Network Troubleshooting

486 soru

Soru 161Soru

A network technician receives reports that client workstations on a corporate subnet are unable to resolve external internet hostnames, although internal hostname resolution functions normally. Place the diagnostic and remediation steps in the correct logical sequence from initial client-side isolation to final resolution verification.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence begins with verifying network connectivity to the internal DNS server, testing recursive lookup failure on the local resolver, testing direct outbound lookup to a public DNS server, remediating server forwarder and firewall settings, and finally flushing the local client cache to verify resolution.
Effective troubleshooting follows a logical progression from local connectivity verification to service isolation, root-cause remediation, and end-state validation. Verifying network layer reachability first ensures the client can reach its assigned resolver. Testing queries against the internal DNS server isolates recursion failures. Testing queries directly against an external public resolver determines if outbound transport on port 5353 is blocked. Fixing the forwarders/firewall addresses the root cause, and flushing the client cache verifies successful end-to-end resolution.

Adım Adım Çözüm

1
Verify basic connectivity to the local DNS server.
Confirms the network interface and routing path to the primary resolver are operational.
Lower-layer connectivity issues must be ruled out before testing application-layer DNS functionality.
2
Test external DNS query against the local internal DNS server using `nslookup`.
Identifies that the internal server responds to internal names but fails or times out on external domain requests.
Isolates the failure to external recursion or upstream forwarding features on the DNS server.
3
Test direct external query to a public DNS server (such as 8.8.8.88.8.8.8) using `nslookup`.
Determines whether perimeter firewalls permit outbound UDP/TCP port 5353 traffic from the network.
Distinguishes between a network/firewall transport issue and an internal DNS server forwarder misconfiguration.
4
Correct DNS forwarder settings on the internal DNS server and ensure firewall ACLs permit egress DNS traffic.
Restores upstream name resolution processing on the internal DNS server.
Fixes the underlying infrastructure root cause permitting recursive queries to succeed.
5
Execute `ipconfig /flushdns` on the client workstation and test web browsing.
Removes old negative or stale cached entries and confirms successful domain resolution.
Ensures client applications receive freshly resolved IP addresses following service restoration.

Anahtar Kavram

Systematic DNS Troubleshooting Methodology for External Resolution and Upstream Forwarder Failures
Tahmini Süre:1m 30s
Soru 162Soru

A network technician suspects that recent Active Directory logon failures across a branch office are caused by Network Time Protocol (NTP) traffic being blocked by a newly deployed perimeter firewall. To test this theory, the technician creates a temporary logging rule on the firewall and attempts a manual time synchronization from a branch domain controller, observing that outgoing UDP port 123 packets are actively being dropped. Having confirmed that NTP packet blockage is the root cause of the synchronization failure, which of the following actions should the technician perform NEXT according to the CompTIA troubleshooting methodology?

Cevabı ve açıklamayı göster

Cevap: Develop a plan of action to modify the firewall security policy and implement the fix.

Cevap

Develop a plan of action to modify the firewall security policy and implement the fix.
According to the official CompTIA Troubleshooting Methodology, the steps are strictly ordered as: 1) Identify the problem, 2) Establish a theory of probable cause, 3) Test the theory to determine cause, 4) Establish a plan of action to resolve the problem and implement the solution, 5) Verify full system functionality and implement preventive measures, and 6) Document findings, actions, and outcomes. Because the technician has successfully tested and confirmed the theory (Step 3), the immediate next step is to establish a plan of action and implement the solution (Step 4).

Adım Adım Çözüm

1
Identify current methodology stage
The technician completed testing the theory by confirming firewall drops on UDP port 123.
Testing the theory (Step 3) confirms the root cause of the problem.
2
Determine the next sequential step in the CompTIA 6-step model
Step 4 is 'Establish a plan of action to resolve the problem and implement the solution'.
After confirming the cause, the technician must plan the remediation steps (including change management approval if necessary) and execute the implementation.

Anahtar Kavram

CompTIA Troubleshooting Methodology Order
Tahmini Süre:1m 15s
Soru 163Soru

A client workstation on VLAN 10 (10.10.10.0/2410.10.10.0/24) fails to receive an IPv4 address lease from a centralized DHCP server located on VLAN 20 (10.10.20.510.10.20.5). Which TWO of the following configurations or conditions on the intervening Layer 3 router would directly prevent the client from obtaining a DHCP lease? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: The router interface attached to VLAN 10 lacks an IP helper address (DHCP relay agent) configured to forward broadcast request packets to 10.10.20.510.10.20.5.; An inbound Access Control List (ACL) applied to the VLAN 10 router interface is blocking UDP traffic targeted at destination ports 67 and 68.

Cevap

The client fails to obtain an IP lease because the router interface on VLAN 10 is missing a DHCP relay (IP helper address) to forward broadcast traffic across subnets, and/or an Access Control List on the router is blocking UDP ports 67 and 68 used by DHCP.
DHCP Discover packets are sent as broadcasts (255.255.255.255255.255.255.255). Routers do not forward broadcasts between subnets unless a DHCP relay agent (IP helper address) is explicitly configured on the receiving interface. Additionally, DHCP relies on UDP ports 67 and 68, so blocking these ports with an ACL on the router interface prevents relay processing.

