Network Troubleshooting

486 soru

Soru 241Soru

A network technician is troubleshooting an issue where workstations in a remote branch office cannot resolve hostnames within the internal domain `internal.corp.com`, although external internet domains resolve normally. The technician runs diagnostic commands from a affected workstation with the following results:

> nslookup internal.corp.com
Server: 192.168.1.1
Address: 192.168.1.1#53

** server can't find internal.corp.com: SERVFAIL

> dig @10.10.20.5 internal.corp.com
;; QUESTION SECTION:
;internal.corp.com. IN A

;; ANSWER SECTION:
internal.corp.com. 3600 IN A 10.10.20.50

Based on the output, which TWO of the following are the most likely root causes of this name resolution failure? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The local router/resolver at 192.168.1.1 lacks a conditional forwarding rule configured for the `internal.corp.com` domain zone.; Firewall rules or access control lists (ACLs) are filtering DNS traffic between the local resolver (192.168.1.1) and the authoritative DNS server (10.10.20.5).

Cevap

The most likely root causes are that the local DNS resolver at 192.168.1.1 lacks a conditional forwarder for the internal domain, and network firewall or ACL policies are blocking DNS traffic (port 53) between the local resolver and the internal authoritative DNS server.
Directly querying the internal DNS server at 10.10.20.5 successfully returns the IP address, proving the DNS record exists and is valid. The failure only occurs when client workstations query their default local gateway/resolver (192.168.1.1), returning a SERVFAIL error. This occurs when the local resolver either does not have a conditional forwarder configured to send requests for `internal.corp.com` to 10.10.20.5, or when firewalls/ACLs block port 53 communication between 192.168.1.1 and 10.10.20.5.

Adım Adım Çözüm

1
Analyze the `nslookup` command output
The workstation queries its local DNS server (192.168.1.1), which returns a `SERVFAIL` status message for `internal.corp.com`.
SERVFAIL indicates the local resolver encountered an error attempting to process the query recursively or forward it.
2
Analyze the `dig` command output
Directly targeting the authoritative internal DNS server (`dig @10.10.20.5`) returns a valid A record (`10.10.20.50`).
This confirms that the record exists on the authoritative server and the server itself is functioning correctly.
3
Identify the break in the resolution path
The failure occurs specifically when 192.168.1.1 is tasked with resolving the query.
This points to either a misconfiguration on 192.168.1.1 (missing conditional forwarder) or network path blocking between 192.168.1.1 and 10.10.20.5.

Anahtar Kavram

Troubleshooting Split-Horizon DNS and Resolver Forwarding
Soru 242Soru

A network technician is investigating why users on subnet 10.20.4.0/2410.20.4.0/24 cannot access a secure internal web portal at 10.20.10.1510.20.10.15 over HTTPS. The technician runs a traceroute command from a client workstation (10.20.4.5010.20.4.50), which yields the following output:

Traceroute to 10.20.10.15 over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 10.20.4.1
2 2 ms 1 ms 2 ms 10.20.1.2
3 * * * Request timed out.

An inspection of the router at 10.20.1.210.20.1.2 reveals the following inbound Access Control List (ACL) applied on interface GigabitEthernet0/1:

access-list 105 permit tcp 10.20.4.0 0.0.0.255 host 10.20.10.15 eq 80
access-list 105 permit icmp 10.20.4.0 0.0.0.255 host 10.20.10.15

Based on these diagnostic outputs, which of the following is the root cause of the connection failure?

Cevabı ve açıklamayı göster

Cevap: The Access Control List permits HTTP traffic on TCP port 80 but lacks a permit entry for HTTPS traffic on TCP port 443, causing secure requests to be dropped by the implicit deny rule.

Cevap

The Access Control List permits HTTP traffic on TCP port 80 but lacks a permit entry for HTTPS traffic on TCP port 443, causing secure requests to be dropped by the implicit deny rule.
The traceroute output confirms that traffic successfully traverses the local gateway (10.20.4.110.20.4.1) and reaches router 10.20.1.210.20.1.2. However, the inbound ACL configured on router 10.20.1.210.20.1.2 only contains explicit permit statements for TCP port 80 (HTTP) and ICMP. Because HTTPS uses TCP port 443, HTTPS connections do not match any permit statements and are dropped by the implicit deny rule at the end of the access control list.

Adım Adım Çözüm

1
Analyze the traceroute diagnostic output
Hop 1 (10.20.4.1) and Hop 2 (10.20.1.2) respond promptly, but Hop 3 times out.
This indicates that local subnet routing and default gateway settings are functional up to router 10.20.1.2, where traffic is subsequently blocked.
2
Evaluate the router ACL rules against the requested service protocol
The ACL permits 'tcp eq 80' (HTTP) and 'icmp' (ping/traceroute messages), but contains no statement for HTTPS.
HTTPS uses TCP port 443. Standard IP ACLs evaluate rules top-down and end with an unwritten 'implicit deny all' rule.
3
Determine the effect of the implicit deny on HTTPS traffic
HTTPS packets destined for 10.20.10.15:443 match none of the explicit permit statements and are dropped at router 10.20.1.2.
Adding 'access-list 105 permit tcp 10.20.4.0 0.0.0.255 host 10.20.10.15 eq 443' to the access list will resolve the issue.

