A network administrator receives a ticket from a user. The user reports that they cannot access any websites and that they have already checked everything on their computer. Which of the following is the first action the administrator should take?
A. Divide and conquer.
B. Establish a theory of probable cause.
C. Question the user.
D. Document the findings.
Show Answer
Correct Answer: C
Explanation: According to the standard CompTIA troubleshooting methodology, the first step is to identify the problem, which begins by questioning the user, identifying symptoms, and determining what has changed before establishing a theory of probable cause. 'Establish a theory of probable cause' is the second step, 'divide and conquer' is a troubleshooting approach used after information gathering, and documentation is performed at the end.
Question 32
A network technician is adding a security camera with an enhancer to a network closet in an organization's office building that has six APs. When plugged in, the camera does not respond. Given the following information:
• Switch: 24 ports, 124W PoE capable, maximum 16W per port
• AP: 12W PoE
• Camera: 14W
• Enhancer: 4W
Which of the following is the most likely reason the camera is not working?
A. The cable is experiencing too much crosstalk.
B. The switch is beyond the PoE budget.
C. The cable is improperly terminated.
D. The single connection surpasses the power allowed.
Show Answer
Correct Answer: D
Explanation: The camera (14W) plus the enhancer (4W) require 18W on a single PoE connection. Although the switch has a total PoE budget of 124W and six APs consume only 72W total (6 × 12W), each port is limited to 16W. The required 18W exceeds the per-port maximum, so the device will not power on.
Question 33
An administrator is troubleshooting a Layer 3 communication issue between the web server and the database server. The administrator finds the following information:
Which of the following corrects the communication issue?
A. Changing the subnet on the database server to 255.255.255.0
B. Changing the subnet on the firewall to 255.255.255.128
C. Changing the default gateway on the database server to 1.2.3.4
D. Changing the IP address on the database server to 192.168.1.150
E. Changing the gateway on the firewall to 192.168.1.1
Show Answer
Correct Answer: A
Explanation: The scenario as provided appears to be missing the addressing diagram needed for definitive analysis. Based on typical Layer 3 troubleshooting questions, the most likely issue is an incorrect subnet mask on the database server preventing proper routing. Changing the database server subnet mask to 255.255.255.0 restores correct local/remote network determination. The other options either change unrelated devices, introduce an arbitrary gateway, or alter the host IP rather than correcting the routing boundary.
Question 34
Which of the following attacks is occurring when a person walks by and reads unauthorized information on another user's PC?
A. Dumpster diving
B. Phishing
C. Shoulder surfing
D. Tailgating
Show Answer
Correct Answer: C
Explanation: Shoulder surfing is the act of observing someone else's screen or keyboard to obtain unauthorized information, including simply walking by and reading sensitive information on a user's PC. Dumpster diving involves searching discarded materials, phishing uses deceptive communications to steal information, and tailgating is gaining unauthorized physical access by following an authorized person.
Question 35
A network administrator installs a node that requires a media converter to connect Ethernet to fiber but sees no link light on the node. The administrator notices the following:
• Both terminating points are properly seated.
• Both the fiber and Ethernet cables have been successfully tested.
• The media converter is turned on.
• The switchport is configured as half duplex.
Which of the following is the reason the link light is not on?
A. The TX/RX connection is transposed.
B. The switchport is misconfigured.
C. One of the cables has a short.
D. The switchport interface has errors.
Show Answer
Correct Answer: A
Explanation: With power present and both Ethernet and fiber cables tested, a missing link light through a media converter is most commonly caused by reversed fiber transmit/receive strands. A half-duplex switchport configuration would not normally prevent the physical link light from illuminating, while a tested cable makes a short unlikely, and interface errors occur after link establishment rather than preventing link indication.
Sources:
https://www.daktronics.com/en-us/support/kb/DD3189683
Question 36
An attack on an internal server is traced to an isolated guest network. Which of the following best describes the attack?
A. On-path
B. DNS poisoning
C. VLAN hopping
D. ARP spoofing
Show Answer
Correct Answer: C
Explanation: If an attack originating from an isolated guest network reaches an internal server, the most likely explanation is VLAN hopping, where an attacker bypasses VLAN segmentation to access traffic or systems on another VLAN. ARP spoofing and on-path attacks typically operate within the same broadcast domain, and DNS poisoning does not explain crossing network isolation.
Question 37
Which of the following is a reason to decide on the approach when troubleshooting an incident?
A. To ensure that steps are not forgotten
B. To make documentation easier
C. To be resource efficient
D. To determine whether anything has changed
Show Answer
Correct Answer: C
Explanation: Deciding on a troubleshooting approach helps use available time, people, and technical resources efficiently by selecting the most effective investigation path rather than trying random actions. The other options are secondary benefits or relate to other parts of troubleshooting rather than the primary reason for choosing an approach.
Sources:
https://ciohub.org/post/2024/04/mastering-incident-response-a-troubleshooting-guide
Question 38
A customer migrates its phone system from analog to a new hosted VoIP/software application solution with integrated video. After installation, some users notice issues with dropped calls, broken video, and slow internet access. The issues start in the mid-morning and continue into the afternoon. However, remote users do not report the same issues. Which of the following is the most likely cause of the issues?
A. Roaming misconfiguration
B. Signal degradation
C. Insufficient bandwidth
D. Miswired cable
Show Answer
Correct Answer: C
Explanation: The symptoms began after deploying a hosted VoIP system with integrated video and occur during business hours, affecting on-site users with dropped calls, poor video, and slow internet. Remote users are unaffected, pointing to the local site's network capacity. Peak-time degradation across voice, video, and general internet access is most consistent with insufficient bandwidth (or lack of adequate capacity/QoS), not a bad cable, roaming issue, or simple signal degradation.
Sources:
https://blog.simplicityvoip.net/causes-and-solutions-to-voip-dropped-calls
https://www.nextiva.com/blog/voip-problems.html
Question 39
A network administrator needs to limit devices that can connect to a small wireless network. The network consists of less than ten unique laptops, and no network changes are anticipated. Which of the following is the simplest way to accomplish this task?
A. ACLs
B. MAC filtering
C. NAC
D. Trusted zones
Show Answer
Correct Answer: B
Explanation: For a very small wireless network with fewer than ten known devices and no expected changes, MAC filtering is the simplest method to restrict access by allowing only the approved device MAC addresses. ACLs are more commonly used to filter network traffic, NAC is more complex and intended for larger managed environments, and trusted zones are not used to whitelist individual wireless devices.
Question 40
Which of the following OSI model layers is responsible for assigning an IP address to a host?
A. Data link
B. Application
C. Network
D. Session
Show Answer
Correct Answer: C
Explanation: The OSI Network layer (Layer 3) is responsible for logical addressing, including IP addresses, and routing. While protocols such as DHCP (an application-layer protocol) dynamically assign IP addresses in practice, within the OSI model IP addressing is associated with the Network layer. Therefore the expected exam answer is Network.
Sources:
https://electricala2z.com/cloud-computing/osi-model-layers-7-layers-osi-model
https://www.slideshare.net/slideshow/osi-model-72960964/72960964
$19
Get all 580 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.