Tüm alıştırma soruları

2237 soru

Soru 1861Soru

A network administrator is troubleshooting a scenario where IP phones connected to an access switch are unable to obtain IP addresses or reach the gateway on VLAN 50. Meanwhile, workstations on VLAN 10 connected to the same switch are functioning normally across the 802.1Q trunk link to the core switch. Reviewing the access switch configuration reveals that VLAN 50 traffic is being dropped at the trunk port, and VLAN 50 does not appear in the switch's local VLAN database. Which TWO actions must the administrator perform on the access switch to restore network connectivity for the IP phones? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Create VLAN 50 in the switch global configuration mode.; Add VLAN 50 to the allowed VLAN list on the 802.1Q trunk interface.

Cevap

The administrator must create VLAN 50 in the global configuration mode and explicitly add VLAN 50 to the allowed VLAN list on the trunk interface.
To forward Layer 2 traffic for a specific subnet/VLAN across a switched network, the VLAN must exist in the switch's local VLAN database and must be permitted on the 802.1Q trunk port connecting to the rest of the network. Creating VLAN 50 globally and adding VLAN 50 to the trunk's allowed VLAN list directly resolves both root causes.

Adım Adım Çözüm

1
Identify missing Layer 2 VLAN definition
Recognize that a switch will not originate or forward traffic for a VLAN if the VLAN ID is not present in its local VLAN database.
VLANs must be explicitly defined in the switch configuration before ports can actively participate in that broadcast domain.
2
Identify trunk interface filtering restrictions
Determine that trunk links configured with allowed VLAN lists drop traffic for unlisted VLAN IDs.
Adding VLAN 50 to the trunk port's allowed list ensures tagged frames for VLAN 50 can traverse the link between switches.

Anahtar Kavram

VLAN Trunking and VLAN Database Configuration
Soru 1862Soru

Users on a corporate network segment suddenly report an inability to access internal intranet resources and the internet. A technician checks an affected client workstation and runs the `ipconfig /all` command, obtaining the following network output:

IPv4 Address. . . . . . . . . . . : 192.168.1.105(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1

The corporate network standard uses the 10.45.0.0/1610.45.0.0/16 address space, and authorized enterprise DHCP servers reside at 10.45.1.1010.45.1.10 and 10.45.1.1110.45.1.11. Which of the following is the most likely root cause of this connectivity failure?

Cevabı ve açıklamayı göster

Cevap: An unauthorized rogue DHCP server connected to the broadcast domain is responding to client lease requests before the enterprise server.

Cevap

An unauthorized rogue DHCP server connected to the broadcast domain is responding to client lease requests before the enterprise server.
The output demonstrates that the client host successfully obtained an IP address lease (192.168.1.105192.168.1.105) from a DHCP server operating at 192.168.1.1192.168.1.1. Because the authorized corporate network utilizes the 10.45.0.0/1610.45.0.0/16 range and authorized DHCP servers at 10.45.1.1010.45.1.10 and 10.45.1.1110.45.1.11, the presence of a server issuing 192.168.1.x192.168.1.x leases indicates an unauthorized rogue DHCP server on the local broadcast domain.

Adım Adım Çözüm

1
Analyze the output of `ipconfig /all` on the affected host
The host has been assigned IPv4 address 192.168.1.105192.168.1.105 by DHCP server 192.168.1.1192.168.1.1.
Determines the current IP parameters and identifies the server originating the lease.
2
Compare the assigned lease parameters against official enterprise baseline documentation
The assigned address (192.168.1.105192.168.1.105) and server (192.168.1.1192.168.1.1) do not match authorized corporate enterprise DHCP servers (10.45.1.1010.45.1.10 / 10.45.1.1110.45.1.11) or subnet bounds (10.45.0.0/1610.45.0.0/16).
Distinguishes between authorized network services and unauthorized/extraneous network devices.
3
Identify the cause of unauthorized lease assignment
A rogue DHCP server (such as a misconfigured SOHO router plugged into an Ethernet wall port) is replying to local broadcast DHCPDISCOVER requests faster than the legitimate remote enterprise DHCP servers.
DHCP operates on a first-come, first-served basis; local rogue responses often arrive before relayed responses from remote servers.

Anahtar Kavram

Rogue DHCP Server Detection and Troubleshooting
Soru 1863Soru

A network administrator is deploying a secondary authoritative DNS server to provide redundancy for the domain `corp.example.com`. While standard client queries resolve properly across the internal network, full zone transfers between the primary server (`10.0.1.50`) and the secondary server (`10.0.2.50`) consistently fail. Executing `dig @10.0.1.50 corp.example.com AXFR` from the secondary server results in the following output:

text
;; Connection to 10.0.1.50#53(10.0.1.50) for corp.example.com failed: connection refused.

Standard single-record DNS queries using UDP port 53 succeed without issue. Which firewall modification will resolve the zone transfer failure?

Cevabı ve açıklamayı göster

Cevap: Permit traffic between the primary and secondary DNS servers on TCP port 53.

