N10-009 Practice Test 4 — 10 Questions

Question 1

A network administrator is configuring a new switch to carry traffic for multiple VLANs on a single link to a router. Which IEEE standard is used for VLAN tagging on Ethernet trunks?

Accepted Answer

802.1Q. 802.1Q is the IEEE standard that defines VLAN tagging on Ethernet trunks, inserting a 4-byte tag into the Ethernet frame to identify VLAN membership. This allows multiple VLANs to traverse a single link between a switch and a router, enabling inter-VLAN routing without separate physical interfaces.

Answer

802.3af

Answer

802.1D

Answer

802.11ac

Question 2

A network administrator needs to collect detailed data about network traffic flows, including source/destination IP addresses, ports, and protocols, to analyze bandwidth usage patterns. Which technology should be used?

Accepted Answer

NetFlow. NetFlow is the correct choice because it is specifically designed to collect detailed metadata about network traffic flows, including source and destination IP addresses, ports, protocols, and byte counts. This granular flow-level data enables administrators to analyze bandwidth usage patterns, identify top talkers, and perform capacity planning. Unlike SNMP, which provides aggregate interface statistics, NetFlow exports flow records that contain the exact fields needed for deep traffic analysis.

Answer

SNMP

Answer

Syslog

Answer

ICMP

Question 3

A network administrator wants to ensure that a critical file server is always reachable via a single IP address, even if the server's NIC fails. The server has a single NIC. Which technique should be used to provide high availability for this IP address?

Accepted Answer

Use VRRP to create a virtual IP address. VRRP (Virtual Router Redundancy Protocol) allows multiple routers or servers to share a virtual IP address, with one acting as the active master and the others as backups. If the active device fails, a backup takes over the virtual IP, ensuring continuous reachability. Since the file server has only one NIC, VRRP can be configured on a pair of routers or Layer 3 switches to provide a virtual IP that points to the server's real IP, but more practically, VRRP is used on the server's default gateway to ensure the server can always reach the network; however, for the server itself to be reachable via a single IP despite NIC failure, you would typically use a load balancer or NIC teaming, but VRRP can also be used to create a virtual IP on a pair of firewalls or routers that forward traffic to the server, making the server appear reachable via that virtual IP even if one path fails.

Answer

Configure a load balancer in front of multiple servers

Answer

Implement NIC teaming

Answer

Use DNS round robin

Question 4

A network administrator is setting up a new branch office that will connect to the main headquarters over the Internet. The connection must be encrypted and allow the branch to access internal resources as if they were directly connected. Which of the following VPN types is BEST suited for this site-to-site connection?

Accepted Answer

IPsec. IPsec is the correct choice because it is specifically designed for site-to-site VPNs, providing encryption and authentication at the IP layer to create a secure tunnel between two networks. This allows the branch office to access internal resources at headquarters as if they were directly connected, using a gateway-to-gateway model that encrypts all traffic between the sites.

Answer

SSL VPN

Answer

PPTP

Answer

L2TP

Question 5

A network administrator needs to connect 10 workstations in a way that each workstation's traffic does not collide with others. Which device should be used to connect these workstations?

Accepted Answer

Switch. A switch is the correct device because it operates at Layer 2 of the OSI model, using MAC addresses to forward frames only to the specific destination port. This creates separate collision domains for each connected workstation, ensuring that traffic from one workstation does not collide with traffic from another.

Answer

Hub

Answer

Router

Answer

Modem

Question 6

A network administrator needs to ensure that data sent from a host arrives at the correct destination on a different network. Which of the following provides the logical address used for this purpose in IPv4?

Accepted Answer

IP address. In IPv4, the logical address used to route data between different networks is the IP address. The IP address contains a network portion that routers use to forward packets across network boundaries, ensuring the data reaches the correct destination network and host.

Answer

MAC address

Answer

Port number

Answer

Default gateway

Question 7

A network administrator wants to centrally collect and analyze event logs from routers, switches, and firewalls. Which protocol is most commonly used for sending log messages from network devices to a central log server?

Accepted Answer

Syslog. Syslog (RFC 5424) is the standard protocol for sending event messages from network devices like routers, switches, and firewalls to a central log server. It uses UDP port 514 by default and provides a structured format with facility codes and severity levels, enabling centralized collection and analysis of logs. This makes it the most commonly used protocol for this purpose.

Answer

SNMP

Answer

NetFlow

Answer

ICMP

Question 8

A network administrator is configuring an IEEE 802.1Q trunk between two switches. Which of the following must match on both ends for the trunk to function correctly?

Accepted Answer

The native VLAN ID. For an IEEE 802.1Q trunk to function correctly, the native VLAN ID must match on both ends. The native VLAN is the VLAN that carries untagged traffic across the trunk; if the IDs differ, frames from one switch's native VLAN will be placed into a different VLAN on the other switch, causing traffic misrouting and potential layer 2 loops. This is a fundamental requirement of the 802.1Q standard, and mismatched native VLANs are a common source of trunk failures.

Answer

The trunk port speed and duplex

Answer

The encapsulation type

Answer

The allowed VLAN list

Question 9

A network administrator must monitor network devices using SNMP. The security policy mandates strong encryption for both authentication and data integrity. Which SNMP version and security level should be implemented?

Accepted Answer

SNMPv3 with authPriv. SNMPv3 with authPriv is correct because it provides both authentication (to verify the source of messages) and encryption (to ensure data integrity and confidentiality). The security policy mandates strong encryption for both authentication and data integrity, which only the authPriv security level fulfills by using HMAC-SHA/MD5 for authentication and AES/DES for encryption.

Answer

SNMPv1

Answer

SNMPv2c

Answer

SNMPv3 with noAuthNoPriv

Question 10

A network administrator is troubleshooting an intermittent link between two switches connected by single-mode fiber. The interface log shows "Link up / Link down" events multiple times per hour. Which of the following is the most likely cause?

Accepted Answer

Dirty fiber connectors. Dirty fiber connectors cause intermittent signal loss by scattering or absorbing light, which leads to CRC errors and repeated link flaps as the optical transceiver struggles to maintain synchronization. This matches the 'Link up / Link down' pattern seen in the logs, especially on single-mode fiber where precise alignment is critical.

Answer

Incorrect VLAN configuration on the switch ports

Answer

Crossed fiber pairs

Answer

Duplex mismatch between the switches