220-1201 Practice Test 5 — 10 Questions

Question 1

A user reports that their computer's clock is consistently off by several minutes, causing authentication failures with the domain. The network uses Active Directory. Which service should be checked first?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

NTP. NTP (Network Time Protocol) is the correct service to check first because the symptom—a clock consistently off by several minutes causing authentication failures with an Active Directory domain—is a classic sign of time synchronization issues. Active Directory uses Kerberos for authentication, which requires the client and domain controller clocks to be within a default skew of 5 minutes (RFC 4120). If the time is off, Kerberos tickets are rejected, leading to authentication failures.

Answer

DHCP

Answer

DNS

Answer

RADIUS

Question 2

A company's internal website is accessible by IP address but not by its hostname. The website is hosted on a server with a static IP. Which service is most likely misconfigured?

Accepted Answer

DNS. This question tests DNS resolution for internal resources. Access by IP works, so the server is reachable. The problem is name resolution, which points to a missing or incorrect DNS record for that hostname.

Answer

DHCP

Answer

NAT

Answer

RADIUS

Question 3

A technician is setting up a new office network with 50 devices. The network must support growth up to 100 devices. The technician chooses a subnet mask of 255.255.255.0. How many usable host addresses does this subnet provide?

Accepted Answer

254. A subnet mask of 255.255.255.0 (or /24) provides 256 total addresses, with 254 usable for hosts (the first address is the network ID and the last is the broadcast address). This is sufficient for the current 50 devices and allows for growth up to 100, but not beyond 254.

Answer

255

Answer

256

Answer

128

Question 4

A user wants to connect a new laptop to a wired network that uses 802.1X authentication. What must be configured on the laptop to ensure successful network access?

Accepted Answer

Valid 802.1X credentials (username and password or certificate). This question tests knowledge of network authentication methods. 802.1X requires a username and password (or certificate) to authenticate to the network, typically via RADIUS. Without proper credentials, the switch port will remain blocked.

Answer

A static IP address in the same subnet as the network

Answer

The correct SSID and wireless security key

Answer

A crossover cable to connect to the switch

Question 5

A company deploys a new VoIP system. Users report that calls drop frequently. The network uses a single flat subnet with no QoS configured. The technician monitors traffic and sees high bandwidth utilization during peak hours. What is the most effective solution to improve call quality?

Accepted Answer

Replace all switches with managed switches and enable QoS. This question tests knowledge of Quality of Service (QoS) and network segmentation. VoIP traffic is sensitive to latency and jitter. Implementing QoS prioritizes voice traffic over other data, ensuring call quality even during high utilization. VLANs can also help by separating voice and data traffic.

Answer

Increase the bandwidth of the internet connection

Answer

Change all VoIP phones to use static IP addresses

Answer

Disable DHCP on the network to reduce broadcast traffic

Question 6

A company's IT policy requires that all network traffic from the guest Wi-Fi be isolated from the internal corporate network. The guest network uses a separate SSID and VLAN. Which additional configuration is necessary to ensure complete isolation?

Accepted Answer

Implement an ACL that denies traffic from the guest VLAN to the corporate VLAN. Access Control Lists (ACLs) on the router or firewall can block traffic between VLANs. Even with separate VLANs, inter-VLAN routing must be explicitly denied to prevent guest devices from reaching the corporate network.

Answer

Enable DHCP snooping on the guest VLAN

Answer

Configure a router-on-a-stick with subinterfaces

Answer

Set the guest network to use a different subnet mask

Question 7

A company is setting up a new branch office with 30 employees. They need to connect all workstations to the network and provide internet access. The internet connection is a fiber optic line terminating in an ONT. Which device should be placed between the ONT and the switch to route traffic and provide NAT?

Accepted Answer

Router. The ONT converts fiber to Ethernet, but it does not route or perform NAT. A router is required to connect the local network to the internet, provide NAT, and handle IP addressing. A switch alone cannot route, and a firewall is often combined with a router but is not the primary device for routing. The correct answer is a router.

Answer

Patch panel

Answer

Layer 2 switch

Answer

Firewall appliance

Question 8

A technician is troubleshooting a network where users on one floor cannot communicate with users on another floor. Both floors are connected to the same switch via separate VLANs configured for security. What additional device is needed to allow communication between the VLANs?

Accepted Answer

A router or Layer 3 switch. VLANs segment a network into separate broadcast domains, and by default, they cannot communicate with each other. A Layer 3 device, such as a router or a Layer 3 switch, is required to route traffic between VLANs. A Layer 2 switch cannot perform routing. The correct answer is a router or a Layer 3 switch.

Answer

A hub

Answer

A Layer 2 switch

Answer

A bridge

Question 9

A technician is setting up a small office network with a router, a switch, and a wireless access point. The router has only one LAN port. The technician needs to connect the switch and the WAP to the router, but the switch has no uplink port. Which hardware component should the technician use to connect both devices to the router?

Accepted Answer

Connect the router to the switch, then connect the WAP to the switch.. This question tests knowledge of network topology and the use of additional switches. Since the router has only one LAN port, a switch is needed to expand the number of available ports. The correct answer is to connect the router to the switch, and then connect the WAP to the switch. The switch's ports are typically all the same, so no special uplink port is required (modern switches use Auto-MDIX).

Answer

Use a crossover cable to connect the router directly to the WAP.

Answer

Use a hub between the router and the switch.

Answer

Configure the switch as a router to connect to the WAP.

Question 10

A small business uses a router with DHCP enabled, issuing addresses in the 192.168.1.0/24 range. A technician installs a new server with a static IP of 192.168.1.50, but users cannot connect to it. The technician pings 192.168.1.50 from the server itself successfully. What is the most likely cause?

Accepted Answer

Another device on the network has the same IP address.. If the DHCP server assigned 192.168.1.50 to another device, there is an IP address conflict. The server can ping itself because it uses its own IP, but other devices may have the same IP or the server's address is already in use. This tests understanding of IP conflicts and static vs. DHCP assignments.

Answer

The server's subnet mask is set to 255.255.255.0.

Answer

The server's default gateway is missing.

Answer

The server's network cable is faulty.