Question 1

Which of the following can be done to implement network device hardening? (Choose two.)

Accepted Answer

A)  Implement spanning tree 
B)  Perform VLAN hopping 
C)  Patch and update 
D)  Perform backups 
E)  Enable port mirroring
F) Change default admin password 
A)  Implement spanning tree 
B)  Perform VLAN hopping 
C)  Patch and update 
D)  Perform backups 
E)  Enable port mirroring
F) Change default admin password

Question 2

A network technician needs to separate a web server listening on port 80 from the internal LAN and secure the server from the public Internet. The web server should be accessible to the public Internet over port 80 but not the private LAN. Currently, the network is segmented with a network-based firewall using the following IP addressing scheme on each interface:   Which of the following ones should the technician use to place the web server and which of the following firewall rules should the technician configure?

Accepted Answer

A)  Place the web server in the public zone with an inbound rule from eth0 interface to accept traffic over port 80 designated to the web server 
B)  Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept traffic over port 80 designated to the web server 
C)  Place the web server in the private zone with an inbound rule from eth2 interface to eth1 to accept traffic over port 80 designated to the web server 
D)  Place the web server in the DMZ with an inbound rule from eth1 interface to eth0 to accept traffic over port 80 designated to the web server 
A)  Place the web server in the public zone with an inbound rule from eth0 interface to accept traffic over port 80 designated to the web server 
B)  Place the web server in the DMZ with an inbound rule from eth0 interface to eth1 to accept traffic over port 80 designated to the web server 
C)  Place the web server in the private zone with an inbound rule from eth2 interface to eth1 to accept traffic over port 80 designated to the web server 
D)  Place the web server in the DMZ with an inbound rule from eth1 interface to eth0 to accept traffic over port 80 designated to the web server

Question 3

Which of the following ports should a network technician open on a firewall to back up the configuration and operating system files of a router to a remote server using the FASTEST method possible?

Accepted Answer

A)  UDP port 22 
B)  TCP port 22 
C)  TCP port 25 
D)  UDP port 53 
E)  UDP port 69 
A)  UDP port 22 
B)  TCP port 22 
C)  TCP port 25 
D)  UDP port 53 
E)  UDP port 69

Question 4

A few weeks after starting a new position, Joe, a junior network administrator, receives a call from an internal number asking for his username and password to update some records. Joe realizes this may be a type of attack on the network, since he has full access to network resources. Which of the following attacks is described?

Accepted Answer

A)  Logic bomb 
B)  Social engineering 
C)  Trojan horse 
D)  Insider threat 
A)  Logic bomb 
B)  Social engineering 
C)  Trojan horse 
D)  Insider threat

Question 5

Which of the following BEST describes the characteristics of a differential backup solution?

Accepted Answer

A)  Backs up files with the creation or modified date as the current date. 
B)  Backs up all files and sets the archive bit. 
C)  Backs up files with a date earlier than today's date with a clear archive bit. 
D)  Backs up files with the archive bit set but does not clear the bit. 
A)  Backs up files with the creation or modified date as the current date. 
B)  Backs up all files and sets the archive bit. 
C)  Backs up files with a date earlier than today's date with a clear archive bit. 
D)  Backs up files with the archive bit set but does not clear the bit.

Question 6

A consulting company was hired to project and deploy a new datacenter in a different city. This new facility must have the same components installed as the current datacenter to be ready to take over all the network services as soon as the primary site becomes unavailable. Which of the following describes what will be deployed in the new location?

Accepted Answer

A)  Cold site 
B)  Hot site 
C)  Warm site 
D)  Off-site backup 
E)  Infrastructure as a service 
A)  Cold site 
B)  Hot site 
C)  Warm site 
D)  Off-site backup 
E)  Infrastructure as a service

Question 7

First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?

Accepted Answer

A)  Firewall configuration documentation 
B)  Change management documentation 
C)  Network performance baseline 
D)  Logical diagram 
A)  Firewall configuration documentation 
B)  Change management documentation 
C)  Network performance baseline 
D)  Logical diagram

Question 8

A technician wants to configure a SOHO network to use a specific public DNS server. Which of the following network components should the technician configure to point all clients on a network to a new DNS server?

Accepted Answer

A)  Router 
B)  Switch 
C)  Load balancer 
D)  Proxy server 
A)  Router 
B)  Switch 
C)  Load balancer 
D)  Proxy server

Question 9

A new technician is connecting an access switch to a distribution switch uplink in a datacenter using fiber cables. Which of the following are transceivers the technician should use to perform this job? (Choose two.)

Accepted Answer

A)  RJ45 
B)  DB-9 
C)  LC 
D)  SFP 
E)  GBIC
F) SC 
A)  RJ45 
B)  DB-9 
C)  LC 
D)  SFP 
E)  GBIC
F) SC

Question 10

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?

