CompTIA Network+ N10-009 Packet CLI Discovery Cable Fiber And Device Troubleshooting Tools Practice Test

 

Objective 5.5 • 35 original questions

This CompTIA Network+ N10-009 practice test focuses on network troubleshooting tools and protocols. All questions are original ExamSnap scenarios aligned to the current N10-009 blueprint; they are not copied from CompTIA exam content. Use the complete N10-009 collection for broader practice across all five domains. For broader exam preparation, review the CompTIA Network+ N10-009 Exam Dumps page.

Instructions: Select the best answer for each question. Review the explanation after answering; each distractor includes a reason it is not the best choice for that scenario.

Question 1

At Litware Manufacturing, a systems administrator is reviewing a network change. The requirement is to inspect packet headers, flags, retransmissions, and application exchanges. Which option is the best fit? The decision applies to a branch-office rollout.

1. traceroute/tracert
2. Protocol analyzer
3. Speed tester
4. Network tap
5. Nmap

Correct answer: B

Why: Captures and decodes packets to inspect conversations at protocol level. This directly satisfies the requirement: inspect packet headers, flags, retransmissions, and application exchanges.

Option review:

A: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: inspect packet headers, flags, retransmissions, and application exchanges.

B: Captures and decodes packets to inspect conversations at protocol level. This directly satisfies the requirement: inspect packet headers, flags, retransmissions, and application exchanges.

C: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: inspect packet headers, flags, retransmissions, and application exchanges.

D: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. However, it does not most directly satisfy the requirement in this scenario: inspect packet headers, flags, retransmissions, and application exchanges.

E: Scans hosts and ports to discover reachable systems and exposed services. However, it does not most directly satisfy the requirement in this scenario: inspect packet headers, flags, retransmissions, and application exchanges.

Learning point: Use Protocol analyzer when the key requirement is to inspect packet headers, flags, retransmissions, and application exchanges.

Question 2

A ticket at Woodgrove Bank says the team must quickly verify whether an IP host responds across the network. Which technology or concept most directly addresses this requirement? The decision applies to a campus refresh.

1. ip/ifconfig/ipconfig
2. dig
3. traceroute/tracert
4. ping
5. Visual fault locator

Correct answer: D

Why: Uses ICMP echo to test basic IP reachability and measure response time. This directly satisfies the requirement: quickly verify whether an IP host responds across the network.

Option review:

A: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: quickly verify whether an IP host responds across the network.

B: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: quickly verify whether an IP host responds across the network.

C: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: quickly verify whether an IP host responds across the network.

D: Uses ICMP echo to test basic IP reachability and measure response time. This directly satisfies the requirement: quickly verify whether an IP host responds across the network.

E: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. However, it does not most directly satisfy the requirement in this scenario: quickly verify whether an IP host responds across the network.

Learning point: Use ping when the key requirement is to quickly verify whether an IP host responds across the network.

Question 3

During a design meeting at Blue Yonder Airlines, the junior network administrator needs to identify at which router hop a path appears to fail or change. What should be selected? The decision applies to a data-center segment.

1. netstat
2. ip/ifconfig/ipconfig
3. traceroute/tracert
4. Toner
5. ping

Correct answer: C

Why: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. This directly satisfies the requirement: identify at which router hop a path appears to fail or change.

Option review:

A: Displays network connections, listening ports, and related protocol statistics on supported systems. However, it does not most directly satisfy the requirement in this scenario: identify at which router hop a path appears to fail or change.

B: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: identify at which router hop a path appears to fail or change.

C: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. This directly satisfies the requirement: identify at which router hop a path appears to fail or change.

D: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: identify at which router hop a path appears to fail or change.

E: Uses ICMP echo to test basic IP reachability and measure response time. However, it does not most directly satisfy the requirement in this scenario: identify at which router hop a path appears to fail or change.

Learning point: Use traceroute/tracert when the key requirement is to identify at which router hop a path appears to fail or change.

Question 4

Contoso Health is updating its network standard. Which option best meets the need to check how a DNS server resolves a hostname? The decision applies to a remote-site migration.

1. nslookup
2. show route
3. Speed tester
4. Nmap
5. LLDP/CDP

Correct answer: A

Why: Queries DNS using a simple interactive command-line tool. This directly satisfies the requirement: check how a DNS server resolves a hostname.

Option review:

A: Queries DNS using a simple interactive command-line tool. This directly satisfies the requirement: check how a DNS server resolves a hostname.

B: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: check how a DNS server resolves a hostname.

C: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: check how a DNS server resolves a hostname.

D: Scans hosts and ports to discover reachable systems and exposed services. However, it does not most directly satisfy the requirement in this scenario: check how a DNS server resolves a hostname.

E: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: check how a DNS server resolves a hostname.

Learning point: Use nslookup when the key requirement is to check how a DNS server resolves a hostname.

