Network Implementation

424 soru

Soru 21Soru

A network administrator is provisioning a dedicated IPv4 subnet for a new VoIP deployment from an available 192.168.10.0/24192.168.10.0/24 network block. The subnet must accommodate 6060 IP phones, 22 router interfaces operating VRRP for default gateway redundancy, and 11 switch management interface. Which of the following CIDR prefixes represents the smallest subnet that fulfills all required host assignments while preserving the maximum amount of address space for future allocation?

Cevabı ve açıklamayı göster

Cevap: /25/25

Cevap

The smallest subnet prefix that satisfies the host requirements while maximizing remaining address space is /25/25.
The scenario requires 6363 usable host IP addresses (6060 IP phones + 22 VRRP router addresses + 11 switch management address). The number of usable hosts in an IPv4 subnet is determined by 2h22^h - 2, where hh is the number of host bits. A /26/26 subnet has 66 host bits, yielding 262=622^6 - 2 = 62 usable addresses, which is 1 address short of the required total. A /25/25 subnet has 77 host bits, providing 272=1262^7 - 2 = 126 usable host IP addresses. Therefore, /25/25 is the smallest subnet mask (longest CIDR prefix) that meets the requirement while conserving IP space.

Adım Adım Çözüm

1
Calculate the total number of required usable host IP addresses.
Total usable host IPs required = 60 (phones)+2 (VRRP interfaces)+1 (switch management)=6360 \text{ (phones)} + 2 \text{ (VRRP interfaces)} + 1 \text{ (switch management)} = 63 addresses.
Every active host device and redundant gateway interface requires a distinct usable IP address within the subnet.
2
Apply the usable host capacity formula for IPv4 subnetting.
Usable host capacity = 2h22^h - 2, where h=32prefix lengthh = 32 - \text{prefix length}.
The network ID (all host bits 0) and broadcast address (all host bits 1) are reserved and cannot be assigned to hosts.
3
Evaluate candidate CIDR prefix lengths against the required 63 usable addresses.
For /26/26 (h=6h=6): 262=642=622^6 - 2 = 64 - 2 = 62 usable addresses (insufficient by 1 IP). For /25/25 (h=7h=7): 272=1282=1262^7 - 2 = 128 - 2 = 126 usable addresses (sufficient).
Selecting /26/26 by counting total addresses (6464) instead of usable addresses (6262) is a common subnetting calculation error.
4
Select the smallest subnet (longest prefix mask) that accommodates the minimum host requirement.
/25/25 is the smallest subnet mask that fulfills the 63 usable IP address requirement.
Although /24/24 also fits 63 hosts, it leaves 191 unused IP addresses in the subnet, wasting space compared to /25/25.

Anahtar Kavram

Subnet Usable Host Capacity Calculation (2h22^h - 2 Rule) and CIDR Prefix Selection
Tahmini Süre:2m 0s
Soru 22Soru

An enterprise border router maintains two paths to reach a remote corporate subnet (10.45.0.0/2410.45.0.0/24). Path 1 is learned via internal BGP (iBGP) with an Administrative Distance (AD) of 200, while Path 2 is learned via Open Shortest Path First (OSPF) with an AD of 110. Both routes report the exact same prefix length (/24/24). Network monitoring shows that traffic is actively taking Path 2 over the low-bandwidth OSPF backup link instead of the primary iBGP connection. Which configuration modification should the network administrator perform on the border router to ensure traffic prefers the primary iBGP link under normal operations?

Cevabı ve açıklamayı göster

Cevap: Decrease the Administrative Distance for the learned iBGP route to a value lower than 110.

Cevap

Decreasing the Administrative Distance of the iBGP route below 110 ensures the router prefers the primary iBGP link.
When a router receives multiple routes to the same network prefix with identical prefix lengths, it chooses the route with the lowest Administrative Distance (AD). Standard iBGP has a default AD of 200, whereas OSPF has a default AD of 110. Because 110 is lower than 200, the router prefers the OSPF path. Lowering the AD for the iBGP route below 110 ensures the router selects the iBGP path as primary while maintaining OSPF as the secondary backup path.

Adım Adım Çözüm

1
Evaluate the route selection hierarchy
Both candidate routes have identical prefix lengths (/24/24), so Longest Prefix Match is a tie.
When prefix lengths match, the router moves to the next evaluation criteria: Administrative Distance.
2
Compare Administrative Distance values
OSPF has an AD of 110, while iBGP has a default AD of 200.
Lower AD values indicate higher reliability/preference. The router currently installs the OSPF route (110 < 200).
3
Determine the necessary configuration change
Lower the iBGP AD below 110 (e.g., to 20 or 100).
This makes the iBGP route more believable to the routing table manager than the OSPF route.

Anahtar Kavram

Route Selection Hierarchy and Administrative Distance Preference
Soru 23Soru

Match each 802.1Q trunking component or port mode behavior on the left with its corresponding operational description on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Native VLAN egress behavior
Tagged VLAN egress behavior
Standard access port ingress behavior
802.1Q Tag Control Information (TCI)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Native VLAN egress behavior matches forwarding frames untagged across the trunk. Tagged VLAN egress behavior matches inserting a 4-byte header containing a 12-bit VLAN ID. Standard access port ingress behavior matches accepting untagged frames, assigning them to the configured access VLAN, and dropping tagged frames. 802.1Q Tag Control Information (TCI) matches containing PCP/CoS priority bits, DEI, and the 12-bit VLAN ID.
The correct pairings accurately reflect IEEE 802.1Q header structures and switchport operations: Native VLAN egress traffic flows untagged; non-native VLAN traffic has a 4-byte header with a 12-bit VLAN ID inserted; access ports accept untagged host frames for a single broadcast domain while discarding tagged frames; and the 802.1Q TCI field encodes 3-bit CoS priority, 1-bit DEI, and the 12-bit VLAN identifier.

