scenario questions

What is the function of the Default Gateway in an IP configuration?

Refer to the exhibit. Why is the router unable to reach the internet?

A network administrator is configuring a point-to-point WAN link between two Cisco routers. To conserve IPv4 address space, the administrator decides to use a /30 subnet mask on the serial interface. Which of the following best describes the number of usable host addresses provided by this subnet mask?

A network administrator is troubleshooting a workstation that cannot connect to the network. The workstation's NIC shows a link light, but the switch port is not forwarding traffic. The administrator suspects a duplex mismatch. Which symptom is most indicative of a duplex mismatch?

A network technician is troubleshooting a workstation that cannot reach any resources on a remote subnet. The workstation can ping its default gateway and other hosts on the local subnet. The technician runs 'tracert' from the workstation to a remote server and sees the first hop (the default gateway) respond, but all subsequent hops time out. Which is the most likely cause?

Refer to the exhibit. An administrator is configuring subnets on a Cisco router. Based on the output, what is the broadcast address for the subnet connected to Gig0/0?

While troubleshooting a connectivity issue, a technician discovers a switch port is in the 'err-disabled' state. What is the standard first step to attempt to bring the port back online after identifying and fixing the root cause?

Which transmission medium is best suited for long-distance data communication with high immunity to electromagnetic interference?

A network administrator is configuring a point-to-point link between two routers and wants to use the most efficient subnet mask that allows for only two usable host addresses. However, the administrator is told to use a /28 mask instead for future expansion. How many usable host addresses are provided by a /28 mask?

Which TWO functions are performed by a Cisco switch at the Data Link layer? (Choose two.)

Which of the following is a Class C IP address?

A network administrator needs to prevent unauthorized devices from connecting to switch ports. Which feature provides the most effective Layer 2 security by verifying the MAC address of the connected device against a database?

A technician is troubleshooting a workstation that cannot connect to the network. The workstation's network interface card (NIC) shows a link light, but no data is being transmitted. The cable is a straight-through Cat 5e patch cord. Which tool should the technician use to verify the cable's pinout and detect any wiring faults?

A junior technician is organizing a box of fiber optic patch cords. Which TWO connector types are commonly used to terminate modern fiber optic media? (Choose TWO.)

Which security threat involves an attacker sending unsolicited and massive amounts of traffic to a network service to make it unavailable to legitimate users?

Which protocol is primarily used for the delivery of real-time voice and video media streams across a network?

A network technician is tasked with connecting two buildings located 1.5 kilometers apart. Which media type should be selected to ensure reliable data transmission over this distance without the need for repeaters?

A network technician is installing network drops in a factory with heavy machinery that generates significant electromagnetic interference (EMI). Which cable type would best protect the data from corruption?

A network administrator is implementing IPv6 in a corporate environment. Which TWO address types are commonly used to facilitate local link communication and global internet access respectively?

A startup wants to host a custom application in the cloud without managing the underlying operating system or hardware. Which THREE cloud service models or characteristics are relevant to this requirement?

A network engineer is analyzing a packet capture and notices that a TCP segment has the SYN flag set and the ACK flag set. The source port is 80 and the destination port is 49152. What does this indicate about the TCP connection?

An employee receives an email that appears to be from the company's IT department, requesting their login credentials to perform an urgent system update. What type of social engineering attack does this represent?

What is the primary function of a loopback interface in troubleshooting network devices?

Which endpoint media issue is most likely caused by the use of asymmetric paths in a bi-directional voice call?

A network administrator is configuring a new Cisco switch. The administrator wants to ensure that management traffic for SSH and SNMP is separated from user data and that only the management VLAN can reach the switch's management IP address. Which action should the administrator take?

What is the decimal equivalent of the subnet mask 255.255.255.224?

A network engineer is troubleshooting a potential DHCP issue. Which THREE components are provided to a client during a successful DHCP 'Acknowledgment' (ACK) message? (Choose three.)

What is the primary function of a firewall when placed at the edge of a network?

A small business owner wants to ensure that internal financial records are only viewed by authorized management personnel. Which pillar of the CIA triad is primarily addressed by implementing restricted folder permissions and encryption for these files?

A network engineer is reviewing how a Cisco switch builds and maintains its MAC address table as frames arrive from attached devices. Which TWO statements correctly describe this Layer 2 forwarding behavior? (Choose two.)

Which THREE conditions are common causes of 'Input Errors' appearing on a Cisco switch interface? (Choose three.)

A technician is installing a new 10GBASE-T network card in a server and needs to select the appropriate copper cabling. Which cable category is the minimum requirement to support 10 Gbps speeds at a distance of 100 meters?

Which of the following describes the purpose of a Subnet Mask in an IP configuration?

A user cannot reach a web server. You perform a ping and it fails, but a traceroute shows the packets reaching the last hop before the server. What does this indicate?

A network technician is terminating a new Cat 6a cable run in an office. The cable will connect a workstation to a wall jack. Which connector type should the technician use to terminate the cable?

Which Cisco feature is used to prevent Man-in-the-Middle attacks that rely on corrupting the ARP cache of connected hosts?

Which component of the Cisco network architecture is specifically designed to provide high-speed switching and fast transport between different parts of the network?

Which primary benefit does the implementation of VLANs provide to a corporate network infrastructure?

A company is upgrading its office network to support 10 Gbps speeds to the desktop over existing copper cabling distances of up to 100 meters. Which cable category is the minimum requirement for this objective?

A user reports intermittent connectivity to the internal server. Which TWO commands are most useful to identify if the issue is caused by physical layer flapping or interface errors?

A security administrator is reviewing logs and notices that an attacker on the internal network is sending forged ARP replies claiming to be the default gateway. The attacker's goal is to intercept traffic from multiple hosts. The switches in the network already have DHCP snooping enabled on the user VLAN. Which additional Cisco feature should the administrator enable to block the forged ARP replies?

Which protocol operates at the Application layer of the TCP/IP model and is used to resolve hostnames into IP addresses?

A network engineer is troubleshooting high CPU utilization on a core switch caused by excessive broadcast traffic across multiple VLANs. Which infrastructure technology should be deployed to contain broadcast domains while maintaining Layer 3 connectivity?

