220-1101 Networking Practice Test 2 — 15 Questions

Question 1

A technician sets up a small office network with a wireless router (with integrated DHCP) connected to an unmanaged 24-port switch. All desktop computers are connected to the switch via Ethernet cables. The computers can access the internet without issues, but they cannot ping each other by IP address. The technician checks one computer and sees an IP address of 192.168.1.10 with a subnet mask of 255.255.255.0, and can ping the router at 192.168.1.1. Which of the following is the MOST likely cause?

Accepted Answer

The router has client isolation enabled on the LAN.. The router has client isolation enabled on the LAN, which prevents devices connected to the same LAN segment from communicating with each other. This feature is commonly found on wireless routers to enhance security, but it also applies to wired clients behind the router. Since the computers can ping the router (192.168.1.1) and access the internet, but cannot ping each other, client isolation is the most likely cause.

Answer

The switch is not forwarding broadcast frames between ports.

Answer

The computers have an incorrect subnet mask configuration.

Answer

The DHCP server has run out of IP addresses.

Question 2

A user reports that they can access the internet by typing an IP address (e.g., 8.8.8.8) into their web browser, but they cannot access websites using domain names (e.g., www.example.com). Which of the following network services is MOST likely not functioning correctly?

Accepted Answer

Domain Name System (DNS). The user can reach the internet via IP address but not by domain name, which indicates that the system cannot resolve human-readable names to IP addresses. The Domain Name System (DNS) is the service responsible for this translation, so a failure in DNS resolution is the most likely cause. DHCP, HTTP, and FTP are unrelated to name resolution.

Answer

Dynamic Host Configuration Protocol (DHCP)

Answer

Hypertext Transfer Protocol (HTTP)

Answer

File Transfer Protocol (FTP)

Question 3

A user reports that they can access internal network resources and the internet by IP address, but cannot browse websites using domain names. Other users on the same network can browse the internet normally. Which of the following should the technician do FIRST?

Accepted Answer

Flush the DNS cache on the user's computer. The user can access resources by IP address but not by domain name, which indicates a DNS resolution failure. Since other users on the same network can browse normally, the issue is isolated to this specific workstation. Flushing the DNS cache (ipconfig /flushdns) clears any corrupted or stale DNS entries that may be preventing successful name resolution, making it the quickest and most logical first step.

Answer

Check the DHCP server configuration

Answer

Restart the DNS service on the domain controller

Answer

Replace the network cable

Question 4

A network technician is troubleshooting a small office where several users cannot connect to the network. The DHCP server shows that the scope is 80% utilized. The technician checks the IP configuration of an affected computer and sees an IP address of 169.254.15.200 with a subnet mask of 255.255.0.0. Which of the following is the MOST likely cause of the issue?

Accepted Answer

The DHCP server has run out of available IP addresses.. The IP address 169.254.15.200 with a subnet mask of 255.255.0.0 is an Automatic Private IP Addressing (APIPA) address, assigned by Windows when a DHCP server is unreachable or fails to provide an IP lease. Since the DHCP server's scope is 80% utilized, it has likely exhausted its pool of available addresses, causing clients to fall back to APIPA.

Answer

The DNS server is not resolving domain names.

Answer

The network cable is faulty or disconnected.

Answer

The subnet mask is incorrectly configured on the switch.

Question 5

A technician is troubleshooting a desktop computer that cannot access the internet. The computer is configured with a static IP address of 10.0.0.15, subnet mask 255.255.255.0, and default gateway 10.0.0.1. The technician can ping the default gateway successfully but cannot ping the public IP address 8.8.8.8. Other devices on the same network can access the internet normally. Which of the following is the MOST likely cause?

Accepted Answer

A firewall on the computer is blocking outbound traffic. The computer can ping the default gateway (10.0.0.1) successfully, which confirms that Layer 2 and Layer 3 connectivity to the local network is working, and the static IP configuration is correct. Since other devices on the same network can access the internet normally, the issue is isolated to this specific computer. A local firewall (e.g., Windows Defender Firewall) blocking outbound ICMP or TCP traffic to public IPs like 8.8.8.8 would prevent internet access while still allowing local subnet communication, making option C the most likely cause.

