Network Topologies, Protocols, and Configuration Part 4

The company issued a used company phone to a new employee. The phone is an older model that will not accept a subscriber identity module (SIM) card. This phone most likely supports which type of cellular technology? (Select all that apply.)

a) 3G
b) LTE
c) GSM
d) CDMA

A new office building was constructed right outside a United States military. The building has a few wireless access points (APs) that must adhere to some federal regulations because of the building's locations. What regulation would the building management have to adhere to regarding these APs?

a) 2.4 Ghz AP must use channel 14.
b) Use maximum EIRP settings.
c) Decrease the power output.
d) Use maximum frequency power.

A network administrator must install a new building floor with wireless access points (APs) to provide a wireless network to employees' mobile devices. The AP security settings will be hardened and use an Extensible Authentication Protocol (EAP) to allow users to authenticate with their user accounts to access the network securely. What is the minimum wireless protection required to install these APs properly?

a) WPA2-Enterprise
b) WPA-Personal
c) WPA-Enterprise
d) WPA2-Personal

An officer floor is requesting a new wireless network. Users are requesting faster data rates. Network administrators want to use wireless technology with the most individual channels to choose from and to worry less about wireless interference from other wireless technologies. Which of the following will the office most likely use? (Select all that apply.)

a) 802.11n
b) 5.0 Ghz
c) 802.11g
d) 2.4 Ghz

A Jr. systems administrator at an organization has just learned to use a multiple input multiple output (MIMO) configuration with a 802.11n wireless network. The administrator now plans on increasing bandwith by adding the maximum number of antennas possible in a 4x4:2 configuration. After evaluating the administrator's approach, which option defines the planned implementation?

a) The number of recieve antennas x the number of transmit antennas : the number of channels bonded
b) The number of transmit antennas x the number of receive antennas : the number of simultaneous transmit and receive streams
c) The number of receive antennas x the number of transmit antennas : the number of simultaneous transmit and receive streams
d) The number of transmit antennas x the number of receive antennas : the number of channels bonded

To increase wireless bandwidth in a large building, an engineer researches solutions. Which of the following implementations refers to using 40 MHz as a solution?

a) Omnidirectional antenna
b) Unidirectional antenna
c) Channel bonding
d) MU-MIMO

A network administrator is setting up a new office room on a different floor of the building to support video conferencing sessions. The video systems will be utilizing a wireless network. Although the work budget is very small, the network must support two 2,167 Mbps streams over an 80 MHz 5 GHz band channel. What is the minimum wireless 802.11 standard access point (AP) a network administrator can purchase to stay close to budget while meeting the network requirements?

a) Wi-Fi 5

b) Wi-Fi 4

c) Wi-Fi 6

d) Wireless g

An IT technician needs to set up multiple outdoor antennas at a large farm to boost radio communication for its farmers. Which of the following antennas should the technician install that would require the least amount of maintenance throughout its lifecycle?

a) Yagi antenna
b) Parabolic grid antenna
c) Torus antenna
d) Static dish antenna

A manager wants to deploy a wireless network in the Internet cafe; that will support wireless gamers. The access point must support the fastest data rates and be able to provide the most bandwidth possible for all connected users. Which wireless feature and mode would be most appropriate for this access points (APs) used in this cafe? (Select all that apply.)

a) 802.11ac
b) 802.11n
c) MIMO
d) MU-MIMO

The wireless access points (APs) on a large building floor have different names depending on the room. Employees and customers are confused and are constantly calling IT support to get the best wireless signal to work with as they constantly must change the AP connection. How can a network administrator improve wireless signals across the entire floor and provide a simple way to use the wireless network?

a) Use Wi-Fi 6 APs.
b) Create ad hoc connections.
c) Set limit on power output.
d) Set up an extended service set (ESS).

A tech configures a medium-sized business to utilize an ad hoc approach when connecting wireless devices. These devices allow connections to and from each other. Review the following properties and determine which applies to an ad hoc topology.

a) It uses an independent basic service set (IBSS).
b) It uses a basic service set (BSS).
c) It is grouped into an extended service set (ESS).
d) It is able to roam in an extended service area (ESA).