Adım Adım Çözüm

1
Analyze how DHCP broadcast packets behave at Layer 3 boundaries.
DHCP Discover messages are sent as Layer 2/3 broadcasts, which routers drop by default.
To cross subnets to reach a server on VLAN 20, the router interface on VLAN 10 must have a relay agent (IP helper address) enabled.
2
Identify required transport protocol ports for DHCP communications.
DHCP traffic uses UDP port 67 for the server and UDP port 68 for the client.
If an ACL on the router blocks these ports, DHCP messages cannot be relayed or processed.

Anahtar Kavram

DHCP Relay and Port Requirements for Cross-Subnet IP Addressing Services
Soru 164Soru

A network administrator has just completed diagnostic testing and confirmed that a failing Small Form-factor Pluggable (SFP+) optical transceiver on a core switch is causing excessive CRC errors and link flapping. According to the CompTIA troubleshooting methodology, which TWO of the following actions should the administrator take next as part of the immediate following step?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Develop a detailed plan of action to replace the faulty optical transceiver while identifying any potential operational impacts.; Execute the physical replacement of the compromised SFP+ module during an approved maintenance window.

Cevap

The administrator should develop a detailed plan of action identifying potential effects and execute the physical replacement of the transceiver during an approved window.
Once a theory of probable cause is confirmed in Step 3 of the CompTIA troubleshooting methodology, the administrator must move to Step 4: 'Establish a plan of action to resolve the problem and identify potential effects', followed by implementing the fix. Developing a structured plan to minimize outage risks and subsequently replacing the hardware during a maintenance window represent the correct actions within this phase.

Adım Adım Çözüm

1
Identify the current phase of the troubleshooting methodology based on the scenario state.
The scenario states that diagnostic testing is complete and the theory of probable cause has been confirmed (Step 3: Test the theory to determine cause).
Determining the completed phase establishes where the administrator is in the CompTIA 6-step sequence.
2
Determine the mandatory next phase in the official CompTIA sequence.
The immediate next phase is Step 4: Establish a plan of action to resolve the problem and identify potential effects, then implement the solution or escalate.
CompTIA methodology strictly requires planning and assessing impact prior to implementation, followed by implementing the fix.
3
Select the correct actions that belong strictly to Step 4.
Developing a plan of action while considering potential effects and replacing the module during a scheduled window belong directly to Step 4.
Actions involving verification belong to Step 5, while final logging and documentation belong to Step 6.

Anahtar Kavram

CompTIA Troubleshooting Methodology Sequence (Step 3 to Step 4 transition)
Soru 165Soru

A network technician is troubleshooting a suspected physical wiring fault on an unshielded twisted-pair (UTP) Ethernet cable run. Which of the following tools should the technician use to identify pinout errors and locate physical conductor breaks? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Using a wiremap tester to verify pin continuity and detect split pair conditions; Using a Time-Domain Reflectometer (TDR) to locate the precise distance to an open or short circuit

Cevap

The correct tools are using a wiremap tester to verify pin continuity and detect split pairs, and using a Time-Domain Reflectometer (TDR) to locate the precise distance to an open or short circuit.
A wiremap tester evaluates individual conductor connections to identify open circuits, shorts, reversed pairs, and split pairs across RJ45 terminations. A Time-Domain Reflectometer (TDR) transmits electrical pulses down copper pairs and measures signal reflections to calculate the exact distance to physical damage such as a severed wire or short.

Adım Adım Çözüm

1
Identify tools designed specifically for copper physical layer continuity and fault diagnostics.
Wiremap testers and TDRs evaluate the electrical continuity and physical integrity of copper conductor pairs.
Wiremap testers verify pin assignments and pair alignment, while TDRs send electrical pulses and analyze signal reflections to pinpoint conductor breaks.
2
Eliminate misapplied or incompatible network testing tools.
Tone probes are limited to physical cable tracing, and optical power meters are strictly designed for fiber optics.
Tone generators do not perform quantitative electrical signal measurement, and optical meters cannot interface with copper conductors.

Anahtar Kavram

Selecting Appropriate Tools for Copper Physical Cabling Troubleshooting
Soru 166Soru

A network engineer is troubleshooting name resolution failures for a corporate portal on a Linux workstation. The engineer executes an initial query using `dig @10.50.1.10 portal.corp.local` and receives the following output snippet:

text
;; flags: qr rd ra tc; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; MSG SIZE rcvd: 52

To troubleshoot further, the engineer attempts an explicit TCP query using `dig +tcp @10.50.1.10 portal.corp.local`, which results in a connection timeout after 15 seconds. Standard UDP ICMP reachability to `10.50.1.10` is verified. Which of the following is the root cause of this name resolution failure?

Cevabı ve açıklamayı göster

Cevap: An intermediate network security device is blocking TCP port 53, preventing the resolver from completing DNS fallback after receiving a truncated UDP response.

Cevap

An intermediate network security device is blocking TCP port 53, preventing the resolver from completing DNS fallback after receiving a truncated UDP response.
The output from `dig` explicitly shows the `tc` (truncation) header flag. According to DNS standard specifications (RFC 1035), when a server response exceeds the maximum allowed payload size for a UDP datagram, the server sets the `tc` bit. Upon detecting this bit, the client's resolver is designed to re-issue the query using TCP on port 53 to receive the full data stream. Because the explicit `dig +tcp` query timed out while UDP/ICMP reachability was confirmed, an intermediate firewall or security control is blocking TCP port 53, preventing the resolution process from completing.