Cevap

Permit traffic between the primary and secondary DNS servers on TCP port 53.
Allowing TCP port 53 enables the primary and secondary DNS servers to establish a reliable stream connection. DNS zone transfers (AXFR/IXFR) transport large volumes of resource records and require the reliability and packet ordering of TCP, whereas standard client resolution queries utilize UDP.

Adım Adım Çözüm

1
Analyze the diagnostic command and failure output
The command `dig @10.0.1.50 corp.example.com AXFR` tests an Authoritative Zone Transfer (AXFR). The output indicates a connection failure on port 53, even though UDP queries succeed.
Standard lookups use UDP port 53, whereas AXFR zone transfers require TCP port 53 due to data size and reliability requirements.
2
Identify transport protocol requirements for DNS operations
DNS uses UDP/53 for small, fast queries/responses, but requires TCP/53 for zone transfers (AXFR/IXFR) and responses exceeding standard buffer sizes.
TCP guarantees reliable delivery and stream control when synchronizing entire DNS zone files between primary and secondary name servers.
3
Select the appropriate firewall rule update
Allowing TCP port 53 traffic between `10.0.1.50` and `10.0.2.50` will permit successful zone synchronization.
Opening TCP port 53 solves the underlying transport block preventing AXFR requests from completing.

Anahtar Kavram

DNS Transport Protocols (UDP vs TCP Port 53) and Zone Transfers
Soru 1864Soru

A network technician is deploying three wireless access points across a single-floor office space to provide coverage on the 2.4 GHz frequency band. To minimize co-channel interference and avoid adjacent-channel overlap while maintaining stable connectivity, which of the following deployment configurations should the technician implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Assign the access points to channels 1, 6, and 11 respectively.; Set the channel width on all 2.4 GHz access points to 20 MHz.

Cevap

The technician should assign the access points to channels 1, 6, and 11, and configure all 2.4 GHz access points to a 20 MHz channel width.
In 2.4 GHz Wi-Fi deployments, using channels 1, 6, and 11 ensures that adjacent access points operate without spectrum overlap. Restricting the channel bandwidth to 20 MHz preserves these non-overlapping boundaries, preventing co-channel and adjacent-channel interference across the multi-AP environment.

Adım Adım Çözüm

1
Identify the non-overlapping channel scheme for the 2.4 GHz band
Channels 1, 6, and 11 are identified as the primary 20 MHz non-overlapping channels.
The 2.4 GHz band has 11 usable channels in standard regulatory regions, each 20 MHz wide with 5 MHz spacing, meaning only channels 1, 6, and 11 do not overlap.
2
Determine the appropriate channel width configuration
A 20 MHz channel width is selected for all access points.
Bonding to 40 MHz in 2.4 GHz leaves insufficient spectrum for three distinct APs without mutual interference.

Anahtar Kavram

2.4 GHz Non-Overlapping Channels and Channel Bandwidth Selection
Soru 1865Soru

A network operations team is establishing a disaster recovery restoration procedure for a core authentication server. The server undergoes a scheduled full backup every Sunday at 01:00. To balance storage utilization and recovery speed, the team configures daily differential backups Monday through Saturday at 23:00. On Friday at 14:00, a primary storage array failure causes complete data loss on the server. Which sequence of backup sets must the network administrator restore to bring the system to its most recent available state using the fewest restoration steps?

Cevabı ve açıklamayı göster

Cevap: Restore the Sunday full backup, followed only by the Thursday differential backup.

Cevap

Restore the Sunday full backup, followed only by the Thursday differential backup.
Differential backups accumulate all changed data since the last full baseline backup without clearing the archive bit. Restoring the Sunday full backup restores the base system, and applying only the latest differential backup (Thursday at 23:00) brings the system up to date with the minimum number of steps.

Adım Adım Çözüm

1
Identify the backup strategy type and archive behavior
Differential backups store all cumulative changes made since the last full backup baseline without clearing the archive attribute.
Understanding how differential backups function determines the required set of files for recovery.
2
Determine the baseline restoration point
The Sunday 01:00 full backup provides the fundamental file structure and data baseline.
All differential restores require the initial underlying full backup baseline to be restored first.
3
Select the minimal set of differential archives required for the latest state prior to failure
Because Thursday 23:00 is the last successful backup before the Friday 14:00 failure, the Thursday differential set contains all changes from Sunday 01:00 to Thursday 23:00.
Differential backups accumulate all changes since the full backup, making intermediate daily differential backups redundant.

Anahtar Kavram

Differential Backup Restoration Sequence
Tahmini Süre:2m 0s
Soru 1866Soru

A network technician is provisioning a new telemetry server at a branch office. The server is assigned the IPv4 address 192.168.48.150/25192.168.48.150/25. Local testing shows that the server cannot reach external network services or ping its configured gateway. A review of the network configuration details reveals:

- Server IP Address: 192.168.48.150192.168.48.150
- Subnet Mask: 255.255.255.128255.255.255.128 (/25/25)
- Default Gateway: 192.168.48.1192.168.48.1
- Router Interface IP: 192.168.48.1/25192.168.48.1/25

Which of the following identifies the root cause of the connectivity failure?