An enterprise network design incorporates Power over Ethernet to supply power to VoIP desk phones and wireless access points. A technician notes that the power supply unit inside the switch is operating near maximum capacity. Which feature should be configured to prevent unexpected power drops?

A network technician is troubleshooting a connectivity issue. The technician suspects that a router is not forwarding packets correctly because the Time to Live (TTL) value in the IP header is being decremented to zero. Which field in the IPv4 header is responsible for this decrementing behavior and the subsequent discarding of the packet?

A network administrator needs to implement a VPN solution. Which TWO types of VPNs are commonly used in enterprise environments? (Choose TWO).

A company requires employees to use both a password and a one-time code sent to their mobile device to access the corporate VPN. Which security concept is being implemented?

A technician is troubleshooting a connectivity issue where a host can ping its default gateway but cannot reach a server on a different subnet. At which OSI layer is the routing decision being made?

A technician is troubleshooting a workstation that cannot connect to the network. The workstation has a link light, but ipconfig shows an IP address of 169.254.10.20. The technician suspects a DHCP-related issue. Which two commands should the technician use to attempt to obtain a new IP address from the DHCP server? (Choose two.)

In an IPv6 environment, which address type is automatically configured on every IPv6-enabled interface and is used for neighbor discovery and router solicitation?

A technician connects a laptop directly to a switch using a straight-through cable, and the link light immediately turns green. Which feature allowed this connection to work even if the port traditionally required a crossover cable?

A technician is deploying an IP phone in a small branch office and needs to ensure both voice traffic and the phone's power are delivered over a single Ethernet cable. Which IEEE standard should the technician verify the switch port supports?

Which layer of the OSI model is responsible for determining the best physical path for data to travel across multiple interconnected networks using logical addressing?

A network technician is troubleshooting a connectivity issue where a workstation can communicate with local devices but cannot access any resources on a different subnet. After verifying the IP address and subnet mask, which component should be investigated next to ensure the packet can leave the local segment?

A user is unable to reach 'cisco.com' in their web browser but can successfully ping the IP address '72.163.4.161'. Which network service is most likely failing or misconfigured?

An administrator is configuring Power over Ethernet on an enterprise access switch to power IP security cameras requiring up to 25.5 watts of power each. Which IEEE standard must the switch ports support?

A help desk technician is asked to connect a new laptop to the corporate network. The wall jack provides a copper Ethernet connection, and the laptop does not have a built-in RJ-45 port. Which type of adapter should the technician use to provide a wired connection?

An attacker on the same subnet sends frames with forged source MAC addresses to overwhelm a switch's MAC address table, causing the switch to flood unicast traffic out all ports. Which switch feature should be enabled to prevent this behavior on access ports?

A network technician is configuring a new Cisco switch port for a server that must support both voice and data traffic on separate VLANs. The server's network interface card is VLAN-aware and will tag its own frames. The technician wants to ensure the switch port can carry traffic for multiple VLANs. Which type of switch port configuration should the technician apply?

Which port security violation mode will drop packets from an unauthorized MAC address, increment the security violation counter, and send a syslog message, but will not shut down the interface?

A user discovers that all their files have been encrypted and a message is displayed demanding payment in exchange for the decryption key. What type of malware has infected the system?

Which characteristic best describes a softphone endpoint compared to a dedicated hardware-based IP phone?

A network engineer is hardening a new Cisco switch that will be deployed in a lobby area accessible to visitors. The engineer wants to protect against MAC flooding attacks and against unauthorized devices connecting to access ports. Which two measures should the engineer implement? (Choose two.)

A technician is troubleshooting a workstation that cannot connect to the network. The workstation's network interface card (NIC) shows a solid link light, but the technician cannot ping the default gateway. The technician suspects a duplex mismatch. Which command should the technician use on a Cisco switch to verify the duplex settings of the port connected to the workstation?

A network administrator is configuring a switch and needs to ensure that only one VLAN is carried on a specific access port. The administrator wants to assign VLAN 10 to a port connected to a user's PC. Which command should the administrator use on a Cisco switch to assign the port to VLAN 10?

A network technician is configuring a small branch office network. The ISP has assigned a single public IPv4 address that must be shared by all internal devices. The technician needs a solution that allows multiple internal hosts to communicate on the internet simultaneously without requiring a one-to-one mapping of internal to external addresses. Which technology should the technician implement?

Which tool is best suited for identifying a slow network segment caused by excessive broadcast traffic?

Which TWO of the following are valid methods for securing the administrative access of a Cisco device?

A network administrator is configuring a switch port for a server that must be reachable by multiple VLANs without routing through an external router. Which feature should be configured on the switch port?

An engineer needs to subnet a 192.168.10.0/24 network to provide at least 5 usable subnets, with each subnet accommodating a minimum of 25 host devices. Which subnet mask meets these specific design requirements?

A user reports that their laptop cannot connect to the corporate Wi-Fi network, but other devices in the same area can connect fine. The laptop's wireless adapter is enabled and shows available networks. Which of the following is the most likely cause of the issue?

A network administrator is designing a wireless deployment for an office. Which TWO frequency bands are most commonly used by standard Wi-Fi endpoints to transmit data? (Choose TWO.)

A network is experiencing high latency. The administrator finds that the switch has high CPU utilization. Which diagnostic step is most appropriate to identify the cause?

A network technician is investigating why a user cannot access a file server at 10.1.1.100. The user's workstation can ping the server successfully, but when the user tries to open a shared folder, the connection times out. The technician verifies that other users can access the same share. Which tool should the technician use to determine if a firewall is blocking the specific file-sharing protocol?

Which of the following describes the primary purpose of a security policy in a network environment?

A host with the IP address 192.168.1.50 and a subnet mask of 255.255.255.0 is attempting to send data to a server at 10.1.1.5. Which address must be configured on the host to allow the data to exit the local subnet?

An administrator needs to deploy several new IP cameras in a parking lot. The cameras require 25 Watts of power each and are connected to a switch 80 meters away. Which technology must the switch support on its ports?

A network administrator is planning to deploy IPv6 on a Cisco router. The administrator needs to assign a global unicast address to the GigabitEthernet0/0 interface. Which of the following addresses is a valid global unicast IPv6 address that can be manually configured on the interface?

