220-1101 Practice Exam 57 — 20 Questions

Question 1

A network administrator configures a router with VLANs. Devices on VLAN 10 can successfully ping a web server (IP 192.168.20.10) on VLAN 20. However, when users on VLAN 10 attempt to access the web server via a browser using its IP address, the connection times out. The router's ACLs permit ICMP and TCP/80 traffic between VLANs. Which of the following should the administrator check NEXT?

Accepted Answer

Check if the web server's host firewall is blocking HTTP traffic. Since ICMP (ping) succeeds and the router's ACLs explicitly permit TCP/80, the issue is likely at the web server itself. The server's host firewall (e.g., Windows Defender Firewall, iptables) may be blocking inbound HTTP traffic while allowing ICMP, causing the browser connection to time out. This is the next logical check because the network path is verified working for ICMP and the ACL is confirmed permissive for TCP/80.

Answer

Verify the DHCP address assignment on VLAN 20

Answer

Review the router's ACLs for any implicit deny rules

Answer

Confirm that DNS resolution for the web server's hostname is correct

Question 2

A small office uses a router with DHCP service. One user reports that their computer can obtain an IP address in the 192.168.1.0/24 range, but cannot ping the default gateway (192.168.1.1). Other computers on the same network can ping the gateway and access the internet. The technician verifies the network cable shows link lights and the IP address is valid. Which of the following should the technician check NEXT?

Accepted Answer

B. The computer's subnet mask. The user's computer can obtain an IP address in the 192.168.1.0/24 range, but cannot ping the default gateway (192.168.1.1), while other devices on the same subnet can. This indicates a layer-3 connectivity issue specific to that host. The most likely cause is an incorrect subnet mask, such as 255.0.0.0 instead of 255.255.255.0, which would cause the computer to believe the gateway is on a different network and fail to send ARP requests for it, even though the IP is valid.

Answer

A. The router's firewall settings

Answer

C. The router's DHCP pool size

Answer

D. The DNS server settings

Question 3

A healthcare organization must store electronic health records in a cloud environment that meets HIPAA compliance requirements. The organization wants to keep sensitive patient data on-premises servers while using cloud resources for less critical workloads and to handle peak demand. Which cloud deployment model would BEST meet these requirements?

Accepted Answer

Hybrid cloud. A hybrid cloud model combines on-premises infrastructure (private cloud) with public cloud resources, allowing the healthcare organization to keep sensitive patient data on-premises for HIPAA compliance while using the public cloud for less critical workloads and to handle peak demand. This architecture provides the necessary data sovereignty and security controls for protected health information (PHI) while offering scalability and cost efficiency for non-sensitive tasks.

Answer

Public cloud

Answer

Private cloud

Answer

Community cloud

Question 4

A user reports that their smartphone's GPS cannot get a lock, and the compass app shows a wrong direction. The phone recently had its screen replaced by a third-party repair shop. Which of the following is the MOST likely cause of these issues?

Accepted Answer

The GPS antenna or magnetometer was disconnected or damaged during repair.. The GPS antenna and magnetometer (compass) are often integrated into the display assembly or flex cables near the top of the phone. A third-party screen replacement can easily disconnect or damage these components, causing both GPS lock failure and incorrect compass readings. The digitizer (touch layer) is unrelated to GPS or magnetometer functionality.

Answer

The digitizer is not properly seated.

Answer

The replacement screen's refresh rate is incompatible with the GPS chipset.

Answer

The phone's battery was not calibrated after the screen replacement.

Question 5

A global e-commerce company is designing a cloud architecture for its customer-facing website. The website experiences unpredictable traffic spikes during promotions. The company requires that during a regional cloud provider outage, all traffic is automatically redirected to a fully operational region with no manual intervention. Additionally, the company must ensure that all virtual machines across regions use identical configurations and a single management interface. Which cloud characteristic does the primary requirement address?

Accepted Answer

High availability. The primary requirement—automatic traffic redirection to a fully operational region during a regional outage with no manual intervention—directly defines high availability. High availability ensures that a system remains accessible by eliminating single points of failure through redundancy and automated failover mechanisms, such as DNS-based routing (e.g., using health checks and failover policies) or global load balancers that detect region failures and reroute traffic seamlessly.

Answer

Elasticity

Answer

Resource pooling

Answer

Measured service

Question 6

A small office wants to provide guest Wi-Fi access without allowing guests to access the internal company network. Which of the following is the BEST way to isolate guest traffic?