Cevabı ve açıklamayı göster

Cevap: The default gateway IP address resides on a different IP subnet than the server's configured address.

Cevap

The server's configured default gateway address resides on a different IP subnet than the host address itself.
A host device requires its default gateway IP address to reside within the same local IP subnet so it can discover the gateway's MAC address via ARP. With a /25 subnet mask (255.255.255.128), the network is split into two subnets: 192.168.48.0/25 (192.168.48.0 - 192.168.48.127) and 192.168.48.128/25 (192.168.48.128 - 192.168.48.255). The server's IP address (192.168.48.150) is in the second subnet, while the default gateway (192.168.48.1) is in the first subnet. Because they are on separate subnets, the host cannot route traffic to external destinations.

Adım Adım Çözüm

1
Calculate the IP subnet parameters for the server's IP address.
IP 192.168.48.150 with mask 255.255.255.128 (/25) belongs to the subnet 192.168.48.128/25 (usable host range: 192.168.48.129 to 192.168.48.254).
Determining the valid subnet boundaries confirms which IP addresses are locally reachable.
2
Evaluate the configured default gateway address against the server's subnet.
The configured default gateway address 192.168.48.1 resides in the 192.168.48.0/25 subnet.
A host must have a default gateway within its own local IP subnet to resolve the gateway's MAC address via ARP and transmit off-subnet packets.
3
Identify the misconfiguration.
Because 192.168.48.1 and 192.168.48.150 are on separate IP subnets, the server considers the gateway off-link and cannot send traffic to it.
Host network stacks require the default gateway to be on the same broadcast domain and IP subnet.

Anahtar Kavram

Default Gateway Subnet Alignment
Tahmini Süre:1m 30s
Soru 1867Soru

A network administrator is configuring a 2.4 GHz wireless network deployment for a single-floor medical clinic featuring four access points arranged in a square grid formation. To minimize interference between adjacent wireless cells, which channel assignment strategy should the administrator implement?

Cevabı ve açıklamayı göster

Cevap: Assign the access points to channels 1, 6, 11, and reuse channel 1 on the access point located diagonally farthest from the first channel 1 access point.

Cevap

Assign the access points using non-overlapping channels 1, 6, and 11, while reusing channel 1 on the access point located diagonally farthest from the original channel 1 deployment.
In the 2.4 GHz spectrum, 20 MHz wide channels require a 5-channel separation to avoid overlapping. Channels 1, 6, and 11 are the primary non-overlapping channels. When deploying four access points, assigning channels 1, 6, and 11 to three APs and placing the reused channel 1 on the diagonally opposite AP maximizes physical distance, suppressing co-channel interference while eliminating adjacent-channel interference.

Adım Adım Çözüm

1
Identify the frequency band and channel availability.
The 2.4 GHz Wi-Fi spectrum (802.11b/g/n) consists of 11 channels in North America, each spaced 5 MHz apart with a 20 MHz or 22 MHz channel width.
Because channels overlap if separated by less than 5 channel numbers, only channels 1, 6, and 11 provide zero spectral overlap.
2
Evaluate the grid topology for access point channel allocation.
With four access points in a 2x2 square grid, three non-overlapping channels (1, 6, 11) can be assigned to three adjacent APs.
The fourth AP must reuse one of the three non-overlapping channels.
3
Determine the optimal channel reuse placement.
Reusing channel 1 on the diagonally opposite access point maximizes the physical separation distance between identical channels.
Physical separation mitigates co-channel interference (CCI) while completely preventing adjacent-channel interference (ACI).

Anahtar Kavram

2.4 GHz Non-Overlapping Channel Selection and Co-Channel Interference Mitigation
Soru 1868Soru

A network operations team is establishing standard operational procedures and documentation guidelines for an enterprise network. Match each documentation artifact to the operational scenario where it serves as the primary tool for analysis or execution.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Logical Topology Diagram
Network Performance Baseline
Physical Topology Diagram
Standard Operating Procedure (SOP)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Logical Topology Diagram matches with mapping IP subnets, VLANs, and routing protocols. Network Performance Baseline matches with evaluating link utilization metrics against historical normal behavior. Physical Topology Diagram matches with tracing physical cabling runs, patch panels, and switch interface locations. Standard Operating Procedure (SOP) matches with step-by-step instructions for routine technical tasks.
Each network documentation artifact addresses a distinct operational requirement: logical diagrams map addressing and protocol structures; physical diagrams illustrate physical hardware and cable paths; baselines quantify normal performance metrics for anomaly detection; and SOPs standardize procedural workflows.

Adım Adım Çözüm

1
Identify the primary purpose of data flow and logical addressing documentation.
Connect Logical Topology Diagram to IP subnet assignments, VLAN boundaries, and routing protocol paths.
Logical diagrams represent software and layer 3/2 logical structures.
2
Identify historical performance monitoring documentation.
Connect Network Performance Baseline to determining normal versus anomalous traffic utilization patterns.
Baselines define historical operational parameters used for comparison.
3
Identify hardware layout and cabling documentation.
Connect Physical Topology Diagram to physical cable paths, patch panel numbering, and switch rack locations.
Physical diagrams depict physical hardware, ports, and media runs.
4
Identify procedural and task-execution documentation.
Connect Standard Operating Procedure (SOP) to step-by-step instructions for routine technician workflows.
SOPs define standardized operational workflows.

