A network administrator installs a node that requires a media converter to connect Ethernet to fiber but sees no link light on the node. The administrator notices the following:
• Both terminating points are properly seated.
• Both the fiber and Ethernet cables have been successfully tested.
• The media converter is turned on.
• The switchport is configured as half duplex.
Which of the following is the reason the link light is not on?
A. The TX/RX connection is transposed.
B. The switchport is misconfigured.
C. One of the cables has a short.
D. The switchport interface has errors.
Show Answer
Correct Answer: A
Explanation: The fiber transmit and receive strands are likely reversed, so neither endpoint receives the other’s signal and the link light stays off. A half-duplex setting may cause a performance issue, but it typically does not prevent the physical link from coming up.
Question 60
Which of the following would a network administrator most likely use to securely manage a network device on a closed network?
A. Bastion host
B. Remote desktop
C. SSH
D. Split-tunnel VPN
Show Answer
Correct Answer: C
Explanation: SSH is the standard secure protocol for remotely managing network devices over a network, including a closed network. A bastion host is a hardened intermediary host rather than the management protocol itself, Remote Desktop is typically for GUI access to systems rather than network device administration, and a split-tunnel VPN is a VPN configuration option, not the primary management method for a device on a closed network.
Question 60
An attack on an internal server is traced to an isolated guest network. Which of the following best describes the attack?
A. On-path
B. DNS poisoning
C. VLAN hopping
D. ARP spoofing
Show Answer
Correct Answer: C
Explanation: VLAN hopping is an attack that bypasses VLAN isolation, allowing a device on a guest VLAN to reach systems on another VLAN, such as an internal server. ARP spoofing typically targets devices within the same local network.
Question 61
Which of the following is a reason to decide on the approach when troubleshooting an incident?
A. To ensure that steps are not forgotten
B. To make documentation easier
C. To be resource efficient
D. To determine whether anything has changed
Show Answer
Correct Answer: C
Explanation: Choosing a troubleshooting approach helps focus testing and avoid unnecessary steps, making the investigation more efficient in its use of time and resources.
Question 62
Which of the following ports is commonly used for DHCPDISCOVER call requests for a new machine on a network?
A. 53
B. 68
C. 69
D. 80
Show Answer
Correct Answer: B
Explanation: DHCP clients use UDP source port 68 and send DHCPDISCOVER messages to UDP destination port 67. Among the given options, port 68 is the DHCP client port associated with the initial DHCPDISCOVER process.
Question 62
A customer migrates its phone system from analog to a new hosted VoIP/software application solution with integrated video. After installation, some users notice issues with dropped calls, broken video, and slow internet access. The issues start in the mid-morning and continue into the afternoon. However, remote users do not report the same issues. Which of the following is the most likely cause of the issues?
A. Roaming misconfiguration
B. Signal degradation
C. Insufficient bandwidth
D. Miswired cable
Show Answer
Correct Answer: C
Explanation: The new hosted VoIP and video solution adds substantial traffic to the local internet connection. Peak-time congestion can cause dropped calls, degraded video, and slow internet for on-site users, while remote users using other network connections are unaffected.
Question 63
A company is implementing a solution for users to gain access to a critical application. The solution will verity that the machine meets requirements and that the users have access to the application. Which of the following does this solution describe?
A. Policy-based authentication
B. Username and password
C. Application awareness
D. Single sign-on
Show Answer
Correct Answer: A
Explanation: Policy-based authentication evaluates contextual factors such as device compliance (whether the machine meets security requirements) and user authorization before granting access to an application. Username/password only verifies credentials, application awareness refers to recognizing application traffic rather than access decisions, and single sign-on reduces repeated logins but does not inherently validate device compliance.
Question 63
A network administrator needs to limit devices that can connect to a small wireless network. The network consists of less than ten unique laptops, and no network changes are anticipated. Which of the following is the simplest way to accomplish this task?
A. ACLs
B. MAC filtering
C. NAC
D. Trusted zones
Show Answer
Correct Answer: B
Explanation: MAC filtering lets the administrator allow only the known laptops’ MAC addresses. For fewer than ten devices and no expected changes, maintaining this small allowlist on the wireless access point is the simplest approach.
Question 64
A company's servers experience a malware attack, which causes a network outage. The source of the attack is traced back to an employee s infected laptop. Which of the following solutions should a network technician implement to mitigate this attack?
A. IPS
B. NAC
C. MFA
D. SSL
Show Answer
Correct Answer: B
Explanation: Network Access Control (NAC) helps prevent infected or noncompliant endpoints from accessing the network by enforcing security policies such as health checks before granting network access. This directly mitigates malware spreading from an employee's infected laptop. An IPS can detect and block some malicious traffic but does not control endpoint admission. MFA protects authentication, and SSL encrypts communications but neither prevents an infected device from joining the network.
Question 64
Which of the following OSI model layers is responsible for assigning an IP address to a host?
A. Data link
B. Application
C. Network
D. Session
Show Answer
Correct Answer: C
Explanation: The network layer (Layer 3) is associated with logical addressing, including IP addresses. DHCP can assign addresses dynamically, but the OSI layer associated with IP addressing is the network layer.
$19
Get all 652 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.