Adım Adım Çözüm

1
Analyze the initial DNS query output flags.
The `dig` output contains the `tc` (truncated) flag, indicating the server's response was larger than the maximum allowed UDP packet size and was cut off.
When a DNS response payload exceeds the UDP limit, the server sets `tc` to instruct the client to re-query using TCP.
2
Analyze the explicit TCP query result (`dig +tcp`).
The command timed out after 15 seconds.
A timeout specifically on TCP port 53 (while ICMP/UDP reachability exists) points to intermediate filtering (Access Control List or firewall) blocking TCP traffic on port 53.
3
Synthesize findings to determine root cause.
Because UDP responses are truncated and TCP port 53 is blocked, the client cannot successfully retrieve the complete DNS resource records.
DNS relies on TCP port 53 for fallback when responses exceed UDP size limits. Blocking TCP port 53 breaks large DNS responses.

Anahtar Kavram

DNS Protocol Operations & TCP Fallback Truncation Mechanics
Tahmini Süre:2m 0s
Soru 167Soru

A network administrator is troubleshooting persistent latency spikes and excessive frame retransmissions in an executive conference facility. A site survey reveals that adjacent access points are broadcasting on overlapping 40 MHz channels within the 2.4 GHz spectrum, and legacy 802.11b basic data rates (1 Mbps and 2 Mbps) remain enabled across all radios. Which TWO actions should the administrator take to mitigate these wireless performance issues?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Reconfigure all 2.4 GHz radios to use 20 MHz channel widths and assign non-overlapping channels (1, 6, or 11).; Disable basic data rates below 12 Mbps on the wireless controller to eliminate legacy management frame overhead.

Cevap

Reconfigure all 2.4 GHz radios to use 20 MHz channel widths on non-overlapping channels (1, 6, or 11), and disable basic data rates below 12 Mbps on the wireless controller.
The performance issues are caused by RF channel overlap and airtime congestion. In the 2.4 GHz spectrum, 40 MHz channel bonding consumes almost the entire band, making channel overlap inevitable. Restricting 2.4 GHz radios to 20 MHz channel widths using non-overlapping channels (1, 6, and 11) removes adjacent-channel interference. Additionally, management and control frames must be sent at the lowest enabled basic data rate; disabling legacy rates below 12 Mbps reduces the airtime required for overhead traffic, freeing up RF capacity.

Adım Adım Çözüm

1
Analyze the site survey findings to identify physical layer and airtime efficiency bottlenecks.
Identified two primary issues: 40 MHz channel bonding in 2.4 GHz causing severe channel overlap, and 1-2 Mbps basic data rates causing airtime hogging by management frames.
The 2.4 GHz band only has 83.5 MHz of total spectrum, making 40 MHz channels guarantee overlap; legacy basic rates force control frames (beacons, ACKs) to transmit at slow speeds.
2
Remediate radio frequency channel overlap in the 2.4 GHz spectrum.
Reduce channel width to 20 MHz and assign channels 1, 6, and 11 across adjacent access points.
20 MHz channel widths allow exactly three non-overlapping channels (1, 6, 11) in North America/standard regulatory domains, eliminating adjacent-channel interference.
3
Optimize wireless airtime utilization on the controller.
Disable basic rates of 1 Mbps, 2 Mbps, 5.5 Mbps, and 11 Mbps, setting the minimum mandatory rate to 12 Mbps.
Management and multicast frames are sent at the lowest mandatory basic rate. Raising this threshold speeds up frame transmission and reduces channel utilization.

Anahtar Kavram

2.4 GHz Channel Planning and Wireless Airtime Efficiency Optimization
Tahmini Süre:2m 0s
Soru 168Soru

A network technician is troubleshooting a newly deployed web server configured with IP address 10.50.12.35/2710.50.12.35/27. The server can ping another host on the local subnet at 10.50.12.3410.50.12.34, but it cannot reach external networks or receive HTTPS requests from internet clients.

Reviewing the device settings reveals:
- Router LAN Interface IP: 10.50.12.33/2710.50.12.33/27
- Server Default Gateway: 10.50.12.110.50.12.1
- Router WAN Interface Inbound ACL:
- `permit tcp any host 10.50.12.35 eq 80`
- `deny ip any any`

Which TWO of the following troubleshooting actions are required to restore full intended connectivity for the server?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Update the server's default gateway address to 10.50.12.3310.50.12.33.; Add a rule to the router WAN inbound ACL permitting TCP port 443 traffic to 10.50.12.3510.50.12.35.

Cevap

The server's default gateway address must be changed to 10.50.12.3310.50.12.33, and an inbound ACL rule permitting TCP port 443 to host 10.50.12.3510.50.12.35 must be added to the router's WAN interface.
The host resides on the 10.50.12.32/2710.50.12.32/27 subnet. The gateway IP 10.50.12.110.50.12.1 is outside this subnet, preventing remote network access until updated to the router interface address 10.50.12.3310.50.12.33. Additionally, incoming HTTPS traffic uses TCP port 443, which is blocked by the WAN ACL's implicit deny until an explicit permit rule for TCP port 443 is inserted.

