Networking Concepts (23%)

N10-009 · 69 questions

• A new desktop at a retail store boots with the address 169.254.18.42 and the mask 255.255.0.0. It can reach other 169.254 addresses on the same switch and nothing on the store's 10.6.0.0 network. What does that address indicate?
• An insurance office replaces a shared hub with a switch. Stations on the same VLAN still hear broadcasts together, but a known unicast frame is no longer repeated out of every port. Which decision is the switch making?
• A retail contact center must carry live agent audio. A late packet is useless, and pausing the stream to recover a lost one would be worse than a brief gap. Which transport behavior fits that requirement?
• A university wants a device that sits in the path between the dorms and the data center and drops a known exploit before it reaches a server. A device that only receives a mirrored copy and sends an alert would be too late. Which appliance matches the requirement?
• A data center carries most of its traffic between servers inside the building, and the design should put every access switch the same number of hops from every other access switch. Which architecture matches that goal?
• A contractor will pull network cable through the open space above a branch-office ceiling. That space returns air to the air handler and is not a closed metal conduit. Which cable belongs in that space?
• A retail chain wants checkout traffic to prefer each store's private circuit and guest wireless traffic to use the broadband circuit. The choice should follow one central policy as stores are added, without rewriting every router by hand. Which design fits?
• A firewall rule must allow encrypted command-line administration of a Linux server and must keep clear-text Telnet blocked. Which destination port should the allow rule use?
• A city clerk needs a hosted permitting application, will use it only through a browser, and must not patch either the operating system or the application. Which service model fits?
• A planner must pick an address that is inside the RFC 1918 private space and will not be used on the public internet. Which address qualifies?
• A web store automatically adds computing capacity on the morning of a sale and releases that capacity the same night. Which cloud property is this?
• A retail site runs three identical web servers and wants a device in front of them that spreads client sessions and stops sending new sessions to a server that fails its health check. Which device does that?
• Two buildings on a campus are 10 kilometers apart and need a fiber link at 10 gigabits. Which medium is the appropriate choice for that distance?
• A student is labeling a capture taken on an access port. The unit that includes the source and destination MAC addresses needs a name. Which name is correct for that unit?
• A campus DHCP server sits on the same VLAN as the clients and must receive their discovers and return offers. Which ports carry that exchange?
• A technician must plug a small duplex fiber connector into an SFP on a factory switch. Which connector is that small duplex form?
• A customer needs an isolated virtual network inside a public cloud, kept separate from other customers' networks. Which construct provides that isolation?
• A factory training video must reach many subscribed receivers, must not be delivered to every host on the subnet, and must not be copied once per viewer. Which delivery method fits?
• A 40-person office does not need a separate core tier and a separate distribution tier. Which design keeps an access layer and merges those two upper tiers?
• A campus lab needs addresses for 100 usable hosts and wants the smallest common prefix that still fits them. Which prefix should be assigned?
• Two data halls must extend the same VLAN across a layer-3 underlay between them. Which technology encapsulates the original layer-2 frame so that VLAN can cross the underlay?
• During a campus migration, each server must keep its IPv4 address and also run IPv6 on that same interface. Which approach is this?
• A library branch is installing a cable modem, and the coax lead ends in a threaded connector that screws onto the modem. Which connector is that?
• A factory database team wants a block device delivered over the storage network, so the server sees a disk as if it were local. Which design provides that?
• A library router chooses a next hop between two subnets by comparing the destination IP address with its routing table. Which layer makes that forwarding decision?
• A workstation in city hall loads a public website, and the packets leave the data center toward the internet. Which name describes that direction of traffic?
• A campus filter drops ping to a server, yet browsers on the same PCs still open that server with HTTPS. Ping does not use a TCP or UDP port. Which protocol is ping using?
• A school lab is sorting four IPv4 addresses before a multicast exercise. Which address is the IPv4 multicast address?
• Payroll stays in the company's own data center, and the public website runs in a public cloud. Which deployment model is that?
• Multicast routing updates must cross an IP network between two data halls. Encryption will be added as a separate IPsec layer, and the encapsulation itself must not encrypt. Which encapsulation fits?
• On a busy factory link, voice must be queued ahead of the nightly backup so the backup cannot starve the calls. Which feature does that?
• A student browser loads a school web page with HTTP, a protocol that sits at the top of the OSI model. Which layer is HTTP associated with on that model?
• Retail instances in a private cloud subnet have no public addresses. They must open outbound internet sessions and must not accept inbound connections from the internet. Which service provides that egress?