Answer

The DHCP server is not functioning

Answer

The default gateway is not configured correctly on the computer

Answer

The network cable is faulty

Question 6

A user reports that they can access internal company web servers by IP address (e.g., http://10.0.1.50) but not by hostname (e.g., http://intranet). Other users on the same network can access the intranet by hostname without issue. The technician checks the computer's IP settings and sees that the DNS server address is manually set to 8.8.8.8. Which of the following is the MOST likely cause?

Accepted Answer

The computer is using an external DNS server that cannot resolve internal hostnames. Option C is correct because the computer has its DNS server manually set to 8.8.8.8, which is a public external DNS server operated by Google. External DNS servers like 8.8.8.8 have no records for internal private hostnames (e.g., 'intranet'), so they cannot resolve them. Since the user can access internal servers by IP address but not by hostname, and other users on the same network can resolve the hostname (likely using an internal DNS server), the issue is specifically that this computer is using an external DNS server that cannot resolve internal hostnames.

Answer

The computer's subnet mask is incorrect

Answer

The internal DNS server is unreachable

Answer

The DHCP scope is exhausted

Question 7

A network administrator recently installed a new firewall to replace an older router. After the installation, users can access the internet but cannot reach internal web servers by hostname (e.g., http://intranet). They can, however, access those servers by IP address. The administrator verifies that the DNS server is functioning and other traffic between the LAN and the internal server VLAN is allowed. What is the MOST likely cause of this issue?

Accepted Answer

The firewall is blocking DNS traffic (UDP/TCP port 53) between the LAN and the internal DNS server. The firewall is blocking DNS traffic (UDP/TCP port 53) between the LAN and the internal DNS server. Since users can access the internet (external DNS queries likely go through a different path or the firewall allows outbound DNS), but internal hostname resolution fails, the most likely cause is that the firewall's rules are blocking DNS queries to the internal DNS server. This explains why IP-based access works (no DNS needed) while hostname-based access fails.

Answer

The VLAN configuration on the switch is preventing hostname resolution

Answer

The DHCP server is not assigning the correct DNS server address

Answer

The default gateway address has been misconfigured on the firewall

Question 8

A technician is troubleshooting a small office network where Windows computers can ping each other by IP address but cannot access shared folders using Universal Naming Convention (UNC) paths (e.g., \COMPUTER1\Share). The computers are all in the same workgroup and subnet. The technician checks the network settings and sees that all computers have the correct default gateway and DNS server configured. Which of the following should the technician verify?

Accepted Answer

NetBIOS over TCP/IP setting. NetBIOS over TCP/IP (NBT) is required for Windows to resolve NetBIOS names (like COMPUTER1) to IP addresses when using UNC paths. Even though ping works via DNS or hosts file, file sharing relies on NetBIOS name resolution unless DNS is configured to handle the single-label name. If NBT is disabled, the client cannot resolve the computer name in the UNC path, causing the access failure.

Answer

DHCP scope configuration

Answer

DNS suffix assignment

Answer

WINS server address

Question 9

A small office has a network with a router providing DHCP, an unmanaged switch, and several workstations. A user can access the internet but cannot print to a network printer that has a static IP address of 192.168.1.100. The user's workstation has an IP of 192.168.1.50. The printer is powered on and its network cable is connected to the switch. Which of the following should the technician do FIRST to troubleshoot the issue?

Accepted Answer

Check the printer's IP configuration by printing a network configuration page. The user can access the internet, confirming that the router's DHCP service and the switch's basic connectivity are functioning. The printer has a static IP of 192.168.1.100, which is on the same subnet as the workstation (192.168.1.50), so a layer 3 issue is unlikely. The first step should be to verify the printer's own IP configuration by printing a network configuration page, as the printer might have a misconfigured static IP, a different subnet, or a duplicate IP conflict that prevents communication.

Answer

Replace the Ethernet cable connecting the printer to the switch

Answer

Restart the printer

Answer

Check the switch port status by looking at the LED indicators

Question 10

A network technician is configuring a managed switch for a small office. The security requirement is that only specific authorized devices should be allowed to connect to the network via the switch ports. The technician wants to automatically learn the MAC addresses of devices as they connect and lock them to the port to prevent unauthorized devices from using the same port. Which switch feature should be configured to accomplish this?

Accepted Answer

Port security with sticky MAC. Port security with sticky MAC addresses allows the switch to dynamically learn MAC addresses from connected devices and then 'stick' them to the port, preventing any other device from using that port. This meets the requirement of automatically learning and locking authorized devices without manual MAC entry.