Adım Adım Çözüm

1
Analyze the subnet boundaries for the server's IP configuration.
For 10.50.12.35/2710.50.12.35/27, the network ID is 10.50.12.3210.50.12.32, the broadcast address is 10.50.12.6310.50.12.63, and usable host IP addresses range from 10.50.12.3310.50.12.33 to 10.50.12.6210.50.12.62.
Determines whether the gateway address assigned to the server resides on the same local subnet.
2
Identify the routing error causing external host unreachability.
The configured gateway 10.50.12.110.50.12.1 is on a different subnet (10.50.12.0/2710.50.12.0/27), making it unreachable as a Layer 3 next hop. Updating the default gateway to 10.50.12.3310.50.12.33 resolves outbound routing.
A host must have a valid default gateway on its local subnet to send packets outside its local segment.
3
Evaluate the WAN interface inbound ACL for HTTPS traffic.
The ACL permits port 80 (HTTP) but lacks a permit rule for port 443 (HTTPS). Due to the implicit deny rule (`deny ip any any`), incoming HTTPS packets are dropped.
An explicit ACL permit rule for TCP port 443 is necessary to allow inbound HTTPS traffic.

Anahtar Kavram

Subnet Default Gateway Alignment & Access Control List Port Filtering
Soru 169Soru

A network administrator suspects that a twisted-pair copper cable run inside a wall cavity has a broken conductor, causing a complete link failure. Which of the following tools should the administrator use to locate the exact distance to the break along the cable run?

Cevabı ve açıklamayı göster

Cevap: Time-Domain Reflectometer (TDR)

Cevap

Time-Domain Reflectometer (TDR)
A Time-Domain Reflectometer (TDR) issues electrical signals along copper wire pairs and calculates the precise distance to an open or short circuit based on signal reflections.

Adım Adım Çözüm

1
Identify the primary diagnostic requirement in the scenario.
The goal is to measure the distance along a copper cable to locate a conductor break (open circuit).
Different testing tools serve distinct functions; finding the distance to a fault requires signal reflection measurements.
2
Evaluate the capabilities of metallic cable testing tools.
A Time-Domain Reflectometer (TDR) sends pulses down the cable and analyzes reflected signals to measure distance to cable anomalies.
Impedance changes from breaks or shorts reflect pulses back to the device, enabling accurate distance calculation.

Anahtar Kavram

Using a Time-Domain Reflectometer (TDR) to locate distance to faults in copper cabling
Tahmini Süre:45s
Soru 170Soru

A network technician deploys a 65-meter Category 6A UTP cable run between a core switch and a distribution switch. A basic continuity cable tester indicates proper 1-to-1 pin alignment across all eight conductors (Pin 1 to Pin 1, Pin 2 to Pin 2, etc.). However, when the link is connected to 10GBASE-T ports, the connection frequently drops, exhibits excessive frame errors, and fails to sustain 10Gbps throughput. During physical termination, individual wires from different twisted pairs were incorrectly paired together on adjacent pins (such as pairing pin 3 with pin 4 and pin 5 with pin 6) at both ends of the run. Which physical cabling fault is present in this installation, and which diagnostic tool is required to identify and measure the extent of this failure?

Cevabı ve açıklamayı göster

Cevap: A split pair condition; a cable certifier capable of measuring Near-End Crosstalk (NEXT)

Cevap

A split pair condition is present in the installation, requiring a cable certifier capable of measuring Near-End Crosstalk (NEXT) to detect and quantify the fault.
The correct answer identifies a split pair condition and selects a cable certifier. In twisted-pair Ethernet cabling standards (such as T568A/T568B), specific pins form differential pairs (Pins 1-2, 3-6, 4-5, and 7-8). When an installer connects wires from different pairs to pins intended for a single pair at both ends, DC continuity remains 1-to-1 straight-through, so basic wiremap tools report no errors. However, because the positive and negative signals of a differential pair no longer travel along the same twisted pair of wires, mutual electromagnetic shielding is lost, producing catastrophic Near-End Crosstalk (NEXT) at high signaling rates such as 10GBASE-T. A cable certifier evaluates RF signaling performance, including NEXT, across the frequency spectrum of Category 6A.

Adım Adım Çözüm

1
Analyze the reported symptom and continuity test results
The continuity tester shows straight-through pin-to-pin alignment (1-to-1), ruling out simple opens, shorts, or transposed pins (reversed wiremap).
Standard continuity testers only measure DC electrical continuity and wire alignment, not high-frequency signal integrity.
2
Evaluate the physical termination details
Wires from separate pairs were placed onto adjacent pin positions (e.g., pin 3 with pin 4, pin 5 with pin 6) at both ends of the cable run.
Twisted pair cabling (such as T568A/T568B) relies on specific pair groupings (pins 1-2, 3-6, 4-5, 7-8) to ensure electromagnetic interference and crosstalk cancel out along the run. Splitting pairs destroys this differential signaling protection.
3
Identify the cabling anomaly and appropriate testing tool
This fault is defined as a split pair, which causes severe Near-End Crosstalk (NEXT) and attenuation-to-crosstalk ratio (ACR) failure under high frequencies. A cable certifier is required to measure RF parameters like NEXT.
Simple continuity testers or tone probes cannot measure RF parameters or detect split pairs when DC continuity is preserved.

Anahtar Kavram

Split Pair Faults and NEXT Measurement
Tahmini Süre:2m 0s
Soru 171Soru

A network technician notices severe network performance degradation on a workstation connected to a switch port. Checking the switch port statistics shows a high count of late collisions and alignment errors, while the workstation's network interface card is manually set to full-duplex. Which of the following is the most likely cause of this issue?

Cevabı ve açıklamayı göster

Cevap: The switch interface is operating in half-duplex mode, causing a duplex mismatch.