Anahtar Kavram

Network Documentation Types and Applications
Soru 1869Soru

Match each IPv6 address or prefix to its corresponding deployment scope and functional classification.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

2001:db8:3c4d:15::/64
fe80::1a2b:3c4d:5e6f
fd12:3456:789a:1::1
ff02::1:ff00:1234

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

2001:db8:3c4d:15::/64 matches Publicly routable address used for global internet connectivity; fe80::1a2b:3c4d:5e6f matches Non-routable link address required for local segment communication; fd12:3456:789a:1::1 matches Internally routable address designated for private site communication; ff02::1:ff00:1234 matches Multicast address utilized for IPv6 Neighbor Discovery address resolution.
Each specified IPv6 address or prefix corresponds to a distinct deployment classification: 2001:db8:: represents Global Unicast, fe80:: represents Link-Local, fd12:: represents Unique Local, and ff02::1:ff00:: represents Solicited-Node Multicast.

Adım Adım Çözüm

1
Examine the prefix range of 2001:db8:3c4d:15::/64.
Identified as a Global Unicast Address (GUA).
The 2000::/3 prefix range is designated for publicly routable global unicast communication.
2
Examine the prefix range of fe80::1a2b:3c4d:5e6f.
Identified as a Link-Local address.
The fe80::/10 block specifies non-routable link-local traffic restricted to a single network segment.
3
Examine the prefix range of fd12:3456:789a:1::1.
Identified as a Unique Local Address (ULA).
The fc00::/7 (fd00::/8) range provides private enterprise routing capabilities similar to IPv4 RFC 1918 addresses.
4
Examine the prefix range of ff02::1:ff00:1234.
Identified as a Solicited-Node Multicast address.
The ff02::1:ff00:0/104 range is generated from the last 24 bits of a node's IPv6 address for NDP address resolution.

Anahtar Kavram

IPv6 Address Types, Prefixes, and Deployment Scopes
Soru 1870Soru

A network administrator is designing a subnetwork scheme for a branch facility assigned the IPv4 block 192.168.16.0/22192.168.16.0/22. The design requirement specifies creating subnets that can each support a minimum of 5050 usable host IP addresses for individual department segments while maximizing the total number of subnets created. Which CIDR prefix length meets these requirements, and what is the exact number of usable host IP addresses provided per subnet?

Cevabı ve açıklamayı göster

Cevap: /26/26 prefix length providing 6262 usable host addresses

Cevap

The /26/26 prefix length providing 6262 usable host addresses
To accommodate at least 5050 usable host IP addresses per subnet, the minimum number of host bits hh needed is 66, because 262=62502^6 - 2 = 62 \ge 50. Subtracting 66 host bits from 3232 gives a /26/26 prefix. The usable host count is 6262 after subtracting the network and broadcast addresses.

Adım Adım Çözüm

1
Determine the required number of host bits (hh).
h=6h = 6 bits, since 262=62502^6 - 2 = 62 \ge 50.
Five host bits (252=302^5 - 2 = 30) would not provide enough IP addresses, while six bits provides sufficient capacity.
2
Calculate the CIDR prefix length.
Prefix length is 326=/2632 - 6 = /26.
Subtracting the host bits from the 32-bit total IPv4 address length yields the subnet prefix length.
3
Calculate the usable host count per subnet.
262=622^6 - 2 = 62 usable host IP addresses.
The network address (all host bits 0) and broadcast address (all host bits 1) cannot be assigned to hosts.

Anahtar Kavram

IPv4 Subnetting and Usable Host Calculation
Tahmini Süre:1m 30s
Soru 1871Soru

A network technician receives a report that hosts on VLAN 10 attached to Switch-1 are unexpectedly receiving untagged traffic from VLAN 20 attached to Switch-2 across a point-to-point trunk link. Console logs on Switch-1 frequently display `%CDP-4-NATIVE_VLAN_MISMATCH` notifications for interface GigabitEthernet 0/1. Which of the following is the root cause of this behavior?

Cevabı ve açıklamayı göster

Cevap: A mismatch in the configured 802.1Q native VLAN between the two interconnecting switch interfaces.

Cevap

A mismatch in the configured 802.1Q native VLAN between the two interconnecting switch interfaces.
On an 802.1Q trunk, traffic belonging to the designated native VLAN is transmitted without an 802.1Q header tag. If Switch-1 has its native VLAN set to 10 while Switch-2 has its native VLAN set to 20, untagged frames sent from VLAN 20 on Switch-2 will be received by Switch-1 and placed into VLAN 10. This native VLAN mismatch causes cross-VLAN leakage and triggers CDP native VLAN mismatch syslog errors.

