NEW YORK CITY NETWORK ADMINISTRATOR EXAM QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) PLUS
RATIONALES 2026 Q&A |LATEST EXAM UPDATE 2026/2027..
*Core Domains*
*Network Infrastructure and Architecture*
*System Administration and Configuration*
*Security Protocols and Compliance*
*Cloud and Virtualization Management*
*Troubleshooting and Incident Response*
*Disaster Recovery and Business Continuity*
*Network Automation and Scripting*
*Professional Ethics and Policy Compliance*
*Introduction*
*The purpose of this examination is to validate the technical proficiency, analytical capabilities, and professional judg
SECTION ONE: QUESTIONS 1–100
Which command is used to verify the reachability of a remote host and measure round-trip time in a Linux environment?
A. traceroute
B. ping
C. netstat
D. ipconfig
🟢 B. ping
🔴 RATIONALE: The ping command uses ICMP Echo Request messages to test host connectivity and measure response latency.
Which OSI layer is primarily responsible for logical addressing and routing?
A. Data Link
B. Network
C. Transport
D. Session
,🟢 B. Network
🔴 RATIONALE: The Network layer (Layer 3) handles packet forwarding, including routing through intermediate routers and logical
addressing.
An administrator needs to ensure that only authorized devices can connect to a specific switch port based on their MAC address.
Which feature should be enabled?
A. BPDU Guard
B. Port Security
C. DHCP Snooping
D. Storm Control
🟢 B. Port Security
🔴 RATIONALE: Port Security restricts input to an interface by limiting and identifying MAC addresses of workstations allowed to
access the port.
Which protocol is used to resolve an IP address to a physical MAC address on a local network?
A. DNS
B. ARP
C. DHCP
D. ICMP
🟢 B. ARP
🔴 RATIONALE: Address Resolution Protocol (ARP) maps a known IP address to the hardware (MAC) address required for
communication on a local link.
You are configuring a firewall rule to allow secure remote access via SSH. Which port must be open?
A. 21
B. 22
C. 23
D. 443
🟢 B. 22
🔴 RATIONALE: SSH (Secure Shell) operates by default on TCP port 22, providing encrypted remote command-line access.
Which cloud service model provides virtualized computing resources over the internet, allowing administrators to manage the OS and
applications?
A. SaaS
B. PaaS
C. IaaS
, D. FaaS
🟢 C. IaaS
🔴 RATIONALE: Infrastructure as a Service (IaaS) provides virtualized hardware, storage, and networking, giving the user control over
the operating system.
What is the primary purpose of a VLAN?
A. To increase internet speed
B. To segment a broadcast domain
C. To provide redundant power
D. To encrypt data at rest
🟢 B. To segment a broadcast domain
🔴 RATIONALE: Virtual Local Area Networks (VLANs) logically partition a physical switch into multiple smaller broadcast domains for
security and performance.
Which RAID level provides striping with parity, offering a balance between performance and fault tolerance?
A. RAID 0
B. RAID 1
C. RAID 5
D. RAID 10
🟢 C. RAID 5
🔴 RATIONALE: RAID 5 uses block-level striping with distributed parity, allowing the array to recover from a single drive failure.
Under NYC security standards, which action should be taken when an employee leaves the organization?
A. Archive their emails only
B. Disable their accounts immediately
C. Wait 30 days before deleting files
D. Transfer their credentials to a colleague
🟢 B. Disable their accounts immediately
🔴 RATIONALE: To prevent unauthorized access and maintain security compliance, all user accounts must be disabled immediately
upon termination.
Which protocol is best suited for time synchronization across network devices?
A. SNMP
B. NTP
C. SMTP
D. DHCP
RATIONALES 2026 Q&A |LATEST EXAM UPDATE 2026/2027..
*Core Domains*
*Network Infrastructure and Architecture*
*System Administration and Configuration*
*Security Protocols and Compliance*
*Cloud and Virtualization Management*
*Troubleshooting and Incident Response*
*Disaster Recovery and Business Continuity*
*Network Automation and Scripting*
*Professional Ethics and Policy Compliance*
*Introduction*
*The purpose of this examination is to validate the technical proficiency, analytical capabilities, and professional judg
SECTION ONE: QUESTIONS 1–100
Which command is used to verify the reachability of a remote host and measure round-trip time in a Linux environment?
A. traceroute
B. ping
C. netstat
D. ipconfig
🟢 B. ping
🔴 RATIONALE: The ping command uses ICMP Echo Request messages to test host connectivity and measure response latency.
Which OSI layer is primarily responsible for logical addressing and routing?
A. Data Link
B. Network
C. Transport
D. Session
,🟢 B. Network
🔴 RATIONALE: The Network layer (Layer 3) handles packet forwarding, including routing through intermediate routers and logical
addressing.
An administrator needs to ensure that only authorized devices can connect to a specific switch port based on their MAC address.
Which feature should be enabled?
A. BPDU Guard
B. Port Security
C. DHCP Snooping
D. Storm Control
🟢 B. Port Security
🔴 RATIONALE: Port Security restricts input to an interface by limiting and identifying MAC addresses of workstations allowed to
access the port.
Which protocol is used to resolve an IP address to a physical MAC address on a local network?
A. DNS
B. ARP
C. DHCP
D. ICMP
🟢 B. ARP
🔴 RATIONALE: Address Resolution Protocol (ARP) maps a known IP address to the hardware (MAC) address required for
communication on a local link.
You are configuring a firewall rule to allow secure remote access via SSH. Which port must be open?
A. 21
B. 22
C. 23
D. 443
🟢 B. 22
🔴 RATIONALE: SSH (Secure Shell) operates by default on TCP port 22, providing encrypted remote command-line access.
Which cloud service model provides virtualized computing resources over the internet, allowing administrators to manage the OS and
applications?
A. SaaS
B. PaaS
C. IaaS
, D. FaaS
🟢 C. IaaS
🔴 RATIONALE: Infrastructure as a Service (IaaS) provides virtualized hardware, storage, and networking, giving the user control over
the operating system.
What is the primary purpose of a VLAN?
A. To increase internet speed
B. To segment a broadcast domain
C. To provide redundant power
D. To encrypt data at rest
🟢 B. To segment a broadcast domain
🔴 RATIONALE: Virtual Local Area Networks (VLANs) logically partition a physical switch into multiple smaller broadcast domains for
security and performance.
Which RAID level provides striping with parity, offering a balance between performance and fault tolerance?
A. RAID 0
B. RAID 1
C. RAID 5
D. RAID 10
🟢 C. RAID 5
🔴 RATIONALE: RAID 5 uses block-level striping with distributed parity, allowing the array to recover from a single drive failure.
Under NYC security standards, which action should be taken when an employee leaves the organization?
A. Archive their emails only
B. Disable their accounts immediately
C. Wait 30 days before deleting files
D. Transfer their credentials to a colleague
🟢 B. Disable their accounts immediately
🔴 RATIONALE: To prevent unauthorized access and maintain security compliance, all user accounts must be disabled immediately
upon termination.
Which protocol is best suited for time synchronization across network devices?
A. SNMP
B. NTP
C. SMTP
D. DHCP