A network administrator is configuring a Cisco switch and wants to ensure that only the designated uplink port can send DHCP server replies, while all other ports are prevented from acting as DHCP servers. Which command should be applied to the uplink port?

A small office has a single Cisco wireless router providing both employee and guest access. The manager wants guests to reach the internet but must not be able to reach the internal file server or the printer on the office LAN. Which feature should be enabled on the wireless router to meet this requirement?

An endpoint is experiencing high latency and jitter during a VoIP call, but data traffic remains stable. Which QoS mechanism should be verified on the local switch port to ensure voice media frames are prioritized correctly?

A network engineer is comparing TCP and UDP for a new application that streams live video to many users. The application can tolerate some packet loss but requires low latency. The engineer wants to choose the transport protocol and configure it appropriately. Which two characteristics describe UDP in this scenario? (Choose two.)

A network technician is configuring a new Cisco switch for a small business. The technician needs to ensure that the switch can be managed remotely from a different subnet. Which TWO configurations are required to enable remote management access? (Choose two.)

A security team wants to protect users who connect laptops to the corporate wireless network from attackers who set up a nearby access point broadcasting the same SSID with a stronger signal. The requirement is that clients authenticate the network before associating and that the credentials never traverse the wireless medium in a recoverable form. Which technology satisfies these requirements?

A network administrator at a small clinic wants to prevent unauthorized users from plugging a personal laptop into an unused wall jack in the waiting room and obtaining an IP address on the internal VLAN. The clinic uses a Cisco Catalyst switch with 802.1X-capable access ports and a RADIUS server. Which solution best meets this requirement?

A small branch office has been assigned the network 192.168.50.0/24. The network administrator must divide it into four equal-sized subnets to match four separate departments. Which subnet mask should be configured on the router interfaces to create exactly four usable subnets?

Refer to the exhibit. What is the most likely cause of poor performance on this link?

An administrator is running UTP cabling near heavy machinery and fluorescent lights. Users report intermittent connectivity and slow speeds. What is the most likely cause of this issue?

A user reports that they cannot access any network resources, including the internet. A technician checks the user's workstation and finds that it has an IP address of 169.254.10.5 with a subnet mask of 255.255.0.0. The technician verifies that the switch port is active and the cable is connected. What is the most likely cause of the problem?

Refer to the exhibit. A host connected to port FastEthernet0/2 is unable to communicate with other devices in VLAN 10. Based on the output, what can be concluded about port Fa0/2?

A user on VLAN 20 reports that they cannot reach a server on VLAN 30, but they can reach other devices on VLAN 20 and the Internet. The network uses a Layer 3 switch for inter-VLAN routing. The technician verifies that the user's PC has the correct IP address, subnet mask, and default gateway. Which command should the technician run on the Layer 3 switch to verify that inter-VLAN routing is enabled and functioning?

Refer to the exhibit. Based on the JSON configuration for the switch port, what type of endpoint is most likely connected to this interface?

A network engineer is configuring a Cisco router interface that connects to an ISP. The ISP has assigned the engineer a single public IP address of 203.0.113.10 with a subnet mask of 255.255.255.252 and a default gateway of 203.0.113.9. The engineer needs to configure the router interface with the correct IP address and mask. Which configuration should be applied?

A network administrator needs to connect two switches using a link that allows multiple VLANs to traverse a single physical path. Which configuration step is essential to ensure this functionality is enabled properly?

A network technician is configuring a new Cisco switch and needs to assign an IP address to the management VLAN interface so the switch can be reached remotely via SSH. The switch currently has no VLAN interfaces configured. Which command must the technician use to create the management interface and enter interface configuration mode?

Which mechanism does the Spanning Tree Protocol (STP) use to detect and prevent Layer 2 loops in a network with redundant links?

A technician is troubleshooting a workstation that cannot reach any network resources. The workstation's IP configuration shows an address of 169.254.10.22 and a subnet mask of 255.255.0.0. Which condition does this indicate?

Which IPv6 address type is represented by the prefix fe80::/10?

A user at a branch office receives a phone call from someone claiming to be a help desk technician. The caller already knows the user's employee ID, manager's name, and the model of laptop issued to the user, and asks the user to read back the six-digit code that was just texted to their phone so the technician can 'verify the device.' The user complies, and minutes later the attacker logs into the corporate VPN using the user's credentials. Which type of attack has occurred?

Refer to the exhibit. An administrator observes that interface Gig0/1 is in 'up' status but experiences high latency and interface errors. Based on the provided configuration, what is the most likely cause?

A technician can successfully ping local servers on the same 192.168.10.0/24 subnet but cannot reach any resources on a different VLAN or the Internet. The technician verifies the local IP address and subnet mask are correct. Which component is the most likely source of the connectivity failure?

A network technician is reviewing a Cisco switch configuration and sees that PortFast and BPDU Guard are enabled on an access port that connects to a user's desktop. The user calls and reports that they accidentally plugged a small unmanaged switch into that wall jack so they could connect both a PC and a printer. Shortly afterward, the port stopped forwarding traffic. What is the most likely explanation for this behavior?

A technician is troubleshooting a PC that can communicate with other hosts on the same subnet but cannot reach any hosts on different subnets. Which configuration on the PC is most likely incorrect?

Refer to the exhibit. An administrator is reviewing the interface configuration. Which statement regarding these subnets is true?

A network technician is configuring a Cisco switch for a new VLAN. The technician wants to verify that the VLAN has been created and is active, and also see which ports are assigned to it. Which command should the technician use?

A technician is documenting the OSI model for a training manual and needs to identify which layer is responsible for logical addressing and path determination between networks. Which OSI layer performs this function?

A network administrator is troubleshooting a Cisco Catalyst switch where a host connected to port Gi1/0/10 is experiencing intermittent connectivity. The administrator suspects a physical layer issue. Which TWO commands would provide the most direct evidence of physical layer problems on that interface? (Choose two.)

A network administrator is configuring a router interface with the IP address 192.168.10.1 and subnet mask 255.255.255.224. The administrator needs to determine the number of usable host addresses available on this subnet. How many usable host addresses are provided by this subnet mask?

Which TWO of the following statements correctly describe the characteristics of IPv4 address classes?

