CCNA Network Services and Security Practice Test 7 — 15 Questions

Question 1

Match each term to the question it most directly answers.

Accepted Answer

Default gateway. The term 'Default gateway' is correctly associated with enabling communication with other networks, but the stem as written provides no questions to match to the terms. The question must be revised to include the actual questions or prompts for matching.

Answer

MAC address

Answer

ARP

Answer

Subnet mask

Question 2

Which type of ACL filters traffic based only on source IP address?

Accepted Answer

Standard ACL. A standard ACL matches only the source IP address of a packet. Extended ACLs can match source and destination IP addresses, protocols, and port numbers. Named ACLs are not a separate ACL type; they are simply a way to reference a numbered standard or extended ACL by name. Implicit deny is a default behavior that discards traffic not matching any access control entry, not an ACL type.

Answer

Extended ACL

Answer

Named ACL

Answer

Implicit deny

Question 3

Match each security concept to its most accurate meaning.

Accepted Answer

Phishing: A social engineering attack that tricks users into revealing sensitive information such as usernames and passwords.. In this matching exercise, each security concept is paired with its correct definition. Phishing is a social engineering attack using deceptive emails or messages to trick users into revealing sensitive information. Ransomware is malware that encrypts data and demands payment for decryption. DDoS (Distributed Denial-of-Service) overwhelms a target with traffic from multiple sources to disrupt service. Man-in-the-Middle (MitM) intercepts communication between two parties. SQL Injection inserts malicious SQL queries into input fields to manipulate databases. Zero-Day Exploit attacks a previously unknown vulnerability. The correct pairs are as given.

Answer

Phishing: A type of malware that encrypts files and demands payment for decryption.

Answer

Phishing: An attack that overwhelms a network with traffic to disrupt services.

Answer

Phishing: An attack that intercepts communications between two parties to steal data.

Question 4

Match each network-assurance item to its most accurate role.

Accepted Answer

Uptime: Measures the percentage of time a network device or link has been operational without failure.. In networking, uptime refers to the duration or percentage of time that a device or link has been operational without any failure. It is a measure of reliability and availability, not a measure of data transfer (throughput), packet delay (latency), or delay variation (jitter). Therefore, option A is correct because it defines uptime as the percentage of time a network device or link has been operational without failure. Options B, C, and D incorrectly associate uptime with throughput, jitter, and latency respectively.

Answer

Uptime: Measures the amount of data successfully transmitted over a network link in a given time period.

Answer

Uptime: Measures the variation in delay (jitter) experienced by packets traversing a network.

Answer

Uptime: Measures the average time it takes for a packet to travel from source to destination.

Question 5

Match each service to the symptom it most directly relates to when troubleshooting.

Accepted Answer

DNS: Users cannot access the website by name but can by IP. Each service is paired with a symptom directly related to its malfunction.

Question 6

Match each management-plane security item to its most accurate purpose.

Accepted Answer

SSH encrypts remote access to prevent eavesdropping and unauthorized command interception.. SSH encrypts remote access, AAA handles authentication, authorization, and accounting, ACLs filter traffic, and RBAC restricts commands by role. All are correct matches for management-plane security items.

Question 7

Match each operations term to its most accurate meaning.

Accepted Answer

SLA (Service Level Agreement). The question cannot be answered as written because there is no list of meanings to match. The marked answer A cannot be justified without a matching prompt.

Answer

MTTR (Mean Time to Repair)

Answer

MTBF (Mean Time Between Failures)

Answer

RTO (Recovery Time Objective)

Question 8

Match each operational symptom to the technology most likely associated with investigating it.

Accepted Answer

High CPU utilization on router: Routing protocol issues or excessive routing updates.. High CPU utilization on a router is often caused by routing protocol issues such as excessive route calculations or frequent updates, making it the primary symptom to investigate routing processes. Packet loss on a link is typically due to physical layer problems (e.g., faulty cables) or congestion, which are the first areas to check. Slow application response is most likely related to network latency or bandwidth saturation, as these directly affect data delivery speed. Interface flapping is commonly caused by faulty hardware or duplex mismatch, leading to repeated link state changes. Each symptom points directly to its most probable underlying cause, and troubleshooting should focus on those areas.