Adım Adım Çözüm

1
Analyze Native VLAN trunking behavior
Native VLAN traffic travels across 802.1Q trunk links untagged without modifying the original frame encapsulation.
IEEE 802.1Q trunking specifies that the native VLAN carries untagged frames across interconnecting switches for backward compatibility.
2
Analyze Tagged VLAN trunking behavior
Non-native VLAN frames receive a 4-byte 802.1Q tag containing a 12-bit VLAN Identifier (VID).
Explicit tagging enables switches on both ends of the trunk to correctly segregate traffic into distinct logical networks.
3
Analyze Access Port ingress behavior
Access ports receive untagged traffic from host interfaces and assign it to a single target VLAN.
Access ports belong strictly to one VLAN domain and discard incoming tagged frames for security and operational integrity.
4
Analyze 802.1Q TCI subfields
The TCI subfield allocates 3 bits for Class of Service (CoS), 1 bit for DEI, and 12 bits for VID.
The 12-bit VID allows support for up to 4,094 usable VLANs (21222^{12} - 2).

Anahtar Kavram

VLAN Configuration and 802.1Q Trunking Mechanics
Soru 24Soru

An enterprise firewall is configured to handle traffic between an internal network (10.0.0.0/810.0.0.0/8) and the Internet. The administrator configures Port Address Translation (PAT / NAT Overload) using the firewall's public interface IP address (203.0.113.1203.0.113.1) for internal host outbound access. Simultaneously, a Static NAT rule is configured to map an internal web server (10.0.0.5010.0.0.50) to a dedicated public IP address (203.0.113.2203.0.113.2). Which of the following statements accurately describe how address translation operates in this environment? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Outbound packets from internal workstations undergoing PAT have their source IP address translated to 203.0.113.1203.0.113.1 and their source Layer 4 port numbers dynamically mapped to track individual sessions.; Inbound connections destined for 203.0.113.2203.0.113.2 undergo a 1-to-1 destination IP translation to 10.0.0.5010.0.0.50 without requiring Layer 4 port modification.

Cevap

Port Address Translation (PAT) dynamically translates both the private source IP address and Layer 4 source port numbers to track sessions for multiple hosts using a single public IP address. Static NAT performs a fixed 1-to-1 Layer 3 translation between a private IP address and a public IP address without altering transport-layer ports.
Port Address Translation (PAT) handles many-to-one outbound traffic by translating private source IP addresses to a single public IP address (203.0.113.1203.0.113.1) while dynamically allocating unique Layer 4 source ports to track connections. Static NAT provides a bi-directional 1-to-1 mapping between a private IP address (10.0.0.5010.0.0.50) and a public IP address (203.0.113.2203.0.113.2) strictly at Layer 3 without changing port numbers.

Adım Adım Çözüm

1
Analyze the operational mechanics of Port Address Translation (PAT / NAT Overload).
PAT allows many internal hosts to share one public IP address by tracking session state using unique TCP/UDP source ports assigned at the router/firewall.
Layer 4 port tracking is necessary to demultiplex returning traffic back to the correct internal private IP address.
2
Analyze the operational mechanics of Static NAT.
Static NAT creates a permanent one-to-one mapping between an inside local address (e.g., 10.0.0.5010.0.0.50) and an inside global address (e.g., 203.0.113.2203.0.113.2).
Static NAT operates entirely at Layer 3 and translates only the network header addresses, preserving the transport layer header.
3
Evaluate the option statements against Network NAT/PAT definitions.
The statement regarding outbound PAT host port mapping and the statement regarding 1-to-1 static destination translation are correct.
Distractors confuse Layer 3 IP translation with Layer 4 port translation roles.

Anahtar Kavram

NAT and PAT Implementation Differences
Soru 25Soru

A network engineer is implementing DHCP Relay Agent Information Option (Option 82) on Layer 2 access switches within an enterprise building. When a client sends a broadcast DHCPDISCOVERDHCPDISCOVER message, the relay agent appends sub-options to the request before forwarding it to a centralized DHCP server across a routed core. Which sub-option field specifically carries identifying information about the physical switch port and VLAN from which the client request originated?

Cevabı ve açıklamayı göster

Cevap: Circuit ID (Sub-option 1)

Cevap

Circuit ID (Sub-option 1) is added by the DHCP relay agent to specify the client's physical port and VLAN information.
DHCP Option 82 allows a relay agent to attach location-specific metadata to client DHCP broadcasts. Sub-option 1 (Circuit ID) encodes the specific physical interface, module, and VLAN tag where the client broadcast was received.

Adım Adım Çözüm

1
Analyze the role of DHCP Option 82 (Relay Agent Information Option)
Option 82 allows relay agents to insert network topology details into client DHCP requests before forwarding them to the server.
This information enables the DHCP server to enforce security policies and assign IP addresses or parameters based on physical location.
2
Differentiate between Option 82 standard sub-options
Sub-option 1 (Circuit ID) identifies the incoming port/VLAN circuit, whereas Sub-option 2 (Remote ID) identifies the relay agent switch/router identity.
Circuit ID contains specific access port details (e.g., interface index, VLAN tag) necessary to identify where the host connects.

