100 Network+ Practice Questions, Exam N10-009

0:00 when studying for certification exams such as your network plus make sure to do a lot of practice questions I recommend 500 plus 5 to 700 plus practice questions is good enough to make sure you know it and make sure the questions are scattered across all the exam objectives in this video I'm going to be doing 100 of those practice questions with you that is scattered across almost all of the exam objectives in particularly the network Plus n10 009 I'm Andrew ramal and I have been teaching certification exams over the last 20 24 plus years now um I've taken over 100 exams have over 60 certification I was a former pentester system administrator and network administrator for a long long period of

0:47 time let's go ahead and get started by the way I do have some of the best sell and highest rated courses on the udmi platform for comp year products and I've taught hundreds of thousands of students so if you haven't studied for Network plus check out my courses all the links in the description below and if you want more practice questions I also have a practice question course that has about close to 600 practice questions again check in the description below let's get started so the way we're going to be doing this is I'm going to display the questions on this white section of the screen and then I'm going to read it and I'm just going to go straight into answering it if you want to practice along with me here's what I suggest go ahead and um the moment you see the question pause the video read the question on your own answer it and then

1:33 I will go over it and tell you why this answer is an answer and why these choices are good or bad so with that in mind let's knock this out I know that's what you're here for now this video is going to be long because we're going to be doing a 100 practice questions so make sure to get get yourself something nice to drink and uh let's knock this out let's get started question number one of 100 okay it says here which of the following best describes the importance of with DHCP relay agents in a network a they manage the IP address that they manage the IP address lease time for the devices on the network they provide backup datp services in case the primary server fails they allow a datp server to assign IP addresses to devices on the same subnet they fire datp requests and responses between clients

2:20 and servers across different subnets now let's take a look here the answer is D okay first of all what is a datp dhp relay agents so when you have a DP server generally it's bound to One Network it sits in one network and it assigns IP addresses within that single network if you want a datp server to assign IP addresses to multiple different subnets you're going to have to set up these relay agents on your routers and then set them up on your servers also so that's why D is absolutely correct let's go through why these are incorrect they manage the leas time incorrect the datp server is what manages the leas time when you configure the lease on the datp server you set the lease time in the course in the labs I

3:06 show you how to do that they provide a backup service they're not a backup service okay you if you want a backup datp service you have to set up another server no lease they allow the datp server to assign IP address to device on the same subnet no the datp server does that by its default configuration all right that is why D is in is absolutely correct because remember for your exam the datp server relay agents or datp relay agents allows you to assign IP addresses to multiple subnets from a single server question number two I had something similar to this on my actual exam which of the following DNS record types is used to map a domain name to an

3:52 ipb4 address answer here is going to be an a record now when you look at a DN server you're going to have all different types of Records so a quad a record or a a a a record this is going to be doing what's known as domain names to IP V6 IP addresses remember what a d what a DNS server does it basically translates domain names to IP address so a quad a record is a V6 and an a record is basically a domain name to an ipv4 address and MX record is what you're going to use to do mail records so for example when you send something to Bob

4:38 at microsoft.com how does when it hits the DNS server that it knows okay what record in the DNS server points to the mail server anytime the DNS server sees that add sign it knows okay I'm going to look for the MX record so the MX record points to the IP address of or the domain name of the ACT ual maale server a cname record is is a way to rename a domain name so this has nothing to do with IP addresses and the MX are emails all right best answer here of course was D question number three which protocol is used by the session layer to manage communication sessions between network devices now on

5:24 your exam you're going to have a lot of questions on your OSI model in fact it's the first thing they cover in exam obje IES make sure you understand what protocol operates at what part of the OSI in the course you notice I gave you a handout that tells you different Protocols of different layers make sure you know that handout so the answer here is going to be RPC remote procedure call is basically uh a session type protocol that maintains a session between two machines versus HTTP FTP and S SM SMTP these are actually using the the application layer ft at HTTP is used to send web pages across the network FTP to send files across the network nmtp simple mail transfer protocol is

6:11 used to send emails all right question number four how does an IPS differ from an IDs IP a IPS only detects potential threats while IDs takes actions to block them IPS provides encryption while s does not IPS operates at the network layer while the IDS operates at the application layer IDs only detects potential threats while IPS blocks them now best answer here guys is going to be notice D why is that correct well let me stop right here I want to stop right here if there's one thing ktia does on their exam is acronym Galore okay know your acronyms if you

6:59 know the acronym of this of what IPS versus IDs you would have gotten this correct pretty much off the bat uh I did a video right here on the channel where I gave away a free network plus guide in the end of that guide I explained every single one of those acronyms so check that video out it's absolutely free there's nothing to sign up I'm not going to take your email you just click the link and download it now let's get into why this is so an IPS is an intrusion prevention system and the IDS is the intrusion detection system the IDS basically only detects a threat versus an IPS would actually block them that is the main difference between them every other statement here is incorrect IPS is really doesn't do encryption IPS this is the opposite of of D say this is

7:45 an incorrect statement now they they're not going to operate at different layer so that is an incorrect statement remember something here's what the IDS does if there's a threat in the network the IDS can detect it and say send an alert to the administrator saying hey this machine has a potential worm on it versus an IPS if it detects oh my God that machine over there has a worm that machine has a virus it can kill the internet connection and stop the the machine from spreading that potential malware making D the best answer number five which protocol is commonly associated commonly used to establish a secure VPN connection is it HTTP FTP IP sector SMTP P once again