Answer

MAC filtering

Answer

VLAN tagging (IEEE 802.1Q)

Answer

Spanning Tree Protocol (STP)

Question 11

A small office wants to provide guest Wi-Fi access without allowing guests to access the internal company network. Which of the following is the BEST way to isolate guest traffic?

Accepted Answer

Configure a separate VLAN for guest traffic.. A separate VLAN (Virtual Local Area Network) segments guest traffic at Layer 2, preventing it from reaching the internal company network. By assigning guest Wi-Fi traffic to a dedicated VLAN with no inter-VLAN routing to the corporate VLAN, guests are logically isolated even though they share the same physical infrastructure.

Answer

Set a strong WPA2 password.

Answer

Enable MAC address filtering.

Answer

Disable SSID broadcast.

Question 12

A small office has a network with a router providing DHCP. A user's computer can access the internet but cannot print to a network printer by its IP address. Other computers on the same network can print to the printer. The technician pings the printer's IP from the affected computer and gets a response. Which of the following should the technician check NEXT?

Accepted Answer

Printer's port configuration on the computer (e.g., RAW vs LPR). Since the ping succeeds, Layer 3 connectivity to the printer is confirmed, ruling out network cabling and basic IP issues. The problem is specific to the print service on the affected computer, and the most common cause is an incorrect port configuration (e.g., using RAW port 9100 when the printer expects LPR on port 515, or vice versa). This mismatch prevents the print job from being accepted even though the printer is reachable.

Answer

Printer driver installation

Answer

Windows Firewall on the computer

Answer

Network cable between switch and printer

Question 13

A user reports that they can access the internet and browse websites normally, but they cannot access a shared network drive that is mapped to a static IP address (\10.10.10.50\shared). The technician can successfully ping 10.10.10.50 from the user's computer. Which of the following should the technician check NEXT?

Accepted Answer

Verify the Windows Firewall settings on the file server. Since the user can ping the file server at 10.10.10.50, basic IP connectivity and ARP resolution are working. The issue is specific to accessing the SMB share, which is blocked at the transport layer. Windows Firewall on the file server, by default, blocks inbound SMB traffic (TCP 445) on Public network profiles, even though ICMP (ping) is allowed. Checking the firewall rules on the server is the logical next step.

Answer

Check the DNS settings on the user's computer

Answer

Change the network profile on the user's computer from Public to Private

Answer

Reset the user's password and reconnect the mapped drive

Question 14

A network administrator sets up a new file server with a static IP address of 192.168.1.100. The server is connected to the company's main switch. For the first few hours, all clients can reach the server without issues. The next day, clients report they cannot connect to the server. The administrator finds that the server's IP address has been reassigned to a different device. The DHCP server is configured with a scope from 192.168.1.50 to 192.168.1.150. Which of the following is the BEST permanent solution to prevent this issue?

Accepted Answer

Change the server's static IP address to one outside the DHCP scope, such as 192.168.1.200. Option B is correct because moving the server's static IP to 192.168.1.200 places it outside the DHCP scope (192.168.1.50–150), eliminating the possibility of an IP address conflict with DHCP-assigned clients. This is a permanent solution that does not require changing the server's network configuration method or disabling DHCP for other devices.

Answer

Configure a DHCP reservation for the server's MAC address and set the server to obtain an IP automatically

Answer

Disable the DHCP server entirely and configure all devices with static IPs

Answer

Leave the static IP at 192.168.1.100 and instruct the DHCP server to ignore that address

Question 15

A network technician is configuring a managed switch for a small office. The security policy requires that only specific authorized devices should be allowed to connect to the network via the switch ports. The technician wants the switch to automatically learn the MAC addresses of the first device that connects to each port and then lock that port to only that MAC address. Any other device connecting to the same port should be blocked. Which switch feature should be configured to accomplish this?

Accepted Answer

Port security with sticky MAC addresses.. Port security with sticky MAC addresses allows the switch to dynamically learn the MAC address of the first device connected to a port and then 'stick' that address to the port's configuration. Once learned, the switch will block any other MAC address from communicating on that port, enforcing the security policy that only the authorized device can connect.

Answer

802.1X authentication.

Answer

DHCP snooping.

Answer

VLAN hopping prevention.