A network technician sets up a computer on the accounting department floor for a user from the marketing department. The user reports that they cannot access the marketing department's shared drives but can access the internet. Which of the following is the most likely cause of this issue?
A. Mismatched switchport duplex
B. Misconfigured gateway settings
C. Incorrect VLAN assignment
D. SVI is assigned to the wrong IP address
Show Answer
Correct Answer: C
Explanation: The user can access the internet, which indicates the IP address, subnet mask, and default gateway are functioning correctly, ruling out gateway misconfiguration. A duplex mismatch would cause performance issues rather than blocking access to specific resources. Not being able to reach the marketing department’s shared drives while connected on the accounting floor strongly suggests the switchport is assigned to the accounting VLAN. VLANs logically separate network resources, so an incorrect VLAN assignment would prevent access to marketing-specific shared drives.
Question 118
Which of the following ports is a secure protocol?
A. 20
B. 23
C. 443
D. 445
Show Answer
Correct Answer: C
Explanation: Port 443 is used by HTTPS, which is a secure protocol that encrypts data using TLS/SSL. The other options (20 FTP data, 23 Telnet, 445 SMB) are not inherently secure or traditionally operate without encryption.
Question 119
Which of the following allows a standard user to log in to multiple resources with one account?
A. RADIUS
B. MFA
C. TACACS+
D. SSO
Show Answer
Correct Answer: D
Explanation: Single Sign-On (SSO) allows a user to authenticate once with a single account and then access multiple resources or services without re-entering credentials. RADIUS and TACACS+ are AAA protocols, and MFA strengthens authentication but does not provide single-login access across systems.
Question 120
A company uses a solution to rotate the password that engineers use to connect to critical systems. Which of the following best describes this solution?
A. Network access control
B. TACACS+
C. Key management
D. Multifactor authentication
Show Answer
Correct Answer: C
Explanation: Password rotation for engineers accessing critical systems is handled by credential or key management solutions (often called privileged access or key management), which securely store, rotate, and manage shared secrets. Network access control governs device access, TACACS+ is an authentication/authorization protocol, and multifactor authentication adds factors but does not rotate passwords.
Question 121
A network administrator is troubleshooting a connectivity issue between two devices on two different subnets. The administrator verifies that both devices can successfully ping other devices on the same subnet. Which of the following is the most likely cause of the connectivity issue?
A. Incorrect default gateway
B. Faulty Ethernet cable
C. Wrong duplex settings
D. VLAN mismatch
Show Answer
Correct Answer: A
Explanation: Because each device can communicate within its own subnet, the local NIC, cabling, duplex, and VLAN configuration are functioning correctly. Communication between different subnets requires routing via a default gateway. If the default gateway is incorrect or missing, devices cannot reach hosts outside their subnet, making an incorrect default gateway the most likely cause.
Question 122
Which of the following steps of the troubleshooting methodology would most likely involve comparing current throughput tests to a baseline?
A. Implement the solution.
B. Verify full system functionality.
C. Document findings.
D. Test the theory.
Show Answer
Correct Answer: B
Explanation: Comparing current throughput test results to a baseline is done after a fix has been applied to confirm that performance has returned to normal. This activity aligns with the "Verify full system functionality" step, where the technician ensures the solution resolved the issue and did not introduce new problems.
Question 123
A network engineer needs to order cabling to connect two buildings within the same city. Which of the following media types should the network engineer use?
A. Coaxial
B. Twinaxial
C. Single-mode fiber
D. Cat 5
Show Answer
Correct Answer: C
Explanation: Connecting two buildings within the same city typically requires long-distance, high-bandwidth, and low-attenuation media. Single-mode fiber is designed for long-distance links (many kilometers), offers minimal signal loss and interference, and is the standard choice for inter-building and metropolitan connections.
Question 124
A network administrator wants to update a geofencing policy to limit access to the corporate network based on location. Which of the following will the administrator most likely leverage?
A. MAC filtering
B. Administrative distance
C. Bluetooth beacon signals
D. IP address blocks
Show Answer
Correct Answer: D
Explanation: Geofencing restricts access based on geographic location. In corporate networks this is most commonly enforced by evaluating a user’s public IP address and mapping it to a geolocation database, then allowing or denying access based on permitted regions. MAC filtering controls devices, administrative distance affects routing decisions, and Bluetooth beacons are for proximity-based local interactions rather than network access control.
Question 125
A security administrator is looking for rogue servers on the network and would also like to determine which services are running on those servers. Which of the following software tools should the administrator use?
A. tracert
B. nmap
C. netstat
D. ping
Show Answer
Correct Answer: B
Explanation: Nmap is specifically designed for network discovery and security auditing. It can scan a network to identify active hosts (including rogue servers) and enumerate the services and ports running on those systems. The other tools do not provide comprehensive host and service discovery.
Question 126
A network administrator is configuring a subnet that needs to support 13 usable IP addresses. Which of the following subnet masks best meets this requirement?
A. 255.255.255.128
B. 255.255.256.192
C. 255.285.256.224
D. 255.255.255.240
Show Answer
Correct Answer: D
Explanation: The subnet must support at least 13 usable host IP addresses. A /28 subnet (255.255.255.240) provides 16 total addresses, of which 14 are usable after excluding the network and broadcast addresses. This is the smallest (most efficient) subnet that meets the requirement. The other options either provide far more addresses than needed or are invalid subnet masks.
$19
Get all 518 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.