Cevap

The switch interface is operating in half-duplex mode, causing a duplex mismatch.
A duplex mismatch occurs when one end of an Ethernet link runs in full-duplex mode and the other operates in half-duplex mode. The half-duplex port senses collisions while the full-duplex port transmits arbitrarily, resulting in late collisions, FCS errors, and poor throughput.

Adım Adım Çözüm

1
Analyze the reported port symptoms and interface error counters.
The presence of late collisions specifically indicates that one side of the link is attempting CSMA/CD collision detection (half-duplex) while the other side transmits simultaneously without checking for carrier sense (full-duplex).
Late collisions occur when a collision is detected after the first 64 bytes of a frame have been transmitted, which is characteristic of a duplex mismatch.
2
Evaluate the configuration state of both link endpoints.
Since the workstation is hardcoded to full-duplex, the switch port autonegotiation likely failed or was manually set to half-duplex.
Duplex autonegotiation standard specifies that if autonegotiation fails on one end, the port defaults to half-duplex mode.

Anahtar Kavram

Duplex Mismatch Identification
Soru 172Soru

A network administrator is troubleshooting connectivity failures for dynamic clients in a newly provisioned branch office. Users on VLAN 102 (10.102.4.0/2210.102.4.0/22) report that their workstations periodically lose connection to local corporate resources and display IP addresses in the 169.254.x.x169.254.x.x range. The centralized dual DHCP redundant servers reside on VLAN 10 (10.10.1.510.10.1.5 and 10.10.1.610.10.1.6).

Upon reviewing the Core L3 Switch configuration and DHCP server diagnostics, the administrator notes the following:
text Interface VLAN 102 description Workstation_Subnet ip address 10.102.4.1 255.255.252.0 ip helper-address 10.10.1.5 ! DHCP Server Scope Statistics (10.102.4.0/22): Active Leases: 1022 / 1022 (100% Utilized) Default Lease Time: 8 Days Environment Type: High-density roaming laptop conference area

Which of the following actions should the network administrator perform to resolve the IP address assignment failures and ensure high-availability DHCP relay operations? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Add a second `ip helper-address 10.10.1.6` command under the Interface VLAN 102 configuration on the Core L3 Switch.; Decrease the DHCP lease duration on the server scope and implement shorter lease periods suited for transient device environments.

Cevap

The network administrator must add the second DHCP relay address (`ip helper-address 10.10.1.6`) on the VLAN subinterface for relay redundancy, and reduce the DHCP scope lease duration on the DHCP server to mitigate scope exhaustion caused by transient devices.
The scenario highlights two distinct IP addressing and DHCP troubleshooting issues: scope exhaustion and missing relay redundancy. First, reducing the lease duration allows transient client leases to expire rapidly, recycling addresses back into the pool. Second, configuring the secondary IP helper address (`ip helper-address 10.10.1.6`) on the Layer 3 interface allows the router to forward DHCP unicast requests to both redundant DHCP servers simultaneously.

Adım Adım Çözüm

1
Analyze client IP output and DHCP scope state
Workstations receive 169.254.x.x169.254.x.x (APIPA) because the single configured DHCP server's scope is 100% exhausted (1022/10221022/1022 active leases).
An 8-day lease duration in a transient conference environment retains IP assignments long after devices disconnect, leading to exhaustion.
2
Evaluate DHCP Relay (IP Helper) configuration for redundancy
The Layer 3 interface only contains `ip helper-address 10.10.1.5`, omitting the secondary server (10.10.1.610.10.1.6).
Without configuring the second helper address, relay requests are never forwarded to the backup server when the primary server scope is exhausted or unavailable.
3
Select appropriate remediation steps
Adding `ip helper-address 10.10.1.6` ensures dual-relay forwarding, while shortening lease times frees expired leases quickly.
Both steps together resolve immediate capacity bottlenecks and build resilient DHCP relay operations across subnets.

Anahtar Kavram

Troubleshooting DHCP Scope Exhaustion and Redundant Relay Agent Placement
Tahmini Süre:3m 0s
Soru 173Soru

A network administrator is troubleshooting an 802.1Q trunk connection between Switch-1 and Switch-2. Switch-1 is configured with a native VLAN of 10 and allows VLANs 10, 20, and 30 across its trunk interface GigabitEthernet0/1. Switch-2 has its GigabitEthernet0/1 trunk interface configured with a native VLAN of 20 and allows only VLANs 10 and 20. Console logs indicate recurring CDP native VLAN mismatch messages, and workstations residing on VLAN 30 attached to Switch-1 are completely unable to communicate with VLAN 30 hosts attached to Switch-2.

Which TWO configuration adjustments must be performed on Switch-2 to resolve the console error logs and restore VLAN 30 trunking communication?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the native VLAN on Switch-2 interface GigabitEthernet0/1 to VLAN 10.; Add VLAN 30 to the allowed VLAN list on Switch-2 interface GigabitEthernet0/1.

Cevap

To resolve the issues, Switch-2 must have its trunk native VLAN updated to VLAN 10 to match Switch-1, and VLAN 30 must be explicitly added to the trunk port's allowed VLAN list.
The correct adjustments require aligning the native VLAN ID across both ends of the trunk (setting Switch-2 native VLAN to 10) to clear the CDP native VLAN mismatch log, and expanding Switch-2's allowed VLAN trunk list to include VLAN 30 so that tagged frames for VLAN 30 can be received and forwarded.

