ITN 262 FINAL EXAM – EXAM-STYLE QUESTIONS AND ANSWERS | VERIFIED AND
WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS | 2026/27
LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
SECTION ONE: QUESTIONS 1-50
1. A network administrator is configuring a new switch and needs to ensure
that management access is restricted to a specific subnet. Which of the
following is the most secure method to accomplish this?
A. Configure an access-class command on the vty lines.
B. Apply an ACL inbound on the management VLAN interface.
C. Set the management VLAN to an isolated VLAN.
D. Configure a port-security MAC address for the management station.
Correct Answer: A. Configure an access-class command on the vty lines.
*Rationale: * The access-class command is applied to the vty lines and
references an Access Control List (ACL) to filter which source IP addresses are
permitted to establish a Telnet or SSH session to the switch. This is the standard
and most direct method for securing remote management access. While applying
an ACL on the VLAN interface (B) could also filter traffic, it is broader and may
affect other traffic destined for that VLAN, making the vty-specific method more
precise. Setting an isolated VLAN (C) does not inherently filter management
access from other VLANs. Port security (D) is a layer-2 feature that restricts MAC
addresses on a physical port, not remote management access.
2. A company’s network uses OSPF. A network engineer notices that a new
route is not appearing in the routing table of a router, even though the OSPF
,neighbor adjacency is established. Which of the following is the most likely
cause?
A. The router ID is not configured.
B. The network command is missing for the interface.
C. The OSPF process is administratively shut down.
D. The interface is configured with a passive-interface command.
Correct Answer: D. The interface is configured with a passive-interface
command.
*Rationale: * A passive-interface configuration in OSPF prevents the router
from sending Hello packets out of the specified interface, which stops OSPF
adjacency from forming on that interface. However, the question states adjacency
is already established, which means the Hello packets are being exchanged. The
more likely cause here is that the specific network for the route is not being
advertised because the interface is not included in an OSPF network command
(B). If the OSPF process is shut down (C), adjacencies would not form. A missing
router ID (A) would prevent OSPF from starting. Therefore, the route is missing
because its interface is not actively participating in OSPF updates, which is most
commonly due to it not being included in the OSPF network statement.
3. A technician has just set up a new web server with a static IP address of
192.168.1.100/24. Users on the same subnet can access the web server, but users
on a different subnet cannot. The default gateway is correctly configured on
the web server. What is the most likely cause of this issue?
A. The web server is using a private IP address.
B. The web server’s DNS record is incorrect.
,C. The firewall is blocking incoming connections on port 80.
D. The default gateway address is not reachable.
Correct Answer: C. The firewall is blocking incoming connections on port 80.
*Rationale: * Since users on the same subnet can access the server, the server's
network configuration (IP, subnet mask) and its web service are functioning
correctly for local traffic. The failure of users on different subnets indicates a
problem with inter-subnet routing. The most common cause for this is that the
path between the subnets, often through a firewall, is blocking traffic destined for
the web server's port. While private IP addresses (A) are not routable on the
public internet, they are perfectly functional for internal routing, which is what is
failing. A DNS issue (B) would affect all users, not just those on other subnets. If
the default gateway (D) were unreachable, no traffic would leave the local subnet,
including traffic to other subnets, making the server completely inaccessible from
outside its local subnet, which is not the case.
4. What does the IEEE 802.1Q standard define?
A. Spanning Tree Protocol
B. Virtual LANs (VLANs) tagging
C. Port aggregation
D. Link Layer Discovery Protocol
Correct Answer: B. Virtual LANs (VLANs) tagging
*Rationale: * The IEEE 802.1Q standard is the official standard for VLAN tagging
and trunking. It defines how Ethernet frames are modified with a VLAN tag to
allow multiple VLANs to traverse a single trunk link. Spanning Tree Protocol is
defined by 802.1D (and 802.1w for Rapid STP). Port aggregation is defined by
, 802.3ad (LACP). Link Layer Discovery Protocol (LLDP) is defined by 802.1AB.
Understanding these standard numbers is crucial for network configuration and
troubleshooting.
5. A network administrator is troubleshooting connectivity issues between two
routers running EIGRP. The neighbor relationship is flapping. Which of the
following is the most likely cause?
A. An ACL is blocking TCP port 179.
B. The hello and hold timers do not match.
C. The autonomous system numbers do not match.
D. The routers have duplicate router IDs.
Correct Answer: B. The hello and hold timers do not match.
*Rationale: * While a mismatch in timers does not prevent an EIGRP adjacency
from forming, it is a common cause for a flapping (unstable) neighbor
relationship. If the timers are not configured consistently, the routers may time
out and lose the adjacency, only to re-establish it later, causing the relationship to
flap. ACLs blocking TCP port 179 (A) is relevant to BGP, not EIGRP. EIGRP uses
multicast for its updates. A mismatched AS number (C) will prevent the adjacency
from forming entirely. Duplicate router IDs (D) also typically prevent an adjacency
from forming, and Cisco routers will log an error.
6. A help desk technician receives a call from a user who cannot access the
internet. The user can access internal network resources. The technician asks
the user to run a command to view the local routing table. Which of the
following commands would provide this information?