Accepted Answer

A)  International export controls policy 
B)  Remote access policy 
C)  Privileged user agreement 
D)  Data loss policy 
E)  Service-level agreement 
A)  International export controls policy 
B)  Remote access policy 
C)  Privileged user agreement 
D)  Data loss policy 
E)  Service-level agreement

Question 11

A network technician is implementing a new IPv6 addressing scheme at a local office. This is a large office, and the network manager would like a solution that saves time and allows for automatic addressing of nodes. Which of the following would BEST accomplish this?

Accepted Answer

A)  APIPA 
B)  6to4 tunnel 
C)  NAT64 
D)  EUI-64 
A)  APIPA 
B)  6to4 tunnel 
C)  NAT64 
D)  EUI-64

Question 12

A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)

Accepted Answer

A)  Document the reason for the request 
B)  Scan the file for malware to protect the sales department's computers 
C)  Follow the company's approval process for the implementation 
D)  Install a TFTP server for the customers to use for the transfer 
E)  Create a honeypot to store the file on for the customers to use
F) Write the SLA for the sales department authorizing the change 
A)  Document the reason for the request 
B)  Scan the file for malware to protect the sales department's computers 
C)  Follow the company's approval process for the implementation 
D)  Install a TFTP server for the customers to use for the transfer 
E)  Create a honeypot to store the file on for the customers to use
F) Write the SLA for the sales department authorizing the change

Question 13

A network manager is reviewing recent changes after learning the network health metrics are no longer being protected. The manager discovers the ACL has been updated to the following:   Which of the following lines in the ACL points to the issue?

Accepted Answer

A)  Line 1 
B)  Line 2 
C)  Line 3 
D)  Line 4 
E)  Line 5 
A)  Line 1 
B)  Line 2 
C)  Line 3 
D)  Line 4 
E)  Line 5

Question 14

A technician is investigating an issue related to a single host that is unable to access the Internet. The technician records the following information: Host IP 169.254.1.10. The network IP address range on the DHCP server is 10.10.5.2-10.10.5.250 with a default gateway 10.10.5.1 and a DNS of 8.8.8.8. Which of the following should the technician perform to troubleshoot the issue?

Accepted Answer

A)  Change the IP scope on the DHCP server to a public IP address range. 
B)  Perform a traceroute command to identify the router that is not functioning. Perform a traceroute command to identify the router that is not functioning. 
C)  Verify the host has physical connectivity and is on the correct VLAN. 
D)  Configure the DNS address in the DHCP scope to a 10.10.5.0/24 address. 
A)  Change the IP scope on the DHCP server to a public IP address range. 
B)  Perform a traceroute command to identify the router that is not functioning. Perform a traceroute command to identify the router that is not functioning. 
C)  Verify the host has physical connectivity and is on the correct VLAN. 
D)  Configure the DNS address in the DHCP scope to a 10.10.5.0/24 address.

Question 15

Which of the following represents where the ISP's WAN connection is handed off to the local network?

Accepted Answer

A)  Demilitarized zone 
B)  Intermediate distribution frame 
C)  Extranet 
D)  Demarcation point 
A)  Demilitarized zone 
B)  Intermediate distribution frame 
C)  Extranet 
D)  Demarcation point

Question 16

A network administrator is investigating an issue with VoIP calls that are not establishing properly. After troubleshooting, the administrator is able to determine the SIP responses are not being received by the gateway. Which of the following did the administrator use to determine this information?

Accepted Answer

A)  netstat 
B)  A spectrum analyzer 
C)  tracert 
D)  A packet analyzer 
A)  netstat 
B)  A spectrum analyzer 
C)  tracert 
D)  A packet analyzer

Question 17

A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform her job. Which of the following would provide secure access to the corporate resources?

Accepted Answer

A)  Utilize an SSH connection to the corporate server. 
B)  Use TFTP to transfer files to corporate resources. 
C)  Allow RDP through an external firewall. 
D)  Connect utilizing client-to-site VPN. 
A)  Utilize an SSH connection to the corporate server. 
B)  Use TFTP to transfer files to corporate resources. 
C)  Allow RDP through an external firewall. 
D)  Connect utilizing client-to-site VPN.

Question 18

Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?

Accepted Answer

A)  2001::d58::95:7565:1 
B)  2001:0:d58:0:0:95:7565:1 
C)  2001:0:d58::95:7565:1 
D)  2001:0:0d58::95:7565:1 
A)  2001::d58::95:7565:1 
B)  2001:0:d58:0:0:95:7565:1 
C)  2001:0:d58::95:7565:1 
D)  2001:0:0d58::95:7565:1

Question 19

A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?

Accepted Answer

A)  Install an IDS to monitor all traffic to and from the kiosks. 
B)  Install honeypots on the network to detect and analyze potential kiosk attacks before they occur. 
C)  Enable switchport security on the ports to which the kiosks are connected to prevent network-level attacks. 
D)  Create a new network segment with ACLs, limiting kiosks' traffic with the internal network. 
A)  Install an IDS to monitor all traffic to and from the kiosks. 
B)  Install honeypots on the network to detect and analyze potential kiosk attacks before they occur. 
C)  Enable switchport security on the ports to which the kiosks are connected to prevent network-level attacks. 
D)  Create a new network segment with ACLs, limiting kiosks' traffic with the internal network.

