[2024年11月12日] CCST-Networking PDFで最近更新された問題です集試験点数を伸ばそう [Q19-Q37]

[2024年11月12日] CCST-Networking PDFで最近更新された問題です集試験点数を伸ばそう

CCST-Networking完全版問題集には無料PDF問題で合格させる

質問 # 19
You plan to use a network firewall to protect computers at a small office.
For each statement about firewalls, select True or False.
Note: You will receive partial credit for each correct selection.

正解：

解説：

Explanation:
* A firewall can direct all web traffic to a specific IP address.
* True: Firewalls can be configured to perform Network Address Translation (NAT) and port forwarding, which can direct all web traffic (typically on port 80 and 443) to a specific internal IP address.
* A firewall can block traffic to specific ports on internal computers.
* True: Firewalls can be configured with access control lists (ACLs) or rules to block traffic to specific ports on internal computers, enhancing security by restricting unwanted or harmful traffic.
* A firewall can prevent specific apps from running on a computer.
* False: Firewalls typically control traffic flow and do not prevent specific applications from running on a computer. Application control is usually managed by endpoint security software or application control systems.
* Directing Web Traffic: Firewalls can manage traffic redirection using NAT and port forwarding rules to route web traffic to designated servers or devices within the network.
* Blocking Specific Ports: Firewalls can enforce security policies by blocking or allowing traffic based on port numbers, ensuring that only permitted traffic reaches internal systems.
* Application Control: While firewalls manage network traffic, preventing applications from running typically requires software specifically designed for endpoint protection and application management.
References:
* Understanding Firewalls: Firewall Capabilities
* Network Security Best Practices: Network Security Guide

質問 # 20
Move each protocol from the list on the left to its correct example on the right.

正解：

解説：

Explanation:
The correct matching of the protocols to their examples is as follows:
* DHCP: Assign the reserved IP address 10.10.10.200 to a web server at your company.
* DNS: Perform a query to translate companypro.net to an IP address.
* ICMP: Perform a ping to ensure that a server is responding to network connections.
Here's how each protocol corresponds to its example:
* DHCP (Dynamic Host Configuration Protocol)is used to assign IP addresses to devices on a network.
In this case, DHCP would be used to assign the reserved IP address 10.10.10.200 to a web server.
* DNS (Domain Name System)is used to translate domain names into IP addresses. Therefore, to translate companypro.net to an IP address, DNS would be utilized.
* ICMP (Internet Control Message Protocol)is used for sending error messages and operational
* information indicating success or failure when communicating with another IP address. An example of this is using the ping command to check if a server is responding to network connections.
These protocols are essential for the smooth operation of networks and the internet.
* Perform a query to translate companypro.net to an IP address.
* DNS (Domain Name System): DNS is used to resolve domain names to IP addresses.
* Assign the reserved IP address 10.10.10.200 to a web server at your company.
* DHCP (Dynamic Host Configuration Protocol): DHCP is used to assign IP addresses to devices on a network.
* Perform a ping to ensure that a server is responding to network connections.
* ICMP (Internet Control Message Protocol): ICMP is used by network devices to send error messages and operational information, and it is the protocol used by the ping command.
* DNS (Domain Name System): DNS translates human-friendly domain names like "companypro.net" into IP addresses that computers use to identify each other on the network.
* DHCP (Dynamic Host Configuration Protocol): DHCP automatically assigns IP addresses to devices on a network, ensuring that no two devices have the same IP address.
* ICMP (Internet Control Message Protocol): ICMP is used for diagnostic or control purposes, and the ping command uses ICMP to test the reachability of a host on an IP network.
References:
* DNS Basics: What is DNS?
* DHCP Overview: What is DHCP?
* ICMP and Ping: Understanding ICMP

質問 # 21
Which command will display all the current operational settings configured on a Cisco router?

A. show running-config
B. show startup-config
C. show protocols
D. show version

正解：A

解説：

Router
Theshow running-configcommand is used on a Cisco router to display the current operational settings that are actively configured in the router's RAM. This command outputs all the configurations that are currently being executed by the router, which includes interface configurations, routing protocols, access lists, and other settings. Unlikeshow startup-config, which shows the saved configuration that the router will use on the next reboot,show running-configreflects the live, current configuration in use.
References:= The information is supported by multiple sources that detail the use of Cisco commands, particularly theshow running-configcommand as the standard for viewing the active configuration on a Cisco device123.
* show running-config: This command displays the current configuration running on the router. It includes all the operational settings and configurations applied to the router.
* show protocols: This command shows the status of configured protocols on the router but not the entire configuration.
* show startup-config: This command displays the configuration saved in NVRAM, which is used to initialize the router on startup, but not necessarily the current running configuration.
* show version: This command provides information about the router's software version, hardware components, and uptime but does not display the running configuration.
References:
* Cisco IOS Commands: Cisco IOS Commands

質問 # 22
A help desk technician receives the four trouble tickets listed below. Which ticket should receive the highest priority and be addressed first?