Question 5

A field technician at Litware Manufacturing is validating a proposed solution. The design must capture live traffic directly from a Linux server CLI. Which answer is most appropriate? The decision applies to a operations lab.

1. show power
2. LLDP/CDP
3. arp
4. tcpdump
5. Wi-Fi analyzer

Correct answer: D

Why: Captures packets from a command line on Unix/Linux-like systems. This directly satisfies the requirement: capture live traffic directly from a Linux server CLI.

Option review:

A: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: capture live traffic directly from a Linux server CLI.

B: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: capture live traffic directly from a Linux server CLI.

C: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: capture live traffic directly from a Linux server CLI.

D: Captures packets from a command line on Unix/Linux-like systems. This directly satisfies the requirement: capture live traffic directly from a Linux server CLI.

E: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: capture live traffic directly from a Linux server CLI.

Learning point: Use tcpdump when the key requirement is to capture live traffic directly from a Linux server CLI.

Question 6

For a new deployment at Woodgrove Bank, the networking team wants to perform a detailed DNS query and inspect authoritative/record information. Which choice most directly satisfies the goal? The decision applies to a production maintenance window.

1. show route
2. dig
3. Network tap
4. ping
5. show config

Correct answer: B

Why: Provides detailed DNS query output useful for records, servers, and response flags. This directly satisfies the requirement: perform a detailed DNS query and inspect authoritative/record information.

Option review:

A: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: perform a detailed DNS query and inspect authoritative/record information.

B: Provides detailed DNS query output useful for records, servers, and response flags. This directly satisfies the requirement: perform a detailed DNS query and inspect authoritative/record information.

C: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. However, it does not most directly satisfy the requirement in this scenario: perform a detailed DNS query and inspect authoritative/record information.

D: Uses ICMP echo to test basic IP reachability and measure response time. However, it does not most directly satisfy the requirement in this scenario: perform a detailed DNS query and inspect authoritative/record information.

E: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: perform a detailed DNS query and inspect authoritative/record information.

Learning point: Use dig when the key requirement is to perform a detailed DNS query and inspect authoritative/record information.

Question 7

At Blue Yonder Airlines, a systems administrator is reviewing a network change. The requirement is to see which local ports are listening and which sessions are established. Which option is the best fit? The decision applies to a new floor deployment.

1. show config
2. show power
3. Wi-Fi analyzer
4. netstat
5. Toner

Correct answer: D

Why: Displays network connections, listening ports, and related protocol statistics on supported systems. This directly satisfies the requirement: see which local ports are listening and which sessions are established.

Option review:

A: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: see which local ports are listening and which sessions are established.

B: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: see which local ports are listening and which sessions are established.

C: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: see which local ports are listening and which sessions are established.

D: Displays network connections, listening ports, and related protocol statistics on supported systems. This directly satisfies the requirement: see which local ports are listening and which sessions are established.

E: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: see which local ports are listening and which sessions are established.

Learning point: Use netstat when the key requirement is to see which local ports are listening and which sessions are established.

Question 8

A ticket at Contoso Health says the team must verify a client’s local IP address, mask/prefix, and gateway-related interface settings. Which technology or concept most directly addresses this requirement? The decision applies to a service-recovery review.

1. show arp
2. ip/ifconfig/ipconfig
3. Wi-Fi analyzer
4. show power
5. netstat

Correct answer: B

Why: Displays or manages host interface addressing information depending on operating system. This directly satisfies the requirement: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

Option review:

A: Displays IP-to-MAC neighbor mappings on a network device. However, it does not most directly satisfy the requirement in this scenario: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

B: Displays or manages host interface addressing information depending on operating system. This directly satisfies the requirement: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

C: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

D: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

E: Displays network connections, listening ports, and related protocol statistics on supported systems. However, it does not most directly satisfy the requirement in this scenario: verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

Learning point: Use ip/ifconfig/ipconfig when the key requirement is to verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

Question 9

During a design meeting at Litware Manufacturing, the junior network administrator needs to inspect the IPv4-to-MAC mapping learned for a local peer or gateway. What should be selected? The decision applies to a branch-office rollout.

1. nslookup
2. show mac-address-table
3. netstat
4. traceroute/tracert
5. arp

Correct answer: E

Why: Displays or manipulates local ARP/neighbor mappings on supported systems. This directly satisfies the requirement: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

Option review:

A: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

B: Displays learned MAC addresses and associated switch ports/VLANs. However, it does not most directly satisfy the requirement in this scenario: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

C: Displays network connections, listening ports, and related protocol statistics on supported systems. However, it does not most directly satisfy the requirement in this scenario: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

D: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

E: Displays or manipulates local ARP/neighbor mappings on supported systems. This directly satisfies the requirement: inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

Learning point: Use arp when the key requirement is to inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

Question 10

Woodgrove Bank is updating its network standard. Which option best meets the need to identify open TCP/UDP services on a target host during authorized troubleshooting? The decision applies to a campus refresh.

