220-1101 Networking Practice Test 5 — 15 Questions

Question 1

A network administrator configures a new managed switch with 24 ports. All ports are in the same VLAN (VLAN 1) by default. The administrator then changes ports 1-12 to VLAN 10 and ports 13-24 to VLAN 20. Computers connected to ports in different VLANs are assigned IP addresses from the same DHCP server. Which of the following is a direct consequence of this configuration?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Computers in different VLANs cannot communicate unless a router is configured. VLANs segment a network at Layer 2, isolating broadcast domains. Without a router or Layer 3 switch configured for inter-VLAN routing, devices in different VLANs cannot communicate because they are on separate subnets and the switch will not forward frames between VLANs. The DHCP server can still assign IP addresses if it is connected to a port that is a member of both VLANs (e.g., a trunk port) or if a DHCP relay (ip helper-address) is configured on the router, but direct Layer 2 communication between VLANs is impossible without a routing device.

Answer

Computers in different VLANs can communicate directly at Layer 2

Answer

The switch will forward traffic between VLANs using internal routing

Answer

DHCP requests from VLAN 20 will be dropped by the switch

Question 2

A technician is setting up a small office network with a router that has integrated DHCP and a 24-port unmanaged switch. All computers are connected to the switch. Users report that they can access the internet but cannot see each other in Network Neighborhood. The technician checks and finds that all computers have IP addresses in the 192.168.1.0/24 range but with different subnet masks: some have 255.255.255.0, others have 255.255.0.0. Which of the following is the most likely cause?

Accepted Answer

The DHCP server is not assigning the correct subnet mask.. The DHCP server is configured to hand out IP addresses in the 192.168.1.0/24 range, but it is assigning inconsistent subnet masks (some /24, some /16). This causes computers with different subnet masks to calculate different network portions of their IP addresses, preventing them from seeing each other in Network Neighborhood even though they can reach the internet through the router's default gateway.

Answer

The switch is not forwarding broadcasts.

Answer

The router's firewall is blocking local traffic.

Answer

The computers are using different default gateways.

Question 3

A technician is setting up a small office network with a wireless router serving as the DHCP server and an unmanaged 24-port switch. All desktop computers are connected to the switch via Ethernet cables. The computers can access the internet without any issues, but they cannot see each other in the network discovery list or ping each other by IP address. The technician checks the IP configuration on one computer and finds it has an IP address of 192.168.1.10 with a subnet mask of 255.255.255.0. The technician can ping the router (192.168.1.1). Which of the following is the MOST likely cause of this issue?

Accepted Answer

The Windows firewall on each computer is blocking inbound connections.. The computers can access the internet and ping the router, confirming that the DHCP server is correctly assigning IP addresses, subnet masks, and default gateways, and that the switch is forwarding traffic properly. The inability to ping each other by IP address or see each other in network discovery strongly indicates that the Windows firewall on each computer is blocking inbound ICMP and NetBIOS/LLMNR traffic, which are required for ping responses and network discovery. This is a common default behavior of Windows Firewall in certain network profiles (e.g., Public), which blocks inbound connections unless explicitly allowed.

Answer

The DHCP server is not assigning the correct default gateway.

Answer

The switch is not properly forwarding broadcast traffic between ports.

Answer

The computers are receiving IP addresses from different VLANs.

Question 4

A user reports that they can access the internet by typing an IP address (e.g., 8.8.8.8) into their web browser, but they cannot access websites using domain names (e.g., www.example.com). Which of the following network services is MOST likely not functioning correctly?

Accepted Answer

Domain Name System (DNS). The user can reach the internet via IP address but not by domain name, which indicates that the system cannot resolve human-readable names to IP addresses. The Domain Name System (DNS) is the service responsible for this translation, so a failure in DNS resolution is the most likely cause. DHCP, HTTP, and FTP are unrelated to name resolution.

Answer

Dynamic Host Configuration Protocol (DHCP)

Answer

Hypertext Transfer Protocol (HTTP)

Answer

File Transfer Protocol (FTP)

Question 5

A user reports that they can access internal network resources and the internet by IP address, but cannot browse websites using domain names. Other users on the same network can browse the internet normally. Which of the following should the technician do FIRST?

Accepted Answer

Flush the DNS cache on the user's computer. The user can access resources by IP address but not by domain name, which indicates a DNS resolution failure. Since other users on the same network can browse normally, the issue is isolated to this specific workstation. Flushing the DNS cache (ipconfig /flushdns) clears any corrupted or stale DNS entries that may be preventing successful name resolution, making it the quickest and most logical first step.