Adım Adım Çözüm

1
Analyze the log error message and reported symptoms.
The log explicitly shows `%CDP-4-NATIVE_VLAN_MISMATCH` on trunk interface GigabitEthernet 0/1.
Cisco Discovery Protocol (CDP) detects when the local native VLAN ID on a trunk does not match the native VLAN ID configured on the remote switch port.
2
Evaluate how 802.1Q native VLANs process frames across trunk links.
Frames originating on a port's native VLAN are transmitted across an 802.1Q trunk without a VLAN tag (untagged).
When the receiving switch receives an untagged frame, it automatically assigns it to its own configured native VLAN for that trunk port.
3
Determine the impact of differing native VLAN configurations (e.g., VLAN 10 on one end and VLAN 20 on the other).
Untagged frames sent from VLAN 20 on Switch-2 arrive untagged at Switch-1 and are delivered directly into VLAN 10.
This leads to security risks, cross-VLAN traffic leakage, and CDP/STP warning messages.

Anahtar Kavram

802.1Q Native VLAN Operation and Mismatch Troubleshooting
Soru 1872Soru

A network administrator is reviewing switch console logs and port statistics following an intermittent layer 2 outage. Match each observed diagnostic log or symptom on the left to its underlying root cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Interface GigabitEthernet0/1 transitioned to err-disabled state following a BPDUGuard event.
Switch console logs display %CDP-4-NATIVE_VLAN_MISMATCH on trunk port GigabitEthernet0/24.
Port statistics on a FastEthernet link report high rates of late collisions and FCS errors.
Traffic for VLAN 40 fails across an 802.1Q trunk while traffic for VLANs 10 and 20 flows normally.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

The diagnostic symptoms correctly match their respective root causes: BPDU Guard err-disable pairs with receiving a BPDU on a PortFast edge port; CDP native VLAN mismatch pairs with conflicting untagged VLAN IDs across the trunk; late collisions pair with a duplex mismatch between link peers; and VLAN 40 traffic dropping across the trunk pairs with exclusion from the trunk allowed VLAN list.
Each diagnostic log or symptom corresponds to a fundamental Layer 2 switching mechanism: BPDU Guard err-disables ports receiving unauthorized BPDUs; CDP native VLAN mismatch alerts identify inconsistent untagged VLAN IDs; late collisions demonstrate duplex setting mismatches; and selective trunk VLAN drops indicate restrictive allowed VLAN list configurations.

Adım Adım Çözüm

1
Analyze the BPDU Guard err-disable event
BPDU Guard protects edge interfaces configured with PortFast by placing them into the err-disabled state if any STP BPDU is received.
This prevents rogue switches or loop creation from unauthorized network devices.
2
Analyze the %CDP-4-NATIVE_VLAN_MISMATCH log error
CDP detects when connected trunk ports use different untagged native VLAN IDs (e.g., VLAN 1 on one end vs VLAN 99 on the other).
Matching native VLANs across 802.1Q trunks is mandatory to avoid cross-VLAN traffic leakage.
3
Analyze interface late collisions and FCS errors
Late collisions happen when collisions occur after the first 64 bytes (512 bits) of a frame are transmitted.
This is almost exclusively caused by a duplex mismatch where one end operates full-duplex and transmits while the half-duplex side is mid-frame.
4
Analyze selective VLAN failure across an 802.1Q trunk link
If VLANs 10 and 20 pass but VLAN 40 fails, the trunk pruning configuration filters VLAN 40.
The command 'switchport trunk allowed vlan' restricts which VLAN tags are permitted to cross the trunk interface.

Anahtar Kavram

Troubleshooting Layer 2 Switching, VLAN, and Trunking Failures
Soru 1873Soru

An engineer adds a new access switch to an established enterprise network. Shortly after connecting the switch to the core layer, traffic across multiple VLANs experiences severe latency and suboptimal path routing. Investigation reveals that the new access switch has unexpectedly taken over as the Spanning Tree Protocol (STP) root bridge for all VLANs. Which configuration error on the new access switch is the primary cause of this network issue?

Cevabı ve açıklamayı göster

Cevap: The switch was configured with a numerical STP bridge priority value lower than that of the core switch.

Cevap

The switch was configured with a numerical STP bridge priority value lower than that of the core switch.
In Spanning Tree Protocol (STP), the root bridge is elected based on the lowest Bridge ID (BID). The BID is composed of a bridge priority and the switch's MAC address. By default, switches have a priority of 32768. If a newly introduced access switch is configured with a lower numerical priority value (such as 4096 or 0), it wins the root bridge election, causing network traffic to shift paths toward the access layer.

Adım Adım Çözüm

1
Analyze STP root bridge selection criteria
STP selects the root bridge using the Bridge ID (BID), which combines Bridge Priority (2 bytes) and MAC Address (6 bytes).
The switch with the lowest numerical Bridge ID in the broadcast domain is elected as the root bridge.
2
Evaluate the impact of setting a lower numerical priority value
Setting a lower numerical priority value (e.g., 4096 instead of the default 32768) makes that switch the preferred candidate for root bridge.
Lower numerical values take precedence in STP decision vectors.
3
Correlate with the scenario symptoms
When an access switch with lower priority becomes the root bridge, all Layer 2 traffic paths recalculate toward it, bottlenecking traffic over slower access links.
This explains why network performance degraded across all VLANs after the new switch was added.

