You’re defending the network during a penetration test. One of your teammates thinks that attackers might use spoofed messages to imitate an SNMP server and send commands to network devices. If that’s accurate, what UDP port should you watch for unusual activity on? Choose the best answer.

How long is a newly-assigned Autonomous System Number (ASN?) Choose the best answer.

What is a typical starting point for the divide and conquer approach to troubleshooting a network issue? Choose the best answer.

You require your users to log on using a user name, password, and rolling six-digit code sent to a keyfob device. They are then allowed computer, network, and email access. What types of authentication have you implemented? Each correct answer represents a part of the solution. Select all that apply.

On IPv6 networks, what is one draback of SLAAC compared to DHCPv6? Choose the best answer.

You want to configure a firewall rule to allow secure remote shell access to a Linux server. What port should you open? Choose the best answer.

Your company has a set of cybersecurity tips for remote workers on personal devices. Which of the following is primarily intended to protect them from on-path attacks? Choose the best answer.

An IP address ends in /24. What does that mean? Choose the best answer.

You were told to set up a “structured walkthrough” of a disaster response plan, but that terminology isn’t in the procedures manual. What other term should you look for? Choose the best answer.

A coworker just adjusted STP settings on a network to improve network convergence speeds, and asked you to monitor the network for issues. Which of the following might indicate switch looping issues? Select all that apply.

What is the primary dynamic routing protocol used on the internet? Choose the best answer.

In the 802.1Q field of an Ethernet header, how many bits are allocated to VLAN ID? Choose the best answer.

What step is essential for both configuration monitoring and anomaly-based dection of performance issues? Choose the best answer.

In IPv6, what address prefix indicates a unique local scope? Choose the best answer.

What is the primary function of a patch panel in a network closet? Choose the best answer.

What kind of attack is data sanitization primarily intended to protect against? Choose the best answer.

A warehouse is using NB-IoT sensor systems. What cellular technology are those devices based on? Choose the best answer.

What is the simplest strategy to help mitigate network contention in a scenario where multiple applications compete for bandwidth? Choose the best answer.

A small network has its web servers on a screened subnet. You want to protect them using a single hardware firewall that also protects access to the internal network.. In order to accommodate all zones with a single appliance, which of the following topologies should you choose? Choose the best answer.

On which OSI layer would a network diagram be almost entirely logical? Choose the best answer.

You’re experiencing connectivity problems in a series of 80 meter 10GBASE-T runs. Which of the following issues might be at fault? Choose the best answer.

Which of the following are likely to be important components of a rack diagram? Select all that apply.

What kind of VPN is most likely to use a VPN concentrator? Choose the best answer.

What IP type most likely indicates that a packet is being used for network control data? Choose the best answer.

What does VLSM allow that the original version of CIDR does not? Choose the best answer.

VoIP users are experiencing intermittent quality drops and stuttering audio. What is the most appropriate way to investigate the issue? Choose the best answer.

What is the main purpose of implementing an FHRP like HSRP or VRRP in a network? Choose the best answer.

Which interface-level metric is the least specific? Choose the best answer.

Each building on a college campus has a LAN where individual devices plug into switch ports, and local switches each connect to a central switch in the basement. Each central switch connects to switches in four other buildings, so one building having a network failure won’t affect the rest of the campus. What kind of hybrid topology describes the campus as a whole? Choose the best answer.

What can VXLAN and its competing protocols do that QinQ nested VLAN tagging cannot? Choose the best answer.

What is most likely to happen when you connect to a Wi-Fi hotspot with a captive portal configured? Choose the best answer.

A wireless AP is advertized as having “Band steering.” In practical terms, what does that mean?” Choose the best answer.

You’re collecting device metrics for monitoring network performance. Which of the following would be the LEAST appropriate to track? Choose the best answer.

What address type is present in IPv4 but not in IPv6? Choose the best answer.

What security advantages does an RFID-based electronic lock have over a traditional key lock? Select all that apply.

What kind of network is most likely to require switches/VLANs with Jumbo Frames support? Choose the best answer.

Which feature of SIEM utilities brings together log entries from multiple components in order to find broader trends and relationships than those formed by the individual entries? Choose the best answer.

What is the most common topology used by Ethernet LANs? Choose the best answer.

A rack-mounted switch is described as “2U.” What do you expect its width and height to be? Choose the best answer.

You’re comparing high availability solutions using redundant servers. One uses an active-active approach while the other is active-passive. Which of the following should you expect to be true? Select all that apply.

When you encounter a network problem, why is it important to try replicating it, rather than simply working on a solution? Choose the best answer.

You’re going to assist with networking and securing a utilities distribution system. What family of network technologies should you study first? Choose the best answer.

Which TWO of the following problems are most likely to be found by a network discovery scan? Select all that apply.

In a three-tier hierarchical data center, what switching tier manages “smart” functions like routing, filtering, and QoS? Choose the best answer.

You’re comparing two network appliances. One is managed via a web GUI and one via a web API. What is the practical difference between the two? Choose the best answer.

What element of your risk mitigation strategy helps keep future additions to your network from introducing new security vulnerabilities? Choose the best answer.

Which of the following is NOT a typical DHCP option assigned to a host? Choose the best answer.

From the following options, select the one that represents the correct order of Wi-Fi encryption ciphers, arranged from most secure to least secure. Choose the best answer.