Accepted Answer

Configure a separate VLAN for guest traffic.. A separate VLAN (Virtual Local Area Network) segments guest traffic at Layer 2, preventing it from reaching the internal company network. By assigning guest Wi-Fi traffic to a dedicated VLAN with no inter-VLAN routing to the corporate VLAN, guests are logically isolated even though they share the same physical infrastructure.

Answer

Set a strong WPA2 password.

Answer

Enable MAC address filtering.

Answer

Disable SSID broadcast.

Question 7

A small office network consists of a router (192.168.1.1/24) connected to a managed switch. The switch has all ports configured as access ports on VLAN 1. A workstation obtains an IP address of 192.168.1.50/24 from the DHCP server running on the router. The workstation can successfully ping other workstations in the same subnet but cannot ping the default gateway (192.168.1.1). The router's LAN interface is configured with IP address 10.0.0.1/24. Which of the following is the MOST likely cause?

Accepted Answer

The router's LAN interface is on a different subnet than the workstations.. The router's LAN interface is configured with IP address 10.0.0.1/24, while the workstation has an IP address of 192.168.1.50/24. Since these are on different subnets, the workstation cannot reach the default gateway (192.168.1.1) because that address does not exist on the router's LAN interface. The router will not respond to ARP requests for 192.168.1.1, and the workstation cannot send traffic outside its own subnet without a valid gateway on the same subnet.

Answer

The workstation's default gateway is set incorrectly due to a DHCP scope misconfiguration.

Answer

The switch port the workstation is connected to is in the wrong VLAN.

Answer

The Ethernet cable is faulty.

Question 8

A small office network uses a single router connected to a managed switch. The technician has configured two VLANs on the switch: VLAN 10 for Sales and VLAN 20 for Engineering. Both VLANs can access the internet, but devices in Sales cannot reach devices in Engineering. The router has one physical interface connected to the switch. The technician configured a subinterface on the router for each VLAN with appropriate IP addresses. However, devices on VLAN 20 cannot access the internet, while VLAN 10 works fine. Which of the following is the MOST likely missing configuration?

Accepted Answer

The switch port connecting to the router is not configured as a trunk port. The router uses subinterfaces for VLAN routing, which requires the switch port connecting to the router to be configured as a trunk port (802.1Q trunking). Without trunking, the switch port will only carry traffic from a single VLAN (likely VLAN 1 or the native VLAN), so VLAN 20 frames are dropped at the switch-to-router link. This explains why VLAN 10 works (if it matches the access VLAN on that port) and VLAN 20 fails to reach the internet.

Answer

The router's DHCP server is not configured for VLAN 20

Answer

The firewall on the router is blocking all traffic from VLAN 20

Answer

The VLAN 20 subinterface is not assigned a gateway IP address

Question 9

A small office network uses a router (192.168.1.1/24) and an unmanaged switch. A technician configures a server with a static IP address 192.168.1.100/24, gateway 192.168.1.1, and connects it to the switch. Workstations on the same subnet can ping the router (192.168.1.1) but cannot ping the server. The server can ping its own IP and the router. Which of the following is the MOST likely cause?

Accepted Answer

The server's firewall is blocking ICMP. The server can ping the router and its own IP, indicating its network stack and default gateway are correctly configured. Workstations can ping the router but not the server, which points to a host-level issue on the server. The most likely cause is the server's firewall blocking ICMP echo requests (ping), as this is a common default security setting on server operating systems.

Answer

The server has a duplicate IP address

Answer

The switch port is administratively disabled

Answer

The default gateway is incorrect

Question 10

A small business uses a public cloud IaaS provider to host its website. The business is charged monthly based on the total amount of CPU time, storage capacity used, and data transferred. The business can view detailed usage reports through the provider's portal. Which essential cloud characteristic does this billing model BEST demonstrate?

Accepted Answer

Measured service. The billing model charges based on actual usage metrics (CPU time, storage, data transfer), which is the defining characteristic of measured service. In cloud computing, measured service means that resource usage is monitored, controlled, and reported, enabling pay-per-use billing. This is distinct from simply provisioning resources on demand or pooling them.

Answer

Resource pooling

Answer

Rapid elasticity

Answer

On-demand self-service

Question 11

A research organization requires a cloud environment that is exclusively used by their team and physically isolated from other organizations. They need complete control over the underlying infrastructure, including the ability to configure hypervisors and virtual switches. Which cloud deployment model should they choose?

Accepted Answer

Private cloud. A private cloud is the correct choice because it provides a dedicated, single-tenant environment that is physically isolated from other organizations. This model gives the research team complete control over the underlying infrastructure, including hypervisors and virtual switches, enabling custom configuration and management.

