Which of the following OSI model layers contains IP headers?

A. Presentation

B. Application

C. Data link

D. Network

E. Transport

The lack of a formal process to grant network permissions to different profiles of employees and contractors is leading to an increasing number of security incidents. Non-uniform and overly permissive network accesses are being granted. Which of the following would be the MOST appropriate method to improve the security of the environment?

A. Change the default permissions to implicit deny.

B. configure uniform ACLs to employees and NAC for contractors.

C. Deploy an RDP server tofficentralize the access to the network.

D. Implement role-based access control.

A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?

A. Change the email client configuration to match the MX record.

B. Reduce the TTL record prior to the MX record change.

C. Perform a DNS zone transfer prior to the MX record change.

D. Update the NS record to reflect the IP address change.

A small office has a wireless network with several access points that are used by mobile devices. Users occasionally report that the wireless connection drops or becomes very slow. Reports confirm that this only happens when the devices are connected to the office wireless network.
Which of the following is MOST likely the cause?

A. The configuration of the encryption protocol

B. Interference from other devices

C. insuficient bandwidth capacity

D. Duplicate SSIDs

Which of the following needs to be tested to achieve a Cat 6a certi cation for a company's data cabling?

A. RJ11

B. LC ports

C. Patch panel

D. F-type connector

While walking from the parking lot to an access-controlled door, an employee sees an authorized user open the door. Then the employee notices that another person catches the door before it closes and goes inside. Which of the following attacks is taking place?

A. Tailgating

B. Piggybacking

C. Shoulder sur ng

D. Phishing

A user reports that a new VoIP phone works properly, but the computer that is connected to the phone cannot access any network resources. Which of the following MOST likely needs to be configured correctly to providefinetwork connectivity to the computer?

A. Port duplex settings

B. Port aggregation

C. ARP settings

D. VLAN tags

E. MDIX settings

A new office space is being designed. The network switches are up, but no services are running yet. A network engineer plugs in a laptop configured as a DHCP client to a switch. Which of the following IP addresses should be assigned to the laptop?

A. 10.1.1.1

B. 169.254.1.128

C. 172.16.128.128

D. 192.168.0.1

A technician was cleaning a storage closet and found a box of transceivers labeled 8Gbps. Which of the following protocols uses those transceivers?

A. Coaxial over Ethernet

B. Internet Small Computer Systems Interface

C. Fibre Channel

D. Gigabit interface converter

A network administrator is investigating reports about network performance and finds high utilization on a switch uplink. The administrator is unsure whether this is an anomaly or normal behavior that will require an upgrade to resolve. Which of the following should the administrator reference to gain historical perspective?

A. Device configuration review

B. ARP table export

C. Service-level agreement

D. Network performance baseline

A network technician is investigating a trouble ticket for a user who does not have network connectivity. All patch cables between the wall jacks and computers in the building were upgraded over the weekend from Cat 5 to Cat 6. The newly installed cable is crimped with a TIA/EIA 568A on one end and a TIA/EIA 568B on the other end. Which of the following should the technician do to MOST likely x the issue?

A. Ensure the switchport has PoE enabled.

B. Crimp the cable as a straight-through cable.

C. Ensure the switchport has STP enabled,

D. Crimp the cable as a rollover cable.

A technician is implementing a new wireless network to serve guests at a local office. The network needs to provide Internet access but disallow associated stations from communicating with each other. Which of the following would BEST accomplish this requirement?

A. Wireless client isolation

B. Port security

C. Device geofencing

D. DHCP snooping

Which of the following attacks becomes more effective because of global leakages of users' passwords?

A. Dictionary

B. Brute-force

C. Phishing

D. Deauthentication

A network technician crimped a length of UTP with TIAEIA-568A on one end and TIAEIA-568B on the other. Which of the following cable types did the technician create?

A. Crossover cable

B. Patch cable

C. Twinaxial cable

D. Rollover cable

A network administrator is reviewing the network device logs on a syslog server. The messages are normal, but the time stamps on the messages are incorrect.
Which of the following actions should the administrator take to ensure the log message time stamps are correct?

A. Change the NTP settings on the network device.

B. Change the time on the syslog server.

C. Update the network device firmware.

D. Adjust the timeout settings on the syslog server.

E. Adjust the SSH settings on the network device.

A fiber link connecting two campus networks is broken. Which of the following tools should an engineer use to detect the exact break point of the fiber link?

