Examkin

Tüm alıştırma soruları

2237 soru

Tüm türler2,237Çoktan seçmeli1,150Çoklu seçim488Sayısal30Eşleştirme350Sıralama201Kısa cevap18
Soru 1841Soru →

A network engineer deploys four switches in a redundant enterprise topology running standard IEEE 802.1D Spanning Tree Protocol. The switches are configured with the following bridge priorities and MAC addresses:

• Switch-Alpha: Priority 4096, MAC 00:11:22:33:44:55
• Switch-Beta: Priority 8192, MAC 00:11:22:33:44:AA
• Switch-Gamma: Priority 4096, MAC 00:11:22:33:44:11
• Switch-Delta: Priority 32768, MAC 00:11:22:33:44:00

Which switch will be elected as the Root Bridge for this STP domain?

Cevabı ve açıklamayı göster

Cevap: Switch-Gamma

Cevap

Switch-Gamma will be elected as the Root Bridge because it shares the lowest bridge priority value (4096) and has the lowest MAC address among the tied switches.
In Spanning Tree Protocol (STP), the Root Bridge election evaluates the Bridge Identifier (BID), which consists of a 2-byte Bridge Priority and a 6-byte MAC address. The switch with the lowest numerical BID becomes the Root Bridge. Priority is evaluated first; Switch-Alpha and Switch-Gamma tie with the lowest priority of 4096. Evaluating the MAC address as the tie-breaker reveals that Switch-Gamma's MAC address (00:11:22:33:44:11) is lower than Switch-Alpha's MAC address (00:11:22:33:44:55), making Switch-Gamma the Root Bridge.

Adım Adım Çözüm

1
Evaluate the Bridge Priority values of all switches in the STP domain.
Switch-Alpha (4096) and Switch-Gamma (4096) have the lowest priority values, while Switch-Beta (8192) and Switch-Delta (32768) are eliminated.
STP elects the switch with the lowest numerical Bridge ID (Priority + MAC address). Priority is evaluated first.
2
Compare the MAC addresses of the switches tied for the lowest priority value.
Switch-Gamma's MAC address (00:11:22:33:44:11) is lower than Switch-Alpha's MAC address (00:11:22:33:44:55).
When priority values are identical, the switch with the lowest MAC address serves as the tie-breaker to determine the Root Bridge.

Anahtar Kavram

STP Root Bridge Election Mechanics
Soru 1842Soru →

A network technician suspects that an SFP transceiver port on a core switch has a faulty internal transmitter or receiver circuit. The technician wants to verify whether the physical port is capable of transmitting and receiving frames without connecting the switch to another active network device or external patch cable. Which hardware tool should the technician insert into the port to perform this isolation test?

Cevabı ve açıklamayı göster

Cevap: Loopback plug

Cevap

The correct tool to test a switch port's internal transmit and receive functionality in isolation is a loopback plug.
A loopback plug routes transmitted signals directly back into the receiving circuits of the local port. This allows network technicians to test whether the transceiver and port hardware are functional without relying on external cables or remote switches.

Adım Adım Çözüm

1
Identify the diagnostic requirement
The requirement is to isolate and test local interface transmit/receive hardware functions without using remote devices or cabling.
Determining hardware port integrity requires bypassing external network factors.
2
Evaluate hardware diagnostic tools against physical layer isolation capabilities
A loopback plug routes outgoing signals from the transmit pin directly into the receive pin on the exact same port.
This establishes a physical link state and enables interface self-testing.
3
Select the correct diagnostic tool
The loopback plug provides immediate feedback on whether the transceiver port electronics are functional.
Tools like certifiers or tone probes test external cabling, not internal port loopback circuitry.

Anahtar Kavram

Physical Port Diagnostics and Loopback Testing
Soru 1843Soru →

An enterprise database server hosting mission-critical transactional services suffered a storage array failure on Thursday at 2:15 PM. The organization's backup policy includes a full system backup executed every Sunday at 11:00 PM, daily incremental backups performed Monday through Wednesday at 11:00 PM, and hourly transaction log backups captured at the top of every hour. Arrange the recovery actions in the correct sequential order to restore the database to the point of failure with zero data loss while minimizing operational downtime.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct recovery sequence is: 1) Restore the Sunday night full backup, 2) Apply the Monday, Tuesday, and Wednesday incremental backups in chronological order, 3) Replay the Thursday hourly transaction log backups up to 2:00 PM, and 4) Verify database integrity and switch network service endpoints.
Point-in-time restoration across complex backup schemes follows a strict hierarchy: establishing the initial full backup state first, applying every intermediate incremental backup chronologically without skipping any set, replaying granular transaction logs up to the time of disruption, and finally conducting verification before cutting over active network services.

