N10-006

Front 1

A technician configures a firewall in the following manner in order to allow HTTP traffic

SourceIPZone Dest IPZonePortAction

AnyUntrustAnyDMZ80Allow

The organization should upgrade to which of the following technologies to prevent unauthorized traffic from traversing the firewall?

Back 1

Application Aware Firewall

Front 2

During a check of the security control measures of the company network assets, a network administrator is explaining the difference between the security controls at the company. Which of the following would be identified as physical security controls?

Back 2

Man traps

Biometrics

Cipher Locks

Front 3

Which of the following protocols uses label-switching routers and label-edge routers to forward traffic?

Back 3

MPLS

Front 4

A company has implemented the capability to send all log files to a central location by utilizing an encrypted channel. The log files are sent to this location in order to be reviewed. A recent exploit has caused the company's encryption to become unsecure. Which of the following would be required to resolve the exploit?

Back 4

Install Recommended Updates

Front 5

A wireless network technician for a local retail store is installing encrypted access points within the store for real time inventory verification, as well as remote price checking capabilities, while employee are away from registers. The store is in a fully occupied strip mall that has multiple neighbors allowing guest access to the wireless networks. There are a finite known number of approved handheld devices needing to access the store's wireless network. Which of the following is the BEST security method to implement on the access points?

Back 5

MAC Filtering

Front 6

A desktop computer is connected to the network and receives an APIPA address but is unable to reach the VLAN gateway of 10.10.100.254. Other PCs in the VLAN subnet are able to reach the Internet. Which of the following MOST likely the source of the problem?

Back 6

802.1q is not configured on the switch port

Front 7

A technician wants to securely manage several remote network devices. Which of the following should be implemented to securely manage the devices?

Back 7

SNMPv3

Front 8

In the past, a company has experienced several network breaches as a result of end-user actions. To help mitigate future breaches, which of the following documents should the security team ensure are up-to-date and enforced for all employees?

Back 8

Memorandum of Understanding

Acceptable Use Policy

Front 9

A technician is setting up a new network and wants to create redundant paths through the network. Which of the following should be implemented to prevent performance degradation?

Back 9

Spanning Tree

Front 10

When troubleshooting a network problem, browsing through the log of a switch, it is discovered that multiple frames contain errors. In which of the following layers does the problem reside?

Back 10

Layer 2

Data Link

Front 11

The administrator modifies a rule on the firewall, and now all the FTP users cannot access the server any longer. The manager calls the administrator and asks what caused the extreme downtime for the server. In regard to the managers inquiry, which of the following did the administrator forget to do FIRST?

Back 11

Submit a change request

Front 12

Which of the following physical security controls prevents an attacker from gaining access to a network closet?

Back 12

Proximity Readers

Front 13

Which of the following network elements enables unified communication devices to connect to and traverse traffic onto the PSTN?

Back 13

UC Gateway

Front 14

A technician needs to secure web traffic for a new e-commerce website. Which of the following will secure traffic between a web browser and a website?

Back 14

SSL

Front 15

Exploiting a weakness in a user's wireless headset to compromise the mobile device is known as which of the following?

Back 15

Bluejacking

Front 16

Which of the following allows a telecommunication company to test circuits to customers remotely?

Back 16

Smart Jack

Front 17

A network technician is attempting to locate a switch connected to the fourth floor west side of the building. Which of the following will allow quick identification of the switch, which looking at a logical diagram?

Back 17

Naming conventions

Front 18

A technician is configuring a managed switch and needs to enable 802.3af. Which of the following should the technician enable?

Back 18

PoE

Front 19

A network topology that utilizes a central device with point-to-point connections to all other devices is which of the following?

Back 19

Star

Front 20

Ann, an employee, has properly connected her personal wireless router to a network jack in her office. The router is unable to get a DHCP address though her corporate laptop can get a DHCP address when connected to the same jack. Ann checks the router configuration to ensure it is configured to obtain a DHCP address. Which of the following is the MOST likely reason why the router is not receiving a DHCP address?

Back 20

The administrator has implemented a feature that only allows white-listed MAC addresses

Front 21

Multiple students within a networking lab are required to simultaneously access a single switch remotely. The administrator checks and confirms that the switch can be accessed using the console, but currently only one student can log in at a time. Which of the following should be done to correct this issue?

Back 21

Increase the number of virtual terminals available

Front 22

A technician wants to implement a network for testing remote devices before allowing them to connect to the corporate network. Which of the following could the technician implement?

