A small business is choosing between static and dynamic routing for its network. Which of the following is the best reason to use dynamic routing in a growing network?
A. Easier to configure compared to using manually entered routes
B. Does not require additional network security controls
C. Features enhanced network monitoring and visibility
D. Includes automatic changes and updates in network topology
Show Answer
Correct Answer: D
Explanation: Dynamic routing protocols automatically learn and update routes as the network topology changes, making them well suited for growing networks. Static routing requires manual updates whenever the network changes. Dynamic routing is generally more complex to configure than static routing, does not eliminate the need for security controls, and its primary advantage is automatic route adaptation rather than enhanced monitoring.
Question 95
A systems administrator is looking for operating system information, running services, and network ports that are available on a server. Which of the following software tools should the administrator use to accomplish this task?
A. nslookup
B. nmap
C. traceroute
D. netstat
Show Answer
Correct Answer: B
Explanation: Nmap can scan a server’s open network ports, identify running services and their versions, and estimate its operating system. The other tools primarily resolve DNS names, trace network routes, or display local network connections.
Question 96
Which of the following is the best networking appliance for interconnecting multiple logical networks and forwarding data packets between them while minimizing latency?
A. Firewall
B. Router
C. Layer 2 switch
D. Load balancer
Show Answer
Correct Answer: B
Explanation: A router connects distinct logical networks and forwards packets between them using Layer 3 addressing. A Layer 2 switch forwards frames within a network, while firewalls and load balancers have different primary functions.
Question 97
A user cannot access an external server for a client after connecting to a VPN. Which of the following commands would a support agent most likely use to examine the issue? (Choose two.)
A. nslookup
B. tcpdump
C. arp
D. dig
E. tracert
F. route print
Show Answer
Correct Answer: E, F
Explanation: A VPN connectivity issue preventing access to an external server is commonly investigated by checking the network path with tracert and inspecting the routing table with route print. These directly identify whether traffic is being incorrectly routed through the VPN or another gateway. DNS tools like nslookup or dig are useful only if name resolution is specifically suspected, but the question asks which commands would most likely be used to examine the overall issue.
Question 97
Which of the following best describes a characteristic of a DNS poisoning attack?
A. DNS address records are edited and changed on a DNS server.
B. An attacker sets up a malicious DNS server in place of a legitimate server.
C. DNS client requests are intercepted and false responses are returned.
D. False DNS records are injected into cache on a DNS server.
Show Answer
Correct Answer: D
Explanation: DNS poisoning (cache poisoning) occurs when false DNS records are inserted into a DNS resolver’s cache, causing later queries to return incorrect addresses.
Question 98
A network engineer configures a NIC that has an IP address of 192.168.123.232. Which of the following classes is this address an example of?
A. Class A
B. Class В
C. Class С
D. Class D
Show Answer
Correct Answer: C
Explanation: The first octet is 192, which falls in the Class C range of 192–223. (The address is also within the private 192.168.0.0/16 range.)
Question 99
A network administrator wants to update a geofencing policy to limit remote access to the corporate network based on country location. Which of the following would the administrator most likely leverage?
A. MAC filtering
B. Administrative distance
C. Bluetooth beacon signals
D. IP address blocks
Show Answer
Correct Answer: D
Explanation: Geofencing by country is typically implemented using IP geolocation databases that map public IP address ranges to countries. The administrator would leverage IP address blocks to allow or deny remote access based on the source country's IP ranges. MAC filtering only works on local networks, administrative distance is a routing preference metric, and Bluetooth beacons are for proximity-based location, not country-based remote access.
Question 99
A network technician is troubleshooting connectivity issues between two switches and determines that the crosstalk levels on the cable are high. Which of the following is most likely contributing to the high crosstalk?
A. Outside interference from adjacent cabling
B. Use of Cat 6 cabling
C. Inadequate termination
D. Lack of shielded twisted pair
Show Answer
Correct Answer: C
Explanation: Inadequate termination—especially untwisting the wire pairs too far before connecting them—reduces their ability to cancel interference and can increase crosstalk. Cat 6 cabling is designed to limit crosstalk, while lack of shielding primarily increases susceptibility to external interference.
Question 100
A company is migrating a data center from on premises to the cloud. Which of the following tools will help maintain consistency, reliability, and efficiency of provisioning and management?
A. IaC
B. CDN
C. SASE
D. ZTA
Show Answer
Correct Answer: A
Explanation: Infrastructure as Code (IaC) automates the provisioning and management of infrastructure using declarative or scripted configurations. This improves consistency, reliability, repeatability, and efficiency during cloud migrations. A CDN accelerates content delivery, SASE is a networking/security architecture, and ZTA is a security model, none of which are primarily used for infrastructure provisioning and management.
Question 100
A network technician is troubleshooting a connectivity issue on a server. Which of the following commands is the most effective for checking whether the server is receiving network traffic?
A. traceroute
B. tcpdump
C. nslookup
D. arp
Show Answer
Correct Answer: B
Explanation: tcpdump captures and displays packets on the server’s network interfaces, making it the most direct way to check whether network traffic is reaching the server. The other commands test routing, DNS resolution, or IP-to-MAC address mappings.
$19
Get all 652 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.