A. Ticket 3: A user reports that response time for a cloud-based application is slower than usual.
B. Ticket 1: A user requests relocation of a printer to a different network jack in the same office. The jack must be patched and made active.
C. Ticket 4: Two users report that wireless access in the cafeteria has been down for the last hour.
D. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.

正解：D

質問 # 23
A user reports that a company website is not available. The help desk technician issues a tracert command to determine if the server hosting the website isreachable over the network. The output of the command is shown as follows:

What can you tell from the command output?

A. The router at hop 3 is not forwarding packets to the IP address 192.168.1.10.
B. Requests to the web server at 192.168.1.10 are being delayed and time out.
C. The server address 192.168.1.10 is being blocked by a firewall on the router at hop 3.
D. The server with the address 192.168.1.10 is reachable over the network.

正解：D

解説：
The tracert command output shows the path taken to reach the destination IP address, 192.168.1.10. The command output indicates:
*Hops 1 and 2 are successfully reached.
*Hop 3 times out, meaning the router at hop 3 did not respond to the tracert request. However, this does not necessarily indicate a problem with forwarding packets, as some routers may be configured to block or not respond to ICMP requests.
*Hops 4 and 5 are successfully reached, with hop 5 being the destination IP 192.168.1.10, indicating that the server is reachable.
Thus, the correct answer is C. The server with the address 192.168.1.10 is reachable over the network.
References :=
*Cisco Traceroute Command
*Understanding Traceroute
The tracert command output indicates that the server with the address 192.168.1.10 is reachable over the network. The asterisk (*) at hop 3 suggests that the probe sent to that hop did not return a response, which could be due to a variety of reasons such as a firewall blocking ICMP packets or the router at that hop being configured not to respond to ICMP requests. However, since the subsequent hops (4 and 5) are showing response times, it means that the packets are indeed getting through and the server is reachable12.
References :=
*How to Use Traceroute Command to Read Its Results
*How to Use the Tracert Command in Windows

質問 # 24
Which component of the AAA service security model provides identity verification?

A. Auditing
B. Authorization
C. Authentication
D. Accounting

正解：C

解説：
The AAA service security model consists of three components: Authentication, Authorization, and Accounting.
*Authentication: This is the process of verifying the identity of a user or device. It ensures that only legitimate users can access the network or service.
*Authorization: This determines what an authenticated user is allowed to do or access within the network.
*Auditing/Accounting: This component tracks the actions of the user, including what resources they access and what changes they make.
Thus, the correct answer is C. Authentication.
References :=
*Cisco AAA Overview
*Understanding AAA (Authentication, Authorization, and Accounting)

質問 # 25
Which information is included in the header of a UDP segment?

A. Sequence numbers
B. MAC addresses
C. Port numbers
D. IP addresses

正解：C

解説：
The header of a UDP (User Datagram Protocol) segment includesport numbers. Specifically, it contains the source port number and the destination port number, which are used to identify the sending and receiving applications. UDP headers do not include IP addresses or MAC addresses, as those are part of the IP and Ethernet frame headers, respectively.Additionally, UDP does not use sequence numbers, which are a feature of TCP (Transmission Control Protocol) for ensuring reliable delivery of data segments1.
References:=
* Segmentation Explained with TCP and UDP Header
* User Datagram Protocol (UDP) - GeeksforGeeks
* Which three fields are used in a UDP segment header
* UDP Header: The header of a UDP segment includes the following key fields:
* Source Port: The port number of the sending application.
* Destination Port: The port number of the receiving application.
* Length: The length of the UDP header and data.
* Checksum: Used for error-checking the header and data.
* IP Addresses: These are included in the IP header, not the UDP header.
* Sequence Numbers: These are part of the TCP header, not UDP.
* MAC Addresses: These are part of the Ethernet frame header and are not included in the UDP header.
References:
* RFC 768 - User Datagram Protocol: RFC 768
* Cisco Guide on UDP: Cisco UDP Guide

質問 # 26
Which two pieces of information should you include when you initially create a support ticket? (Choose 2.)

