N10-009 Network Troubleshooting Practice Test 6 — 15 Questions

Question 1

A network administrator is deploying a new PoE security camera. The camera is connected to a PoE-enabled switch port, but the camera does not power on. The administrator confirms the switch port has PoE enabled and the cable is tested and functional. What is the most likely cause?

Accepted Answer

The camera requires 802.3bt (PoE++), but the switch only supports 802.3af (PoE).. The camera requires 802.3bt (PoE++) which can deliver up to 60W or 90W, but the switch only supports 802.3af (PoE) which provides a maximum of 15.4W per port. Since the camera's power demand exceeds the switch's capability, the camera will not power on even though PoE is enabled and the cable is functional.

Answer

The cable is a crossover cable.

Answer

The port is configured as an access port.

Answer

The camera is using a passive PoE injector.

Question 2

A user reports intermittent connectivity issues. The technician runs ping tests and notices that pings to the default gateway sometimes fail and sometimes succeed. While pinging, the technician observes that some replies have high latency. Which tool should the technician use to analyze the path and identify where packets are being delayed?

Accepted Answer

traceroute / tracert. Traceroute (tracert on Windows) is the correct tool because it sends packets with incrementing Time-to-Live (TTL) values to map the entire Layer 3 path from source to destination. By measuring the round-trip time (RTT) for each hop, it can pinpoint exactly which router or link is introducing high latency or packet loss, addressing the intermittent connectivity and delayed replies observed in the ping tests.

Answer

nslookup

Answer

ipconfig

Answer

arp

Question 3

Users in a remote branch office report that they cannot access the company's cloud-based applications. The network administrator notices that the edge router's WAN interface is up but the branch's default route points to a next-hop IP that is unreachable. The administrator can ping the ISP's gateway IP from the router. What is the most likely cause?

Accepted Answer

The static default route has an incorrect next-hop IP. The correct answer is B because the scenario describes a static default route configured with a next-hop IP that is unreachable. The WAN interface is up and the ISP gateway is reachable (as confirmed by the ping), but the router cannot forward traffic to the cloud because the static route points to an incorrect next-hop address. This is a classic static route misconfiguration where the next-hop IP does not match the ISP gateway or is not in the directly connected subnet.

Answer

The routing protocol is not redistributing the default route

Answer

The WAN interface is administratively down

Answer

The firewall is blocking traffic to the cloud

Question 4

A user can ping the default gateway (192.168.1.1) but cannot access the internet (e.g., ping 8.8.8.8 fails). The user's IP is correctly configured as 192.168.1.10/24. What should the technician check next?

Accepted Answer

Check the router's default route configuration. Since the user can ping the default gateway (192.168.1.1), Layer 2 and Layer 3 connectivity within the local subnet is working, and the PC's IP configuration is correct. The failure to reach 8.8.8.8 indicates that the router does not have a valid path to external networks, which is typically provided by a default route (0.0.0.0/0). Checking the router's default route configuration is the logical next step because without it, the router cannot forward traffic destined for non-local networks.

Answer

Check the PC's DNS server settings

Answer

Verify the subnet mask on the PC

Answer

Examine the switch port VLAN assignment

Question 5

Users in a conference room frequently experience slow and dropping wireless connections. A site survey shows three other access points in the vicinity all using channel 6. Signal strength is adequate. What is the most likely cause?

Accepted Answer

Co-channel interference. The correct answer is B because all three nearby access points are operating on channel 6, which causes co-channel interference. Even with adequate signal strength, overlapping basic service sets (BSSs) on the same channel lead to contention, increased collisions, and reduced throughput due to the CSMA/CA mechanism in 802.11 networks. This results in slow and dropping connections for users in the conference room.

Answer

Incorrect encryption settings

Answer

Incorrect SSID configured

Answer

Low antenna gain on the access points

Question 6

A user's computer is unable to obtain a DHCP lease after connecting to a new switch port. The user's computer displays an IP address in the 169.254.x.x range. Other users on the same VLAN can obtain IP addresses successfully. The switch port is configured for 802.1X authentication. What is the most likely cause?

