N10-008 practice questions 21–30

1. Question 21 · 871 in bank

   A network administrator is reviewing interface errors on a switch. Which of the following indicates that a switchport is receiving packets in excess of the configured MTU?

   • ACRC errors
   • BGiants
   • CRunts
   • DFlooding

   Show answer

   Answer: B

   Explanation

   CRC = Error indicating mismatch in data code & can be a result of an integrity error, decryption error, or difference in transmission speeds. Giants = Error response that indicate if a transmission is bigger than what can be received by the set Maximum Transmission Unit. Runt = Error indicating a frame that is smaller than the minimum frame size for IEEE-802.3 standard frames. Flooding = Method used for loading IP packet data to multiple routers in a system to balance the load, this flood can be done by the following: * Dense Mode = Periodic flood & prune of data flow between routers to form an optimal distribution tree. * Sparse Mode = Uses a shared distribution tree & creates an optimal Shortest Path Tree (SPT) by using standby routers for switchover. There is also Smurf Attack (ICMP Flood) = Occurs when an attacker sends a ping to a subnet broadcast address with the source IP spoofed to be that of the victim server, the victim will receive the responding pings & be overwhelmed.

   Source: Adapted from community discussion — Mehsotopes

   Next question

2. Question 22 · 871 in bank

   A network administrator needs to implement an HDMI over IP solution. Which of the following will the network administrator MOST likely use to ensure smooth video delivery?

   • ALink aggregation control
   • BPort tagging
   • CJumbo frames
   • DMedia access control

   Show answer

   Answer: C

   Explanation

   C. Jumbo frames To ensure smooth video delivery in an HDMI over IP solution, the network administrator would most likely use Jumbo frames. Jumbo frames are Ethernet frames that are larger than the standard maximum transmission unit (MTU) size of 1500 bytes, allowing more data to be transmitted in a single frame. By using Jumbo frames, the amount of data that can be transmitted per unit of time is increased, which can help ensure smooth video delivery. Link aggregation control, port tagging, and media access control (MAC) are not directly related to ensuring smooth video delivery in an HDMI over IP solution. Link aggregation control is the process of combining multiple physical ports into a logical port to increase bandwidth and provide redundancy. Port tagging is the process of marking network traffic with a specific VLAN ID to ensure that it is routed to the correct destination. MAC is a hardware address that uniquely identifies each device on a network. While these techniques may be useful for managing and optimizing network traffic, they are not specifically related to video delivery in an HDMI over IP solution.

   Source: Adapted from community discussion — MelzTheArtist

   Next question

3. Question 23 · 871 in bank

   A network administrator wants to reduce overhead and increase efficiency on a SAN. Which of the following can be configured to achieve these goals?

   • APort aggregation
   • BTraffic shaping
   • CJumbo frames
   • DFlow control

   Show answer

   Answer: C

   Explanation

   In a Storage Area Network (SAN), large amounts of data are frequently transferred, which can result in overhead and decreased efficiency. Jumbo frames can be used to reduce overhead and increase efficiency by increasing the maximum transmission unit (MTU) size for a network. By increasing the MTU size, jumbo frames can reduce the overhead associated with transmitting large amounts of data, resulting in improved performance for large data transfers, such as those that occur in a SAN. Port aggregation (A) combines multiple physical links into a single logical link to increase the bandwidth of a network. Traffic shaping (B) is used to control the flow of data and prioritize certain types of network traffic. Flow control (D) is used to regulate the amount of data that can be transmitted on a network to prevent network congestion. While these technologies can also play a role in improving network efficiency, they are not directly related to reducing overhead in a SAN specifically.

   Source: Adapted from community discussion — StevenElev11n

   Next question

4. Question 24 · 871 in bank

   A company built a new building at its headquarters location. The new building is connected to the company's LAN via fiber-optic cable. Multiple users in the new building are unable to access the company's intranet site via their web browser, but they are able to access internet sites. Which of the following describes how the network administrator can resolve this issue?

   • ACorrect the DNS server entries in the DHCP scope
   • BCorrect the external firewall gateway address
   • CCorrect the NTP server settings on the clients
   • DCorrect a TFTP Issue on the company's server

   Show answer

   Answer: A

   Explanation

   The DNS server would need to point to the internal address for internal networks. If you were using say, Googles DNS server the server would not know how to resolve internal.comapy.site

   Source: Adapted from community discussion — cableblox

   Next question

5. Question 25 · 871 in bank

   A rogue AP was found plugged in and providing Internet access to employees in the break room. Which of the following would be BEST to use to stop this from happening without physically removing the WAP?

