100-150 Practice Test 4 — 25 Questions

Question 1

A junior technician is organizing a box of fiber optic patch cords. Which TWO connector types are commonly used to terminate modern fiber optic media? (Choose TWO.)

Accepted Answer

LC (Lucent Connector). Identifying physical connectors is a fundamental skill for network support technicians working with fiber infrastructure. LC and SC connectors are the industry standards for most enterprise networking equipment. Knowledge of these connectors prevents damage to SFP modules and patch panels that may occur if a technician attempts to force an incompatible physical connection.

Answer

RJ-45

Answer

BNC

Answer

F-type

Question 2

Refer to the exhibit. A company applies this JSON security policy to its edge firewall. What is the primary standard or concept being enforced by this configuration?

Accepted Answer

Confidentiality. This policy demonstrates the enforcement of secure web communication standards. By denying traffic on port 80 (HTTP) and allowing traffic on port 443 (HTTPS), the organization ensures that all web data is encrypted during transit. This is a fundamental security practice to protect sensitive information from being intercepted by unauthorized parties.

Answer

Data Integrity

Answer

Availability

Answer

Physical Security

Question 3

Which TWO of the following statements regarding IPv4 address types are true?

Accepted Answer

Public IP addresses are globally routable across the internet.. Understanding the distinction between private, public, and special-use IPv4 addresses is critical for network security and traffic routing. Private addresses allow internal segmentation without internet visibility, while special addresses like the loopback range are essential for local service testing. Mastering these types prevents common errors like NAT misconfiguration or routing traffic into non-existent or internal-only address blocks across the network infrastructure.

Answer

Private IP addresses can be routed directly across the public internet.

Answer

The 127.0.0.0/8 range is used for private internal communication.

Answer

All IPv4 addresses are assigned automatically by the ISP.

Question 4

Refer to the exhibit. A technician is troubleshooting a connection between a Cisco switch and a server. Based on the output, what is the most likely cause of the 'line protocol is down' status?

Accepted Answer

A duplex or speed mismatch exists.. In Cisco IOS, the status 'up/down' typically indicates a Layer 2 framing or configuration mismatch rather than a physical break. While the physical layer is active, the line protocol fails due to issues like duplex mismatches, encapsulation errors, or keepalive failures. Identifying this distinction allows technicians to focus on software configuration rather than replacing hardware.

Answer

The physical cable is disconnected.

Answer

The switch port has been administratively disabled.

Answer

The MAC address on the server is incorrect.

Question 5

Which primary benefit does the implementation of VLANs provide to a corporate network infrastructure?

Accepted Answer

Reduction of broadcast domain size. VLANs divide a single physical switch into multiple logical broadcast domains. This segmentation reduces the size of broadcast domains, which minimizes unnecessary traffic processing on end devices and improves overall network stability. By grouping devices logically rather than physically, administrators gain greater control over resource access and improve security by isolating traffic between different departments or functional roles.

Answer

Increased physical cabling requirements

Answer

Automatic encryption of all traffic

Answer

Elimination of the need for routers

Question 6

Refer to the exhibit. What is the most likely cause of poor performance on this link?

Accepted Answer

The link is experiencing excessive congestion.. The exhibit shows an input rate of 1000 Mbps on an interface with a bandwidth of only 100 Mbps. This indicates massive oversubscription and congestion. The interface is attempting to process ten times the amount of data it is capable of handling, leading to packet drops, buffer exhaustion, and significant latency. This is a capacity issue rather than a physical error or protocol mismatch, requiring a bandwidth upgrade or traffic shaping.

Answer

The interface has a duplex mismatch.

Answer

The cable is faulty and causing retransmissions.

Answer

The interface MTU is configured incorrectly.

Question 7

Which characteristic best describes a softphone endpoint compared to a dedicated hardware-based IP phone?

Accepted Answer

Softphones are platform-independent applications running on general-purpose hardware.. Softphones are software applications residing on general-purpose computing devices, offering significant flexibility in deployment and updates. Because they share hardware resources like CPU and RAM with the OS, their performance is inherently dependent on the underlying system state. Understanding this distinction is vital for troubleshooting, as softphone issues often stem from local system resource contention rather than network-layer signaling or voice-specific hardware configuration errors.