1. Speed tester
2. Network tap
3. show mac-address-table
4. show arp
5. Nmap

Correct answer: E

Why: Scans hosts and ports to discover reachable systems and exposed services. This directly satisfies the requirement: identify open TCP/UDP services on a target host during authorized troubleshooting.

Option review:

A: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: identify open TCP/UDP services on a target host during authorized troubleshooting.

B: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. However, it does not most directly satisfy the requirement in this scenario: identify open TCP/UDP services on a target host during authorized troubleshooting.

C: Displays learned MAC addresses and associated switch ports/VLANs. However, it does not most directly satisfy the requirement in this scenario: identify open TCP/UDP services on a target host during authorized troubleshooting.

D: Displays IP-to-MAC neighbor mappings on a network device. However, it does not most directly satisfy the requirement in this scenario: identify open TCP/UDP services on a target host during authorized troubleshooting.

E: Scans hosts and ports to discover reachable systems and exposed services. This directly satisfies the requirement: identify open TCP/UDP services on a target host during authorized troubleshooting.

Learning point: Use Nmap when the key requirement is to identify open TCP/UDP services on a target host during authorized troubleshooting.

Question 11

A field technician at Blue Yonder Airlines is validating a proposed solution. The design must determine which switch/router is physically adjacent to a network device. Which answer is most appropriate? The decision applies to a data-center segment.

1. dig
2. traceroute/tracert
3. LLDP/CDP
4. show config
5. Speed tester

Correct answer: C

Why: Neighbor-discovery protocols reveal directly connected network devices and interface information. This directly satisfies the requirement: determine which switch/router is physically adjacent to a network device.

Option review:

A: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: determine which switch/router is physically adjacent to a network device.

B: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: determine which switch/router is physically adjacent to a network device.

C: Neighbor-discovery protocols reveal directly connected network devices and interface information. This directly satisfies the requirement: determine which switch/router is physically adjacent to a network device.

D: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: determine which switch/router is physically adjacent to a network device.

E: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: determine which switch/router is physically adjacent to a network device.

Learning point: Use LLDP/CDP when the key requirement is to determine which switch/router is physically adjacent to a network device.

Question 12

For a new deployment at Contoso Health, the networking team wants to compare actual user throughput with the expected service rate. Which choice most directly satisfies the goal? The decision applies to a remote-site migration.

1. tcpdump
2. ip/ifconfig/ipconfig
3. show power
4. netstat
5. Speed tester

Correct answer: E

Why: Measures effective network/internet throughput from an endpoint. This directly satisfies the requirement: compare actual user throughput with the expected service rate.

Option review:

A: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: compare actual user throughput with the expected service rate.

B: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: compare actual user throughput with the expected service rate.

C: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: compare actual user throughput with the expected service rate.

D: Displays network connections, listening ports, and related protocol statistics on supported systems. However, it does not most directly satisfy the requirement in this scenario: compare actual user throughput with the expected service rate.

E: Measures effective network/internet throughput from an endpoint. This directly satisfies the requirement: compare actual user throughput with the expected service rate.

Learning point: Use Speed tester when the key requirement is to compare actual user throughput with the expected service rate.

Question 13

At Litware Manufacturing, a systems administrator is reviewing a network change. The requirement is to trace an unlabeled copper cable through a bundle. Which option is the best fit? The decision applies to a operations lab.

1. ip/ifconfig/ipconfig
2. show mac-address-table
3. tcpdump
4. Toner
5. Protocol analyzer

Correct answer: D

Why: Injects a tone on copper cabling so a probe can identify the correct cable. This directly satisfies the requirement: trace an unlabeled copper cable through a bundle.

Option review:

A: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: trace an unlabeled copper cable through a bundle.

B: Displays learned MAC addresses and associated switch ports/VLANs. However, it does not most directly satisfy the requirement in this scenario: trace an unlabeled copper cable through a bundle.

C: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: trace an unlabeled copper cable through a bundle.

D: Injects a tone on copper cabling so a probe can identify the correct cable. This directly satisfies the requirement: trace an unlabeled copper cable through a bundle.

E: Captures and decodes packets to inspect conversations at protocol level. However, it does not most directly satisfy the requirement in this scenario: trace an unlabeled copper cable through a bundle.

Learning point: Use Toner when the key requirement is to trace an unlabeled copper cable through a bundle.

Question 14

A ticket at Woodgrove Bank says the team must verify whether a twisted-pair run is correctly terminated. Which technology or concept most directly addresses this requirement? The decision applies to a production maintenance window.

1. ping
2. dig
3. Cable tester
4. Protocol analyzer
5. show config

Correct answer: C

Why: Checks copper wiring continuity, pinout, and often length/fault characteristics. This directly satisfies the requirement: verify whether a twisted-pair run is correctly terminated.

Option review:

A: Uses ICMP echo to test basic IP reachability and measure response time. However, it does not most directly satisfy the requirement in this scenario: verify whether a twisted-pair run is correctly terminated.

