An organization has four departments that each need access to different resources that do not overlap. Which of the following should a technician configure in order to implement and assign an ACL?
A. VLAN
B. DHCP
C. VPN
D. STP
Show Answer
Correct Answer: A
Explanation: VLANs logically segment the network so each department is isolated into its own broadcast domain. ACLs are commonly applied on Layer 3 interfaces between VLANs to control which resources each department can access. DHCP assigns IP addresses, VPN provides secure remote connectivity, and STP prevents Layer 2 switching loops; none of those implement the required segmentation for assigning ACL-based access control.
Question 236
A network analyst is installing a wireless network in a corporate environment. Employees are required to use their domain identities and credentials to authenticate and connect to the WLAN. Which of the following actions should the analyst perform on the AP to fulfill the requirements?
A. Enable MAC security.
B. Generate a PSK for each user.
C. Implement WPS.
D. Set up WPA3 protocol.
Show Answer
Correct Answer: D
Explanation: Employees must authenticate using their domain identities and credentials, which requires enterprise authentication via 802.1X/EAP with a RADIUS server. WPA3-Enterprise supports this model. MAC filtering does not provide domain authentication, per-user PSKs do not use domain credentials, and WPS is for simplified device onboarding rather than enterprise identity-based authentication.
Question 237
A network administrator thinks a change was made to mail servers at comptia.org. Which of the following should the administrator execute to verify the change?
A. ping www.comptia.org
B. dig comptia.org ANY
C. nslookup -type=ns coir.ptia.org
D. tracert comptia.org
Show Answer
Correct Answer: B
Explanation: To verify changes to mail servers, the administrator should inspect DNS records that include MX records. The `dig` command queries DNS, and an `ANY` query returns available record types, including MX on servers that support ANY responses, allowing verification of mail server configuration. The other options test connectivity, name server delegation, or routing rather than mail server records.
Question 238
Users at an organization report that the wireless network is not working in some areas of the building. Users report that other wireless network SSIDs are visible when searching for the network, but the organization’s network is not displayed. Which of the following is the most likely cause?
A. Interference or channel overlap
B. Insufficient wireless coverage
C. Roaming misconfiguration
D. Client disassociation issues
Show Answer
Correct Answer: B
Explanation: If users can see other nearby SSIDs but not the organization's SSID only in certain areas, the most likely cause is insufficient wireless coverage. The organization's access points are not providing adequate signal in those locations due to placement, transmit power, or physical obstructions. Interference/channel overlap typically degrades performance rather than making only one SSID disappear, while roaming misconfiguration and client disassociation affect connectivity rather than SSID visibility.
Question 239
While conducting a network audit, an administrator notices the spanning tree root in VLAN 300 does not match the configuration baseline, which could cause network outages due to spanning tree update failures. Which of the following should the administrator do to restore consistency?
A. Change the designated port on the misconfigured switch to a root port.
B. Change the root port to a listening port on the misconfigured switch.
C. Change the blocked port of the misconfigured switch to a learning port.
D. Increase the bridge ID/priority on the misconfigured switch.
Show Answer
Correct Answer: D
Explanation: In STP, the root bridge is the switch with the lowest bridge ID (priority followed by MAC address). If an unintended switch has become the root for VLAN 300, raising that switch's bridge priority increases its bridge ID, making it less likely to be elected root. Port role/state changes are determined by STP and are not the correct way to restore the intended root bridge.
Question 240
Which of the following architecture types is most commonly associated with east-west traffic?
A. Colocated VMs
B. Hybrid cloud
C. Client-server
D. Hub and spoke
Show Answer
Correct Answer: A
Explanation: East-west traffic refers to lateral communication within a data center or cloud environment, such as traffic between servers, containers, or virtual machines on the same internal network. Colocated VMs commonly generate this type of internal VM-to-VM traffic. Client-server traffic is typically described as north-south, hybrid cloud is a deployment model rather than a traffic pattern, and hub-and-spoke is a network topology.
Question 241
A network technician is attempting to map networking devices. When logged in to the local switch, the technician uses LLDP and discovers only those devices that are connected directly to the switch. Which of the following should the technician perform to discover all the networking devices?
A. Reconfigure the management IP addresses of the networking devices on the same subnet.
B. Enable Spanning Tree Protocol to allow the switches on the network to be discovered.
C. Log in to each of the connected networking devices and perform the process again.
D. Upgrade the OS on the networking devices to the current version of LLDP.
Show Answer
Correct Answer: C
Explanation: LLDP advertises and learns information only from directly connected neighbors at Layer 2. It does not recursively discover the entire network topology from a single switch. To map all networking devices using LLDP, the technician must log in to each discovered networking device and repeat the process to learn its directly connected neighbors. Changing management IPs, enabling STP, or upgrading LLDP does not change LLDP's neighbor-discovery scope.
Question 242
A technician needs to identify a computer on the network that is reportedly downloading unauthorized content. Which of the following should the technician use?
A. Anomaly alerts
B. Port mirroring
C. Performance monitoring
D. Packet capture
Show Answer
Correct Answer: D
Explanation: Packet capture is the best choice because it records and allows analysis of network traffic, revealing source and destination IP addresses, protocols, and the specific transfers involved. This enables identification of the computer downloading unauthorized content. Port mirroring only copies traffic to a monitoring port; it facilitates monitoring but does not itself analyze or identify the offending host.
Question 243
Which of the following technologies uses a VIP to provide gateway redundancy between two routers?
A. LACP
B. PAT
C. FHRP
D. BGP
Show Answer
Correct Answer: C
Explanation: First Hop Redundancy Protocols (FHRPs), such as HSRP, VRRP, and GLBP, use a shared Virtual IP (VIP) address to provide default gateway redundancy between routers. Hosts use the VIP as their default gateway, and if the active router fails, another router assumes the VIP transparահատ to maintain connectivity. LACP aggregates links, PAT translates ports for NAT, and BGP is a routing protocol between autonomous systems.
Question 244
A security engineer is trying to connect cameras to a 12-port PoE switch, but only eight cameras turn on. Which of the following should the engineer check first?
A. Ethernet cable type
B. Voltage
C. Transceiver compatibility
D. DHCP addressing
Show Answer
Correct Answer: B
Explanation: If only eight PoE cameras power on from a 12-port PoE switch, the first thing to check is whether the switch is providing sufficient PoE power. While the real limitation is typically the switch's PoE power budget (wattage), among the given options the closest and expected choice is voltage/power delivery. Ethernet cable type, transceiver compatibility, and DHCP addressing would not prevent only a subset of cameras from powering on.
$19
Get all 652 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.