Tüm alıştırma soruları

2237 soru

Soru 1541Soru

A network technician is configuring a newly deployed server in a corporate data center. The server is assigned the IPv4 address 10.100.15.7010.100.15.70 with a subnet mask of 255.255.255.192255.255.255.192 (/26) and a default gateway of 10.100.15.110.100.15.1. During testing, the server can communicate with local hosts in the 10.100.15.64/2610.100.15.64/26 IP range, but it cannot access devices on remote subnets or reach the default gateway. Which of the following best explains why the server cannot reach its default gateway?

Cevabı ve açıklamayı göster

Cevap: The server IP address and default gateway reside on different IP subnets due to the configured subnet mask length.

Cevap

The server IP address and default gateway reside on different IP subnets due to the configured subnet mask length.
With a subnet mask of 255.255.255.192255.255.255.192 (/26), the network is partitioned into subnets of 64 addresses each. The host address 10.100.15.7010.100.15.70 belongs to the subnet span 10.100.15.6410.100.15.64 through 10.100.15.12710.100.15.127. However, the configured default gateway address 10.100.15.110.100.15.1 belongs to the previous subnet span 10.100.15.010.100.15.0 through 10.100.15.6310.100.15.63. Because a host and its default gateway must reside within the same local IPv4 subnet to establish Layer 2 ARP adjacency, the server cannot send traffic outside its local segment.

Adım Adım Çözüm

1
Determine the subnet boundaries for host IP 10.100.15.7010.100.15.70 with mask 255.255.255.192255.255.255.192 (/26).
A /26 mask has a block size of 256192=64256 - 192 = 64. The subnets are 10.100.15.0/2610.100.15.0/26 (10.100.15.010.100.15.0 to 10.100.15.6310.100.15.63) and 10.100.15.64/2610.100.15.64/26 (10.100.15.6410.100.15.64 to 10.100.15.12710.100.15.127).
Calculating subnet ranges identifies which addresses belong to the same local broadcast domain.
2
Compare the placement of the server IP and default gateway IP within the calculated subnets.
The server IP (10.100.15.7010.100.15.70) falls into the 10.100.15.64/2610.100.15.64/26 subnet, whereas the default gateway IP (10.100.15.110.100.15.1) falls into the 10.100.15.0/2610.100.15.0/26 subnet.
A host can only communicate directly with its default gateway if both share the same IP subnet.
3
Formulate the root cause diagnosis.
Because the server and gateway reside on different subnets, the server considers the gateway off-link and cannot perform direct Layer 2 ARP resolution to reach it.
This subnet mismatch prevents off-subnet traffic routing.

Anahtar Kavram

Default Gateway Subnet Mismatch
Soru 1542Soru

A network technician receives complaints regarding intermittent disconnections and low throughput on wireless medical carts within a clinic's newly renovated wing. A signal survey reveals that when moving from the hallway into exam rooms separated by lead-lined drywall shielding, the Received Signal Strength Indicator (RSSI) drops significantly from 60 dBm-60\text{ dBm} to 86 dBm-86\text{ dBm}. Which wireless signal issue is the primary cause of this performance degradation?

Cevabı ve açıklamayı göster

Cevap: Signal attenuation and absorption resulting from dense physical building materials

Cevap

Signal attenuation and absorption resulting from dense physical building materials
Radio frequency (RF) attenuation refers to the loss of signal strength as electromagnetic waves travel through space or pass through physical obstacles. Dense building materials such as lead-lined walls, concrete, and metal reflect or absorb RF energy, leading to a drastic drop in RSSI (such as 60 dBm-60\text{ dBm} dropping to 86 dBm-86\text{ dBm}).

Adım Adım Çözüm

1
Analyze the diagnostic measurements provided in the scenario
The measured RSSI decreases drastically from 60 dBm-60\text{ dBm} to 86 dBm-86\text{ dBm} when entering specific exam rooms.
Identifying changes in physical signal power helps isolate Layer 1 radio frequency (RF) propagation issues.
2
Correlate signal power reduction with environmental factors
The signal drops specifically when passing through lead-lined drywall shielding.
Dense materials like metal, lead, and concrete absorb wireless energy, reducing signal amplitude (attenuation).
3
Select the correct physical RF phenomenon
Attenuation/absorption is the primary cause of signal loss across physical barriers.
Other issues like channel overlap or IP addressing do not drop RF signal levels (RSSIRSSI).

Anahtar Kavram

RF Attenuation and Absorption in Wireless Networks
Tahmini Süre:1m 30s
Soru 1543Soru

Match each physical network cabling fault or diagnostic scenario on the left with the most appropriate diagnostic tool or corrective action on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Excessive Near-End Crosstalk (NEXT) measured on a newly terminated Category 6A UTP drop.
High optical attenuation occurring at a localized spot along a fiber optic patch cable route.
Severe signal degradation on an Ethernet link despite passing a basic wiremap continuity test for pin-to-pin conductivity.
Need to trace an unidentified structural copper cable run to its specific port location on a patch panel.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The physical cabling faults match their respective corrective actions and diagnostic tools as follows: Excessive NEXT requires re-terminating the connector with minimal pair untwisting; localized high fiber attenuation is located using an OTDR; split pairs that pass basic continuity require a cable certifier; and tracing an unlabeled copper cable run requires a tone generator with an inductive probe.
Each physical layer issue maps directly to its proper diagnostic tool or remediation practice according to TIA/EIA cabling standards: NEXT errors on copper stems from pair untwisting; fiber loss points require distance reflection analysis via OTDR; split pairs bypass basic continuity checks and require dynamic certifiers; and tracing copper drops requires tonal signal injection.