Anahtar Kavram

Troubleshooting ACL Filtering and Implicit Deny Rules
Tahmini Süre:1m 30s
Soru 243Soru

A network technician plugs a newly deployed workstation into switch port GigabitEthernet0/12. The host successfully obtains an IP address in the default management network (192.168.1.0/24) and can reach local hosts in that same network, but it is unable to access any resources on the Finance subnet (192.168.30.0/24). An inspection reveals that the switch port is still using its factory default configuration. Which of the following is the most likely cause of this connectivity issue?

Cevabı ve açıklamayı göster

Cevap: The switch port is assigned to the default VLAN 1 rather than the designated Finance VLAN.

Cevap

The switch port is assigned to the default VLAN 1 rather than the designated Finance VLAN.
When a managed switch port remains in its default factory configuration, it is assigned to VLAN 1 (the default VLAN). As a result, any host connected to that port will reside in the VLAN 1 broadcast domain rather than the intended VLAN (such as VLAN 30 for Finance). To resolve the issue, the administrator must configure the interface as an access port and assign it to VLAN 30.

Adım Adım Çözüm

1
Analyze the observed IP addressing and port configuration status.
The host received an IP address in the default network (192.168.1.0/24) corresponding to VLAN 1 because the unconfigured switch port defaults to VLAN 1.
Unconfigured Ethernet ports on a managed switch belong to the default broadcast domain (VLAN 1).
2
Determine why the host cannot reach the Finance subnet (192.168.30.0/24).
Because the host port is in VLAN 1, it cannot reach VLAN 30 resources without proper port VLAN reassignment and routing.
VLANs isolate broadcast domains at Layer 2.

Anahtar Kavram

Default Access Port VLAN Assignment
Soru 244Soru

A network technician is troubleshooting a workstation that cannot access external web services. Arrange the command-line network utilities in the correct logical sequence of execution to systematically isolate the issue from the local host configuration to external path reachability and name resolution.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct logical order of execution is: 1. ipconfig /all, 2. ping 192.168.1.1, 3. tracert 8.8.8.8, 4. nslookup www.example.com.
A structured troubleshooting approach starts on the local machine with ipconfig /all to verify interface settings, moves to testing the local gateway with ping, extends to remote internet path checking via tracert, and concludes with domain name resolution verification via nslookup.

Adım Adım Çözüm

1
Run ipconfig /all to examine local host IP settings.
Confirms the host has a valid IP address and identifies the configured default gateway.
Troubleshooting must begin by verifying that the local adapter is properly configured and functional.
2
Run ping against the default gateway IP address (192.168.1.1).
Confirms local network interface communication and switch port connectivity.
Verifying local gateway reachability ensures local network segment connectivity works before testing remote paths.
3
Run tracert to a known public IP address (8.8.8.8).
Maps the hop-by-hop path across external routers to isolate routing failures.
Testing IP routing to an external IP ensures IP packets can exit the local network independently of DNS name resolution.
4
Run nslookup for the target domain name (www.example.com).
Tests whether the configured DNS server can resolve domain names to IP addresses.
Name resolution testing should occur after basic IP connectivity and remote path reachability have been established.

Anahtar Kavram

Standard systematic CLI network troubleshooting methodology progresses from local host configuration verification up through local gateway ping, remote path tracing, and application domain name resolution.
Soru 245Soru

A network technician is troubleshooting a connectivity issue where hosts on VLAN 20 (192.168.20.0/24192.168.20.0/24) are unable to access an enterprise application server at 10.100.50.2510.100.50.25. Place the following diagnostic and remediation steps in the correct order according to standard CompTIA network troubleshooting methodology, from first step to last step.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct troubleshooting order begins with testing local gateway reachability, followed by using traceroute to locate the failing hop, inspecting the routing table at that hop, reviewing ACL rules on the interface, and finally implementing the fix to verify restored connectivity.
Network troubleshooting follows a logical divide-and-conquer path: verify local gateway access first, trace the path to locate the failure hop, verify routing table entries at that hop, audit interface ACL policies, and conclude by executing the fix and verifying full end-to-end application access.

Adım Adım Çözüm

1
Ping the local default gateway (192.168.20.1192.168.20.1)
Confirms local network link and IP configuration on the client workstation are working.
Troubleshooting should always begin at the local segment before analyzing remote network infrastructure.
2
Run traceroute to target IP 10.100.50.2510.100.50.25
Identifies the exact intermediate router where packet forwarding ceases.
Traceroute narrows down the problem area across a multi-hop routed infrastructure.
3
Check the routing table on the target router
Verifies if the router possesses an active next-hop route to 10.100.50.0/2410.100.50.0/24.
Unroutable traffic is immediately dropped by routers lacking a matching route entry.
4
Examine interface ACL configurations
Identifies any explicit deny statements or implicit deny rules dropping packets on the active path.
Security filters override routing logic when configured to drop specific source/destination traffic.
5
Apply resolution and perform end-to-end verification
Restores full communication between VLAN 20 hosts and 10.100.50.2510.100.50.25.
Standard methodology requires verifying full system functionality after implementing a fix.