Anahtar Kavram

DHCP Option 82 and Relay Agent Information Sub-options
Soru 26Soru

A network technician is documenting IPv6 deployment scopes and prefix classifications across an enterprise infrastructure. Match each IPv6 address type on the left to its correct prefix range and functional scope on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Global Unicast Address (GUA)
Link-Local Address
Unique Local Address (ULA)
Multicast Address

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Global Unicast Address (GUA) pairs with the 2000::/3 globally routable internet block. Link-Local Address pairs with the fe80::/10 single local segment block. Unique Local Address (ULA) pairs with the fc00::/7 private internal routing block. Multicast Address pairs with the ff00::/8 one-to-many group delivery block.
Each IPv6 address type is defined by specific prefix allocations. Global Unicast Addresses use 2000::/3 for public internet traffic. Link-Local addresses use fe80::/10 for communications limited strictly to the local network segment. Unique Local Addresses use fc00::/7 for internal enterprise networks. Multicast addresses start with ff00::/8 to reach multiple subscribed devices across a network.

Adım Adım Çözüm

1
Identify the prefix and functional scope for Global Unicast Addresses (GUA).
GUA corresponds to 2000::/3 (including 2001::/16) for public internet routing.
GUAs are equivalent to public IPv4 addresses.
2
Identify the prefix and scope for Link-Local addresses.
Link-Local corresponds to fe80::/10 for non-routable communication within the immediate physical or logical link.
Link-Local addresses are automatically created on IPv6-enabled interfaces for neighbor discovery and local communications.
3
Identify the prefix and scope for Unique Local Addresses (ULA).
ULA corresponds to fc00::/7 for private internal networks.
ULAs allow organization-wide internal routing without being reachable from the global internet.
4
Identify the prefix and scope for Multicast addresses.
Multicast corresponds to ff00::/8 for delivering messages to multiple subscribing hosts.
IPv6 uses multicast instead of broadcast for efficient group delivery.

Anahtar Kavram

IPv6 Address Classifications and Scope Prefixes
Soru 27Soru

A network administrator runs the `nslookup` command to check the mail server configuration for an enterprise domain and obtains the following output:

text
> set type=MX
> company.com
Server: dns1.internal.net
Address: 10.0.0.53

Non-authoritative answer:
company.com mail exchanger = 10 mail.company.com

Which DNS record type must be configured to map `mail.company.com` directly to its corresponding IPv4 address?

Cevabı ve açıklamayı göster

Cevap: A record

Cevap

The host requires an A record to resolve the mail server hostname to an IPv4 address.
An A record specifically maps a domain name or hostname to a 32-bit IPv4 address, which is required for client systems to initiate direct IP connectivity to `mail.company.com` over IPv4.

Adım Adım Çözüm

1
Analyze the MX record output
The MX lookup returns the hostname `mail.company.com` as the mail exchanger for `company.com`.
MX records specify destination mail servers by hostname, requiring a secondary lookup to find their IP address.
2
Identify the target address family
The requirement specifies resolving `mail.company.com` to an IPv4 address.
Standard IPv4 host resolution is performed using Host Address (A) records.

Anahtar Kavram

DNS Record Functions and Resolution
Soru 28Soru

A network security architect is defining address translation policies for a corporate infrastructure. Match each technical network requirement on the left with its corresponding NAT/PAT implementation method on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Providing thousands of internal workstation hosts with simultaneous outbound internet access through a single external interface IP address.
Exposing an internal application server at a fixed private IPv4 address to external partners using a permanent public IPv4 mapping.
Temporarily assigning public IPv4 addresses from a shared pool to internal hosts on a first-come, first-served basis without port multiplexing.
Redirecting external inbound connections targeting a custom public port (84438443) to an internal web server listening on standard HTTP port 8080.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Thousands of hosts sharing a single external IP maps to Port Address Translation (PAT / Interface Overload).
2. Exposing an internal server via permanent public IP mapping maps to Static 1:1 Network Address Translation.
3. Temporarily assigning public IPs from a pool without port multiplexing maps to Dynamic NAT.
4. Redirecting custom public port traffic to an internal web server port maps to Port Forwarding (Static PAT).
The mappings accurately distinguish between Layer 3 IP translation (Static 1:1 NAT and Dynamic NAT) and Layer 4 port translation/multiplexing (PAT and Port Forwarding). Multiple internal hosts sharing one public IP requires PAT (Overload). A fixed public-to-private server mapping requires Static 1:1 NAT. Temporary 1:1 allocation from a public pool without port multiplexing requires Dynamic NAT. Translating an incoming external port to a different internal IP and port requires Port Forwarding.

Adım Adım Çözüm

1
Analyze the requirement for outbound internet access for thousands of hosts using a single public IP address.
Identify that port multiplexing (Layer 4 source port tracking) is required to distinguish individual host sessions, pointing to Port Address Translation (PAT/Overload).
A single public IP address can only support multiple concurrent host connections if unique Layer 4 port numbers are assigned to each session flow.
2
Analyze the requirement for a permanent, bi-directional mapping for an internal server.
Identify that a fixed 1:1 relationship is required without port modification, corresponding to Static 1:1 NAT.
External clients must be able to initiate inbound traffic to the internal server at any time using a persistent public IP address.
3
Analyze the requirement for temporary assignment from a public IP pool without port multiplexing.
Identify 1:1 dynamic mapping from an available address block, corresponding to Dynamic NAT.
When port translation is not utilized, each active internal session consumes a dedicated public IP address from the pool for the duration of the communication.
4
Analyze the requirement for mapping incoming traffic on public port 84438443 to internal port 8080.
Identify destination port translation and IP redirection, corresponding to Port Forwarding (Static PAT).
Port Forwarding allows specific incoming external port requests to be translated to a designated internal target host IP and port number.

