Question 1

A network technician installs a web server on the firewall. Which of the following methods should the technician implement to allow access to outside users without giving access to the inside network?
A) VLAN
B) DMZ
C) SNMP
D) NTP

Accepted Answer

A DMZ (Demilitarized Zone) is a network configuration that allows external users to access specific services, like a web server, without granting them access to the internal network.

Question 2

Which of the following would a company place at the edge of its network if it wants to view and control which Internet applications are being used?
A) VPN concentrator
B) NGFW
C) IDS/IPS
D) Proxy server

Accepted Answer

A Next-Generation Firewall (NGFW) is designed to provide visibility and control over Internet applications, making it suitable for monitoring and managing application usage at the network edge.

Question 3

A user reports intermittent performance issues on a segment of the network. According to the troubleshooting methodology, which of the following steps should the technician do NEXT after collecting initial information from the customer?
A) Document findings, actions, and outcomes.
B) Establish a theory of probable cause.
C) Establish a plan of action to resolve the problem.
D) Duplicate the problem, if possible.

Accepted Answer

Duplicating the problem, if possible, is the next step in the troubleshooting methodology after collecting initial information from the customer. This allows the technician to verify the issue and gather more information about its cause.

Question 4

Wireless users have been experiencing connectivity problems. Investigation shows neighboring wireless appliances, which are not connected to the network, have been on the same 5GHz frequency to communicate. Which of the following wireless performance problem concepts defines this issue?
A) Interference
B) Distance limitation
C) Signal-to-noise ratio
D) Absorption

Accepted Answer

The issue described is interference, where neighboring wireless appliances operating on the same frequency cause connectivity problems by disrupting the wireless signal.

Question 5

A technician wants to physically connect two office buildings' networks. The office buildings are located 600ft (183m) apart. Which of the following cable types is the BEST choice?
A) Cat 5e
B) Cat 6a
C) Multimode
D) Coaxial

Accepted Answer

Multimode fiber optic cable is the best choice for connecting networks over a distance of 600ft (183m) as it supports longer distances and higher bandwidths compared to copper cables like Cat 5e, Cat 6a, or coaxial.

Question 6

A technician has deployed an additional DHCP server for redundancy. Clients in certain subnets are not receiving DHCP leases from the new DHCP server. Which of the following is the MOST likely cause?
A) The new DHCP server's IP address was not added to the router's IP helper list.
B) The new DHCP server is not receiving the requests from the clients.
C) The ARP cache of the new DHCP server needs to be updated.
D) The ARP table on the router needs to be cleared.

Accepted Answer

The new DHCP server's IP address was not added to the router's IP helper list, which is necessary for forwarding DHCP requests from clients in different subnets to the DHCP server.

Question 7

Management has requested that a wireless solution be installed at a new office. Which of the following is the FIRST thing the network technician should do?
A) Order equipment
B) Create network diagrams
C) Perform a site survey
D) Create an SSID.

Accepted Answer

Performing a site survey is the first step to understand the physical environment, identify potential interference sources, and determine the best locations for access points.

Question 8

A network administrator has created a new VLAN for the server and clients within the accounting department and wants to outline how it integrates with the existing network. Which of the following should the administrator create?
A) Logical diagram
B) Physical diagram
C) Rack diagram
D) Configuration diagram

Accepted Answer

A logical diagram is used to show how different network components, such as VLANs, integrate and communicate within the network, focusing on the flow of data and network topology.

Question 9

A network engineer at a multinational company is asked to purchase mobile phones for senior executives who often travel internationally. The executives want their phones to work with wireless carriers in multiple countries when they travel. Which of the following cellular standards should these new phones support?
A) GSM
B) TDM
C) CDMA
D) PSTN

Accepted Answer

GSM (Global System for Mobile Communications) is the standard that is widely used internationally, allowing phones to work with wireless carriers in multiple countries.

Question 10

An administrator wants to implement an additional authentication factor to the remote SSH servers. Which of the following accomplishes this goal with the principle of "something you have"?
A) Certificate
B) Pattern
C) Password
D) Fingerprint

Accepted Answer

A certificate is considered "something you have" as it is a digital document that can be stored on a device and used to authenticate the user.

Question 11

Which of the following BEST explains the purpose of signature management as a mitigation technique?
A) Hardening devices
B) Segmenting the network
C) Detecting malicious activity
D) Restricting user credentials

Accepted Answer

Signature management is primarily used to detect malicious activity by identifying known patterns or signatures of threats.

Question 12

A network technician wants to address PCs on a subnet with IPv6 in addition to IPv4. The subnet currently uses a DHCP server that only supports IPv4. Which of the following should the technician use to assign IPv6 addresses automatically without DHCP?
A) APIPA
B) MAC reservations
C) EUI-64
D) IPv4 to IPv6 tunnel

Accepted Answer

EUI-64 is a method used to automatically configure IPv6 addresses by using the MAC address of a device to create a unique IPv6 address, allowing devices to self-configure without the need for a DHCP server.

Question 13

A technician is establishing connectivity through a VPN for remote server access. Which of the following protocols should be utilized to configure this VPN connection securely?
A) IPSec
B) IGRP
C) L2TP
D) PPTP

Accepted Answer

IPSec is a suite of protocols designed to ensure secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet in a communication session, making it suitable for secure VPN connections.