An administrator wants to implement a security policy that prevents unauthorized devices from accessing the network via open switch ports. Which feature should be enabled to achieve this?

Which THREE of the following are characteristics of the Cisco IOS CLI environment that facilitate efficient network administration?

Which field in the IPv4 header is primarily responsible for preventing a packet from looping indefinitely in a network?

A technician is troubleshooting a workstation that can reach servers on the local subnet but cannot reach any host on a remote subnet. The workstation's IP address, subnet mask, and DNS server are correct, and pinging the default gateway succeeds. Which command should the technician use to verify the workstation's default gateway and interface configuration?

A technician is documenting the TCP/IP model for a training manual. The manual must describe the layer that is responsible for logical addressing and routing of packets between different networks. Which layer of the TCP/IP model performs this function?

Which type of fiber optic cabling is characterized by a core diameter of approximately 9 microns and is optimized for long-distance transmissions using a single path of light?

A company issues employees corporate laptops that contain confidential project data. The security policy requires that if a laptop is lost or stolen, the data on its drive cannot be read even if the disk is removed and attached to another computer. Which control should be implemented?

Refer to the exhibit. What can be determined about the status of interface FastEthernet 0/1?

A network engineer is configuring a Cisco switch and needs to ensure that only the MAC address 00:1A:2B:3C:4D:5E is allowed to communicate through interface GigabitEthernet0/1. The engineer enters the command 'switchport port-security mac-address 00:1A:2B:3C:4D:5E' on the interface. However, the switch rejects the command. What is the most likely cause?

A company is deploying IoT (Internet of Things) smart sensors throughout a large agriculture field to monitor soil moisture. Which wireless technology is most appropriate for these endpoints if they must operate on battery power for several years while transmitting data over several kilometers?

Which TWO of the following statements accurately describe the characteristics of the OSI model's Data Link layer (Layer 2)? (Choose two.)

When a network administrator uses the 'ping' command to test connectivity, what is the primary purpose of the ICMP 'Echo Request' and 'Echo Reply' process?

What is the primary function of the Spanning Tree Protocol (STP) in a network with redundant links?

Refer to the exhibit. Why is the interface fa0/1 currently in the 'Secure-shutdown' state?

A network engineer is deploying a wireless network in a warehouse with metal shelving and forklifts. Users report intermittent connectivity and slow speeds. Which phenomenon is most likely causing the signal degradation?

A network designer needs to select media for a high-performance backbone that supports at least 10 Gbps. Which THREE media types are capable of supporting this speed? (Choose THREE.)

Which THREE features are provided by the Transport layer of the OSI model? (Choose three.)

A network administrator is reviewing the OSI model layer responsibilities. The administrator needs to identify which layer is responsible for establishing, managing, and terminating sessions between applications on different hosts. Which OSI layer performs this function?

Refer to the exhibit. An administrator is troubleshooting interface Gig0/1. The status is 'up/down'. What is the most likely reason for this state?

A user calls the help desk and reports that a laptop cannot reach any websites or internal servers. The technician runs ipconfig and sees that the laptop has an IPv4 address of 169.254.88.12 with a subnet mask of 255.255.0.0 and no default gateway. Which action should the technician take FIRST to resolve the problem?

A technician is documenting a small office network that uses a single 48-port Cisco switch. Users complain that when two computers transmit simultaneously, the whole network slows down. The technician confirms the switch is not configured with VLANs and all ports are in the default VLAN. Which characteristic of the default VLAN on a Cisco switch explains this behavior?

What is the primary function of a network switch's 'store-and-forward' switching method?

An organization is using Variable Length Subnet Masking (VLSM) to optimize their 10.0.0.0/24 space. They need one subnet for 100 hosts and two subnets for 50 hosts each. Which of the following set of subnets correctly fulfills this requirement without overlapping?

Which of the following is the correct representation of the IPv6 address 2001:0DB8:0000:0000:0008:0800:200C:417A in compressed format?

Which THREE fields are found in the standard IPv4 header and are directly related to the delivery or identification of the packet across subnets?

A company is deploying a new Voice over IP (VoIP) system and needs to minimize latency. Which transport protocol is most suitable for the real-time voice stream, and why?

A network administrator is reviewing the MAC address table on a Cisco access switch and notices that the same MAC address appears on two different access ports in the same VLAN. The administrator confirms that the device with that MAC address is connected to only one port. What is the most likely cause of this duplicate entry?

Which device is primarily responsible for performing inter-VLAN routing in a modern enterprise network?

Which statement correctly describes the function of a default gateway in a host's TCP/IP configuration?

A technician is deploying a new Cisco switch in a wiring closet and needs to connect it to a distribution switch so that it can carry traffic for VLAN 5, VLAN 15, and VLAN 25 between the two devices. The link must carry frames from all three VLANs simultaneously. Which type of port configuration should be applied to the uplink interface on both switches?

A network administrator is documenting the addressing scheme for a new subnet. The subnet uses the IPv4 address 192.168.100.0 with a prefix length of /26. How many usable host addresses are available in this subnet?

A network engineer is troubleshooting connectivity on a host configured with the address 10.10.10.130/26. The host cannot reach a server at 10.10.10.200. Assuming no ACLs or routing issues, what is the most likely explanation?

A user reports they can access the Internet but cannot connect to a specific internal accounting server. Other users in the same department can access the server without issue. What should the technician check first?

Which TWO protocols are commonly used to retrieve email from a remote server to a local mail client?

A company wants to prevent unauthorized individuals from entering the server room by following closely behind an employee. Which physical security control is specifically designed to address this risk?

Refer to the exhibit. If a third device with a different MAC address is connected to this port, what will occur?

A technician is troubleshooting a workstation that cannot connect to the network. The workstation has a valid IP address, subnet mask, and default gateway. The technician can ping the default gateway but cannot ping a server on a remote subnet. Which two commands should the technician use to further isolate the problem? (Choose two.)

Which TWO of the following statements regarding IPv4 address types are true?

Refer to the exhibit. What is the maximum number of usable host IP addresses available on this subnet?

A network administrator wants to prevent users on the corporate LAN from connecting unauthorized wireless access points and switches to wall jacks in conference rooms. The administrator needs a feature that restricts which MAC addresses are allowed to send traffic on each access port. Which Cisco switch feature should be configured?