Adım Adım Çözüm

1
Restore the baseline full database backup taken on Sunday night.
The database structure and base data state are established as of Sunday 11:00 PM.
Differential or incremental delta applications require a valid full backup foundation.
2
Sequentially restore each daily incremental backup from Monday, Tuesday, and Wednesday.
The database state is updated to Wednesday 11:00 PM.
Unlike differential backups (which require only the last backup set), incremental backups depend on every preceding incremental file in the chain.
3
Replay the hourly transaction logs up to the 2:00 PM interval.
Transactions recorded between Wednesday 11:00 PM and Thursday 2:00 PM are committed.
This recovers all committed transactions right up to the time of failure (2:15 PM) to satisfy point-in-time recovery without loss.
4
Execute database consistency checks (DBCC) and update DNS/load balancer routing.
Application services resume normal operations against the validated database.
Network traffic must remain disconnected during log application to avoid race conditions or dirty reads.

Anahtar Kavram

Data Recovery Sequence for Full, Incremental, and Transaction Log Backups
Soru 1844Soru →

A network technician is inspecting a newly installed Category 6A copper link between a patch panel and an end-user wall outlet that fails to negotiate a 10Gbps connection and frequently drops packets. A cable certifier report indicates a wire map failure with an open circuit on pins 4 and 5, along with severe Near-End Crosstalk (NEXT) on pairs 1-2 and 3-6. Which of the following physical layer conditions are the most likely causes of these test results? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Excessive untwisting of wire pairs near the patch panel punch-down block termination point; An unseated conductor or incomplete crimp on pins 4 and 5 inside the modular connector

Cevap

The correct physical layer causes are excessive untwisting of wire pairs near the termination point and an unseated conductor on pins 4 and 5.
Excessive untwisting of wire pairs removes the inherent noise cancellation of twisted-pair media, inducing high NEXT interference. In addition, an open reading on specific pins indicates an incomplete pin crimp or unseated conductor preventing physical continuity.

Adım Adım Çözüm

1
Analyze the cause of Near-End Crosstalk (NEXT) failure.
Excessive untwisting of pair conductors near termination points degrades inductive noise cancellation.
Maintaining precise pair twists close to the punch-down or modular plug is essential for differential signal noise rejection.
2
Analyze the cause of the wire map open failure on pins 4 and 5.
Identifies an electrical open circuit at pin positions 4 and 5.
A poor pin crimp or unseated wire prevents electrical contact between the conductor and the jack pin.

Anahtar Kavram

Physical layer copper cable troubleshooting, crosstalk mitigation, and wire map diagnostics
Tahmini Süre:1m 30s
Soru 1845Soru →

Match each wireless propagation concept or deployment parameter on the left with its corresponding description or operational impact on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Fresnel zone clearance
Antenna gain
Polarization alignment
RF absorption

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Fresnel zone clearance matches maintaining an unobstructed elliptical RF boundary between wireless bridge endpoints to avoid signal degradation. Antenna gain matches increasing signal strength in a focused direction without raising total transmitter RF power output. Polarization alignment matches ensuring maximum signal transfer by orienting transmitting and receiving antennas along the same spatial plane. RF absorption matches attenuating RF signal amplitude as wave energy passes through dense physical obstacles like reinforced concrete.
Fresnel zone clearance involves maintaining an unobstructed elliptical path between point-to-point wireless nodes to avoid signal degradation from phase cancellation. Antenna gain describes focusing RF energy into specific beam patterns without altering actual transmitter power output. Polarization alignment requires aligning transmitting and receiving antenna vectors along the same axis to maximize received signal quality. RF absorption describes the attenuation of radio waves as they pass through dense physical obstructions such as concrete walls.

Adım Adım Çözüm

1
Identify the definition and requirement for Fresnel zone clearance in wireless deployments.
Matches maintaining an unobstructed elliptical boundary between wireless bridge endpoints.
Physical obstacles inside the Fresnel zone cause reflection and phase cancellation that weaken signal strength.
2
Identify the physical behavior of antenna gain.
Matches increasing signal strength in a focused direction without raising transmitter output power.
Antennas achieve gain passively by directing radiated energy into narrowed beams rather than generating additional electrical energy.
3
Determine the principle of polarization alignment.
Matches ensuring maximum signal transfer by orienting transmitting and receiving antennas along the same spatial plane.
Mismatched antenna polarization (e.g., vertical vs horizontal) causes significant attenuation at the receiver.
4
Identify the mechanism of RF absorption in indoor/outdoor environments.
Matches attenuating RF signal amplitude as wave energy passes through dense physical obstacles like reinforced concrete.
Dense structural materials absorb RF energy, converting it into heat and attenuating signal propagation.

Anahtar Kavram

Wireless RF propagation characteristics and antenna deployment principles
Soru 1846Soru →

A network administrator is troubleshooting various Layer 2 switching and VLAN issues across enterprise access switches. Match each observed diagnostic log output or physical interface condition to its most likely underlying root cause.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Syslog displays repeated `%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet0/1` notifications.
Interface counters report high counts of late collisions and FCS errors on a full-duplex configured switch port.
Traffic for VLAN 50 is dropped across the switch-to-switch uplink despite the 802.1Q trunk state showing active.
An access port connected to a host continuously transitions into an err-disabled state shortly after link-up.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Each Layer 2 symptom matches its specific root cause: Native VLAN Mismatch log pairs with mismatched native VLAN IDs on opposing trunk ends; Late collisions with full-duplex pair with a duplex mismatch; VLAN traffic dropping across an active trunk pairs with missing VLAN from the allowed list; Err-disabled state on an access port pairs with BPDU Guard detecting unauthorized BPDUs.
Each diagnostic log or interface status correlates directly to its layer 2 switching root cause. CDP native VLAN mismatch indicates unequal native VLAN IDs. Late collisions on full-duplex interfaces indicate a duplex mismatch with a half-duplex partner. Dropped traffic for a single VLAN across a functional trunk indicates an incomplete allowed VLAN list. An err-disabled host port upon link-up indicates BPDU Guard protective action against incoming switch frame BPDUs.

