Network+ Practice Questions Day 3

A network engineer performs the following tasks to increase server bandwidth: Connects two network cables from the server to a switch stack Configure LACP on the switchports Verifies the correct configurations on the switch interfaces Which of the following needs to be configured on the server?

• Load balancing

• Multipathing

• NIC teaming

• Clustering

Answer explanation

NIC teaming needs to be configured on the server to increase server bandwidth by connecting two network cables and configuring LACP on the switchports.

A technician is searching for a device that is connected to the network and has the device’s physical network address. Which of the following should the technician review on the switch to locate the device’s network port?

• IP route table

• VLAN tag

• ARP table

• QoS tag

Answer explanation

To locate a device's network port on a switch, the technician should review the ARP table, which maps IP addresses to MAC addresses and can help identify the physical network address of the device.

A network administrator wants to reduce overhead and increase efficiency on a SAN. Which of the following can be configured to achieve these goals?

• Port aggregation

• Traffic shaping

• Jumbo frames

• Flow control

Answer explanation

Jumbo frames can be configured to reduce overhead and increase efficiency on a SAN by allowing larger data packets to be transmitted, reducing the number of packets needed for the same amount of data.

Which of the following factors should be considered when evaluating a firewall to protect a datacenter’s east-west traffic?

• Replication traffic between an on-premises server and a remote backup facility

• Traffic between VMs running on different hosts

• Concurrent connections generated by Internet DDoS attacks

• VPN traffic from remote offices to the datacenter’s VMs

Answer explanation

When evaluating a firewall for east-west traffic in a datacenter, traffic between VMs running on different hosts should be considered as it is crucial to protect internal communication within the datacenter.

Which of the following protocol types describes secure communication on port 443?

• ICMP

• UDP

• TCP

• IP

Answer explanation

Secure communication on port 443 is typically done using the TCP protocol, making TCP the correct choice among the options provided.

A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a non-standard socket. Which of the following types of rules is the administrator implementing?

• NAT

• PAT

• STP

• ARP

Answer explanation

The administrator is implementing a Port Address Translation (PAT) rule to direct HTTP traffic to an internal server listening on a non-standard socket.

Which of the following protocols will a security appliance that is correlating network events from multiple devices MOST likely rely on to receive event messages?

• Syslog

• Session Initiation Protocol

• Secure File Transfer Protocol

• Server Message Block

Answer explanation

A security appliance correlating network events would most likely rely on Syslog to receive event messages from multiple devices.

There are two managed legacy switches running that cannot be replaced or upgraded. These switches do not support cryptographic functions, but they are password protected. Which of the following should a network administrator configure to BEST prevent unauthorized access?

• Enable a management access list

• Disable access to unnecessary services

• Disable access to remote management

• Use an out-of-band access method

Answer explanation

To prevent unauthorized access, the network administrator should disable access to remote management on the legacy switches that lack cryptographic functions.

A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to assign. The ISP assigned 196.26.4.0/27, and the branch gateway router now has the following configurations on the interface that peers to the ISP:

IP Address: 196.26.4.30

Subnet Mask: 255.255.255.224

Default Gateway: 196.24.4.1

The network engineer observes that all users have lost Internet connectivity. Which of the following describes the issue?

• The incorrect subnet mask was configured

• The incorrect gateway was configured

• The incorrect IP address was configured

• The incorrect interface was configured

Answer explanation

The incorrect gateway was configured because the gateway IP address should match the subnet range, which is 196.26.4.1, not 196.24.4.1.

Which of the following would be BEST to use to detect a MAC spoofing attack?

• Internet Control Message Protocol

• Reverse Address Resolution Protocol

• Dynamic Host Configuration Protocol

• Internet Message Access Protocol

Answer explanation

The BEST choice to detect a MAC spoofing attack is Reverse Address Resolution Protocol (RARP) as it maps a MAC address to an IP address, helping identify any spoofed MAC addresses.