Anahtar Kavram

Methodological troubleshooting of routed networks by isolating issues from local gateway reachability to path routing tables and ACL security filters.
Soru 246Soru

A network administrator is conducting a post-implementation review of a enterprise wireless deployment across various campus zones. Match each observed wireless signal anomaly to its underlying radio frequency (RF) or configuration cause.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Client devices experience severe throughput degradation and latency spikes in the cafeteria during lunch hours without any increase in Wi-Fi network traffic.
Ground-level patio users report negligible Wi-Fi signal directly beneath a high-gain omnidirectional antenna mounted flat on a third-story roof deck.
Laptops moving into an edge conference room maintain low-data-rate connections to a central hallway access point despite standing directly beneath a fully functional local access point.
Wi-Fi signal strength drops by over 25 dBm after passing through newly installed office partitions featuring architectural tinted low-emissivity (Low-E) glass.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Cafeteria performance drop matches Non-802.11 RF interference within the shared 2.4 GHz ISM band. 2. Roof antenna patio dead zone matches Vertical beamwidth limitations and elevation pattern dead zones. 3. Conference room roaming delay matches Sticky client behavior caused by unoptimized roam trigger thresholds. 4. Low-E glass attenuation matches RF signal attenuation and absorption due to metallic film coatings.
Each symptom directly corresponds to a specific physical RF property or client behavior: Non-802.11 microwave emissions cause cafeteria interference; high-gain omnidirectional antenna patterns create vertical dead zones underneath; sticky client driver thresholds cause delayed roaming to closer APs; and metallic Low-E glass coatings introduce strong signal attenuation.

Adım Adım Çözüm

1
Analyze the cafeteria symptom where non-Wi-Fi activity impairs performance during lunch hours.
Identify that microwave ovens and Bluetooth devices release raw RF energy in the 2.4 GHz spectrum, increasing the noise floor.
Non-802.11 interference causes frame retransmissions without showing up as decodable Wi-Fi frames.
2
Examine the antenna pattern characteristics of the elevated high-gain omnidirectional antenna.
Recognize that higher gain compresses the elevation beamwidth horizontally, diminishing signal directly above and below the antenna axis.
Omnidirectional high-gain antennas direct energy outward horizontally, creating vertical dead zones underneath.
3
Evaluate the roaming behavior of laptops entering the edge conference room.
Identify sticky client behavior, where the client device decision algorithm holds onto an existing association until signal degrades significantly.
Clients drive roaming decisions, and unoptimized roaming thresholds cause devices to stay connected to distant APs.
4
Assess the impact of Low-E glass partitions on signal attenuation.
Determine that metallic oxide layers on Low-E glass absorb and reflect RF signals, drastically reducing received signal strength (RSSI).
Dense construction materials coated with metals act as severe RF attenuators.

Anahtar Kavram

Identifying wireless RF propagation anomalies, antenna propagation patterns, non-Wi-Fi interference sources, and client roaming behavior during wireless network troubleshooting.
Soru 247Soru

A network technician is inspecting a newly terminated Cat 6 Ethernet patch cable that is failing to transmit data. To confirm that each of the eight individual conductors is connected to its corresponding pin on both ends without any open circuits or shorts, which diagnostic tool should the technician use?

Cevabı ve açıklamayı göster

Cevap: Wire mapper

Cevap

The technician should use a wire mapper to test wire continuity and pin assignments on both ends of the cable.
A wire mapper is the primary tool used to verify that all eight conductors in a twisted-pair copper cable are terminated correctly according to T568A or T568B pinout standards, verifying continuity and identifying miswires, opens, or shorts.

Adım Adım Çözüm

1
Identify the goal of the physical layer test.
The requirement is to verify pin-to-pin wiring continuity and conductor alignment on an RJ-45 twisted-pair copper patch cable.
Improper pin terminations, disconnected conductors, or crossed wires prevent link establishment.
2
Select the tool dedicated to verifying conductor pinouts.
A wire mapper is designed specifically to detect open conductors, short circuits, and pin mapping mismatches across copper Ethernet pairs.
It is the direct and standard tool for verifying proper RJ-45 conductor pin assignments.

Anahtar Kavram

Pinout and Continuity Testing with a Wire Mapper
Soru 248Soru

A network administrator is troubleshooting network reachability for a newly installed server in an enterprise datacenter. The host is assigned the IPv4 address 172.16.50.130172.16.50.130 with a subnet mask of 255.255.255.192255.255.255.192 (/26/26). The administrator discovers that while the host can ping its local loopback address, it cannot establish SSH connections to a remote server at 172.16.50.200/26172.16.50.200/26 or reach external networks.

The host IP configuration is verified as follows:
- IPv4 Address: 172.16.50.130172.16.50.130
- Subnet Mask: 255.255.255.192255.255.255.192
- Default Gateway: 172.16.50.126172.16.50.126

The router interface servicing this VLAN is configured as follows:
text
interface GigabitEthernet0/0.50
encapsulation dot1Q 50
ip address 172.16.50.129 255.255.255.192
ip access-group VLAN50_IN in
!
ip access-list extended VLAN50_IN
permit tcp 172.16.50.128 0.0.0.63 any eq 22
permit icmp 172.16.50.128 0.0.0.63 any

Which of the following identifies the primary root cause of the connectivity failure?

