A network administrator is implementing process changes based on recommendations following a recent penetration test. The testers used a method to gain access to the network that involved exploiting a publicly available and fixed remote code execution vulnerability in the VPN appliance. Which of the following should the administrator do to BEST prevent this from happening again?

A. Change default passwords on internet-facing hardware.

B. Implement robust ACLs with explicit deny-all entries.

C. Create private VLANs for management plane traffic.

D. Routinely upgrade all network equipment firmware.

A technician is troubleshooting a computer issue for a user who works in a new annex of an office building. The user is reporting slow speeds and intermittent connectivity. The computer is connected via a Cat 6 cable to a distribution switch that is 492ft (150m) away. Which of the following should the technician implement to correct the issue?

A. Increase the bandwidth allocation to the computer.

B. Install an access switch in the annex and run fiber to the distribution switch.

C. Run a Cat 7 cable from the computer to the distribution switch.

D. Enable the computer to support jumbo frames.

SIMULATION
A network technician needs to resolve some issues with a customer's SOHO network. The customer reports that some of the devices are not connecting to the network, while others appear to work as intended.
INSTRUCTIONS
Troubleshoot all the network components and review the cable test results by clicking on each device and cable.
Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem.
If at any time you would like to bring back the initial state of the simulation, please dick the Reset All button.

SIMULATION
Users are unable to access files on their department share located on file server 2. The network administrator has been tasked with validating routing between networks hosting workstation A and file server 2.
INSTRUCTIONS
Click on each router to review output, identify any issues, and configure the appropriate solution.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Users are moving back into an office that had been vacant for a while. Ten workstations are hooked up in the office, but one workstation cannot obtain a link with the switch. A network engineer checks the documentation and cable labeling, and everything is hooked up as expected. The engineer moves the connection to a different switchport. but a link still cannot be obtained. When the engineer puts a tone generator on the infrastructure cable, no tone is heard at the far end. Which of the following issues is the engineer MOST likely trying to find?

A. A bad switchport

B. A break in the cable

C. A cable short

D. Cable interference

A network administrator is working to configure a new device to provide Layer 2 connectivity to various endpoints including several WAPs. Which of the following devices will the administrator MOST likely configure?

A. WLAN controller

B. Cable modem

C. Load balancer

D. Switch

E. Hub

A network deployment engineer is deploying a new single-channel 10G optical connection. Which of the following optics should the engineer MOST likely use to satisfy this requirement?

A. QSFP

B. QSFP+

C. SFP

D. SFP+

A network administrator corrected a rule on a misconfigured firewall. Which of the following should the administrator do NEXT when applying the network troubleshooting methodology?

A. Verify full system functionality.

B. Document actions and lessons learned.

C. Establish a theory of probable cause.

D. Identify potential effects.

Which of the following technologies would MOST likely be used to prevent the loss of connection between a virtual server and network storage devices?

A. Multipathing

B. VRRP

C. Port aggregation

D. NIC teaming

Which of the following services provides the network information for the address when IPv6 is used for SLAAC addressing?

A. EUI-64

B. IPv6 unicast routing

C. Router advertisement

D. DHCPv6

A network engineer needs to enable device monitoring using authentication and encryption. Which of the following protocols offers this option?

A. ESP

B. SNMPv3

C. NetFlow

D. SSLv3

Users are reporting performance issues when attempting to access the main fileshare server. Which of the following steps should a network administrator perform NEXT based on the network troubleshooting methodology?

A. Implement a x to resolve the connectivity issues.

B. Determine if anything has changed.

C. Establish a theory of probable cause.

D. Document all findings, actions, and lessons learned.

A security team would like to use a system in an isolated network to record the actions of potential attackers. Which of the following solutions is the security team implementing?

A. Perimeter network

B. Honeypot

C. Zero trust infrastructure

D. Network segmentation

A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

A. A separate scope for the file server using a /32 subnet

B. A reservation for the server based on the MAC address

C. A static IP address within the DHCP IP range

D. A SLAAC for the server

Which of the following ports is a secure protocol?

A. 20

B. 23

C. 443

D. 445

Which of the following ports is used for secure email?