Adım Adım Çözüm

1
Analyze the copper crosstalk scenario (Excessive NEXT on Cat 6A).
Identify that NEXT is caused by electromagnetic interference between adjacent pairs near the connector, which occurs when wire pairs are untwisted excessively during termination.
Maintaining pair twist up to 0.5 inches (13 mm) of the termination point is required to preserve differential noise cancellation.
2
Analyze the optical fiber attenuation scenario.
Determine that a localized point of high optical loss over a fiber link requires distance-based attenuation measurement, which is the primary function of an OTDR.
An Optical Power Meter (OPM) only measures total end-to-end loss, whereas an OTDR pinpoints the exact location of high-loss events like macrobends.
3
Analyze the pin continuity vs. crosstalk error scenario.
Recognize that a split pair maintains straight-through electrical continuity (pin 1 to pin 1, pin 2 to pin 2) but pairs non-matching wires together, breaking pair twisting benefit.
Basic wiremappers check only DC continuity and fail to detect split pairs; full frequency cable certifiers test NEXT/FEXT performance to identify the error.
4
Analyze the cable identification requirement.
Match the tracing requirement with tone generator and probe tools (toner).
Injecting a tone signal allows non-destructive identification of specific cables in high-density distribution panels.

Anahtar Kavram

Physical Layer Cabling Diagnostics and Tool Selection
Soru 1544Soru

A network technician configures an extended Access Control List (ACL) on a stateless router interface to allow workstations on subnet 10.40.10.0/2410.40.10.0/24 to access an external web application at 203.0.113.80203.0.113.80 over HTTPS (TCP port 443). The technician adds the following outbound rule on the internal interface:

`permit tcp 10.40.10.0 0.0.0.255 host 203.0.113.80 eq 443`

After applying this configuration, client computers cannot successfully connect to the web application. Network captures reveal that outbound TCP SYN packets leave the router, but return traffic is never delivered to the clients. Which of the following ACL modifications will resolve this connectivity issue?

Cevabı ve açıklamayı göster

Cevap: Add an inbound ACL rule on the interface permitting TCP traffic from source 203.0.113.80203.0.113.80 port 443 to destination 10.40.10.0/2410.40.10.0/24 with the established keyword

Cevap

Add an inbound ACL rule on the interface permitting TCP traffic from source host 203.0.113.80203.0.113.80 port 443 to destination subnet 10.40.10.0/2410.40.10.0/24 using the established keyword.
Stateless access control lists evaluate packets individually without tracking connection session states. While outbound requests from internal hosts on 10.40.10.0/2410.40.10.0/24 are allowed by the outbound ACL rule, returning packets from 203.0.113.80:443203.0.113.80:443 are blocked by the implicit deny rule on the inbound interface. Adding an explicit inbound rule that matches TCP source port 443 and includes the `established` keyword permits return traffic (packets with ACK/RST flags set) back to internal clients.

Adım Adım Çözüm

1
Analyze the stateless behavior of standard and extended router ACLs.
Unlike stateful firewalls, stateless router ACLs evaluate each packet individually and do not maintain a state table of active TCP sessions.
Permitting outbound traffic on a stateless interface does not automatically permit the corresponding return traffic.
2
Identify why return traffic from the web server is dropped.
Inbound TCP SYN-ACK packets from 203.0.113.80203.0.113.80 destination-bound for internal clients (10.40.10.0/2410.40.10.0/24) reach the inbound interface, where they encounter the ACL's default implicit deny statement.
All ACLs end with an unwritten implicit deny rule that blocks any traffic not explicitly permitted.
3
Determine the correct ACL rule structure to permit return traffic safely.
An inbound rule matching TCP traffic originating from 203.0.113.80203.0.113.80 port 443 heading to 10.40.10.0/2410.40.10.0/24 with the `established` flag allows returning packets for connections initiated from inside the network.
The `established` keyword checks for set ACK or RST TCP flags, ensuring only reply packets belonging to existing client sessions are allowed inbound.

Anahtar Kavram

Stateless Filtering and Return Traffic ACL Configuration
Soru 1545Soru

Match each network performance metric or monitoring mechanism on the left with its corresponding operational description or primary diagnostic use case on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Jitter
SNMPv3 AuthPriv
IPFIX / Flow Telemetry
Latency

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Jitter pairs with variance in packet arrival delay; SNMPv3 AuthPriv pairs with authenticated and encrypted MIB polling; IPFIX / Flow Telemetry pairs with exporting packet header metadata for flow-level bandwidth analysis; Latency pairs with total round-trip time measurement.
Each metric and monitoring technology aligns directly with its functional definition: Jitter measures arrival delay variation; SNMPv3 AuthPriv enforces both authentication and payload encryption; IPFIX aggregate flow metadata for conversation analysis; and Latency measures time delay (RTT) across a network path.