B: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: verify whether a twisted-pair run is correctly terminated.

C: Checks copper wiring continuity, pinout, and often length/fault characteristics. This directly satisfies the requirement: verify whether a twisted-pair run is correctly terminated.

D: Captures and decodes packets to inspect conversations at protocol level. However, it does not most directly satisfy the requirement in this scenario: verify whether a twisted-pair run is correctly terminated.

E: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: verify whether a twisted-pair run is correctly terminated.

Learning point: Use Cable tester when the key requirement is to verify whether a twisted-pair run is correctly terminated.

Question 15

During a design meeting at Blue Yonder Airlines, the junior network administrator needs to feed monitoring equipment with a passive copy of a link. What should be selected? The decision applies to a new floor deployment.

1. tcpdump
2. show power
3. Network tap
4. LLDP/CDP
5. traceroute/tracert

Correct answer: C

Why: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. This directly satisfies the requirement: feed monitoring equipment with a passive copy of a link.

Option review:

A: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: feed monitoring equipment with a passive copy of a link.

B: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: feed monitoring equipment with a passive copy of a link.

C: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. This directly satisfies the requirement: feed monitoring equipment with a passive copy of a link.

D: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: feed monitoring equipment with a passive copy of a link.

E: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: feed monitoring equipment with a passive copy of a link.

Learning point: Use Network tap when the key requirement is to feed monitoring equipment with a passive copy of a link.

Question 16

Contoso Health is updating its network standard. Which option best meets the need to identify channel congestion and signal strength in a wireless environment? The decision applies to a service-recovery review.

1. Network tap
2. Wi-Fi analyzer
3. Speed tester
4. Cable tester
5. ip/ifconfig/ipconfig

Correct answer: B

Why: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. This directly satisfies the requirement: identify channel congestion and signal strength in a wireless environment.

Option review:

A: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. However, it does not most directly satisfy the requirement in this scenario: identify channel congestion and signal strength in a wireless environment.

B: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. This directly satisfies the requirement: identify channel congestion and signal strength in a wireless environment.

C: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: identify channel congestion and signal strength in a wireless environment.

D: Checks copper wiring continuity, pinout, and often length/fault characteristics. However, it does not most directly satisfy the requirement in this scenario: identify channel congestion and signal strength in a wireless environment.

E: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: identify channel congestion and signal strength in a wireless environment.

Learning point: Use Wi-Fi analyzer when the key requirement is to identify channel congestion and signal strength in a wireless environment.

Question 17

A field technician at Litware Manufacturing is validating a proposed solution. The design must find a physical fault or wrong patch in a fiber run using visible light. Which answer is most appropriate? The decision applies to a branch-office rollout.

1. show config
2. tcpdump
3. nslookup
4. show route
5. Visual fault locator

Correct answer: E

Why: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. This directly satisfies the requirement: find a physical fault or wrong patch in a fiber run using visible light.

Option review:

A: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: find a physical fault or wrong patch in a fiber run using visible light.

B: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: find a physical fault or wrong patch in a fiber run using visible light.

C: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: find a physical fault or wrong patch in a fiber run using visible light.

D: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: find a physical fault or wrong patch in a fiber run using visible light.

E: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. This directly satisfies the requirement: find a physical fault or wrong patch in a fiber run using visible light.

Learning point: Use Visual fault locator when the key requirement is to find a physical fault or wrong patch in a fiber run using visible light.

Question 18

For a new deployment at Woodgrove Bank, the networking team wants to find which switch port currently learned a specific endpoint MAC address. Which choice most directly satisfies the goal? The decision applies to a campus refresh.

1. show route
2. dig
3. Toner
4. show mac-address-table
5. show config

Correct answer: D

Why: Displays learned MAC addresses and associated switch ports/VLANs. This directly satisfies the requirement: find which switch port currently learned a specific endpoint MAC address.

Option review:

A: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: find which switch port currently learned a specific endpoint MAC address.

B: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: find which switch port currently learned a specific endpoint MAC address.

C: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: find which switch port currently learned a specific endpoint MAC address.

D: Displays learned MAC addresses and associated switch ports/VLANs. This directly satisfies the requirement: find which switch port currently learned a specific endpoint MAC address.

E: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: find which switch port currently learned a specific endpoint MAC address.

Learning point: Use show mac-address-table when the key requirement is to find which switch port currently learned a specific endpoint MAC address.

Question 19

At Blue Yonder Airlines, a systems administrator is reviewing a network change. The requirement is to verify which next hop/prefix a router will use for a destination. Which option is the best fit? The decision applies to a data-center segment.

1. Nmap
2. Visual fault locator
3. show route
4. arp
5. LLDP/CDP

Correct answer: C

Why: Displays the routing table and selected network routes. This directly satisfies the requirement: verify which next hop/prefix a router will use for a destination.