Cevabı ve açıklamayı göster

Cevap: The configured default gateway (172.16.50.126172.16.50.126) resides in a different IP subnet than the host (172.16.50.128/26172.16.50.128/26), preventing ARP resolution for off-subnet destinations.

Cevap

The primary root cause of the connectivity failure is that the configured default gateway (172.16.50.126) resides on a different IP subnet than the source host (172.16.50.128/26), which prevents Layer 2 ARP resolution for off-subnet traffic.
The host IP address 172.16.50.130172.16.50.130 with mask 255.255.255.192255.255.255.192 (/26/26) places the host in the 172.16.50.128/26172.16.50.128/26 subnet, which has a usable address range of 172.16.50.129172.16.50.129 through 172.16.50.190172.16.50.190. The configured default gateway (172.16.50.126172.16.50.126) falls into the preceding subnet (172.16.50.64/26172.16.50.64/26). Because the gateway address is outside the host's local subnet, the host cannot send ARP requests to resolve the gateway's MAC address, completely blocking off-subnet routing.

Adım Adım Çözüm

1
Calculate the subnet boundaries for the host IP address using the subnet mask 255.255.255.192255.255.255.192 (/26/26).
A /26/26 mask yields block sizes of 64 (256192=64256 - 192 = 64). Subnet ranges are Subnet 0 (172.16.50.0/26172.16.50.0/26), Subnet 1 (172.16.50.64/26172.16.50.64/26), Subnet 2 (172.16.50.128/26172.16.50.128/26), and Subnet 3 (172.16.50.192/26172.16.50.192/26).
Determining exact subnet boundaries establishes which IP addresses reside on the same broadcast domain.
2
Identify the subnet belonging to the host IP 172.16.50.130172.16.50.130 and determine its valid usable IP range.
The host IP 172.16.50.130172.16.50.130 falls into Subnet 2 (172.16.50.128/26172.16.50.128/26). Network address is 172.16.50.128172.16.50.128, broadcast address is 172.16.50.191172.16.50.191, and usable host IPs range from 172.16.50.129172.16.50.129 to 172.16.50.190172.16.50.190.
Host IP verification confirms that 172.16.50.130172.16.50.130 is a valid usable address within Subnet 2.
3
Evaluate the location of the configured default gateway IP 172.16.50.126172.16.50.126 relative to Subnet 2.
The IP 172.16.50.126172.16.50.126 falls into Subnet 1 (172.16.50.64/26172.16.50.64/26), where usable IPs span 172.16.50.65172.16.50.65 to 172.16.50.126172.16.50.126. The router's actual interface IP for VLAN 50 is 172.16.50.129172.16.50.129.
A host must have a default gateway that resides within its own local IP subnet to complete local ARP requests and forward frames to its Layer 3 exit point.
4
Determine the impact of a default gateway subnet mismatch on traffic forwarding.
When the host attempts to reach an off-subnet destination (172.16.50.200172.16.50.200), it determines that 172.16.50.126172.16.50.126 is off-link (outside 172.16.50.128/26172.16.50.128/26) and fails to generate ARP requests for 172.16.50.126172.16.50.126, dropping packet transmission locally.
Hosts cannot send traffic to a default gateway that does not share their local subnet.

Anahtar Kavram

Default Gateway Subnet Mismatch Diagnosis
Tahmini Süre:3m 0s
Soru 249Soru

Match each physical network cabling fault or diagnostic condition on the left with its underlying physical cause on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Excessive Near-End Crosstalk (NEXT) detected on a Cat 6A link test
Unusually high optical signal attenuation (dB loss) measured across a fiber patch link
Wire mapper reports split pairs despite showing correct pin-to-pin electrical continuity
Intermittent optical link degradation occurring whenever a server rack door is closed

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

1. Excessive NEXT matches untwisted conductor pairs beyond TIA/EIA limits near the punch-down block.
2. High optical dB attenuation matches microscopic dust/oil on the ferrule end-face.
3. Split pairs with valid continuity match pins connected using conductors from separate physical pairs.
4. Intermittent fiber drops when rack door closes match fiber pinching that exceeds minimum bend radius.
Each diagnostic finding directly correlates with its underlying physical layer failure mechanism. Excessive conductor untwisting at termination causes high NEXT by eliminating inductive noise cancellation. Ferrule contamination causes light scattering and elevated optical dB loss. Split pairs preserve electrical continuity while pairing incorrect conductors together. Physical cable pinching causes macrobending, violating the minimum bend radius and leaking optical signal when rack doors exert pressure.