Anahtar Kavram

NAT and PAT Implementation Types and Address Mapping Mechanisms
Tahmini Süre:2m 0s
Soru 29Soru

Match each Network Address Translation (NAT) implementation type on the left with its corresponding address mapping characteristic on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Static NAT
Dynamic NAT
Port Address Translation (PAT)

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Static NAT matches permanent one-to-one mapping; Dynamic NAT matches translation using a dynamic pool of public IP addresses; Port Address Translation (PAT) matches translation of multiple private IP addresses to a single public IP address using unique port numbers.
Static NAT creates a permanent one-to-one mapping between a single private IP and a single public IP address. Dynamic NAT uses a pool of public IP addresses assigned dynamically to internal hosts on demand. Port Address Translation (PAT) multiplexes multiple private IP addresses onto a single public IP address using unique Layer 4 source port numbers.

Adım Adım Çözüm

1
Identify the mapping behavior of Static NAT.
Static NAT establishes a fixed, persistent one-to-one mapping between one private IP address and one public IP address.
Static NAT is required when an internal host (such as an enterprise web or mail server) must maintain a consistent external IP address for inbound connectivity.
2
Identify the mapping behavior of Dynamic NAT.
Dynamic NAT assigns an available public IP address from a configured pool to an internal host dynamically for the duration of a session.
Dynamic NAT allows multiple devices to access the internet as long as sufficient public IP addresses exist in the pool for active sessions.
3
Identify the mapping behavior of Port Address Translation (PAT).
PAT allows many private host IPs to share one public IP address by assigning unique source port numbers to distinguish individual sessions.
PAT conserves IPv4 public address space by leveraging TCP/UDP source ports at Layer 4 to multiplex traffic over a single public address.

Anahtar Kavram

NAT and PAT Implementation Types
Tahmini Süre:1m 0s
Soru 30Soru

A network administrator receives an alert that a server with the IPv4 address 172.24.110.99/23172.24.110.99/23 cannot communicate beyond its local segment due to a misconfiguration on the upstream switch interface. What is the correct broadcast address for the subnet to which this server belongs?

Cevabı ve açıklamayı göster

Cevap: 172.24.111.255

Cevap

172.24.111.255
For an IP address of 172.24.110.99/23172.24.110.99/23, the prefix length of /23/23 indicates a subnet mask of 255.255.254.0255.255.254.0. The third octet block size is 256254=2256 - 254 = 2. Because 110110 is an even multiple of 22, the network boundary begins at 172.24.110.0172.24.110.0 and ends at 172.24.111.255172.24.111.255. The broadcast address is the highest address in this range, which is 172.24.111.255172.24.111.255.

Adım Adım Çözüm

1
Determine the subnet mask from CIDR notation
A /23 prefix corresponds to a subnet mask of 255.255.254.0255.255.254.0.
Converting CIDR /23 means 23 network bits and 9 host bits (3223=932 - 23 = 9).
2
Calculate the block size in the third octet
Block size = 256254=2256 - 254 = 2.
Subnet boundaries in the third octet occur in multiples of 2.
3
Identify the network ID and broadcast address
Network ID = 172.24.110.0172.24.110.0, Broadcast address = 172.24.111.255172.24.111.255.
Since the third octet value is 110110 (a multiple of 22), the subnet range spans 172.24.110.0172.24.110.0 through 172.24.111.255172.24.111.255.

Anahtar Kavram

IPv4 Subnet Mask and Broadcast Address Calculation
Tahmini Süre:1m 30s
Soru 31Soru

An administrator is inspecting the Network Address Translation (NAT) table on an enterprise border router to resolve a host connectivity issue. The CLI display shows the following active translation entry:

Inside global: 198.51.100.14:51022Inside local: 10.0.4.15:51022\text{Inside global: } 198.51.100.14:51022 \quad | \quad \text{Inside local: } 10.0.4.15:51022
Outside local: 198.51.100.80:80Outside global: 198.51.100.80:80\text{Outside local: } 198.51.100.80:80 \quad | \quad \text{Outside global: } 198.51.100.80:80

Which IPv4 address represents the private address assigned directly to the internal host on the local network before translation occurs?

Cevabı ve açıklamayı göster

Cevap: 10.0.4.15

Cevap

10.0.4.15 represents the Inside Local address, which is the un-translated private IPv4 address configured directly on the internal host.
In standard network address translation terminology, 'Inside Local' refers specifically to the private IP address assigned to a host on the internal network. In the provided translation table, 10.0.4.15 is listed under Inside Local, making it the un-translated private IPv4 address of the local client.

Adım Adım Çözüm

1
Identify the standard CompTIA / Cisco NAT terminology components in the translation table
Inside Local is defined as the IP address assigned to a host on the inside network; Inside Global is the translated public IP address of the inside host.
Understanding NAT address categories is required to interpret translation tables.
2
Locate the 'Inside local' field in the translation output
The entry displays 'Inside local: 10.0.4.15:51022'.
The IP portion preceding the colon indicates the Layer 3 host IP address on the internal network segment.
3
Extract the IP address from the Inside Local socket pair
10.0.4.15 is isolated as the client private address.
Port 51022 is the ephemeral Layer 4 port used by PAT, while 10.0.4.15 is the private IPv4 host address.

