Question 1

A network technician has provisioned a new Linux instance in a public cloud provider's IaaS environment. The technician did not install a graphical user interface. The technician wants to connect to the server's public IP address securely to start a console session. Which of the following remote access methods should the technician use?
A) SSH
B) Telnet
C) VNC
D) RDP

Accepted Answer

SSH (Secure Shell) is a protocol used to securely connect to a remote server's command line interface, which is ideal for a Linux server without a graphical user interface.

Question 2

A network administrator is responding to a help desk ticket, which states an unknown wireless access point is broadcasting in a specific area. Upon investigation, the administrator finds that a user brought a wireless access point from home and plugged it into the corporate network. This resulted in an attacker using the unsecured wireless LAN to gain access to the network. Which of the following should the network administrator have done to BEST prevent this problem?
A) Changed the default credentials on the network switches
B) Installed a Layer 7 firewall
C) Implemented port security
D) Disabled unnecessary services on the network switches

Accepted Answer

Port security would have prevented unauthorized devices, like a rogue access point, from connecting to the network by limiting the number of MAC addresses on a switch port.

Question 3

A network engineer wants to implement a technology that allows for an all-in-one approach to incoming and outgoing traffic from the Internet. This device should be able to filter content and scan for malicious information in each packet. Which of the following types of devices would be necessary?
A) UTM appliance
B) IDS appliance
C) Proxy server
D) RADIUS server

Accepted Answer

A UTM (Unified Threat Management) appliance is designed to provide multiple security functions such as firewall, intrusion detection/prevention, content filtering, and antivirus scanning in a single device, making it suitable for managing both incoming and outgoing traffic comprehensively.

Question 4

A network engineer wants to change how employees authenticate to the wireless network. Rather than providing a pre-shared key, the engineer wants employees to be able to authenticate with the same unique company user ID and password they use for accessing other services, such as email and document sharing. The engineer also wants to receive daily reports of login attempts on the wireless network. Which of the following should be installed to achieve this goal?
A) LDAP server
B) UTM appliance
C) Multilayer switch
D) AAA/RADIUS server

Accepted Answer

A AAA/RADIUS server allows for centralized authentication using existing user credentials and can provide logging and reporting of login attempts.

Question 5

A user claims to have no Internet access but can access local resources. A technician determines the issue is with a configuration because a ping to a working public website shows a response that starts with: Ping request could not find host Which of the following is the MOST likely misconfiguration?
A) Incorrect netmask
B) DNS
C) DHCP
D) SSL certificate

Accepted Answer

The error message "Ping request could not find host" indicates a DNS issue, as the system is unable to resolve the domain name to an IP address.

Question 6

Which of the following should be performed on a regular basis to prevent unauthorized access to a company network? (Choose two.)
A) Packet analysis
B) Reviewing baselines
C) Vulnerability scanning
D) Patch management
E) Log archiving

Accepted Answer

Vulnerability scanning helps identify potential security weaknesses, and patch management ensures that software is up-to-date with the latest security fixes, both of which are crucial for preventing unauthorized access.

Question 7

Which of the following components can be used to manage network traffic to all nodes in a hypervisor?
A) Virtual switch
B) Virtual NIC
C) Media converter
D) Load balancer
E) Multilayer switch

Accepted Answer

A virtual switch is a software-based network device that allows virtual machines (VMs) to communicate with each other and with the physical network. It can be used to manage network traffic to all nodes in a hypervisor.

Question 8

A network administrator is reviewing the following output from a switch:  Which of the following attacks has occurred on the switch?
A) DNS poisoning
B) ARP poisoning
C) VLAN hopping
D) MAC address spoofing

Accepted Answer

The answer of A network administrator is reviewing the following...

Question 9

A network technician is working on a way to set up a new branch office securely. The network manager confirms the company does not have any plans to expand to any other new sites and wants to implement the most cost-effective solution. Which of the following would be the BEST type of VPN to implement?
A) Client-to-site VPN
B) DMVPN
C) Site-to-site VPN
D) MPLS VPN

Accepted Answer

A site-to-site VPN is the most cost-effective and secure solution for connecting a new branch office when there are no plans for further expansion. It allows for secure communication between the main office and the branch office over the internet without the need for additional infrastructure.

Question 10

A user no longer has access to network resources after a recent office move, but all other users in the building are able to connect at 100MB connections. After further investigation, a network technician notices the following information:  Which of the following is causing the network connection issues?
A) Open/short pins
B) VLAN mismatch
C) Distance limitation
D) Crosstalk
E) Port configuration

Accepted Answer

The answer of A user no longer has access to...

Question 11

Which of the following technologies allows network traffic to come into the network on a certain port and go to a destination server with a different port?
A) Spanning port
B) Port forwarding
C) Port mirroring
D) Port tagging

Accepted Answer

Port forwarding allows network traffic to come into the network on a certain port and go to a destination server with a different port.