Adım Adım Çözüm

1
Analyze the physical cause of Near-End Crosstalk (NEXT).
Identify that pair twisting cancels out electromagnetic interference; untwisting conductors beyond TIA/EIA standards at termination points degrades pair isolation and spikes NEXT.
NEXT measures internal cross-talk noise leaking between adjacent wire pairs near the local transmitter.
2
Evaluate the cause of optical insertion loss / dB attenuation.
Recognize that surface contamination on the optical ferrule end-face prevents clean optical contact and refracts light away from the core.
Cleanliness is critical for fiber connections; microscopic debris blocks light transmission.
3
Differentiate split pair defects from standard miswires.
Determine that split pairs maintain pin-to-pin continuity but mismatch physical twist pairings, breaking noise cancellation.
Standard continuity testers miss split pairs because current flows correctly pin-to-pin, but twist shielding benefits are lost.
4
Diagnose cabinet door pressure on fiber cables.
Link physical pressure from closed rack doors to macrobending losses caused by exceeding the fiber's minimum bend radius.
Excessive bending changes the critical angle of internal reflection within the optical fiber core, causing light to escape into the cladding.

Anahtar Kavram

Physical layer cabling defects and diagnostic indicators in copper and fiber networks
Tahmini Süre:2m 0s
Soru 250Soru

A workstation on a corporate network is unable to connect to local network resources or access the internet. A technician executes `ipconfig /all` on the workstation and observes an IPv4 address of 169.254.45.12169.254.45.12 with a subnet mask of 255.255.0.0255.255.0.0. Which of the following is the most likely cause of this connectivity issue?

Cevabı ve açıklamayı göster

Cevap: The workstation failed to obtain an IP lease from a DHCP server and assigned itself an Automatic Private IP Addressing (APIPA) address.

Cevap

The workstation failed to contact a DHCP server to acquire an IP address lease, resulting in the self-assignment of an Automatic Private IP Addressing (APIPA) address.
An IP address starting with 169.254.x.x169.254.x.x (specifically in the 169.254.0.0/16169.254.0.0/16 range) is an Automatic Private IP Address (APIPA). Operating systems assign an APIPA address when a DHCP client is unable to contact a DHCP server to obtain an IP address lease. Because APIPA addresses are non-routable, the host cannot communicate beyond its local layer 2 segment.

Adım Adım Çözüm

1
Analyze the reported IPv4 address snippet from ipconfig output.
The workstation reports 169.254.45.12169.254.45.12 with subnet mask 255.255.0.0255.255.0.0.
The address range 169.254.0.0/16169.254.0.0/16 is reserved by IANA for IPv4 link-local addressing (APIPA).
2
Identify the mechanism that generates addresses in the 169.254.0.0/16 range.
Host OS automatically generates an APIPA address when dynamic configuration (DHCP) fails.
When a client sends a DHCPDISCOVER broadcast and receives no DHCPOFFER within the timeout period, it defaults to APIPA to allow limited local link communication.
3
Select the option describing failed DHCP acquisition and APIPA generation.
Confirm that failing to reach a DHCP server and assigning an APIPA address is the root symptom.
This directly explains both the specific IP address assigned and the inability to route to external or non-link-local network resources.

Anahtar Kavram

Automatic Private IP Addressing (APIPA) Diagnosis
Soru 251Soru

Following a recent core switch update, enterprise workstations connected to VLAN 30 (10.30.0.0/2410.30.0.0/24) fail to communicate outside their local subnet. Preliminary reports indicate workstations are assigning themselves addresses in the range 169.254.0.0/16169.254.0.0/16. Place the following diagnostic and remediation steps in the correct chronological sequence to isolate and resolve this DHCP assignment failure according to standard network troubleshooting methodology.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with verifying the client's APIPA state, followed by checking the local gateway's DHCP relay helper address, auditing intermediate firewall filtering rules for UDP ports 67/68, inspecting DHCP server scope statistics, and finally renewing the client IP lease.
The correct troubleshooting sequence follows the standard CompTIA troubleshooting framework, moving logically from host symptom verification to local gateway relay inspection, intermediate network path filter checks, backend server scope verification, and final client validation.

Adım Adım Çözüm

1
Inspect client network configuration using `ipconfig /all`.
Confirms host has an Automatic Private IP Addressing (169.254.x.x169.254.x.x) address, indicating DHCPDISCOVER requests timed out.
Establishing the baseline symptom on the local host isolates the scope of the problem to IP address auto-configuration failure.
2
Check the VLAN 30 interface configuration on the default gateway switch.
Verifies whether the `ip helper-address` directive is properly configured to forward DHCP broadcasts across subnet boundaries as unicast packets.
Since clients reside on a separate subnet from the central DHCP server, missing relay configuration is the most common cause of multi-VLAN DHCP failure.
3
Audit ACLs and security rules along the path between relay agent and DHCP server.
Ensures that unicast DHCP requests (UDP port 67) and responses (UDP port 68) are permitted through network firewalls.
Even with a valid helper address, network transport controls can drop unicast relay packets before reaching the server.
4
Examine the DHCP server scope statistics for 10.30.0.0/2410.30.0.0/24.
Determines if the IP address pool has been exhausted or if the scope is deactivated.
If the relay agent successfully reaches the server, the server must have an active pool with unassigned addresses to grant a lease.
5
Re-issue a DHCP request on the client via `ipconfig /renew`.
Confirms the host acquires a valid 10.30.0.0/2410.30.0.0/24 IP address, subnet mask, default gateway, and DNS servers.
Verifying functionality directly on the affected host ensures the issue is fully remediated and tests the complete end-to-end lease acquisition process.

