2026年10月03日更新された100-150トレーニング最新認定問題をゲットCCST合格目指せ
認定トレーニング100-150試験問題集でテストエンジン
質問 # 51
Which information is included in the header of a UDP segment?
- A. MAC addresses
- B. Sequence numbers
- C. Port numbers
- D. IP addresses
正解：C
解説：
The header of a UDP (User Datagram Protocol) segment includes port numbers. Specifically, it contains the source port number and the destination port number, which are used to identify the sending and receiving applications. UDP headers do not include IP addresses or MAC addresses, as those are part of the IP and Ethernet frame headers, respectively. Additionally, UDP does not use sequence numbers, which are a feature of TCP (Transmission Control Protocol) for ensuring reliable delivery of data segments1.
References :=
* Segmentation Explained with TCP and UDP Header
* User Datagram Protocol (UDP) - GeeksforGeeks
* Which three fields are used in a UDP segment header
* UDP Header: The header of a UDP segment includes the following key fields:
* Source Port: The port number of the sending application.
* Destination Port: The port number of the receiving application.
* Length: The length of the UDP header and data.
* Checksum: Used for error-checking the header and data.
* IP Addresses: These are included in the IP header, not the UDP header.
* Sequence Numbers: These are part of the TCP header, not UDP.
* MAC Addresses: These are part of the Ethernet frame header and are not included in the UDP header.
References:
* RFC 768 - User Datagram Protocol: RFC 768
* Cisco Guide on UDP: Cisco UDP Guide
質問 # 52
An engineer configured a new VLAN named VLAN2 for the Data Center team. When the team tries to ping addresses outside VLAN2 from a computer in VLAN2, they are unable to reach them.
What should the engineer configure?
- A. Additional VLAN
- B. Default route
- C. Static route
- D. Default gateway
正解：D
解説：
Hosts in VLAN2 require a default gateway (the router or SVI IP) to route traffic outside their subnet.
質問 # 53
A user initiates a trouble ticket stating that an external web page is not loading. You determine that other resources both internal and external are still reachable.
Which command can you use to help locate where the issue is in the network path to the external web page?
- A. nslookup
- B. ping -t
- C. tracert
- D. ipconfig/all
正解：C
解説：
The tracert command is used to determine the route taken by packets across an IP network. When a user reports that an external web page is not loading, while other resources are accessible, it suggests there might be an issue at a certain point in the network path to the specific web page. The tracert command helps to diagnose where the breakdown occurs by displaying a list of routers that the packets pass through on their way to the destination. It can identify the network segment where the packets stop progressing, which is valuable for pinpointing where the connectivity issue lies. References := Cisco CCST Networking Certification FAQs - CISCONET Training Solutions, Command Prompt (CMD): 10 network-related commands you should know, Network Troubleshooting Commands Guide: Windows, Mac & Linux - Comparitech, How to Use the Traceroute and Ping Commands to Troubleshoot Network, Network Troubleshooting Techniques: Ping, Traceroute, PathPing.
*tracert Command: This command is used to determine the path packets take to reach a destination. It lists all the hops (routers) along the way and can help identify where the delay or failure occurs.
*ping -t: This command sends continuous ping requests and is useful for determining if a host is reachable but does not provide path information.
*ipconfig /all: This command displays all current TCP/IP network configuration values and can be used to verify network settings but not to trace a network path.
*nslookup: This command queries the DNS to obtain domain name or IP address mapping, useful for DNS issues but not for tracing network paths.
References:
*Microsoft tracert Command: tracert Command Guide
*Troubleshooting Network Issues with tracert: Network Troubleshooting Guide
質問 # 54
Hotspot Question
An app on a user's computer is having problems downloading data. The app uses the following URL to download data:
https://www.companypro.net:7100/api
You need to use Wireshark to capture packets sent to and received from that URL.
Which Wireshark filter options would you use to filter the results? Complete the command by selecting the correct option from each drop-down list.
Note: You will receive partial credit for each correct selection.
正解：
解説：
Explanation:
This display filter captures all TCP traffic to and from port 7100, which is the port used by the HTTPS URL.
質問 # 55
Which information is included in the header of a UDP segment?
- A. MAC addresses
- B. Sequence numbers
- C. Port numbers
- D. IP addresses
正解：C
解説：
A UDP segment header includes source and destination port numbers; it does not contain sequence numbers, IP addresses, or MAC addresses.
質問 # 56
Examine the graphic.
Which action can be run directly from the Cisco router's IOS mode shown?
- A. Enter interface IP configuration subcommands
- B. Select an interface to configure
- C. Enable a routing process
- D. Show running system information
正解：D
解説：
The prompt ending with # indicates privileged EXEC mode. From this mode, the administrator can run show commands to display running system information directly. Configuration tasks such as selecting an interface or entering interface subcommands require global configuration mode first.
質問 # 57
You plan to use a network firewall to protect computers at a small office.
For each statement about firewalls, select True or False.
Note: You will receive partial credit for each correct selection.
正解：
解説：
Explanation:
* A firewall can direct all web traffic to a specific IP address.
* True: Firewalls can be configured to perform Network Address Translation (NAT) and port forwarding, which can direct all web traffic (typically on port 80 and 443) to a specific internal IP address.
* A firewall can block traffic to specific ports on internal computers.