Question 12

Which of the following provides information about how often some devices fail so the IT department can take proactive measures?
A) MTBF
B) MTTR
C) SLA
D) UPS

Accepted Answer

MTBF (Mean Time Between Failures) provides information about the average time between failures of a device, helping the IT department to predict and take proactive measures.

Question 13

A network technician receives a report that the company's intranet web server is not responding. The technician verifies successful connectivity to the server via the ping and tracert commands. The technician also verifies the routers and switches are online and operational, and then runs Telnet to port 80 and receives a response. Which of the following troubleshooting steps should the technician perform NEXT?
A) Establish a plan to reset the company router.
B) Escalate the issue to the server administrator.
C) Duplicate the issue and continue testing.
D) Report that an issue was not identified.

Accepted Answer

The answer of A network technician receives a report that...

Question 14

A network technician is investigating reports of blocked downloads from a firewall. Which of the following should be used to determine which protocols are being blocked?
A) Ping
B) Log review
C) Vulnerability scans
D) Alerts

Accepted Answer

Log review is used to analyze firewall logs to determine which protocols are being blocked.

Question 15

A user has reported an issue with wireless VoIP phones dropping calls during business hours. When working late or in the evenings, the user does not experience call drops. When the network technician investigates the issue, all WAPs have balanced the number of connections evenly and are not dropping off the network. The network technician connects to the wireless network in the user's office and starts a continuous ping to an external server. The results show a drastic and varied response time for each packet. Which of the following is the MOST likely cause of the dropped calls?
A) No QoS configured on the network
B) Signal-to-noise ratio
C) Interference from the microwave in the breakroom
D) Rogue AP installed in the office

Accepted Answer

The answer of A user has reported an issue with...

Question 16

Multiple users are experiencing slow performance when downloading large files from a specific site. Which of the following should the technician do to check the connection to the external site?
A) Check the latency by running a continuous ping to the site.
B) Perform the ipconfig/flushdns command on the affected users' PCs. Perform the ipconfig/flushdns command on the affected users' PCs.
C) Run a speedtest from a user's PC to a site on the Internet.
D) Verify if there is MTU mismatch in the path to the site.

Accepted Answer

Running a continuous ping to the site will help check the latency and packet loss, which can indicate network issues affecting download performance.

Question 17

Which of the following ports are used for electronic mail protocols? (Choose three.)
A) 23
B) 25
C) 110
D) 123
E) 143
F) 161
G) 389
H) 443

Accepted Answer

The answer of Which of the following ports are used...

Question 18

A developer has asked a network engineer for a small network segment of five computers connected via a Layer 1 device, configured in a star topology, and segregated from the corporate network. Which of the following would BEST fulfill the developer's request?
A) Connect the five PCs to a hub that is not connected to the corporate network.
B) Connect the five PCs to a switching router and assign the PCs to a separate VLAN.
C) Connect the five PCs to a hardware firewall that is connected to the router.
D) Connect the five PCs to a switch and configure the ports with implicit deny ACLs for outbound traffic.

Accepted Answer

A hub is a Layer 1 device that can connect multiple computers in a star topology. By not connecting it to the corporate network, it ensures segregation.

Question 19

First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?
A) Firewall configuration documentation
B) Change management documentation
C) Network performance baseline
D) Logical diagram

Accepted Answer

The network administrator should first consult the change management documentation to see if any changes made during the maintenance weekend could have affected internet access.

Question 20

A small team is overloaded with requests for database resources. The Chief Information Officer (CIO) is concerned the company does not have the resources to deploy and manage these additional services efficiently. Which of the following types of cloud services would be the MOST effective?
A) PaaS
B) IaaS
C) BaaS
D) SaaS

Accepted Answer

The answer of A small team is overloaded with requests...

Exam 10: CompTIA Network+

A network engineer wants to implement a technology that allows for an all-in-one approach to incoming and outgoing traffic from the Internet. This device should be able to filter content and scan for malicious information in each packet. Which of the following types of devices would be necessary?

Which of the following should be performed on a regular basis to prevent unauthorized access to a company network? (Choose two.)

Which of the following components can be used to manage network traffic to all nodes in a hypervisor?

A network administrator is reviewing the following output from a switch: Which of the following attacks has occurred on the switch?

Which of the following technologies allows network traffic to come into the network on a certain port and go to a destination server with a different port?

Which of the following provides information about how often some devices fail so the IT department can take proactive measures?

A network technician is investigating reports of blocked downloads from a firewall. Which of the following should be used to determine which protocols are being blocked?

Multiple users are experiencing slow performance when downloading large files from a specific site. Which of the following should the technician do to check the connection to the external site?

Which of the following ports are used for electronic mail protocols? (Choose three.)

A developer has asked a network engineer for a small network segment of five computers connected via a Layer 1 device, configured in a star topology, and segregated from the corporate network. Which of the following would BEST fulfill the developer's request?

First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?

A small team is overloaded with requests for database resources. The Chief Information Officer (CIO) is concerned the company does not have the resources to deploy and manage these additional services efficiently. Which of the following types of cloud services would be the MOST effective?