Adım Adım Çözüm

1
Identify the primary performance characteristics of time-delay metrics.
Latency represents overall round-trip delay, whereas Jitter represents the fluctuation or variation in that delay over time.
Differentiating steady delay from variable delay is critical for diagnosing real-time traffic performance.
2
Distinguish between device management polling protocols and traffic flow telemetry protocols.
SNMPv3 AuthPriv handles encrypted MIB polling, while IPFIX exports flow-level metadata for traffic analysis.
SNMP gathers device status and counter metrics, whereas flow exporter protocols analyze conversation details across network interfaces.

Anahtar Kavram

Network Performance Monitoring Metrics and Management Telemetry Protocol Selection
Soru 1546Soru

A network engineer is troubleshooting an issue where a host server (10.20.10.45/2410.20.10.45/24) cannot reach a database server (172.16.80.12/24172.16.80.12/24) across a multi-router topology containing active Access Control Lists (ACLs). Following the standard CompTIA network troubleshooting methodology, in what sequence should the engineer execute the following diagnostic and remediation steps?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence follows the standard CompTIA methodology: 1. Identify the problem by gathering symptoms and testing basic gateway reachability; 2. Establish a theory of probable cause by analyzing routing and ACL logs; 3. Test the theory by running diagnostic CLI commands such as inspecting access lists; 4. Establish a plan of action and implement the fix by modifying the ACL rules; 5. Verify full system functionality and document the outcome.
The correct sequence adheres strictly to the CompTIA troubleshooting framework: Identify the problem (gathering symptoms and pinging gateway), Establish a theory of probable cause (analyzing traceroute and logs), Test the theory (inspecting ACL rule match counters via CLI), Establish a plan of action and implement the solution (reordering ACL permit/deny statements), and Verify full system functionality while documenting the outcome.

Adım Adım Çözüm

1
Gather symptoms and run baseline reachability checks (ping local gateway and target host).
Establishes scope and confirms the boundaries of the reachability failure.
CompTIA troubleshooting methodology dictates identifying the problem as the first step.
2
Formulate a theory of probable cause based on traceroute output and network topology inspection.
Narrows potential causes to gateway unreachable, missing route, or ACL implicit deny.
Establishing a theory occurs after gathering preliminary diagnostic information.
3
Test the theory using targeted diagnostic commands (`show ip access-lists`).
Confirms the exact point of failure (e.g., traffic matching an unwanted ACL deny statement).
Theory testing must confirm the root cause before any configuration changes are made.
4
Develop a plan of action and modify the ACL configuration on the router.
Remediates the root cause by allowing required traffic through the gateway filter.
Implementation of fixes occurs only after the root cause is confirmed during theory testing.
5
Verify end-to-end connectivity and update documentation.
Ensures complete resolution and prevents regression.
Verification and documentation constitute the final steps of the structured troubleshooting framework.

Anahtar Kavram

CompTIA Structured Network Troubleshooting Methodology applied to Gateway, Routing, and ACL failures
Soru 1547Soru

A network technician is investigating reports that several workstations on a corporate subnet (10.250.12.0/2410.250.12.0/24) are intermittently assigned IP addresses in an unrecognized pool (172.16.99.0/24172.16.99.0/24), causing them to lose connection to internal network resources. Place the following troubleshooting and remediation steps in the correct chronological order from the initial diagnostic step to final verification.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence is: 1) Run `ipconfig /all` on an affected endpoint, 2) Compare the DHCP server IP address against authorized documentation, 3) Query switch MAC address tables to locate the rogue server switch port, 4) Shut down the switch port and enable DHCP Snooping on untrusted ports, 5) Perform `ipconfig /release` and `ipconfig /renew` on client endpoints and verify connectivity.
Following CompTIA's troubleshooting methodology, an engineer must first identify problem symptoms on affected endpoints (`ipconfig /all`). Analyzing the output reveals an unauthorized DHCP server IP address. Next, checking network documentation confirms the server is rogue. The engineer must then locate the rogue hardware by looking up its MAC address in access switch MAC tables. Once located, the engineer disables the rogue server's port and enables DHCP Snooping to prevent unauthorized DHCP offer packets on untrusted switch ports. Finally, affected clients release and renew their IP configurations to receive valid leases from the legitimate server.