Anahtar Kavram

Spanning Tree Protocol (STP) Root Bridge Election and Priority Mechanics
Tahmini Süre:1m 15s
Soru 1874Soru

Match each physical or protocol network troubleshooting scenario to the most appropriate diagnostic tool or analyzer function.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Multimeter
Tone Generator and Probe
Optical Power Meter
Wireshark Display Filter

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Multimeter matches with verifying DC voltage on PoE injector; Tone Generator and Probe matches with tracing unlabelled UTP drop; Optical Power Meter matches with measuring optical power loss across fiber run; Wireshark Display Filter matches with filtering captured traffic for TCP SYN packets.
Each diagnostic requirement corresponds directly to its specialized tool: multimeters test electrical voltage (PoE), tone generators and probes locate physical copper pathways, optical power meters evaluate fiber optic light levels, and packet analyzer display filters evaluate network protocol traffic.

Adım Adım Çözüm

1
Analyze electrical power measurement requirement
Confirming DC voltage supplied to an access point requires testing electrical potential across conductor pairs.
A multimeter is the standard tool for measuring AC/DC voltage and resistance.
2
Analyze cable tracing requirement
Locating an unlabelled copper run through walls and patch panels requires generating an audible signal.
A tone generator applies an analog/digital signal to the wire, and an inductive probe picks up the acoustic tone.
3
Analyze fiber optical signal loss requirement
Evaluating attenuation and light power levels on fiber optic cables after connector repair requires measuring decibels (dBm).
An optical power meter (often paired with a light source) quantifies light signal power loss.
4
Analyze protocol packet inspection requirement
Parsing frame-level packet captures to inspect specific TCP header flags requires software analysis rules.
A packet analyzer display filter selectively isolates packets matching criteria such as tcp.flags.syn.

Anahtar Kavram

Selecting appropriate physical layer testing hardware and software packet analyzers based on diagnostic objectives.
Soru 1875Soru

A network administrator is troubleshooting persistent link degradation and high CRC error counts on a 75-meter Category 6 UTP run connecting an industrial factory floor workstation to an IDF switch. A basic continuity wire mapper indicates that all eight conductors are mapped correctly according to TIA/EIA 568B pinouts at both ends. Which of the following diagnostic steps or corrective actions should the technician take to isolate and resolve the physical layer failure? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Use a cable certifier or TDR to measure near-end crosstalk (NEXT) and detect potential split pairs caused by improper cable termination.; Inspect the cable pathway to verify sufficient physical clearance from heavy electrical machinery and high-voltage lighting to minimize electromagnetic interference (EMI).

Cevap

The technician should use a cable certifier or TDR to test for crosstalk and split pairs, and inspect the physical pathway to ensure proper separation from sources of electromagnetic interference (EMI).
The correct troubleshooting actions involve using advanced copper cable certification equipment (TDR / cable certifier) to measure NEXT and identify split pairs, alongside inspecting the physical cabling path for sources of environmental EMI. Simple continuity tests do not detect crosstalk or EMI, which are common causes of CRC errors on copper UTP links in industrial environments.

Adım Adım Çözüm

1
Analyze why a basic continuity wire mapper passed despite high CRC error rates.
Basic wire mappers only verify DC continuity and pin mapping; they cannot measure high-frequency electrical characteristics like crosstalk, return loss, or environmental noise.
Split pairs maintain 1-to-1 pin alignment but break pair twisting geometry, resulting in severe crosstalk under active Ethernet signaling.
2
Select advanced physical testing tools suitable for twisted-pair copper cabling.
A cable certifier/TDR assesses signal quality parameters (NEXT, FEXT, return loss) and identifies split pairs or excessive untwisting at termination blocks.
Certifiers validate whether copper runs comply with TIA/EIA performance standards.
3
Evaluate environmental physical factors affecting UTP cabling in an industrial setting.
Unshielded cabling routed near high-voltage lines or industrial motors absorbs EMI, causing frame corruption and CRC errors.
Physical separation or shielded cabling (STP/FTP) is required to protect copper signals from external noise sources.

Anahtar Kavram

Distinguishing basic continuity mapping from advanced cable certification (NEXT/split pair testing) and environmental interference isolation in UTP cabling environments.
Tahmini Süre:1m 30s
Soru 1876Soru

A network technician is troubleshooting a client workstation that is generating an APIPA address (169.254.x.x169.254.x.x) on a newly created VLAN. Which sequence of diagnostic steps represents the correct order to isolate and resolve this DHCP relay issue?

