100-150 Practice Test 22 — 15 Questions

Question 1

Which THREE of the following are characteristics of the Cisco IOS CLI environment that facilitate efficient network administration?

Accepted Answer

Context-sensitive help using the question mark symbol.. The Cisco IOS CLI provides robust tools for configuration and troubleshooting, including contextual help, command completion, and error feedback. These features are designed to speed up the work of network engineers by reducing the need for documentation lookups and minimizing syntax errors. Mastering these CLI features is essential for any technician tasked with managing Cisco infrastructure, as it improves accuracy and efficiency during high-pressure maintenance windows.

Answer

Automatic translation of all commands into GUI equivalents.

Answer

Direct integration with external cloud storage for backups.

Question 2

An administrator wants to implement a security policy that prevents unauthorized devices from accessing the network via open switch ports. Which feature should be enabled to achieve this?

Accepted Answer

Port Security. Port security is a critical Layer 2 feature that limits the number of MAC addresses allowed on a port or binds specific MAC addresses to a port. This prevents MAC flooding attacks and ensures that only authorized hardware can connect to the infrastructure. By enforcing these policies at the access layer, administrators significantly reduce the risk of unauthorized lateral movement within the network.

Answer

VLAN Trunking Protocol

Answer

Spanning Tree Protocol

Answer

Dynamic ARP Inspection

Question 3

Which type of fiber optic cabling is characterized by a core diameter of approximately 9 microns and is optimized for long-distance transmissions using a single path of light?

Accepted Answer

Single-mode fiber. Single-mode fiber (SMF) has a very small core, typically 9 microns, which forces light into a single path. This eliminates modal dispersion, allowing signals to travel much further than multi-mode fiber. Understanding these core differences helps technicians differentiate between the two main types of fiber used in modern network infrastructures.

Answer

OM3 Multi-mode fiber

Answer

OM1 Multi-mode fiber

Answer

Shielded Twisted Pair

Question 4

A company issues employees corporate laptops that contain confidential project data. The security policy requires that if a laptop is lost or stolen, the data on its drive cannot be read even if the disk is removed and attached to another computer. Which control should be implemented?

Accepted Answer

Enable full-disk encryption using a TPM-backed key on each laptop. Protecting data when the storage device is physically removed requires encryption tied to hardware. Full-disk encryption with a TPM-sealed key means the volume cannot be unlocked on another machine, so stolen drives yield only ciphertext. Lock screens, firmware passwords, and file permissions all depend on the original system or operating system to enforce them and are bypassed once the disk is relocated.

Answer

Set NTFS permissions so only the employee's account can open the project folders

Answer

Require a BIOS or UEFI power-on password

Answer

Configure a screen saver that locks the desktop after five minutes

Question 5

A company is deploying IoT (Internet of Things) smart sensors throughout a large agriculture field to monitor soil moisture. Which wireless technology is most appropriate for these endpoints if they must operate on battery power for several years while transmitting data over several kilometers?

Accepted Answer

LoRaWAN. LoRaWAN is a Low-Power Wide-Area Network (LPWAN) protocol built specifically for battery-operated IoT endpoints that need multi-year lifespans and multi-kilometer range. It uses chirp spread spectrum modulation in sub-GHz ISM bands (e.g., 868 MHz in EU, 915 MHz in US), achieving 2–15 km range at very low data rates (0.3–50 kbps) with a single coin-cell battery lasting 5–10 years. This combination of long range and ultra-low power is exactly what soil-moisture sensors in a large field require.

Answer

Wi-Fi (802.11ax)

Answer

Bluetooth Low Energy (BLE)

Answer

Gigabit Ethernet

Question 6

When a network administrator uses the 'ping' command to test connectivity, what is the primary purpose of the ICMP 'Echo Request' and 'Echo Reply' process?

Accepted Answer

To verify reachability and basic network connectivity.. ICMP is a control protocol used for reporting network conditions. The 'Echo Request' and 'Echo Reply' messages are specifically designed to verify end-to-end connectivity between two IP hosts. When a request is sent, the destination host replies, confirming that the path is active and the host is reachable. This is the simplest way to confirm that layers 1, 2, and 3 are functioning correctly.

Answer

To establish a TCP session for data transfer.

Answer

To resolve a hostname to an IP address.

Answer

To encrypt packets for secure communication.

Question 7

Which THREE features are provided by the Transport layer of the OSI model? (Choose three.)

Accepted Answer

Flow control. Option A (Flow control) is correct because the Transport layer manages end-to-end flow control, using mechanisms like windowing in TCP to prevent a fast sender from overwhelming a slow receiver. Option C (Segmentation and reassembly) is correct because the Transport layer breaks application data into segments at the sender and reassembles them in the correct order at the destination, using sequence numbers. Option D (Error recovery) is correct because the Transport layer detects lost, corrupted, or out-of-order segments and retransmits them (e.g., TCP acknowledgments and retransmission timers) to provide reliable delivery. Option B (Physical addressing) does not belong because physical (MAC) addressing is handled by the Data Link layer. Option E (Path selection) does not belong because routing and path selection are functions of the Network layer.