Adım Adım Çözüm

1
Analyze syslog log `%CDP-4-NATIVE_VLAN_MISMATCH`.
CDP detects disparate native VLAN configurations between the local interface and remote neighbor.
802.1Q trunks must agree on the native VLAN number to prevent cross-VLAN traffic leaking.
2
Examine interface counter errors reporting late collisions.
Identifies duplex mismatch where one end is configured full-duplex and the connected end is half-duplex.
Full-duplex ports do not check collision domains, while half-duplex hosts retransmit late after 64 bytes.
3
Evaluate missing VLAN connectivity over active trunk link.
Determines VLAN 50 is omitted from `switchport trunk allowed vlan` configuration.
Trunks prune frames belonging to VLANs not explicitly permitted in their allowed list.
4
Investigate err-disabled port state on host access interface.
Confirms BPDU Guard trigger due to incoming BPDUs from an unauthorized switch or device.
BPDU Guard disables access ports upon BPDU reception to safeguard STP topology integrity.

Anahtar Kavram

Troubleshooting VLAN, Trunking, and Switching Issues
Soru 1847Soru →

An enterprise network architect is designing a business continuity and disaster recovery strategy for a mission-critical transaction platform. The Business Impact Analysis (BIA) specifies a Maximum Tolerable Downtime (MTD) of 4 hours and a Recovery Point Objective (RPO) of 15 minutes. High capital expenditure constraints prevent deploying an active-active, fully mirrored secondary data center. Which TWO of the following technical controls should be implemented to satisfy both the recovery objectives and operational constraints? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Deploying a warm recovery site equipped with pre-provisioned core networking equipment and server hardware capable of being brought online within 2 hours; Configuring asynchronous block-level storage replication across a dedicated WAN link scheduled at 10-minute intervals

Cevap

The optimal solution pairs a warm recovery site ready within 2 hours with asynchronous storage replication scheduled at 10-minute intervals to satisfy both the 4-hour recovery time and 15-minute data loss constraints.
Deploying a warm recovery site pre-stocked with essential hardware allows systems to become operational within 2 hours, well within the 4-hour Maximum Tolerable Downtime without the excessive cost of an active-active hot site. Asynchronous storage replication at 10-minute intervals ensures that no more than 10 minutes of transaction data is lost during a disruption, successfully satisfying the 15-minute Recovery Point Objective.

Adım Adım Çözüm

1
Evaluate the Maximum Tolerable Downtime (MTD) of 4 hours against recovery site operational readiness models.
A warm site provides pre-installed infrastructure capable of launching within 2 hours, comfortably meeting the 4-hour limit while avoiding the budget impact of a mirrored active-active site. A cold site takes days to procure equipment.
Recovery site readiness must align with RTO and MTD parameters while observing capital expenditure boundaries.
2
Evaluate the Recovery Point Objective (RPO) target of 15 minutes against backup and replication mechanisms.
Asynchronous block-level replication scheduled every 10 minutes limits maximum potential data loss to 10 minutes, satisfying the 15-minute target. Daily differential backups risk up to 24 hours of data loss.
Replication intervals must be equal to or shorter than the specified RPO window.
3
Verify network gateway high-availability design integrity.
Network hosts must utilize redundant virtual gateway IP addressing (FHRP) rather than single physical interface addresses to ensure traffic can re-route automatically during failover.
Static physical interface configurations introduce single points of failure that obstruct failover execution.

Anahtar Kavram

Disaster Recovery Planning: Aligning RTO/RPO Metrics with Recovery Site Selection and Data Replication Controls
Tahmini Süre:2m 30s
Soru 1848Soru →

Match each network attack type to the technical indicator or mechanism that best characterizes its execution.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

VLAN Hopping (Double Tagging)
ARP Cache Poisoning
DNS Amplification
Deauthentication Attack

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

VLAN Hopping (Double Tagging) pairs with transmitting nested 802.1Q headers; ARP Cache Poisoning pairs with sending unsolicited gratuitous ARP replies; DNS Amplification pairs with leveraging open recursive resolvers and spoofed UDP source addresses; Deauthentication Attack pairs with broadcasting unencrypted wireless 802.11 management frames.
Each attack type matches its distinct operational layer and technique: VLAN Hopping uses double 802.1Q tags over Ethernet switches; ARP Poisoning updates host caches using forged Layer 2 gratuitous messages; DNS Amplification leverages UDP spoofing to reflect enlarged DNS payloads; and Deauthentication relies on spoofed 802.11 wireless management disassociation frames.