A. Details about the computers connected to the network
B. A description of the conditions when the fault occurs
C. The description of the top-down fault-finding procedure
D. A detailed description of the fault
E. The actions taken to resolve the fault

正解：B、D

解説：
* Statement A: "A detailed description of the fault." This is essential for support staff to understand the nature of the problem and begin troubleshooting effectively.
* Statement C: "A description of the conditions when the fault occurs." This helps in reproducing the issue and identifying patterns that might indicate the cause of the fault.
* Statement B: "Details about the computers connected to the network." While useful, this is not as immediately critical as understanding the fault itself and the conditions under which it occurs.
* Statement D: "The actions taken to resolve the fault." This is important but typically follows the initial report.
* Statement E: "The description of the top-down fault-finding procedure." This is more of a troubleshooting methodology than information typically included in an initial support ticket.
References:
* Best Practices for Submitting Support Tickets: Support Ticket Guidelines

質問 # 27
Which protocol allows you to securely upload files to another computer on the internet?

A. HTTP
B. ICMP
C. SFTP
D. NTP

正解：C

解説：
SFTP, or Secure File Transfer Protocol, is a protocol that allows for secure file transfer capabilities between networked hosts. It is a secure extension of the File Transfer Protocol (FTP). SFTP encrypts both commands and data, preventing passwords and sensitive information from being transmitted openly over the network. It is typically used for secure file transfers over the internet and is built on the Secure Shell (SSH) protocol1.
References :=
*What Is SFTP? (Secure File Transfer Protocol)
*How to Use SFTP to Safely Transfer Files: A Step-by-Step Guide
*Secure File Transfers: Best Practices, Protocols And Tools
The Secure File Transfer Protocol (SFTP) is a secure version of the File Transfer Protocol (FTP) that uses SSH (Secure Shell) to encrypt all commands and data. This ensures that sensitive information, such as usernames, passwords, and files being transferred, are securely transmitted over the network.
*ICMP (Internet Control Message Protocol) is used for network diagnostics and is not designed for file transfer.
*NTP (Network Time Protocol) is used to synchronize clocks between computer systems and is not related to file transfer.
*HTTP (HyperText Transfer Protocol) is used for transmitting web pages over the internet and does not inherently provide secure file transfer capabilities.
Thus, the correct protocol that allows secure uploading of files to another computer on the internet is SFTP.
References :=
*Cisco Learning Network
*SFTP Overview (Cisco)

質問 # 28
Computers in a small office are unable to access companypro.net. You run the ipconfig command on one of the computers. The results are shown in the exhibit.
You need to determine if you can reach the router.

Which command should you use? Complete the command by selecting the correct options from each drop-down lists.

正解：

解説：

Explanation:
To determine if you can reach the router, you should use thepingcommand followed by the IP address of the router. Thepingcommand is a network utility used to test the reachability of a host on an Internet Protocol (IP) network and to measure the round-trip time for messages sent from the originating host to a destination computer.
The Default Gateway in theipconfigresults is typically the router's IP address in a home or small office network. In this case, the Default Gateway is192.168.0.1, which is the address you would ping to check connectivity to the router.
References:=
* How to Use the Ping Command
* Testing Network Connectivity with the Ping Command
To determine if you can reach the router, you should use thepingcommand with the IP address of the router.
* Command:ping
* Target:192.168.0.1
So, the completed command is:
* ping 192.168.0.1
Step by Step Comprehensive and Detailed Explanation:
* ping: The ping command sends ICMP Echo Request messages to the target IP address and waits for an Echo Reply. It is commonly used to test the reachability of a network device.
* 192.168.0.1: This is the IP address of the default gateway (the router) as shown in theipconfigoutput.
Pinging this address will help determine if the computer can communicate with the router.
References:
* Using the ping Command: ping Command Guide

質問 # 29
What is the purpose of assigning an IP address to the management VLAN interface on a Layer 2 switch?