A manager wants to upgrade the wireless g network that provides Internet access to other mobile devices. If the manager wants to spend the least amount of money but increase wireless network speeds to the next level, which wireless technology should the next wireless router support?

a) 5G network

b) Wireless ac

c) Wi-Fi 6

d) Wi-Fi 4

What kind of system should large data centers have to prevent catastrophic loss of server equipment?

a) Firewall
b) Fire suppression
c) Power distribution unit
d) Hot site

Name the method of fault tolerance used when a group of servers, consisting of redundant nodes, prevents disruption of network services.

a) Link aggregation
b) Clustering
c) NIC teaming
d) Load balancing

What kind of disaster recovery site allows for immediate restoration of services by having a duplication of equipment in a separate location not contracted out to an online vendor?

a) Cold
b) Hot
c) Warm
d) Cloud

Which solution does a network closet use to clean a power signal?

a) PDU
b) UPS
c) Battery backup
d) Generator

What piece of network equipment is typically defined as "next-generation" and allows network engineers to allow or deny traffic to specific locations within the network?

a) Router
b) Network interface card
c) Firewall
d) Switch

A Key Performance Indicator (KPI) is a network performance metric used to determine asset reliability. Which of the following is NOT an example of a KPI?

a) Mean Time to Failure (MTTF)
b) Mean Time Between Failures (MTBF)
c) Maximum Tolerable Downtime (MTD)
d) Mean Time to Repair (MTTR)

A managed service provider onboarded a new client that operates out of their house and has no need for servers. The client does not want network equipment to granularly define what they can access and would rather have a simple box to connect to the internet. What kind of box should the provider install for the client?

a) Network interface card
b) Switch
c) Router
d) Firewall

A sysadmin has completed two contracts with two different internet vendors for the corporate office. The justification by the sysadmin is that they need to have two different connections from different providers to prevent an issue with one of them affecting the office. What networking concept did the sysadmin use to justify the added expense?

a) Load balancing
b) Diverse paths
c) Virtual router redundancy
d) First hop redundancy

What is the correct formula for the mean time between failure?

a) Sum of scheduled service intervals plus unplanned outages over the period
b) Total number of hours of unplanned maintenance divided by the number of failure incidents
c) Total operational time divided by the number of devices
d) Total operational time divided by the number of failures

A network administrator configured a switch to only permit a select number of physical addresses to connect, and then to drop any additional traffic with different network adapter IDs trying to connect. Analyze and select which of the following options will enforce this type of switch port protection feature and act as a guard against flooding attacks.

a) Address Resolution Protocol (ARP) inspection
b) Media Access Control (MAC) limiting
c) Network Access Control (NAC)
d) Media Access Control (MAC) filtering

A network administrator sets up a brand new wireless access point in the office. The access point will connect office wireless devices, but it will also offer access to guest users. Recommend wireless access features that can support and secure a guest network that should only be accessible to customers in the immediate lobby area of the office floor. (Select all that apply.)

a) Captive portal
b) Port Security
c) Power levels
d) Network isolation.

A network administrator wants to ensure passwords are strong and secure within a corporate environment. To effectively enforce password complexity rules, which of the following practices should the admin NOT recommend? (Select all that apply.)

a) Passwords on encrypted channels
b) A backdoor password reset mechanism
c) Any password that is a dictionary term
d) Any default password.

Which types of packet encryption use a pre-shared key (PSK) passphrase that generates a 256-bit master key (MK), and from the resulting MK, creates a 128-bit temporal key (TK)? (Select all that apply.)

a) RC4/TKIP
b) Cyclic Redundancy Check (CRC)
c) EUI-64
d) AES/CCMP

A network administrator uses a program that can use an access control list (ACL) to allow or deny control traffic from certain sources and apply rate-limiting if a source threatens to overwhelm the route processor. What is this called?

a) MAC Filtering
b) Extensible Authentication Protocol
c) Control Plane Policing
d) DHCP Snooping

Smart power distribution units (PDUs) are mounted and networked in each rack enclosure in a small data center. Management would like to keep track of the power data and feed it to an analytical application. However, the data must be encrypted in transit. How can the network team secure the power data in transit? (Select all that apply.)

a) Set up an RA guard.
b) Enable and configure only SNMPv3.
c) Enable dynamic ARP inspection.
d) Configure a private VLAN.

How can a network administrator prevent a rogue device or server from sending unknown IP addresses to clients requesting one?

a) Enable secure SNMP
b) Enable dynamic ARP inspection
c) Enable a RA guard
d) Enable DHCP snooping

A network administrator wants to prevent unauthorized devices from connecting and gaining access to the network. Conclude which options are effective ways to ensure this type of security on the switch. (Select all that apply.)

a) Isolating the ports to a black hole VLAN
b) Unlocking hardware cabinets
c) Disabling the switch port using management software
d) Configuring MAC filtering on a switch.