Adım Adım Çözüm

1
Analyze VLAN Hopping mechanisms
Identified double tagging using stacked 802.1Q tags to send traffic across isolated VLAN boundaries.
Switches strip the outer native tag, allowing the secondary tag to be forwarded to a target VLAN.
2
Analyze ARP Cache Poisoning mechanisms
Identified gratuitous ARP packet generation mapping targeted IPv4 addresses to malicious MAC addresses.
Hosts accept unsolicited ARP replies and update their local cache without verifying existing mappings.
3
Analyze DNS Amplification mechanisms
Identified reflection and payload magnification using spoofed UDP requests targeting open recursive DNS servers.
UDP lacks handshakes, allowing source IP spoofing, and large DNS lookup records return significantly larger payloads to the victim.
4
Analyze Deauthentication Attack mechanisms
Identified spoofed 802.11 management disassociation frames.
Legacy 802.11 management frames are sent unencrypted and without authentication, allowing attackers to disconnect station clients.

Anahtar Kavram

Classification of Common Network Attack Types and Vectors
Soru 1849Soru →

A network administrator is troubleshooting an issue where external email servers are unable to deliver messages to `example.com`. The administrator executes a DNS query tool to check the domain's mail configuration and receives the following output:

$ dig MX example.com +noall +answer
example.com. 3600 IN MX 10 mail.example.com.

When sending test emails, remote mail servers report a host resolution failure when attempting to reach `mail.example.com`.

Which of the following DNS resource records is missing from the authoritative zone file for `example.com`?

Cevabı ve açıklamayı göster

Cevap: An A record mapping mail.example.com to its corresponding IPv4 address

Cevap

An A record mapping mail.example.com to its corresponding IPv4 address
The MX (Mail Exchanger) record returns the hostname mail.example.com as the designated mail server for the domain. However, MX records do not contain IP addresses. For mail servers to establish a TCP connection, the DNS zone must contain a forward lookup host record (an A record for IPv4 or an AAAA record for IPv6) that maps mail.example.com to its IP address.

Adım Adım Çözüm

1
Analyze the dig output
The MX record correctly points traffic for example.com to the host mail.example.com with priority 10.
An MX (Mail Exchanger) record maps a domain name to a fully qualified domain name (FQDN) of a mail server, not directly to an IP address.
2
Identify the cause of host resolution failure
Connecting servers cannot resolve the hostname mail.example.com into a Layer 3 IP address.
Without an authoritative host address record (A record for IPv4 or AAAA for IPv6) for mail.example.com, client queries for the mail server's IP address fail.
3
Determine the required record type to fix the issue
Add an A record mapping mail.example.com to its public IPv4 address in the zone file.
An A record provides the IPv4 address mapping required for clients to open a TCP connection to the mail server.

Anahtar Kavram

DNS MX Record and Host A Record Dependency
Soru 1850Soru →

Match each command-line diagnostic tool invocation or output artifact to its precise troubleshooting function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

netstat -an output indicating local socket bindings and TIME_WAIT states
dig +trace example.com command execution
arp -a cache display revealing a single MAC address mapped to two distinct IP addresses
pathping -q 10 192.168.1.1 command execution

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

netstat -an matches inspecting active TCP connection states without DNS delays; dig +trace example.com matches performing a top-down iterative DNS resolution path traversal; arp -a with duplicate MAC mappings matches detecting Layer 2 duplicate address assignments or ARP spoofing; and pathping -q 10 matches measuring hop-by-hop latency and packet loss metrics across a routed path.
Each command-line utility is accurately paired with its primary diagnostic function: netstat -an suppresses hostname resolution to view raw socket bindings and states, dig +trace steps iteratively down the DNS delegation tree, an ARP cache showing duplicate MACs highlights Layer 2 conflicts or spoofing, and pathping collects hop-by-hop loss/latency metrics over a specified sample size.

Adım Adım Çözüm

1
Analyze netstat flags and output characteristics
Identified that -a lists all connections/ports and -n prevents DNS resolution, focusing strictly on socket state examination.
Numerical display avoids reverse lookup hangs when network DNS resolution is degraded.
2
Evaluate the dig query option +trace
Determined that +trace forces dig to iteratively follow referral paths from root servers down to the target zone.
Iterative tracing isolates broken DNS delegation records.
3
Interpret ARP cache anomaly entries
Recognized that mapping one MAC address to multiple IP addresses indicates a collision or spoofing condition at Layer 2.
Network interface cards must have unique MAC-to-IP relationships in standard ARP tables unless load-balancing technologies are explicitly configured.
4
Evaluate pathping execution flags
Matched pathping with -q 10 to per-hop packet loss and latency statistical analysis over time.
Pathping sends multiple queries per hop over a sampling window to differentiate between link congestion and router control-plane ICMP rate limiting.

