- (Topic 3)
An engineer is designing a network topology for a company that maintains a large on- premises private cloud. A design requirement mandates internet-facing hosts to be partitioned off from the internal LAN and internal server IP ranges. Which Of the following
defense strategies helps meet this requirement?

1. A. Implementing a screened subnet
2. B. Deploying a honeypot
3. C. Utilizing network access control
4. D. Enforcing a Zero Trust model

Correct Answer: A
A screened subnet is a network segment that is isolated from both the internal LAN and the Internet by firewalls. A screened subnet can be used to host internet- facing hosts such as web servers, email servers, or DNS servers. A screened subnet provides an additional layer of security and prevents direct access to the internal network from the Internet.
References: Network+ Study Guide Objective 3.1: Explain the purposes and use cases for advanced networking devices.

- (Topic 3)
A help desk technician is concerned that a client's network cable issues may be causing intermittent connectivity. Which of the following would help the technician determine if this is the issue?

1. A. Run the show interface command on the switch
2. B. Run the tracerouute command on the server
3. C. Run iperf on the technician's desktop
4. D. Ping the client's computer from the router
5. E. Run a port scanner on the client's IP address

Correct Answer: A
To determine if a client's network cable issues may be causing intermittent connectivity, the help desk technician can run the show interface command on the switch.
This command allows the technician to view the status and statistics of the various interfaces on the switch, including the physical link status and the number of transmitted and received packets. If the interface is experiencing a large number of errors or dropped packets, this could indicate a problem with the network cable or with the connection between the client's device and the switch.
"Cisco routers and switches have a show interfaces IOS command that provides interface statistics/status information, including link state (up/down), speed/duplex, send/receive traffic, cyclic redundancy checks (CRCs), and protocol packet and byte counts."

- (Topic 3)
A network technician is installing a wireless network in an office building. After performing a site survey, the technician determines the area is very saturated on the 2.4GHz and the 5GHz bands. Which of the following wireless standards should the network technician implement?

1. A. 802.11ac
2. B. 802.11 ax
3. C. 802.11g
4. D. 802.11n

Correct Answer: B
* 802.11 ax is the latest wireless standard that operates in both the 2.4GHz and the 5GHz bands. It offers higher throughput, lower latency, and improved efficiency compared to previous standards. It also uses technologies such as OFDMA and MU-MIMO to reduce interference and increase capacity in dense environments. Therefore, 802.11 ax is the best choice for a wireless network in an office building with high saturation on both bands. References
✑ Part 3 of current page talks about the benefits of 802.11 ax and how it improves network performance in congested areas1.
✑ CompTIA Network+ N10-008 Exam Cram covers the wireless standards and their characteristics in Chapter 5. It also provides practice questions and explanations for the exam.

- (Topic 3)
A network team is getting reports that air conditioning is out in an IDF. The team would like to determine whether additional network issues are occurring. Which of the following should the network team do?

1. A. Confirm that memory usage on the network devices in the IDF is normal.
2. B. Access network baseline data for references to an air conditioning issue.
3. C. Verify severity levels on the corporate syslog server.
4. D. Check for SNMP traps from a network device in the IDF.
5. E. Review interface statistics looking for cyclic redundancy errors.

Correct Answer: D
"Baselines play an integral part in network documentation because they let you monitor the network’s overall performance. In simple terms, a baseline is a measure of performance that indicates how hard the network is working and where network resources are spent. The purpose of a baseline is to provide a basis of comparison. For example, you can compare the network’s performance results taken in March to results taken in June, or from one year to the next. More commonly, you would compare the baseline information at a time when the network is having a problem to information recorded when the network was operating with greater efficiency. Such comparisons help you determine whether there has been a problem with the network, how significant that problem is, and even where the problem lies."

- (Topic 2)
A firewall administrator is implementing a rule that directs HTTP traffic to an internal server listening on a non-standard socket Which of the following types of rules is the administrator implementing?

1. A. NAT
2. B. PAT
3. C. STP
4. D. SNAT
5. E. ARP

Correct Answer: B
The firewall administrator is implementing a PAT (Port Address Translation) rule that directs HTTP traffic to an internal server listening on a non-standard socket. PAT is a type of NAT (Network Address Translation) that allows multiple devices to share a single public IP address by using different port numbers. PAT can also be used to redirect traffic from one port to another port on the same or different IP address. This can be useful for security or load balancing purposes. For example, a firewall administrator can configure a PAT rule that redirects HTTP traffic (port 80) from the public IP address of the firewall to an internal server that listens on a non-standard port (such as 8080) on its private IP address. References: https://www.cisco.com/c/en/us/support/docs/ip/network-address- translation-nat/13772-12.html