Adım Adım Çözüm

1
Identify client-side symptoms using terminal commands
Obtained the anomaly details, specifically that the client DHCP server IP is 172.16.99.254172.16.99.254.
CompTIA troubleshooting methodology dictates establishing the problem by gathering information directly from affected devices first.
2
Evaluate findings against baseline network documentation
Confirmed 172.16.99.254172.16.99.254 is not listed among authorized corporate DHCP servers, confirming a rogue DHCP server.
Distinguishing between authorized network servers and rogue devices requires comparing configuration details against established documentation.
3
Locate the physical source of the rogue service
Mapped the rogue server's MAC address to a specific access port on the switch.
Tracing the MAC address through switch forwarding tables pins down the exact physical location of the rogue hardware.
4
Remediate the immediate vulnerability and implement hardening
The port hosting the rogue device is disabled, and DHCP Snooping is configured to drop unauthorized DHCP offers.
Administrative shutdown contains the issue, and security controls prevent recurrences of rogue DHCP servers on user ports.
5
Restore functionality and verify solution
Workstations obtain valid IP addresses from the legitimate server (10.250.12.0/2410.250.12.0/24) and re-establish gateway connectivity.
Releasing and renewing leases clears invalid network settings and verifies that normal DHCP operations are restored.

Anahtar Kavram

Rogue DHCP Server Identification, Isolation, and DHCP Snooping Mitigation
Tahmini Süre:2m 30s
Soru 1548Soru

A network technician is troubleshooting an issue where a client workstation (10.1.10.5/2410.1.10.5/24) cannot access a web application hosted on a remote server (172.16.20.50/24172.16.20.50/24). Place the following diagnostic and remediation steps in the correct chronological order, adhering to standard CompTIA troubleshooting methodology from initial local verification through resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence is: 1) Ping the local default gateway, 2) Execute traceroute to locate the failing hop, 3) Check the routing table on the failing router, 4) Inspect interface ACLs for filtering rules, and 5) Modify the ACL and perform end-to-end verification.
The correct order follows the standard bottom-up/top-down structured troubleshooting approach: first verify local default gateway connectivity, then use path detection (traceroute) to find the failure point, inspect the routing table on that router, check for restrictive ACL filtering rules, and finally apply the fix and verify end-to-end reachability.

Adım Adım Çözüm

1
Test local subnet gateway connectivity using ping.
Confirms client host network stack and local router interface are operational.
Always test closest local dependencies before diagnosing remote infrastructure.
2
Perform path discovery using traceroute to destination IP 172.16.20.50.
Pinpoints the exact intermediate router hop where traffic ceases to forward.
Narrows down the scope of network devices requiring inspection.
3
Examine the IP routing table on the failing router using `show ip route`.
Verifies whether a valid next-hop or exit interface route exists for 172.16.20.0/24.
Determines if the issue is layer 3 route reachability or packet filtering.
4
Review active ACL entries applied to inbound/outbound interfaces using `show ip access-lists`.
Identifies if traffic matching 10.1.10.5 to 172.16.20.50 is caught by a deny rule or implicit deny.
If routing exists, access control filtering is the next logical root cause to inspect.
5
Apply correct ACL permit statement and verify application connectivity.
Restores full end-to-end functionality and verifies the fix.
Remediates the root cause and verifies complete solution functionality.

Anahtar Kavram

Structured network troubleshooting methodology for routing, default gateways, and ACL filtering.
Tahmini Süre:2m 0s
Soru 1549Soru

A network administrator is deploying a wireless network for a corporate headquarters. Organization policy requires that every employee authenticate using their individual enterprise user credentials against a central authentication server, preventing the operational overhead and security risk of static pre-shared keys. Which wireless security standard and authentication mechanism should the administrator implement to fulfill these security requirements?

Cevabı ve açıklamayı göster

Cevap: WPA3-Enterprise utilizing 802.1X authentication integrated with a central RADIUS server

Cevap

WPA3-Enterprise utilizing 802.1X authentication integrated with a central RADIUS server is the correct implementation.
WPA3-Enterprise uses the IEEE 802.1X port-based network access control standard to pass authentication requests between clients and an enterprise RADIUS server. This allows every user to log in with individual credentials rather than sharing a passphrase.

Adım Adım Çözüm

1
Analyze authentication requirements
Individual user credentials authenticated centrally without shared passphrases.
Security policy explicitly mandates avoiding shared passphrases (pre-shared keys) in favor of unique user credentials.
2
Evaluate wireless security modes
Select WPA3-Enterprise over Personal variants.
Personal modes (WPA2/WPA3-Personal) rely on pre-shared keys (PSK/SAE), while Enterprise modes support 802.1X framework for centralized RADIUS authentication.

Anahtar Kavram

WPA3-Enterprise and 802.1X/RADIUS Authentication
Soru 1550Soru

A network administrator needs to establish out-of-band management access to the text-based command-line interfaces of several managed switches in a remote datacenter rack. The switches lost all primary in-band IP connectivity following a local network configuration error, but their RS-232 serial console ports remain operational. Which device should be deployed in the rack to aggregate these serial connections and provide remote console access over the network?

Cevabı ve açıklamayı göster

Cevap: A terminal server connected to the serial console ports of the network switches

Cevap

A terminal server connected to the serial console ports of the network switches
A terminal server (console server) concentrates multiple RS-232 serial console connections into a single network device, enabling out-of-band administration of switch command-line interfaces even when primary in-band IP network access is completely offline.