Anahtar Kavram

NAT / PAT Address Types (Inside Local, Inside Global, Outside Local, Outside Global)
Tahmini Süre:1m 15s
Soru 32Soru

An IT technician is deploying three access points in a line along an office corridor to provide continuous wireless coverage on the 2.4 GHz2.4\text{ GHz} spectrum. Which channel assignment pattern should be applied across the three adjacent access points to completely avoid adjacent-channel interference?

Cevabı ve açıklamayı göster

Cevap: Channels 1, 6, and 11

Cevap

Channels 1, 6, and 11 should be assigned across the three adjacent access points.
In the 2.4 GHz2.4\text{ GHz} ISM band, individual standard Wi-Fi channels are 20 MHz20\text{ MHz} wide while center frequencies are spaced 5 MHz5\text{ MHz} apart. Channels 1, 6, and 11 are the three non-overlapping channels available under North American regulatory domains.

Adım Adım Çözüm

1
Analyze the frequency band requirements.
The network operates on the 2.4 GHz2.4\text{ GHz} band where each channel requires 20 MHz20\text{ MHz} of bandwidth, but channel numbers are spaced only 5 MHz5\text{ MHz} apart.
Understanding channel bandwidth vs channel spacing is required to determine spectral overlap.
2
Identify non-overlapping channel combinations.
To maintain a minimum separation of 20 MHz20\text{ MHz} between channel boundaries (or 25 MHz25\text{ MHz} between center frequencies), channels 1, 6, and 11 are selected.
This configuration ensures zero spectrum overlap between adjacent access points.

Anahtar Kavram

2.4 GHz Non-Overlapping Channels
Soru 33Soru

A network engineer is configuring network address translation on an enterprise edge firewall with a public IPv4 allocation of 203.0.113.0/29203.0.113.0/29. The network architecture requires an internal database management server (192.168.10.5192.168.10.5) to accept persistent inbound management connections from authorized external partners while concealing its internal address. Simultaneously, 350 internal user workstations on the 192.168.10.0/24192.168.10.0/24 subnet require outbound internet access. Which address translation configuration strategy correctly satisfies all connectivity and access requirements while optimizing public IP address consumption?

Cevabı ve açıklamayı göster

Cevap: Configure a Static NAT mapping for 192.168.10.5192.168.10.5 to public IP 203.0.113.2203.0.113.2, and configure PAT (NAT Overload) using 203.0.113.1203.0.113.1 for the 192.168.10.0/24192.168.10.0/24 workstation subnet.

Cevap

Configure a Static NAT mapping for the database server to a dedicated public IP address, and configure PAT (NAT Overload) for the workstation subnet using a separate public IP address.
Static NAT provides a persistent, bidirectional one-to-one translation between a private IP address and a public IP address, allowing external hosts to initiate inbound connections to internal resources such as servers. PAT (NAT Overload) allows multiple internal hosts to share a single public IP address by mapping internal IP addresses and source port numbers to unique port numbers on the public IP, effectively optimizing IP address utilization for large workstation subnets.

Adım Adım Çözüm

1
Analyze inbound connectivity requirements for the database server
Identified that external clients must initiate inbound connections to an internal host (192.168.10.5192.168.10.5)
Inbound initiation requires a permanent, predictable one-to-one IP mapping (Static NAT) so external systems can reach the destination public IP.
2
Analyze outbound connectivity and capacity requirements for internal workstations
Identified 350 internal hosts needing outbound internet access with limited public IP resources (203.0.113.0/29203.0.113.0/29 has 6 usable host IPs)
Port Address Translation (PAT / NAT Overload) allows thousands of internal private IP addresses to share a single public IP by tracking source port numbers.
3
Synthesize NAT configuration strategy
Assign Static NAT (192.168.10.5203.0.113.2192.168.10.5 ↔ 203.0.113.2) for the server and PAT (192.168.10.0/24203.0.113.1192.168.10.0/24 ↔ 203.0.113.1) for workstations
This combination minimizes IP consumption (uses only 2 public IPs out of 6 available) while meeting all functional traffic patterns.

Anahtar Kavram

NAT and PAT Implementation Types (Static NAT vs PAT/Overload)
Tahmini Süre:1m 30s
Soru 34Soru

A network administrator is designing a high-density enterprise wireless network using Wi-Fi 6 (802.11ax) access points. The goal is to optimize spectrum efficiency, reduce co-channel interference (CCI) in overlapping coverage areas, and efficiently support a large volume of concurrent client connections. Which of the following features or deployment strategies should the administrator implement? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Enable Orthogonal Frequency-Division Multiple Access (OFDMA) to divide channels into smaller subcarriers for concurrent multi-user transmissions.; Implement BSS Coloring to differentiate between overlapping Basic Service Sets and allow spatial reuse of frequencies.

Cevap

Enabling Orthogonal Frequency-Division Multiple Access (OFDMA) and implementing BSS Coloring.
The correct responses are enabling Orthogonal Frequency-Division Multiple Access (OFDMA) and implementing BSS Coloring. OFDMA allows an AP to split a single channel into smaller frequency allocations (Resource Units), serving multiple clients concurrently to maximize airtime efficiency. BSS Coloring tags frames with a color field in the 802.11ax header, allowing devices to differentiate between their own BSS and neighboring overlapping BSSs on the same channel, thereby allowing adaptive clear channel assessment (CCA) thresholds and spatial reuse.