Option review:

A: Scans hosts and ports to discover reachable systems and exposed services. However, it does not most directly satisfy the requirement in this scenario: verify which next hop/prefix a router will use for a destination.

B: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. However, it does not most directly satisfy the requirement in this scenario: verify which next hop/prefix a router will use for a destination.

C: Displays the routing table and selected network routes. This directly satisfies the requirement: verify which next hop/prefix a router will use for a destination.

D: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: verify which next hop/prefix a router will use for a destination.

E: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: verify which next hop/prefix a router will use for a destination.

Learning point: Use show route when the key requirement is to verify which next hop/prefix a router will use for a destination.

Question 20

A ticket at Contoso Health says the team must check whether a port is up and whether CRC/errors/drops are increasing. Which technology or concept most directly addresses this requirement? The decision applies to a remote-site migration.

1. ip/ifconfig/ipconfig
2. Nmap
3. show interface
4. show power
5. show arp

Correct answer: C

Why: Displays interface status, counters, errors, speed, and duplex information. This directly satisfies the requirement: check whether a port is up and whether CRC/errors/drops are increasing.

Option review:

A: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: check whether a port is up and whether CRC/errors/drops are increasing.

B: Scans hosts and ports to discover reachable systems and exposed services. However, it does not most directly satisfy the requirement in this scenario: check whether a port is up and whether CRC/errors/drops are increasing.

C: Displays interface status, counters, errors, speed, and duplex information. This directly satisfies the requirement: check whether a port is up and whether CRC/errors/drops are increasing.

D: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: check whether a port is up and whether CRC/errors/drops are increasing.

E: Displays IP-to-MAC neighbor mappings on a network device. However, it does not most directly satisfy the requirement in this scenario: check whether a port is up and whether CRC/errors/drops are increasing.

Learning point: Use show interface when the key requirement is to check whether a port is up and whether CRC/errors/drops are increasing.

Question 21

During a design meeting at Litware Manufacturing, the junior network administrator needs to review active device settings for a suspected misconfiguration. What should be selected? The decision applies to a operations lab.

1. show config
2. ping
3. Toner
4. Speed tester
5. nslookup

Correct answer: A

Why: Displays the current device configuration in platforms using this command style. This directly satisfies the requirement: review active device settings for a suspected misconfiguration.

Option review:

A: Displays the current device configuration in platforms using this command style. This directly satisfies the requirement: review active device settings for a suspected misconfiguration.

B: Uses ICMP echo to test basic IP reachability and measure response time. However, it does not most directly satisfy the requirement in this scenario: review active device settings for a suspected misconfiguration.

C: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: review active device settings for a suspected misconfiguration.

D: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: review active device settings for a suspected misconfiguration.

E: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: review active device settings for a suspected misconfiguration.

Learning point: Use show config when the key requirement is to review active device settings for a suspected misconfiguration.

Question 22

Woodgrove Bank is updating its network standard. Which option best meets the need to verify the router or switch ARP entry for a connected IPv4 host? The decision applies to a production maintenance window.

1. ip/ifconfig/ipconfig
2. netstat
3. show arp
4. tcpdump
5. show vlan

Correct answer: C

Why: Displays IP-to-MAC neighbor mappings on a network device. This directly satisfies the requirement: verify the router or switch ARP entry for a connected IPv4 host.

Option review:

A: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: verify the router or switch ARP entry for a connected IPv4 host.

B: Displays network connections, listening ports, and related protocol statistics on supported systems. However, it does not most directly satisfy the requirement in this scenario: verify the router or switch ARP entry for a connected IPv4 host.

C: Displays IP-to-MAC neighbor mappings on a network device. This directly satisfies the requirement: verify the router or switch ARP entry for a connected IPv4 host.

D: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: verify the router or switch ARP entry for a connected IPv4 host.

E: Displays VLAN definitions and port membership. However, it does not most directly satisfy the requirement in this scenario: verify the router or switch ARP entry for a connected IPv4 host.

Learning point: Use show arp when the key requirement is to verify the router or switch ARP entry for a connected IPv4 host.

Question 23

A field technician at Blue Yonder Airlines is validating a proposed solution. The design must confirm whether a switch port belongs to the expected VLAN. Which answer is most appropriate? The decision applies to a new floor deployment.

1. Cable tester
2. show config
3. arp
4. show vlan
5. nslookup

Correct answer: D

Why: Displays VLAN definitions and port membership. This directly satisfies the requirement: confirm whether a switch port belongs to the expected VLAN.

Option review:

A: Checks copper wiring continuity, pinout, and often length/fault characteristics. However, it does not most directly satisfy the requirement in this scenario: confirm whether a switch port belongs to the expected VLAN.

B: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: confirm whether a switch port belongs to the expected VLAN.

C: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: confirm whether a switch port belongs to the expected VLAN.

D: Displays VLAN definitions and port membership. This directly satisfies the requirement: confirm whether a switch port belongs to the expected VLAN.

E: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: confirm whether a switch port belongs to the expected VLAN.