A. OTDR

B. Tone generator

C. Fusion splicer

D. Cable tester

E. PoE injector

A store owner would like to have secure wireless access available for both business equipment and patron use. Which of the following features should be configured to allow different wireless access through the same equipment?

A. MIMO

B. TKIP

C. LTE

D. SSID

An administrator needs to connect two laptops directly to each other using 802. 11ac but does not have an AP available. Which of the following describes this configuration?

A. Basic service set

B. Extended service set

C. Independent basic service set

D. MU-MIMO

A sales team at a company uses a SaaS solution primarily for videoconferencing and a CRM application that connects to a database server in the corporate data center. Which of the following VPN solutions would allow secure, remote access for sales staff to the CRM application without impacting videoconferencing traffic?

A. Clientless

B. Site-to-site

C. Split tunnel

D. Full tunnel

Which of the following is the MOST appropriate use case for the deployment of a clientless VPN?

A. Secure web access to internal corporate resources.

B. Upgrade security via the use of an NFV technology.

C. Connect two datacenters across the Internet.

D. Increase VPN availability by using a SDWAN technology.

A network administrator installed a new data and VoIP network. Users are now experiencing poor call quality when making calls. Which of the following should the administrator do to increase VoIP performance?

A. configure a voice VLAN.

B. configure LACP on all VoIP phones.

C. configure PoE on the network.

D. configure jumbo frames on the network.

A technician is troubleshooting a report about network connectivity issues on a workstation. Upon investigation, the technician notes the workstation is showing an
APIPA address on the network interface. The technician verifies that the VLAN assignment is correct and that the network interface has connectivity. Which of the following is MOST likely the issue the workstation is experiencing?

A. DHCP exhaustion

B. A rogue DHCP server

C. A DNS server outage

D. An incorrect subnet mask

A Chief Executive officer and a network administrator came to an agreement with a vendor to purchase new equipment for the data center. A document was drafted so all parties would be informed about the scope of the project before it started. Which of the following terms BEST describes the document used?

A. Contract

B. Project charter

C. Memorandum of understanding

D. Non-disclosure agreement

A technician is deploying a new switch model and would like to add it to the existing network monitoring software. The technician wants to know what metrics can be gathered from a given switch. Which of the following should the technician utilize for the switch?

A. MIB

B. Trap

C. Syslog

D. Audit log

A network technician wants to find the shortest path from one node to every other node in the network. Which of the following algorithms will provide the FASTEST convergence time?

A. A static algorithm

B. A link-state algorithm

C. A distance-vector algorithm

D. A path-vector algorithm

A technician discovered that some information on the local database server was changed during a file transfer to a remote server. Which of the following should concern the technician the MOST?

A. confidentiality

B. Integrity

C. DDoS

D. On-path attack

The management team needs to ensure unnecessary modifications to the corporate network are not permitted and version control is maintained.
Which of the following documents would BEST support this?

A. An incident response plan

B. A business continuity plan

C. A change management policy

D. An acceptable use policy

A network administrator creates a new network, 10.10.0.0/24, on a DHCP server. The administrator wants to ensure that 10.10.0.10-10.10.0.15 are not allocated to other devices. Which of the following features should the administrator configure?

A. Exclusion

B. Reservation

C. Scope

D. Relay

Which of the following routing protocols has routes that are classi ed with an administrative distance of 110?

A. BGP

B. OSPF

C. EIGRP

D. RIP

A technician needs to configure a routing protocol for an internet-facing edge router. Which of the following routing protocols will the technician MOST likely use?

A. BGP

B. RIPv2

C. OSPF

D. EIGRP

Which of the following describes the ability of a corporate IT department to expand its cloud-hosted VM environment with minimal effort?

A. Scalability

B. Load balancing

C. Multitenancy

D. Geo-redundancy

A company, which is located in a coastal town, retro tted an office building for a new data center. The underground fiber optics were brought in and connected to the switches in the basement network MD

A. A server data center was built on the fth floor with the two rooms vertically connected by fiber optics. Which of the following types of environmental sensors is most needed?

B. Temperature sensor in the network MOF

C. Water sensor in the network MDF

D. Temperature sensor in the data center

E. Water sensor in the data center

Which of the following cloud deployment models involves servers that are hosted at a company's property and are only used by that company?

A. Public

B. Private

C. Hybrid

D. Community

A technician is equipped with a tablet, a smartphone, and a laptop to troubleshoot a switch with the help of support over the phone. However, the technician is having issues interconnecting all these tools in troubleshooting the switch. Which of the following should the technician use to gain connectivity?