Anahtar Kavram

Troubleshooting DHCP Relay and IP Addressing Services across Subnets
Soru 252Soru

A network analyst suspects that an improper MTU size configuration on a newly deployed site-to-site IPsec VPN gateway is causing large HTTPS file transfers to fail. The analyst performs a ping sweep using unfragmented packets (14001400 bytes with the Don't Fragment flag set) and confirms that packets exceeding 13801380 bytes are dropped at the tunnel interface. Having verified the cause of the issue, which step should the analyst take next according to the CompTIA troubleshooting methodology?

Cevabı ve açıklamayı göster

Cevap: Develop a plan of action to adjust the interface MTU and TCP MSS settings while identifying potential side effects.

Cevap

Develop a plan of action to adjust the interface MTU and TCP MSS settings while identifying potential side effects.
The correct response reflects Step 4 of the CompTIA troubleshooting methodology: 'Establish a plan of action to resolve the problem and identify potential side effects.' Because the analyst just finished testing and validating the theory (Step 3) via ping tests with the DF flag, the direct next requirement is to plan the resolution and evaluate potential side effects before executing changes.

Adım Adım Çözüm

1
Identify the current step in the CompTIA troubleshooting methodology.
The technician tested the theory using unfragmented ping tests and confirmed the cause (Step 3: Test the theory to determine cause).
Determining the completed phase establishes where the analyst currently sits in the sequential methodology.
2
Determine the required next step in the standard 6-step CompTIA process.
Following Step 3 (Test theory), the next sequential step is Step 4: Establish a plan of action to resolve the problem and identify potential side effects.
Before making changes to production network equipment, a comprehensive plan and risk assessment must be established.

Anahtar Kavram

CompTIA Troubleshooting Methodology Step Order
Tahmini Süre:1m 15s
Soru 253Soru

A network technician is responding to connectivity issues reported by forklift operators in a distribution warehouse. The operators report that handheld Wi-Fi scanners frequently disconnect and fail to roam when driving deep into storage aisles. A wireless site survey indicates that while ceiling-mounted omnidirectional Access Points (APs) along the central walkway maintain strong signal strength of 60 dBm-60\text{ dBm}, the signal drops significantly to 85 dBm-85\text{ dBm} inside the aisle rows filled with metallic racks and densely stacked inventory. Which of the following is the primary cause of this issue, and what is the most effective solution?

Cevabı ve açıklamayı göster

Cevap: RF absorption and attenuation caused by physical metallic structures; install directional patch antennas focused down each storage aisle.

Cevap

The primary cause is RF absorption and attenuation caused by physical metallic structures. The recommended solution is to install directional patch antennas focused down each storage aisle.
Dense metallic shelving and warehouse inventory absorb and reflect radio frequency (RF) signals, causing high attenuation and creating wireless dead zones in aisles. Installing directional patch antennas aims the wireless beam down the corridor of each aisle, concentrating signal strength where handheld scanners operate.

Adım Adım Çözüm

1
Analyze the site survey data and environment description.
The signal drops from 60 dBm-60\text{ dBm} in the main walkway to a weak 85 dBm-85\text{ dBm} inside the aisles surrounded by metal shelving and inventory.
Dense metal structures act as physical RF barriers, causing signal attenuation and reflection.
2
Evaluate the current antenna design versus environmental requirements.
Omnidirectional antennas radiate signal in a 360-degree pattern, which gets blocked and absorbed by high metal shelves.
Omnidirectional antennas are ineffective when RF propagation is restricted by narrow, metallic corridors.
3
Select the appropriate antenna type for aisle coverage.
Directional patch antennas focus the RF radiation beam pattern down specific paths.
Aiming directional antennas down the length of each aisle overcomes localized attenuation and ensures reliable roaming for warehouse clients.

Anahtar Kavram

RF Attenuation & Directional Antenna Selection
Tahmini Süre:1m 30s
Soru 254Soru

A network technician needs to trace an unlabeled copper UTP cable run from a wall jack in a user's office to its corresponding port on a patch panel in the telecommunications closet. Which of the following diagnostic tools is best suited for this task?

Cevabı ve açıklamayı göster

Cevap: Tone generator and probe kit

Cevap

The tone generator and probe kit is the correct tool for tracing an unlabeled cable run from an office wall jack to a patch panel port.
A tone generator and probe kit (commonly referred to as a toner probe) is specifically designed to trace copper cabling. The generator attaches to one end of the cable run to emit an electrical signal, and the technician uses the inductive probe near the patch panel to hear where the signal is strongest, pinpointing the correct termination.

Adım Adım Çözüm

1
Identify the diagnostic objective
The task requires locating the specific physical termination of an intact copper cable run across two rooms.
The technician needs to identify which patch panel port corresponds to a specific wall outlet without disconnecting unrelated cables.
2
Select the appropriate diagnostic hardware tool
Choose a tone generator and probe kit.
The tone generator injects a high-frequency audio signal into the cable at the wall jack, and the inductive probe generates an audible tone when placed near the target wire at the patch panel.

