WGU IT and Tech Fundamentals (CTIAT) OA 2026-2027 |
Practice Questions & Answers with Rationales + 2 Full Mock
Exams. - 200 Questions and Answers Already Graded A+
Premium Exam Tested And Verified
Subject Area Information Technology and Technical Fundamentals
Description This comprehensive examination assesses mastery of core IT concepts including
networking, security, cloud computing, databases, programming logic, and system
administration. The exam integrates theoretical knowledge with practical
application, requiring analytical reasoning and problem-solving in realistic
scenarios.
Expected Grade A+
Total Questions 200
Duration 3 hours
Learning Outcomes 1. Analyze and troubleshoot network architectures and protocols.
2. Implement security best practices and risk mitigation strategies.
3. Evaluate cloud service models and deployment strategies.
4. Design and query relational databases using SQL.
5. Apply programming logic to solve complex computational problems.
6. Manage operating systems and system administration tasks.
Accreditation Aligned with US university accreditation standards (e.g., ABET, ACBSP) and
industry certifications (CompTIA, Cisco, AWS).
Page 1
,1. A network administrator is designing a fault-tolerant network for a financial
trading platform. The solution must ensure zero packet loss during a link failure and
maintain sub-50ms convergence. Which protocol and configuration best meet these
requirements?
A. OSPF with ECMP over redundant links
B. RSTP with rapid transition on all ports
C. MLAG with active-active links and BGP graceful restart
D. VRRP with preempt and track interface
Answer: C. MLAG with active-active links and BGP graceful restart
MLAG (Multi-chassis Link Aggregation) provides active-active links with sub-second
failover and no packet loss, while BGP graceful restart ensures uninterrupted
forwarding during control plane restart. OSPF ECMP can load balance but
convergence may not be sub-50ms. RSTP still has blocking state and slower
convergence. VRRP is gateway redundancy, not link redundancy.
2. A security analyst is reviewing a log where an attacker sent a series of fragmented
ICMP packets that, when reassembled, exceed the maximum IP packet size. Which
attack is being attempted, and what is the most effective mitigation at the network
perimeter?
A. Ping of Death; drop all ICMP packets
B. Teardrop attack; enable reassembly limits and drop overlapping fragments
C. Smurf attack; disable IP-directed broadcasts
D. Fraggle attack; block UDP echo traffic
Answer: B. Teardrop attack; enable reassembly limits and drop overlapping
fragments
The Teardrop attack exploits overlapping IP fragments to cause a crash during
reassembly. Mitigation involves configuring firewalls to drop malformed fragments and
enforcing reassembly timeouts. Ping of Death is a single oversized ping, not
fragmentation. Smurf/Fraggle use broadcast amplification, not fragmentation.
Page 2
,3. A company is migrating a legacy monolithic application to AWS. The application
has unpredictable traffic patterns and requires low latency. Which architecture best
balances cost and performance while ensuring high availability?
A. Deploy on a single large EC2 instance with reserved capacity
B. Use AWS Lambda with API Gateway and DynamoDB
C. Run containers on ECS with auto-scaling and an Application Load Balancer
D. Lift-and-shift to a dedicated host with on-premises link
Answer: C. Run containers on ECS with auto-scaling and an Application Load
Balancer
ECS with auto-scaling and an ALB provides dynamic scaling for unpredictable traffic,
optimal resource utilization, and high availability. Lambda is serverless but may not
suit monolithic apps. Reserved EC2 lacks elasticity. Dedicated host is costly and not
scalable.
4. A database administrator needs to retrieve the second-highest salary from an
'employees' table. Which SQL query correctly accomplishes this without using a
subquery in the FROM clause?