Anahtar Kavram

Selecting and interpreting specialized command-line utility switches and outputs during multi-layer diagnostic workflows.
Soru 1851Soru →

A network technician is troubleshooting an intermittent connectivity issue on a 90-meter Category 6 unshielded twisted-pair (UTP) cable run between an intermediate distribution frame (IDF) switch and a desktop workstation. A basic continuity cable tester indicates that all eight conductors are mapped pin-to-pin correctly according to T568B standards. However, the switch port reports frequent cyclic redundancy check (CRC) errors and link flapping. Which diagnostic tool should the technician use to identify the exact distance to the physical fault or impedance mismatch along the cable run?

Cevabı ve açıklamayı göster

Cevap: Time-Domain Reflectometer (TDR)

Cevap

A Time-Domain Reflectometer (TDR) should be used to locate the exact position of the cable defect along the copper run.
A Time-Domain Reflectometer (TDR) transmits electrical signal pulses along metallic conductors and measures the reflections caused by physical irregularities. By timing these reflections, a TDR precisely pinpoints the location of impedance mismatches, cable damage, opens, or shorts along copper UTP runs.

Adım Adım Çözüm

1
Analyze the symptoms and initial test results
Basic pin-to-pin continuity is verified, ruling out simple miswires, but CRC errors and link instability point to physical signal degradation or an impedance defect along the cable path.
Simple continuity testers only check DC wire mapping and fail to detect high-frequency signal faults such as impedance anomalies, subtle cable damage, or distance-based breaks.
2
Select the appropriate physical layer testing tool for copper media analysis
Choose a Time-Domain Reflectometer (TDR).
A TDR injects signals down copper media and measures reflection delays to calculate the precise distance to any impedance disruption, open, or short.

Anahtar Kavram

Selecting appropriate physical cabling diagnostic tools for copper media fault isolation
Tahmini Süre:1m 15s
Soru 1852Soru →

An enterprise administrator is finalizing the channel allocation plan for four wireless access points deployed in a linear arrangement along a long hallway to support 2.4 GHz legacy telemetry sensors. To minimize both co-channel interference (CCI) and adjacent-channel interference (ACI), which sequence of 2.4 GHz channels should be configured on the access points sequentially from one end of the hallway to the other?

Cevabı ve açıklamayı göster

Cevap: Channels 1, 6, 11, and 1

Cevap

Channels 1, 6, 11, and 1
The correct answer specifies using channels 1, 6, 11, and 1. In standard 2.4 GHz Wi-Fi deployments, 20 MHz channel widths require 25 MHz separation between center frequencies to prevent spectral overlap. Channels 1, 6, and 11 are the only three non-overlapping channels available. When deploying four access points in sequence, recycling channel 1 on the fourth access point places identical channels as far apart as possible, minimizing co-channel interference.

Adım Adım Çözüm

1
Identify the band and channel bandwidth constraints
The 2.4 GHz ISM band uses 20 MHz wide channels operating on center frequencies spaced only 5 MHz apart.
Because 20 MHz channels require 25 MHz of total spectral separation to avoid overlapping, only three channels can operate simultaneously without interfering with each other.
2
Determine the non-overlapping channel set
Channels 1, 6, and 11 form the industry-standard non-overlapping set.
Channel 1 spans 2.401-2.423 GHz, channel 6 spans 2.426-2.448 GHz, and channel 11 spans 2.451-2.473 GHz.
3
Apply frequency reuse across four sequential access points
Assign channels sequentially as 1 -> 6 -> 11 -> 1.
Placing the recycled channel 1 at the opposite end of the hallway maximizes physical distance from the first access point, keeping co-channel interference to a minimum.

Anahtar Kavram

2.4 GHz Non-Overlapping Channels and Frequency Reuse
Tahmini Süre:1m 15s
Soru 1853Soru →

A data center technician is tasked with tracing an optical fiber patch cable connection between a server's network interface card and a patch panel interface to confirm individual strand color-coding and pinout assignments. Which network documentation artifact should the technician consult to inspect these detailed cable connections?

Cevabı ve açıklamayı göster

Cevap: Wiring schematic

Cevap

The technician should consult a wiring schematic to inspect pinout assignments and cable strand color-coding.
A wiring schematic provides detailed physical-level documentation of cabling runs, including pinouts, wire color-coding standards (such as T568A/T568B or fiber strand colors), and conductor termination points.

Adım Adım Çözüm

1
Identify the required information in the scenario.
The technician specifically needs detailed physical wire/strand pinouts, color-coding, and patch panel termination mappings.
Tracing physical conductor paths requires component-level wiring detail rather than high-level logical or spatial layouts.
2
Evaluate the purpose of each network documentation type.
Wiring schematics explicitly document conductor pinouts, cable types, color codes, and port-to-port physical terminations.
This matches the technician's need for pinout and strand identification.

Anahtar Kavram

Selecting network documentation types based on operational troubleshooting and maintenance requirements.
Tahmini Süre:1m 0s
Soru 1854Soru →

During a network incident investigation, a technician notices that several workstations on a local subnet received IP configuration settings within the 192.168.99.0/24192.168.99.0/24 network range instead of the standard internal 10.10.0.0/1610.10.0.0/16 range. Further inspection reveals that a malicious host flooded the network with forged requests to exhaust the legitimate pool of IP addresses and then responded to client broadcasts with its own default gateway settings. Which of the following attack types has taken place?