8:31 acronym Galore here you need to know your acronyms you need to know your protocols this is a very straightforward question if you understand what we use in securing VPN now I actually covered this in the course we actually do a lot of labs I did a whole Lab on this with you also if you did the lab it's a pretty easy thing because when you're setting up a secure VPN you are going to use IP SEC now IPC which stands for the Internet Security protocol what this does is this is going to allow you to encrypt those VPN tunnels HTTP is not a secure protocol so you don't ever want to use HTTP and it's not used really in vpns um you could use https and do um what's called SSL based vpns across basically an https connection but that's not what that is FTP used to transfer

9:17 file we're not going to use that in a VPN and SMTP used to send emails has nothing to do with a VPN ipct is used in the l2tp or the layer 2 tunnel and protocol VPN tunnels and is one of the most popular options when doing a VPN number six how does not enhance network security by assigning static IP addresses to devices by encrypting all data packets by hiding the internal IP address from external networks by increasing Network bandwidth now if you know what that is this is a very straightforward question in fact you're all probably using it right now you're using that right now you're probably at home in an office and you have a private IP address but when you go outside on

10:03 the network you have that external IP address so what net or network address translation what that's doing is that it's hiding the internal IP address so people only see this external IP that way if a hacker ever tries to get into your network they got to bypass your firewall and they just don't have a direct connection inside into your internal hoses so this is basically the definition of what that is it doesn't assign stat Statics IP static IP are assigned by you it doesn't encrypt data traffic it just translates data and it doesn't increase Network bandwidth in fact it could actually makes it more efficient number seven which Port is commonly used by SSH to secure

10:48 Communications let's stop right here I want you guys to keep in mind that you need to know port numbers you need to know your port numbers really well in fact in the comp exam objective they give you a list of protocols in the exam objectives and they actually tell you the ports on them so make sure you review your exam objectives so the answer here is going to be C 22 okay so 2021 these are FTP ports uh you have telnet on 23 so what is SSH uh SSH is basically a secure version of telnet that's a secure version of logging into a device such as a router or such as a switch and configur in those devices that's really what it's used it basically used to do a secure command line access to a device used to

11:35 configure routers switches and fire walls in particular you don't ever want to use 23 this is Talent this is an insecure connection and you probably don't want to use FTP also just plain FTP because that is insecure for your exam know your port numbers also know when a when one protocol is insecure versus another for example no to use SSH and don't use uh tell use ftps or SFTP don't use FTP things like that you need to know for your exam number eight which of the following ports is used to secure web traffic once again another Port 80 2310 and 443 okay if you know your port numbers pretty straightforward question right

12:21 off the bat 80 is the insecure version all right that's just plain HTTP we just mentioned 23 is telling us say that's not secure 110 uh I believe is pop 3 don't hold me is IM or pop 3 any which way that is insecure emails 443 is actually what we're going to be using to do https or hypertext transfer protocol the secure version of it uh this encrypts it using things like tls/ssl basically the same thing that secures your web page in fact if you're watching this on YouTube right now you're already using Port 44 3 to watch a secure web page all right make sure you know your P your port numbers we just discussed that number nine and I

13:07 can't emphasize this we're going to talk a lot about this in a second a company has been assigned the network address 192168101 believe three questions on IP address and I can't remember the questions exact but you have to know the subnet they're going to give you like a sl25 or SL 2627 they're going to give you an IP address and you have to know what hosters are compatible they may ask you to broadcast uh address in there uh they may ask you the network ID in there they may ask you how many hosts are available on a certain subnet they may ask you uh how many networks you can get if you do

13:55 that subnet so I do recommend to make sure you know how to subnet now I covered that in depth in the course make sure you know how to subnet I showed you that trick of how to subnet out of your head this doesn't require subet this is just using if you know a sl24 is a 255 255 25.0 this is just a plain Class C Network the question is how many hosters do you get well you're not going to get 255 you're not going to get 256 because even though a sl24 basically gives you 256 hoses the first one0 and 255 is unusable because one is the network id0 and the 255 is the broadcast so though with zero and 255

14:41 gone that means you can use IP address 192168 10.1 to1 1921 16810 254 that means you have usable 200 not 253 255 uh there's no 255 it's only 254 users ible addresses if you don't know what I just spoke about there go study your IP address and you need to know check out the section in of course it's like a good three or 4 Hour section an IP address as a network technician network administrator security person every single device in your network will have an IP address you need to make sure you know an i you need to know IP addressing really well you cannot work in the world of it if you don't know IP

15:26 address I believe that IP address is the most important section in the entire network plus uh curriculum number 10 which of the following tools is most commonly used for analyzing and detecting network based attacks is it wi shark putty firewalls or ipss so I put in the actual Pro uh application names but I'm going to tell you what the exam may call it so in this one if you want to analyze uh notice common use for analyzing and detecting network based attacks now you want to detect it so wi shark is a what's known as a protocol analyzer this

16:12 allows you to see and analyze Network traffic putty is used this is a software tool that we use to actually log into devices this gives you like telet and SSH connections this doesn't use analyze traffic a firewall can block certain uh bad traffic but it's not really used for analyzing the data this is the key word even though a firewall and an intrusion prevention systems can detect and stop attacks they're not really going to give you that traffic that you want to see so the keyword is going to be analyzing what do we use to analyze Network traffic in the course we do a lab with wire sharks if you did the lab pretty easy one you'll be able to see the actual Network traffic as it uh flows across the network as a network