Question 20

A technician is troubleshooting a host that is having intermittent issues connecting to internal network resources and the company servers. Using a packet sniffer, the technician notices there are several TCP communications that are missing packets in sequence and need to be retransmitted. The technician receives several SYN-ACK packets with incorrect addressing. Which of the following is the MOST likely cause of these issues?

Accepted Answer

A)  DNS poisoning attack 
B)  Evil twin on the company network 
C)  ARP poisoning attack 
D)  Misconfigured VLAN on the local switch 
A)  DNS poisoning attack 
B)  Evil twin on the company network 
C)  ARP poisoning attack 
D)  Misconfigured VLAN on the local switch

Which of the following can be done to implement network device hardening? (Choose two.)

Which of the following ports should a network technician open on a firewall to back up the configuration and operating system files of a router to a remote server using the FASTEST method possible?

Which of the following BEST describes the characteristics of a differential backup solution?

First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?

A technician wants to configure a SOHO network to use a specific public DNS server. Which of the following network components should the technician configure to point all clients on a network to a new DNS server?

A new technician is connecting an access switch to a distribution switch uplink in a datacenter using fiber cables. Which of the following are transceivers the technician should use to perform this job? (Choose two.)

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?

A network technician is implementing a new IPv6 addressing scheme at a local office. This is a large office, and the network manager would like a solution that saves time and allows for automatic addressing of nodes. Which of the following would BEST accomplish this?

A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)

A network manager is reviewing recent changes after learning the network health metrics are no longer being protected. The manager discovers the ACL has been updated to the following: Which of the following lines in the ACL points to the issue?

Which of the following represents where the ISP's WAN connection is handed off to the local network?

A network administrator is investigating an issue with VoIP calls that are not establishing properly. After troubleshooting, the administrator is able to determine the SIP responses are not being received by the gateway. Which of the following did the administrator use to determine this information?

A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform her job. Which of the following would provide secure access to the corporate resources?

Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?

A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?

CompTIA A+ Certification Exam: Core 1

CompTIA A+ Certification Exam: Core 2

CompTIA Advanced Security Practitioner (CASP+) CAS-003

CompTIA Advanced Security Practitioner (CASP+) CAS-004

CompTIA Cloud Essentials+

CompTIA CySA+ Certification Exam (CS0-002)

CompTIA Cloud+ (CV0-002)

CompTIA Cloud+

CompTIA IT Fundamentals

CompTIA Project+

CompTIA PenTest+ Certification Exam

CompTIA Server+

CompTIA Server+ Certification Exam

CompTIA Security+

CompTIA Security+ 2021

CompTIA CTT+ Essentials

CompTIA Linux+

Filters

Exam 10: CompTIA Network+

Which of the following can be done to implement network device hardening? (Choose two.)

Which of the following ports should a network technician open on a firewall to back up the configuration and operating system files of a router to a remote server using the FASTEST method possible?

Which of the following BEST describes the characteristics of a differential backup solution?

First thing on Monday morning, after a maintenance weekend, the help desk receives many calls that no one can access the Internet. Which of the following types of documentation should the on-call network administrator consult FIRST?

A technician wants to configure a SOHO network to use a specific public DNS server. Which of the following network components should the technician configure to point all clients on a network to a new DNS server?

A new technician is connecting an access switch to a distribution switch uplink in a datacenter using fiber cables. Which of the following are transceivers the technician should use to perform this job? (Choose two.)

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?

A network technician is implementing a new IPv6 addressing scheme at a local office. This is a large office, and the network manager would like a solution that saves time and allows for automatic addressing of nodes. Which of the following would BEST accomplish this?

A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)

A network manager is reviewing recent changes after learning the network health metrics are no longer being protected. The manager discovers the ACL has been updated to the following: Which of the following lines in the ACL points to the issue?

Which of the following represents where the ISP's WAN connection is handed off to the local network?

A network technician needs to set up an access method for Ann, a manager, to work from home. Ann needs to locally mapped corporate resources to perform her job. Which of the following would provide secure access to the corporate resources?

Which of the following is the SHORTEST way to write 2001:0000:0d58:0000:0000:0095:7565:0001 in proper IPv6 shorthand?

A company decides to deploy customer-facing, touch-screen kiosks. The kiosks appear to have several open source service ports that could potentially become compromised. Which of the following is the MOST effective way to protect the kiosks?

CompTIA A+ Certification Exam: Core 1

CompTIA A+ Certification Exam: Core 2

CompTIA Advanced Security Practitioner (CASP+) CAS-003

CompTIA Advanced Security Practitioner (CASP+) CAS-004

CompTIA Cloud Essentials+

CompTIA CySA+ Certification Exam (CS0-002)

CompTIA Cloud+ (CV0-002)

CompTIA Cloud+

CompTIA IT Fundamentals

CompTIA Project+

CompTIA PenTest+ Certification Exam

CompTIA Server+

CompTIA Server+ Certification Exam

CompTIA Security+

CompTIA Security+ 2021

CompTIA CTT+ Essentials

CompTIA Linux+

Filters