Back 22

Quarantine

Front 23

Which of the following attacks utilizes a wireless access point which has been made to look as though it belongs to the network in order to eavesdrop on wireless?

Back 23

Evil twin

Front 24

A technician is concerned about security and is asked to set up a network management protocol. Which of the following is the best option?

Back 24

SNMPv3

Front 25

A user is unable to connect to a server in another building. A technican is troubleshooting the issue and determines the follwoing:

1) Client PC 1 has an IP address of 192.168.10.25/25

2) PC 1 can successfully ping its gateway of 192.168.10.1/25 which is an interface of router A

3) Server A is named 'BLDGBFILESRVR01' and has an IP address of 192.168.10.145/25

4) PC 2 with an IP address of 192.168.10.200/25 can successfully ping server A

However when PC 1 pings server A, it receives a destination host unreachable response. Which of the following is the MOST likely cause?

Back 25

Link from router A to PC 1 are on different subnets

Front 26

A network technician is replacing security devices that protect the DMZ for a client. The client has an application that allows external users to access the application remotely. After replacing the devices, the external users are unable to connect remotely to the application. Which of the following is MOST likely misconfigured?

Back 26

Firewall

Front 27

An F-connector is used on which of the following types of cabling

Back 27

RG6

Front 28

Users connecting to an SSID appear to be unable to authenticate to the captive portal. Which of the following is the cause of this issue?

Back 28

RADIUS

Front 29

After connecting a workstation directly to a small business firewall, a network administrator is trying to manage it via HTTPS without losing its stored configuration. The only two pieces of information that the network administrator knows about the firewall are the management interface MAC address, which is 01:4a:d1:fa:b1:0e, and the administrators password. Which of the following will allow the administrator to log onto the firewall via HTTPS if the managements IP address is unknown and the administrator workstation IP address is 192.168.0.10/23?

Back 29

Run the following command on the administrators workstation: arp -s 192.168.1.200 01:4a:d1:fa:b1:0e

Front 30

A network engineer is troubleshooting an issue with a computer that is unable to connect to the internet. The network engineer analyzes the following output from a command line utility:

NetworkDestinationNetmaskGatewayInterface

192.168.1.0 255.255.255.0 192.168.1.254eth0

192.168.1.10 255.255.255.255 192.168.1.10eth0

127.0.0.1255.0.0.0On-Linlo

127.0.0.0255.0.0.0On-Linklo

255.255.255.255 255.255.255.255 102.168.1.10eth0

Back 30

Missing default gateway

Front 31

Users are reporting extreme slowness across the network every Friday. Which of the following should the network technician review first to narrow down the root cause of the problem?

Back 31

Utilization

Front 32

Which of the following can be issued from the command line to find the layer 3 hops to a remote destination?

Back 32

traceroute

Front 33

An administrator has a physical server with a single NIC. The server needs to deploy two virtual machines. Each virtual machine needs two NIC's, one that connects to the network, and a second that is a server to server heartbeat connection between the two virtual machines. After deploying the virtual machines, which of the following should the administrator do to meet these requirements?

Back 33

The administrator should create a virtual switch to bridge all of the connection to the network. The virtual heartbeat NICs should be set to addresses in an unused range.

Front 34

Which of the following integrity security mechanisms ensures that a sent message has been received intact, by the intended receiver?

Back 34

IPSEC

Front 35

A malicious student is blocking mobile devices from connecting to the internet when other students are in the classroom. Which of the following is the malicious student implementing?

Back 35

Jamming

Front 36

A network technician discovers an issue with spanning tree on the core switch. Which of the following troubleshooting steps should the network technician perform NEXT to resolve the issue?

Back 36

Establish a theory of probable cause

Front 37

An administrator has a virtualization environment that includes a vSAN and iSCSI switching. Which of the following actions could the administrator take to improve the performance of data transfers over iSCSI switches?

Back 37

The administrator should set the MTU to 9000 on each of the participants in the vSAN

Front 38

An administrator hosts all the company's virtual servers internally. In the event of total server failure, the server images can be restored on a cloud provider and accessed through the VPN. Which of the following cloud services is the administrator using?

Back 38

Public Iaas

Front 39

A network technician needs to protect IP based servers in the network DMZ from being discovered by an intruder utilizing a ping sweep. Which of the following should the technician do to protect the network from ping sweeps?

Back 39

Block ICMP at the firewall

Front 40

The management team wants to set up a wireless network in their office but all of their phones operate at the 2.4 GHz frequency. They need a wireless network that would be able to operate at a higher frequency than their phones. Which of the following standards should be used?

Back 40

802.11a