Adım Adım Çözüm

1
Analyze the native VLAN mismatch error between Switch-1 and Switch-2.
Switch-1 uses VLAN 10 as native, while Switch-2 uses VLAN 20. 802.1Q trunks send native VLAN frames untagged, causing cross-VLAN traffic leakage and log errors.
Both ends of an 802.1Q trunk must agree on the native VLAN ID so untagged frames are properly mapped to the identical broadcast domain on both switches.
2
Analyze the VLAN 30 connectivity failure across the trunk.
Switch-2 allowed list only includes VLANs 10 and 20. VLAN 30 frames sent by Switch-1 are dropped at Switch-2's trunk ingress.
Trunk interfaces prune traffic for VLANs not explicitly included in their allowed VLAN list.
3
Determine the required remedial commands on Switch-2.
Reconfigure Switch-2 GigabitEthernet0/1 to use native VLAN 10 and add VLAN 30 to the trunk allowed VLAN list.
These two steps directly clear the console error and allow VLAN 30 tagged traffic to pass.

Anahtar Kavram

802.1Q Trunking Parameters & Native VLAN / Allowed VLAN Troubleshooting
Soru 174Soru

A network administrator is troubleshooting an issue where client workstations can resolve standard hostnames, but queries returning large DNS Security Extensions (DNSSEC) records fail to resolve. To isolate the issue, the administrator runs the following command from an affected host:

$ dig +tcp @10.0.0.53 sec.enterprise.local +dnssec
;; Communications error to 10.0.0.53#53(10.0.0.53): connection timed out

Standard `dig` queries executed without the `+tcp` flag complete successfully over UDP. Which of the following is the most likely root cause of this resolution failure?

Cevabı ve açıklamayı göster

Cevap: An intermediate firewall or network ACL is blocking inbound or outbound TCP port 53 traffic.

Cevap

An intermediate firewall or network ACL is blocking inbound or outbound TCP port 53 traffic.
DNS relies on UDP port 53 for standard queries, but falls back to TCP port 53 whenever response data exceeds the maximum UDP packet size (common with DNSSEC records) or when requested explicitly via tools like `dig +tcp`. Because UDP queries succeed but TCP queries time out, a network firewall or access control list (ACL) is dropping TCP port 53 traffic.

Adım Adım Çözüm

1
Analyze the baseline behavior vs the failure condition.
Standard UDP DNS queries to 10.0.0.53 succeed, but forced TCP DNS queries time out.
Isolates the problem specifically to the transport protocol (TCP vs UDP) rather than general IP unreachability or invalid DNS record data.
2
Evaluate protocol requirements for DNS operations.
DNS uses UDP port 53 for standard small lookups, but relies on TCP port 53 when responses exceed payload limits (like DNSSEC) or for explicit TCP queries.
Explains why basic queries work while DNSSEC queries requiring TCP fail.
3
Correlate CLI output timeout with network access controls.
A 'connection timed out' error on port 53 over TCP indicates packet dropping by a firewall or access control list (ACL).
Pinpoints the root cause as blocked TCP port 53 traffic on an intervening network security device.

Anahtar Kavram

DNS Transport Layer Protocols (UDP/TCP Port 53)
Soru 175Soru

A network administrator is troubleshooting an issue where a database server at 192.168.50.10/24192.168.50.10/24 cannot establish a connection to a cloud backup endpoint at 172.24.100.45/24172.24.100.45/24. The database server is configured with 192.168.50.1192.168.50.1 as its default gateway.

A traceroute executed from the database server produces the following output:

C:\> traceroute 172.24.100.45
Tracing route to 172.24.100.45 over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.50.1
2 2 ms 1 ms 2 ms 10.200.1.1
3 * * * Request timed out.
4 * * * Request timed out.

The administrator connects to router 10.200.1.110.200.1.1 and reviews its routing table and interface status:

Gateway of last resort is 10.200.2.2 to network 0.0.0.0

S* 0.0.0.0/0 [1/0] via 10.200.2.2
C 10.200.1.0/30 is directly connected, GigabitEthernet0/0
C 192.168.50.0/24 is directly connected, GigabitEthernet0/1
S 172.24.0.0/16 [1/0] via 10.200.3.2

GigabitEthernet0/0 is up, line protocol is up (IP 10.200.1.1/30)
GigabitEthernet0/1 is up, line protocol is up (IP 192.168.50.1/24)
GigabitEthernet0/2 is down, line protocol is down (IP 10.200.3.1/30)

Which of the following is the root cause of the connectivity failure?

Cevabı ve açıklamayı göster

Cevap: The router selects the static route 172.24.0.0/16172.24.0.0/16 based on longest prefix match, but its associated outbound interface is down.

Cevap

The router selects the static route 172.24.0.0/16172.24.0.0/16 based on longest prefix match, but its associated outbound interface is down.
Routers forward packets based on the Longest Prefix Match rule. Because 172.24.0.0/16172.24.0.0/16 is more specific than the default route 0.0.0.0/00.0.0.0/0, traffic destined for 172.24.100.45172.24.100.45 matches the static route via 10.200.3.210.200.3.2. However, interface GigabitEthernet0/2 is down, causing router 10.200.1.110.200.1.1 to drop the traffic rather than forwarding it.

Adım Adım Çözüm

1
Analyze traceroute diagnostic output
The packet successfully reaches hop 1 (192.168.50.1192.168.50.1) and hop 2 (10.200.1.110.200.1.1), but times out at hop 3, indicating the breakdown occurs at router 10.200.1.110.200.1.1.
Identify the specific hop where packet forwarding fails.
2
Evaluate the routing decision logic on router 10.200.1.110.200.1.1
The target address is 172.24.100.45172.24.100.45. The router evaluates candidate routes: default route 0.0.0.0/00.0.0.0/0 vs static route 172.24.0.0/16172.24.0.0/16.
Routers apply Longest Prefix Match (LPM) rules, preferring /16/16 over /0/0 regardless of default gateway settings.
3
Correlate the selected route with interface operational state
The route to 172.24.0.0/16172.24.0.0/16 forwards packets via next-hop 10.200.3.210.200.3.2 out interface GigabitEthernet0/2, which has a status of line protocol down.
Traffic matching a static route pointing to an inactive or down interface will be dropped, preventing failover to less specific routes if not dynamically withdrawn.

Anahtar Kavram

Longest Prefix Match Routing and Next-Hop/Interface Unreachability
Tahmini Süre:2m 0s
Soru 176Soru

A network engineer is troubleshooting an enterprise 10GBASE-SR multimode fiber backbone run measuring 350 meters that connects two core switches across a campus facility. The optical link fails to bring up the interface. An initial power check indicates high optical attenuation along the path, but both transceivers and patch cables test normally. Which diagnostic tool should the engineer use to locate the precise distance to the physical break or microbend within the fiber optic cable run?

Cevabı ve açıklamayı göster

Cevap: Optical Time-Domain Reflectometer (OTDR)

Cevap

An Optical Time-Domain Reflectometer (OTDR) should be used to locate the precise distance to a physical break or bend in a fiber optic cable run.
An Optical Time-Domain Reflectometer (OTDR) injects light pulses into the optical fiber and analyzes backscattered and reflected light signals. By measuring the elapsed time of returned reflections, it accurately plots attenuation along the cable and pinpoints the exact distance to physical discontinuities such as macrobends, dirty splices, or cable breaks.

Adım Adım Çözüm

1
Analyze the physical layer requirements and media type.
The scenario specifies a 350-meter 10GBASE-SR multimode optical fiber link.
Choosing the correct diagnostic tool requires selecting media-compatible equipment (optical fiber vs. twisted-pair copper).
2
Differentiate between end-to-end loss testing and fault location pinpointing.
End-to-end attenuation is known, but the specific location of the structural fault inside the conduit needs to be mapped.
An Optical Power Meter confirms total signal loss across the link but cannot measure distance to a fault.
3
Select the tool designed for reflective distance-to-fault analysis over optical fiber.
An OTDR emits optical pulses and analyzes Rayleigh backscattering and Fresnel reflections to output a trace graph showing exact distance markers for events like breaks, bends, and splices.
An OTDR is the definitive tool for locating physical faults along medium-to-long fiber runs.

Anahtar Kavram

Fiber Optic Diagnostic Tools and OTDR Operation
Tahmini Süre:1m 30s
Soru 177Soru

A network administrator runs the `ipconfig` command on a user's workstation that is experiencing network connectivity issues. The command output displays an IPv4 address of 169.254.108.42169.254.108.42 with a subnet mask of 255.255.0.0255.255.0.0. Which of the following best explains the root cause of this configuration?

Cevabı ve açıklamayı göster

Cevap: The workstation failed to contact a DHCP server and automatically assigned itself an Automatic Private IP Addressing (APIPA) address.

Cevap

The workstation failed to contact a DHCP server and automatically assigned itself an Automatic Private IP Addressing (APIPA) address.
When a network interface configured for dynamic addressing cannot reach a DHCP server, Windows client operating systems automatically assign a link-local IP address in the range of 169.254.0.1169.254.0.1 to 169.254.255.254169.254.255.254 using APIPA.

Adım Adım Çözüm

1
Analyze the IP address output from ipconfig
The IPv4 address is 169.254.108.42.
Addresses within the range 169.254.0.0/16 are reserved for Automatic Private IP Addressing (APIPA).
2
Identify the conditions under which APIPA is used
APIPA is invoked when a DHCP client requests an IP address lease but receives no response from any DHCP server on the local network or via DHCP relay.
This mechanism allows link-local communication when centralized network IP assignment fails.

Anahtar Kavram

APIPA Address Symptom Diagnosis
Tahmini Süre:45s
Soru 178Soru

During a network maintenance window, a network administrator configures an extended Access Control List (ACL) on a Layer 3 core switch to restrict access from the Engineering VLAN subnet (10.120.4.0/2210.120.4.0/22) to the Data Center subnet (10.120.32.0/2410.120.32.0/24). Shortly after implementation, users report that while HTTP web access to an internal application server at 10.120.32.5010.120.32.50 is functional, secure HTTPS sessions to the same server fail to establish.

The administrator inspects the switch configuration using `show ip access-lists ENG_TO_DC` and retrieves the following output:

text
Extended IP access list ENG_TO_DC
10 permit tcp 10.120.4.0 0.0.3.255 host 10.120.32.50 eq 80
20 deny ip 10.120.4.0 0.0.3.255 10.120.32.0 0.0.0.255
30 permit tcp 10.120.4.0 0.0.3.255 host 10.120.32.50 eq 443

Which of the following identifies the root cause of the HTTPS connectivity failure?

Cevabı ve açıklamayı göster

Cevap: Rule 20 explicitly denies all IP traffic directed to the Data Center subnet before Rule 30 evaluating HTTPS traffic can be processed.

