N10-008 practice questions 641–650

1. Question 641 · 871 in bank

   Users are reporting performance issues when attempting to access the main fileshare server. Which of the following steps should a network administrator perform NEXT based on the network troubleshooting methodology?

   • AImplement a fix to resolve the connectivity issues.
   • BDetermine if anything has changed.
   • CEstablish a theory of probable cause.
   • DDocument all findings, actions, and lessons learned.

   Show answer

   Answer: B

   Explanation

   Determining if anything has changed is an essential step in troubleshooting because changes in the network environment, configuration settings, or system updates can often lead to performance issues or connectivity problems. By identifying any recent changes, the administrator can narrow down potential causes and focus troubleshooting efforts more effectively. This step involves asking questions and gathering information from users or other team members to understand if any modifications or updates have been made to the network infrastructure, server configuration, or client devices that could be contributing to the performance issues. Once the administrator determines if anything has changed, they can proceed with establishing a theory of probable cause and implementing a fix or workaround to address the performance issues if necessary. Therefore, B. Determine if anything has changed is the correct next step in the network troubleshooting methodology in this scenario.

   Source: Adapted from community discussion — Babatundeio

   Next question

2. Question 642 · 871 in bank

   A network administrator is implementing process changes based on recommendations following a recent penetration test. The testers used a method to gain access to the network that involved exploiting a publicly available and fixed remote code execution vulnerability in the VPN appliance. Which of the following should the administrator do to BEST prevent this from happening again?

   • AChange default passwords on internet-facing hardware.
   • BImplement robust ACLs with explicit deny-all entries.
   • CCreate private VLANs for management plane traffic.
   • DRoutinely upgrade all network equipment firmware.

   Show answer

   Answer: D

   Explanation

   D. Routinely upgrade all network equipment firmware. The penetration testers gained access by exploiting a known and fixed remote code execution vulnerability in the VPN appliance. The best preventive measure to avoid such incidents in the future is to routinely upgrade all network equipment firmware. Regularly updating firmware ensures that vulnerabilities, especially those that have been publicly disclosed and for which fixes are available, are patched. This reduces the attack surface and protects against known exploits.

   Source: Adapted from community discussion — subaie503

   Next question

3. Question 643 · 871 in bank

   A technician is troubleshooting a computer issue for a user who works in a new annex of an office building. The user is reporting slow speeds and intermittent connectivity. The computer is connected via a Cat 6 cable to a distribution switch that is 492ft (150m) away. Which of the following should the technician implement to correct the issue?

   • AIncrease the bandwidth allocation to the computer.
   • BInstall an access switch in the annex and run fiber to the distribution switch.
   • CRun a Cat 7 cable from the computer to the distribution switch.
   • DEnable the computer to support jumbo frames.

   Show answer

   Answer: B

   Explanation

   B. Install an access switch in the annex and run fiber to the distribution switch. The issue stems from the Cat 6 cable running a distance of 492ft (150m), which exceeds the maximum recommended length of 100 meters (approximately 328 feet) for Ethernet over copper cabling. This can cause slow speeds and intermittent connectivity due to signal degradation over the extended distance.

   Source: Adapted from community discussion — subaie503

   Next question

4. Question 644 · 871 in bank

   SIMULATION - A network technician needs to resolve some issues with a customer's SOHO network. The customer reports that some of the devices are not connecting to the network, while others appear to work as intended. INSTRUCTIONS - Troubleshoot all the network components and review the cable test results by clicking on each device and cable. Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem. If at any time you would like to bring back the initial state of the simulation, please dick the Reset All button.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   IDK, but at least we have an idea of where to look. Should be easy to figure out if that is the issue with the IPs and Subnet given

   Source: Adapted from community discussion — 72abe44

   

   Next question

5. Question 645 · 871 in bank

   A technician is troubleshooting intermittent connectivity between devices and viewing the following syslog entries from a switch: 21 Feb 2022 16:02:0231 NOTIFICATION %LINK-I-DOWN: G1/10 21 Feb 2022 16:02:0262 NOTIFICATION %LINK-I-UP: G1/10 21 Feb 2022 16:03:5321 NOTIFICATION %LINK-I-DOWN: G1/10 21 Feb 2022 16:03:7873 NOTIFICATION %LINK-I-UP: G1/10 Which of the following are these entries indicative of?