16:57 administrator this is a vital skill that all of you should have so make sure you download if you haven't done it yet download it's absolutely free download and make sure you understand how to use wire shark number 11 which of the following is not a DNS record type associated with email router or email security is it MX SPF SRV or text txt make sure you understand all of the different uh DNS record types now answer is the SRV or what's known as a service record service records allows you to find specific servers on a network such as what is the domain what is the head DNS server what is the domain controller on a network MX records are basically where to find an

17:44 email server so that deals with email routing SPF or sender policy framework this is how we secure emails and the txt records is associated with email in fact when you're setting up a lot of email security they're actually txt records I had an I had a question on the exam that dealt with this uh where they ask you if you're setting up like an SPF uh record what are you really setting up and the answer is you're setting up a txt record so keep that in mind when you see me covered DNS in the course you'll see that uh in the lab portion I show you all the different types in that DNS server number 12 okay this is a long one a network technician is tasked with setting up a highspeed long distant link

18:29 between two buildings that are more than 500 M the connection must maintain High data integrity and be immune to interference what cable type would be the best choice is it multi mode fiber Co Axel single mode fiber or Twisted per CA in now when it comes to narrow cable notice that the question specifically says long distance and it has to be immune to interference so if we know it's long distance and it's immune easy easy question first of all coax cable and twisted peer are not immune to interference but fiber is if you're using a short run fiber like inside of your land it makes sense to go with a multi mode fiber they generate cheaper

19:15 and easier to install but when you need that longer run you're going to have to go especially between buildings across the city you're going to have to go to single mode fiber single mode fiber can spend miles so this here is your best option in this one notice because remember you want long distance you want highp speed go with a single mode fiber multimode fiber for your exam is when you use within a land it gives you high speed high immunity cheap cheaper I don't want to say too cheap cheaper than a twisted pair cable twisted pair cabling is what we use 99% of the time land this connects workstations gives you up to 100 m of connection uh cable length which is not too bad it's not as good as fiber but it's a lot cheaper and

20:01 coaxil we really don't use coaxil in today's Network we may use them in video networking those like to connect cameras and things like that uh or you obviously use them in uh if you use cable TV so really not used though in data networking number 13 here we go with a long one a government agency requires a security model for its classified information system the model must ensure strict access control based on the sensitivity of the information and the user clearance only users with the appropriate security clearance should be able to access certain data regardless of their role or position what Access Control model is most appropriate for the scenario now you have to review this is going to come in a security section of the course make sure you understand

20:47 the different security models that are out there now the first one up that we have is going to be daak or discretion Tory Access Control this is really this is when you give the user access and basically the user admins on the machine so this is not what they're talking about mandatory access control is of course the answer mandatory access control is used in basically like places like the NSA it's you access data based on a clearance level you access data based on what the system is going to set you at you have role based access control and attribute based Access Control uh role-based access control is when you access data based on a role maybe if you're if you're in an administrator I'm sorry accountant group or you're in the finance group you can only access accountant or Finance data

21:34 so that's not what they're talking about here attribute base is when you can access data based on a specific attribute such as maybe a time of day or an IP address location this thing here is not asking that they're talking about specifically um based on the user's clearance which is going to be mandatory access control and this is really only used by government agencies especially High secure government agencies think NSA DOD here number 14 which of the following allows a single public IP address to represent multiple private IP addresses by tracking TR uh tracking traffic using different port numbers is it uh Dynamic DNS VPN subnet or port

22:19 address translation now I could have made this harder and I thought about doing that to you but I wanted to show you guys something if you read the question question basically gives you the answer right it says in it port numbers now on the exam they're probably not going to use the word port address translation they're probably going to just say p and you have to know what that means so once again now I did this on purpose I had p and then I just spelled it out to let you guys know that you need to know your acronyms if there's one thing you get out of this video is you better know every single one of those acronyms listed in the exam of objectives okay so what exactly is it so when you're using and this and port address translation is a form in net so

23:06 when you're using net you have a single public IP address and then how do we allow that single public IP address to track all of the internal so for example you may have one single public address but you have 50 internal devices the way it's doing that it's actually not translating an IP address because it's only one of the public it's translating a port number it assigns different and dynamic ports to each one of the traffic requests that's why it's called port address translation this is a form of net all right so when you look at net there's static net there's Dynamic net and then there's overloaded net which is also known as port address translation Dynamic DNS is basically changing an IP address based on a domain name dynamically Dynamic DNS allows you to

23:53 have a domain name that maps to a ever evolve and change in P Dynamic address VPN allows us to connect across the network or across unsecure networks like the internet so basically a user can connect to an office and subnetting allows us to divide large networks using IP addresses number 15 which of the following is a distant Vector routing protocol using smaller networks routing data between routers is it FTP STP OSF or r IP or rip now answer here pretty easy one if you understand your routing protocols the routing information protocol is a very famous protocol that

24:39 we use in today's world if you have a small Network in which case you just want to Route across a few networks it is limited by the number of hops 16 hops in particular so you're not going to use this on a large Network FTP used to transfer files this has nothing to do with IP routing STP or the span entry protocol this is used to ensure that when you're building a a multi-layer switched Network that you ensure that you don't have any kind of repeated links that would create routing Loops in your network or switching Loops in your network so this has to deal with switching not routing ospf okay uh when you're talking about routing protocols you have link State and you have distant Vector distant

25:25 Vector is based on hops link State really looks at the speed of the links OPF is the most popular of all of those link State protocols rip is one of the most popular distant Vector protocols all right make sure you know your different rout and protocols if you do the course with me you know we did a whole Lab uh I showed you guys how to set a packet tracer we did all the labs in the course um when I showed you guys how to configure the actual Cisco routers for uh OPF and Route information protocol we also did labs and I showed you guys about span and tree also number 16 easy question on this what physical tool should a technician use to verify