Adım Adım Çözüm

1
Identify the management interface type required by the target devices.
The switches require access via their RS-232 serial console ports to reach the text-based command-line interface.
The scenario specifies that all primary in-band IP interfaces are down and command-line access via serial ports is required.
2
Evaluate which hardware device aggregates serial console lines for remote network management.
A terminal server (also called a console server) converts multiple RS-232 serial ports into IP packets, allowing secure Telnet/SSH sessions to connect directly to device console ports over an out-of-band connection.
Terminal servers are specifically designed for out-of-band management of serial devices.

Anahtar Kavram

Out-of-band (OOB) console management using terminal/console servers to access RS-232 serial interfaces during in-band network outages.
Soru 1551Soru

A network technician is installing a new VoIP phone at a user's desk. The technician must trace an unlabeled UTP cable run from the office wall jack back to its corresponding port on the patch panel in the equipment closet. Once identified, the technician must also confirm that the switch port is actively supplying electrical power over the ethernet wiring to power the phone. Which TWO of the following tools should the technician use to accomplish these tasks? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Tone generator and probe; PoE tester

Cevap

The correct tools to select are the tone generator and probe (to trace the physical cable path from the desk wall jack to the patch panel) and the PoE tester (to detect and verify electric power delivery on the twisted-pair switch port).
Tracing an unlabelled copper run requires emitting an electrical tone via a tone generator at the wall jack and listening for that signal with an inductive probe at the patch panel. Confirming that power is being delivered to the VoIP phone requires a PoE tester to measure active DC power on the Ethernet port.

Adım Adım Çözüm

1
Identify the physical cable tracing tool.
Select the tone generator and probe, which places a tone signal on unshielded twisted-pair (UTP) copper wire and detects it audibly at the patch panel.
Tracing physical copper cable runs across walls and ceilings requires an inductive tone probe.
2
Identify the power verification tool.
Select the PoE tester, which verifies voltage standards (such as 802.3af/at/bt) supplied by the switch port.
VoIP phones rely on Power over Ethernet (PoE) supplied across the copper Ethernet conductors.

Anahtar Kavram

Utilizing basic hardware testers for copper cable identification and Power over Ethernet (PoE) verification.
Soru 1552Soru

A network security analyst observes anomalous traffic on an internal enterprise subnet. When an end user accidentally mistypes an internal file server hostname, packet logs show an unauthorized host on the local broadcast domain immediately responding to the link-local multicast request before the DNS query completes, prompting the user's workstation to attempt authentication. Which of the following attack vectors is occurring?

Cevabı ve açıklamayı göster

Cevap: LLMNR/NBT-NS poisoning

Cevap

LLMNR/NBT-NS poisoning
LLMNR and NBT-NS poisoning exploits the fallback behavior of operating systems when standard DNS lookup fails (such as when a hostname is mistyped). An attacker listening on the local broadcast domain answers the multicast query claiming to be the target resource, tricking the client into sending authentication hashes.

Adım Adım Çözüm

1
Analyze the observed attack mechanism
Identified that an unauthorized host is responding to link-local multicast requests generated when standard DNS name resolution fails.
Windows operating systems fall back to LLMNR and NBT-NS broadcast/multicast protocols on the local link when a hostname cannot be resolved via DNS.
2
Distinguish between Layer 2/3 address spoofing and multicast name resolution spoofing
The malicious host actively claims ownership of the mistyped hostname during the link-local fallback phase to capture authentication hashes.
This behavior specifically characterizes LLMNR/NBT-NS poisoning, contrasting with ARP spoofing (Layer 2 IP-to-MAC mapping) or DNS server record manipulation.

Anahtar Kavram

LLMNR and NBT-NS Poisoning
Tahmini Süre:1m 30s
Soru 1553Soru

A network engineer is conducting diagnostic procedures across an enterprise network suffering from physical and application-layer anomalies. Match each specific physical or protocol troubleshooting scenario to the most appropriate hardware testing tool or packet analyzer capability.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Pinpointing an impedance mismatch caused by a severe bend or crimp at an exact distance along a 70-meter Category 6A UTP cable run.
Locating a high-loss dirty fusion splice along a 10 km single-mode optical fiber link by evaluating Rayleigh backscatter traces.
Identifying unauthorized rogue DHCP servers on a VLAN by capturing and inspecting Bootstrap Protocol Option 53 message types.
Validating the internal signal path and physical hardware functionality of a 10GBASE-SR SFP+ transceiver port without an active network link partner.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Matching pairings: Pinpointing copper impedance mismatches maps to Copper Time-Domain Reflectometer (TDR); Locating fiber fusion splice attenuation maps to Optical Time-Domain Reflectometer (OTDR); Inspecting DHCP Option 53 fields maps to Protocol Packet Analyzer; Validating SFP+ transceiver internal hardware maps to Hardware Loopback Plug.
Each diagnostic scenario maps to a specialized tool based on the underlying medium and OSI layer. Copper TDR evaluates electrical impedance reflection on metallic cables. Fiber OTDR analyzes light backscatter along optical strands. Packet analyzers decode packet payload structures such as DHCP options. Loopback plugs reflect local transmission back to reception for hardware verification.

