Which of the following enables an organization to leverage an identity provider to manage access across SaaS applications?
A. PKI
B. SSO
C. TACACS+
D. RADIUS
Show Answer
Correct Answer: B
Explanation: Single sign-on (SSO) lets an organization use an identity provider (IdP) to authenticate users and manage their access across multiple SaaS applications. RADIUS and TACACS+ primarily support network access and device administration, while PKI manages digital certificates and keys.
Question 122
Which of the following troubleshooting steps would provide a change advisory board with the information needed to make a decision?
A. Identify the problem.
B. Develop a theory of probable cause.
C. Test the theory to determine cause.
D. Establish a plan of action.
Show Answer
Correct Answer: D
Explanation: A Change Advisory Board evaluates whether a proposed change should be approved. To make that decision, it needs the implementation approach, risk considerations, and related actions, which are provided when establishing a plan of action. The earlier troubleshooting steps identify and verify the issue but do not provide the change implementation details needed for CAB approval.
Question 123
A company recently implemented a videoconferencing system that utilizes large amounts of bandwidth. Users start reporting slow internet speeds and an overall decrease in network performance. Which of the following are most likely the causes of the network performance issues? (Choose two.)
A. DNS misconfiguration
B. Inadequate network security
C. Malware or a virus
D. Outdated software
E. Incorrect QoS settings
F. Network congestion
Show Answer
Correct Answer: E, F
Explanation: A newly implemented videoconferencing system is bandwidth-intensive and commonly causes network congestion when available bandwidth is insufficient. Incorrect QoS settings can also contribute by failing to properly prioritize real-time voice/video traffic or by misallocating bandwidth, resulting in degraded overall network performance. DNS misconfiguration, inadequate security, malware, and outdated software are not the most direct causes given the scenario.
Question 123
Which of the following ports is associated with securely managing identity across a Windows domain?
A. 68
B. 389
C. 445
D. 636
Show Answer
Correct Answer: D
Explanation: Port 636 is used by LDAPS (LDAP over TLS/SSL), which encrypts directory-service communication used to manage and authenticate identities in a Windows domain. Port 389 is standard LDAP, while 445 is SMB and 68 is DHCP.
Question 124
A network administrator is troubleshooting an issue with a user's IP address. Which of the following layers of the OSI model should be considered?
A. Data link
B. Network
C. Session
D. Presentation
Show Answer
Correct Answer: B
Explanation: IP addressing is a Layer 3 (Network layer) function in the OSI model. Troubleshooting issues related to IP addresses, subnetting, gateways, or routing involves the Network layer.
Question 124
A company's network is experiencing high levels of suspicious network traffic. The security team finds that the traffic is coming from an unknown, foreign IP address. Which of the following is the most cost-efficient way to mitigate this threat?
A. ACL
B. IDS
C. NAT
D. DoS prevention
Show Answer
Correct Answer: A
Explanation: An access control list (ACL) can deny traffic from the suspicious IP using existing network devices, typically with little or no additional cost. An IDS primarily detects and alerts, NAT is not intended to block a specific source, and DoS-prevention solutions are unnecessary for this targeted mitigation.
Question 125
Which of the following cable types allows the use of QSFP ports without requiring transceivers?
A. Multimode
B. Twinaxial
C. RG11
D. Category 6
Show Answer
Correct Answer: B
Explanation: Twinaxial direct-attach copper (DAC) cables are available with integrated QSFP connectors, allowing QSFP ports to be connected without separate transceiver modules. Multimode fiber requires optical transceivers, RG11 is coaxial cable, and Category 6 is twisted-pair Ethernet cabling rather than a QSFP direct-attach solution.
Question 125
A network administrator is verifying logical connectivity to a Layer 2 switch. Which of the following addresses should the administrator issue the ping command to?
A. MAC address
B. VIP address
C. WAN address
D. SVI address
Show Answer
Correct Answer: D
Explanation: A Layer 2 switch is reached for logical IP connectivity through its Switched Virtual Interface (SVI), which has an IP address. Ping the SVI address.
Question 126
A company has been added to an unapproved list because of spam. The network administrator confirmed that a workstation was infected by malware. Which of the following processes did the administrator use to identify the root cause?
A. Traffic analysis
B. Availability monitoring
C. Baseline metrics
D. Network discovery
Show Answer
Correct Answer: A
Explanation: Traffic analysis is the process most directly used to identify the source of spam and trace it to an infected workstation by examining network flows and suspicious outbound SMTP or other malicious traffic. Availability monitoring focuses on uptime, baseline metrics establish normal performance for comparison, and network discovery inventories devices rather than identifying the cause of malicious behavior.
Question 126
Two network switches at different locations are connected via fiber-optic cable at a distance of 10 miles (16km). The duplex fiber-optic patch cord between the patch panel and switch is accidentally pinched, stopping connectivity between the two switches. A network technician replaces the broken cable with a new. single-mode patch cord. However, connectivity between both switches is still down and the link lights are still off. Which of the following actions should the technician perform first?
A. Replace the fiber-optic transceiver in the switch.
B. Log in to the switch to shut down and re-enable the switchport.
C. Transpose the two fiber connectors at one end of the new patch cord
D. Swap the single-mode fiber patch cord with a multimode fiber patch cord.
Show Answer
Correct Answer: C
Explanation: Transpose the two fiber connectors at one end of the duplex patch cord. Fiber links require each switch’s transmit strand to connect to the other switch’s receive strand; reversing the connectors corrects a Tx/Rx polarity mismatch, a likely cause when a replacement cable leaves the link down.
$19
Get all 652 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.