26:11 the Integrity of an ethernet cable uh is it cable crimper multimeter cable tester or wire stripper so when you want to check basically does a cable work you're going to have to make sure you use a cable tester so cable testers is what we're going to connect um they have two ends on them and basically I connect the cable to see if the cable actually works a crimper is how you put the head on the cable like you put the RJ45 connector on the Twisted paer cable a multimeter used to test the voltage on the cable and wi stripper is just takes the jacket off of the cable when I made the cable in the course wasn't the best wasn't the best uh cable make in there but I did use the crimper to put the head on I used the wire stripper to take the jacket off I

26:57 didn't use the multimeter but we did use as you saw in the demonstration the cable tester to verify it works number 17 which of the following devices access a multi-port network appliance that operates primarily at layer 2 of The OSI model using Mac addresses using a MAC address table to forward traffic based on Hardware addresses thereby segmenting collisions domain within a broadcast domain is it a switch Hub access point or a router now if you understand your OSI model which you will get questions on make sure uh make sure you study that this is a pretty easy one because there's really only one device here that's going to work at Layer Two If you guys remember what layer two is so you have layer one two remember

27:44 it's it's numbered from the bottom so you have your physical your data link your network layer layer 1 two 3 so the switch operates at Layer Two the switch passes data based on the hardware address are also known as your Mac address it does have a MAC address table uh make sure you understand that a hub basically operates at layer one this is more of a multi-port repeater so the access point is not going to pass data based on a Mac address and a router is a layer 3 device that you passes data based on an IP address or logical address number 18 now let me stop right here this is a question that's based on the comps uh troubleshooting methodology in the last objectives you have to

28:32 memorize the steps listed there you will get questions I got about two or three questions that are very similarly worded to this a network technician has received reports of slow Network performance from several users on the same subnet the technician confirms that the issue is consistent across multiple devices and that other subnets are uneffective according to the methodology what should the technician do next now let's stop right here notice you received reports from several users they confirmed that the issue is consistent so he did something the the technician is confirming that the issue is consistent across multiple so he did something so he's confirming okay this is across multiple devices what should he do should he escalate this should he escalate it um they isue a senior

29:20 Network test and Implement a potential solution establish a theory of probable cost document def find in now notice he already knows and he he basically is localizing the problem the next thing the technician has to do is he has to come up okay what is causing this before the technician can escalate it he needs to know what's causing this because if it's something that he can fix he can just fix it right there if it's something outside of what's of of his ability to fix things then he may escalate it he can't test and Implement a solution until he finds out what's causing this and he can't document anything and theine it until the whole problem has been solved so C here is the best answer these types of questions in my opinion are pretty easy all you have

30:06 to do is make sure you understand those steps that ctia gives you and they're very spe very particular to ktia make sure you understand those steps and you're going to get at least three of these questions correct number 19 another big one after an investigation an IT department discovers that many employees are access in social media and streaming websites dur work work hours the company wants to ensure employees can only access work rated during workouts what should they do next configure firewalls to block specific ports used by these websites deploy a web proxy server with content filtering to restrict access to nonwork websites enable Port Marin to monitor employees traffic set up login on the router to capture all now notice the

30:54 question specifically says that the company wants to ensure the employees can only access work rated so in this particular question there's a couple things you can eliminate if you do login this is not going to stop them from accessing the website if you just log things it'll show who access what now so is C this is to monitor we don't want to monitor we want to stop them from accessing it now that brings me to two things now websites all come through the same port right it's not like websites are going to come through different ports different websites different ports that's not the way it works so we know right off the bat is wrong proxy service is how we use to control internet connection if you're at

31:39 a university or you're going to school or you're working in a big company and you go to that uh company or school's computer and you try to access Facebook or some other websites and you get that big thing that comes across the screen that says um this website is not allowed on campus computers or something that's a proxy server proxy servers allows us to filter web content in fact I can go into the proxy and say you can only access these sites or I can go into and it says I'm going to block you from these sites I did a small lab with this in the course so you can check that out also number 20 what is the golden configuration in the context of network management is it a a configuration that allows to maximum throughput on network devices a temporary configuration

32:25 applied during schedule maintenance c a dynamic configuration that automatically adjusts based on narrow traffic patterns d a baseline configuration that is saved and used to restore device to a known stable State okay this here is a straight definition question you just need to understand what exactly is a golden configuration so when a company says we have a golden configuration means they have a best the the top configuration of a machine all machines should be in this quote unquote golden configuration so it's really a baseline it's like a save Baseline minimum it's like these minimum set of configs like for example certain group policies certain updates for example blocking out control panel on a machine uh join to a specific domain set

33:13 an IP certain way this that way if the machine ever dies or the machine needs to be restored or restor this to this golden configuration now it doesn't allow for maximum throughput of network devices because it's not just for network devices a temporary it's not a temporary configuration it's not Dynamic it doesn't change based on traffic patterns it is the same one question 21 which of the following is a link state routing protocol rip ospf bgp and eigrp now the first thing up I want to mention is when I took this exam I had a lot of questions on routing protocols it kind of felt like I was taking more like a CCNA exam any which way the answer here when it comes to link date protocol one of the most famous one is going to