Answer

Softphones require a dedicated physical Power over Ethernet switch port.

Answer

Softphones always offer superior voice quality due to hardware acceleration.

Answer

Softphones lack support for standard SIP signaling protocols.

Question 8

A technician is troubleshooting a PC that can communicate with other hosts on the same subnet but cannot reach any hosts on different subnets. Which configuration on the PC is most likely incorrect?

Accepted Answer

The default gateway address is incorrect.. The default gateway is the local router interface that allows a host to send traffic to remote networks. If a host can communicate locally, its IP and subnet mask are likely correct for the segment, but without a functional gateway, it has no path to send packets destined for any address outside its own subnet.

Answer

The DNS server address is missing.

Answer

The subnet mask is too restrictive.

Answer

The NIC is configured for the wrong duplex mode.

Question 9

A technician connects a new laptop to a Cisco Catalyst switch. The switch receives a frame destined for a MAC address that is not currently present in its MAC address table. What action will the switch take to ensure the frame reaches its intended destination?

Accepted Answer

The switch floods the frame out of all ports within the same VLAN, except for the port where the frame was received.. Switches use the MAC address table to make intelligent forwarding decisions. When a destination MAC address is missing from the table, the switch performs an unknown unicast flood. This mechanism ensures that the frame is delivered to the target device wherever it might be located within the broadcast domain. Understanding this fundamental behavior is critical for troubleshooting connectivity issues and analyzing traffic flow within a local area network environment.

Answer

The switch drops the frame immediately and sends an ICMP Destination Unreachable message to the source.

Answer

The switch forwards the frame to the default gateway to be resolved by a Layer 3 routing process.

Answer

The switch buffers the frame and generates an ARP request to determine the correct exit port for the destination MAC.

Question 10

Refer to the exhibit. A host connected to port FastEthernet0/2 is unable to communicate with other devices in VLAN 10. Based on the output, what can be concluded about port Fa0/2?

Accepted Answer

The host on Fa0/2 has not sent any traffic to the switch.. The MAC address table shows which devices are currently communicating through the switch. If a host is connected but its MAC address does not appear in the table, the switch has not received any valid frames from that device. This points to a failure in the initial communication process, likely at the physical or data link layer.

Answer

The switch has learned the MAC address but the port is blocked.

Answer

Port Fa0/2 is configured as a trunk port and is filtering traffic.

Answer

The host on Fa0/2 is using a static IP address.

Question 11

Refer to the exhibit. What is the effect of the 'ip dhcp snooping trust' command on the designated interface?

Accepted Answer

It permits DHCP server messages on the port.. In DHCP Snooping, ports are untrusted by default. The 'trust' command marks an interface as connected to a legitimate DHCP server, allowing DHCPOFFER and DHCPACK messages to pass through. Without this command, the switch would drop these server-originated messages on that port, preventing clients from receiving IP addresses. This is critical for controlling which DHCP servers are allowed to interact with the network, thereby mitigating unauthorized server attacks.

Answer

It forces the port to drop all DHCP traffic.

Answer

It enables port security on the interface.

Answer

It prevents ARP spoofing on the port.

Question 12

An organization wants to implement a security policy that requires users to authenticate against a centralized server before gaining network access. Which protocol provides the necessary AAA framework to achieve this?

Accepted Answer

RADIUS. The AAA framework (Authentication, Authorization, and Accounting) is the cornerstone of modern network security. Protocols like RADIUS and TACACS+ allow centralized management of user identity and access policies. By offloading authentication to a central server, administrators can ensure consistent security policies, audit trails for access, and rapid revocation of credentials, which is essential for scaling security across a complex enterprise network environment.

Answer

ICMP

Answer

DHCP

Answer

DNS

Question 13

A technician is troubleshooting a router that can ping its own interface but cannot ping a directly connected router's interface. The technician verifies that both interfaces are 'up/up'. What is the most likely cause?

Accepted Answer

The IP addresses are in different subnets.. When two routers are directly connected, they must share the same logical subnet to communicate. If the IP addresses are on different subnets or the subnet masks are mismatched, they will not be able to exchange packets. This is a common configuration error that occurs during initial setup or after a network change.

Answer

The routers are using different routing protocols.