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with verifying client configuration (`ipconfig /all`), followed by verifying local switch port link and VLAN assignment, then validating the Layer 3 helper address relay setting on the gateway, and finally inspecting the central DHCP server scope status.
Methodological network troubleshooting follows a structured approach starting from the affected endpoint. First, the technician verifies local client IP configurations (`ipconfig /all`) to confirm the APIPA condition. Second, local Layer 1/2 connectivity and VLAN port assignments are checked. Third, because the workstation is on a remote VLAN, the Layer 3 gateway interface must be inspected for a correct `ip helper-address` to relay DHCP broadcasts across subnets. Finally, the central DHCP server scope status and lease pool are checked.

Adım Adım Çözüm

1
Confirm client symptoms using `ipconfig /all`.
Establishes that the client is receiving an APIPA address (169.254.x.x169.254.x.x) due to a lack of DHCP response.
Always start troubleshooting at the affected endpoint to verify reported symptoms.
2
Verify local physical link and switch port VLAN configuration.
Ensures the client is physically connected and assigned to the intended VLAN.
A misconfigured VLAN or link issue prevents packets from reaching the local default gateway.
3
Check `ip helper-address` on the Layer 3 gateway interface.
Verifies that broadcast DHCP discover packets are converted to unicast and forwarded to the central DHCP server.
Without an IP helper address, cross-subnet DHCP requests cannot cross the router boundary.
4
Examine the DHCP server scope and pool availability.
Confirms the server is actively listening, authorized, and contains available IP addresses.
Scope exhaustion or server unresponsiveness is diagnosed after local network path and relay functionality are verified.

Anahtar Kavram

Methodological troubleshooting of DHCP relay and IP addressing failures across network segments.
Tahmini Süre:1m 30s
Soru 1877Soru

A system administrator is troubleshooting a database connection failure from a newly deployed application host (`10.150.12.45/24`) to an enterprise database server (`172.28.100.50`). The application requires TCP port 5432 (PostgreSQL). The administrator executes diagnostic commands on the host and the intermediary router:

Host CLI Output (`ip route` & `ip addr`):
text eth0: inet 10.150.12.45/24 brd 10.150.12.255 scope global eth0 default via 10.150.13.1 dev eth0

Router ACL Output (`show ip access-lists OUTBOUND_DB`):
text Extended IP access list OUTBOUND_DB 10 permit tcp 10.150.12.0 0.0.0.255 host 172.28.100.50 eq 3306 20 deny ip any any

Based on the diagnostic output, which TWO factors are directly preventing the application host from communicating with the database server?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The default gateway IP address configured on the host resides in a different IPv4 subnet than the host's primary interface.; The active router Access Control List only permits MySQL traffic (TCP 3306) and relies on an explicit deny rule that blocks PostgreSQL traffic (TCP 5432).

Cevap

The connection failure is caused by a default gateway configured on a different IP subnet than the host interface, and an ACL rule that permits TCP 3306 while blocking TCP 5432.
First, the host IP 10.150.12.45/2410.150.12.45/24 resides in the 10.150.12.0/2410.150.12.0/24 network segment, while its configured gateway (10.150.13.110.150.13.1) is in 10.150.13.0/2410.150.13.0/24, preventing local ARP resolution and off-subnet forwarding. Second, the router ACL explicitly permits TCP port 3306 (MySQL) but denies all other traffic via Rule 20, blocking the application's PostgreSQL traffic on TCP port 5432.

Adım Adım Çözüm

1
Analyze the host network configuration.
The interface address is 10.150.12.45/2410.150.12.45/24, placing valid host IPs in 10.150.12.110.150.12.1 through 10.150.12.25410.150.12.254. The gateway 10.150.13.110.150.13.1 is outside this subnet, preventing ARP resolution for outbound packets.
A host must have a default gateway within its local IP subnet boundaries.
2
Analyze the router Access Control List rules.
Rule 10 specifically matches TCP port 3306. PostgreSQL traffic on TCP port 5432 is not matched by Rule 10 and is dropped by Rule 20.
ACLs evaluate traffic sequentially against entries; unmatched traffic falls through to subsequent rules or implicit deny rules.

Anahtar Kavram

Troubleshooting Gateway Subnet Alignment and ACL Rule Matching
Soru 1878Soru

Match each IEEE 802.11 wireless standard on the left with its defining operational frequency and technological capability on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

IEEE 802.11ax (Wi-Fi 6)
IEEE 802.11ac (Wi-Fi 5 Wave 2)
IEEE 802.11n (Wi-Fi 4)
IEEE 802.11g

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

IEEE 802.11ax matches the dual-band OFDMA/TWT description; IEEE 802.11ac Wave 2 matches the 5 GHz downlink MU-MIMO and 160 MHz bonding description; IEEE 802.11n matches the pioneer dual-band MIMO technology description; and IEEE 802.11g matches the 2.4 GHz 54 Mbps OFDM description.
Each IEEE 802.11 standard is accurately paired with its primary frequency spectrum and signature channel access/antenna technologies. 802.11ax utilizes dual-band OFDMA and TWT; 802.11ac Wave 2 utilizes 5 GHz MU-MIMO and 160 MHz channels; 802.11n introduced dual-band MIMO; and 802.11g provided 54 Mbps 2.4 GHz OFDM.