A. 25

B. 110

C. 143

D. 587

A network administrator wants to install new VoIP switches in small network closet but is concerned about the current heat level of the room. Which of the following should the administrator take into consideration before installing the new equipment?

A. The power load of the switches

B. The humidity in the room

C. The re suppression system

D. The direction of air flow within the switches

Which of the following is the next step to take after successfully testing a root cause theory?

A. Determine resolution steps.

B. Duplicate the problem in a lab.

C. Present the theory for approval.

D. Implement the solution to the problem.

A network administrator is configuring a new switch and wants to ensure that only assigned devices can connect to the switch. Which of the following should the administrator do?

A. configure ACLs.

B. Implement a captive portal.

C. Enable port security.

D. Disable unnecessary services.

Which of the following does OSPF use to communicate routing updates?

A. Unicast

B. Anycast

C. Multicast

D. Broadcast

A user noti es a network administrator about losing access to a remote file server. The network administrator is able to ping the server and verifies the current firewall rules do not block access to the network fileshare. Which of the following tools would help identify which ports are open on the remote file server?

A. dig

B. nmap

C. tracert

D. nslookup

An organization has a factory automation solution that requires accurate timing between devices. Which of the following should the network administrator implement?

A. PTP

B. NTP

C. NTS

D. DoT

Which of the following passwords would provide the best defense against a brute-force attack?

A. ThisIsMyPasswordForWork

B. Qwerty!@#$

C. Password!1

D. T5!8j5

Which of the following is most likely to be implemented to actively mitigate intrusions on a host device?

A. HIDS

B. NIDS

C. HIPS

D. NIPS

A network administrator wants to know which systems on the network are at risk of a known vulnerability. Which of the following should the administrator reference?

A. SLA

B. Patch management policy

C. NDA

D. Site survey report

E. CVE

A network engineer is upgrading an existing edge gateway. The company currently uses a router and needs to be able to filter on all OSI layers.
Which of the following should the engineer use to upgrade the gateway?

A. NGFW

B. Proxy

C. Layer 3 switch

D. Load balancer

Which of the following architectures would allow the network-forwarding elements to adapt to new business requirements with the least amount of operating effort?

A. Software-defined network

B. Spine and leaf

C. Three-tier

D. Backbone

A customer lost the connection to the telephone system. The administration console is configured with multiple network interfaces and is connected to multiple switches. The network administrator troubleshoots and verifies the following:
· The support team is able to connect remotely to the administration console. · Rebooting the switch shows solid link and activity lights even on unused ports.
· Rebooting the telephone system does not bring the system back online.
· The console is able to connect directly to individual modules successfully.
Which of the following is the most likely reason the customer lost the connection?

A. A switch failed.

B. The console software needs to be reinstalled.

C. The cables to the modules need to be replaced.

D. A module failed.

A network security technician is designing a solution for a secure remote access scheme with the following requirements:
· The solution must allow for users at multiple locations to access corporate resources. · The on-premises equipment will not handle non-corporate, resource-bound traffic.
Which of the following should the network security technician consider when designing the solution? (Choose two.)

A. Clientless VPN

B. Personal VPN

C. Full-tunnel VPN

D. Client-to-site VPN

E. Site-to-site VPN

F. Split-tunnel VPN

Which of the following uses an automated script to make configuration changes when interacting with a web application?

A. SSH

B. FTP

C. API

D. GUI

Which of the following should a junior security administrator recommend implementing to mitigate malicious network activity?

A. Intrusion prevention system

B. Load balancer

C. Access logging

D. Endpoint encryption

A client wants to increase overall security after a recent breach. Which of the following would be best to implement? (Choose two.)

A. Least privilege network access

B. Dynamic inventories

C. Central policy management

D. Zero-touch provisioning

E. configuration drift prevention

F. Subnet range limits

Which of the following would be best suited for use at the access layer in a three-tier architecture system?

A. Router

B. Multilayer switch

C. Layer 2 switch

D. Access point

Following the implementation of a BYOD policy, some users in a high-density environment report slowness over the wireless connection. Some wireless controller reports indicate high latency and airttime contention. Which of the following is the most probable root cause?