Cevabı ve açıklamayı göster

Cevap: Rogue DHCP server attack

Cevap

Rogue DHCP server attack
The correct option describes a Rogue DHCP server attack. In this attack vector, an unauthorized device answers client DHCP discover/request broadcasts and supplies malicious IP configuration details (such as setting itself as the default gateway). This is typically preceded by a DHCP starvation attack that consumes all available leases on the legitimate DHCP server.

Adım Adım Çözüm

1
Analyze the observed symptoms
Workstations received unauthorized IP addresses (192.168.99.0/24192.168.99.0/24) and gateway settings, while the legitimate IP address pool was exhausted.
Exhausting legitimate IP address pools (DHCP starvation) allows an attacker to step in and act as the primary configuration provider for new hosts.
2
Identify the protocol responsible for dynamic IP distribution
Dynamic Host Configuration Protocol (DHCP) operates at the application layer to distribute IP addresses, subnet masks, and default gateway configurations.
The symptoms specifically describe unauthorized configuration parameters being handed out via broadcast responses.
3
Match the mechanism to the correct attack classification
The mechanism matches a Rogue DHCP server attack (enabled by DHCP starvation).
By impersonating a valid DHCP server, an attacker redirects victim traffic through their controlled default gateway.

Anahtar Kavram

Rogue DHCP Server and Starvation Attack Vectors
Tahmini Süre:1m 15s
Soru 1855Soru →

A network administrator is troubleshooting network connectivity for several newly installed point-of-sale (POS) terminals operating on VLAN 40 (192.168.40.0/24192.168.40.0/24). Executing `ipconfig /all` on an affected terminal displays an IPv4 address of 169.254.10.45169.254.10.45 with a subnet mask of 255.255.0.0255.255.0.0 and no default gateway specified. The centralized enterprise DHCP server is situated on VLAN 10 (10.1.10.5/2410.1.10.5/24), and existing clients on VLAN 10 acquire leases without error.

Which of the following are potential root causes for this issue? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The router or Layer 3 switch interface serving VLAN 40 lacks an IP helper address (DHCP relay agent) pointing to 10.1.10.510.1.10.5.; The DHCP server scope corresponding to the 192.168.40.0/24192.168.40.0/24 network is exhausted or deactivated.

Cevap

The potential root causes are: (1) The router/Layer 3 switch interface for VLAN 40 is missing an IP helper address pointing to the DHCP server on VLAN 10, and (2) The DHCP server scope for subnet 192.168.40.0/24 is exhausted or deactivated.
An APIPA address (169.254.x.x169.254.x.x) signifies that the host generated its own IP address because it received no DHCP offer. In a multi-VLAN environment where the DHCP server is on a different subnet (VLAN 10), the router interface connecting VLAN 40 must have an IP helper address configured to relay DHCPDISCOVER broadcasts. Additionally, if the relay is functioning properly but the DHCP scope for VLAN 40 is disabled or full, the server will not return a DHCP lease.

Adım Adım Çözüm

1
Analyze the client symptom from the terminal output.
The IP address 169.254.10.45 indicates Automatic Private IP Addressing (APIPA), which occurs when a DHCP client fails to receive a response to its DHCPDISCOVER broadcast.
Recognizing APIPA narrows the troubleshooting focus specifically to DHCP communication failure between the host and the DHCP server.
2
Evaluate cross-VLAN broadcast behavior and relay requirements.
Since the client resides on VLAN 40 and the server resides on VLAN 10, Layer 3 routers will drop unforwarded broadcast packets. An IP helper address must be configured on the VLAN 40 interface.
DHCP broadcast messages cannot cross router boundaries without explicit relaying configured.
3
Evaluate DHCP server state for the target subnet.
Even if relaying functions, a scope that is deactivated or depleted of IP addresses will fail to offer an IP lease to requesting clients.
Exhausted or disabled scopes prevent new leases from being issued.

Anahtar Kavram

Troubleshooting APIPA symptoms across routed VLAN boundaries (DHCP Relay and Scope Availability)
Tahmini Süre:1m 30s
Soru 1856Soru →

A network engineer is deploying IPv6 across an enterprise LAN using Stateless Address Autoconfiguration (SLAAC). A client workstation on the subnet has the physical MAC address 00:14:22:01:23:4500:14:22:01:23:45. Which of the following represents the correct 64-bit interface identifier generated for this host using the modified EUI-64 format?

Cevabı ve açıklamayı göster

Cevap: 0214:22ff:fe01:2345

Cevap

0214:22ff:fe01:2345
The interface identifier '0214:22ff:fe01:2345' correctly follows the modified EUI-64 conversion procedure. The MAC address 00:14:22:01:23:45 is divided into two 24-bit halves (00:14:22 and 01:23:45), the 16-bit hex string FFFE is inserted in the middle, and the 7th bit (Universal/Local bit) of the first byte is inverted from 0 to 1 (changing 0x00 to 0x02).