Which of the following is a primary goal of the 'Accounting' component in the AAA security framework?

A network engineer is configuring a large subnet for a campus and uses the 172.16.0.0/23 prefix. What is the last usable host address available in this subnet?

Which of the following scenarios best demonstrates the function of the Network layer in the OSI model?

What is the directed broadcast address for the subnet in which the host 172.16.50.131/29 resides?

While testing a new 100-meter copper cable run, the technician notices that the signal is very weak at the far end, resulting in intermittent drops. What is the most likely cause of this signal weakening?

Refer to the exhibit. An engineer observes that the interface status for Vlan100 is listed as 'up' but the protocol status is 'down'. What is the most likely root cause of this operational state?

While monitoring a network, an administrator sees a sudden spike in CPU usage on all switches and very high levels of broadcast traffic. What is the most likely cause of this behavior?

A network administrator is troubleshooting a connectivity issue between two hosts on the same VLAN. The administrator uses the 'show mac address-table' command on the switch and notices that the MAC address of one host appears on multiple ports. What is the most likely cause of this behavior?

A network administrator is setting up a small office network with a single Cisco router and multiple switches. The administrator wants to ensure that devices on different VLANs can communicate with each other. Which feature should be configured on the router?

A help desk technician receives a call from an employee who says they received a text message claiming to be from the bank's fraud department, asking them to click a link and confirm their online banking password. The employee has not clicked the link. Which type of attack is this?

A technician is installing a new set of outdoor wireless access points. Which TWO factors are most likely to cause signal attenuation or interference for these endpoints?

A company's IT policy states that only members of the finance group may access the payroll application, and that all access to it must be logged. A technician is asked to enforce this at the network level. Which concept does this requirement primarily describe?

A network administrator is using the 'ping' command to troubleshoot connectivity. Which TWO pieces of information can be determined specifically from the ICMP Echo Reply messages? (Choose two.)

A help desk technician is troubleshooting a Windows workstation that cannot reach any resources on the local subnet. The technician runs ipconfig /all and notices the workstation has an IP address of 192.168.1.50 with a subnet mask of 255.255.255.0, but the default gateway field is blank. The workstation can ping other hosts on the same subnet. What is the most likely cause of the inability to reach remote networks?

Refer to the exhibit. What is the expected behavior if a second device with a different MAC address is plugged into this port?

A network administrator is deploying a new Cisco switch in a small office and wants to apply basic security hardening to protect the management plane. The administrator plans to restrict remote access and prevent unauthorized configuration changes. Which two actions should the administrator take to secure management access to the switch? (Choose two.)

A technician is troubleshooting a user's workstation that cannot reach any resources on a remote subnet, though local subnet communication works fine. The technician suspects a routing or default gateway issue. Which command should be used on the workstation to verify the configured default gateway address?

A network administrator is troubleshooting a connectivity issue between two devices on the same VLAN. The administrator suspects a duplex mismatch on a switch port. Which command should be used on the Cisco switch to verify the duplex settings and error statistics on the interface?

Which type of cabling is best suited for long-distance data transmission that requires high bandwidth and is immune to electromagnetic interference?

A network administrator is replacing older copper cables with fiber optic cables to connect two buildings 500 meters apart. Which type of fiber optic cable is best suited for this distance and provides the highest bandwidth over long distances?

A user at a branch office reports that when they browse to their bank's website, the browser displays a certificate warning and the address bar shows a lock with a red line through it. The help desk confirms the user's PC has the correct date and time. Which security concept is MOST likely being violated in this scenario?

A network technician is tasked with connecting two distribution switches located in separate buildings 500 meters apart. Which media type should be selected to ensure reliable connectivity and high bandwidth without the need for repeaters?

A technician is configuring DHCP snooping on a Cisco switch to prevent rogue DHCP servers. On which type of port should the technician apply the 'ip dhcp snooping trust' command?

Which TWO of the following are primary benefits of implementing a hierarchical network design like the Cisco Three-Tier Model?

A technician is troubleshooting a workstation that cannot reach the network. The workstation's NIC shows a link light, but the switch port statistics indicate a high number of FCS errors and late collisions. The cable run is approximately 120 meters of Cat 5e UTP. Which is the most likely cause of the problem?

A network administrator is subnetting the 172.16.0.0/22 network into smaller subnets to support point-to-point WAN links between routers. Each WAN link requires exactly two usable IP addresses. Which subnet mask should the administrator use to maximize the number of subnets while meeting the requirement?

A network administrator is troubleshooting a connectivity issue between two switches connected via a trunk link. The administrator notices that the trunk link is up, but VLAN 10 traffic is not passing. The administrator runs the show interfaces trunk command and sees that VLAN 10 is not listed in the 'VLANs allowed and active in management domain' output. What is the most likely cause?

A technician notices a laptop has an IP address of 169.254.11.45. The laptop cannot access the internet or local servers. What is the most likely cause of this issue?

In a high-density data center, a technician needs to connect a server to a fiber patch panel using a small form factor connector that supports a push-pull locking mechanism. Which connector should be used?

A small office wants to keep its wireless network traffic private so that neighbors cannot read the data being transmitted. Which technology should be enabled on the wireless access point to encrypt traffic between clients and the access point?

A company wants to ensure that even if an attacker steals a user's password, the attacker cannot log in without a second factor. Which authentication approach best meets this requirement?

A network administrator is troubleshooting a workstation that cannot access network resources. The administrator runs the command arp -a and sees an incomplete entry for the default gateway. Which two actions should the administrator take to resolve the issue? (Choose two.)

A network administrator needs to prevent unauthorized devices from connecting to a switch port while ensuring that only a specific workstation can access the network. Which security feature should be implemented?

A support technician is configuring a wireless access point for a small office. The office wants to allow guest devices to connect without exposing internal resources, while keeping employee traffic separated. Which feature should the technician configure on the access point?

A company uses the 172.16.0.0/16 private address block. The network architect needs to create subnets that each support at least 500 hosts while maximizing the number of subnets available. Which subnet mask should be chosen?

Which of the following best describes the benefit of implementing a hierarchical network design model?

A network technician is tasked with dividing the 192.168.10.0/24 network into four equal-sized subnets to accommodate different departments. Which subnet mask should be applied to achieve this requirement, and how many usable host addresses will be available in each subnet?

A network administrator is connecting two switches directly using a copper cable. Both switches are modern and support auto-MDI/MDIX. Which cable type is required for this connection?

Refer to the exhibit. If a frame with a destination MAC address of 0055.4433.2211 arrives on interface FastEthernet 0/1, how will the switch handle the traffic?

Which THREE statements accurately describe the functions of a Layer 2 switch in a local area network?

An enterprise network administrator needs to deploy a secure out-of-band management network for enterprise switches and routers. Which infrastructure design approach provides the highest level of isolation and security?

Which THREE features are introduced or enhanced in WPA3 to improve wireless security compared to WPA2? (Choose THREE).

A technician connects a new laptop to a Cisco Catalyst switch. The switch receives a frame destined for a MAC address that is not currently present in its MAC address table. What action will the switch take to ensure the frame reaches its intended destination?

A technician is investigating why a user cannot access a web server at 10.1.1.50. The technician runs 'ping 10.1.1.50' and receives a reply, but when the user tries to access the web server via its hostname 'intranet.corp.local', it fails. The user's workstation has a DNS server configured as 10.1.1.10. Which command should the technician use to verify DNS resolution?

A network engineer is planning an IPv4 addressing scheme for a point-to-point WAN link between two routers. The engineer wants to conserve addresses and use a mask that provides exactly two usable host addresses on the link. Which subnet mask should be used?

As data moves down the OSI model from the Application layer to the Physical layer, what is the process called where each layer adds its own control information?

An administrator needs to subnet the 192.168.10.0/24 network into subnets that support at least 25 hosts each. Which CIDR mask provides the most efficient use of addresses while meeting the requirement?

A network technician is investigating why a user cannot reach a public website by its hostname, even though the user can ping the website's IP address successfully. The workstation's default gateway and IP configuration are correct. Which command should the technician run to verify whether the workstation's configured DNS servers are responding?

A network administrator is troubleshooting a workstation that cannot communicate with any other device on the network. The administrator runs 'ipconfig' and sees that the workstation has an IP address of 169.254.10.20 with a subnet mask of 255.255.0.0. The workstation is connected to a switch port that is up and forwarding. Which is the most likely explanation for the workstation's inability to communicate?

Which TWO of the following are primary benefits of using G.729 audio codec for voice traffic in bandwidth-constrained environments? (Choose two)

A network administrator is setting up a small office network with a Cisco router and several switches. The administrator wants to ensure that devices on the local network can communicate with each other and access the internet. Which IP address configuration parameter must be set on each device to allow communication with remote networks?

A network engineer is analyzing a packet capture and observes a TCP segment with the SYN flag set and the ACK flag not set. The engineer needs to determine the purpose of this segment in the TCP three-way handshake. What is the purpose of this TCP segment?

Refer to the exhibit. A technician is troubleshooting a connection between a Cisco switch and a server. Based on the output, what is the most likely cause of the 'line protocol is down' status?

A switch is experiencing high levels of broadcast traffic. Which technology can be used to divide the switch into smaller, independent broadcast domains?

An office uses Power over Ethernet (PoE) to provide power to IP phones. Which device is responsible for acting as the Power Sourcing Equipment (PSE) in this scenario?

A network engineer is configuring IPv6 on a Cisco router interface. The engineer assigns the address 2001:db8:acad:1::1/64 to GigabitEthernet0/0. Which of the following statements is true regarding the interface's IPv6 configuration?

A network administrator is comparing TCP and UDP for different applications on a converged network. The administrator needs to identify characteristics that are true of TCP but not of UDP. Which two characteristics apply to TCP? (Choose two.)

A network administrator is documenting the IPv6 addressing scheme for a new campus. The administrator must identify which statements about IPv6 address structure and notation are accurate. (Choose two.)

A technician is terminating a UTP cable and notices that the plastic clip on the RJ-45 connector is broken. What is the most likely consequence of using this connector for a network endpoint?

A network technician is troubleshooting a PC that cannot access internal network resources. Which TWO steps are recommended to verify if the PC is receiving a valid IP address?

A network administrator observes that a workstation cannot ping its default gateway. The physical link light is active, and the local IP configuration appears correct. Which diagnostic step should be performed first to isolate the layer 2 connectivity issue?

A network engineer needs to allocate a subnet for a link connecting two routers. Which prefix provides the most efficient addressing for a point-to-point connection?

An organization wants to implement a security policy that requires users to authenticate against a centralized server before gaining network access. Which protocol provides the necessary AAA framework to achieve this?

A network administrator is documenting the OSI model layers for a training manual. The administrator needs to identify which OSI layer is responsible for establishing, managing, and terminating sessions between applications on different hosts. Which OSI layer should be documented?

A technician is troubleshooting a router that can ping its own interface but cannot ping a directly connected router's interface. The technician verifies that both interfaces are 'up/up'. What is the most likely cause?

A network administrator is reviewing a Cisco switch configuration and sees that a port in the employee area has been configured with the 'switchport port-security' command and a maximum of one MAC address. A user unplugs their laptop and connects a different laptop to the same port. Assuming the default violation mode, what happens?

An administrator needs to subnet the 192.168.10.0/24 network into subnets that can support at least 25 hosts each. Which subnet mask provides the maximum number of subnets while meeting the host requirement?

Which TWO of the following statements regarding IPv6 address representation are accurate?

A network technician is selecting devices to protect a corporate network from external threats. Which TWO devices provide active threat mitigation by inspecting and blocking malicious traffic? (Choose TWO).

A security analyst notices that an attacker on the same VLAN as a user is sending forged ARP replies so that the user's traffic to the default gateway is redirected through the attacker's workstation. The switch is a Cisco Catalyst with DHCP snooping already configured and working. Which feature should the analyst enable to block this specific attack?

A technician needs to connect a laptop to a Cisco router's console port to perform initial configuration. Which cable should be used for this task?

A network engineer is migrating a network to IPv6 to solve address exhaustion. Which feature of IPv6 eliminates the need for broadcasting to discover MAC addresses on a local link?

A network administrator needs to ensure that data remains confidential during transit across an untrusted network. Which protocol implementation best addresses this requirement?

Which THREE factors influence the selection of a specific router interface for traffic forwarding? (Choose three.)

What is the broadcast address for the network 172.16.20.0/24?

A network administrator is troubleshooting a switch that is experiencing high CPU utilization. The administrator suspects a switching loop. Which command should be used to verify whether Spanning Tree Protocol has blocked any ports to prevent a loop?

Refer to the exhibit. What is the result of applying this ACL to a router interface, and what is its implication for other traffic?

A technician is examining a frame captured on a switch port and sees the destination MAC address field set to FF:FF:FF:FF:FF:FF. What is the purpose of this address in an Ethernet network?

A network engineer is configuring IPv6 on a Cisco router interface. The engineer wants to ensure that the interface can automatically generate a link-local address and participate in neighbor discovery without manual configuration. Which IPv6 address type is automatically generated on the interface when IPv6 is enabled?

A network administrator is troubleshooting an issue where a workstation cannot communicate with a server on a different subnet. The workstation has an IP address of 192.168.1.5/24 and the server is at 192.168.2.10/24. Which component is strictly responsible for routing traffic across these disparate subnets?

A small office wants to reduce the risk of malware arriving through email and malicious websites while keeping administration simple. Which two measures provide the strongest protection against these threats? (Choose two.)

Users on VLAN 20 report that they can reach servers on VLAN 30 but cannot reach any hosts on VLAN 40. The administrator confirms that inter-VLAN routing is configured on a Layer 3 switch with switched virtual interfaces for all three VLANs. Which action should the administrator take first to isolate the problem?

Which TWO protocols are commonly used to remotely manage Cisco network devices? (Choose two.)

Which THREE of the following are considered best practices for hardening a Cisco network device?

A network administrator is configuring a switch port that connects to a server. The administrator wants to ensure that the port does not participate in Spanning Tree Protocol (STP) and immediately transitions to the forwarding state when the link comes up. Which feature should be configured on this port?

A network technician is troubleshooting intermittent connectivity to a server. The technician suspects a duplex mismatch on a switch port connected to the server. Which command should be used to check the duplex setting and error statistics on the switch port?

Refer to the exhibit. A workstation is experiencing intermittent connectivity and slow network speeds. Based on the provided CLI output, what is the most likely cause of the performance issue?

A technician needs to identify which endpoint is connected to a specific switch port. Which command should be used to see the Layer 2 address of the connected device and the port it is associated with?

A technician is terminating a UTP cable. One end is terminated using the T568A standard, and the other end is terminated using the T568B standard. What type of cable has been created?

Which feature is best suited to prevent VLAN hopping attacks where an attacker sends double-tagged 802.1Q frames to reach a restricted VLAN?

A network engineer is deploying a fiber-optic link between two buildings 550 meters apart. The engineer selects 1000BASE-SX multimode fiber with a wavelength of 850 nm. Which statement accurately describes the expected performance or limitation of this choice?

An organization is designing a redundant campus distribution layer to ensure high availability and fast failover. Which TWO infrastructure features should be implemented to achieve sub-second convergence and eliminate routing loops? (Choose two)

When connecting a modern PC directly to a modern Cisco switch port, the technician uses a standard straight-through cable and the link comes up immediately. Which feature enabled this connection to work?

Refer to the exhibit. A technician is verifying the hardware installed in a switch. What type of media is required to connect to the 'Te1/1/1' interface based on the SFP type shown?

A small office technician is assigning IPv4 addresses to devices on a network that will not connect to the internet and uses the 192.168.50.0/24 range. The technician needs to pick an address from the valid host range for this network. Which address should the technician choose?

A network administrator is troubleshooting a switch port that connects to a user's PC. The port shows a status of 'err-disabled' and the reason is 'psecure-violation.' Which action should the administrator take first to resolve this?

An organization is upgrading its cabling infrastructure to support Gigabit Ethernet over a distance of 85 meters. Which twisted-pair cable category is the minimum requirement to reliably support 1000 Mbps speeds at this specific distance?

Refer to the exhibit. A company applies this JSON security policy to its edge firewall. What is the primary standard or concept being enforced by this configuration?

Which TWO of the following are primary security benefits of implementing an Access Control List (ACL) on a Cisco router interface?

Refer to the exhibit. What is the effect of the 'ip dhcp snooping trust' command on the designated interface?

Which TWO statements correctly describe valid rules for compressing or representing IPv6 addresses?

A network administrator is connecting a Cisco switch to another Cisco switch using a copper cable. The administrator wants to avoid manual crossover configuration and ensure the link works regardless of cable type. Which technology should be enabled on the switch ports?

A user reports that they cannot access any websites by name, but they can reach them by typing the IP address directly into the browser. The technician confirms that the workstation has a valid IP address, subnet mask, and default gateway. Which command should the technician use to test whether the DNS server is responding to queries?

Which THREE of the following are valid private IPv4 address ranges as defined in RFC 1918?

Which TWO methods are considered effective for securing the control plane of Cisco networking devices? (Choose two.)

A network engineer is configuring a new switch and needs to ensure that management traffic is isolated from user data traffic. The engineer decides to create a separate VLAN for management and assign an IP address to a switch virtual interface (SVI) on that VLAN. Which type of VLAN is being implemented?

A network technician is troubleshooting a connectivity issue between two switches. The link between them is up, but users on one switch cannot reach devices on the other. The technician suspects a VLAN mismatch. Which command should be used on a Cisco switch to verify the VLAN assignments on a specific interface?

A network engineer is deploying a new Cisco switch and needs to configure it for remote management. The engineer wants to ensure that management traffic is isolated from user data traffic and that only authorized personnel can access the switch. Which two configuration steps should the engineer perform? (Choose two.)

Which component of the AAA security framework is responsible for determining which specific commands a user is permitted to execute on a Cisco router after they have successfully logged in?

A network team is hardening a Cisco Catalyst switch that will be deployed at the edge of the corporate network. They want to reduce the risk of Layer 2 attacks such as MAC flooding and unauthorized device attachment. Which two actions should they take? (Choose two.)