Adım Adım Çözüm

1
Analyze copper cabling distance-to-fault requirements.
Identify that TDR uses electrical signal reflection timing to locate physical cable anomalies on metallic conductors.
Impedance shifts cause partial pulse reflections measured by a TDR.
2
Analyze optical fiber reflective events and attenuation measurement requirements.
Identify that OTDR measures Rayleigh backscattering and Fresnel reflections to map fiber splices and optical breaks.
Optical fiber requires light pulse reflections rather than electrical signals.
3
Determine Layer 7 protocol analysis requirements for rogue server detection.
Select a protocol packet analyzer to filter and decode DHCP packet headers and Option payload attributes.
Hardware line testers cannot inspect protocol payload structures or frame headers.
4
Evaluate port-level hardware isolation diagnostics.
Select a hardware loopback plug to mirror Tx to Rx on the local transceiver.
Testing a NIC or transceiver without a remote partner requires routing local output back into local input.

Anahtar Kavram

Selecting proper physical layer hardware diagnostic tools and packet analyzers based on medium type and protocol troubleshooting requirements.
Tahmini Süre:2m 0s
Soru 1554Soru

A network technician is troubleshooting an enterprise building interconnect where a newly provisioned multi-mode fiber link experiences high frame loss, while workstation clients on the attached Ethernet segment fail to receive automatic IP configurations. Which of the following diagnostic tools or analyzer filters should the technician utilize to isolate these physical and application layer issues? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: An Optical Time-Domain Reflectometer (OTDR) to identify attenuation, macrobends, and distance to optical breaks along the fiber cable run.; A packet analyzer filter configured for UDP ports 67 and 68 to inspect DHCP request and acknowledgment frames.

Cevap

The technician should use an Optical Time-Domain Reflectometer (OTDR) to diagnose the fiber link and apply a packet analyzer filter for UDP ports 67 and 68 to capture DHCP traffic.
An OTDR is specifically designed to locate physical anomalies and measure signal attenuation in optical fiber links. Furthermore, DHCP relies on UDP (ports 67 and 68), so filtering for these UDP ports allows the technician to capture and analyze automatic IP address assignment traffic.

Adım Adım Çözüm

1
Analyze the physical layer diagnostic requirement for the multi-mode fiber connection.
Identify that testing optical fiber cabling for breaks, loss, or bends requires an Optical Time-Domain Reflectometer (OTDR), as copper TDR tools cannot test optical media.
OTDRs measure light backscatter to pinpoint distance-to-fault on fiber strands.
2
Analyze the protocol analyzer requirement for client IP address configuration failures.
Identify DHCP as the underlying protocol for automatic IP configuration and recall that DHCP uses UDP ports 67 and 68.
Setting the packet capture filter to UDP ports 67 and 68 isolates DHCP Discover/Offer/Request/ACK traffic.

Anahtar Kavram

Selecting appropriate hardware testers (OTDR vs. TDR) for fiber cabling and filtering protocol traffic (DHCP over UDP 67/68) using packet analyzers.
Soru 1555Soru

A network administrator is investigating high frame error rates and severe throughput degradation on a newly commissioned Category 6 UTP cable run connecting a desktop computer to an enterprise switch. A basic continuity cable tester confirms that all eight conductors are connected pin-for-pin (111 \rightarrow 1, 222 \rightarrow 2, etc.) on both ends without any opens or shorts. However, when high-bandwidth data transmission occurs, extreme Near-End Crosstalk (NEXT) occurs. Which wiring fault is present, and which diagnostic capability is required to detect it?

Cevabı ve açıklamayı göster

Cevap: A split pair condition, which requires a cable certifier/analyzer capable of checking pair geometry and frequency-dependent crosstalk rather than basic DC continuity.

Cevap

A split pair condition, which requires a cable certifier/analyzer capable of checking pair geometry and frequency-dependent crosstalk rather than basic DC continuity.
The correct option correctly identifies a split pair wiring fault. In a split pair, pin-to-pin electrical continuity is maintained, so simple DC wiremap testers report the cable as correctly wired. However, because the physical twists intended for noise cancellation are split across different signal paths, high-frequency electromagnetic interference (crosstalk) ruins high-speed data transmission. Only a cable certifier evaluating Near-End Crosstalk (NEXT) at high frequencies can pinpoint this condition.

Adım Adım Çözüm

1
Analyze the physical layer symptoms and initial test results.
The basic wiremap/continuity tester confirms 1-to-1 electrical continuity on all 8 pins, ruling out open circuits, short circuits, or standard pin transposition.
Basic continuity testers use direct current (DC) signals to verify electrical paths from end to end.
2
Evaluate why Near-End Crosstalk (NEXT) occurs under load despite DC continuity passing.
Identified that twisted pair noise cancellation relies on differential signaling across tightly twisted wire pairs.
If a conductor from one pair is accidentally swapped with a conductor from another pair (split pair), DC continuity remains intact, but the magnetic field cancellation fails, introducing severe electromagnetic interference (crosstalk) when AC data signals are applied.
3
Select the appropriate diagnostic hardware tester.
A high-frequency cable certifier/analyzer must be used to perform RF crosstalk testing and detect split pair anomalies.
Simple continuity testers or tone probes cannot detect split pairs because they do not evaluate high-frequency magnetic coupling between pairs.