Adım Adım Çözüm

1
Split the 48-bit MAC address into two 24-bit halves.
The left half is 00:14:2200:14:22 and the right half is 01:23:4501:23:45.
Modified EUI-64 formatting requires inserting a 16-bit delimiter into the middle of the MAC address.
2
Insert the hex value FFFEFFFE between the two halves.
The combined 64-bit value becomes 0014:22FF:FE01:23450014:22FF:FE01:2345.
IEEE EUI-64 specifications define FFFEFFFE as the expansion sequence to turn a 48-bit MAC address into a 64-bit identifier.
3
Invert the Universal/Local (U/L) bit, which is the 7th bit of the first byte.
The first byte 001600_{16} (00000000200000000_2) with its 7th bit inverted becomes 021602_{16} (00000010200000010_2), giving 0214:22ff:fe01:23450214:22ff:fe01:2345.
Inverting the U/L bit designates that the generated EUI-64 IPv6 interface identifier is derived from a globally unique IEEE MAC address.

Anahtar Kavram

Modified EUI-64 Interface Identifier Generation
Tahmini Süre:1m 30s
Soru 1857Soru →

A network engineer is configuring DNS infrastructure to support an enterprise Voice over IP (VoIP) deployment. Automatic phone provisioning requires locating the Session Initiation Protocol (SIP) service and subsequently resolving the designated server hostname to its assigned IPv4 address. The engineer executes the following diagnostic query:

$ dig _sip._tcp.voip.net.corp SRV +short
10 60 5061 pbx-01.voip.net.corp.

Based on this output and deployment requirement, which TWO of the following DNS record types are required for successful service discovery and host reachability?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: SRV record to specify the service location, port 5061, and target hostname pbx-01.voip.net.corp; A record to resolve the target hostname pbx-01.voip.net.corp to its 32-bit IPv4 address

Cevap

The SRV record and A record are both required to achieve full service discovery and hostname resolution.
VoIP clients rely on SRV records to discover the service port and target server hostname, and subsequently rely on an A record to resolve that target hostname to its corresponding IPv4 address.

Adım Adım Çözüm

1
Analyze the service discovery query requirement
The query requires discovering the protocol, port, and hostname associated with the SIP VoIP service.
SRV records are designed specifically to publish service location parameters, including priority, weight, port (5061), and target hostname.
2
Identify the hostname resolution requirement
The SRV query returns the target domain name pbx-01.voip.net.corp.
Network clients require a standard A record to map this returned canonical hostname to a usable 32-bit IPv4 address for IP routing.

Anahtar Kavram

DNS SRV and A record pairing for network service auto-discovery
Soru 1858Soru →

A client workstation on VLAN 20 (10.20.0.50/2410.20.0.50/24) is unable to access an HTTPS service hosted on a server in VLAN 50 (10.50.0.100/2410.50.0.100/24). Following the CompTIA network troubleshooting methodology, in what sequence should a network technician perform the following steps to diagnose and resolve this connectivity issue?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting sequence follows the standard CompTIA methodology: verify local IP settings and gateway connectivity (`item_1`), trace the routing path to find the drop location (`item_2`), inspect ACL statements on the dropping interface (`item_3`), apply the necessary ACL permit modification (`item_4`), and verify service restoration from the client (`item_5`).
The correct sequence strictly adheres to the standard CompTIA network troubleshooting methodology: 1) Identify the problem starting with local gateway verification (`item_1`), 2) Establish a hypothesis of remote routing/filtering failure via `traceroute` (`item_2`), 3) Test hypothesis by evaluating ACL rules on the gateway router (`item_3`), 4) Implement the solution by updating the ACL permit statement (`item_4`), and 5) Verify full system functionality by testing client HTTPS access (`item_5`).

Adım Adım Çözüm

1
Gather information and test local network parameters.
Confirms the host has a valid IP address, subnet mask, and functional default gateway.
Always eliminate local physical and link-layer issues before investigating remote infrastructure.
2
Perform path tracing to locate remote routing failures.
Pinpoints the specific gateway router dropping traffic destined for 10.50.0.10010.50.0.100.
Traceroute isolates whether the fault is a missing static route, dynamic routing failure, or packet filtering.
3
Analyze gateway router configuration and ACL rules.
Identifies an unintended ACL drop or implicit deny blocking TCP port 443.
Testing the hypothesis requires checking security rules applied to the routed interfaces.
4
Apply the corrective configuration change to the ACL.
Permits HTTPS traffic through the router interface.
Implements the solution plan by placing explicit permit rules before implicit deny matches.
5
Verify complete system functionality.
Ensures the application is accessible and no unintended side effects were created.
Verification confirms the root cause was properly resolved.