Answer

Public cloud

Answer

Community cloud

Answer

Hybrid cloud

Question 12

A small office recently installed eight new VoIP phones. Each phone is connected via an Ethernet cable to a 24-port managed PoE+ switch. The switch is powered on, and the network cables are properly terminated. However, none of the VoIP phones power on. The switch's power LED is solid, but the port LEDs for the connected phones remain off. The technician verifies that the PoE budget of the switch (240W) is sufficient for all eight phones (each requiring 6.5W). Which of the following is the MOST likely cause?

Accepted Answer

PoE is disabled on the switch ports or globally.. The most likely cause is that PoE is disabled on the switch ports or globally. Even though the switch supports PoE+ and has sufficient power budget, PoE must be explicitly enabled per port or globally via commands like 'power inline auto' or 'power inline never'. The solid power LED indicates the switch is powered, but the off port LEDs show no power is being delivered to the phones, which is consistent with PoE being administratively disabled.

Answer

The Ethernet cables are not PoE-compatible.

Answer

The VLAN configuration on the switch is preventing the phones from receiving power.

Answer

The switch's power supply cannot supply enough total wattage.

Question 13

A small office network has two managed switches, Switch A and Switch B, connected via a trunk link. Switch A has VLAN 10 (192.168.10.0/24) and VLAN 20 (192.168.20.0/24) configured. Switch B has only VLAN 10 configured. A router-on-a-stick is connected to Switch A and performs inter-VLAN routing. A workstation connected to an access port on Switch B in VLAN 10 can ping other devices in VLAN 10 on both switches, but it cannot ping a server in VLAN 20 that is connected to Switch A. The trunk port on Switch B is configured to allow all VLANs. Which of the following is the MOST likely cause of this issue?

Accepted Answer

The trunk port on Switch A is not configured to allow VLAN 20 traffic.. The workstation in VLAN 10 on Switch B can communicate with VLAN 10 devices on both switches, confirming that VLAN 10 is functioning correctly across the trunk. However, it cannot reach the server in VLAN 20 on Switch A. Since the router-on-a-stick is connected to Switch A and the trunk port on Switch B is configured to allow all VLANs, the most likely cause is that the trunk port on Switch A is not configured to allow VLAN 20 traffic. Without VLAN 20 permitted on the Switch A trunk, frames from VLAN 20 (including the server's responses) cannot traverse the link to Switch B, breaking connectivity.

Answer

The router's subinterface for VLAN 20 has an incorrect IP address or subnet mask.

Answer

The workstation's default gateway is set incorrectly.

Answer

The switchport mode on Switch B's trunk port is set to access mode.

Question 14

A technician builds a new workstation. After installing the CPU, heatsink, RAM, and a discrete video card, the system powers on (fans spin, lights come on) but the monitor shows 'No Signal'. The technician verifies the monitor works with another computer. The motherboard has integrated graphics, and the technician tries connecting the monitor to both the integrated port and the discrete video card port; neither produces a display. The system emits no beep codes. Which of the following should the technician do NEXT?

Accepted Answer

Clear the CMOS by removing the battery or using the jumper. The system powers on with no display and no beep codes, which strongly indicates a POST failure that prevents the motherboard from initializing video output. Clearing the CMOS resets the BIOS/UEFI settings to factory defaults, which can resolve issues caused by incorrect configuration (e.g., a setting that disables integrated graphics or a corrupted video initialization parameter). This is a standard first step when no display is present and all basic connections are verified.

Answer

Reseat the CPU and reapply thermal paste

Answer

Replace the RAM modules one at a time

Answer

Check the power supply connections to the discrete video card

Question 15

A technician configures a new workstation on a managed switch port. The workstation successfully obtains an IP address from the DHCP server and can ping its own IP address as well as the default gateway. However, it cannot ping any other workstations on the same subnet. The technician has verified that the Ethernet cable is good and the switch port link is up. Which of the following should the technician check NEXT?

Accepted Answer

The VLAN assignment on the switch port. The workstation can obtain an IP address and ping the default gateway, indicating Layer 3 connectivity to the local subnet is functional. The inability to ping other workstations on the same subnet suggests a Layer 2 isolation issue, most commonly caused by the switch port being assigned to a different VLAN than the other workstations. VLANs segment broadcast domains, so devices in different VLANs cannot communicate directly without a router, even if they share the same IP subnet.