34:00 be open shortest path first now the open shortest path first is basically a protocol that routes data basically on how fast the link is or the link metrics rip out uh route information protocol border Gateway protocol and interior uh exterior interior Gateway routing protocol which CCO proprietary that's a hybrid border Gateway is a distant vector and rip is also a distant Vector protocols making OSF the best answer question 22 which R and protocol is a path Vector protocol primarily used for interdomain routing now what protocol Powers up the internet it basically uses autonomous systems is it

34:46 OPF bgp rip or eigrp now right off the bat the moment you saw it says routing on the internet this should have given away the answer the only real protocol we use on the internet to route across massive networks or big autonomous systems is going to be the Border Gateway protocol this when you're studying your Cisco certifications higher up in Cisco this is the one that you're going to be using border Gateway protocol OSF or open shortest path first is using inside networks rip and eigrp basically protocols we use inside of our networks not outside of our networks 23 a company is concerned that employees might accidentally or intentionally send sensitive financial data outside the

35:32 organization via email which of the following would be the most effective method to prevent this type of keyword data leakage Implement a DLP to detect and block sensitive data encrypt all outbound emails install an endpoint protection software and all devices enforcing strict password policies for accessing emails now if you know the acronym of DLP this should give it away in most big organizations today we Implement DLP what DLP does is that if it's installed in the network if somebody tries to email like credit card information or social security or Healthcare information the DP prompt them and could potentially stop them so

36:18 this something that organizations wants to implement in order to stop people sending out sensitive information if you encrypt emails it wouldn't stop people if you have an encryption on it wouldn't stop people from sending data although if anybody sniffs the line they wouldn't see it so it wouldn't stop them from sending it out endpoint protection software detects malware on your computer it wouldn't stop people from sending anything out it'll probably stop malware from infecting the machine though strict password policies really has nothing to do with email things being sent out through emails 24 a network administrator is upgrading the wireless network in an office building to support faster speeds and better performance in a keyword crowded environment with multiple devices connected

37:03 simultaneously the office building also has a mixture of newer and older device that needs to be connected which 802 standby best choice we have a AC G and andb now I thought this question was fairly easy I I made it fairly easy because if you know you have a lot of wireless networks you're going to want to go with a newer standard the newest standard here is AC now Wireless AC is a much better ones than Wireless a B and G first of all it supports different uh the 2.4 into 5 GHz Spectrum so you probably want to go with that 5 GHz spectrum because then you're not utilizing uh the 2.4 which is generally a crowded Spectrum the other thing here is that AC supports a lot faster speeds than the a g andb 25 a company's it Department

37:51 notices that multiple users are being redirected to malicious websites even when entering imate URLs into their browsers which of the following is most likely the cause of the issue DNS cache poisoning man in the middle ARP spoofing or DHCP starvation now what gives away the answer in this particular question is it says when entering legitimate URLs if you're putting in like google.com and it's redirecting you to a bad website that means there's something going on with your DNS server that means your DNS is is resolved in google.com to a bad malicious IP address which is pointing you to that bad server so more than likely the DNS cache everybody's machine

38:38 everybody's computer has a cache every website you go to it caches what domains you've been to and what IP you resolved to if you want to see it you just go to your go to your command prompt on Windows you type you type ip config slf flushdns I'm sorry slash display DNS and that'll show you the the the DNS cache if you want to get rid of it you just say/ flush DNS now what hackers do is they poison that cash what they do is they insert false entries so let's say you've been to google.com what they do let's say google.com points to 1.11.1 what they do is they change it to 2.2.2 do2 so every time you go to uh google.com you get 2.2.2 which is this bad uh or bad website or bad server man

39:26 in the middle attack is more like a sniffing attack what this does is it sniffs the data not changes the data ARP spoofing this is when they change the AR the the IP address that's mapped to the actual Mac address this wouldn't affect DNS thep starvation what this is going to do is going to deplete all the addresses from the DHCP server and that way no one can get a DHCP address number 26 a network administrator is configuring EIG RP on several routers to ensure quick failover in case the premier route becomes unavailable which of the following term refers to the backup route that eigrp uses so in eigrp you could have multiple redundant

40:13 paths and that's one of the greatest thing when use in eigrp is that it if there's multiple paths it creates redundant paths the one that it always uses is known as the primary path or the primary route and the other one is called the feasible successor in other words if this main route doesn't work or this main path doesn't work it'll take this secondary option so that is the correct terminology the others are not the correct terminology as feasible successor is the correct one 27 a guest contractor needs temporary access to an organization Network for a few days to complete a project the organization wants to ensure that the contractor access is sec ured and limited to only necessary resources

41:00 during this period which of the following authentication method would be best suitable a using a permanent employees credential with two Factor authentication okay Implement Mac address filter to allow to contract his device okay assigning a temporary a unique temporary user account with an expiration date okay setting up an open guest Wi-Fi network with a shared password all right let's see what you guys got on this one I thought this one here was pretty straightforward uh the question specifically States you notice it's for a few days so it's something that's temporary they want to ensure is the the account is secure and limited to only necessary resources so you want you want to create an account and you want to say

41:46 this account can only access this resource with this time so if we make a temporary user account and put an expiration date on it now we can assign the right resources to that account you don't want to get something that's permanent because it says a few days there is not nothing here MAC address filtering applies to devices not user accounts and a Wi-Fi network is going to allow all kinds of devices not a particular user account 28 how are you guys doing so far you guys doing okay are you guys getting these questions I hope so and nwork technician is troubleshooting a slow file transfer issue between two devices on the same network the technician suspects that the problem may be related to how the data is being segmented which layer of the OSI mod responsible for