Answer

Physical addressing

Answer

Path selection

Question 8

An organization is using Variable Length Subnet Masking (VLSM) to optimize their 10.0.0.0/24 space. They need one subnet for 100 hosts and two subnets for 50 hosts each. Which of the following set of subnets correctly fulfills this requirement without overlapping?

Accepted Answer

10.0.0.0/25, 10.0.0.128/26, 10.0.0.192/26. VLSM allows for efficient use of IP space by using different masks for different subnets. To accommodate 100 hosts, a /25 (128 addresses) is needed. To accommodate 50 hosts, /26 subnets (64 addresses) are needed. 10.0.0.0/25 covers 0-127. Then, 10.0.0.128/26 covers 128-191, and 10.0.0.192/26 covers 192-255.

Answer

10.0.0.0/25, 10.0.0.64/26, 10.0.0.128/26

Answer

10.0.0.0/24, 10.0.0.128/26, 10.0.0.192/26

Answer

10.0.0.0/26, 10.0.0.64/26, 10.0.0.128/25

Question 9

A company is deploying a new Voice over IP (VoIP) system and needs to minimize latency. Which transport protocol is most suitable for the real-time voice stream, and why?

Accepted Answer

UDP. UDP is the most suitable transport protocol for real-time VoIP voice streams because it is connectionless and has minimal overhead, avoiding the retransmission delays and head-of-line blocking that TCP introduces. Voice traffic prioritizes low latency and jitter over guaranteed delivery — a lost packet is better discarded than retransmitted late.

Answer

TCP

Answer

ICMP

Answer

HTTP

Question 10

Which statement correctly describes the function of a default gateway in a host's TCP/IP configuration?

Accepted Answer

It is the router used to access remote networks.. A default gateway is the router interface on the local subnet that a host sends packets to when the destination IP is not on the same local network. Without it, a host can only communicate with devices on its own subnet. The gateway performs Layer 3 routing to forward traffic toward remote networks.

Answer

It resolves domain names into IP addresses.

Answer

It assigns IP addresses to devices on the network.

Answer

It manages data link layer frame switching.

Question 11

A user reports they can access the Internet but cannot connect to a specific internal accounting server. Other users in the same department can access the server without issue. What should the technician check first?

Accepted Answer

An Access Control List (ACL) blocking the user's IP.. When a single user is restricted from a specific resource that others can reach, the issue is often a specific security policy or local configuration. Access Control Lists (ACLs) can be applied based on source IP addresses, meaning one specific host could be blocked while its neighbors are allowed. This requires investigating the router or firewall policies.

Answer

The status of the default gateway.

Answer

The health of the DNS server.

Answer

A duplex mismatch on the user's switch port.

Question 12

Refer to the exhibit. If a third device with a different MAC address is connected to this port, what will occur?

Accepted Answer

The port will transition to an err-disabled state.. The configuration specifies a maximum of 2 learned MAC addresses, with a violation mode of shutdown. When the limit is exceeded by a third device, the port will immediately transition to the err-disabled state. This is a vital security feature to prevent unauthorized devices from connecting to the switch and to mitigate MAC flooding attacks that could compromise the integrity of the Layer 2 network.

Answer

The port will remain active and log a syslog message.

Answer

The packet from the third device will be dropped, but the port remains active.

Answer

The switch will allow the third device and remove the oldest MAC.

Question 13

Refer to the exhibit. What is the maximum number of usable host IP addresses available on this subnet?

Accepted Answer

62. The subnet is defined as a /26 mask. A /26 mask uses 6 bits for hosts (32 - 26 = 6). The formula for usable hosts is 2^6 - 2. This equals 64 minus 2, which results in 62 usable host addresses. Correctly calculating host capacity is vital for capacity planning and ensuring that subnets are sized appropriately to avoid IP address exhaustion within the enterprise network.

Answer

30

Answer

64

Answer

126

Question 14

A network engineer is configuring a large subnet for a campus and uses the 172.16.0.0/23 prefix. What is the last usable host address available in this subnet?

Accepted Answer

172.16.1.254. A /23 subnet has 9 host bits (32 - 23 = 9), giving 2^9 - 2 = 510 usable hosts. The subnet 172.16.0.0/23 spans 172.16.0.0 through 172.16.1.255, with the broadcast address at 172.16.1.255 and the last usable host at 172.16.1.254.

Answer

172.16.0.254

Answer

172.16.1.255

Answer

172.16.2.254

Question 15

A network administrator wants to prevent users on the corporate LAN from connecting unauthorized wireless access points and switches to wall jacks in conference rooms. The administrator needs a feature that restricts which MAC addresses are allowed to send traffic on each access port. Which Cisco switch feature should be configured?

Accepted Answer

Port security. Port security is the Cisco feature designed to control which source MAC addresses are permitted on a switch port. By configuring the maximum number of MAC addresses and using sticky learning or static entries, the administrator can ensure only authorized corporate devices communicate through conference room jacks, blocking rogue switches and access points from attaching to the network.

Answer

DHCP snooping

Answer

Private VLAN edge

Answer

Dynamic ARP Inspection