Answer

Check the DHCP server configuration

Answer

Restart the DNS service on the domain controller

Answer

Replace the network cable

Question 6

A technician is troubleshooting a desktop computer that cannot access the internet. The computer is configured with a static IP address of 10.0.0.15, subnet mask 255.255.255.0, and default gateway 10.0.0.1. The technician can ping the default gateway successfully but cannot ping the public IP address 8.8.8.8. Other devices on the same network can access the internet normally. Which of the following is the MOST likely cause?

Accepted Answer

A firewall on the computer is blocking outbound traffic. The computer can ping the default gateway (10.0.0.1) successfully, which confirms that Layer 2 and Layer 3 connectivity to the local network is working, and the static IP configuration is correct. Since other devices on the same network can access the internet normally, the issue is isolated to this specific computer. A local firewall (e.g., Windows Defender Firewall) blocking outbound ICMP or TCP traffic to public IPs like 8.8.8.8 would prevent internet access while still allowing local subnet communication, making option C the most likely cause.

Answer

The DHCP server is not functioning

Answer

The default gateway is not configured correctly on the computer

Answer

The network cable is faulty

Question 7

A user reports that they can access internal company web servers by IP address (e.g., http://10.0.1.50) but not by hostname (e.g., http://intranet). Other users on the same network can access the intranet by hostname without issue. The technician checks the computer's IP settings and sees that the DNS server address is manually set to 8.8.8.8. Which of the following is the MOST likely cause?

Accepted Answer

The computer is using an external DNS server that cannot resolve internal hostnames. The computer has its DNS server manually set to 8.8.8.8, which is a public external DNS server operated by Google. External DNS servers like 8.8.8.8 have no records for internal private hostnames (e.g., 'intranet'), so they cannot resolve them. Since the user can access internal servers by IP address but not by hostname, and other users on the same network can resolve the hostname (likely using an internal DNS server), the issue is specifically that this computer is using an external DNS server that cannot resolve internal hostnames.

Answer

The computer's subnet mask is incorrect

Answer

The internal DNS server is unreachable

Answer

The DHCP scope is exhausted

Question 8

A network administrator recently installed a new firewall to replace an older router. After the installation, users can access the internet but cannot reach internal web servers by hostname (e.g., http://intranet). They can, however, access those servers by IP address. The administrator verifies that the DNS server is functioning and other traffic between the LAN and the internal server VLAN is allowed. What is the MOST likely cause of this issue?

Accepted Answer

The firewall is blocking DNS traffic (UDP/TCP port 53) between the LAN and the internal DNS server. The firewall is blocking DNS traffic (UDP/TCP port 53) between the LAN and the internal DNS server. Since users can access the internet (external DNS queries likely go through a different path or the firewall allows outbound DNS), but internal hostname resolution fails, the most likely cause is that the firewall's rules are blocking DNS queries to the internal DNS server. This explains why IP-based access works (no DNS needed) while hostname-based access fails.

Answer

The VLAN configuration on the switch is preventing hostname resolution

Answer

The DHCP server is not assigning the correct DNS server address

Answer

The default gateway address has been misconfigured on the firewall

Question 9

A technician is troubleshooting a small office network where Windows computers can ping each other by IP address but cannot access shared folders using Universal Naming Convention (UNC) paths (e.g., \COMPUTER1\Share). The computers are all in the same workgroup and subnet. The technician checks the network settings and sees that all computers have the correct default gateway and DNS server configured. Which of the following should the technician verify?

Accepted Answer

NetBIOS over TCP/IP setting. NetBIOS over TCP/IP (NBT) is required for Windows to resolve NetBIOS names (like COMPUTER1) to IP addresses when using UNC paths. Even though ping works via DNS or hosts file, file sharing relies on NetBIOS name resolution unless DNS is configured to handle the single-label name. If NBT is disabled, the client cannot resolve the computer name in the UNC path, causing the access failure.

Answer

DHCP scope configuration

Answer

DNS suffix assignment

Answer

WINS server address

Question 10

A network technician is configuring a managed switch for a small office. The security requirement is that only specific authorized devices should be allowed to connect to the network via the switch ports. The technician wants to automatically learn the MAC addresses of devices as they connect and lock them to the port to prevent unauthorized devices from using the same port. Which switch feature should be configured to accomplish this?