When troubleshooting a problem, why does identifying probably cause tend to be the most time-consuming step? Choose the best answer.

You’re using a wireless analyzer to measure signal strength, and just made a measurement five meters from the hotspot. Assuming it has a dipole antenna and no significant sources of attenuation, how much of a drop would you expect ten meters away? Choose the best answer.

A host connected to a VLAN trunk is misconfigured and isn’t tagging frames with a VLAN ID. What happens to traffic from that host? Choose the best answer.

In network operations, what is the primary purpose of measuring baseline metrics? Choose the best answer.

Which of the following describes the ultimate goal of the OSI model? Choose the best answer.

Your data center connects to resources on a public cloud using a site-to-site VPN. What best describes that link’s topology and traffic flows? Each choice represents a partial solution. Select all that apply.

You want to design a script that performs in-depth testing of DNS resolution across an entire zone. Which command should you use? Choose the best answer.

You’re using a packet sniffer to troubleshoot problems with a PXE network boot. What port should you filter for to make sure that TFTP is behaving properly? Choose the best answer.

Which of the following devices operates primarily on the Data Link layer of the OSI model? Choose the best answer.

How does a PDU in a network closet function differently from a standard power strip? Select all that apply.

You’re editing the VLAN database of a Cisco switch. What is the recommended range for configurable Normal Range VLANs on small and medium sized networks? Choose the best answer.

What differentiates a link-state routing protocol from a distance-vector protocol? Select all that apply.

You’re choosing between high-availability solutions. How does failover time generally compare between active-active and active-passive configurations? Choose the best answer.

What is the best way to visualize the Wi-Fi channels being used in a facility, their signal strength, and how they overlap with one another? Choose the best answer.

What disaster recovery metric relates the amount of data that will be lost in case of system failure? Choose the best answer.

A development is unable to access the test server. They can still reach other network resources, and other developers aren’t having that problem, so you suspect an account issue. What is the logical next step for testing that theory? Choose the best answer.

What distinguishes elasticity from the broader concept of scalability? Choose the best answer.

Your network has dynamic routing protocols configured. Why might you still choose to enter static routes? Select all that apply.

Packets addressed to the 192.168.100.0/24 subnet keep getting directed to a the wrong interface of a router: instead of Interface 0/0 which leads to that subnet, they’re sent along interface 0/1 that leads to an interior network. What command would be most appropriate to identify the problem? Choose the best answer.

What is NOT a typical goal of ARP poisoning? Choose the best answer.

A series of Ethernet drops lead through a wall and end up in a bundle of otherwise unlabeled cables. What tool can you use to quickly determine the path a specific cable takes? Choose the best answer.

You want a switch that can send power to IP camera and wireless access points located in places without a convenient electrical outlet. What feature should you look for? Choose the best answer.

What is the primary purpose of a wireless SSID? Choose the best answer.

A small office in an old building has poor Wi-Fi coverage, possibly due to the structure of the walls; network demands aren’t high but connectivity is still less reliable than you’d like. You’ve already moved the AP to the center of the space to maximize coverage. Which of the following is the LEAST apppropriate solution? Choose the best answer.

At which STP port state does a switch interface begin to send BPDUs? Choose the best answer.

A network closet has equipment drawing a total current of 15A at 120V. If the recommended de-rating factor is 20% (or a factor of 0.8), what is the minimum capacity for a UPS in VA? Choose the best answer.

A system appears to have intermittent network connectivity to all sites and applications. Assuming that’s all you know, what troubleshooting approproach is most appropriate? Choose the best answer.

Every day around 2PM the network becomes significantly slower. Most impacted are impact to cloud-based applications and VoIP calls, and file transfers. Which TWO of the following should you investigate first? Select all that apply.

You’re configuring a switch interface to connect to an old legacy Ethernet device. Which of the following settings is more likely to need manual configuration than it would on a modern network? Choose the best answer.

What classic DoS technque relies on abuse of the TCP protocol? Choose the best answer.

A router has a combination of static routes, RIP routes, and OSPF routes. Which IOS command will display how the router learned each IPv4 route? Choose the best answer.

What is the primary disadvantage of multitenancy in the cloud? Choose the best answer.

How does DHCP function within an IP address Management (IPAM) system? Select all that apply.

What is the most significant difference between a lightweight AP from typical consumer wireless APs? Choose the best answer.

Which tenet of security is most likely to be affected by your facility’s choice of HVAC (heating, ventilation, and air-conditioning) system? Choose the best answer.

What is the primary advantage of multimode fiber over single-mode fiber? Choose the best answer.

Which of the following IPv4 addresses are used for multicast traffic? Select all that apply.

What does a DHCP server’s scope represent? Choose the best answer.

A newly terminated twisted-pair Ethernet cable isn’t connecting properly and a coworker suggests there’s a TX/RX mismatch. What’s the easiest way to tell if that’s the problem? Choose the best answer.

Typical consumer-oriented home routers create private networks and communicate with the internet using PAT. How can this also be described in NAT terms? Choose the best answer.

What is a primary consequence of continuing to use an IT asset after its EOS date? Choose the best answer.

Which of the following terms is closely related to RTO, but applied to a device rather than a disaster recovery scenario? Choose the best answer.