42:33 data segmentation now in the course if you look at your OSI model there's a diagram I give you and I tell you things like datagrams which one of those are says segment well the the layer that segments data or breaks data into segments is called the transport layer so here you have the physical layer this is going to be things like bits the network layer are packets data link layer are frames and the transport layer are segments remember to go over that in the overi model in the diagrams in the course uh that's covered under the topic of encapsulation and D encapsulation make sure you know those really well question

43:18 29 cloud service provider hosts applications from multiple clients on the same physical infrastructure each client's data and configuration are isolated but they all share the same underlying Hardware resources which term best describes this type of environment is it multi-tenancy virtualization single tency or containerization now I kind of gave it away when I put single and multi- tendency in there because the answer is multi- tendency one of the greatest thing about Cloud the way the cloud works is that it's basically a giant shared infrastructure multi- tendency means that they have tons of hardware and they have tons and tons of users utilizing all of those Hardware so let's say AWS Amazon web services the biggest

44:06 cloud provider in the world right now let's say they have let's just say their whole network was 100 machines they are basically going to allow a thousand people to use all 100 machines at the same time this is called multi- tendency in other words multiple quote unquote tenants are utilizing the same physical resources so this way one guy they don't have to have one server just used by one guy and the guy may not use up all of the server resources wasting resources multi- tendency is great in Cloud because it reduces costs and optimizes resource usage the whole thing is called virtualization no Cloud structure is a single tency unless that cloud is like a private Cloud but public clouds are almost always multi-tenancy

44:52 containers containers is a way basically to have smaller virtual machines they're not talking about that they're talking about multiple people utilizing clouds Cloud resources question 30 a network administrator is comparing different routing protocols for an Enterprise Network the administrator wants to choose a protocol that minimizes bandwidth usage between sending updates only when there are changes in their Network topology rather than periodically broadcast an entire table which of the following protocol would be the best choice now router protocols the way router and protocol work is that they have to keep updating themselves is there a change let's say somebody adds a link to the network or the the the protocol finds out of A New Path that's become

45:39 available they have to talk and update each other the question is how are they doing that well in this question they want to know which one here is they want a protocol to minimize the bandwidth so we don't want to push it out all the time and you want something that pushes only when changes are made the best protocol that does that is eigrp which is heavily optimized uses things like multicast and it only is going to push CH things when something changes this is different than something called Rip route information protocol version one which uses a broadcast it basically sends it to every device in the network every time there's like a roue and change so you never want to use that pop has nothing to do with routing protocols that's post office protocol

46:24 that's receiving emails and TP has nothing to do with routing protocols this is Network time protocol this is how we synchronize clocks across our networks guys if you appreciate this uh this video and what what we have done here and all these questions and me stand in here for so long I would greatly appreciate if you give the video a like subscribe to the channel 31 a data center is expanding and the IT team needs to choose the appropriate rack size for new server deployments which of the following factors should the team consider When selecting a r size choose all that apply a number of servers and and devices to be housed okay coolant and airflow requirements sure rack color

47:11 and Aesthetics future expansion okay power consumption okay rack placement in relation to other devices choose all that applies now I put on this one choose all that applies I want to point out something on the exam they're going to it they make it easier because what they do is they're actually going to say choose three or choose four or choose two which makes it a lot easier to just choose all give you a quick story I once took an exam and they said choose all I literally choos all I did pass that test I'm sure if I got that one right but they're not going to do this they're always going to say choose two choose three so when you're selecting a rack let's say you got a giant rack and you're going you're you're looking at the rack and you're saying well you know which rack should I put into my organization well the number

47:58 one thing you're going to ask youself is how much devices am I going to put how am I going to keep it cool if I buy a rack now can I add to it later and how do I push power through it I don't think you're really going to care too much about what the rack color is almost all of them are black Any Which Way placement in relation to other device although I do like this answer racks are generally placed in dedicated locations makeing a b d and e the best answers question 32 a remote employee needs to securely access the company's internal resources while working from home the IT department is deciding between a split tunnel or full tunnel VPN for an employee what is the key benefit of using a full tunnel VPN full

48:45 tunnel reduces bandwidth usage for the company's internal Network increases security by routing all TR traffic through the company secure network faster connection speeds for Access an external allowing the employee to access both local and Company resources at the same time or simultaneously best answer here guys is going to be B here's why so understand the difference between full tunnel and split tunnel so when you work at home a lot of lot of people do today if you're connecting to your company's Network utilizing a split tunnel a split tunnel means that only when you access company resource you go through the VPN and when you want to access like an Internet site on your local computer then you just utilize your own internet connection that's a split tunnel a a

49:31 full tunnel every single thing you do goes through the VPN so if you're accessing a personal website on your machine you're checking your personal email maybe you're doing some some instant messaging on your machine or something all of that goes through not just what you're accessing from the company what you're accessing personally so what this does is that it increases security because now every single thing you do on that machine flows through the company network if there's any kind of malware or bad sites that you maybe visi in or sites that contains malware all that's going to be inspected by the company's traffic it doesn't actually reduce the bandwidth full tunnel actually pushes more bandwidth through the VPN it does it actually slows it down because now everything is going through the full tunnel connection and

50:16 because of that you're not just going to your ISP you got to go to your company to get to the ISP and all kinds of stuff slows it down actually um both of them allows you to access you can do local and and external resources at the same time 30 three now this one here I have to jump down to the bottom of the screen here let's see what's going on here I do want to point out before we do this question that um you are going to get questions we're going to give you small diagrams or screenshots and you're going to have to read like a table or something in the course we do a whole bunch of commands you have to read the output of the commands this is an output of like a show command from a switch all right the network engineer is reviewing the MAC address table to resolve a network issue pause the video