Anahtar Kavram

CompTIA Network Troubleshooting Methodology applied to Routing, Default Gateways, and ACLs
Soru 1859Soru →

Match each physical layer cabling diagnostic tool with the specific troubleshooting scenario or measurement task for which it is primarily suited.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Time-Domain Reflectometer (TDR)
Optical Time-Domain Reflectometer (OTDR)
Tone Generator and Inductive Probe
Optical Power Meter with Light Source

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Time-Domain Reflectometer (TDR) matches with locating distance to a conductor break on copper UTP; Optical Time-Domain Reflectometer (OTDR) matches with detecting macrobends and splice points on fiber; Tone Generator and Inductive Probe matches with identifying an unlabeled cable at the patch panel; Optical Power Meter with Light Source matches with measuring end-to-end dB loss across a fiber segment.
Each tool maps directly to its specialized medium and diagnostic capability: TDR identifies copper fault locations via electrical reflection; OTDR maps optical events and fault distances along fiber; Tone Generator and Probe trace and identify cable paths; and Optical Power Meters calculate total dB signal loss across fiber runs.

Adım Adım Çözüm

1
Analyze copper distance-to-fault testing requirements
Copper TDR uses signal reflection timing to determine exact distance to physical copper faults.
Electrical reflections occur at breaks or shorts, making TDR the proper tool for copper cable fault location.
2
Analyze fiber distance-to-fault and event location requirements
OTDR uses Rayleigh backscattering and Fresnel reflections to map fiber events along the length of an optical cable.
OTDR provides a graphical trace indicating macrobends, fusion splices, and distance to breaks in optical fiber.
3
Analyze cable tracing and wire identification requirements
Tone generator and inductive probe trace physical copper wire runs by emitting and detecting audio-frequency signals.
This tool combination allows technicians to locate which physical jack corresponds to a specific wire on a patch panel.
4
Analyze end-to-end optical signal loss testing requirements
An optical power meter paired with a light source measures total power loss in dB across a fiber link.
Comparing emitted light power to received light power quantifies overall optical attenuation.

Anahtar Kavram

Selecting Appropriate Physical Layer Diagnostics for Copper and Fiber Cabling Systems
Soru 1860Soru →

In an enterprise network running standard IEEE 802.1D Spanning Tree Protocol (STP), Switch-1 serves as the Root Bridge. Two non-root switches, Switch-2 and Switch-3, are directly connected to each other over a point-to-point Gigabit Ethernet link via port FastEthernet 0/1 on both switches. Both Switch-2 and Switch-3 have an identical Root Path Cost of 19. Switch-2 has a Bridge ID of 32768:00-11-22-AA-BB-CC, while Switch-3 has a Bridge ID of 32768:00-11-22-11-22-33. Which switch interface will be elected as the Designated Port for this inter-switch link segment and remain in the Forwarding state?

Cevabı ve açıklamayı göster

Cevap: Switch-3 FastEthernet 0/1, because both switches have equal Root Path Costs and Switch-3 has the lower MAC address in its Bridge ID.

Cevap

Switch-3 FastEthernet 0/1 is elected as the Designated Port because both switches have equal Root Path Costs (1919) and Switch-3 has the lower MAC address (00-11-22-11-22-33<00-11-22-AA-BB-CC00\text{-}11\text{-}22\text{-}11\text{-}22\text{-}33 < 00\text{-}11\text{-}22\text{-}\text{AA}\text{-}\text{BB}\text{-}\text{CC}).
For every network segment, STP must elect one Designated Port that forwards traffic. The election process follows a strict hierarchy: 1) Lowest Root Path Cost, 2) Lowest Sender Bridge ID (Priority + MAC), 3) Lowest Sender Port ID. Since both switches have a Root Path Cost of 19 and identical Bridge Priorities (32768), STP evaluates the MAC addresses. Switch-3's MAC address (00-11-22-11-22-33) is lower than Switch-2's MAC address (00-11-22-AA-BB-CC), making Switch-3's interface the Designated Port in the Forwarding state.

Adım Adım Çözüm

1
Evaluate the Root Path Cost for both switches connected to the network segment.
Both Switch-2 and Switch-3 have an identical Root Path Cost of 19.
STP first compares Root Path Costs to elect the Designated Port on a network segment.
2
Compare the Sender Bridge IDs of Switch-2 and Switch-3 since the Root Path Costs are equal.
Bridge Priorities are identical (3276832768). Comparing MAC addresses shows 00-11-22-11-22-3300\text{-}11\text{-}22\text{-}11\text{-}22\text{-}33 (Switch-3) is lower than 00-11-22-AA-BB-CC00\text{-}11\text{-}22\text{-}\text{AA}\text{-}\text{BB}\text{-}\text{CC} (Switch-2).
When Root Path Costs tie, the switch with the lowest Bridge ID (Priority + MAC) wins the election.
3
Determine the port roles on the link segment.
Switch-3 FastEthernet 0/1 becomes the Designated Port (Forwarding state), and Switch-2 FastEthernet 0/1 becomes the Non-Designated/Alternate Port (Blocking state).
Each active segment must have exactly one Designated Port to forward frames while preventing Layer 2 loops.

Anahtar Kavram

STP Designated Port Election and Tiebreaking Rules
ÖncekiSayfa 93 / 112Sonraki
Tüm alıştırma soruları — CompTIA Network+ | Examkin