Accepted Answer

Port security with sticky MAC. Port security with sticky MAC addresses allows the switch to dynamically learn MAC addresses from connected devices and then 'stick' them to the port, preventing any other device from using that port. This meets the requirement of automatically learning and locking authorized devices without manual MAC entry.

Answer

MAC filtering

Answer

VLAN tagging (IEEE 802.1Q)

Answer

Spanning Tree Protocol (STP)

Question 11

A small office wants to provide guest Wi-Fi access without allowing guests to access the internal company network. Which of the following is the BEST way to isolate guest traffic?

Accepted Answer

Configure a separate VLAN for guest traffic.. A separate VLAN (Virtual Local Area Network) segments guest traffic at Layer 2, preventing it from reaching the internal company network. By assigning guest Wi-Fi traffic to a dedicated VLAN with no inter-VLAN routing to the corporate VLAN, guests are logically isolated even though they share the same physical infrastructure.

Answer

Set a strong WPA2 password.

Answer

Enable MAC address filtering.

Answer

Disable SSID broadcast.

Question 12

A small office has a network with a router providing DHCP. A user's computer can access the internet but cannot print to a network printer by its IP address. Other computers on the same network can print to the printer. The technician pings the printer's IP from the affected computer and gets a response. Which of the following should the technician check NEXT?

Accepted Answer

Printer's port configuration on the computer (e.g., RAW vs LPR). Since the ping succeeds, Layer 3 connectivity to the printer is confirmed, ruling out network cabling and basic IP issues. The problem is specific to the print service on the affected computer, and the most common cause is an incorrect port configuration (e.g., using RAW port 9100 when the printer expects LPR on port 515, or vice versa). This mismatch prevents the print job from being accepted even though the printer is reachable.

Answer

Printer driver installation

Answer

Windows Firewall on the computer

Answer

Network cable between switch and printer

Question 13

A user reports that they can access the internet and browse websites normally, but they cannot access a shared network drive that is mapped to a static IP address (\10.10.10.50\shared). The technician can successfully ping 10.10.10.50 from the user's computer. Which of the following should the technician check NEXT?

Accepted Answer

Verify the Windows Firewall settings on the file server. Since the user can ping the file server at 10.10.10.50, basic IP connectivity and ARP resolution are working. The issue is specific to accessing the SMB share, which is blocked at the transport layer. Windows Firewall on the file server, by default, blocks inbound SMB traffic (TCP 445) on Public network profiles, even though ICMP (ping) is allowed. Checking the firewall rules on the server is the logical next step.

Answer

Check the DNS settings on the user's computer

Answer

Change the network profile on the user's computer from Public to Private

Answer

Reset the user's password and reconnect the mapped drive

Question 14

A network administrator configures a small office with a router providing DHCP. A user's computer gets an IP address of 169.254.1.5. The user cannot access the internet. The technician checks the network cable and sees link lights. Which of the following is the MOST likely cause?

Accepted Answer

The DHCP server is unreachable.. The IP address 169.254.1.5 is an Automatic Private IP Addressing (APIPA) address, which Windows assigns when a DHCP discovery broadcast fails to receive a response. Since the router is configured to provide DHCP but the client ended up with an APIPA address, the DHCP server is unreachable — likely due to a misconfigured DHCP relay, a disabled DHCP service on the router, or a VLAN mismatch blocking the broadcast. The link lights confirm Layer 1 connectivity, so the issue is at Layer 3 or above.

Answer

Incorrect subnet mask.

Answer

Duplicate IP address on the network.

Answer

DNS server misconfiguration.

Question 15

A network administrator configures a router with VLANs. Devices on VLAN 10 can successfully ping a web server (IP 192.168.20.10) on VLAN 20. However, when users on VLAN 10 attempt to access the web server via a browser using its IP address, the connection times out. The router's ACLs permit ICMP and TCP/80 traffic between VLANs. Which of the following should the administrator check NEXT?

Accepted Answer

Check if the web server's host firewall is blocking HTTP traffic. Since ICMP (ping) succeeds and the router's ACLs explicitly permit TCP/80, the issue is likely at the web server itself. The server's host firewall (e.g., Windows Defender Firewall, iptables) may be blocking inbound HTTP traffic while allowing ICMP, causing the browser connection to time out. This is the next logical check because the network path is verified working for ICMP and the ACL is confirmed permissive for TCP/80.

Answer

Verify the DHCP address assignment on VLAN 20

Answer

Review the router's ACLs for any implicit deny rules

Answer

Confirm that DNS resolution for the web server's hostname is correct