WELL DETAILED ANSWERS | PLUS RATIONALES | GUARANTEED PASS | 2026/27
LATEST UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE TEST
SECTION ONE: QUESTIONS 1-50
1. A network administrator is configuring a new switch and needs to ensure
that management access is restricted to a specific subnet. Which of the
following is the most secure method to accomplish this?
A. Configure an access-class command on the vty lines.
B. Apply an ACL inbound on the management VLAN interface.
C. Set the management VLAN to an isolated VLAN.
D. Configure a port-security MAC address for the management station.
Correct Answer: A. Configure an access-class command on the vty lines.
*Rationale: * The access-class command is applied to the vty lines and
references an Access Control List (ACL) to filter which source IP addresses are
permitted to establish a Telnet or SSH session to the switch. This is the standard
and most direct method for securing remote management access. While applying
an ACL on the VLAN interface (B) could also filter traffic, it is broader and may
affect other traffic destined for that VLAN, making the vty-specific method more
precise. Setting an isolated VLAN (C) does not inherently filter management
access from other VLANs. Port security (D) is a layer-2 feature that restricts MAC
addresses on a physical port, not remote management access.
2. A company’s network uses OSPF. A network engineer notices that a new
route is not appearing in the routing table of a router, even though the OSPF
,neighbor adjacency is established. Which of the following is the most likely
cause?
A. The router ID is not configured.
B. The network command is missing for the interface.
C. The OSPF process is administratively shut down.
D. The interface is configured with a passive-interface command.
Correct Answer: D. The interface is configured with a passive-interface
command.
*Rationale: * A passive-interface configuration in OSPF prevents the router
from sending Hello packets out of the specified interface, which stops OSPF
adjacency from forming on that interface. However, the question states adjacency
is already established, which means the Hello packets are being exchanged. The
more likely cause here is that the specific network for the route is not being
advertised because the interface is not included in an OSPF network command
(B). If the OSPF process is shut down (C), adjacencies would not form. A missing
router ID (A) would prevent OSPF from starting. Therefore, the route is missing
because its interface is not actively participating in OSPF updates, which is most
commonly due to it not being included in the OSPF network statement.
3. A technician has just set up a new web server with a static IP address of
192.168.1.100/24. Users on the same subnet can access the web server, but users
on a different subnet cannot. The default gateway is correctly configured on
the web server. What is the most likely cause of this issue?
A. The web server is using a private IP address.
B. The web server’s DNS record is incorrect.
,C. The firewall is blocking incoming connections on port 80.
D. The default gateway address is not reachable.
Correct Answer: C. The firewall is blocking incoming connections on port 80.
*Rationale: * Since users on the same subnet can access the server, the server's
network configuration (IP, subnet mask) and its web service are functioning
correctly for local traffic. The failure of users on different subnets indicates a
problem with inter-subnet routing. The most common cause for this is that the
path between the subnets, often through a firewall, is blocking traffic destined for
the web server's port. While private IP addresses (A) are not routable on the
public internet, they are perfectly functional for internal routing, which is what is
failing. A DNS issue (B) would affect all users, not just those on other subnets. If
the default gateway (D) were unreachable, no traffic would leave the local subnet,
including traffic to other subnets, making the server completely inaccessible from
outside its local subnet, which is not the case.
4. What does the IEEE 802.1Q standard define?
A. Spanning Tree Protocol
B. Virtual LANs (VLANs) tagging
C. Port aggregation
D. Link Layer Discovery Protocol
Correct Answer: B. Virtual LANs (VLANs) tagging
*Rationale: * The IEEE 802.1Q standard is the official standard for VLAN tagging
and trunking. It defines how Ethernet frames are modified with a VLAN tag to
allow multiple VLANs to traverse a single trunk link. Spanning Tree Protocol is
defined by 802.1D (and 802.1w for Rapid STP). Port aggregation is defined by
, 802.3ad (LACP). Link Layer Discovery Protocol (LLDP) is defined by 802.1AB.
Understanding these standard numbers is crucial for network configuration and
troubleshooting.
5. A network administrator is troubleshooting connectivity issues between two
routers running EIGRP. The neighbor relationship is flapping. Which of the
following is the most likely cause?
A. An ACL is blocking TCP port 179.
B. The hello and hold timers do not match.
C. The autonomous system numbers do not match.
D. The routers have duplicate router IDs.
Correct Answer: B. The hello and hold timers do not match.
*Rationale: * While a mismatch in timers does not prevent an EIGRP adjacency
from forming, it is a common cause for a flapping (unstable) neighbor
relationship. If the timers are not configured consistently, the routers may time
out and lose the adjacency, only to re-establish it later, causing the relationship to
flap. ACLs blocking TCP port 179 (A) is relevant to BGP, not EIGRP. EIGRP uses
multicast for its updates. A mismatched AS number (C) will prevent the adjacency
from forming entirely. Duplicate router IDs (D) also typically prevent an adjacency
from forming, and Cisco routers will log an error.
6. A help desk technician receives a call from a user who cannot access the
internet. The user can access internal network resources. The technician asks
the user to run a command to view the local routing table. Which of the
following commands would provide this information?
