During a security audit, a consulting firm notices inconsistencies between the documentation and the environment. Which of the following can keep a record of who made the changes and what the changes are?
A. Network access control
B. Configuration monitoring
C. Zero Trust
D. Syslog
Show Answer
Correct Answer: B
Explanation: Configuration monitoring records configuration changes over time, including what changed and, when integrated with change management or version control, who made the changes. This is specifically intended to identify and audit discrepancies between documented and actual configurations. Network access control manages device/user access, Zero Trust is a security model, and Syslog records events but is not primarily a configuration change tracking system.
Question 182
Which of the following allows for interactive, secure remote management of a network infrastructure device?
A. SSH
B. VNC
C. RDP
D. SNMP
Show Answer
Correct Answer: A
Explanation: SSH (Secure Shell) provides encrypted, interactive command-line remote administration for network infrastructure devices such as routers, switches, and firewalls. VNC and RDP are primarily for remote desktop access, while SNMP is used for monitoring and limited management rather than interactive shell access.
Question 183
A network administrator is hosting a local application on a Type 2 hypervisor, but the application only has accessibility to the host machine. Which of the following address types would the administrator most likely visit to access the application?
A. Public
B. Loopback
C. Private
D. APIPA
Show Answer
Correct Answer: B
Explanation: A service that is only accessible from the host machine is typically reached via the loopback interface (127.0.0.1 for IPv4 or ::1 for IPv6). A public address is Internet-routable, a private address is reachable within a private network, and APIPA (169.254.0.0/16) is a self-assigned address used when DHCP fails, none of which specifically indicate host-only local access.
Question 184
A network technician sets up a computer on the accounting department floor for a user from the marketing department. The user reports that they cannot access the marketing department's shared drives but can access the internet. Which of the following is the most likely cause of this issue?
A. Mismatched switchport duplex
B. Misconfigured gateway settings
C. Incorrect VLAN assignment
D. SVI is assigned to the wrong IP address
Show Answer
Correct Answer: C
Explanation: The most likely cause is an incorrect VLAN assignment. The PC was placed on the accounting department floor, and if the switchport is assigned to the accounting VLAN instead of the marketing VLAN, the user may still have internet access through routed connectivity but be unable to reach marketing department resources that are restricted to or reachable from the marketing VLAN. A duplex mismatch would cause performance issues rather than selective access, a misconfigured gateway would typically affect broader connectivity including internet access, and an incorrect SVI IP would generally impact all hosts in that VLAN rather than a single relocated user.
Question 185
Which of the following ports is a secure protocol?
A. 20
B. 23
C. 443
D. 445
Show Answer
Correct Answer: C
Explanation: Port 443 is the default port for HTTPS, which uses TLS/SSL to encrypt web traffic and is the secure protocol among the options. Port 20 is FTP data, port 23 is Telnet, and port 445 is SMB; none are considered the secure protocol in this context.
Question 186
Which of the following allows a standard user to log in to multiple resources with one account?
A. RADIUS
B. MFA
C. TACACS+
D. SSO
Show Answer
Correct Answer: D
Explanation: Single Sign-On (SSO) allows a user to authenticate once and access multiple independent applications or resources without signing in again. RADIUS and TACACS+ are authentication protocols used for centralized authentication, and MFA adds additional authentication factors rather than enabling access to multiple resources with one login.
Question 187
A company uses a solution to rotate the password that engineers use to connect to critical systems. Which of the following best describes this solution?
A. Network access control
B. TACACS+
C. Key management
D. Multifactor authentication
Show Answer
Correct Answer: C
Explanation: Password rotation for privileged accounts used by engineers is a function of credential/key management or privileged access management. Network access control governs device/network admission, TACACS+ provides centralized authentication/authorization/accounting, and multifactor authentication adds authentication factors but does not rotate shared passwords.
Question 188
A network administrator is troubleshooting a connectivity issue between two devices on two different subnets. The administrator verifies that both devices can successfully ping other devices on the same subnet. Which of the following is the most likely cause of the connectivity issue?
A. Incorrect default gateway
B. Faulty Ethernet cable
C. Wrong duplex settings
D. VLAN mismatch
Show Answer
Correct Answer: A
Explanation: If each device can communicate with hosts on its own subnet, the local NIC, cable, duplex, and VLAN are likely functioning correctly for local communication. Communication between different subnets requires traffic to be sent to the default gateway for routing. An incorrect or missing default gateway is the most likely cause of the inability to reach a device on another subnet.
Question 189
Which of the following steps of the troubleshooting methodology would most likely involve comparing current throughput tests to a baseline?
A. Implement the solution.
B. Verify full system functionality.
C. Document findings.
D. Test the theory.
Show Answer
Correct Answer: B
Explanation: Comparing current throughput test results to a known baseline is most commonly part of verifying that the implemented fix restored expected performance and that the system is fully functional. Baselines are used to confirm normal operation after changes. Testing a theory is aimed at confirming or disproving a suspected cause, whereas baseline comparison for throughput is most directly associated with post-fix verification.
Question 190
A network engineer needs to order cabling to connect two buildings within the same city. Which of the following media types should the network engineer use?
A. Coaxial
B. Twinaxial
C. Single-mode fiber
D. Cat 5
Show Answer
Correct Answer: C
Explanation: Single-mode fiber is designed for long-distance, high-bandwidth links with low attenuation, making it the appropriate choice for connecting buildings across a city. Coaxial, twinaxial, and Cat 5 copper cabling are intended for much shorter distances and are not suitable for metropolitan building-to-building runs.
$19
Get all 580 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.