**Question 1. Which of the following best describes the primary purpose of a DMZ in a LAN
environment?**
A) To increase wireless coverage area
B) To isolate public-facing services from the internal network
C) To provide redundant routing paths
D) To segment voice and data traffic
Answer: B
Explanation: A DMZ (demilitarized zone) houses servers that must be accessible from the Internet while
keeping the internal LAN protected.
**Question 2. In an 802.11ac Wi-Fi network, which frequency band provides the highest data rates?**
A) 2.4 GHz
B) 5 GHz
C) 900 MHz
D) 1.2 GHz
Answer: B
Explanation: 802.11ac operates only in the 5 GHz band, which supports wider channels and higher
modulation schemes than 2.4 GHz.
**Question 3. Which WAN technology uses light pulses to transmit data over long distances with
minimal loss?**
A) DSL
B) Satellite
C) Fiber-optic (single-mode)
D) Coaxial cable
Answer: C
,ITS Certiport Networking Ultimate Exam
Explanation: Single-mode fiber-optic cables use lasers to send light over distances up to many kilometers
with very low attenuation.
**Question 4. In a star topology, what happens if the central hub fails?**
A) All network communication stops
B) Only the segment attached to the failed hub is affected
C) Traffic is rerouted through a backup hub automatically
D) The network continues unaffected
Answer: A
Explanation: The central hub (or switch) is the single point of failure; if it stops working, no devices can
communicate.
**Question 5. Which tunneling protocol provides encryption of the payload and is commonly used for
remote-access VPNs?**
A) PPTP
B) L2TP/IPsec
C) GRE
D) IP-in-IP
Answer: B
Explanation: L2TP itself does not encrypt, but when combined with IPsec it provides strong encryption
for remote-access VPNs.
**Question 6. What is the main distinction between a layer-2 switch and a layer-3 switch?**
A) Layer-2 switches operate at the physical layer, layer-3 at the data link layer
B) Layer-2 switches forward frames based on MAC addresses, layer-3 switches forward packets based on
IP addresses
C) Layer-2 switches can perform NAT, layer-3 switches cannot
D) There is no functional difference; the terms are interchangeable
,ITS Certiport Networking Ultimate Exam
Answer: B
Explanation: Layer-2 switches use MAC address tables, while layer-3 switches have routing capabilities
and make forwarding decisions using IP routing tables.
**Question 7. Which cable type must be used to directly connect two routers without a crossover?**
A) Straight-through Cat5e
B) Crossover Cat5e
C) Fiber-optic single-mode
D) Coaxial RG-6
Answer: B
Explanation: A crossover cable swaps transmit and receive pairs, allowing two similar devices (e.g.,
router-to-router) to communicate directly.
**Question 8. In IPv4, which of the following address ranges is reserved for private networks?**
A) 8.0.0.0/8
B) 172.16.0.0/12
C) 100.64.0.0/10
D) 224.0.0.0/4
Answer: B
Explanation: 172.16.0.0 – 172.31.255.255 is one of the three private IPv4 address blocks defined by
RFC 1918.
**Question 9. Which IPv6 address type is used to send a packet to all nodes on the local link?**
A) Unicast
B) Multicast FF02::1
C) Anycast
D) Solicited-node multicast
, ITS Certiport Networking Ultimate Exam
Answer: B
Explanation: The IPv6 multicast address FF02::1 is the all-nodes link-local multicast group.
**Question 10. Which TCP/IP protocol provides reliable, ordered delivery of data?**
A) UDP
B) ICMP
C) TCP
D) ARP
Answer: C
Explanation: TCP establishes a connection, uses acknowledgments, retransmission, and sequencing to
ensure reliable delivery.
**Question 11. What does the “TTL” field in an IP packet header represent?**
A) Total Transmission Length
B) Time To Live, which limits how many hops a packet can traverse
C) Transmission Type List
D) Threaded Transaction Layer
Answer: B
Explanation: TTL is decremented by each router; when it reaches zero, the packet is discarded to
prevent loops.
**Question 12. Which DNS record type maps a domain name to an IPv6 address?**
A) A
B) AAAA
C) CNAME
D) MX