Learning point: Use show vlan when the key requirement is to confirm whether a switch port belongs to the expected VLAN.

Question 24

For a new deployment at Contoso Health, the networking team wants to diagnose whether a switch has enough remaining PoE budget. Which choice most directly satisfies the goal? The decision applies to a service-recovery review.

1. show power
2. show config
3. tcpdump
4. Visual fault locator
5. nslookup

Correct answer: A

Why: Displays PoE power allocation/consumption on supported network devices. This directly satisfies the requirement: diagnose whether a switch has enough remaining PoE budget.

Option review:

A: Displays PoE power allocation/consumption on supported network devices. This directly satisfies the requirement: diagnose whether a switch has enough remaining PoE budget.

B: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: diagnose whether a switch has enough remaining PoE budget.

C: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: diagnose whether a switch has enough remaining PoE budget.

D: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. However, it does not most directly satisfy the requirement in this scenario: diagnose whether a switch has enough remaining PoE budget.

E: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: diagnose whether a switch has enough remaining PoE budget.

Learning point: Use show power when the key requirement is to diagnose whether a switch has enough remaining PoE budget.

Question 25

During a remote-site migration, Litware Manufacturing is comparing several networking concepts. Which option is accurately characterized by this statement: Captures and decodes packets to inspect conversations at protocol level.

1. Cable tester
2. nslookup
3. Speed tester
4. Protocol analyzer
5. ip/ifconfig/ipconfig

Correct answer: D

Why: Captures and decodes packets to inspect conversations at protocol level. This directly satisfies the requirement: Captures and decodes packets to inspect conversations at protocol level..

Option review:

A: Checks copper wiring continuity, pinout, and often length/fault characteristics. However, it does not most directly satisfy the requirement in this scenario: Captures and decodes packets to inspect conversations at protocol level..

B: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: Captures and decodes packets to inspect conversations at protocol level..

C: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: Captures and decodes packets to inspect conversations at protocol level..

D: Captures and decodes packets to inspect conversations at protocol level. This directly satisfies the requirement: Captures and decodes packets to inspect conversations at protocol level..

E: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: Captures and decodes packets to inspect conversations at protocol level..

Learning point: Use Protocol analyzer when the key requirement is to inspect packet headers, flags, retransmissions, and application exchanges.

Question 26

During a operations lab, Woodgrove Bank is comparing several networking concepts. Which option is accurately characterized by this statement: Uses ICMP echo to test basic IP reachability and measure response time.

1. ip/ifconfig/ipconfig
2. Nmap
3. Speed tester
4. arp
5. ping

Correct answer: E

Why: Uses ICMP echo to test basic IP reachability and measure response time. This directly satisfies the requirement: Uses ICMP echo to test basic IP reachability and measure response time..

Option review:

A: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: Uses ICMP echo to test basic IP reachability and measure response time..

B: Scans hosts and ports to discover reachable systems and exposed services. However, it does not most directly satisfy the requirement in this scenario: Uses ICMP echo to test basic IP reachability and measure response time..

C: Measures effective network/internet throughput from an endpoint. However, it does not most directly satisfy the requirement in this scenario: Uses ICMP echo to test basic IP reachability and measure response time..

D: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: Uses ICMP echo to test basic IP reachability and measure response time..

E: Uses ICMP echo to test basic IP reachability and measure response time. This directly satisfies the requirement: Uses ICMP echo to test basic IP reachability and measure response time..

Learning point: Use ping when the key requirement is to quickly verify whether an IP host responds across the network.

Question 27

During a production maintenance window, Blue Yonder Airlines is comparing several networking concepts. Which option is accurately characterized by this statement: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior.

1. dig
2. traceroute/tracert
3. Wi-Fi analyzer
4. Visual fault locator
5. show route

Correct answer: B

Why: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. This directly satisfies the requirement: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

Option review:

A: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

B: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. This directly satisfies the requirement: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

C: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

D: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. However, it does not most directly satisfy the requirement in this scenario: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

E: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior..

Learning point: Use traceroute/tracert when the key requirement is to identify at which router hop a path appears to fail or change.

Question 28

During a new floor deployment, Contoso Health is comparing several networking concepts. Which option is accurately characterized by this statement: Queries DNS using a simple interactive command-line tool.

1. nslookup
2. show interface
3. LLDP/CDP
4. show power
5. show mac-address-table

Correct answer: A

Why: Queries DNS using a simple interactive command-line tool. This directly satisfies the requirement: Queries DNS using a simple interactive command-line tool..

Option review:

A: Queries DNS using a simple interactive command-line tool. This directly satisfies the requirement: Queries DNS using a simple interactive command-line tool..

B: Displays interface status, counters, errors, speed, and duplex information. However, it does not most directly satisfy the requirement in this scenario: Queries DNS using a simple interactive command-line tool..

C: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: Queries DNS using a simple interactive command-line tool..