Adım Adım Çözüm

1
Identify operating frequency support for each standard
IEEE 802.11ac is strictly 5 GHz; IEEE 802.11g is strictly 2.4 GHz; IEEE 802.11n and 802.11ax support dual-band operations.
Frequency bands separate single-band specifications (802.11g and 802.11ac) from dual-band specifications (802.11n and 802.11ax).
2
Distinguish single-band standards based on modulation and features
802.11g offers 54 Mbps via OFDM on 2.4 GHz. 802.11ac provides downlink MU-MIMO and 160 MHz channels on 5 GHz.
802.11g is legacy 2.4 GHz OFDM, whereas 802.11ac focuses on high-throughput 5 GHz capabilities.
3
Differentiate dual-band standards based on core PHY enhancements
802.11n introduced baseline MIMO, while 802.11ax introduced OFDMA and Target Wake Time.
OFDMA and TWT are key innovations of Wi-Fi 6 (802.11ax), whereas spatial multiplexing via basic MIMO originated in Wi-Fi 4 (802.11n).

Anahtar Kavram

Wireless Standards & Frequency Specifications
Soru 1879Soru

Following a total power loss and system shutdown across an enterprise primary data center, a network engineer is executing the disaster recovery plan to restore network operations safely and prevent authentication failures or dependency loops. Place the following restoration steps into the correct sequence from first to last.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence for infrastructure restoration is: 1) Core switching and routing hardware, 2) DHCP and DNS infrastructure services, 3) Centralized authentication and directory servers, 4) Application clusters and database servers, and 5) Perimeter firewalls and external ingress routes.
In disaster recovery and network restoration planning, infrastructure must be restored according to operational dependencies: physical switching and routing network fabrics must be active first, followed by baseline network services like DNS/DHCP, then directory and authentication servers, followed by application and database instances, and finally opening perimeter security gateways to external client traffic.

Adım Adım Çözüm

1
Restore physical layer devices, core switches, and routers.
Establishes baseline Layer 2 and Layer 3 reachability across internal network segments.
Higher-layer network protocols and servers cannot operate without underlying physical and logical connectivity.
2
Start fundamental network services (DHCP and DNS).
Allows hosts to resolve domain names and receive dynamic IP configurations.
Authentication and application servers depend on DNS host record resolution to communicate across subnets.
3
Initialize identity, authentication, and access control platforms (Active Directory, RADIUS).
Enables domain services, user authentication, and network device access authorization.
Database and application services require domain authentication services to establish secure service accounts and client permissions.
4
Start business application nodes, databases, and middle-tier servers.
Brings business operations platforms back into a functional state.
Applications depend on database availability, user directory verification, and underlying IP infrastructure.
5
Re-open edge security gateways and external routing ingress.
Allows external users and partners to access fully verified internal applications.
Opening perimeter access prematurely exposes half-initialized services to security vulnerabilities and traffic flooding.

Anahtar Kavram

Infrastructure Dependency Restoration Sequencing in Business Continuity
Soru 1880Soru

A workstation on an enterprise network needs to resolve the fully qualified domain name `app.partner-net.com` for the first time, starting with an empty local DNS cache. Place the steps of the standard DNS resolution process in the correct chronological order, from the initial client request to the final IP address response.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct chronological sequence for resolving an uncached domain name is: 1) Client stub resolver sends a recursive query to the local DNS server, 2) Local resolver sends an iterative query to a Root Name Server, 3) Root Name Server responds with a referral to the TLD Name Server, 4) Local resolver queries the TLD Name Server and receives a referral to the Authoritative Name Server, and 5) Local resolver queries the Authoritative Name Server to receive the final host A record mapping and sends it back to the client.
DNS resolution follows a top-down hierarchical tree structure when no cached records exist. The client sends a recursive query to its configured local recursive resolver. The local resolver then performs iterative queries by first asking a Root Name Server (`.`), receiving a referral to the `.com` TLD server, asking the TLD server, receiving a referral to the domain's authoritative server, and finally querying the authoritative server to obtain the final Host (A) record mapping.

Adım Adım Çözüm

1
Client initiates request
Recursive query sent to local recursive resolver
The client application (e.g., web browser) invokes the stub resolver to resolve `app.partner-net.com`.
2
Local resolver queries Root hierarchy
Iterative query sent to Root server (`.`)
The local recursive server assumes responsibility for resolving the query step-by-step starting at the DNS root.
3
Root server refers to TLD
Referral to `.com` TLD name servers received
Root servers hold delegations for top-level domains and direct the query to the `.com` infrastructure.
4
Resolver queries TLD server
Referral to authoritative server for `partner-net.com` received
TLD servers maintain records for domain registrations within their top-level domain and delegate responsibility to the domain's specified name servers.
5
Resolver queries Authoritative server
Final A record received and delivered to client
The authoritative server contains the master zone record (A record) for `app.partner-net.com`, providing the definitive IP address mapping.

Anahtar Kavram

Recursive vs. Iterative DNS Resolution Hierarchy Flow
ÖncekiSayfa 94 / 112Sonraki