Adım Adım Çözüm

1
Analyze high-density Wi-Fi 6 multi-user requirements.
Identify that OFDMA divides channels into Resource Units (RUs), allowing parallel transmissions to multiple low-throughput and high-density devices simultaneously.
OFDMA addresses contention and latency issues in crowded wireless environments.
2
Evaluate co-channel interference (CCI) mitigation techniques in 802.11ax.
Identify that BSS Coloring marks frames with a BSS color identifier so APs and clients can ignore transmissions from neighboring overlapping BSSs operating on the same channel.
BSS Coloring enables spatial reuse, reducing unnecessary channel contention back-offs caused by co-channel interference.
3
Verify incorrect options regarding channel planning.
Discard options suggesting overlapping 2.4 GHz channel assignments (channels 1, 2, 3), 40 MHz channel bonding in 2.4 GHz, or disabling 5 GHz radios, as all these introduce extreme co-channel and adjacent-channel interference.
Proper 2.4 GHz channel design strictly uses non-overlapping channels 1, 6, and 11 with 20 MHz width, and relies on 5 GHz / 6 GHz for high-density capacity.

Anahtar Kavram

Wi-Fi 6 (802.11ax) High-Density Features & Channel Planning
Tahmini Süre:1m 30s
Soru 35Soru

A network engineer is configuring an interface using Stateless Address Autoconfiguration (SLAAC) with modified EUI-64 to derive the host portion of the IPv6 address. The network card has a MAC address of 00:1A:2B:3C:4D:5E, and the designated link-local prefix is fe80::/64. Which of the following represents the correctly formatted IPv6 link-local address for this host?

Cevabı ve açıklamayı göster

Cevap: fe80::21a:2bff:fe3c:4d5e

Cevap

fe80::21a:2bff:fe3c:4d5e
The address fe80::21a:2bff:fe3c:4d5e correctly follows EUI-64 address generation by inserting FFFE into the center of the MAC address, flipping the 7th bit of the first byte from 0 to 1 (changing 00 to 02), and dropping the leading zero in 021a per RFC 5952 compression rules.

Adım Adım Çözüm

1
Split the MAC address into two 24-bit halves and insert FFFE in the middle.
00:1A:2B:FF:FE:3C:4D:5E
EUI-64 generation requires expanding a 48-bit MAC address into a 64-bit interface identifier by inserting 0xFFFE into the center.
2
Invert the 7th bit (the Universal/Local bit) of the first byte.
First byte 00 (0000 0000 in binary) becomes 02 (0000 0010 in binary). The 64-bit identifier becomes 021A:2BFF:FE3C:4D5E.
IEEE EUI-64 standards mandate toggling the 7th bit to indicate a unique locally administered or globally unique address.
3
Combine the fe80::/64 link-local prefix with the derived 64-bit interface identifier and apply RFC 5952 zero compression rules.
fe80::21a:2bff:fe3c:4d5e
Leading zeros within hex fields must be suppressed (021a becomes 21a).

Anahtar Kavram

Modified EUI-64 Interface Identifier Derivation
Tahmini Süre:1m 30s
Soru 36Soru

Three enterprise switches (SW1, SW2, and SW3) are connected in a triangular loop running standard IEEE 802.1D Spanning Tree Protocol (STP). All three switches retain the default bridge priority of 32768, and their MAC addresses are as follows:
- SW1: 00:1A:2B:3C:4D:01
- SW2: 00:1A:2B:3C:4D:02
- SW3: 00:1A:2B:3C:4D:03

The physical links and their associated STP path costs are:
- Link between SW3 and SW1: 100 Mbps (STP path cost = 19)
- Link between SW3 and SW2: 1 Gbps (STP path cost = 4)
- Link between SW2 and SW1: 1 Gbps (STP path cost = 4)

Which switch port on SW3 will be elected as the Root Port, and what is its calculated Root Path Cost?

Cevabı ve açıklamayı göster

Cevap: The port connected to SW2, with a Root Path Cost of 8

Cevap

The port connected to SW2, with a Root Path Cost of 8
Because all switches share the default priority of 32768, SW1 is elected as the Root Bridge based on having the lowest MAC address (00:1A:2B:3C:4D:01). SW3 must select a single Root Port that offers the lowest cumulative cost to reach SW1. The direct link from SW3 to SW1 operates at 100 Mbps with a cost of 19. The indirect path from SW3 through SW2 to SW1 uses two 1 Gbps links, resulting in a total path cost of 4 + 4 = 8. Since 8 is less than 19, SW3 elects the port facing SW2 as its Root Port with a Root Path Cost of 8.

Adım Adım Çözüm

1
Determine the Root Bridge by comparing Switch Priority and MAC Address.
All switches have equal priority (32768). SW1 has the lowest MAC address (00:1A:2B:3C:4D:01) and is elected as the Root Bridge.
STP selects the switch with the lowest Bridge ID (Priority + MAC) as the Root Bridge.
2
Calculate the cumulative Root Path Cost for all possible paths from SW3 to the Root Bridge (SW1).
Direct path (SW3 → SW1): Cost = 19. Indirect path (SW3 → SW2 → SW1): Cost = 4 + 4 = 8.
Root Path Cost is the sum of all ingress port path costs along the path toward the Root Bridge.
3
Select the Root Port on SW3 based on the lowest cumulative Root Path Cost.
The port connected to SW2 has a lower total cost (8 < 19) and is elected as SW3's Root Port.
Every non-root switch elects exactly one Root Port corresponding to its shortest path to the Root Bridge.