Answer

The DNS server is not configured on the routers.

Answer

The 'no shutdown' command was not issued.

Question 14

Refer to the exhibit. Why is the interface fa0/1 currently in the 'Secure-shutdown' state?

Accepted Answer

The device connected has an unauthorized MAC address.. The interface is in 'Secure-shutdown' because a violation occurred. The port security configuration allowed for a maximum of one MAC address, and a device with a different MAC address than the one learned or configured attempted to connect. The violation mode was set to 'shutdown', which forces the port to disable itself to protect the network from the unauthorized device, requiring manual intervention to restore connectivity to the interface.

Answer

The port is configured for 'protect' mode.

Answer

The aging time has expired for the port.

Answer

The switch has lost power to the interface.

Question 15

Refer to the exhibit. An administrator is troubleshooting interface Gig0/1. The status is 'up/down'. What is the most likely reason for this state?

Accepted Answer

There is a Layer 2 encapsulation mismatch.. An 'up/down' status typically indicates a Layer 2 issue where the physical link is active but the data link layer is not negotiating correctly. Common causes include encapsulation mismatches, speed/duplex errors, or a failure in the keepalive mechanism. Identifying this specific state helps technicians isolate problems to the Layer 2 domain, preventing unnecessary troubleshooting of Layer 3 IP configurations.

Answer

The cable is disconnected.

Answer

The IP address is incorrectly configured.

Answer

The router is administratively shut down.

Question 16

What is the primary function of a network switch's 'store-and-forward' switching method?

Accepted Answer

To verify the frame integrity before forwarding. Store-and-forward is a high-integrity switching method where the switch receives the entire frame, verifies its checksum (FCS), and only then forwards it. This approach ensures that corrupted frames are discarded at the switch level, preventing them from propagating across the network. This method is critical for maintaining high reliability in environments where physical layer errors might otherwise cause complex intermittent issues.

Answer

To forward frames as soon as the destination address is read

Answer

To route packets between different IP subnets

Answer

To provide high-speed connections for wireless access

Question 17

Which THREE fields are found in the standard IPv4 header and are directly related to the delivery or identification of the packet across subnets?

Accepted Answer

Source IP Address. The IPv4 header contains several fields essential for routing and delivery. The Source IP Address and Destination IP Address are used by routers to make forwarding decisions. The Time to Live (TTL) field prevents packets from looping infinitely by decrementing at each hop, ensuring the network remains stable during convergence.

Answer

MAC Address

Answer

Sequence Number

Question 18

Which TWO protocols are commonly used to retrieve email from a remote server to a local mail client?

Accepted Answer

Post Office Protocol version 3 (POP3). Email retrieval protocols allow users to access their messages stored on a central server. POP3 and IMAP4 are the industry standard protocols for this task, each offering different levels of synchronization and storage management. Understanding these protocols is essential for configuring client devices and troubleshooting mail delivery issues in a corporate or personal network environment.

Answer

Simple Mail Transfer Protocol (SMTP)

Answer

Hypertext Transfer Protocol (HTTP)

Answer

File Transfer Protocol (FTP)

Question 19

A company wants to prevent unauthorized individuals from entering the server room by following closely behind an employee. Which physical security control is specifically designed to address this risk?

Accepted Answer

Mantrap. Physical security is the first line of defense for any organization. It protects the hardware and infrastructure that host critical data and services. Controls like mantrap systems and security guards are used to manage human access to sensitive areas. Understanding these physical measures is as important as knowing logical security for comprehensive protection.

Answer

Biometric scanner

Answer

Video surveillance (CCTV)

Answer

Proximity card reader

Question 20

An administrator wants to ensure that only legitimate DHCP servers provide IP addresses to clients on the network. Which feature should be enabled?

Accepted Answer

DHCP Snooping. Rogue DHCP servers can be used to launch man-in-the-middle attacks by providing clients with malicious gateway addresses. DHCP Snooping creates a distinction between trusted and untrusted ports. By designating only ports connected to authorized servers as trusted, the network automatically blocks DHCP response traffic from unauthorized sources. This is essential for maintaining control over the network's address allocation process and preventing redirection of user traffic.

Answer

Port Security

Answer

Dynamic ARP Inspection

Answer

IP Source Guard