A network technician is setting up a server in an internet-accessible, screened subnet that is mimicking a production server. Which of the following has the technician created?
A. IDS
B. Firewall
C. Rogue device
D. Honeypot
Show Answer
Correct Answer: D
Explanation: A honeypot is a decoy system intentionally exposed to attract and monitor attackers. Placing a server in an internet-accessible screened subnet (DMZ) that mimics a production server matches the definition of a honeypot. An IDS detects intrusions, a firewall filters traffic, and a rogue device is unauthorized rather than intentionally deployed.
Question 72
Which of the following OSI model layers is responsible for determining the most efficient path for frame transfer?
A. 1
B. 2
C. 3
D. 5
Show Answer
Correct Answer: C
Explanation: Layer 3 (the Network layer) is responsible for routing and determining the best path through a network. Although frames are a Layer 2 data unit, path selection is a Network layer function; Layer 2 handles local frame delivery on a link.
Question 73
An attacker remotely executes a binary file on a server. Which of the following terms describes what the attacker is taking advantage of?
A. Threat
B. Risk
C. Vulnerability
D. Exploit
Show Answer
Correct Answer: C
Explanation: A vulnerability is a weakness that an attacker takes advantage of. An exploit is the code or technique used to leverage that vulnerability. A threat is a potential cause of harm or the actor/event, and risk is the potential impact and likelihood.
Question 74
Which of the following is an attack that provides a malicious default gateway IP over a wired network?
A. Evil twin
B. DNS spoofing
C. ARP poisoning
D. Rogue DHCP server
Show Answer
Correct Answer: D
Explanation: A rogue DHCP server specifically provides clients with malicious network configuration, including a malicious default gateway IP address. ARP poisoning impersonates the gateway by mapping the gateway IP to the attacker's MAC address, but it does not provide a new default gateway IP. An evil twin is a wireless attack, and DNS spoofing affects name resolution rather than gateway assignment.
Question 75
A customer wants to segment the local network into eight sections with 30 devices each. A junior network technician needs to select the appropriate subnet mask for the customer's chosen Class С network. Which of the following meets the requirement?
A. /25
B. /26
C. /27
D. /28
Show Answer
Correct Answer: C
Explanation: A Class C network has a default /24 mask. To create 8 subnets, borrow 3 host bits (2^3 = 8), resulting in a /27 mask. That leaves 5 host bits, providing 2^5 - 2 = 30 usable host addresses per subnet, matching the requirement.
Question 76
SIMULATION
-
A network technician receives a ticket from an employee who is working on PC 1 but is unable to connect to the database server. The technician pings the database server from PC 1, but the request times out. After reviewing the utilization of Switch 1 and Switch 2, the technician finds high CPU utilization and sees that the MAC table is continuously changing.
INSTRUCTIONS
-
Configure Switch 1 and Switch 2 to remediate the employee s issue. Then, validate connectivity between PC 1 and the database server.
Switch 1 and Switch 2 are already in configuration mode. Type help to view a list of available commands.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Show Answer
Correct Answer: Switch 1:
spanning-tree vlan 10 root primary
spanning-tree vlan 20 root secondary
Switch 2:
spanning-tree vlan 20 root primary
spanning-tree vlan 10 root secondary
Validate by pinging the database server from PC1.
Explanation: High CPU utilization with a continuously changing MAC table indicates a Layer 2 loop/STP issue. Setting deterministic STP roots for each VLAN restores a stable topology and connectivity.
Question 77
Which of the following can manage, control, and assist with conditioning power within a data center?
A. Power usage monitor
B. Line voltage monitor
C. Uninterruptible power supply
D. Power distribution unit
Show Answer
Correct Answer: D
Explanation: A power distribution unit (PDU) in a data center distributes electrical power to equipment and many enterprise PDUs also provide power monitoring, remote control, and power conditioning features. A UPS primarily provides battery backup and short-term power protection, while voltage and power usage monitors only measure conditions rather than manage or control power.
Question 78
Which of the following enables an organization to leverage an identity provider to manage access across SaaS applications?
A. PKI
B. SSO
C. TACACS+
D. RADIUS
Show Answer
Correct Answer: B
Explanation: Single Sign-On (SSO) enables an organization to use an identity provider (IdP) to authenticate users once and provide access across multiple SaaS applications, typically using federation protocols such as SAML or OpenID Connect. PKI manages certificates, while TACACS+ and RADIUS are primarily AAA protocols for network/device access rather than SaaS application federation.
Question 79
A wireless administrator is setting up a small mesh network in an open-concept office space. The administrator must select a supported frequency that offers the fastest speeds for the backhaul connection.
Which of the following should the administrator select?
A. 2.4GHz
B. 5GHz
C. 6GHz
D. 45GHz
Show Answer
Correct Answer: B
Explanation: 5GHz is the standard high-performance band widely supported for Wi-Fi mesh backhaul. It offers substantially higher throughput than 2.4GHz while maintaining compatibility with common Wi-Fi 5 (802.11ac) and newer equipment. 6GHz requires Wi-Fi 6E/7 support and is not universally supported, and 45GHz is not a standard Wi-Fi band for this use.
Question 80
Which of the following ports is used to transfer data between mail exchange servers?
A. 21
B. 25
C. 53
D. 69
Show Answer
Correct Answer: B
Explanation: Port 25 is the standard SMTP port used for transferring email between mail servers (mail exchange/relay). Port 21 is FTP, port 53 is DNS, and port 69 is TFTP.
$19
Get all 580 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