Anahtar Kavram

STP Root Bridge election and cumulative Root Path Cost calculation for Root Port selection.
Tahmini Süre:1m 30s
Soru 37Soru

A network administrator is deploying IPv6 across a new corporate branch office. To optimize IP allocation, the administrator subnets the organization's assigned prefix into /68/68 subnets and configures one of these /68/68 subnets on the gateway router's local interface. Although Router Advertisement (RA) messages are actively transmitted across the LAN, host workstations configured to use Stateless Address Autoconfiguration (SLAAC) fail to acquire global unicast addresses. Which of the following best explains why SLAAC is failing to automatically configure host addresses on this subnet?

Cevabı ve açıklamayı göster

Cevap: SLAAC mandates a prefix length of exactly /64 on the interface to generate 64-bit host interface identifiers.

Cevap

SLAAC mandates a prefix length of exactly /64 on the interface to generate 64-bit host interface identifiers.
Stateless Address Autoconfiguration (SLAAC), defined in RFC 4862, requires a /64 subnet prefix length. Since IPv6 host interface identifiers (generated via EUI-64 or privacy extensions) are 64 bits long, the host expects a 64-bit prefix from ICMPv6 Router Advertisement messages to complete the 128-bit IPv6 address structure. If a subnet prefix longer than /64 (such as /68) is configured on the gateway router, hosts will refrain from using SLAAC to autoconfigure global unicast addresses.

Adım Adım Çözüm

1
Analyze the SLAAC specification standard (RFC 4862) regarding prefix requirements.
SLAAC combines a /64 network prefix received from Router Advertisements with a 64-bit interface identifier (EUI-64 or opaque random string) to form a 128-bit IPv6 address.
Because IPv6 host interface IDs are defined as 64 bits in standard SLAAC autoconfiguration, the network prefix must be exactly /64.
2
Evaluate the network configuration described in the scenario.
The router interface was configured with a /68 prefix length.
When a router advertises a prefix length other than /64 in ICMPv6 Router Advertisement Prefix Information Options, client SLAAC implementations ignore the prefix for autoconfiguration.
3
Select the option that correctly identifies the /64 prefix requirement constraint.
The requirement for an exact /64 prefix length explains the autoconfiguration failure.
Correcting the interface subnetting to /64 will allow client workstations to automatically build their global unicast IPv6 addresses.

Anahtar Kavram

SLAAC Prefix Length Requirement (/64)
Soru 38Soru

A network administrator configures a static 1:1 NAT mapping on an enterprise edge router for an internal application server with Inside Local address 192.168.10.50192.168.10.50 to Inside Global address 198.51.100.50198.51.100.50. Additionally, a dynamic Port Address Translation (PAT / Overload) rule is configured to translate all host traffic from 192.168.10.0/24192.168.10.0/24 to the router's public interface address (198.51.100.1198.51.100.1). Remote clients on the internet can successfully initiate connections to the application server using 198.51.100.50198.51.100.50. However, when the internal application server itself initiates outbound requests to a partner API service that enforces IP whitelist security, the partner API rejects the connection. Network captures reveal that outbound packets originating from the server are sent using source IP 198.51.100.1198.51.100.1 with an ephemeral port rather than 198.51.100.50198.51.100.50. Which of the following best explains why this issue occurs?

Cevabı ve açıklamayı göster

Cevap: The router evaluates the dynamic PAT rule prior to the static NAT mapping in its translation table for outbound connections.

Cevap

The router evaluates the dynamic PAT rule prior to the static NAT mapping in its translation table for outbound connections.
In router and firewall configurations, NAT rules are processed in a defined order of execution. When an internal server with a static NAT mapping initiates an outbound session, the router checks the source IP against its NAT entries. If a generic PAT/Overload rule matching the server's subnet is evaluated before the static NAT mapping, outbound packets are dynamically translated to the PAT address (198.51.100.1198.51.100.1) with a randomized ephemeral port. Inbound traffic addressed directly to 198.51.100.50198.51.100.50 still succeeds because inbound static NAT entries take direct precedence for incoming destination translation.

Adım Adım Çözüm

1
Analyze the bidirectional nature of Static NAT versus dynamic PAT.
Static 1:1 NAT provides bidirectional translation between 192.168.10.50192.168.10.50 (Inside Local) and 198.51.100.50198.51.100.50 (Inside Global). PAT translates multiple internal IPs to a shared public IP using unique Layer 4 port numbers.
Understanding host reachability in both directions helps isolate why inbound connectivity works while outbound traffic gets remapped.
2
Trace the packet flow for outbound traffic originating from 192.168.10.50192.168.10.50.
Outbound packets from the server match the source network 192.168.10.0/24192.168.10.0/24.
When the server initiates a connection outbound, the router checks its NAT rule lookup order to determine how to translate the source IP address.
3
Determine the cause of the unexpected translation address (198.51.100.1198.51.100.1).
The router encounters and executes the dynamic PAT overload rule before evaluating the static NAT entry, resulting in translation to the outside interface IP.
If the rule evaluation order or access control list priority favours the PAT statement for outbound flows, the static 1:1 translation for outbound traffic is bypassed.

