging VLAN hopping
Double-tagging VLAN hopping exploits how switches process native VLAN traffic on 802.1Q trunks. An attacker crafts a frame containing two 802.1Q tags. When the primary switch receives the frame on an access port configured with the native VLAN, it strips the outer tag and transmits the frame over the trunk. The receiving switch reads the inner tag and forwards the frame to the target VLAN, bypassing Layer 3 security controls.

Adım Adım Çözüm

1
Analyze the Ethernet frame headers from the packet capture
The packet contains stacked 802.1Q tags: an outer tag for VLAN 10 and an inner tag for VLAN 20.
When an 802.1Q trunk receives a frame tagged with its native VLAN ID, the switch strips the outer tag before transmitting it across the trunk link.
2
Evaluate how the destination switch interprets the modified frame
The destination switch reads the remaining inner tag (VLAN 20) and forwards the frame directly to the VLAN 20 segment.
This allows one-way traffic injection across VLAN boundaries without traveling through a Layer 3 routing device.
3
Identify the specific network attack technique
The scenario describes double-tagging VLAN hopping.
Double-tagging specifically exploits native VLAN frame processing mechanisms on 802.1Q trunks.

Anahtar Kavram

Double-tagging VLAN Hopping
Soru 1519Soru

A network technician installs new Category 6 UTP cable runs in a renovated office space. After terminating the cables, the technician uses a basic pin-to-pin continuity tester, which confirms that all eight conductors are correctly wired 1-to-1 at both ends. However, when workstations are connected, network performance is severely degraded by high rates of Near-End Crosstalk (NEXT) and frame errors. Which diagnostic tool should the technician use to identify the split-pair anomaly causing this signal degradation?

Cevabı ve açıklamayı göster

Cevap: A cable certifier capable of high-frequency signal analysis and NEXT measurement

Cevap

A cable certifier capable of high-frequency signal analysis and NEXT measurement
A split-pair condition happens when pin assignments maintain 1-to-1 electrical continuity, but wires from different twisted pairs are mixed together. Because basic wiremap tools only test DC continuity, they report the cable as correctly wired. A cable certifier injects high-frequency RF signals to measure parameters such as Near-End Crosstalk (NEXT), phase shift, and attenuation, allowing it to instantly isolate split pairs and certify Category 6 standard compliance.

Adım Adım Çözüm

1
Analyze the reported symptom and physical layer findings
Basic pin-to-pin continuity passes (1-to-1 mapping), but excessive Near-End Crosstalk (NEXT) degrades performance under active transmission.
Split pairs occur when pins are wired correctly end-to-end electrically, but conductors from different twisted pairs are paired together, destroying the noise-cancellation properties of twisted-pair cabling.
2
Evaluate tool capabilities against the split-pair fault condition
Basic continuity wiremap testers only check DC electrical resistance/continuity and fail to detect split pairs. A cable certifier tests RF signal characteristics across frequencies.
Measuring parameter metrics like NEXT, return loss, and attenuation requires an advanced cable certifier that sends high-frequency test signals through the cable.
3
Select the correct diagnostic tool
Identify the cable certifier as the proper instrument for identifying split pairs and certifying Cat 6 compliance.
Only cable certifiers (or advanced TDR-capable certifiers) perform the dynamic signal quality testing necessary to detect split pairs.

Anahtar Kavram

Identifying cable split pairs and high-frequency noise using cable certifiers versus basic continuity wiremap testers
Tahmini Süre:2m 0s
Soru 1520Soru

A network technician is performing physical layer and wireless infrastructure testing across a corporate facility. Match each diagnostic troubleshooting scenario to the most appropriate hardware testing tool required to resolve the issue.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Identifying pin assignment errors, such as split pairs or transposed conductors, on a newly terminated Cat6\text{Cat6} twisted-pair run.
Measuring signal strength loss in dBm\text{dBm} received at a fiber patch panel from a remote switch transceiver.
Detecting sources of non-802.11802.11 radio frequency interference that disrupt wireless access point communications.
Verifying direct current (DC\text{DC}) voltage levels supplied across cable pairs to power a PoE IP surveillance camera.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Wiremap tester corresponds to identifying split pairs on copper cabling; Optical power meter corresponds to measuring fiber signal power in dBm; Spectrum analyzer corresponds to detecting non-802.11 RF interference; Multimeter corresponds to measuring DC voltage for PoE devices.
Each tool maps directly to its intended layer and physical parameter: wiremap testers analyze pin continuity and miswires on copper UTP; optical power meters quantify light attenuation in dBm\text{dBm} on fiber links; spectrum analyzers inspect raw RF spectrum energy for non-802.11 interference; and multimeters measure DC\text{DC} electrical voltage levels for PoE power testing.

Adım Adım Çözüm

1
Analyze copper UTP pinout termination faults.
Confirm that split pairs and pin mapping require pin-by-pin continuity analysis.
Wiremap testers specifically check conductor pairings and pin continuity.
2
Analyze optical signal measurement requirements.
Determine that light intensity in dBm\text{dBm} requires optical power detection.
Optical power meters quantify light output levels from fiber transceivers.
3
Analyze wireless RF interference detection requirements.
Select raw RF energy analysis over standard Wi-Fi packet analysis.
Spectrum analyzers detect raw electromagnetic signals, including non-Wi-Fi RF sources.
4
Analyze power delivery troubleshooting on PoE endpoints.
Select electrical voltage measurement.
Multimeters measure electrical properties like DC\text{DC} voltage supplied over cabling.

Anahtar Kavram

Selecting Appropriate Hardware Testing Tools for Physical and Wireless Troubleshooting
ÖncekiSayfa 76 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin