Which of the following network topologies is primarily used to connect servers to large network disk arrays?

A. SAN

B. MAN

C. CAN

D. PAN

E. LAN

A network engineer is hardening the security of a remote office. The firewall at this location needs to remain accessible for remote management by technicians.
The firewall vendor advises disabling port 443 from WAN-facing access. In addition to disabling port 443, which of the following can the engineer do to MOST effectively balance the remote connectivity and security needs for this site?

A. Enable an IPSec tunnel.

B. Enable RDP access to the firewall.

C. Enable port 80 access.

D. Enable Telnet access to the firewall.

A technician is observing brownout issues at a smaller office. At least once a week, the edge switch power cycles. Which of the following should the technician do to resolve the issue?

A. Install a new switch

B. Install a UPS

C. Replace the switch uplink cable.

D. Install a new electrical circuit.

A senior technician is reconfiguring the company's firewall because a number of additional devices have been added to the network. The company has acquired a new VoIP phone system, and a group of junior technicians has set up an experimental lab with access to the Internet. Management has given the team latitude for research and development, but would like the company network to be secure and the performance to remain consistent with existing baselines. Which of the following would be the BEST method to reconfigure the network?

A. The technician should put the junior team’s lab in a VLAN and the phone system in the DMZ.

B. The technician should put the junior team’s lab in a DMZ and the phone system in a VLAN.

C. The technician should put the junior team’s lab in the LAN and the phone system in the WAN.

D. The technician should put the junior team’s lab in the WAN and the phone system in a WLAN

A user no longer has access to network resources after a recent office move, but all other users in the building are able to connect at 100MB connections. After further investigation, a network technician notices the following information:
 
Which of the following is causing the network connection issues?

A. Open/short pins

B. VLAN mismatch

C. Distance limitation

D. Crosstalk

E. Port configuration

A network technician needs to install the latest firmware on the switch to address a recently discovered vulnerability. Which of the following should the technician do to have a rollback plan in case of issues with the new firmware? (Choose two.)

A. Label the switch with IP address and firmware version

B. Draw the switchport diagram

C. Create a change management document

D. Draw the network rack logical diagram

E. Confirm standard operating procedures documentation

F. Create a performance baseline of the switch

An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organization's network. As part of the attack, the analyst launches a fake access point matching the SSID of the organization's guest access network. When a user connects to the fake access point, the analyst allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for latest analysis and exploitation. Which of the following attacks has the analyst successfully performed in this scenario?

A. Bluesnarfing

B. Session hijacking

C. MAC spoofing

D. VLAN hopping

E. Man-in-the-middle

A network technician has created a network that consists of a router, a firewall, a switch, and several PCs. Which of the following physical network topologies was created?

A. Star

B. Mesh

C. Ring

D. Bus

Which of the following WAN technologies utilizes the concept of virtual circuits and point-multipoint connections?

A. ISDN

B. MPLS

C. PRI

D. Broadband cable

E. Frame relay

Which of the following VPN protocols establishes a secure session that can be initiated using a browser?

A. IPSec

B. SSL VPN

C. PTP

D. PPTP

A technician needs to upgrade a SOHO wireless router's firmware. The technician resets the router to factory settings and installs the new firmware. The technician enters the DHCP information and sets the SSID. Which of the following configurations would provide the MOST protection from advance hackers?

A. Disable the broadcasting of the SSID.

B. Enable WPA2 authentication for all hosts.

C. Use private addressing for the DHCP scope.

D. Install unidirectional antennas.

A network technician is asked to perform an unfamiliar task. Which of the following would the technician MOST likely reference?

A. Network configuration

B. Change management documentation

C. Work instructions

D. Performance baseline

Ann, a customer, recently upgraded her SOHO Internet to gigabit fiber from cable. She was previously getting speeds around 75Mbps down and 25Mbps up. After the upgrade, Ann runs a speed test on her desktop and gets results of 1000Mbps down and 100Mbps up. A technician connects directly to the router and sees the correct 1000Mbps speeds. Which of the following is MOST likely the cause? (Choose two.)

A. All ports should be configured for full duplex.

B. There is a 10/100 switch on the network.

C. The connections are using Cat 5 cable.

D. The connections are using Cat 6 cable.

E. There is a transceiver mismatch at the fiber termination point.

F. Signal attenuation on the new fiber has reached the upper limits.

A technician is preparing to dispose of old network devices. Which of the following policies and best practices would outline procedures for removing sensitive information and configurations from surplus equipment?

A. System life-cycle procedures

B. Off-boarding procedures

C. Safety procedures

D. Appropriate use policy

Which of the following is a system of notation that uses base 16 rather than base 10?

A. Hex

B. Octal

C. Binary

D. CIDR

A penetration tester has been tasked with reconnaissance to determine which ports are open on the network. Which of the following tasks should be done FIRST?
(Choose two.)

A. Network scan

B. Banner grab

C. Tracert

D. DHCP server check

E. Brute-force attack

A recently constructed building makes use of glass and natural light. Users in the building are reporting poor cellular connectivity and speeds. Which of the following is MOST likely the cause?

A. Absorption

B. Channel overlap

C. Reflection

D. Frequency mismatch

A network administrator needs to extend an organization's network to a nearby building that has unused SMF already installed. The network administrator has decided to create a switch-to-switch uplink. Which of the following standards would be the BEST to use?

A. 10BASE-T

B. 100BASE-T

C. 1000BASE-LX

D. 1000BASE-SX

A network technician has been asked to create secure private networks between a company's headquarters and several branch locations. The company has provided the on-premises equipment, but each branch has a different ISP. Which of the following technologies should the technician consider using to accomplish this?

A. Site-to-site

B. Client-to-site

C. Point-to-point

D. Point-to-multipoint

A network technician is helping to install 50 Cat6a drops from users' computers into an IDF. Which of the following is the termination point at the IDF?

A. A breakout box

B. A 66 block

C. A 110 block

D. A patch panel

A new building needs to be joined to an existing network, but management has decided that running fiber is too expensive. Since the buildings are about 1000ft
(305m) apart, the IT department has been asked to propose alternatives. Which of the following is the BEST device to add to each building to facilitate the extension of the network while meeting budgetary demands?

A. Switch

B. Router

C. Media converter

D. PRP wireless

A technician is assigned to secure a basic wireless network. Which of the following authentication protocols should the technician use to perform this task?
(Choose two.)

A. RDP

B. SNMP

C. WPA2

D. EAP

E. SSL

A user has reported an issue with wireless VoIP phones dropping calls during business hours. When working late or in the evenings, the user does not experience call drops. When the network technician investigates the issue, all WAPs have balanced the number of connections evenly and are not dropping off the network.
The network technician connects to the wireless network in the user's office and starts a continuous ping to an external server. The results show a drastic and varied response time for each packet. Which of the following is the MOST likely cause of the dropped calls?

A. No QoS configured on the network

B. Signal-to-noise ratio

C. Interference from the microwave in the breakroom

D. Rogue AP installed in the office

A network administrator wants to ensure sensitive data is not exfiltrated from the system electronically. Which of the following should be implemented?

A. DLP

B. AUP

C. NDA

D. SLA

Which of the following is a purpose of a syslog server?

A. Aggregates switch logs for easier review and correlation

B. Polls SNMP-enabled server logs for current status

C. Distributes logging applications to monitoring servers

D. Purges switch logs when they reach capacity

A network administrator is concerned about clients being able to access the local Internet while connected to the corporate VPN. Which of the following should be disabled on the client to prevent this?

A. TLS

B. Remote file access

C. Split tunneling

D. HTTPS

A network technician is troubleshooting a problem with a user's client-to-site VPN connection. The user is unable to establish a connection to the server, but the error message that appears on screen does not contain useful information. Which of the following should the technician do NEXT to troubleshoot the issue?

A. Reconfigure the user’s VPN connection in the router to fix profile corruption.

B. Inform the user that provisioning sometimes fails and the connection needs to be attempted again.

C. Review the logs in the VPN client to check for any informational messages.

D. Verify the system has the latest OS patches installed.

Users are reporting issues with slow connection speeds and a loss of connectivity on the newly installed wireless network. The issues are intermittent but seem to occur most often around midday. Which of the following is the MOST likely cause?

A. There is interference from small appliances

B. The signal coverage area is too small

C. Not enough DHCP addresses have been allotted

D. The DNS cache on the users’ computers has become corrupt

A router is set up to utilize RIPv2 to route traffic throughout the network. Which of the following routing metrics is used to determine the path?

A. Distance

B. Bandwidth

C. Speed

D. Hop count

A network technician has purchased a 10GBase-T switch and wishes to connect it to 30 computers with 10GB network cards. The computers are 225ft (69m) away, and all need to establish a 10 Gbps connection to meet business requirements. To minimize costs while still meeting these requirements, which of the following cable types should the technician choose?

A. Cat 5e

B. Cat 6

C. Cat 6a

D. Cat 7

A new network technician is responsible for bringing a building onto the corporate network. The technician is not aware of the proper settings for the new switches.
Which of the following should the technician reference to find these settings?

A. IDF/MDF documentation

B. Change management plan

C. Configuration baseline

D. Standard operating procedures

A network technician discovers there is no connectivity on a T1 line even though the cable connection appears to be in place. The router shows there is no active connection on the port. The issue is occurring between the demarcation point and the router port. The router cable tests fine and is terminated at the demarcation panel. Which of the following tools should be used to fix the issue?

A. Punchdown tool

B. Crimper

C. OTDR

D. Loopback adapter

A company has multiple site-to-site VPN connections using a pre-shared key. The Chief Information Security Officer (CISO) is concerned about the long-term security of the tunnels and has asked the network technicians to develop a plan to ensure the best security of the tunnels. Which of the following should the network technicians implement?

A. Purchase dedicated MPLS circuits between each of the sites.

B. Request a change of IP addresses from the ISP semiannually.

C. Perform annual key rotations on the site-to-site VPNs.

D. Terminate tunnels when they are not actively being used.

A network director is creating a document that outlines what employees can and cannot do when they are connected to the corporate VPN. Which of the following is the director creating?

A. Remote access policy

B. Data loss prevention policy

C. Bring your own device policy

D. Non-disclosure agreement

A system administrator receives reports from users of odd behavior in regard to a recently installed server. While reviewing the server network configuration, the systems administrator does both a forward and a reverse DNS lookup on the host, along with the network adapter configuration.
 
Which of the following is the problem identified in the output above?

A. There is no reverse DNS entry for this host.

B. The server IP address is incorrectly configured.

C. The DNS lookup entry is incorrectly configured.

D. The reverse DNS entry is pointing to a different host.

A network engineer needs to connect two network switches with a gigabit link. The proposed route to run the 164ft (50m) cable is directly underneath a large electrical generator. Which of the following cable types would BEST fit the needs of the network engineer?

A. UTP

B. Cat 5 plenum

C. Coaxial

D. STP

A network technician is connecting two switches together. Which of the following protocols should the technician use to increase speed and fault tolerance?

A. SIP

B. BGP

C. LACP

D. LLDP

An NGFW alerts that a web server in the DMZ is sending suspicious traffic. A network administrator finds that port 25 is open, and the traffic is originating from this port. The only purpose of this server is to deliver website traffic. Which of the following should the network administrator recommend to the systems administrator?

A. Disable Telnet service on the server.

B. Disable DHCP service on the server.

C. Disable the SMTP service on the server

D. Disable FTP service on the server.

A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer being asked to implement?

A. LAN

B. PAN

C. MAN

D. WAN

A network technician installed a new host on the network. The host is not connecting to the company's cloud servers. The technician attempts to ping a server using the IP address with no success. Checking the IP address using ipconfing displays:
 
Which of the following should the technician perform NEXT to determine where the issue is located?

A. Modify the default gateway address and ping the server to test connectivity.

B. Change the DNS servers to be on the same subnet as the host.

C. Modify the router’s ACL to allow port 80 to exit the network.

D. Perform a tracert command to locate where the packet is dropped.

A user reports a laptop wireless connection is working at the user's desk but not in a recent building addition. A network administrator logs into the wireless controller, searches for the user's MAC address, and receives the following results:
 
Which of the following describes the reason for the issue?

A. Frequency mismatch

B. Distance limitation

C. Channel overlap

D. Wrong SSID

A user reports that a laptop cannot connect to the Internet despite the fact the wireless Internet was functioning on it yesterday. The user did not modify the laptop in any way, and the wireless Internet is functional on other users' laptops. Which of the following issues should be reviewed to help the user to connect to the wireless network?

A. Wireless switch toggled off

B. WAP settings

C. WLAN IP address out of scope

D. Wireless controller misconfiguration

A small company has decided to use a single virtual appliance to filter spam as well as reverse proxy and filter traffic to its internal web server. Which of the following has the company MOST likely deployed?

A. IPS

B. Firewall

C. SIEM

D. UTM

E. Content filter

A network administrator is setting up a wireless network with poor security for a computer science class to hack. Which of the following security methods would be
MOST easily circumvented?

A. MAC filtering

B. WPA

C. WPA2

D. Shared key

A technician is required to install a new DOCSIS-based Internet connection. Which of the following medium types does this use?

A. Cat6a

B. RG-6

C. UTP

D. Multimode

E. Single mode

A network administrator needs to be able to burst datacenter capacity during peak times, but does not want to pay for on-premises hardware that is not used during off-peak times. Which of the following would aid in this scenario?

A. Public cloud

B. SaaS

C. PaaS

D. Hybrid cloud

Which of the following would block access to an untagged port when connected to a Layer 2 device?

A. BPDU guard

B. Spanning tree

C. Flood guard

D. Root guard

After rebooting a PC, a user is no longer able to connect to the corporate network. As a test, the technician plugs a different laptop into the same network jack and receives an IP address of 169.254.112.137. Which of the following is MOST likely causing the issue?

A. DHCP scope exhaustion

B. Improper DNS setting

C. Incorrect ACL setting

D. Port-security violation

An ISP technician gets a call from a business that just changed equipment but can no longer connect to the Internet. The technician checks the ARP table on the
ISP switch, and there is no corresponding MAC address present. Instead, the entry is `Incomplete`. Which of the following could cause this condition?

A. VLAN mismatch

B. Duplex/Speed mismatch

C. Duplicate IP address

D. TX/RX reverse

Which of the following BEST describes the characteristics of a differential backup solution?

A. Backs up files with the creation or modified date as the current date.

B. Backs up all files and sets the archive bit.

C. Backs up files with a date earlier than today’s date with a clear archive bit.

D. Backs up files with the archive bit set but does not clear the bit.