A. PAN

B. WAN

C. LAN

D. MAN

A PC user who is on a local network reports very slow speeds when accessing files on the network server. The user's PC is connecting, but file downloads are very slow when compared to other users' download speeds. The PC's NIC should be capable of Gigabit Ethernet. Which of the following will MOST likely x the issue?

A. Releasing and renewing the PC’s IP address

B. Replacing the patch cable

C. Reseating the NIC inside the PC

D. Flushing the DNS cache

A company built a new building at its headquarters location. The new building is connected to the company's LAN via fiber-optic cable. Multiple users in the new building are unable to access the company's intranet site via their web browser, but they are able to access internet sites. Which of the following describes how the network administrator can resolve this issue?

A. Correct the DNS server entries in the DHCP scope

B. Correct the external firewall gateway address

C. Correct the NTP server settings on the clients

D. Correct a TFTP Issue on the company’s server

A workstation is configured with the following network details:

Software on the workstation needs to send a query to the local subnet broadcast address. To which of the following addresses should the software be configured to send the query?

A. 10.1.2.0

B. 10.1.2.1

C. 10.1.2.23

D. 10.1.2.255

E. 10.1.2.31

A technician needs to configure a Linux computer for network monitoring. The technician has the following information:
Linux computer details:

Switch mirror port details:

After connecting the Linux computer to the mirror port on the switch, which of the following commands should the technician run on the Linux computer?

A. ifconfig ecth0 promisc

B. ifconfig eth1 up

C. ifconfig eth0 10.1.2.3

D. ifconfig eth1 hw ether A1:B2:C3:D4:E5:F6

An ISP is unable to provide services to a user in a remote area through cable and DSL. Which of the following is the NEXT best solution to provide services without adding external infrastructure?

A. Fiber

B. Leased line

C. Satellite

D. Metro optical

A network technician is configuring a new firewall for a company with the necessary access requirements to be allowed through the firewall. Which of the following would normally be applied as the LAST rule in the firewall?

A. Secure SNMP

B. Port security

C. Implicit deny

D. DHCP snooping

A network technician is responding to an issue with a local company. To which of the following documents should the network technician refer to determine the scope of the issue?

A. MTTR

B. MOU

C. NDA

D. SLA

Which of the following routing protocols uses an autonomous system number?

A. IS-IS

B. EIGRP

C. OSPF

D. BGP

A network administrator is investigating a performance issue on a dual-link connection -- VPN and MPLS -- to a partner network. The MPLS is the primary path, and the VPN is used as a backup. While communicating, the delay is measured at 18ms, which is higher than the 6ms expected when the MPLS link is operational but lower than the 30ms expected for the VPN connection. Which of the following will MOST likely point to the root cause of the issue?

A. Checking the routing tables on both sides to ensure there is no asymmetric routing

B. Checking on the partner network for a missing route pointing to the VPN connection

C. Running iPerf on both sides to confirm the delay that is measured is accurate

D. Checking for an incorrect VLAN assignment affecting the MPLS traffic

Which of the following can be used tofficentrally manage credentials for various types of administrative privileges on configured network devices?

A. SSO

B. TACACS+

C. Zero Trust

D. Separation of duties

E. Multifactor authentication

A Fortune 500 company would like to move its on-premises corporate email systems to a multitenant product hosted in the cloud where no maintenance of the underlying server OS or platform is required. Which of the following BEST represents the model the company should choose?

A. Public

B. Private

C. Hybrid

D. Community

Which of the following technologies provides a failover mechanism for the default gateway?

A. FHRP

B. LACP

C. OSPF

D. STP

Which of the following will reduce routing table lookups by performing packet forwarding decisions independently of the network layer header?

A. MPLS

B. mGRE

C. EIGRP

D. VRRP

During a recent security audit, a contracted penetration tester discovered the organization uses a number of insecure protocols. Which of the following ports should be disallowed so only encrypted protocols are allowed? (Choose two.)

A. 22

B. 23

C. 69

D. 443

E. 587

F. 8080

A company's network is set up so all Internet-bound traffic from all remote offices exits through a main datacenter. Which of the following network topologies would
BEST describe this setup?

A. Bus

B. Spine-and-leaf

C. Hub-and-spoke

D. Mesh

A newly installed multifunction copier needs to be set up so scanned documents can be emailed to recipients. Which of the following ports from the copier's IP address should be allowed?

A. 22

B. 25

C. 53

D. 80