Anahtar Kavram

NAT/PAT Rule Processing Order and Bidirectional Static NAT Behavior
Tahmini Süre:2m 0s
Soru 39Soru

A network engineering team is designing a multi-floor high-density enterprise wireless deployment using IEEE 802.11ax access points operating in both the 2.4 GHz and 5 GHz bands. During the predictive site survey phase, the team must configure the deployment to minimize co-channel interference (CCI), prevent coverage overlap issues, and optimize client band steering toward 5 GHz. Which of the following technical design decisions and configuration strategies should the team implement? (Select THREE).

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Stagger 2.4 GHz channel assignments using non-overlapping channels 1, 6, and 11 across adjacent access points, while selectively disabling 2.4 GHz radios on redundant access points in dense areas.; Restrict 5 GHz channel widths to 20 MHz or 40 MHz rather than 80 MHz or 160 MHz channel bonding in high-density areas.; Lower the transmit power on 2.4 GHz radios relative to 5 GHz radios to equalize coverage cell sizes and encourage 5 GHz client association.

Cevap

The correct strategies are: 1) Staggering 2.4 GHz channels using non-overlapping channels 1, 6, and 11 while selectively disabling redundant 2.4 GHz radios; 2) Restricting 5 GHz channel widths to 20 MHz or 40 MHz to preserve available non-overlapping channels; and 3) Lowering 2.4 GHz transmit power relative to 5 GHz to balance cell sizes and foster band steering.
In high-density enterprise wireless deployments, effective RF planning relies on eliminating channel overlap, maximizing independent channel count, and balancing cell boundaries. First, using non-overlapping 2.4 GHz channels (1, 6, and 11) and turning off excess 2.4 GHz radios prevents excessive co-channel overlap. Second, keeping 5 GHz channel widths to 20 MHz or 40 MHz preserves non-overlapping channel availability, avoiding co-channel interference caused by wide 80 MHz channel bonding. Third, turning down 2.4 GHz transmit power reduces its coverage radius to match 5 GHz, guiding dual-band clients onto the faster 5 GHz band.

Adım Adım Çözüm

1
Analyze 2.4 GHz spectrum planning and channel allocation constraints.
Identify that 2.4 GHz only offers three non-overlapping 20 MHz channels (1, 6, and 11 in standard domain planning). Adjacent or bonded channel assignments (such as channels 3 or 9, or 80 MHz bonding) induce severe interference. Disabling redundant 2.4 GHz radios reduces co-channel interference in dense deployments.
2.4 GHz signals travel farther and penetrate obstacles better, causing excessive cell overlap if every AP broadcasts 2.4 GHz at high power.
2
Evaluate 5 GHz channel width design in high-density deployments.
Determine that while 80 MHz channel bonding increases throughput, it reduces the total count of non-overlapping channels. High-density AP environments require more non-overlapping channels (using 20 MHz or 40 MHz channel widths) to prevent co-channel interference.
Maximizing channel count per spatial area takes priority over individual peak channel bandwidth in dense enterprise environments.
3
Assess transmit power matching and cell boundary management across bands.
Reduce 2.4 GHz transmit power so its RF footprint matches the smaller footprint of the 5 GHz radio on the same access point.
Equalizing coverage cell boundaries ensures smooth client roaming and encourages dual-band client devices to connect to the less congested 5 GHz band.

Anahtar Kavram

Enterprise Wireless Cell Planning, Channel Allocation, and Co-Channel Interference Mitigation
Soru 40Soru

A network administrator is designing a dedicated VLAN for a warehouse automation system that requires static IPv4 addresses for 1515 smart sensor nodes. To conserve network address space, the administrator must select the smallest possible CIDR subnet prefix that accommodates all required host nodes. Which prefix length should be configured for this subnet?

Cevabı ve açıklamayı göster

Cevap: /27

Cevap

The prefix /27 is the correct choice because it provides 30 usable host IP addresses, satisfying the 15-node requirement while minimizing wasted address space.
To calculate usable IPv4 addresses, the formula 2n22^n - 2 must be used, where nn is the number of host bits. For 1515 devices, a /28 mask provides 24=162^4 = 16 total addresses, but only 162=1416 - 2 = 14 usable host addresses, which is insufficient. Moving to a /27 mask provides n=5n = 5 host bits, yielding 252=302^5 - 2 = 30 usable host addresses. This is the smallest prefix length that satisfies the requirement of 15 hosts.

Adım Adım Çözüm

1
Determine host bits required using the formula 2n2required hosts2^n - 2 \ge \text{required hosts}
For 15 hosts: 2n215    2n172^n - 2 \ge 15 \implies 2^n \ge 17. The smallest integer nn satisfying this is n=5n = 5 host bits (25=322^5 = 32).
Two IP addresses in every standard IPv4 subnet are reserved for the Network ID (all host bits 0) and Broadcast address (all host bits 1).
2
Calculate the CIDR prefix length from the host bits
Prefix length =325=27= 32 - 5 = 27 (written as /27).
An IPv4 address consists of 32 bits total. Subtracting host bits yields network prefix bits.
3
Verify usable host count for /27
252=302^5 - 2 = 30 usable addresses. Since 301530 \ge 15, /27 is the smallest valid subnet mask.
A /28 prefix only yields 242=142^4 - 2 = 14 usable host addresses, failing to support 15 nodes.

Anahtar Kavram

Subnet Usable Host Calculation
ÖncekiSayfa 2 / 22Sonraki
Network Implementation Alıştırma Soruları — CompTIA Network+ — Sayfa 2 | Examkin