Which of the following is used to redistribute traffic between one source and multiple servers that run the same service?
A. Router
B. Switch
C. Firewall
D. Load balancer
Show Answer
Correct Answer: D
Explanation: A load balancer distributes incoming client requests across multiple servers providing the same service to improve availability, scalability, and performance. Routers forward traffic between networks, switches connect devices within a network, and firewalls filter traffic.
Sources:
https://learn.microsoft.com/en-us/sharepoint/install/capacity-management-and-sizing-overview
Question 52
Users report that they cannot print to a specific IPv4-enabled printer after an extended power outage. Which of the following should a technician configure?
A. DoH
B. SLAAC
C. IP helper
D. DHCP reservation
Show Answer
Correct Answer: D
Explanation: After an extended power outage, a printer that previously received a dynamic IPv4 address via DHCP may obtain a different address when it comes back online, causing users configured for the old address to be unable to print. Configuring a DHCP reservation ensures the printer always receives the same IP address based on its MAC address. DoH, SLAAC (IPv6), and IP helper do not address this issue.
Question 53
A network administrator is migrating a domain to a different provider. As part of the onboarding process the new provider requests a domain ownership proof. Which of the following records would the administrator most likely need to create?
A. A
B. CNAME
C. PTR
D. TXT
Show Answer
Correct Answer: D
Explanation: Domain ownership verification is most commonly performed by adding a DNS TXT record containing a verification token provided by the new service. Although some providers also support CNAME-based verification, the standard and most likely answer is TXT. A records map hostnames to IP addresses, and PTR records are for reverse DNS.
Sources:
https://discuss.google.dev/t/domain-ownership-verification-issue-with-google-workspace-account/193509
Question 54
An analyst discovers that a repurposed DNS server has an open port that should be disabled. Which of the following ports should the analyst disable?
A. 21
B. 22
C. 53
D. 80
Show Answer
Correct Answer: C
Explanation: A repurposed DNS server that is no longer serving DNS should not have the DNS service exposed. DNS uses port 53 (TCP/UDP), so that is the port that should be disabled. Ports 21 (FTP), 22 (SSH), and 80 (HTTP) are unrelated to the DNS role and may or may not be needed depending on the server's new purpose.
Question 55
Which of the following helps a network administrator understand security risk from external malicious actors and offers insights on which threats to mitigate?
A. Compliance benchmarks
B. CIA triad
C. SAML
D. Honeypot
Show Answer
Correct Answer: D
Explanation: A honeypot is a decoy system designed to attract external attackers. By observing attack attempts and techniques, it helps administrators understand risks from malicious actors and informs which threats should be prioritized for mitigation. Compliance benchmarks measure adherence to standards, the CIA triad is a security model, and SAML is an authentication/federation protocol.
Question 56
An organization is experiencing issues with its wireless network. Several APs are placed through-out the building, and only certain areas have a weak signal and low data transfer rates. Which of the following should a wireless technician do first?
A. Deploy additional APs in the problem areas.
B. Increase the transmit power of the APs.
C. Upgrade the antennas on the APs.
D. Update the firmware on the APs.
Show Answer
Correct Answer: B
Explanation: The symptoms indicate localized coverage issues (weak signal and low throughput) rather than a software problem. The first troubleshooting step is to adjust RF settings, such as increasing AP transmit power, before making hardware changes like adding APs or replacing antennas. Deploying additional APs is a design change and can create co-channel interference if RF settings have not been optimized first. Firmware updates are not the first response to a coverage problem.
Question 57
A consultant is refreshing the hardware in a large office building. A few IP cameras on the third floor are not online. The consultant troubleshoots the connections and sees the switchports are showing no link light. Which of the following is the most likely cause of this issue?
A. The PoE budget has been exceeded.
B. The switch has a misconfigured VLAN
C. The network video recorder is not on the camera VLAN.
D. The affected cameras are experiencing a wiring issue.
Show Answer
Correct Answer: D
Explanation: A switchport showing no link light indicates the physical link is not established. VLAN misconfiguration or an NVR on the wrong VLAN would not extinguish the physical link light; they affect connectivity after the link is up. Exceeding the PoE budget can prevent powered devices from operating, but the most direct and likely explanation for a port with no link light is a physical cabling or wiring problem between the switch and the camera.
Question 58
Internet applications are timing out for users in the finance department. The company has a 10GB internet connection. Other department users are not experiencing any issues, and the performance from the core switch is good. Which of the following would best provide more bandwidth to the finance department users?
A. Link aggregation
B. Load balancer
C. Jumbo frames
D. Quality of service
Show Answer
Correct Answer: D
Explanation: Quality of Service (QoS) can prioritize traffic for the finance department, effectively allocating more available bandwidth to their critical applications when congestion exists. Link aggregation increases bandwidth between network devices but does not selectively provide more bandwidth to one department, and the scenario indicates the internet link and core are not the bottleneck. Jumbo frames do not increase bandwidth and load balancers distribute server traffic rather than solve client bandwidth allocation.
Question 59
A user calls the help desk stating that an application successfully connects to a server, but the sync process fails when trying to sync data. Which of the following should the help desk use to resolve the issue? (Choose two.)
A. netstat
B. arp
C. Speed tester
D. nslookup
E. Nmap
F. ping
Show Answer
Correct Answer: A, F
Explanation: The application already connects to the server, so basic name resolution is likely working. To troubleshoot why synchronization fails during data transfer, use netstat to inspect the TCP connection state, active sessions, and whether the expected ports are in use, and use ping to verify end-to-end reachability and detect latency or packet loss that could interrupt the sync process. Tools like nslookup only test DNS resolution, arp is for local address resolution, Nmap is for port scanning, and a speed tester is not a standard diagnostic for this scenario.
Question 60
Which of the following would a network administrator most likely use to securely manage a network device on a closed network?
A. Bastion host
B. Remote desktop
C. SSH
D. Split-tunnel VPN
Show Answer
Correct Answer: C
Explanation: SSH is the standard secure protocol for remotely managing network devices over a network, including a closed network. A bastion host is a hardened intermediary host rather than the management protocol itself, Remote Desktop is typically for GUI access to systems rather than network device administration, and a split-tunnel VPN is a VPN configuration option, not the primary management method for a device on a closed network.
$19
Get all 580 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.