Anahtar Kavram

Cable Tracing and Identification Tools
Soru 255Soru

A network technician is troubleshooting a switch-to-switch trunk link that is dropping traffic. Reviewing the switch console logs reveals a native VLAN mismatch error, while interface statistics report high numbers of late collisions. Which TWO configuration actions should the technician take to resolve these issues? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reconfigure both ends of the trunk link to use the same native VLAN ID.; Configure matching duplex settings (or enable auto-negotiation on both ends) for the trunk interfaces.

Cevap

The technician should configure identical native VLAN IDs on both switch trunk ports and ensure matching duplex settings across the link.
To resolve native VLAN mismatch errors, both ends of the 802.1Q trunk must be configured with the exact same native VLAN ID so untagged frames are correctly directed. To resolve late collisions, both switch ports must agree on duplex settings (either both forced to full-duplex or both using auto-negotiation), eliminating collision detection conflicts.

Adım Adım Çözüm

1
Identify the causes of the reported trunk errors from the symptoms.
The log message indicates an 802.1Q native VLAN mismatch, while late collisions point to a duplex mismatch.
Late collisions occur when one side operates in full-duplex while the other operates in half-duplex, while native VLAN mismatch occurs when trunk endpoints use different untagged VLAN IDs.
2
Select the correct remediation for native VLAN mismatch.
Aligning the native VLAN ID on both switch trunk interfaces resolves frame leakage and drops.
802.1Q trunking requires both ends of a trunk to agree on which VLAN carries untagged traffic.
3
Select the correct remediation for duplex mismatch.
Configuring matching duplex settings (or auto-negotiation on both sides) restores clean frame transmission.
Matching duplex settings ensures both ports transmit and listen according to the same collision rules.

Anahtar Kavram

Troubleshooting 802.1Q native VLAN mismatches and interface duplex mismatches on switch trunks.
Soru 256Soru

A network administrator is troubleshooting host reachability issues on an enterprise dual-stack network. Workstations cannot connect to an internal server using its hostname `app.internal.example.com`, though direct IPv6 ping tests succeed. The administrator executes the following troubleshooting command from a client system:

C:\> nslookup app.internal.example.com
Server: dns01.internal.example.com
Address: 10.0.0.53

*** dns01.internal.example.com can't find app.internal.example.com: Non-existent domain

Next, the administrator runs `nslookup -type=AAAA app.internal.example.com`, which successfully returns the IPv6 address `2001:db8:85a3::8a2e:370:7334`.

Which of the following is the root cause of the initial resolution failure?

Cevabı ve açıklamayı göster

Cevap: The DNS server lacks an IPv4 address (A) record for the target host, and the default query requested an A record.

Cevap

The DNS server lacks an IPv4 address (A) record for the target host, and the default query requested an A record.
The initial nslookup command without specified parameters queries for IPv4 address (A) records by default. Because the DNS server only contains an IPv6 address (AAAA) record for app.internal.example.com, the initial lookup fails with a 'Non-existent domain' or record missing error. Explicitly setting -type=AAAA successfully retrieves the IPv6 mapping.

Adım Adım Çözüm

1
Analyze the default nslookup output.
The tool queries the primary DNS server (10.0.0.53) for app.internal.example.com without explicit parameters, defaulting to an IPv4 host (A) record request.
Standard DNS resolution tools query for A records unless specified otherwise.
2
Compare the default command with the explicit -type=AAAA query.
The explicit query returns the IPv6 address 2001:db8:85a3::8a2e:370:7334.
This confirms that a valid AAAA record exists in DNS, but no A record has been created for IPv4.
3
Determine the root cause.
The failure occurs because the DNS zone lacks an A record while the client default lookup relies on A record resolution.
Creating an A record (or ensuring dual-stack applications query AAAA records) resolves the name resolution issue.

Anahtar Kavram

DNS Record Types and Default Command-Line Query Behavior
Soru 257Soru

A network technician needs to inspect a newly terminated Category 6 UTP patch cable to confirm proper T568B pinout alignment and verify that there are no open or shorted conductor pairs. Which TWO of the following diagnostic tools are designed to verify conductor continuity and pinout arrangement on copper twisted-pair cables?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Wiremapper; Cable certifier

Cevap

Wiremapper and Cable certifier
Both a wiremapper and a cable certifier test individual copper conductors in a twisted-pair Ethernet cable for pin alignment, shorts, opens, and reversed pairs.

Adım Adım Çözüm

1
Identify the cabling test requirement.
The requirement is to verify pinout mapping (T568B) and check for electrical continuity issues (opens/shorts) on Category 6 UTP copper cable.
Pinout arrangement and conductor continuity are Layer 1 electrical properties of twisted-pair copper media.
2
Evaluate diagnostic tools designed for copper pinout and continuity verification.
Wiremappers test pin-to-pin electrical connections across twisted pairs. Cable certifiers also execute wiremap tests as part of their comprehensive standard verification.
Both tools connect to both ends of a copper cable run to analyze pinout configuration.
3
Rule out non-applicable tools.
Optical power meters test fiber optics rather than copper conductors, while tone probes trace cable paths without analyzing individual pin connections.
Selecting media-appropriate diagnostic equipment prevents incorrect diagnosis of cabling faults.