51:03 right now and I want you to review the table in depth answer a the IP address uh 192168 is assigned to two different Mac addresses on the same VLAN the MAC address is associated with incorrect gives you the MAC address incorrect VLAN the IP address uh 1921681254 is assigned to VLAN 21 the MAC address and then it gives it to you is assigned to two different interfaces now which one is the best answer so hopefully you really analyze it and I thought this one here was pretty easy uh you notice that the IP address 1.21 1.21 1.21 is it has two different if you

51:51 notice Mac address and it's assigned to two different interfaces can somebody tell me what's going on here more than likely this is an IP conflict that means that ethernet that Port 3 and Port six that's connected to the switch has two different machines how do I know they're two different machines because they have two different Mac addresses and what you're know what you're seeing here is that it looks like an IP conflict like somebody assigned this IP on this machine sign signed the same IP on another machine so they're connected on two different ports doesn't matter if they're on the same VLAN on there so that's why this answer answer here is the best now why are the rest wrong is associate you can determine if this is right or wrong you just can't look at a table and tell there is associated with VLAN but you can

52:37 determine that the question doesn't say if what belongs in what VLAN is assigned to two different interfaces it's not if you look it's just one now once again you will get questions on the exam that deals with uh outputs of commands so make sure you know them well 34 which of the following is the next step to take after implementing a solution to a network problem so if you have a network issue maybe you have a computer that's not access in a network and you found out okay maybe it's a Gateway problem maybe it's an IP problem and you fix the IP what do you do next well verify full system functionality escalate it identify new problems related to the network retest the

53:24 original theory of probable cause so if you come up with a solution the easiest thing here to do is to verify that it works pretty straightforward now why I added this question is because in your exam objective I mentioned this earlier in the exam objectives in the last objectives four or five you have to comp your troubleshooting steps matri noo steps and in one when they say implement the next one is to verifi functionality so you have to follow that in the steps in the order that they give you you're not going to escalate it unless it fails don't identify new problems until you verify everything works there's no there's no need to retest the original Theory that's not actually a step 35 a network engineer notices that

54:09 a switch has begun has begun flooding traffic to all ports due to an overload of fake addresses in its cam table what type of attack is likely responsible for this behavior is it AR spoofing Mac floodin DNS spoofing or man in the middle attack answer here is going to be a flood now I thought this one here was pretty easy notice it says there an overload of fake addresses this is going to tell you right away it's dealing with some kind of flood why do people do this let's get something straight when you're connected to a switch when you send data to one port it doesn't repeat that data on every single port it sends it directly over to the currect port in fact I have a switch right here so I was teaching a course

54:55 earlier using this particular switch so here I have a Poe switch and if you when data comes in here if this data coming into Port one is destined to Port four it goes right in here and it comes right out of port four doesn't flood into every port it does this by utilizing in this box we have a cam table or what's known as a Content addressable table or content addressable memory C so that table says that this computer is on this port and this computer is on this port what people do is they flood the cam table so let's say the cam table take takes a th000 entries they push a th fake entries then all of a sudden what the switch this switch becomes a hub and any data that comes into Port one is then repeated to

55:42 every single port this turns your switches into hubs hackers do this or I should say bad people do this because what they want is they want to grab all the dat on the network if all your switches become hubs then anybody can sniff all the traffic on your network so they would do a Mac flooding to flood the cam tables now this is not a spoofing attack a spoofing attack basically replaces one for another so instead of you think you're talking to one person you might be getting to another person it doesn't flood any traffic so it's not a spoofing attack a man in the middle sits between connections to sniffs data it doesn't flood anything 36 a company is looking to optimize its

56:30 storage Network to handle large amounts of data more efficiently they want to reduce overhead and improve the speed of data transmission which of the following Technologies would be the most efficient for achieving this goal now the first thing we want to mention is they're talking of what's called a storage Network now storage Network also known as St storage area networks these kinds of networks are basically where we're going to store large volumes of data the technology it uses to move this data around between all the workstations and all the servers connected to the sand box or S storage area network is going to be the fiber channel the fiber channel technology is what allows that ice scuzzi is how the drives are connected so they're not talking about the drive connections Network file system this is

57:16 how we share files across the network and SMB uh is also about file sharing files across the network in this one we're talking about storage area Networks in particular number 37 which XML based security standard allows sensitive user information to be exchanged between systems for authentication authorization purposes now you have to know things like saml oath for your exam you will see questions on that and as you go up in your security career you're going to see that a lot in fact we use things like saml and O A Lot throughout the internet the answer here is going to be saml now where do you use this if you guys ever go to a website and it's and

58:02 it's things like hey use your Gmail to log into this account log into this website so you have to make another account that means there's a technology that allows you to transfer your authentication information and what you can access between services like Facebook Gmail Linkin and between other variety of websites that you can then connect to this type of technology in particularly is called SSO for the web or what's called Federated Services one of the most famous one that does utilize an XML based standard is saml now saml stands for the security uh assertion markup language and this is how we're going to share authentication and authorization so authentication allows you to login authorization allows you to access

58:49 resources o or open authorization it's only for authorization it's not going to share the authentication radius is a protocol we use to centralize authentication information and Kerberos we use this more in internal networks such as when you're using an active directory Network in a large company to authenticate people or to create that SSO question 38 an Americans engineer has assigned the IP address 10.16 54418 with the subnet mask 255 255 255 that 252 to to the router what is the purpose of this IP configuration it is designed for network with more than 200 it is designed for it