   • APassword complexity
   • BPort security
   • CWireless client isolation
   • DSecure SNMP

   Show answer

   Answer: B

   Explanation

   Option B, Port security, would be the best option to use to stop the rogue AP in this scenario. Port security is a feature that can be used to limit the number of devices that can be connected to a switchport. By configuring port security on the switchport to which the rogue AP is connected, the network administrator can ensure that only authorized devices are able to connect to the network and receive an IP address. This would prevent unauthorized devices, such as the rogue AP, from providing Internet access to employees in the break room.

   Source: Adapted from community discussion — StevenElev11n

   Next question

6. Question 26 · 871 in bank

   A company's network is set up so all Internet-bound traffic from all remote offices exits through a main datacenter. Which of the following network topologies would BEST describe this setup?

   • ABus
   • BSpine-and-leaf
   • CHub-and-spoke
   • DMesh

   Show answer

   Answer: C

   Explanation

   C. Hub-and-spoke A hub-and-spoke network topology is a type of network design in which all remote offices (spokes) connect to a central point (hub), typically a datacenter, where all Internet-bound traffic exits. In this setup, the hub acts as the centralized point of control and management for the entire network.

   Source: Adapted from community discussion — JakeCharles

   Next question

7. Question 27 · 871 in bank

   To comply with industry requirements, a security assessment on the cloud server should identify which protocols and weaknesses are being exposed to attackers on the Internet. Which of the following tools is the MOST appropriate to complete the assessment?

   • AUse tcpdump and parse the output file in a protocol analyzer.
   • BUse an IP scanner and target the cloud WAN network addressing.
   • CRun netstat in each cloud server and retrieve the running processes.
   • DUse nmap and set the servers' public IPs as the targets.

   Show answer

   Answer: D

   Explanation

   D. Use nmap and set the servers' public IPs as the targets would be the most appropriate tool to complete the assessment. Nmap is a powerful network scanning tool that can be used to identify open ports, services, and protocols on a remote system. By scanning the public IP addresses of the cloud servers, a security assessment can identify which protocols and services are being exposed to attackers on the Internet. This information can be used to determine potential vulnerabilities and weaknesses in the system.

   Source: Adapted from community discussion — StellarSteve

   Next question

8. Question 28 · 871 in bank

   A systems administrator is configuring a firewall using NAT with PAT. Which of the following would be BEST suited for the LAN interface?

   • A172.15.0.0/18
   • B172.18.0.0/10
   • C172.23.0.0/16
   • D172.28.0.0/8
   • E172.32.0.0/14

   Show answer

   Answer: C

   Explanation

   Network address translation (NAT) and Port address translation (PAT) are often used to translate between global and private ip addresses. Private address for Class B is 172.16.0.0 to 172.31.255.255. Only 172.23.0.0/16 fit the range.

   Source: Adapted from community discussion — Lu5ck

   Next question

9. Question 29 · 871 in bank

   A packet is assigned a value to ensure it does not traverse a network indefinitely. Which of the following BEST represents this value?

   • AZero Trust
   • BPlanned obsolescence
   • CTime to live
   • DCaching

   Show answer

   Answer: C

   Explanation

   C. Time to live (TTL) represents this value. The Time to Live (TTL) value is a field in the IP header of a packet that tells the number of hops (or routers) a packet can pass through before it is discarded. The TTL is typically set to a high value, such as 64 or 128, when a packet is first sent, and it is decremented by one each time the packet passes through a router. When the TTL value reaches zero, the packet is discarded, and a "time exceeded" message is sent back to the sender. This mechanism is used to prevent packets from traversing a network indefinitely, which could cause network congestion and slow down the network.

   Source: Adapted from community discussion — JakeCharles

   Next question

10. Question 30 · 871 in bank

    Which of the following policies should be referenced when a user wants to access work email on a personal cell phone?

    • AOffboarding policy
    • BAcceptable use policy
    • CBYOD policy
    • DRemote access policy

    Show answer

    Answer: C

    Explanation

    The policy that should be referenced when a user wants to access work email on a personal cell phone is the BYOD (Bring Your Own Device) policy. Therefore, option C is the correct answer. A. Offboarding policy refers to the policies and procedures that are in place when an employee leaves the organization. B. Acceptable use policy outlines the acceptable use of company resources such as computers, internet, and email. D. Remote access policy governs the secure and authorized remote access to the organization's network and resources.

    Source: Adapted from community discussion — StevenElev11n

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 21. 871 questions available.