Accepted Answer

The user's computer has not authenticated via 802.1X and is placed in a restricted VLAN.. When 802.1X authentication is enabled on a switch port, the port initially operates in an unauthorized state, restricting traffic to only EAPoL (802.1X) frames. If the user's computer fails to authenticate (e.g., due to missing supplicant, incorrect credentials, or certificate issues), the switch can place the port into a restricted or guest VLAN that lacks a DHCP server or is isolated from the production network. The 169.254.x.x address (APIPA) indicates the client could not reach a DHCP server, which aligns with being placed in a VLAN without DHCP services.

Answer

The DHCP server has exhausted its address pool.

Answer

The switch port is in a blocked state due to a spanning tree loop.

Answer

The network cable is faulty.

Question 7

A user reports that they can access internal websites but cannot access any external websites. Other users in the same subnet can access external sites. The user's IP configuration shows a correct IP, subnet mask, and default gateway. What is the most likely cause?

Accepted Answer

The proxy server settings are incorrect.. The user can access internal websites but not external ones, while other users in the same subnet have no issues. This points to a client-specific configuration problem rather than a network-wide issue. Incorrect proxy server settings on the user's machine can prevent external HTTP/HTTPS traffic from being routed correctly, even though internal traffic (which may bypass the proxy) works fine.

Answer

The DNS server is not reachable.

Answer

The default gateway is misconfigured.

Answer

The web browser has a corrupted cache.

Question 8

A technician connects a user's workstation to a switch port. The cable passes a physical test, and the switch port LED is green, but the workstation cannot establish a network connection. What is the most likely cause?

Accepted Answer

Duplex mismatch between the workstation and the switch. A duplex mismatch occurs when one side of a link is set to full-duplex and the other to half-duplex, often due to a failed autonegotiation. Even though the cable passes a physical test and the switch port LED is green (indicating link at Layer 1), the mismatch causes excessive collisions and frame errors at Layer 2, preventing successful network communication. The workstation cannot establish a connection because the switch and NIC are not coordinating their transmission/reception timing correctly.

Answer

Incorrect VLAN assignment on the switch port

Answer

The workstation has a static IP address in the wrong subnet

Answer

A faulty cable

Question 9

Users at a remote branch office cannot access internet resources. The branch's edge router shows that the WAN interface is up. The default route is configured to point to next-hop 192.0.2.2, but the admin can successfully ping 192.0.2.1 from the router. What is the most likely cause?

Accepted Answer

The default route is missing or has an incorrect next-hop IP. The correct answer is B because the admin can ping 192.0.2.1 (the WAN interface IP) but not reach 192.0.2.2 (the next-hop), indicating that the default route is either missing or misconfigured. Since the WAN interface is up and the local IP is reachable, the issue is with the routing table entry pointing to the next-hop, not with the interface or subnet mask. Without a valid default route, the router cannot forward traffic destined for the internet.

Answer

The router's WAN interface is configured with the wrong subnet mask

Answer

NAT is not configured on the router

Answer

A firewall on the router is blocking outbound traffic

Question 10

Users in VLAN 10 cannot obtain IP addresses from the DHCP server located in VLAN 20. The router interface for VLAN 10 has an ip helper-address 192.168.20.5 command configured, and users can ping the DHCP server IP (192.168.20.5) from the router. However, users receive APIPA addresses. What is the most likely cause?

Accepted Answer

The DHCP server does not have a scope configured for the 192.168.1.0/24 subnet (VLAN 10). The ip helper-address command on the router correctly forwards DHCPDISCOVER broadcasts from VLAN 10 to the DHCP server at 192.168.20.5. Since users can ping the server from the router, Layer 3 connectivity exists. However, the DHCP server must have a scope (or address pool) for the subnet of the requesting clients (192.168.1.0/24) to offer an IP address; without it, the server ignores the request, and clients fall back to APIPA (169.254.x.x).

Answer

The router's ip helper-address is configured on the wrong interface

Answer

The switch port connecting users is configured as a trunk instead of an access port

Answer

The router's ACL is blocking DHCP offers from the server

Question 11

A user can ping the default gateway (192.168.1.1) but cannot ping the external IP address 8.8.8.8. Other users on the same subnet can ping 8.8.8.8 without issue. The user's IP configuration is correct: IP 192.168.1.10/24, default gateway 192.168.1.1, DNS 8.8.8.8. What is the most likely cause?