D: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: Queries DNS using a simple interactive command-line tool..

E: Displays learned MAC addresses and associated switch ports/VLANs. However, it does not most directly satisfy the requirement in this scenario: Queries DNS using a simple interactive command-line tool..

Learning point: Use nslookup when the key requirement is to check how a DNS server resolves a hostname.

Question 29

During a service-recovery review, Litware Manufacturing is comparing several networking concepts. Which option is accurately characterized by this statement: Captures packets from a command line on Unix/Linux-like systems.

1. tcpdump
2. arp
3. show route
4. show config
5. Wi-Fi analyzer

Correct answer: A

Why: Captures packets from a command line on Unix/Linux-like systems. This directly satisfies the requirement: Captures packets from a command line on Unix/Linux-like systems..

Option review:

A: Captures packets from a command line on Unix/Linux-like systems. This directly satisfies the requirement: Captures packets from a command line on Unix/Linux-like systems..

B: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: Captures packets from a command line on Unix/Linux-like systems..

C: Displays the routing table and selected network routes. However, it does not most directly satisfy the requirement in this scenario: Captures packets from a command line on Unix/Linux-like systems..

D: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: Captures packets from a command line on Unix/Linux-like systems..

E: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: Captures packets from a command line on Unix/Linux-like systems..

Learning point: Use tcpdump when the key requirement is to capture live traffic directly from a Linux server CLI.

Question 30

During a branch-office rollout, Woodgrove Bank is comparing several networking concepts. Which option is accurately characterized by this statement: Provides detailed DNS query output useful for records, servers, and response flags.

1. Protocol analyzer
2. ip/ifconfig/ipconfig
3. dig
4. Visual fault locator
5. show power

Correct answer: C

Why: Provides detailed DNS query output useful for records, servers, and response flags. This directly satisfies the requirement: Provides detailed DNS query output useful for records, servers, and response flags..

Option review:

A: Captures and decodes packets to inspect conversations at protocol level. However, it does not most directly satisfy the requirement in this scenario: Provides detailed DNS query output useful for records, servers, and response flags..

B: Displays or manages host interface addressing information depending on operating system. However, it does not most directly satisfy the requirement in this scenario: Provides detailed DNS query output useful for records, servers, and response flags..

C: Provides detailed DNS query output useful for records, servers, and response flags. This directly satisfies the requirement: Provides detailed DNS query output useful for records, servers, and response flags..

D: Injects visible red light into fiber to locate breaks, bends, or incorrect patching over short distances. However, it does not most directly satisfy the requirement in this scenario: Provides detailed DNS query output useful for records, servers, and response flags..

E: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: Provides detailed DNS query output useful for records, servers, and response flags..

Learning point: Use dig when the key requirement is to perform a detailed DNS query and inspect authoritative/record information.

Question 31

During a campus refresh, Blue Yonder Airlines is comparing several networking concepts. Which option is accurately characterized by this statement: Displays network connections, listening ports, and related protocol statistics on supported systems.

1. Toner
2. show config
3. netstat
4. nslookup
5. dig

Correct answer: C

Why: Displays network connections, listening ports, and related protocol statistics on supported systems. This directly satisfies the requirement: Displays network connections, listening ports, and related protocol statistics on supported systems..

Option review:

A: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: Displays network connections, listening ports, and related protocol statistics on supported systems..

B: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: Displays network connections, listening ports, and related protocol statistics on supported systems..

C: Displays network connections, listening ports, and related protocol statistics on supported systems. This directly satisfies the requirement: Displays network connections, listening ports, and related protocol statistics on supported systems..

D: Queries DNS using a simple interactive command-line tool. However, it does not most directly satisfy the requirement in this scenario: Displays network connections, listening ports, and related protocol statistics on supported systems..

E: Provides detailed DNS query output useful for records, servers, and response flags. However, it does not most directly satisfy the requirement in this scenario: Displays network connections, listening ports, and related protocol statistics on supported systems..

Learning point: Use netstat when the key requirement is to see which local ports are listening and which sessions are established.

Question 32

During a data-center segment, Contoso Health is comparing several networking concepts. Which option is accurately characterized by this statement: Displays or manages host interface addressing information depending on operating system.

1. show config
2. Network tap
3. ip/ifconfig/ipconfig
4. show interface
5. show power

Correct answer: C

Why: Displays or manages host interface addressing information depending on operating system. This directly satisfies the requirement: Displays or manages host interface addressing information depending on operating system..

Option review:

A: Displays the current device configuration in platforms using this command style. However, it does not most directly satisfy the requirement in this scenario: Displays or manages host interface addressing information depending on operating system..

B: Provides a dedicated physical copy of traffic for monitoring without relying on a switch mirror port. However, it does not most directly satisfy the requirement in this scenario: Displays or manages host interface addressing information depending on operating system..

C: Displays or manages host interface addressing information depending on operating system. This directly satisfies the requirement: Displays or manages host interface addressing information depending on operating system..