A. SELECT salary FROM employees ORDER BY salary DESC LIMIT 1 OFFSET 1;
B. SELECT MAX(salary) FROM employees WHERE salary NOT IN (SELECT
MAX(salary) FROM employees);
C. SELECT salary FROM employees ORDER BY salary DESC LIMIT 1, 1;
D. SELECT DISTINCT salary FROM employees ORDER BY salary DESC LIMIT 1
OFFSET 1;
Answer: D. SELECT DISTINCT salary FROM employees ORDER BY salary
DESC LIMIT 1 OFFSET 1;
Option D uses DISTINCT to handle duplicates and OFFSET to skip the highest,
yielding the second-highest unique salary. Option A would return the second row
including duplicates, which may be incorrect. Option B uses a subquery and fails if
there are ties. Option C is MySQL syntax but without DISTINCT, it may include
duplicates.
Page 3
, 5. A developer is writing a function that checks if a number is prime. They use a loop
that iterates from 2 to n-1. What is the time complexity, and how can it be optimized
while maintaining correctness?
A. O(n); iterate only up to n/2
B. O(n); iterate up to sqrt(n) and skip even numbers after 2
C. O(n^2); use the Sieve of Eratosthenes
D. O(log n); use Fermat's primality test
Answer: B. O(n); iterate up to sqrt(n) and skip even numbers after 2
The naive loop is O(n), but checking up to sqrt(n) is sufficient because any factor larger
than sqrt(n) would have a corresponding factor smaller. Skipping even numbers further
reduces iterations. Sieve is for generating primes, not checking a single number.
Fermat's test is probabilistic and not deterministic for all cases.
6. A system administrator is troubleshooting a server that has a static IP address but
cannot access the internet. The server can ping the gateway but not a public IP.
Which command sequence best isolates the issue?
A. ipconfig /flushdns && nslookup google.com
B. traceroute to 8.8.8.8 and check routing table
C. ping 127.0.0.1 && ping gateway && ping external IP
D. netstat -rn and check default gateway
Answer: B. traceroute to 8.8.8.8 and check routing table
Since the server can ping the gateway but not a public IP, the issue is likely routing or
firewall. Traceroute to 8.8.8.8 will show where packets stop, and checking the routing
table reveals missing or incorrect routes. Option C is a basic connectivity test but
doesn't isolate routing. Option A addresses DNS, but the server can't ping IPs, so DNS
isn't the issue. Option D only shows routes, not the path.
Page 4
Practice Questions & Answers with Rationales + 2 Full Mock
Exams. - 200 Questions and Answers Already Graded A+
Premium Exam Tested And Verified
Subject Area Information Technology and Technical Fundamentals
Description This comprehensive examination assesses mastery of core IT concepts including
networking, security, cloud computing, databases, programming logic, and system
administration. The exam integrates theoretical knowledge with practical
application, requiring analytical reasoning and problem-solving in realistic
scenarios.
Expected Grade A+
Total Questions 200
Duration 3 hours
Learning Outcomes 1. Analyze and troubleshoot network architectures and protocols.
2. Implement security best practices and risk mitigation strategies.
3. Evaluate cloud service models and deployment strategies.
4. Design and query relational databases using SQL.
5. Apply programming logic to solve complex computational problems.
6. Manage operating systems and system administration tasks.
Accreditation Aligned with US university accreditation standards (e.g., ABET, ACBSP) and
industry certifications (CompTIA, Cisco, AWS).
Page 1
,1. A network administrator is designing a fault-tolerant network for a financial
trading platform. The solution must ensure zero packet loss during a link failure and
maintain sub-50ms convergence. Which protocol and configuration best meet these
requirements?
A. OSPF with ECMP over redundant links
B. RSTP with rapid transition on all ports
C. MLAG with active-active links and BGP graceful restart
D. VRRP with preempt and track interface
Answer: C. MLAG with active-active links and BGP graceful restart
MLAG (Multi-chassis Link Aggregation) provides active-active links with sub-second
failover and no packet loss, while BGP graceful restart ensures uninterrupted
forwarding during control plane restart. OSPF ECMP can load balance but
convergence may not be sub-50ms. RSTP still has blocking state and slower
convergence. VRRP is gateway redundancy, not link redundancy.
2. A security analyst is reviewing a log where an attacker sent a series of fragmented
ICMP packets that, when reassembled, exceed the maximum IP packet size. Which
attack is being attempted, and what is the most effective mitigation at the network
perimeter?