59:34 is used to assign multiple IP addresses it is configured for Point to-point link with another router it is reserved for users to broadcast now right off the bat I can tell you this is a pretty easy question because if you guys know your subnetting this gets right to the point because ad do 252 only gives you two usable IP addresses remember that 254 is only two IP addresses add one broadcast one networks it's unusable so ad. 252 gives you two usable IP addresses this is a sl30 and we use this when we're connecting two points like two routers doesn't have 200 IP address doesn't has to be it had it really only has two so it's not going to say multiple and it's not just used for a server and it's not a reserve all

1:00:21 right 39 another IP question a Security administrator has created a new firewall object for device with the IP address 6 so we have sl25 26 27 28 so uh 128 192 224 240 248 252 254 255 if you guys

1:01:06 remember that if you took the course with me I told you guys to memorize that set of subnet mass and that's a 25 26 27 28 29 30 if you guys remember that subnetting is quite easy on there number 40 a network administrator is unable to remotely access a network appliance that has failed to start up correctly the appliance is not respondent to standard management interfaces like SSH or webbase which of the following method would most likely allow the administrator to access the appliance for troubleshooting restarting the appliance remotely using a wake on land uh using a VPN connecting to a

1:01:53 radius authentication is establishing a console connection using a Serial cable now right off the bat you got to do some troubleshooting in this question it tells you that they can access anything utilizing SSH or web that means the thing is not remotely accessible so that's going to eliminate almost all the options except for one for for won land to work it has to be remotely accessible for VPN to work it has to be remotely accessible a radius server just to authenticate to it what you need to do if you can't get to a device remotely you need to physically go to that device and you need to connect to the device manually and you can use a roll cable or or some uh the roll cables which connects to like a Serial port on a machine to connect to

1:02:39 it so that's important making that the best answer 41 an organization has a limited number of public IP address but needs all employees to access the internet simultaneously from the internal Network which of the following technology would best allow multiple devices to share a single public deploy a datp server to assign IP addresses dynamically utilize P implementing a VPN tunnel configuring a proxy server for internet access in today's world we're all using something called pth port address translation this is a form of that where you use a single IP address to map to multiple internal IP address how do they do this well it's not translated in the IP because it's only one IP they're translate in

1:03:24 multiple ports a datp server it has to be configured with the IPS and it's only going to give the IPS internally not external IPS implementing a VPN doesn't give one person doesn't allow you to take one public and have multiple private a proxy server this just goes out on internet on behalf of it has nothing to do with mapping public and private IP address 42 a network administrator is reviewing signal coverage in a large building to ensure optimal Wi-Fi performance to identify y areas with weak signals and adjust the access point placement accordingly which of the following tools should the administrator use so this is a big problem in networking where when you're setting up access points sometimes you may have like dead spots

1:04:10 sometimes you may have where the signal is very strong and then the signal is too weak over here you have to know where to place your access point but which one of these tools is going to tell us where we have hot and cold signals where the signal is very strong where the signal isn't where the signal is red hot or really cold and blue well as you can imagine the answer here is going to be a heat map so heat map know for your exam tells us how strong a signal is this is used in Wireless placement packet sniffer bandwidth monitor is going to look at uh the packets around the network not a Wi-Fi signal CIS log is used to grab log files on service has nothing to do with wireless 43 assist a security administrator needs to monitor the

1:04:58 contents of data transmitted between a secure network segment and the rest of the company's internal Network to ensure no sensitive information is being leaked which of the following tools would best meet this requirement Port Marin DLP SNMP traps or FTP server so notice is monitor the contents of data transmitted between secure network segments so that's number one uh he wants to ensure that there's no sensitive information that's being leaked so which is the best option here remember he's monitoring the contents of the traffic if you have a switch Network and you're monitoring the the contents of the traffic you want to make sure that you're that you know hey you know

1:05:45 what nobody sending a social security number nobody is sending financial information nobody sending Healthcare information nobody sending a credit card data and the best way to do that that is to implement a DLP system a DLP system can look at the data leaving and coming into machines to make sure they're secure information Port Marin this port Marin just allows you to take data from from the switch and send it all to one port uh SNMP allows you to manage network devices and FTP used to send files question 44 a network administrator needs to implement a Monitoring Solutions that track the health and performance of devices across the network including bandwidth usage

1:06:30 uptime and potential Hardware failure which of the following Solutions with best me this CIS log DCP server Port Marin or SNMP best answer here noce you're tracking the device health quote unquote performance of the device that means you're managing the device if you know what this acronym means it means simple Network management protocol basically the administrator is managing the device CIS log is used to grab the log files or centralize the log files from the devices so that's not that the datp server used to give out IP addresses Port Marin allows you to take all the traffic on one switch and send it to one particular port and this here allows us to monitor the quote unquote health of the device question 45 a network engineer is tasked with

1:07:17 connecting two ports from an access core access switch to the core switch for redundancy and increased bandwidth which of the the following Technologies should the engineer use to ensure both links can simultaneously uh can be used simultaneously without creating a loop is it Port span Port Marin lacp or vtp now here's what they're talking about here so let's you have a core switch this is where the backbone is this is where all your servers might connect to your main routers and so on and then you have an access switch this is where all your workstations would connect to to create redundancy the question wants what if we connect two ports like this the problem when you do this is you create a switch and loop so you would have to enable things like STP to

1:08:02 prevent the switch and loop the problem

…