D: Displays interface status, counters, errors, speed, and duplex information. However, it does not most directly satisfy the requirement in this scenario: Displays or manages host interface addressing information depending on operating system..

E: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: Displays or manages host interface addressing information depending on operating system..

Learning point: Use ip/ifconfig/ipconfig when the key requirement is to verify a client’s local IP address, mask/prefix, and gateway-related interface settings.

Question 33

During a remote-site migration, Litware Manufacturing is comparing several networking concepts. Which option is accurately characterized by this statement: Displays or manipulates local ARP/neighbor mappings on supported systems.

1. arp
2. Wi-Fi analyzer
3. LLDP/CDP
4. Toner
5. Cable tester

Correct answer: A

Why: Displays or manipulates local ARP/neighbor mappings on supported systems. This directly satisfies the requirement: Displays or manipulates local ARP/neighbor mappings on supported systems..

Option review:

A: Displays or manipulates local ARP/neighbor mappings on supported systems. This directly satisfies the requirement: Displays or manipulates local ARP/neighbor mappings on supported systems..

B: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: Displays or manipulates local ARP/neighbor mappings on supported systems..

C: Neighbor-discovery protocols reveal directly connected network devices and interface information. However, it does not most directly satisfy the requirement in this scenario: Displays or manipulates local ARP/neighbor mappings on supported systems..

D: Injects a tone on copper cabling so a probe can identify the correct cable. However, it does not most directly satisfy the requirement in this scenario: Displays or manipulates local ARP/neighbor mappings on supported systems..

E: Checks copper wiring continuity, pinout, and often length/fault characteristics. However, it does not most directly satisfy the requirement in this scenario: Displays or manipulates local ARP/neighbor mappings on supported systems..

Learning point: Use arp when the key requirement is to inspect the IPv4-to-MAC mapping learned for a local peer or gateway.

Question 34

During a operations lab, Woodgrove Bank is comparing several networking concepts. Which option is accurately characterized by this statement: Scans hosts and ports to discover reachable systems and exposed services.

1. tcpdump
2. Nmap
3. Protocol analyzer
4. ping
5. traceroute/tracert

Correct answer: B

Why: Scans hosts and ports to discover reachable systems and exposed services. This directly satisfies the requirement: Scans hosts and ports to discover reachable systems and exposed services..

Option review:

A: Captures packets from a command line on Unix/Linux-like systems. However, it does not most directly satisfy the requirement in this scenario: Scans hosts and ports to discover reachable systems and exposed services..

B: Scans hosts and ports to discover reachable systems and exposed services. This directly satisfies the requirement: Scans hosts and ports to discover reachable systems and exposed services..

C: Captures and decodes packets to inspect conversations at protocol level. However, it does not most directly satisfy the requirement in this scenario: Scans hosts and ports to discover reachable systems and exposed services..

D: Uses ICMP echo to test basic IP reachability and measure response time. However, it does not most directly satisfy the requirement in this scenario: Scans hosts and ports to discover reachable systems and exposed services..

E: Reveals the sequence of Layer 3 hops toward a destination using TTL/hop-limit behavior. However, it does not most directly satisfy the requirement in this scenario: Scans hosts and ports to discover reachable systems and exposed services..

Learning point: Use Nmap when the key requirement is to identify open TCP/UDP services on a target host during authorized troubleshooting.

Question 35

During a production maintenance window, Blue Yonder Airlines is comparing several networking concepts. Which option is accurately characterized by this statement: Neighbor-discovery protocols reveal directly connected network devices and interface information.

1. LLDP/CDP
2. show power
3. Wi-Fi analyzer
4. arp
5. show mac-address-table

Correct answer: A

Why: Neighbor-discovery protocols reveal directly connected network devices and interface information. This directly satisfies the requirement: Neighbor-discovery protocols reveal directly connected network devices and interface information..

Option review:

A: Neighbor-discovery protocols reveal directly connected network devices and interface information. This directly satisfies the requirement: Neighbor-discovery protocols reveal directly connected network devices and interface information..

B: Displays PoE power allocation/consumption on supported network devices. However, it does not most directly satisfy the requirement in this scenario: Neighbor-discovery protocols reveal directly connected network devices and interface information..

C: Measures wireless channels, signal levels, and nearby networks to diagnose RF issues. However, it does not most directly satisfy the requirement in this scenario: Neighbor-discovery protocols reveal directly connected network devices and interface information..

D: Displays or manipulates local ARP/neighbor mappings on supported systems. However, it does not most directly satisfy the requirement in this scenario: Neighbor-discovery protocols reveal directly connected network devices and interface information..

E: Displays learned MAC addresses and associated switch ports/VLANs. However, it does not most directly satisfy the requirement in this scenario: Neighbor-discovery protocols reveal directly connected network devices and interface information..

Learning point: Use LLDP/CDP when the key requirement is to determine which switch/router is physically adjacent to a network device.