A network technician needs to use a private Class A RFC1918 addressing scheme for user laptops on the company's network. Which of the following subnets should the technician choose?
A. 10.1.1.0/24
B. 100.1.1.0/24
C. 172.16.1.0/24
D. 192.168.1.0/24
Show Answer
Correct Answer: A
Explanation: RFC 1918 defines private Class A addresses as the 10.0.0.0/8 range. The subnet 10.1.1.0/24 falls within this range, making it a valid private Class A network. The other options are either public (100.1.1.0/24) or private but belong to Class B (172.16.0.0/12) or Class C (192.168.0.0/16), not Class A.
Question 28
A small business is choosing between static and dynamic routing for its network. Which of the following is the best reason to use dynamic routing in a growing network?
A. Easier to configure compared to using manually entered routes
B. Does not require additional network security controls
C. Features enhanced network monitoring and visibility
D. Includes automatic changes and updates in network topology
Show Answer
Correct Answer: D
Explanation: In a growing network, routes and paths change frequently as new devices and subnets are added. Dynamic routing protocols automatically learn, update, and adapt to changes in network topology without manual intervention, which scales far better than static routing. This automatic adaptation is the primary advantage that makes dynamic routing suitable for expanding networks.
Question 29
A user runs ifconfig on a PC and sees the following address information:
The user then plugs a new device into the network and statically assigns it the address 192.168.1.255. The device does not work on the network. Which of the following explains the issue?
A. The IP address is static.
B. The IP address is a broadcast address.
C. The IP address is outside the scope of the DHCP range.
D. The IP address has a wrong subnet mask.
Show Answer
Correct Answer: B
Explanation: In a typical 192.168.1.0/24 network, the address 192.168.1.255 is the broadcast address. Broadcast addresses are reserved for sending packets to all hosts on the subnet and cannot be assigned to an individual device, which is why the device does not work.
Question 30
A user cannot access an external server for a client after connecting to a VPN. Which of the following commands would a support agent most likely use to examine the issue? (Choose two.)
A. nslookup
B. tcpdump
C. arp
D. dig
E. tracert
F. route print
Show Answer
Correct Answer: E, F
Explanation: After connecting to a VPN, loss of access to external servers is commonly caused by routing changes. `tracert` helps identify where traffic stops along the path to the external server, indicating whether it is being misrouted through the VPN. `route print` displays the local routing table to verify whether default or specific routes were altered by the VPN, sending traffic to the wrong gateway.
Question 31
A network architect is implementing a VPN solution for remote workers. The architect wants to ensure that data transmitted through the VPN is protected from eavesdropping and tampering. Which of the following solutions meet these requirements? (Choose two.)
A. SSL
B. AES
C. TKIP
D. IPSec
E. EAP
F. SSH
Show Answer
Correct Answer: A, D
Explanation: The requirement is to protect VPN traffic from eavesdropping (confidentiality) and tampering (integrity). IPSec is a full VPN protocol suite that provides encryption, integrity checking, and authentication at the IP layer. SSL (used in SSL/TLS VPNs) also provides encrypted and integrity-protected tunnels for remote access VPNs. AES is only an encryption algorithm, not a VPN solution by itself; EAP is an authentication framework; TKIP is a legacy Wi‑Fi encryption method; and SSH is for secure remote shell access, not VPN tunneling.
Question 32
A network administrator wants to update a geofencing policy to limit remote access to the corporate network based on country location. Which of the following would the administrator most likely leverage?
A. MAC filtering
B. Administrative distance
C. Bluetooth beacon signals
D. IP address blocks
Show Answer
Correct Answer: D
Explanation: Geofencing based on country location relies on mapping client connections to geographic regions, which is done using IP geolocation databases. Administrators therefore enforce such policies by allowing or blocking specific IP address blocks associated with countries. The other options do not provide country-level geographic enforcement.
Question 33
A company is migrating a data center from on premises to the cloud. Which of the following tools will help maintain consistency, reliability, and efficiency of provisioning and management?
A. IaC
B. CDN
C. SASE
D. ZTA
Show Answer
Correct Answer: A
Explanation: Infrastructure as Code (IaC) enables automated, repeatable provisioning and management of cloud resources using code. This ensures consistency, reliability, and efficiency during migration by reducing manual configuration, minimizing errors, and supporting version control and automation. The other options address networking or security models rather than infrastructure provisioning.
Question 34
Which of the following is most closely associated with having a leased line to a public cloud provider?
A. VPN
B. Direct Connect
C. Internet gateway
D. Private cloud
Show Answer
Correct Answer: B
Explanation: A leased line to a public cloud provider refers to a dedicated, private network connection that bypasses the public internet. Services such as AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect are specifically designed for this purpose, using leased circuits from a telecom provider to connect directly into the cloud provider’s network. VPNs and internet gateways rely on the public internet, and a private cloud is a deployment model rather than a connectivity method.
Question 35
Which of the following record types does an IP-to-name lookup use in DNS?
A. NS
B. PTR
C. A
D. CNAME
Show Answer
Correct Answer: B
Explanation: An IP-to-name lookup is a reverse DNS lookup, which uses PTR (Pointer) records to map an IP address back to a hostname. Forward lookups (name to IP) use A or AAAA records.
Question 36
A technician configures a new printer and places it on the network. Which of the following is the best way to ensure the printer will always keep the same IP configuration?
A. Add a new scope.
B. Place an exclusion.
C. Extend the lease time.
D. Create a reservation.
Show Answer
Correct Answer: D
Explanation: A DHCP reservation binds the printer’s MAC address to a specific IP address, ensuring it always receives the same IP configuration from the DHCP server. Adding a scope or exclusion does not guarantee a fixed IP for that device, and extending the lease time only delays renewal without preventing changes.
$19
Get all 518 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.