A customer at a retail store noticed that ads are pushed to their mobile device if they are within physical proximity to the store. Which technology uses these types of location services to configure policies specific to a user or device's physical location?

a) Open WiFi
b) Geofencing
c) Pre-shared key
d) MAC filtering

Which authentication method allows users to authenticate to the wireless network against a RADIUS server using their regular network credential?

a) Control Plane Policing
b) Wireless Client Isolation
c) Extensible Authentication Protocol
d) MAC Filtering

What authentication methods should be implemented in order to ensure only an authorized collection of users are connecting securely to a network? (Select all that apply.)

a) A Pre-shared key (PSK)
b) A public open access point (AP)
c) Group authentication
d) Media Access Control (MAC) filtering.

Which of the following methods is used to encapsulate IP packets for transmission over serial digital lines?

a) Internet protocol security (IPSec)
b) Generic routing encapsulation (GRE)
c) Transport layer security (TLS)
d) Point-to-point protocol (PPP)

Which of the following is also referred to as a router implementation?

a) Transport mode
b) Full tunnel
c) Tunnel mode
d) Transport layer security (TLS)

What solution uses a protocol called WebSockets that enables bidirectional messages to be sent between the server and client without requiring the overhead of separate HTTP requests?

a) Clientless VPN
b) Full Tunnel
c) Split Tunnel
d) Virtual Network Computing (VNC)

A network administrator uses a method that connects the port used for management access to a physically separate network infrastructure. What is this method?

a) Management port
b) Console port
c) AUX port
d) Out of band management

A network administrator is using a method that enables remote site routers to connect to the hub router using an IPSec tunnel, GRE tunneling, IPSec encryption, and next-hop router protocol (NHRP) to deploy provisioning to the VPNs. What is this called?

a) Site-to-site VPN
b) Generic routing encapsulation (GRE)
c) Clientless VPN
d) Dynamic multipoint VPN (DMVPN)

A network administrator sets up a policy that secures the authentication mechanism that a host must be able to match at least one matching security method for a connection to be established. What is this called?

a) Transport layer security (TLS)
b) Authentication header (AH)
c) Internet protocol security (IPSec)
d) Encapsulating security payload (ESP)

Which of the following VPN involves more than two sites connecting the remote spokes to a headquarters hub by using static tunnels configured between the hub and each spoke?

a) Full Tunnel
b) Site-to-site VPN
c) Virtual Network Computing (VNC)
d) Clientless VPN

Which of the following security methods is used to prevent unauthorized users from tailgating behind authorized users into secure buildings?

a) Locking racks
b) Biometric
c) Access control vestibule
d) Badge reader

What considerations should a company make when selecting and training employees with authentication factors with biometric recognition? (Select all that apply.)

a) Users find that biometric recognition invades privacy.
b) Biometric recognition technology can be discriminatory.
c) Setup and maintenance costs for biometric recognition are high.
d) Biometric recognition is not susceptible to spoofing methods

Employees at a gas station observe a potential hacker trying to install a malicious device in a credit card reader. Which of the following is a layer of security that could have been implemented to detect and alert this type of criminal activity? (Select all that apply.)

a) Circuit alarm
b) Duress alarm
c) Motion detection
d) Tamper detection

Following a security breach at a company from unauthorized personnel, physical site security policies need to be reviewed to mitigate repeated similar threats from occurring. Which of the following options can be implemented as a preventive measure to control users’ physical access to specific authorized access zones? (Select all that apply.)

a) An ID badge
b) A lock mechanism
c) A surveillance camera
d) A closed circuit television

A network engineer identifies that a broadcast storm is causing a loss of network bandwidth. What causes broadcast and unknown unicast frames to circulate the network perpetually, as each switch repeatedly floods each frame?

a) Switching loops
b) Missing route
c) DNS issues
d) Routing loop

Windows workstations at a small company are not able to log on to a Windows server. Which of the following is the likely cause?

a) A untrusted SSL (Secure Sockets Layer) certificate
b) Incorrect ACL (Access Control List) settings
c) Incorrect system time
d) Blocked UDP ports

A network engineer was tasked with resolving why certain printers were inaccessible by users next to those printers. The engineer realized the printer's network port on the switch was not configured to the proper network. The engineer set the network configuration tag to 30 for those ports, resolving the issue. What was most likely the cause of the issue?

a) IP exclusions
b) DNS issue
c) Incorrect VLAN
d) Untrusted SSL certificate

While working on a router, a network technician identifies that the number of available ports has been restricted. What type of issue is presented to the network technician?

a) Broadcast storm
b) Device configuration review
c) Licensed feature issue
d) BYOD challenges

A computer system sporadically connects to network services. Which of the following caused this issue?

a) Incorrect gateway
b) Expired IP (Internet Protocol) address
c) Rogue DHCP (Dynamic Host Configuration Protocol) server
d) Duplicate IP (Internet Protocol) addresses