   • ADDoS attack
   • BJitter
   • CLatency
   • DLink flapping

   Show answer

   Answer: D

   Explanation

   D. Link flapping The syslog entries from the switch indicate that the link on port G1/10 is repeatedly going down and then coming back up in a short amount of time. This behavior is known as link flapping. Link flapping can be caused by various issues, such as faulty cables, bad ports, or misconfigured network equipment, leading to intermittent connectivity between devices.

   Source: Adapted from community discussion — subaie503

   Next question

6. Question 646 · 871 in bank

   Which of the following can be used to aggregate logs from different devices and would make analysis less difficult?

   • ASyslog
   • BSIEM
   • CEvent logs
   • DNetFlow

   Show answer

   Answer: B

   Explanation

   B. SIEM Security Information and Event Management (SIEM) systems are designed to aggregate, analyze, and report on log data from various sources across the network, including security devices, network infrastructure, systems, and applications. SIEM solutions centralize the collection of log data, making analysis less difficult by providing tools and features to correlate events, detect anomalies, and generate alerts on potential security incidents or operational issues. This makes SIEM an effective choice for managing logs from different devices in a unified manner.

   Source: Adapted from community discussion — subaie503

   Next question

7. Question 647 · 871 in bank

   A network administrator is checking to see if anything has changed. Which of the following steps of the troubleshooting methodology is involved?

   • AIdentify the problem.
   • BTest the theory.
   • CEstablish a theory.
   • DDocument findings.

   Show answer

   Answer: A

   Next question

8. Question 648 · 871 in bank

   Select 2

   An older web server on a screened subnet is serving unencrypted web traffic. The server is not capable of serving HTTPS traffic directly, but the firewall is capable of doing so. Which of the following should be done to encrypt all traffic coming into the web server from outside the network? (Choose two.)

   • AA certificate should be installed on the server.
   • BIncoming port 80 traffic at the firewall should be forwarded to port 443 on the server.
   • CIncoming port 80 traffic at the firewall should be forwarded to port 80 on the server.
   • DIncoming port 443 traffic at the firewall should be forwarded to port 80 on the server.
   • EA certificate should be installed on the firewall.
   • FA proxy server should be installed on the screened subnet.

   Show answer

   Answer: DE

   Explanation

   To encrypt all traffic coming into the web server from outside the network, the following steps should be taken: Install a certificate on the firewall: The firewall should be configured to handle the encryption and decryption of HTTPS traffic. This involves installing a valid SSL/TLS certificate on the firewall to secure the incoming web traffic. Incoming port 80 traffic at the firewall should be forwarded to port 443 on the server: Since the web server is not capable of serving HTTPS traffic directly, incoming HTTP (port 80) traffic should be forwarded to port 443 (HTTPS) on the server by the firewall. This allows the firewall to handle the encryption and forward the secure traffic to the web server.

   Source: Adapted from community discussion — subaie503

   Next question

9. Question 649 · 871 in bank

   A network manager wants to set up a remote access system for the engineering staff. Access to this system will be over a public IP and secured with an ACL. Which of the following best describes this system?

   • AVPN
   • BSecure Shell
   • CJump server
   • DAPI

   Show answer

   Answer: A

   Explanation

   A. VPN Setting up a remote access system for the engineering staff that is accessible over a public IP and secured with an Access Control List (ACL) best describes a Virtual Private Network (VPN) setup. A VPN allows remote users to securely connect to the internal network over the internet by encrypting the data traffic.

   Source: Adapted from community discussion — subaie503

   Next question

10. Question 650 · 871 in bank

    A company is hosting a secure server that requires all connections to the server to be encrypted. A junior administrator needs to harden the web server. The following ports on the web server are open:

    

    Which of the following ports should be disabled?

    • A22
    • B80
    • C443
    • D587

    Show answer

    Answer: B

    Explanation

    B. 80 Port 80 is used for HTTP, which is unencrypted web traffic. Since the requirement is for all connections to the server to be encrypted, disabling port 80 (which facilitates unencrypted connections) would ensure that all web traffic to the server is encrypted, typically via HTTPS on port 443.

    Source: Adapted from community discussion — subaie503

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 641. 871 questions available.