UDEMY QUESTIONS #6 WITH VERIFIED ANSWERS &
RATIONALES.
Users are reporting extreme slowness across the network every Friday. What should the
network technician review first to narrow down the root cause of the problem? - Correct
Answer Utilization
Explanation
Reviewing the network utilization can help the technician identify why the slowness is
being experienced every Friday, such as users placing additional load on the network by
streaming videos or something similar.
Michael is a system administrator who is troubleshooting an issue with remotely accessing
a new server on the local area network. He is using an LMHOST file, which contains the
hostname and IP address of the new server. The server that he cannot remotely access to
is located on the same LAN as another server that he can successfully remote to. What
output from the command line would BEST resolve the issue? - Correct Answer
C:/windows/system32> nbstat -R Successful purge and reload of the NBT remote cache
table
Explanation
Since he is using a local LMHOST file, it is bypassing the DNS of the machine, and flushing
the DNS will not solve the problem. In this case, purging the contents of the NetBIOS name
cache and then reloads the #PRE-tagged entries from the Lmhosts file.
Which attack utilizes a wireless access point which has been made to look as if it belongs
to the network in order to eavesdrop on the wireless traffic? - Correct Answer Evil twin
Explanation
An Evil Twin is meant to mimic a legitimate hotspot provided by a nearby business, such as
a coffee shop that provides free Wi-Fi access to its patrons.
You have been asked to troubleshoot a router which uses label-switching and label-edge
routers to forward traffic. Which of the following types of protocols should you be familiar
with in order to troubleshoot this device? - Correct Answer MPLS
Explanation
Multi-protocol label switching (MPLS) is a mechanism used within computer network
infrastructures to speed up the time it takes a data packet to flow from one node to another.
The label-based switching mechanism enables the network packets to flow on any
protocol.
,What is the BEST way to secure the most vulnerable attack vector for a network? - Correct
Answer Provide end user awareness training for office staff
Explanation
Users are our most vulnerable attack vector, proper training can help reduce the risk.
Which protocol is used to encapsulate other network layer protocols such as multicast and
IPX over WAN connections?
- Correct Answer GRE
Generic Routing Encapsulation (GRE) is a protocol that encapsulates packets in order to
route other protocols over IP networks.
Which of the following BEST describes the process of documenting everyone who has
physical access or possession of evidence? - Correct Answer Chain of custody
Explanation
Chain of custody refers to documentation that identifies all changes in the control,
handling, possession, ownership, or custody of a piece of evidence.
Johnny is trying to download a file from a remote FTP server, but keeps receiving an error
that a connection cannot be opened. Which of the following should you do FIRST to
resolve the problem? - Correct Answer Ensure that port 20 is open
Explanation
Executing an FTP port connection through a client is a two-stage process requiring the use
of two different ports. Once the user enters the name of the server and the login credentials
in the authorization fields of the FTP client, the FTP connection is attempted over port 20.
For FTP to function properly, you should have both ports 20 and 21 open.
A user was moved from one cubicle in the office to a new one a few desks over. Now, they
are reporting that their VoIP phone is randomly rebooting. When the network technician
takes the VoIP phone and reconnects it in the old cubicle, it works without any issues. What
is the cause of the problem? - Correct Answer Cable short
Explanation
Since the VoIP phone works in one cubicle but not another one that is very close, it is likely
the new cubicle has a short in the cable running to the network jack or from the jack to the
VoIP phone. The network technician should test the new cubicle's network jack to ensure
there isn't an issue with the wiring.
, You are working as a forensic investigator for the police. The police have a search warrant
to capture a suspect's workstation as evidence for an ongoing criminal investigation. As
you enter the room with the policeman, he arrests the suspect and handcuffs him. What
should you do FIRST?
- Correct Answer Secure the area
Explanation
As a forensic investigator, you should always 'secure the area' before you take any other
actions. This includes ensuring that no other people are in the area to disrupt your forensic
collection (such as the suspect or their accomplices), ensuring the workstation isn't
unplugged from the network or the power, and other actions to prevent the evidence from
being tampered with.
Dion Training Solutions wants to migrate their email server from an on-premise solution to
a vendor-hosted web-based solution like G Suite or Gmail. Which of the following types of
cloud models best describes this proposed solution? - Correct Answer Saas
Explanation
Software as a Service (SaaS) uses the web to deliver applications that are managed by a
third-party vendor and whose interface is accessed on the client's side. Most SaaS
applications can be run directly from a web browser without any downloads or installations
required, although some require plugins. The G Suite and Gmail solutions for business are
a good example of a SaaS solution.
When troubleshooting a T1 connection, the service provider's technical support
representative instructs a network technician to place a special device into the CSU/DSU.
Using this device, the provider is able to verify that communications are reaching the
CSU/DSU. What was used by the network technician? - Correct Answer Loopback plug
Explanation
A loopback plug, also known as a loopback adaptor or a loopback cable, is a device used
to test ports (such as serial, parallel, USB, and network ports) to identify network and
network interface card (NIC) issues. Loopback plug equipment facilitates the testing of
simple networking issues and is available at very low costs.
(PERFORMANCE BASED QUESTIONS)
The company's corporate headquarters provided your branch office a portion of their Class
C subnet to use at a new office location. You must allocate the minimum number of
addresses using CIDR notation in order to accommodate each department's needs. You
have finished providing the minimum number of addresses using CIDR notation to each of
the departments listed. Calculate the number of leftover IP addresses. What is the correct
RATIONALES.
