100-150 Practice Test 19 — 15 Questions

Question 1

A small business owner wants to ensure that internal financial records are only viewed by authorized management personnel. Which pillar of the CIA triad is primarily addressed by implementing restricted folder permissions and encryption for these files?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Confidentiality. Confidentiality ensures that sensitive information is accessible only to those authorized to view it. In a networking context, this involves using access control lists, encryption, and strict authentication methods. Protecting financial data from unauthorized eyes is a fundamental security requirement for any organization to prevent data leaks and maintain privacy.

Answer

Integrity

Answer

Availability

Answer

Accounting

Question 2

Which THREE conditions are common causes of 'Input Errors' appearing on a Cisco switch interface? (Choose three.)

Accepted Answer

Duplex mismatch between the switch and the connected host.. Input errors on an interface indicate that the switch received frames it could not process correctly. This is often a sign of physical layer degradation or configuration mismatches. Monitoring these counters is a vital part of proactive network maintenance, as they often precede a total link failure or significantly impact application performance due to retransmissions.

Answer

Excessive broadcast traffic originating from a loop.

Answer

The interface being administratively shut down.

Question 3

A network engineer is reviewing how a Cisco switch builds and maintains its MAC address table as frames arrive from attached devices. Which TWO statements correctly describe this Layer 2 forwarding behavior? (Choose two.)

Accepted Answer

If the destination MAC address is not in the table, the switch floods the frame out all ports except the one it arrived on.. A Layer 2 switch learns by examining the source MAC address of each incoming frame and mapping it to the ingress port. When the destination MAC is absent from the table, the switch floods the frame out all other ports in the VLAN so delivery can still occur. These two behaviors together allow the table to populate dynamically and traffic to be forwarded efficiently once paths are known.

Answer

The switch forwards a frame only after the entire frame has been received and the CRC verified, regardless of configuration.

Answer

The switch assigns an IP address to each connected device and stores it in the MAC address table.

Answer

MAC address table entries are permanent and are never removed unless the administrator manually clears them.

Question 4

A user cannot reach a web server. You perform a ping and it fails, but a traceroute shows the packets reaching the last hop before the server. What does this indicate?

Accepted Answer

The destination server is likely unreachable or blocking ICMP.. A successful traceroute to the last hop before the destination, combined with a failed ping, indicates the path is intact up to that point but the final destination is not responding to ICMP echo requests. This commonly means the server is down, its firewall is blocking ICMP, or it is otherwise unreachable at Layer 3. The traceroute output confirms intermediate routers are forwarding traffic correctly, so the problem is localized to the destination host or its immediate network.

Answer

The intermediate router is down.

Answer

The default gateway is misconfigured.

Answer

The DNS server is down.

Question 5

Which of the following describes the purpose of a Subnet Mask in an IP configuration?

Accepted Answer

It identifies the network and host portions of the IP address.. A subnet mask is a 32-bit number that, when combined with an IP address via a bitwise AND operation, reveals the network portion of the address. The remaining bits identify the host portion, enabling devices to determine whether a destination is local or remote.

Answer

It assigns a unique identity to the NIC hardware.

Answer

It increases the transmission speed of the interface.

Answer

It encrypts data packets before transmission.

Question 6

A company is upgrading its office network to support 10 Gbps speeds to the desktop over existing copper cabling distances of up to 100 meters. Which cable category is the minimum requirement for this objective?

Accepted Answer

Category 6a. Category 6a (augmented Cat6) is the minimum copper cabling standard that supports 10GBASE-T over the full 100-meter distance. Cat6 can support 10 Gbps but only up to 55 meters, and Cat5e is limited to 2.5/5 Gbps at 100 m. Cat6a extends the usable bandwidth to 500 MHz and is specifically designed for 10GBASE-T at 100 meters.

Answer

Category 5e

Answer

Category 6

Answer

Category 3

Question 7

An enterprise network design incorporates Power over Ethernet to supply power to VoIP desk phones and wireless access points. A technician notes that the power supply unit inside the switch is operating near maximum capacity. Which feature should be configured to prevent unexpected power drops?

Accepted Answer

Configure port-level PoE priority to ensure critical devices retain power during budget exhaustion events.. Power over Ethernet policing and priority mechanisms allow administrators to manage power budgets intelligently. Configuring port power priorities ensures that if total power consumption exceeds switch power supply limits, critical infrastructure devices maintain power while less critical ports are shut down safely.

Answer

Enable BPDU Guard across all access switch ports connected to powered VoIP telephone hardware.

Answer

Activate Storm Control with strict multicast drop thresholds to reduce switch power draw.

Answer

Implement Port Security with maximum static MAC address bindings to restrict power usage.

Question 8

A network engineer is troubleshooting high CPU utilization on a core switch caused by excessive broadcast traffic across multiple VLANs. Which infrastructure technology should be deployed to contain broadcast domains while maintaining Layer 3 connectivity?