Question 9

Match each technology to the kind of visibility or function it most directly provides.

Accepted Answer

SIEM: Provides centralized log analysis and correlation.. SIEM (Security Information and Event Management) aggregates logs and events from multiple sources, providing centralized log analysis and correlation to detect security incidents. IDS (Intrusion Detection System) monitors network traffic for suspicious patterns and alerts administrators but does not block traffic. Firewall enforces access control policies, allowing or denying traffic based on rules. DLP (Data Loss Prevention) monitors and prevents unauthorized transmission of sensitive data, such as credit card numbers or intellectual property.

Question 10

A host receives an IP address, subnet mask, default gateway, and DNS server automatically when it joins the network. Which service is most directly responsible for delivering that bundle of settings?

Accepted Answer

DHCP. DHCP is most directly responsible because it is designed to provide hosts with IP configuration parameters automatically. In practical terms, this often includes the address, mask, gateway, and DNS server information needed for ordinary operation. That is exactly why DHCP is such a central end-host service.

This is one of the most foundational services in enterprise client connectivity.

Answer

Syslog

Answer

NTP

Answer

GRE

Question 11

Match each service to the problem it most directly helps solve.

Accepted Answer

DHCP: Automatically assigns IP addresses to devices, solving manual configuration.. DHCP automatically assigns IP addresses and other network parameters to devices, eliminating the need for manual configuration. DNS translates human-readable domain names into IP addresses, so users do not have to remember numeric IPs. NAT allows multiple devices on a private network to share a single public IP address, helping to conserve IPv4 address space. VPN creates a secure, encrypted tunnel over the internet, protecting data transmitted between remote networks. Each service directly solves the problem described in its corresponding option.

Question 12

Match each troubleshooting observation to the most likely primary area to investigate first.

Accepted Answer

High CPU utilization on router: Routing protocol issues. High CPU utilization on a router often results from routing protocol issues such as routing loops, excessive updates, or instability, making routing protocol analysis the primary investigation. Intermittent connectivity on a single VLAN is frequently caused by Spanning Tree Protocol misconfiguration, leading to topology changes and temporary connectivity loss, so STP should be checked first. Slow file transfer between two sites is typically due to WAN bandwidth limitations or high latency, necessitating bandwidth and latency analysis. Inability to ping a remote server usually points to Layer 3 routing problems or firewall rules blocking ICMP, so routing and firewall configuration should be the initial focus.

Question 13

Match each symptom to the first service area most likely involved.

Accepted Answer

Slow network performance: Network infrastructure. Slow network performance is typically caused by issues in the network infrastructure such as congestion, faulty hardware, or misconfiguration in routers and switches. Application crashes are often due to software bugs or resource constraints, making application support the appropriate service area. Inability to log in points to identity and access management, which handles authentication and authorization. Data loss scenarios are addressed by data protection and backup services to restore lost information.

Question 14

Based on the exhibit, what is the strongest next troubleshooting focus?

Accepted Answer

DNS or name-resolution configuration for the host or service. The strongest next troubleshooting focus is DNS. In practical terms, the host can already reach the destination by IP address, which means switching, routing, and general Layer 3 connectivity are working for that path. The failure occurs only when the hostname is used, so the most likely remaining fault domain is name resolution rather than the data path itself.

This is a classic 'what do you check next' support question and very close to real-world helpdesk and network triage logic.

Answer

STP root bridge priority on the access switch

Answer

PPP encapsulation on the WAN edge

Answer

EtherChannel member consistency on the distribution switches

Question 15

Match each operational tool to the kind of question it most directly helps answer.

A: SNMP: What is the current CPU utilization of a router? [CORRECT]
B: Syslog: Why did the interface go down at 3:00 AM? [CORRECT]
C: NetFlow: Which applications are consuming the most bandwidth? [CORRECT]
D: IP SLA: What is the one-way latency between two sites? [CORRECT]

Accepted Answer

SNMP: What is the current CPU utilization of a router? [CORRECT]. SNMP provides real-time device metrics such as CPU utilization. Syslog captures event logs, making it ideal for diagnosing interface issues at a specific time. NetFlow analyzes traffic flows to show bandwidth usage by application. IP SLA measures network performance metrics like latency between sites.