A network administrator changed an external DNS to point customers to a new server. Which of the following tools should the administrator use to test the new server’s configuration?
A. ping
B. tracert
C. tcpdump
D. nslookup
Show Answer
Correct Answer: D
Explanation: nslookup is the appropriate tool to verify DNS resolution after changing external DNS records. It queries DNS servers directly and confirms that the hostname resolves to the expected IP address of the new server. ping tests reachability, tracert traces the network path, and tcpdump captures packets but does not verify DNS record resolution.
Question 253
Which of the following is the most likely benefit of installing server equipment in a rack?
A. Simplified troubleshooting process
B. Decreased power consumption
C. Improved network performance
D. Increased compute density
Show Answer
Correct Answer: D
Explanation: Installing servers in racks allows vertical, standardized mounting that maximizes use of physical space, increasing the amount of compute equipment that can fit in a given footprint. While racks can aid cable management and maintenance, they do not inherently reduce power consumption or improve network performance.
Question 254
Which of the following technologies is most appropriate for a business that requires high-speed access to frequently used web content, such as images and videos?
A. CDN
B. SAN
C. Firewall
D. Switch
Show Answer
Correct Answer: A
Explanation: A Content Delivery Network (CDN) caches and serves frequently accessed web content such as images and videos from geographically distributed edge servers, reducing latency and improving load times. A SAN provides storage infrastructure, a firewall provides network security, and a switch connects devices on a network rather than accelerating web content delivery.
Question 255
A VoIP phone powers up, but it is unable to receive or place calls. After connecting to another switchport, the issue is resolved. Which of the following was most likely the issue with the previous port?
A. The port had a half-duplex configuration.
B. The port was in an error-disabled state.
C. The port had an incorrect VLAN assignment.
D. The port exceeded its PoE budget.
Show Answer
Correct Answer: C
Explanation: If the phone powers on, PoE is functioning, so exceeding the PoE budget is unlikely. An error-disabled port would not provide normal connectivity or PoE in typical scenarios, and a half-duplex mismatch would usually cause poor performance rather than complete inability to register or make calls. An incorrect voice VLAN assignment allows the phone to power up but prevents it from reaching the call manager and receiving or placing calls.
Question 256
A customer calls the help desk to report issues connecting to the internet. The customer can reach a local database server. A technician goes to the site and examines the configuration:
Which of the following is causing the user's issue?
A. Incorrect DNS
B. Unreachable gateway
C. Failed root bridge
D. Poor upstream routing
Show Answer
Correct Answer: B
Explanation: With a /26 subnet mask (255.255.255.192), an IP address of 192.168.1.223 belongs to the 192.168.1.192/26 subnet (usable hosts .193-.254). A configured default gateway of 192.168.1.190 is outside that subnet, so the host cannot ARP for or reach its gateway. It can still communicate with local devices on its own subnet, explaining access to the local database server, but it cannot reach external networks. DNS, STP root bridge, and upstream routing do not fit the configuration shown.
Question 257
A help desk technician receives a report that users cannot access internet URLs. The technician does some ping tests and finds that sites fail when a URL is used but work when an IP is used. Which of the following tools should the technician utilize next?
A. tcpdump
B. tracert
C. nmap
D. dig
Show Answer
Correct Answer: D
Explanation: The symptoms indicate DNS resolution is failing: accessing resources by IP address works, but using hostnames/URLs does not. The appropriate next tool is dig, which queries DNS records and helps diagnose name resolution problems. tcpdump captures packets, tracert traces network paths, and nmap scans hosts and ports, none of which is the primary tool for verifying DNS lookups.
Question 258
Which of the following is the part of a DR plan that identifies the critical systems that should be recovered first after an incident?
A. RTO
B. SLA
C. MTBF
D. SIEM
Show Answer
Correct Answer: A
Explanation: RTO (Recovery Time Objective) defines the maximum acceptable downtime for a system after a disruption and is used to prioritize recovery of critical systems in a disaster recovery plan. SLA is a service agreement, MTBF measures reliability, and SIEM is a security monitoring platform.
Question 259
Which of the following is the best VPN to use for reducing data bandwidth requirements of the corporate network?
A. Split-tunnel
B. Site-to-site
C. Full tunnel client
D. GRE tunnel
Show Answer
Correct Answer: A
Explanation: A split-tunnel VPN sends only traffic destined for corporate resources through the VPN while allowing general internet traffic to go directly to the internet. This reduces bandwidth consumption on the corporate network and VPN concentrators. Site-to-site VPNs connect networks, full-tunnel clients route all traffic through the corporate network (increasing bandwidth usage), and GRE is a tunneling protocol rather than the best choice for this purpose.
Question 260
An ISP provided a company with a pre-configured modem and five public static IP addresses. Which of the following does the company's firewall require to access the internet? (Choose two.)
A. NTP server
B. Default gateway
C. The modem’s IP address
D. One static IP address
E. DNS servers
F. DHCP server
Show Answer
Correct Answer: B, D
Explanation: A firewall needs a default gateway to route traffic toward the ISP, and it must be configured with at least one of the public static IP addresses assigned by the ISP for external connectivity. NTP and DNS are useful services but are not strictly required to establish internet access, the modem's IP address is not typically configured on the firewall as its gateway, and a DHCP server is unnecessary when using static addressing.
Question 261
During a recent security assessment, an assessor attempts to obtain user credentials by pretending to be from the organization's help desk. Which of the following attacks is the assessor using?
A. Social engineering
B. Tailgating
C. Shoulder surfing
D. Smishing
E. Evil twin
Show Answer
Correct Answer: A
Explanation: Pretending to be a trusted help desk employee to trick users into revealing credentials is a classic social engineering attack. Tailgating involves following someone into a restricted area, shoulder surfing involves observing someone enter credentials, smishing uses SMS messages, and an evil twin is a rogue Wi-Fi access point.
$19
Get all 580 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.