Answer

The DNS server settings

Answer

The workstation's subnet mask

Answer

The speed and duplex settings on the switch port

Question 16

A small company hosts its customer-facing web application on a public cloud provider's infrastructure. However, due to regulatory requirements, the company must keep its customer database on a private server located at its own data center. The web application needs to access the database for real-time transactions. Which cloud deployment model best describes this setup?

Accepted Answer

A. Hybrid cloud. This setup combines a public cloud for the customer-facing web application with a private on-premises server for the customer database, which is the defining characteristic of a hybrid cloud deployment model. Hybrid cloud allows workloads to run in separate environments while maintaining connectivity, often via VPN or dedicated circuits, enabling real-time transactions between the public and private components.

Answer

B. Public cloud

Answer

C. Private cloud

Answer

D. Community cloud

Question 17

A technician builds a high-end gaming PC. The motherboard supports PCIe 4.0, the CPU supports it, and the graphics card is PCIe 4.0. The technician installs a new NVMe SSD in the M.2 slot. The system boots, but the SSD is not detected in the BIOS or Windows. The technician has tried reseating the SSD and checking the motherboard manual. Which of the following is the MOST likely cause?

Accepted Answer

The SSD is installed in a SATA-only M.2 slot, but the SSD is NVMe.. Option D is correct because many motherboards have M.2 slots that support only SATA or only NVMe (PCIe) protocols. If an NVMe SSD is inserted into a SATA-only M.2 slot, the SSD will not be detected by the BIOS or Windows. The motherboard manual would typically specify which M.2 slots support which protocols, and the technician should verify that the slot used supports PCIe/NVMe.

Answer

The SSD is incompatible with the motherboard chipset.

Answer

The M.2 slot is disabled in the BIOS.

Answer

The CPU is not seated correctly causing PCIe lanes to not work.

Question 18

A technician connects a new workstation to a managed switch port that is configured with PortFast and BPDU guard. The workstation obtains an IP address via DHCP and can ping its own IP address, but it cannot ping any other devices on the local network, including the default gateway. The link light on both the NIC and switch port is solid green. On the switch, the port status shows 'errdisable' with the reason 'BPDU guard'. Which of the following is the MOST likely cause of this issue?

Accepted Answer

The workstation's NIC is running Spanning Tree Protocol, which the switch's BPDU guard detected and shut down the port.. BPDU guard is a security feature that disables a PortFast-enabled port if it receives any Bridge Protocol Data Unit (BPDU). A workstation NIC should never send BPDUs, but some NICs or their drivers (e.g., when teaming or virtualization software is active) may inadvertently run Spanning Tree Protocol (STP) and generate BPDUs. When the switch receives a BPDU on a BPDU guard-protected port, it immediately places the port into errdisable state, blocking all traffic except the link light remains solid. This explains why the workstation can obtain an IP (DHCP traffic occurred before the port was disabled) but cannot ping any other devices after the port is errdisabled.

Answer

The workstation's firewall is blocking traffic.

Answer

The switch port is configured as an access port in the wrong VLAN.

Answer

The workstation's NIC has a static IP address that conflicts with another device.

Question 19

A small business wants to move its company website to the cloud. The goal is to eliminate all management tasks related to the operating system and the web server software. The business wants to simply upload its website content and have the cloud provider handle all patching, security, and availability. Which cloud service model BEST meets these requirements?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) is the correct model because it provides a managed platform where the cloud provider handles the operating system, web server software, patching, security, and availability. The business only needs to upload its website content (e.g., HTML, PHP files) and the provider manages the underlying runtime environment, including the web server (like Apache or Nginx) and OS updates. This eliminates all management tasks related to the OS and web server software, directly matching the requirement.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Desktop as a Service (DaaS)

Question 20

A technician is building a new workstation with a high-end graphics card. The power supply is 650W 80+ Gold. The system boots and runs normally for basic tasks, but when the user launches a 3D rendering application, the computer shuts down immediately. The technician checks the GPU temperature and it stays below 70°C. Which of the following is the MOST likely cause?

Accepted Answer

The power supply is insufficient for the GPU under load.. The 650W 80+ Gold power supply is likely insufficient to handle the peak power draw of a high-end graphics card under full 3D rendering load. When the GPU transitions from idle to maximum load, it can draw significantly more current, causing the PSU to trip its overcurrent protection or drop voltage below the ATX specification, resulting in an immediate shutdown. The fact that the system works for basic tasks but fails under load points directly to a power delivery issue, not a thermal or driver problem.

Answer

The GPU drivers are outdated.

Answer

The motherboard BIOS needs an update for the GPU.

Answer

The CPU is overheating.