Question 14

A Chief Information Officer (CIO) tasks the network engineer with protecting the network from outside attacks. Placing which of the following devices on the network perimeter would provide the MOST security for the system?
A) Firewall
B) NGFW
C) Content filter
D) IDS/IPS

Accepted Answer

A Next-Generation Firewall (NGFW) provides the most comprehensive security by combining traditional firewall capabilities with advanced features like intrusion prevention, application awareness, and deep packet inspection, making it more effective at protecting against sophisticated threats.

Question 15

Users on a LAN segment are reporting a loss of connectivity to network services. The client PCs have been assigned with 169.254.X.X IP addresses. Which of the following IP address schemas is being utilized?
A) Private IP
B) Static IP
C) APIPA
D) Loopback

Accepted Answer

The 169.254.X.X IP address range is used by APIPA (Automatic Private IP Addressing) when a DHCP server is not available to assign an IP address.

Question 16

A network technician receives a new firmware update for a network device. The technician wants to ensure the file has not been tampered with. Which of the following techniques should the technician use to ensure the integrity of the file?
A) Cyclic redundancy check
B) System integrity check
C) Hash comparison
D) Root guard

Accepted Answer

Hash comparison is used to verify the integrity of a file by comparing the hash value of the downloaded file with the hash value provided by the source. If they match, the file has not been tampered with.

Question 17

A technician is configuring a new server with an IP address of 10.35.113.47 on the 10.35.112.0 subnet to allow for the maximum number of hosts. When configuring network settings, which of the following is the correct subnet mask?
A) 10.35.112.0/30
B) 10.35.112.0/24
C) 255.255.240.0
D) 255.255.248.0
E) 255.255.255.0

Accepted Answer

The answer of A technician is configuring a new server...

Question 18

Which of the following would indicate that a circuit speed should be increased?
A) Low latency
B) Low bandwidth consumption
C) High number of SIEM alerts
D) High packet drops

Accepted Answer

High packet drops indicate that the network is congested or unable to handle the current data load, suggesting a need for increased circuit speed to improve performance.

Question 19

An AP is configured to authenticate clients by using their Active Directory username and password. The AP uses UDP to connect to the authentication service, which then queries Active Directory. Which of the following authentication services is being used by the AP in this scenario?
A) RADIUS
B) TACACS+
C) LDAP
D) Kerberos

Accepted Answer

RADIUS is an authentication service that uses UDP and can be configured to authenticate clients using their Active Directory credentials.

Question 20

A technician has installed an older IP camera as a temporary replacement for a recently failed newer one. The technician notices that when the camera's video stream is off, the ping roundtrip time between the camera and the network DVR is consistently less than 1ms without dropped packets. When the camera video stream is turned on, the ping roundtrip time increases dramatically, and network communication is slow and inconsistent. Which of the following is MOST likely the issue in this scenario?
A) VLAN mismatch
B) Duplex mismatch
C) Cat 6 RX/TX reversed
D) Damaged cable

Accepted Answer

A duplex mismatch occurs when one end of the network link is set to full-duplex and the other to half-duplex, causing network performance issues like increased latency and inconsistent communication, especially under load.

Exam 10: CompTIA Network+

A network technician installs a web server on the firewall. Which of the following methods should the technician implement to allow access to outside users without giving access to the inside network?

Which of the following would a company place at the edge of its network if it wants to view and control which Internet applications are being used?

A user reports intermittent performance issues on a segment of the network. According to the troubleshooting methodology, which of the following steps should the technician do NEXT after collecting initial information from the customer?

Wireless users have been experiencing connectivity problems. Investigation shows neighboring wireless appliances, which are not connected to the network, have been on the same 5GHz frequency to communicate. Which of the following wireless performance problem concepts defines this issue?

A technician wants to physically connect two office buildings' networks. The office buildings are located 600ft (183m) apart. Which of the following cable types is the BEST choice?

A technician has deployed an additional DHCP server for redundancy. Clients in certain subnets are not receiving DHCP leases from the new DHCP server. Which of the following is the MOST likely cause?

Management has requested that a wireless solution be installed at a new office. Which of the following is the FIRST thing the network technician should do?

A network administrator has created a new VLAN for the server and clients within the accounting department and wants to outline how it integrates with the existing network. Which of the following should the administrator create?

An administrator wants to implement an additional authentication factor to the remote SSH servers. Which of the following accomplishes this goal with the principle of "something you have"?

Which of the following BEST explains the purpose of signature management as a mitigation technique?

A network technician wants to address PCs on a subnet with IPv6 in addition to IPv4. The subnet currently uses a DHCP server that only supports IPv4. Which of the following should the technician use to assign IPv6 addresses automatically without DHCP?

A technician is establishing connectivity through a VPN for remote server access. Which of the following protocols should be utilized to configure this VPN connection securely?

A Chief Information Officer (CIO) tasks the network engineer with protecting the network from outside attacks. Placing which of the following devices on the network perimeter would provide the MOST security for the system?

Users on a LAN segment are reporting a loss of connectivity to network services. The client PCs have been assigned with 169.254.X.X IP addresses. Which of the following IP address schemas is being utilized?

A network technician receives a new firmware update for a network device. The technician wants to ensure the file has not been tampered with. Which of the following techniques should the technician use to ensure the integrity of the file?

A technician is configuring a new server with an IP address of 10.35.113.47 on the 10.35.112.0 subnet to allow for the maximum number of hosts. When configuring network settings, which of the following is the correct subnet mask?

Which of the following would indicate that a circuit speed should be increased?

An AP is configured to authenticate clients by using their Active Directory username and password. The AP uses UDP to connect to the authentication service, which then queries Active Directory. Which of the following authentication services is being used by the AP in this scenario?