Cevap

Rule 20 explicitly denies all IP traffic directed to the Data Center subnet before Rule 30 evaluating HTTPS traffic can be processed.
Access Control Lists process rules sequentially in numerical order. Rule 20 contains a broad block filtering all IP traffic destined for the 10.120.32.0/24 subnet. When an HTTPS packet arrives, it fails to match Rule 10 (which requires port 80), matches Rule 20, and is immediately dropped. Rule 30 is shadowed and never evaluated.

Adım Adım Çözüm

1
Analyze the sequential processing mechanism of Access Control Lists (ACLs).
ACLs process packets top-down, stopping at the first rule that matches packet headers.
Top-down evaluation means higher-numbered sequence rules are never evaluated if a prior rule matches.
2
Evaluate incoming HTTPS packets against the rules in sequence.
An HTTPS packet targeting port 443 does not match Rule 10 (port 80), but matches the broad criteria of Rule 20 (deny ip 10.120.4.0 0.0.3.255 10.120.32.0 0.0.0.255).
Since 'ip' encompasses all Layer 3 payloads (including TCP), Rule 20 matches all remaining traffic to the destination subnet.
3
Determine the impact on Rule 30.
Rule 30 is shadowed and will receive zero packet matches.
Placing a broad deny rule above a specific permit rule creates a logical shadowing defect.

Anahtar Kavram

ACL Rule Ordering and Rule Shadowing
Tahmini Süre:1m 30s
Soru 179Soru

A systems engineer is troubleshooting a name resolution failure for an internal application alias, `app.corp.net`. When querying the primary DNS server directly using `nslookup`, the following output is returned:

text
$ nslookup app.corp.net 10.150.1.10
Server: dns01.corp.net
Address: 10.150.1.10

** server can't find app.corp.net: NXDOMAIN

Upon reviewing the primary zone configuration, the administrator confirms that `app.corp.net` exists as a valid CNAME record mapping to `web-prod-01.internal.net`. However, `web-prod-01.internal.net` is hosted in a separate private zone that is not configured on or reachable by `dns01.corp.net`.

Which of the following best explains why the DNS server returns an NXDOMAIN error for the CNAME query?

Cevabı ve açıklamayı göster

Cevap: The DNS server is unable to resolve the canonical host specified in the CNAME record to a valid address record within its available zones.

Cevap

The DNS server is unable to resolve the canonical host specified in the CNAME record to a valid address record within its available zones.
When a DNS client queries a record that is configured as a CNAME (Canonical Name), the DNS server must follow the alias to the target FQDN and resolve its corresponding address (A/AAAA) record. If the target FQDN belongs to a zone that is missing, unreachable, or un-delegated, the server cannot fulfill the query chain and returns an NXDOMAIN error.

Adım Adım Çözüm

1
Analyze the command output and error code.
The command targets DNS server `10.150.1.10` directly and returns `NXDOMAIN` for `app.corp.net`.
`NXDOMAIN` (Non-Existent Domain) indicates that the server queried believes the domain name does not exist in DNS.
2
Evaluate the DNS record configuration described in the scenario.
`app.corp.net` is a CNAME record pointing to `web-prod-01.internal.net`.
Resolving a CNAME record requires a two-step resolution process: looking up the alias, and then resolving the canonical target hostname to an IP address (A or AAAA record).
3
Correlate the missing target zone with the resolution failure.
Because `web-prod-01.internal.net` resides in an unlinked private zone, the DNS server fails to complete the canonical name lookup.
If the canonical target name cannot be resolved to an IP address by the server, the final response returned to the client for the CNAME lookup is `NXDOMAIN`.

Anahtar Kavram

DNS CNAME Resolution Chaining and NXDOMAIN Failure Modes
Tahmini Süre:2m 0s
Soru 180Soru

A network technician is investigating a client workstation that fails to resolve the internal hostname `app.finance.local`. Place the following diagnostic steps in the correct order, starting from initial client configuration verification through transport layer troubleshooting.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The proper troubleshooting sequence moves from local client IP configuration verification, to clearing local host resolution mechanisms (HOSTS file and DNS resolver cache), to testing direct DNS server resolution via `nslookup`, and finally checking transport connectivity on port 53.
A methodical name resolution troubleshooting workflow starts by validating client IP/DNS configuration, clearing local client-side caches and static lookup overrides, querying the designated DNS server directly to test record availability, and lastly verifying port 53 reachability if timeouts occur.

Adım Adım Çözüm

1
Verify client TCP/IP configuration
Confirms the workstation possesses a valid IP, subnet mask, default gateway, and correct DNS server IP.
Troubleshooting should start at Layer 3 client settings to ensure the endpoint knows which DNS server to query.
2
Check and clear local name resolution state
Eliminates bad static overrides in the local `HOSTS` file and flushes stale cache records.
Operating systems query local file maps and DNS resolver caches prior to sending network DNS requests.
3
Perform direct DNS resolution query
Determines whether the DNS server returns an IP address, an NXDOMAIN error, or a server failure response.
Direct diagnostic tools like `nslookup` bypass local caching to evaluate DNS server operational status and zone records.
4
Verify transport layer filtering and reachability
Identifies if firewall ACLs or intermediate network devices are dropping UDP or TCP port 53 traffic.
If DNS queries time out completely, network access controls or port-level filtering must be diagnosed.

Anahtar Kavram

Systematic DNS and Host Name Resolution Troubleshooting Sequence
ÖncekiSayfa 9 / 25Sonraki
Network Troubleshooting Alıştırma Soruları — CompTIA Network+ — Sayfa 9 | Examkin