A. The AP is configured with 2.4GHz frequency, which the new personal devices do not support.

B. The AP is configured with 2.4GHz frequency without band-steering capabilities.

C. The AP is configured with 5Ghz frequency with band-steering capabilities.

D. The AP is configured with 5Ghz frequency, which the new personal devices do not support

A company's VoIP phone connection is cutting in and out. Which of the following should be configured to resolve this issue?

A. 802.1Q tagging

B. Jumbo frames

C. Native VLAN

D. Link aggregation

A network technician is configuring a wireless network that consists of multiple APs for better coverage and allows roaming between the APs.
Which of the following types of SSIDs should the technician configure?

A. Basic Service Set

B. Independent Basic Service Set

C. Extended Service Set

D. Distribution System Service

A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?

A. Change the email client configuration to match the MX record.

B. Reduce the TTL record prior to the MX record change.

C. Perform a DNS zone transfer prior to the MX record change.

D. Update the NS record to reflect the IP address change.

Which of the following network topologies contains a direct connection between every node in the network?

A. Mesh

B. Hub-and-spoke

C. Star

D. Point-to-point

Which of the following layers of the OSI model is responsible for end-to-end encryption?

A. Presentation

B. Application

C. Session

D. Transport

A company, which is located in a coastal town, retro tted an office building for a new data center. The underground fiber optics were brought in and connected to the switches in the basement network MD

A. A server data center was built on the fth floor with the two rooms vertically connected by fiber optics. Which of the following types of environmental sensors is most needed?

B. Temperature sensor in the network MOF

C. Water sensor in the network MDF

D. Temperature sensor in the data center

E. Water sensor in the data center

A network administrator needs to monitor traffic on a specific port on a switch. Which of the following should the administrator configure to accomplish the task?

A. Port security

B. Port tagging

C. Port mirroring

D. Media access control

A company is designing a new complex. The primary and alternate data centers will be in separate buildings 6.2mi (10km) apart and will be connected via fiber. Which of the following types of SFP is the best choice?

A. 10GBASE-SR

B. 10000BASE-LX

C. 10GBASE-LR

D. 1000BASE-SX

After running a Cat 8 cable using passthrough plugs, an electrician notices that connected cables are experiencing a lot of cross talk. Which of the following troubleshooting steps should the electrician take first?

A. Inspect the connectors for any wires that are touching or exposed.

B. Restore default settings on the connected devices.

C. Terminate the connections again.

D. Check for radio frequency interference in the area.

A user took a laptop on a trip and made changes to the network parameters while at the airport. The user can access all internet websites but not corporate intranet websites. Which of the following is the most likely cause of the issue?

A. Duplicate IP address

B. Duplicate SSID

C. Incorrect DNS

D. Incorrect subnet mask

Which of the following best describe the functions of Layer 2 of the OSI model? (Choose two.)

A. Local addressing

B. Error preventing

C. Logical addressing

D. Error detecting

E. Port addressing

F. Error correcting

A network administrator wants to implement an authentication process for temporary access to an organization's network. Which of the following technologies would facilitate this process?

A. Captive portal

B. Enterprise authentication

C. Ad hoc network

D. WPA3

A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10GB connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

A. Port mirroring

B. Log aggregation

C. Flow data

D. Packet capture

A network administrator needs to implement routing capabilities in a hypervisor. Which of the following should the administrator most likely implement?

A. VPC

B. Firewall

C. NFV

D. laaS

A network technician crimped a length of UTP with TIAEIA-568A on one end and TIAEIA-568B on the other. Which of the following cable types did the technician create?

A. Crossover cable

B. Patch cable

C. Twinaxial cable

D. Rollover cable

A network engineer designed and implemented a new office space with the following characteristics:

One month after the office space was implemented, users began reporting dropped signals when entering another room and overall poor connections to the 5GHz network. Which of the following should the engineer do to best resolve the issue?

A. Use non-overlapping channels.

B. Reconfigure the network to support 2.4GHz

C. Upgrade to WPA3.

D. Change to directional antennas.