Anahtar Kavram

Distinguishing between simple DC continuity testing and high-frequency RF cable certifier analysis to detect split pair faults.
Soru 1556Soru

A network technician is investigating an issue where wireless VoIP handsets drop calls when roaming between access points in a newly constructed distribution center. The technician established a theory that 802.11r fast transition roaming was omitted from the new access point WLAN profile, tested this theory in a staging environment, and confirmed the cause. According to the CompTIA troubleshooting methodology, which of the following tasks should the technician perform NEXT? (Select TWO).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Develop a detailed plan of action to modify the wireless controller profile to enable fast transition roaming.; Identify potential side effects and operational impacts on legacy wireless clients prior to executing the change.

Cevap

The technician should develop a detailed plan of action to modify the wireless controller profile and identify potential side effects on legacy wireless clients.
Once a theory of probable cause has been tested and confirmed (Step 3), the technician must proceed to Step 4 of the CompTIA troubleshooting methodology: Establish a plan of action to resolve the problem and identify potential effects. Developing a detailed configuration plan for the wireless controller and analyzing potential impacts on legacy devices represent the two core responsibilities of this step.

Adım Adım Çözüm

1
Identify current phase in CompTIA 7-step methodology
The technician has completed Step 3 (Test the theory to determine cause) by confirming the theory in a test environment.
Determining the current phase dictates what phase must logically follow.
2
Determine the next sequential phase
Step 4 is 'Establish a plan of action to resolve the problem and identify potential effects'.
CompTIA methodology strictly follows: 1. Identify problem → 2. Establish theory → 3. Test theory → 4. Plan of action & identify potential effects → 5. Implement solution → 6. Verify system functionality → 7. Document findings.
3
Select matching actions for Step 4
Formulating the deployment plan for enabling 802.11r and analyzing how legacy devices might react are both components of Step 4.
Planning changes and assessing risk/effects must occur before deploying changes to live infrastructure.

Anahtar Kavram

CompTIA Troubleshooting Methodology - Plan of Action and Identifying Potential Effects
Tahmini Süre:1m 30s
Soru 1557Soru

A network technician is troubleshooting an intermittent network connection on a 75-meter Category 6 horizontal copper cable run servicing an enterprise workstation. A basic wiremapper confirms that all eight conductors show proper pin-to-pin continuity and standard T568B alignment with no open or short circuits. However, when high-bandwidth file transfers occur, the switch port interface logs a rapidly increasing counter of Cyclic Redundancy Check (CRC) errors and late collisions. Which of the following diagnostic tools should the technician use to pinpoint the precise location and cause of signal degradation along the hidden cable run?

Cevabı ve açıklamayı göster

Cevap: Use a Time-Domain Reflectometer (TDR) or advanced cable certifier to analyze signal attenuation, return loss, and distance to impedance mismatches.

Cevap

The technician should use a Time-Domain Reflectometer (TDR) or cable certifier to measure high-frequency performance metrics such as return loss, attenuation, and distance to impedance anomalies.
A Time-Domain Reflectometer (TDR) or full cable certifier transmits electrical pulses down a cable run and measures the time and amplitude of reflections caused by impedance changes. This enables pinpointing the exact location of physical damage, tight bends, split pairs, or excessive Near-End Crosstalk (NEXT) that cause CRC errors under load, even when basic continuity tests pass.

Adım Adım Çözüm

1
Analyze the symptoms and preliminary test results.
The cable passes simple DC continuity tests (8/8 pins, standard T568B wiremap), but produces CRC errors under high network traffic load.
Basic continuity tools verify physical conductor connections but cannot evaluate high-frequency transmission characteristics such as crosstalk, attenuation, or return loss.
2
Evaluate required diagnostic capabilities to locate the fault.
The tool must send high-frequency signal pulses and analyze reflections returned from physical anomalies along the 75-meter cable run.
CRC errors under load indicate dynamic physical layer defects (e.g., sharp bend radius, pinched jacket, crushed internal pair twist) causing impedance shifts.
3
Select the appropriate diagnostic testing device.
A Time-Domain Reflectometer (TDR) or comprehensive cable certifier measures reflection timing and magnitude to identify the exact distance to impedance anomalies and high-frequency noise.
TDR technology calculates distance to cable defects by analyzing signal reflections caused by impedance changes.

Anahtar Kavram

TDR and Cable Certification Testing for High-Frequency Physical Layer Faults
Tahmini Süre:2m 0s
Soru 1558Soru

A network administrator is securing a newly deployed Layer 3 access switch prior to production deployment. The security policy mandates encrypted remote monitoring, protection against unauthorized network infrastructure footprinting, and secure management protocol usage. Which of the following hardening configurations should the administrator apply to meet these security requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure SNMPv3 with authPriv security level to enforce user-based authentication and payload encryption.; Disable link-layer discovery protocols such as CDP and LLDP on interfaces connected to untrusted user devices.