Accepted Answer

Configure inter-VLAN routing using Layer 3 interfaces to restrict broadcast propagation between separate logical segments.. Implementing routing between VLANs using switched virtual interfaces or routed ports naturally isolates broadcast domains. Broadcast frames operate strictly at Layer 2 and are dropped by routers and Layer 3 switches, preventing localized broadcast storms from propagating across the enterprise network infrastructure and degrading overall system performance.

Answer

Deploy Rapid Spanning Tree Protocol across all core trunk links to prune redundant physical paths dynamically.

Answer

Implement Port Security with maximum address limits on all access ports to drop unauthorized endpoint broadcasts.

Answer

Activate Storm Control with custom rising and falling threshold percentages for multicast and broadcast traffic.

Question 9

A company requires employees to use both a password and a one-time code sent to their mobile device to access the corporate VPN. Which security concept is being implemented?

Accepted Answer

Multi-Factor Authentication (MFA). Multi-Factor Authentication (MFA) significantly improves security by requiring two or more independent credentials for identity verification. This makes it much harder for an attacker to gain access, as stealing a password alone is no longer sufficient. MFA is a standard requirement for protecting remote access and sensitive data.

Answer

Single Sign-On (SSO)

Answer

Biometric Authentication

Answer

Role-Based Access Control (RBAC)

Question 10

A network administrator needs to implement a VPN solution. Which TWO types of VPNs are commonly used in enterprise environments? (Choose TWO).

Accepted Answer

Site-to-site VPN. Virtual Private Networks (VPNs) create secure, encrypted tunnels over untrusted networks like the internet. They are essential for protecting data in transit and extending the reach of a private network to distant locations or mobile users. Technicians must understand these types to select the appropriate solution for business requirements.

Answer

VLAN VPN

Answer

DMZ VPN

Answer

Hub-and-Spoke VPN

Question 11

A technician is troubleshooting a connectivity issue where a host can ping its default gateway but cannot reach a server on a different subnet. At which OSI layer is the routing decision being made?

Accepted Answer

Network Layer. Routing decisions are primarily handled at the Network Layer (Layer 3) of the OSI model. This layer is responsible for logical addressing and determining the best path for data to travel across interconnected networks. Understanding this layer is crucial for troubleshooting connectivity issues that extend beyond a local broadcast domain or a single physical segment.

Answer

Physical Layer

Answer

Data Link Layer

Answer

Transport Layer

Question 12

In an IPv6 environment, which address type is automatically configured on every IPv6-enabled interface and is used for neighbor discovery and router solicitation?

Accepted Answer

Link-Local Address. A Link-Local Address (LLA) is automatically configured on every IPv6-enabled interface, even before any router advertisement is received. It is formed using the fe80::/10 prefix and is required for Neighbor Discovery Protocol (NDP) operations including router solicitation, router advertisement, and address resolution.

Answer

Unique Local Address

Answer

Global Unicast Address

Answer

Anycast Address

Question 13

A technician connects a laptop directly to a switch using a straight-through cable, and the link light immediately turns green. Which feature allowed this connection to work even if the port traditionally required a crossover cable?

Accepted Answer

Auto-MDIX. Auto-MDIX (Automatic Medium-Dependent Interface Crossover) is a feature that allows a switch port to automatically detect the required cable type (straight-through or crossover) and configure the internal transmit and receive pairs accordingly. This simplifies deployment by allowing technicians to use any standard Ethernet cable for most connections.

Answer

Auto-Negotiation

Answer

Power over Ethernet (PoE)

Answer

VLAN Trunking

Question 14

Which layer of the OSI model is responsible for determining the best physical path for data to travel across multiple interconnected networks using logical addressing?

Accepted Answer

Network Layer (Layer 3). The Network Layer is a pivotal part of the OSI model, focusing on the movement of data between different networks. It utilizes logical addresses, such as IP addresses, to identify source and destination hosts. Routers operate at this layer, maintaining routing tables and using protocols to find the most efficient path for data, which is essential for global connectivity.

Answer

Data Link Layer (Layer 2)

Answer

Transport Layer (Layer 4)

Answer

Physical Layer (Layer 1)

Question 15

A network technician is troubleshooting a connectivity issue where a workstation can communicate with local devices but cannot access any resources on a different subnet. After verifying the IP address and subnet mask, which component should be investigated next to ensure the packet can leave the local segment?

Accepted Answer

The default gateway address configured on the workstation.. The default gateway is the router interface that forwards packets destined for remote subnets. If the workstation's default gateway is missing, incorrect, or unreachable, the packet cannot leave the local segment even though local communication works. Since IP and subnet mask are verified, the next logical check is the gateway configuration.

Answer

The MAC address table of the local access switch.

Answer

The physical layer integrity of the crossover cable.

Answer

The DNS server settings for name resolution.