A. To enable the switch to resolve URLs for the attached the devices
B. To enable the switch to act as a default gateway for the attached devices
C. To enable the switch to provide DHCP services to other switches in the network
D. To enable access to the CLI on the switch through Telnet or SSH

正解：D

解説：
The primary purpose of assigning an IP address to the management VLAN interface on a Layer 2 switch is to facilitate remote management of the switch. By configuring an IP address on the management VLAN, network administrators can access the switch's Command Line Interface (CLI) remotely using protocols such as Telnet or Secure Shell (SSH). This allows for convenient configuration changes, monitoring, and troubleshooting without needing physical access to the switch1.
References :=
*Understanding the Management VLAN
*Cisco - VLAN Configuration Guide
*Remote Management of Switches
Assigning an IP address to the management VLAN interface (often the VLAN 1 interface by default) on a Layer 2 switch allows network administrators to remotely manage the switch using protocols such as Telnet or SSH. This IP address does not affect the switch's ability to route traffic between VLANs but provides a means to access and configure the switch through its Command Line Interface (CLI).
*A: The switch does not act as a default gateway; this is typically a function of a Layer 3 device like a router.
*B: The switch does not resolve URLs; this is typically a function of DNS servers.
*C: The switch can relay DHCP requests but does not typically provide DHCP services itself; this is usually done by a dedicated DHCP server or router.
Thus, the correct answer is D. To enable access to the CLI on the switch through Telnet or SSH.
References :=
*Cisco VLAN Management Overview
*Cisco Catalyst Switch Management

質問 # 30
An app on a user's computer is having problems downloading data. The app uses the following URL to download data:
https://www.companypro.net:7100/api
You need to use Wireshark to capture packets sent to and received from that URL.
Which Wireshark filter options would you use to filter the results? Complete the command by selecting the correct option from each drop-down list.
Note: You will receive partial credit for each correct selection.

正解：

解説：

Explanation:
To capture packets sent to and received from the URLhttps://www.companypro.net:7100/apiusing Wireshark, you would use the following filter options:
* Protocol:tcp
* Filter Type:port
* Port Number:7100
This filter setup in Wireshark will display all TCP packets that are sent to or received from port 7100, which is the port specified in the URL for the API service. Since HTTPS typically uses TCP as the transport layer protocol, filtering by TCP and the specific port number will help isolate the relevant packets for troubleshooting the app's data download issues.
* cp: The app is using HTTPS, which relies on the TCP protocol for communication.
* port: The specific port number used by the application, which in this case is 7100.
* 7100: This is the port specified in the URL (https://www.companypro.net:7100/api).
This filter will capture all TCP traffic on port 7100, allowing you to analyze the packets related to the application's data download.
References:
* Wireshark Filters: Wireshark Display Filters

質問 # 31
A help desk technician receives the four trouble tickets listed below. Which ticket should receive the highest priority and be addressed first?

A. Ticket 3: A user reports that response time for a cloud-based application is slower than usual.
B. Ticket 1: A user requests relocation of a printer to a different network jack in the same office. The jack must be patched and made active.
C. Ticket 4: Two users report that wireless access in the cafeteria has been down for the last hour.
D. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.

正解：D

解説：
When prioritizing trouble tickets, the most critical issues affecting business operations or high-impact activities should be addressed first. Here's a breakdown of the tickets:
* Ticket 1: Relocation of a printer, while necessary, is not urgent and does not impact critical operations.
* Ticket 2: An ongoing webinar losing internet access is critical, especially if the webinar is time-sensitive and involves multiple participants.
* Ticket 3: Slower response time for a cloud-based application is important but typically not as urgent as a complete loss of internet access for a live event.
* Ticket 4: Wireless access down in the cafeteria affects users but does not have the same immediate impact as a live webinar losing connectivity.
Thus, the correct answer is B. Ticket 2: An online webinar is taking place in the conference room. The video conferencing equipment lost internet access.
References:=
* IT Help Desk Best Practices
* Prioritizing IT Support Tickets

質問 # 32
A local company requires two networks in two new buildings. The addresses used in these networksmust be in the private network range.
Which two address ranges should the company use? (Choose 2.)
Note: You will receive partial credit for each correct selection.

A. 192.16.0.0 to 192.16.255.255
B. 172.16.0.0 to 172.31.255.255
C. 11.0.0.0 to 11.255.255.255
D. 192.168.0.0 to 192.168.255.255

正解：B、D

解説：
The private IP address ranges that are set aside specifically for use within private networks and not routable on the internet are as follows:
* Class A: 10.0.0.0 to 10.255.255.255
* Class B: 172.16.0.0 to 172.31.255.255
* Class C: 192.168.0.0 to 192.168.255.255
These ranges are defined by the Internet Assigned Numbers Authority (IANA) and are used for local communications within a private network123.
Given the options: A.172.16.0.0 to 172.31.255.255falls within the Class B private range. B.192.16.0.0 to
192.16.255.255is not a recognized private IP range. C.11.0.0.0 to 11.255.255.255is not a recognized private IP range. D.192.168.0.0 to 192.168.255.255falls within the Class C private range.
Therefore, the correct selections that the company should use for their private networks areAandD.
References:=
* Reserved IP addresses on Wikipedia
* Private IP Addresses in Networking - GeeksforGeeks
* Understanding Private IP Ranges, Uses, Benefits, and Warnings

質問 # 33
Which two statements are true about the IPv4 address of the default gateway configured on a host? (Choose 2.) Note: You will receive partial credit for each correct selection.