Cevap

The administrator should configure SNMPv3 with authPriv for encrypted monitoring and disable discovery protocols (CDP/LLDP) on untrusted interfaces to reduce infrastructure exposure.
Configuring SNMPv3 authPriv secures network monitoring with cryptographic authentication and encryption. Disabling discovery protocols (CDP/LLDP) on untrusted ports prevents external reconnaissance and unauthorized network topology discovery.

Adım Adım Çözüm

1
Identify the management monitoring requirement.
Selecting SNMPv3 authPriv satisfies the mandate for encrypted telemetry and authenticated access.
Legacy protocols like SNMPv1/v2c send community strings in cleartext and lack privacy protections.
2
Identify the infrastructure footprinting prevention requirement.
Disabling CDP/LLDP on user-facing edge ports blocks neighbor information broadcast.
Discovery protocols share detailed network device capabilities, system names, and IP addresses with connected endpoints.

Anahtar Kavram

Device Hardening & Management Plane Security
Soru 1559Soru

Match each command-line troubleshooting utility syntax with its precise diagnostic objective during complex network failure isolation.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

netstat -ano
pathping -n 192.168.1.254
dig +trace example.com
arp -a

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Matching summary: `netstat -ano` correlates active network sockets to process IDs; `pathping -n 192.168.1.254` measures path statistics over time while suppressing intermediate host name lookups; `dig +trace example.com` tracks iterative DNS delegation from root to authoritative servers; and `arp -a` views local Layer 2 MAC-to-IP address resolution bindings.
Each command-line utility is correctly paired to its specific diagnostic layer and functional flag set: `netstat -ano` correlates network ports and sockets to process IDs; `pathping -n` computes packet loss across network hops over time without waiting for reverse DNS lookups; `dig +trace` follows the hierarchical DNS query path from root name servers; and `arp -a` displays the local host's hardware address resolution table.

Adım Adım Çözüm

1
Analyze transport layer and process socket binding utilities.
Identify that `netstat -ano` displays numerical listening/active ports alongside process IDs (PIDs).
The `-o` flag is uniquely responsible for outputting owning process IDs, while `-n` disables name resolution.
2
Analyze path statistics utilities combining reachability and hop latency.
Identify that `pathping` calculates packet loss per hop over time, and `-n` speeds execution by omitting hostname lookups.
Pathping sends multiple pings to each hop over a measurement interval to isolate congested or failing routers.
3
Analyze hierarchical DNS troubleshooting tools.
Identify that `dig +trace` performs iterative DNS resolution starting from root servers (`.`).
The `+trace` flag disables recursive reliance on local resolvers and steps through the DNS hierarchy directly.
4
Analyze Layer 2 mapping commands.
Identify that `arp -a` inspects the ARP table containing IP-to-MAC physical mappings.
ARP operates between Layer 2 and Layer 3 to resolve IPv4 addresses to local network interface hardware addresses.

Anahtar Kavram

Command-Line Diagnostic Utilities, Syntax Switches, and OSI Layer Operational Scopes
Soru 1560Soru

Match each remote access technology or management tool on the left with the operational scenario on the right for which it serves as the most appropriate solution.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Direct Serial Console Cable (Rollover)
Switched Power Distribution Unit (PDU)
Cellular-enabled Terminal Server
VNC over SSH Tunnel

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Direct Serial Console Cable matches initial CLI configuration on unconfigured devices. Switched PDU matches hard power cycling frozen appliances. Cellular-enabled Terminal Server matches remote CLI console access during primary WAN link failure. VNC over SSH Tunnel matches secure remote graphical desktop access.
Each management solution directly aligns with the operational constraints: Direct serial console works on unconfigured devices with no IP address; switched PDUs control power outlets for frozen hardware; cellular terminal servers provide an independent wireless OOB path during primary link outages; and VNC tunneled over SSH provides secure encrypted remote GUI access.

Adım Adım Çözüm

1
Analyze the management requirements for unconfigured network devices.
Unconfigured devices lack IP addresses, requiring direct physical serial console connectivity.
Serial connections bypass lower-layer networking requirements.
2
Evaluate hardware control options for unresponsive devices.
Devices with locked operating systems require physical electrical power control provided by switched PDUs.
In-band or serial management commands cannot execute if the host operating system is frozen.
3
Identify backup out-of-band communication paths for branch sites.
Cellular terminal servers aggregate console ports and route management traffic over cellular networks when primary landline WAN links drop.
Maintains out-of-band management independent of primary transport infrastructure.
4
Determine secure graphical remote desktop access protocols.
Encapsulating unencrypted VNC traffic inside an encrypted SSH tunnel secures desktop graphical sessions over untrusted networks.
Combines VNC graphical interface functionality with SSH security.

Anahtar Kavram

Selecting appropriate in-band, out-of-band, physical, and remote management technologies based on network health, device status, and security constraints.
ÖncekiSayfa 78 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin