Question 1

A switch vendor recently released a patch to fix a critical vulnerability found in its switch OS. Which of the following should a network administrator do NEXT according to best practices?

Accepted Answer

Testing the patch in a test environment first is a best practice to ensure it does not introduce new issues before deploying it to production.

Question 2

A company's receptionist hands out slips of paper with access codes to visitors each day. A recent internal audit revealed the current method of guest access needs to be improved. Which of the following would improve the security of the guest network?

Accepted Answer

Implementing a captive portal would improve security by requiring guests to authenticate through a web page before accessing the network, allowing for better control and monitoring of guest access.

Question 3

A Chief Information Officer (CIO) wants a third party to verify the security surrounding an enterprise SQL database server. Which of the following services should the CIO implement?

Accepted Answer

A penetration test is a service that involves simulating cyberattacks to identify vulnerabilities in a system, including an SQL database server, and is suitable for verifying security.

Question 4

A web server administrator has changed the domain registrar's A record for the company's website. External users can reach the website, but internal users are unable to do so. The web server is accessible by typing the internal IP into a web browser. Which of the following is the reason why the web server cannot be accessed?

Accepted Answer

The corporate DNS server has not been updated, so internal users are still resolving the old IP address instead of the new one.

Question 5

A company's Chief Information Security Officer (CISO) has decided to increase overall network security by implementing two-factor authentication. All users already have username/password combinations and require an additional factor of authentication. Which of the following would satisfy the requirements?

Accepted Answer

An RSA token is a physical device that generates a code used as a second factor of authentication, providing something the user has, which complements the username/password (something the user knows).

Question 6

A company needs to implement a fault-tolerant server configuration after the failure of its database server. The company decides to implement load-balancing redundant servers. Which of the following should be used for file storage for the servers?

Accepted Answer

SAN (Storage Area Network) is a dedicated high-speed network that provides block-level storage access to multiple servers. It is commonly used in fault-tolerant server configurations to provide shared storage for redundant servers.

Question 7

A company requires a network storage solution that allows for the use of OS-specific credentials and permissions. The company purchases a SOHO solution, which includes support for SMB, iSCSI, FTP, Telnet, and NFS natively out of the box. Which of the following should be done FIRST?

Accepted Answer

Disabling unnecessary services should be done first to reduce potential security vulnerabilities and ensure that only required services are running.

Question 8

A technician is troubleshooting a host that is having intermittent issues connecting to internal network resources and the company servers. Using a packet sniffer, the technician notices there are several TCP communications that are missing packets in sequence and need to be retransmitted. The technician receives several SYN-ACK packets with incorrect addressing. Which of the following is the MOST likely cause of these issues?

Accepted Answer

An ARP poisoning attack can cause incorrect IP-to-MAC address mappings, leading to incorrect addressing in TCP communications and resulting in packet loss and retransmissions.

Question 9

A network technician is installing a wireless solution. The solution needs to support new and legacy wireless network clients at the maximum possible speed. Which of the following wireless standards should the technician install?

Accepted Answer

802.11n supports both 2.4GHz and 5GHz bands, providing compatibility with legacy devices and offering higher speeds than older standards like 802.11a, b, and g.

Question 10

A network technician needs to create separate networks for several classrooms and administrative offices. They have been provided with the network address 192.168.1.0/24. They will need five classrooms of 25 hosts, two classrooms of 14 hosts, six admin hosts on the network, and three subnets for router connections. Which of the following IP concepts would need to be deployed?

Accepted Answer

Variable Length Subnet Masking (VLSM) allows for the creation of subnets of different sizes, which is necessary to efficiently allocate the given /24 network address to the various subnets required for classrooms, admin hosts, and router connections.

Question 11

A network administrator notices a wireless network with the SSID HOME-33BC-5G that has a high signal strength and open authentication. When the administrator connects to the SSID, corporate servers can be accessed. Which of the following has the network administrator discovered?

Accepted Answer

A rogue AP is an unauthorized wireless access point that is connected to a legitimate network. It can be used to intercept traffic, launch attacks, or provide unauthorized access to the network.

Question 12

A network technician is working on a new wireless project. The network manager has a primary requirement of achieving speeds of at least 1 Gbps when connected. Which of the following standards would be appropriate for the technician to implement?

Accepted Answer

802.11ac supports speeds over 1 Gbps, making it suitable for the requirement.

Question 13

A network administrator is deploying a new switch in an existing IDF. The current switch has only copper Ethernet ports available to use for the trunk ports. Which of the following cable types should the network administrator deploy?

Accepted Answer

A crossover cable is used to connect two similar devices, such as switch to switch, using copper Ethernet ports.

Question 14

Joe, a network technician, has received a report that one of his clients is experiencing an issue connecting to the network. Joe observes two clients are connected to a hub, which is connected to separate wall jacks. Which of the following has MOST likely occurred?

Accepted Answer

The answer of Joe, a network technician, has received a...

Question 15

A company is starting a new process of allowing its employees to have the option of working from anywhere in the world. After some research and approval from the board of directors, it is time to implement the new process. Which of the following policies should be used for this new process?

Accepted Answer

A Remote access policy is essential for managing how employees can securely access the company's network and resources from any location worldwide.

Question 16

A technician is working on a Linux VM in a lab environment to become more familiar with the operating system. The technician has configured a basic website and wants to allow access to it from a different machine on the local network. Which of the following should the technician do so other machines can connect?

Accepted Answer

The technician should add access rules in iptables to allow traffic through the necessary ports for the website, enabling other machines on the local network to connect.

Question 17

A system administrator reports that one of the two domain name servers does not seem to be responding to DNS requests from clients. The servers are both up and running, name service is running on them, and DNS requests appear in the logs. Both servers respond to queries made at the console. Which of the following tools should the systems administrator use to gather more information?

Accepted Answer

The answer of A system administrator reports that one of...

Question 18

When trying to determine why users are unable to access a web-based application that was working the previous day, which of the following should be the FIRST question to ask to determine the scope of the issue?

Accepted Answer

The answer of When trying to determine why users are...

Question 19

Which of the following steps is a network technician MOST likely to take to secure a new network printer? (Choose two.)

Accepted Answer

Changing default credentials and disabling unnecessary services are common steps to secure a network printer, as they help prevent unauthorized access and reduce potential vulnerabilities.

Question 20

An end user at an Internet cafe tries to visit an online retailer's website; however, the website for a competitor loads. The user checks the URL in the address bar and verifies it is correct, but the competitor's page still loads. Which of the following BEST describes what is occurring?

Accepted Answer

DNS poisoning is when the DNS records are altered to redirect users to a different website, which explains why the user is being redirected to a competitor's site despite entering the correct URL.

Exam 10: CompTIA Network+