Accepted Answer

The computer's firewall is blocking outbound ICMP. The user can ping the default gateway (192.168.1.1) but not the external IP 8.8.8.8, while other users on the same subnet can ping 8.8.8.8 without issue. This isolates the problem to the user's specific host, not the network infrastructure. A local firewall on the user's computer blocking outbound ICMP (Internet Control Message Protocol) traffic would prevent ping to external IPs while still allowing local subnet communication, as ICMP is often restricted by default in some security policies.

Answer

The router is missing a default route to the internet

Answer

The DNS server is not resolving the hostname

Answer

The network cable is loose or faulty

Question 12

A user on VLAN 10 reports that they cannot access a file server on VLAN 20. The user can ping the default gateway (interface on the router) and other devices within VLAN 10. The router has an 'ip helper-address' for DHCP but no static routes or dynamic routing configured for inter-VLAN routing. The file server is correctly configured with an IP address in VLAN 20. What is the most likely cause of the communication failure?

Accepted Answer

The router does not have a route to the VLAN 20 subnet. The router has no route to the VLAN 20 subnet. Even though the router is directly connected to VLAN 20 via its subinterface, inter-VLAN routing requires the router to have a connected route in its routing table for that subnet. Without a route (either connected or static), the router cannot forward packets from VLAN 10 to VLAN 20. The 'ip helper-address' only forwards DHCP broadcasts, not general traffic.

Answer

The router is configured with an ACL that blocks traffic from VLAN 10 to VLAN 20

Answer

The switch port connecting the user to the network is configured with port security limiting MAC addresses

Answer

The file server has a firewall blocking ICMP ping requests

Question 13

A user reports that they cannot access the internet. The user's workstation has an IP address of 192.168.1.100/24, with a default gateway of 192.168.1.1. The user can ping the default gateway but cannot ping 8.8.8.8. Other users on the same subnet can ping 8.8.8.8. The technician checks the switch and sees the user's port is up. What should the technician check next?

Accepted Answer

Check the workstation's IP configuration for a misconfigured default gateway or DNS. Since the user can ping the default gateway (192.168.1.1) but not 8.8.8.8, while other users on the same subnet can reach 8.8.8.8, the issue is isolated to this workstation. The most likely cause is a misconfigured default gateway (e.g., wrong IP or subnet mask) or DNS settings, as the gateway is reachable but traffic is not being forwarded correctly. Option B directly addresses checking the workstation's IP configuration for these misconfigurations, which is the logical next step after verifying local connectivity.

Answer

Check the router's routing table for a route to the internet

Answer

Check the DNS server configuration on the workstation

Answer

Check the switch port for VLAN misconfiguration

Question 14

Users on a VLAN report intermittent network disconnections lasting a few seconds. The network technician checks the switch and notices a high number of CRC errors on the port connecting to the core switch. The cable test passes. What is the most likely cause?

Accepted Answer

Duplex mismatch between the two switches. A duplex mismatch causes one side to send frames while the other is still transmitting, leading to collisions that are interpreted as CRC errors on the receiving interface. Since the cable test passes, the physical layer is fine, and the intermittent nature (lasting seconds) matches the symptom of a duplex mismatch where the half-duplex side backs off after collisions, causing brief outages.

Answer

STP reconvergence due to topology change

Answer

Broadcast storm caused by a loop

Answer

Faulty SFP transceiver on the core switch

Question 15

A user reports that they cannot access a web server at 10.0.1.200. The user can ping the server's IP address but cannot open the web page. The web server is known to be running and accessible from other users on the same subnet. What is the most likely cause?

Accepted Answer

ACL blocking port 80 or 443. The user can ping the server (ICMP works) but cannot access the web page, which indicates Layer 3 connectivity is fine but the specific TCP ports (80 for HTTP or 443 for HTTPS) are being blocked. An ACL applied on the server, a switch, or a router between the user and the server is the most likely cause, as it would permit ICMP echo requests while denying HTTP/HTTPS traffic. Other users on the same subnet can access the server, ruling out server-side or subnet-wide issues.

Answer

Default gateway is misconfigured

Answer

DNS resolution failure

Answer

Duplicate IP address