A user installs a financial software package that requires cloud access. For some reason, the application fails to connect to the cloud server. What caused this issue?

a) Incorrect host-based firewall settings
b) Unresponsive service
c) Incorrect time
d) Duplicate IP (Internet Protocol) address

A network engineer is tasked with reviewing the current routing tables for the IP networks and host location, which of the following entries are part of the routing table? (Select all that apply.)


a) Destination
b) Protocol
c) Asymmetrical routing
d) Interface

A network has been asked to provide a synopsis of the potential risks associated with implementing a BYOD program at Company A. What are the possible risks associated with this program? (Select all that apply.)

a) Security
b) Licensed feature issues
c) Compatibility/support
d) Device configuration review

A user is not able to browse the Internet, but can browse local shares without any issue. An IT engineer discovers that the default gateway is missing in the computer's dynamic network configuration. The engineer configures which of the following?

a) IP helper
b) Scope options
c) IP exclusions
d) IPAM

A network administrator is testing a remote server's network configuration and decides to ping the Internet Protocol (IP) address of a familiar office Windows workstation. No replies were received, but the admin confirms DHCP settings are enabled on the workstation and can successfully browse the Internet. Analyze the scenario to determine why the client workstation did not respond to a ping request.

a) The same IP address of another client is being used.
b) The Ethernet port is bad.
c) The IP address has expired.
d) An IP address from another subnet is being used.

A technician creates a hosts file on a computer as a short term fix for systems connectivity. What is the purpose of using this file?

a) Incorrect subnet mask
b) Incorrect host-based firewall settings
c) Names not resolving
d) Unresponsive service

A Windows server is being configured to go live again on a LAN (Local Area Network) that has a DHCP (Dynamic Host Configuration Protocol) server with a new pool of addresses. The change must be verified upon completion. Which of the following commands would be most appropriate to apply to this scenario? (Select all that apply.)

a) ipconfig /flushdns
b) ipconfig /release
c) ipconfig /renew
d) ipconfig /all

Two Windows hosts connected to a switch are contending to respond to ARP (Address Resolution Protocol) queries. Only one of the hosts is receiving network traffic. Determine the most likely cause of this issue.

a) Incorrect gateway
b) Expired IP address
c) Duplicate MAC address
d) Duplicate IP address

A company named Specks has solicited the use of cloud services and has chosen a Platform as a Service (PaaS) product from Oracle with an Oracle Database. The company will use this platform to build custom applications on thin clients inbased in the cloud. Which of the following is true?

a) Servers are configurable by Specks.
b) Server security is handled by the Specks.
c) All Oracle software suites are included.
d) Application security is handled by Specks.

Mobile users in an organization complain about limited functionality in a company's headquarters. The IT staff decide to extend mobile access capabilities by widening the current wireless network. When evaluating the expansion configuration, a wireless access point media access control (MAC) address relates to which option?

a) Basic Service Set Identifier (BSSID)
b) Base station
c) Extended Service Set (ESS)
d) Basic Service Set (BSS)

An attacker used a malicious host with a spoofed physical address to perform cache poisoning and perpetuate an on-path attack. Which of the following can prevent these types of attacks? (Select all that apply.)

a) Dynamic Host Configuration Protocol (DHCP) snooping
b) Media Access Control (MAC) filtering
c) Port-based Network Access Control (PNAC)
d) Address Resolution Protocol (ARP) inspection

A network technician is troubleshooting network issues between a workstation and a virtual server running a beta application. Network performance is lacking and there seems to be issues in between the source and destination. Which command will provide the technician with the best information regarding other nodes between the workstation and the remote host?

a) dig
b) route
c) arp
d) pathping

3-Way Handshake (TCP)

A network administrator implemented video surveillance mechanisms to provide a layer of defense in the event prevention-based controls fail to work. If this security mechanism is effective, it ensures which of the following options? (Select all that apply.)

a) Shorter response times and fewer guards needed

b) Detecting attempts to penetrate a barricade

c) Improving resilience of perimeter gateways

d) Recording of movement and access

A gamer is using a wireless AC router connected to a fiber optic network from the local Internet Service Provider (ISP). The gamer must ensure the ISP is providing close to advertised network speeds. Which is the most appropriate tool to gauge the available bandwidth?

a) A port scanner
b) A packet sniffer
c) A speed testing website
d) A Wi-Fi analyzer

A network administrator is researching network virtualization and is trying to find a standard architecture for appliances to be developed against. Which of these should the administrator look at for a standard?

a) MPLS
b) Hypervisor
c) vswitch
d) NFV

Question the users vs. Question the obvious