A user reports they cannot access a web server at 192.168.50.10. Which TWO commands would provide the most useful initial diagnostic information regarding the path and reachability to this destination from a Windows workstation? (Choose two).

A network administrator is evaluating endpoint media types for a new VoIP deployment. The IP phones will be powered by the access switches and must negotiate power requirements automatically. Which TWO statements correctly describe how Power over Ethernet (PoE) negotiation works between a Power Sourcing Equipment (PSE) switch and a Powered Device (PD) phone? (Choose two.)

Users in an office report that the wireless network is extremely slow during the middle of the day. A technician discovers a microwave oven and several 2.4GHz cordless phones in the breakroom near the Access Point. What is the cause of this performance issue?

A technician suspects a cable issue on a copper link. Which command should they use to check for electrical issues like shorts or opens?

Which TWO of the following statements are true regarding IPv4 and IPv6 coexistence?

Refer to the exhibit. Based on the IPv6 configuration of the GigabitEthernet0/0 interface, which statement is true regarding the connectivity of this router?

Which security feature is used to mitigate DHCP starvation attacks by limiting the number of DHCP messages per port?

A company is experiencing intermittent network drops in a manufacturing area where unshielded twisted-pair (UTP) cables are run parallel to high-voltage power lines. What is the most effective solution to resolve this issue?

A user reports that they cannot access any websites by name, but they can access websites by typing their IP addresses directly into the browser. The user's computer has a valid IP address, subnet mask, and default gateway, and can ping the default gateway successfully. Which is the most likely cause of the problem?

Which cabling infrastructure standard should an engineer deploy to support 10 Gigabit Ethernet transmissions across a 300-meter horizontal run inside a modern enterprise building?

A security team is reviewing how to protect a small office network from common Layer 2 attacks. The team wants to implement features that specifically prevent MAC address table overflow and ARP cache poisoning. Which two Cisco switch features should the team deploy? (Choose two.)

Which component of an IPv4 address does the subnet mask identify?

A network designer is choosing between SFP and SFP+ transceivers for a new switch deployment. Which TWO statements correctly describe the differences and compatibility between these media modules?

A network engineer is investigating why a switch port Gi1/0/5 is not forwarding traffic, even though the connected device is powered on and the cable is known to be good. The engineer runs 'show interfaces Gi1/0/5 switchport' and sees that the administrative mode is dynamic auto, and the operational mode is access. The port status is 'notconnect'. Which is the most likely reason the port is not forwarding?

What is the primary purpose of a default gateway in an IP host configuration?

A network technician is configuring a point-to-point serial link between two Cisco routers. To conserve address space, the engineer wants the smallest possible subnet that still provides two usable host addresses. Which subnet mask should be applied to the serial interfaces?

A help desk technician is troubleshooting a user who can access internal network shares using an IP address but cannot reach the same shares using the server's hostname. Which network service should the technician investigate first?

Which protocol is recommended for secure remote management of Cisco network devices over insecure networks?

Users on a floor of an office building report that file transfers to a server are slow and sometimes stall. The technician suspects a duplex mismatch on the switch port connecting the server. Which TWO symptoms or outputs would confirm a duplex mismatch on that link? (Choose two.)

A network technician connects a new Cisco Catalyst switch to an existing production switch using a copper straight-through cable. The link lights on both ends remain off, and the technician confirms the cable is functional. The technician then replaces the cable with a crossover cable, and the link comes up. What is the most likely reason the straight-through cable failed to establish a link?

A small branch office has a Cisco Layer 2 access switch with three access ports assigned to VLAN 10 for the sales team and two access ports assigned to VLAN 20 for the finance team. The finance team reports that they cannot reach the sales team's shared file server, even though both teams are connected to the same physical switch. No router or Layer 3 switch is deployed at this branch. What is the most likely explanation for the connectivity failure?

Which TWO characteristics distinguish the User Datagram Protocol (UDP) from the Transmission Control Protocol (TCP)?

An administrator wants to ensure that only legitimate DHCP servers provide IP addresses to clients on the network. Which feature should be enabled?

Refer to the exhibit. A technician is investigating why a device connected to FastEthernet0/1 cannot communicate. Based on the output, what is the most likely issue?

A network administrator must ensure that only specific management stations can reach the management VLAN on a Cisco switch, while ordinary user traffic on other VLANs flows unrestricted. The administrator wants a mechanism that filters traffic based on source IP addresses and can log denied attempts. Which feature should be configured?

A technician is troubleshooting a wireless client that associates successfully with an access point but cannot obtain an IP address from the DHCP server on the wired network. The access point is configured with a management IP on the correct VLAN, and other wired clients on that VLAN obtain leases normally. Which is the MOST likely cause?

A network administrator needs to connect a workstation to a Cisco switch. Which cabling standard and medium should be utilized to ensure full-duplex communication while preventing collision domains?

Refer to the exhibit. An administrator observes high error counts on a switch port. Based on the output, what is the most likely cause of the issue?

A network administrator is configuring a Cisco switch and wants to ensure that only the MAC addresses of known devices are allowed to send traffic on a specific access port. The administrator wants to manually specify the allowed MAC addresses and have the port shut down if a violation occurs. Which feature should be configured?

Which protocol is used to provide dynamic, automatic configuration of VLANs across a domain of switches?

A network designer is planning to use the 10.50.0.0/16 address space. Which TWO of the following represent valid network IDs for subnets created by further dividing this space into /24 segments?

Which field in an IPv4 header is used to prevent a packet from circulating indefinitely in the event of a routing loop?

A network administrator is evaluating a new campus LAN design. The design requires a Layer 2 protocol that prevents switching loops by placing redundant switch ports into a blocking state while still allowing automatic failover if the active path fails. Which protocol should the administrator select?

What is the primary function of the 'show running-config' command on a Cisco switch?

What is the primary function of the Address Resolution Protocol (ARP) in an IPv4 network?

Which device is primarily responsible for managing traffic between different IP subnets in a corporate network?

When a router receives a packet, what action does it take if the destination network is not in its routing table and no default route is configured?

A network administrator is documenting a subnet used for a point-to-point WAN link between two Cisco routers. The link is configured with the address 10.10.10.1/30. What is the network address and the usable host range for this subnet?