Users are reporting extreme slowness across the network every Friday. What should the
network technician review first to narrow down the root cause of the problem? - Correct
Answer Utilization
Explanation
Reviewing the network utilization can help the technician identify why the slowness is
being experienced every Friday, such as users placing additional load on the network by
streaming videos or something similar.
Michael is a system administrator who is troubleshooting an issue with remotely accessing
a new server on the local area network. He is using an LMHOST file, which contains the
hostname and IP address of the new server. The server that he cannot remotely access to
is located on the same LAN as another server that he can successfully remote to. What
output from the command line would BEST resolve the issue? - Correct Answer
C:/windows/system32> nbstat -R Successful purge and reload of the NBT remote cache
table
Explanation
Since he is using a local LMHOST file, it is bypassing the DNS of the machine, and flushing
the DNS will not solve the problem. In this case, purging the contents of the NetBIOS name
cache and then reloads the #PRE-tagged entries from the Lmhosts file.
Which attack utilizes a wireless access point which has been made to look as if it belongs
to the network in order to eavesdrop on the wireless traffic? - Correct Answer Evil twin
Explanation
An Evil Twin is meant to mimic a legitimate hotspot provided by a nearby business, such as
a coffee shop that provides free Wi-Fi access to its patrons.
You have been asked to troubleshoot a router which uses label-switching and label-edge
routers to forward traffic. Which of the following types of protocols should you be familiar
with in order to troubleshoot this device? - Correct Answer MPLS
Explanation
Multi-protocol label switching (MPLS) is a mechanism used within computer network
infrastructures to speed up the time it takes a data packet to flow from one node to another.
The label-based switching mechanism enables the network packets to flow on any
protocol.
,What is the BEST way to secure the most vulnerable attack vector for a network? - Correct
Answer Provide end user awareness training for office staff
Explanation
Users are our most vulnerable attack vector, proper training can help reduce the risk.
Which protocol is used to encapsulate other network layer protocols such as multicast and
IPX over WAN connections?
- Correct Answer GRE
Generic Routing Encapsulation (GRE) is a protocol that encapsulates packets in order to
route other protocols over IP networks.
Which of the following BEST describes the process of documenting everyone who has
physical access or possession of evidence? - Correct Answer Chain of custody
Explanation
Chain of custody refers to documentation that identifies all changes in the control,
handling, possession, ownership, or custody of a piece of evidence.
Johnny is trying to download a file from a remote FTP server, but keeps receiving an error
that a connection cannot be opened. Which of the following should you do FIRST to
resolve the problem? - Correct Answer Ensure that port 20 is open
Explanation
Executing an FTP port connection through a client is a two-stage process requiring the use
of two different ports. Once the user enters the name of the server and the login credentials
in the authorization fields of the FTP client, the FTP connection is attempted over port 20.
For FTP to function properly, you should have both ports 20 and 21 open.
A user was moved from one cubicle in the office to a new one a few desks over. Now, they
are reporting that their VoIP phone is randomly rebooting. When the network technician
takes the VoIP phone and reconnects it in the old cubicle, it works without any issues. What
is the cause of the problem? - Correct Answer Cable short
Explanation
Since the VoIP phone works in one cubicle but not another one that is very close, it is likely
the new cubicle has a short in the cable running to the network jack or from the jack to the
VoIP phone. The network technician should test the new cubicle's network jack to ensure
there isn't an issue with the wiring.
, You are working as a forensic investigator for the police. The police have a search warrant
to capture a suspect's workstation as evidence for an ongoing criminal investigation. As
you enter the room with the policeman, he arrests the suspect and handcuffs him. What
should you do FIRST?
- Correct Answer Secure the area
Explanation
As a forensic investigator, you should always 'secure the area' before you take any other
actions. This includes ensuring that no other people are in the area to disrupt your forensic
collection (such as the suspect or their accomplices), ensuring the workstation isn't
unplugged from the network or the power, and other actions to prevent the evidence from
being tampered with.
Dion Training Solutions wants to migrate their email server from an on-premise solution to
a vendor-hosted web-based solution like G Suite or Gmail. Which of the following types of
cloud models best describes this proposed solution? - Correct Answer Saas
Explanation
Software as a Service (SaaS) uses the web to deliver applications that are managed by a
third-party vendor and whose interface is accessed on the client's side. Most SaaS
applications can be run directly from a web browser without any downloads or installations
required, although some require plugins. The G Suite and Gmail solutions for business are
a good example of a SaaS solution.
When troubleshooting a T1 connection, the service provider's technical support
representative instructs a network technician to place a special device into the CSU/DSU.
Using this device, the provider is able to verify that communications are reaching the
CSU/DSU. What was used by the network technician? - Correct Answer Loopback plug
Explanation
A loopback plug, also known as a loopback adaptor or a loopback cable, is a device used
to test ports (such as serial, parallel, USB, and network ports) to identify network and
network interface card (NIC) issues. Loopback plug equipment facilitates the testing of
simple networking issues and is available at very low costs.
(PERFORMANCE BASED QUESTIONS)
The company's corporate headquarters provided your branch office a portion of their Class
C subnet to use at a new office location. You must allocate the minimum number of
addresses using CIDR notation in order to accommodate each department's needs. You
have finished providing the minimum number of addresses using CIDR notation to each of
the departments listed. Calculate the number of leftover IP addresses. What is the correct