Anahtar Kavram

Diagnostic tool selection for copper cabling continuity and pinout verification
Soru 258Soru

A network administrator installs a new set of IP phones on a dedicated voice VLAN (VLAN 40). The enterprise DHCP server resides on VLAN 10. The phones fail to obtain IP addresses and automatically configure APIPA addresses instead. Which TWO of the following resolution actions or diagnostic steps should the technician perform to troubleshoot and resolve this issue? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure an IP helper address (DHCP relay agent) pointing to the DHCP server IP on the VLAN 40 router interface.; Verify that intermediate firewalls and access control lists (ACLs) permit UDP ports 67 and 68 traffic between VLAN 40 and VLAN 10.

Cevap

The technician should configure an IP helper address (DHCP relay agent) on the VLAN 40 gateway interface and verify that intermediate ACLs permit traffic on UDP ports 67 and 68.
DHCP client requests rely on Layer 2 broadcasts that default gateway routers do not forward. Configuring an IP helper address (DHCP relay) on the interface facing the client subnet enables the router to encapsulate DISCOVER broadcasts into unicast packets directed to the central DHCP server. Additionally, verifying that security controls permit traffic on UDP ports 67 and 68 ensures that relayed DHCP traffic passes through intermediate interfaces without being dropped.

Adım Adım Çözüm

1
Identify the cause of cross-subnet DHCP request drops
Recognize that client DHCP DISCOVER messages are Layer 2 broadcasts that routers drop by default.
Devices on remote VLANs require a DHCP relay agent (IP helper) on their default gateway to forward broadcast requests as unicast traffic to a central DHCP server.
2
Verify transport protocol accessibility between subnets
Check that firewalls or router ACLs permit traffic on UDP ports 67 and 68.
Even with a relay agent active, restrictive security rules blocking UDP ports 67/68 will prevent relayed unicast DHCP messages from reaching the server or returning to the client.

Anahtar Kavram

Troubleshooting Cross-Subnet DHCP Relay and Port Accessibility
Soru 259Soru

A network engineer is troubleshooting a newly deployed 10GBASE-LR single-mode optical fiber link between two distribution switches spaced 2 kilometers apart. An optical power meter registers an excessive loss of 14 dB14\text{ dB} across the link, significantly exceeding the maximum insertion loss budget of 2.5 dB2.5\text{ dB}, despite both transceiver end-face connectors passing visual inspection with a fiber microscope. Which diagnostic tool should the engineer utilize to measure reflections and pinpoint the precise location and cause of the attenuation fault along the fiber run?

Cevabı ve açıklamayı göster

Cevap: Optical Time-Domain Reflectometer (OTDR)

Cevap

The Optical Time-Domain Reflectometer (OTDR) is the correct tool because it analyzes Rayleigh backscattering and Fresnel reflections over distance to pinpoint specific attenuation faults.
The Optical Time-Domain Reflectometer (OTDR) is designed specifically to trace optical fiber cables by sending light pulses down the fiber and analyzing backscattered light. It produces a graph displaying loss against distance, allowing engineers to identify the exact distance to high-attenuation events such as macrobends, splices, or physical breaks.

Adım Adım Çözüm

1
Evaluate the symptom and requirements
The optical fiber link experiences excessive signal loss (14 dB14\text{ dB}) somewhere along a 2 km span, but connectors are clean.
End-to-end power testing confirmed an issue exists, but does not provide distance or location details.
2
Assess diagnostic tool capabilities for fiber optics
An OTDR transmits pulsed light signals down the fiber strand and records the amplitude and timing of reflected light signals.
This signature trace identifies event locations (e.g., sharp bends, bad splices, or physical stress) relative to distance from the transmitter.
3
Select the correct physical layer diagnostic tool
Select the Optical Time-Domain Reflectometer (OTDR).
It is the only instrument capable of pinpointing fault distances along an extended optical cable pathway.

Anahtar Kavram

Pinpointing Fiber Optic Cable Faults with OTDR
Tahmini Süre:2m 0s
Soru 260Soru

Match each command-line network utility on the left with its primary diagnostic function on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

ping
tracert
nslookup
netstat

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

ping matches reachability verification; tracert matches hop-by-hop path tracing; nslookup matches DNS query testing; netstat matches active connections and listening ports inspection.
Each utility targets a distinct diagnostic domain: ping tests basic ICMP reachability; tracert maps route paths and hop latencies; nslookup queries DNS infrastructure; and netstat inspects active protocol connections and listening ports on the local machine.

Adım Adım Çözüm

1
Identify the basic reachability tool
ping sends ICMP requests to check if a remote host is reachable.
ping is the primary tool for testing Layer 3 ICMP echo response.
2
Identify the route tracing tool
tracert identifies intermediate router hops and latency along a path.
tracert increments TTL values to discover each router along the path to a destination.
3
Identify the name resolution diagnostic tool
nslookup queries DNS servers directly.
nslookup evaluates DNS record lookups and name resolution issues.
4
Identify the protocol and session statistics tool
netstat lists active connections and open ports on the local endpoint.
netstat provides socket-level information for active TCP/UDP sessions.

Anahtar Kavram

Command-Line Network Troubleshooting Utilities
Tahmini Süre:45s
ÖncekiSayfa 13 / 25Sonraki
Network Troubleshooting Alıştırma Soruları — CompTIA Network+ — Sayfa 13 | Examkin