A. Ping of Death; drop all ICMP packets
B. Teardrop attack; enable reassembly limits and drop overlapping fragments
C. Smurf attack; disable IP-directed broadcasts
D. Fraggle attack; block UDP echo traffic
Answer: B. Teardrop attack; enable reassembly limits and drop overlapping
fragments
The Teardrop attack exploits overlapping IP fragments to cause a crash during
reassembly. Mitigation involves configuring firewalls to drop malformed fragments and
enforcing reassembly timeouts. Ping of Death is a single oversized ping, not
fragmentation. Smurf/Fraggle use broadcast amplification, not fragmentation.
Page 2
,3. A company is migrating a legacy monolithic application to AWS. The application
has unpredictable traffic patterns and requires low latency. Which architecture best
balances cost and performance while ensuring high availability?
A. Deploy on a single large EC2 instance with reserved capacity
B. Use AWS Lambda with API Gateway and DynamoDB
C. Run containers on ECS with auto-scaling and an Application Load Balancer
D. Lift-and-shift to a dedicated host with on-premises link
Answer: C. Run containers on ECS with auto-scaling and an Application Load
Balancer
ECS with auto-scaling and an ALB provides dynamic scaling for unpredictable traffic,
optimal resource utilization, and high availability. Lambda is serverless but may not
suit monolithic apps. Reserved EC2 lacks elasticity. Dedicated host is costly and not
scalable.
4. A database administrator needs to retrieve the second-highest salary from an
'employees' table. Which SQL query correctly accomplishes this without using a
subquery in the FROM clause?
A. SELECT salary FROM employees ORDER BY salary DESC LIMIT 1 OFFSET 1;
B. SELECT MAX(salary) FROM employees WHERE salary NOT IN (SELECT
MAX(salary) FROM employees);
C. SELECT salary FROM employees ORDER BY salary DESC LIMIT 1, 1;
D. SELECT DISTINCT salary FROM employees ORDER BY salary DESC LIMIT 1
OFFSET 1;
Answer: D. SELECT DISTINCT salary FROM employees ORDER BY salary
DESC LIMIT 1 OFFSET 1;
Option D uses DISTINCT to handle duplicates and OFFSET to skip the highest,
yielding the second-highest unique salary. Option A would return the second row
including duplicates, which may be incorrect. Option B uses a subquery and fails if
there are ties. Option C is MySQL syntax but without DISTINCT, it may include
duplicates.
Page 3
, 5. A developer is writing a function that checks if a number is prime. They use a loop
that iterates from 2 to n-1. What is the time complexity, and how can it be optimized
while maintaining correctness?
A. O(n); iterate only up to n/2
B. O(n); iterate up to sqrt(n) and skip even numbers after 2
C. O(n^2); use the Sieve of Eratosthenes
D. O(log n); use Fermat's primality test
Answer: B. O(n); iterate up to sqrt(n) and skip even numbers after 2
The naive loop is O(n), but checking up to sqrt(n) is sufficient because any factor larger
than sqrt(n) would have a corresponding factor smaller. Skipping even numbers further
reduces iterations. Sieve is for generating primes, not checking a single number.
Fermat's test is probabilistic and not deterministic for all cases.
6. A system administrator is troubleshooting a server that has a static IP address but
cannot access the internet. The server can ping the gateway but not a public IP.
Which command sequence best isolates the issue?
A. ipconfig /flushdns && nslookup google.com
B. traceroute to 8.8.8.8 and check routing table
C. ping 127.0.0.1 && ping gateway && ping external IP
D. netstat -rn and check default gateway
Answer: B. traceroute to 8.8.8.8 and check routing table
Since the server can ping the gateway but not a public IP, the issue is likely routing or
firewall. Traceroute to 8.8.8.8 will show where packets stop, and checking the routing
table reveals missing or incorrect routes. Option C is a basic connectivity test but
doesn't isolate routing. Option A addresses DNS, but the server can't ping IPs, so DNS
isn't the issue. Option D only shows routes, not the path.
Page 4