A. The IPv4 address of the default gateway must be the first host address in the subnet.
B. The default gateway is the Loopback0 interface IPv4 address of the router connected to the same local network as the host.
C. Hosts learn the default gateway IPv4 address through router advertisement messages.
D. The default gateway is the IPv4 address of the router interface connected to the same local network as the host.
E. The same default gateway IPv4 address is configured on each host on the local network.

正解：D、E

解説：
*Statement B: "The same default gateway IPv4 address is configured on each host on the local network." This is true because all hosts on the same local network (subnet) use the same default gateway IP address to send packets destined for other networks.
*Statement D: "The default gateway is the IPv4 address of the router interface connected to the same local network as the host." This is true because the default gateway is the IP address of the router's interface that is directly connected to the local network.
*Statement A: "The IPv4 address of the default gateway must be the first host address in the subnet." This is not necessarily true. The default gateway can be any address within the subnet range.
*Statement C: "The default gateway is the Loopback0 interface IPv4 address of the router connected to the same local network as the host." This is not true; the default gateway is the IP address of the router's physical or logical interface connected to the local network.
*Statement E: "Hosts learn the default gateway IPv4 address through router advertisement messages." This is generally true for IPv6 with Router Advertisement (RA) messages, but not typically how IPv4 hosts learn the default gateway address.
References:
*Cisco Default Gateway Configuration: Cisco Default Gateway

質問 # 34
Move each network type from the list on the left to the correct example on the right.

正解：

解説：

Explanation:
* Two home office computers are connected to a switch by Ethernet cables.
* Network Type: LAN (Local Area Network)
* Explanation: A LAN connects devices within a limited area such as a home, office, or building, using Ethernet cables or Wi-Fi.
* Three government buildings in the same city connect to a cable company over coaxial cables.
* Network Type: MAN (Metropolitan Area Network)
* Explanation: A MAN connects networks across a city or campus, often using fiber optic or coaxial cables.
* A cell phone connects to a Bluetooth headset.
* Network Type: PAN (Personal Area Network)
* Explanation: A PAN connects devices within a personal workspace, typically using wireless technologies like Bluetooth.
* A financial institution connects its branches through a telecommunications service provider.
* Network Type: WAN (Wide Area Network)
* Explanation: A WAN connects multiple LANs over long distances, often using leased lines or satellite links provided by telecommunications companies.
* LAN (Local Area Network): Used for connecting devices within a small geographical area such as a
* single building or home.
* MAN (Metropolitan Area Network): Covers a larger geographical area than a LAN, typically a city or campus.
* PAN (Personal Area Network): Connects devices within the range of an individual person, such as connecting a phone to a Bluetooth headset.
* WAN (Wide Area Network): Spans large geographical areas, connecting multiple LANs across cities, countries, or continents.
References:
* Network Types Overview: Cisco Networking Basics
* Understanding Different Network Types: Network Types Guide

質問 # 35
Move each cloud computing service model from the list on the left to the correct example on the right Note: You will receive partial credit for each correct answer.

正解：

解説：

Explanation:
* Three virtual machines are connected by a virtual network in the cloud.
* Model: IaaS (Infrastructure as a Service)
* Explanation: IaaS provides virtualized computing resources over the internet, including virtual machines, storage, and networks.
* Users access a web-based graphics design application in the cloud for a monthly fee.
* Model: SaaS (Software as a Service)
* Explanation: SaaS delivers software applications over the internet, typically on a subscription basis, accessible via a web browser.
* A company develops applications using cloud-based resources and tools.
* Model: PaaS (Platform as a Service)
* Explanation: PaaS provides a platform allowing customers to develop, run, and manage applications without dealing with the infrastructure.
* IaaS (Infrastructure as a Service): Provides virtualized hardware resources that customers can use to build their own computing environments.
* PaaS (Platform as a Service): Offers a platform with tools and services to develop, test, and deploy applications.
* SaaS (Software as a Service): Delivers fully functional applications over the internet that users can access and use without managing the underlying infrastructure.
References:
* Cloud Service Models: Understanding IaaS, PaaS, SaaS
* NIST Definition of Cloud Computing:NIST Cloud Computing