220-1201 Networking — 20 Questions

Question 1

A technician is configuring a small office wireless router for a client. The client wants the network to be as secure as possible while still allowing employees to connect easily with a pre-shared key. The router supports WPA2, WPA3, WPA, and WEP. Which security protocol should the technician select?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

WPA3-Personal. WPA3-Personal provides the strongest security among the listed protocols by using SAE, which enhances protection against offline dictionary attacks and adds forward secrecy. It still supports a pre-shared key for easy employee connectivity. WPA2 is secure but less robust, while WPA and WEP are deprecated and vulnerable. Thus, WPA3-Personal is the correct choice for maximum security with a pre-shared key.

Answer

WPA2-PSK with AES

Answer

WPA-PSK with TKIP

Answer

WEP with 128-bit key

Question 2

A user reports that they cannot access any websites by typing domain names, but they can access websites by entering IP addresses directly. The technician suspects a DNS issue. Which command should the technician use first to verify the DNS server settings on the user's Windows 10 computer?

Accepted Answer

ipconfig /all. The ipconfig /all command shows the complete IP configuration, including DNS server addresses, which are essential to verify when name resolution fails. Since the user can reach sites by IP, the problem likely lies with DNS settings or the DNS server itself. Checking the configured DNS servers is the first step before testing resolution with tools like nslookup or ping.

Answer

ping

Answer

netstat -an

Answer

nslookup

Question 3

A small business wants to add a guest wireless network that allows visitors to access the internet but prevents them from reaching internal company resources. The existing network uses a single wireless router with a default configuration. Which of the following should a technician implement?

Accepted Answer

Configure a separate guest SSID and enable client isolation or a guest VLAN on the wireless router.. A separate guest SSID with client isolation or a guest VLAN isolates guest traffic from the internal network, preventing access to company resources while allowing internet access. This is the most effective and standard solution for the scenario. Other options either do not provide isolation or only add superficial security.

Answer

Change the default SSID and disable SSID broadcast to hide the guest network.

Answer

Set up MAC filtering to allow only known guest devices on the wireless network.

Answer

Enable WPA3-Personal on the guest SSID and place it on the same VLAN as the corporate network.

Question 4

A user reports that their workstation cannot connect to any network resources. The technician notices the network cable is plugged into the wall jack and the NIC, but the link light is off. Which of the following should the technician check FIRST?

Accepted Answer

The patch cable and wall jack for physical damage or loose connection.. The link light off indicates a physical layer problem. The first step is always to check the physical connection: cable, wall jack, and NIC port. This is the most efficient troubleshooting step and aligns with the bottom-up troubleshooting methodology. Other options are higher-layer issues that would not cause the link light to be off.

Answer

The IP address configuration on the workstation.

Answer

The firewall rules on the workstation.

Answer

The DNS server settings in the operating system.

Question 5

A company has a network with multiple VLANs. Users on VLAN 10 need to access a server on VLAN 20, but they cannot. The technician verifies that the switch ports are correctly assigned and the server is reachable from other VLANs. Which of the following is the MOST likely cause?

Accepted Answer

The router or Layer 3 switch is not configured to route between VLAN 10 and VLAN 20.. Inter-VLAN routing requires explicit configuration on a Layer 3 device. If VLAN 10 cannot reach VLAN 20 while other VLANs can, the routing between those specific VLANs is likely missing or misconfigured. This is the most probable cause given the symptoms. Other options would cause broader connectivity issues.

Answer

The default gateway on VLAN 10 is misconfigured.

Answer

The subnet mask on the server is incorrect.

Answer

The DNS server is not resolving the server's hostname for VLAN 10 clients.

Question 6

A technician is configuring a wireless access point for a small office. The office needs to support both older laptops that only support 2.4 GHz and newer devices that support 5 GHz. The technician wants to ensure optimal performance and compatibility. Which two of the following should the technician configure? (Choose two.)

Accepted Answer

Set the 2.4 GHz band to use channel 1, 6, or 11.. Enabling both 2.4 GHz and 5 GHz bands ensures compatibility with older and newer devices. Setting the 2.4 GHz band to channel 1, 6, or 11 minimizes interference. These two steps provide the best balance of compatibility and performance for a mixed-device office. Other options either reduce security or are not required.

Answer

Disable SSID broadcast on both bands to improve security.

Answer

Set the access point to use WEP encryption for backward compatibility.

Answer

Configure the 5 GHz band to use channel 36 at 80 MHz width.

Question 7

A technician is troubleshooting a workstation that can access local network resources but cannot reach any websites on the internet. The technician runs ipconfig and sees the IP address, subnet mask, and default gateway are correct. Which of the following should the technician check NEXT?

Accepted Answer

The DNS server settings.. When local resources are accessible but internet websites are not, and IP configuration is correct, the most likely cause is DNS resolution failure. The technician should verify the DNS server settings. Other options are either irrelevant or would cause broader connectivity loss.

Answer

The physical cable connection to the wall jack.

Answer

The DHCP lease expiration time.

Answer

The MAC address of the NIC.