• A city-hall router decrements a field on every hop, discards the packet when the field reaches zero, and can send time exceeded. That same behavior lets traceroute map the path. Which field is it?
• On the OSI model this exam uses, a study item asks which layer is associated with data formatting and encryption. Which layer should the candidate name?
• A thrift-store counter still uses a hub between the register and the wall. Every bit that arrives on one hub port is repeated out of the other ports, and the hub never reads a MAC address or an IP address. Which OSI layer is that behavior?
• A factory aggregation switch needs a transceiver for a 40-gigabit Ethernet port, and the port takes the larger four-lane optic form factor. Which part matches the port?
• A warehouse handheld answers a ping to 127.0.0.1 and still cannot reach any host on the floor. What did the successful ping prove?
• In a data-center row, cost is acceptable and no single link failure may isolate a switch, because every switch has a direct link to every other switch. Which topology is that?
• A label printer sits on the same user VLAN as the payroll PCs at city hall. The printer must not reach payroll merely because it shares that VLAN, and each request has to be checked. Which approach is that?
• Two switches in the same data-center rack need a short 10-gigabit copper link, and pulling fiber for that jump would be wasted. Which cable fits?
• A retail scheduling application runs in a public cloud where many customers share the provider's physical hosts and depend on the provider to isolate them from each other. Which cloud trait is that sharing?
• Payroll files at a county office still move with clear-text FTP on TCP 21. The transfer should change to the encrypted file service that uses the Secure Shell port. Which service and port replace FTP?
• Staff at a school must browse the internet through one system that authenticates them and logs every site they open. Which system does that job?
• A community college links two buildings with one dedicated wireless bridge and has no third site on that link. Which topology is the bridge?
• A retailer serves the same product images to shoppers far from its only data center. Which function places cached copies of those images closer to the shoppers?
• A community college lab asks which OSI layer opens, keeps, and closes the dialogue between two applications. Which layer owns that job?
• Two closets in a government building are 150 meters apart and the link must be fiber. The team wants the short-reach fiber type used inside buildings, not a long-haul type. Which medium fits?
• A university announces the same DNS resolver address in three cities, and routing sends each campus to the nearest copy. The address is not a multicast group and is not delivered to every host. Which method is this?
• A school lab needs a new IPv4 subnet with at least 50 usable hosts and with as little wasted address space as possible. Which prefix should the lab choose?
• A hospital team deploys its own patient-portal code. The cloud provider patches the operating system and the runtime, and the team does not manage virtual machines. Which service model is this?
• A credit union runs its branch firewall as a virtual machine on a host, not as a separate hardware appliance. Which concept describes that choice?
• A technician in a government closet needs the larger square push-pull fiber connector, not the small duplex connector used on an SFP. Which connector is that?
• A logistics company keeps switch configurations as versioned templates and uses automation to apply them, instead of typing each change by hand. Which practice is that?
• A payroll transfer between two clinics must be encrypted on the IPsec path, not merely checked for tampering. Which protocol provides that encryption?
• A campus instructor asks which headers wrap application data as it moves down the stack for transmission. Which sequence is the one this exam uses?
• A retail chain wants every store to reach the data center, and stores must not have direct circuits to each other. A link between every pair of sites costs too much. Which topology fits?
• A clinic edge router must not advertise an inside source address onto the public internet if that address is private. Which address is private and therefore needs translation first?
• A cloud web server allows inbound TCP 443, and the matching return traffic is allowed without a separate outbound rule. Which cloud control behaves that way?
• A large university has many buildings and wants separate access, distribution, and core layers so building switches do not all attach directly to the core. Which design is that?
• Many remote laptops at a law firm must terminate their encrypted tunnels on one device at headquarters. Which device is built for that job?
• A ranger station has no fiber, no copper path, and no usable cellular signal back to the agency. Which medium can still carry the link?
• Two firewalls at a bank must negotiate keys and security associations before encrypted payloads can flow. Which protocol performs that negotiation?
• Remote staff and small branches of an insurer need the same inspection, delivered from the cloud, without hauling every session back to one office firewall. Which approach fits?
• A university adds application capacity every year because enrollment keeps growing, and that capacity must stay in place. Which cloud property is this?
• A bank must move card data into its cloud provider without that traffic crossing the public internet, including inside a VPN. Which connection meets that constraint?
• A workstation must reach every other host on its own subnet at once, the way an address-resolution request does. Which delivery method is that?
• A retail store's only fiber circuit is down. A strong cellular signal is available, and the store wants a backup path that can use it. Which medium fits the backup?
• A lab's clients must stay IPv6-only, and they still need to reach one server that has only an IPv4 address. Which translation lets them?