Question 1

A large company uses an AAA server to manage network device access. The engineers can use their domain credentials to access all other servers. Currently, the network engineers cannot access the AAA server using domain credentials, but they can access it using a local account. Which of the following should the engineers update?

Accepted Answer

The answer of A large company uses an AAA server...

Question 2

An administrator is redesigning a company's network and wants to reduce the amount of hardware needed. Currently, all VLAN routing goes out a single switch interface to a router. Which of the following would reduce the number of devices in this configuration?

Accepted Answer

A multilayer switch can perform both switching and routing functions, allowing VLAN routing to be handled within the switch itself, thus reducing the need for a separate router.

Question 3

A network support specialist is setting up wireless networks for several small companies that are leasing adjacent spaces in an office building. The network support specialist has already configured an access point for each office with WPA2-AES encryption and minimized any overlap of the wireless channels. Several of the companies have expressed concerns about performance and security issues due to the high volume of wireless networks being installed in close proximity. Which of the following actions will BEST mitigate the companies' concerns?

Accepted Answer

Reducing the TX power on each access point will limit the range of the wireless signal, reducing interference and potential security risks from overlapping networks.

Question 4

A technician discovered a company computer had a virus but was unable to remove it. The technician decided to erase the hard drive to eliminate the threat. Which of the following policies did the technician violate?

Accepted Answer

Data loss prevention policy prohibits erasing the hard drive without first backing up the data.

Question 5

A network administrator is adding a new WAN circuit from the ISP to a new building. In which of the following locations would the network administrator find the utility entry point?

Accepted Answer

The utility entry point for a WAN circuit from an ISP is typically found at the demarcation point (Demarc), which is where the ISP's responsibility ends and the customer's responsibility begins.

Question 6

Which of the following can be used to prevent unauthorized employees from entering restricted areas?

Accepted Answer

Swipe badges can be used to control access to restricted areas by allowing only authorized personnel to enter.

Question 7

Which of the following is used to define the duration during which a client can use an IP address?

Accepted Answer

Lease time is used to define the duration during which a client can use an IP address.

Question 8

A company hires another firm to test the integrity of its information security controls. This is an example of:

Accepted Answer

Penetration testing involves hiring an external firm to simulate attacks on a company's systems to identify vulnerabilities and test the effectiveness of security controls.

Question 9

A technician has been asked to install biometric controls at the entrance of a new datacenter. Which of the following would be appropriate authentication methods to meet this requirement? (Choose two.)

Accepted Answer

Retina scanners and fingerprint readers are both biometric authentication methods, which use unique physical characteristics to verify identity.

Question 10

Which of the following OSI layers do TCP and UDP operate within?

Accepted Answer

TCP and UDP operate within the Transport layer of the OSI model, which is responsible for end-to-end communication and data transfer management.

Question 11

A bookstore uses a Faraday cage to comply with credit card regulations. Customers report that their  cellular phones have no signal when they are in the bookstore. Which of the following is the MOST likely cause?

Accepted Answer

A Faraday cage blocks external static and non-static electric fields by channeling electricity along and around, but not through, the cage. This prevents cellular signals from penetrating the cage, thus causing a lack of signal inside the bookstore.

Question 12

A technician is configuring a new email server and needs to modify DNS records. Which of the following records should the technician update to ensure email functions as expected?

Accepted Answer

The MX (Mail Exchange) record is used to direct email to a mail server, so updating this record is essential for email functionality.

Question 13

A network technician works in a large environment with several thousand users. Due to the needs of the organization, the network manager has asked the technician to design a solution that accommodates the data needs of all the users, while keeping all data on site. Which of the following solutions should the technician implement?

Accepted Answer

A SAN (Storage Area Network) is designed to provide high-speed, on-site data storage solutions, which is suitable for accommodating the data needs of a large number of users while keeping data on site.

Question 14

A company wants to implement a wireless infrastructure on its campus to meet the needs of its BYOD initiative. The company has users with legacy devices and wants to accommodate them while delivering speed to other users who have modern systems. Which of the following standards BEST fits these requirements?

Accepted Answer

802.11n is backward compatible with older standards like 802.11b and 802.11g, making it suitable for legacy devices, while also providing faster speeds for modern devices compared to older standards.

Question 15

A utility company has installed a wireless device at a residence that allows the company to view power consumption online. The resident reports the 802.11ac home wireless intermittently loses connectivity for about 15 minutes twice a day. Which of the following is the MOST likely cause?

Accepted Answer

The answer of A utility company has installed a wireless...

Question 16

A shop owner wants to ensure that only a specified group of devices can access the wireless network. Which of the following methodologies will BEST ensure unauthorized devices cannot consume the shop owner's limited Internet bandwidth?

Accepted Answer

MAC address filtering allows the shop owner to specify which devices can connect to the network by their unique MAC addresses, effectively preventing unauthorized devices from accessing the network.

Question 17

Joe, a technician, is attempting to resolve an issue with an off-site router remotely. Joe needs to reset the WAN connection settings and wants to ensure he will have access to the router at all times to monitor the changes. Which of the following solutions would BEST meet this goal?

Accepted Answer

Implementing a modem on the AUX port allows Joe to have an out-of-band management option, ensuring access to the router even if the WAN connection is reset or fails.

Question 18

A Chief Information Security Officer (CISO) has decided to implement a secure and user-friendly way to connect to the corporate wireless network. Each workstation will be authenticated individually using a unique certificate that will be deployed to the workstation by the organization's certificate authority. Which of the following authentication methods would meet this requirement?

Accepted Answer

EAP-TLS (Extensible Authentication Protocol-Transport Layer Security) uses client-side certificates for authentication, which aligns with the requirement of using unique certificates for each workstation.

Question 19

A vendor is installing an Ethernet network in a new hospital wing. The cabling is primarily run above the celling grid near air conditioning ducts and sprinkler pipes. Which of the following cable types is required for this installation?

Accepted Answer

Plenum-rated cables are required for installations in spaces used for air circulation, such as above ceiling grids, because they have a special insulation that is fire-resistant and produces less smoke and toxic fumes.

Question 20

The help desk is receiving reports of intermittent connections to a server. A help desk technician suspects the server is unable to establish a three-way handshake due to a DoS attack. Which of the following commands should a network administrator use to confirm the help desk technician's claim?

Accepted Answer

Tcpdump is a network packet analyzer that can capture and display the traffic on a network. It can be used to analyze the traffic to and from the server to confirm if there are numerous incomplete TCP handshakes, which would indicate a potential DoS attack.

Exam 10: CompTIA Network+