* True: Firewalls can be configured with access control lists (ACLs) or rules to block traffic to specific ports on internal computers, enhancing security by restricting unwanted or harmful traffic.
* A firewall can prevent specific apps from running on a computer.
* False: Firewalls typically control traffic flow and do not prevent specific applications from running on a computer. Application control is usually managed by endpoint security software or application control systems.
* Directing Web Traffic: Firewalls can manage traffic redirection using NAT and port forwarding rules to route web traffic to designated servers or devices within the network.
* Blocking Specific Ports: Firewalls can enforce security policies by blocking or allowing traffic based on port numbers, ensuring that only permitted traffic reaches internal systems.
* Application Control: While firewalls manage network traffic, preventing applications from running typically requires software specifically designed for endpoint protection and application management.
References:
* Understanding Firewalls: Firewall Capabilities
* Network Security Best Practices: Network Security Guide
質問 # 58
DRAG DROP
Examine the connections shown in the following image. Move the cable types on the right to the appropriate connection description on the left. You may use each cable type more than once or not at all.
正解：
解説：
Explanation:
Based on the image description provided, here are the cable types matched with the appropriate connection descriptions:
Connects Switch S1 to Router R1 Gi0/0/1 interface Cable Type: = Straight-through UTP Cable
Connects Router R2 Gi0/0/0 to Router R3 Gi0/0/0 via underground conduit Cable Type: = Fiber Optic Cable
Connects Router R1 Gi0/0/0 to Router R2 Gi0/0/1 Cable Type: = Crossover UTP Cable
Connects Switch S3 to Server0 network interface card Cable Type: = Straight-through UTP Cable
The choices are based on standard networking practices where:
Straight-through UTP cables are typically used to connect a switch to a router or a network interface card.
Fiber optic cables are ideal for long-distance, high-speed data transmission, such as connections through an underground conduit.
Crossover UTP cables are used to connect similar devices, such as router-to-router connections.
These matches are consistent with the color-coded cables in the image: green for switch connections, yellow for router-to-router connections within the same rack, and blue for inter-rack connections. The use of these cables follows the Ethernet cabling standards.
Connects Switch S1 to Router R1 Gi0/0/1 interface:
Cable Type: Straight-through UTP Cable
A straight-through UTP cable is typically used to connect different types of devices, such as a switch to a router.
Connects Router R2 Gi0/0/0 to Router R3 Gi0/0/0 via underground conduit:
Cable Type: Fiber Optic Cable
Fiber optic cables are used for long-distance connections, such as those through an underground conduit between buildings.
Connects Router R1 Gi0/0/0 to Router R2 Gi0/0/1:
Cable Type: Crossover UTP Cable
A crossover UTP cable is typically used to connect similar devices directly, such as router to router connections.
Connects Switch S3 to Server0 network interface card:
Cable Type: Straight-through UTP Cable
A straight-through UTP cable is typically used to connect a switch to an end device, such as a server.
Straight-through UTP Cable: Used to connect different devices (e.g., switch to router, switch to server).
Crossover UTP Cable: Used to connect similar devices directly (e.g., router to router, switch to switch).
Fiber Optic Cable: Used for long-distance and high-speed connections, often between buildings or data centers.
Reference: Network Cable Types and Uses: Cisco Network Cables
Understanding Ethernet Cabling: Ethernet Cable Guide
質問 # 59
What is the main purpose of a default gateway configured on a host within a local area network?
- A. Forward traffic to external networks
- B. Assign IP addresses
- C. Filter malicious packets
- D. Resolve domain names
正解：A
解説：
A default gateway allows devices to send traffic destined for outside networks, acting as the exit point from the local network to other networks or the internet.
質問 # 60
DRAG DROP
Move each protocol from the list on the left to its correct example on the right.
正解：
解説：
Explanation:
The correct matching of the protocols to their examples is as follows:
DHCP: Assign the reserved IP address 10.10.10.200 to a web server at your company.
DNS: Perform a query to translate companypro.net to an IP address.
ICMP: Perform a ping to ensure that a server is responding to network connections.
Here's how each protocol corresponds to its example:
DHCP (Dynamic Host Configuration Protocol) is used to assign IP addresses to devices on a network.
In this case, DHCP would be used to assign the reserved IP address 10.10.10.200 to a web server.
DNS (Domain Name System) is used to translate domain names into IP addresses. Therefore, to translate companypro.net to an IP address, DNS would be utilized.
ICMP (Internet Control Message Protocol) is used for sending error messages and operational information indicating success or failure when communicating with another IP address. An example of this is using the ping command to check if a server is responding to network connections.
These protocols are essential for the smooth operation of networks and the internet.
Perform a query to translate companypro.net to an IP address.
DNS (Domain Name System): DNS is used to resolve domain names to IP addresses.
Assign the reserved IP address 10.10.10.200 to a web server at your company.
DHCP (Dynamic Host Configuration Protocol): DHCP is used to assign IP addresses to devices on a network.
Perform a ping to ensure that a server is responding to network connections.
ICMP (Internet Control Message Protocol): ICMP is used by network devices to send error messages and operational information, and it is the protocol used by the ping command.
DNS (Domain Name System): DNS translates human-friendly domain names like "companypro.net" into IP addresses that computers use to identify each other on the network.
DHCP (Dynamic Host Configuration Protocol): DHCP automatically assigns IP addresses to devices on a network, ensuring that no two devices have the same IP address.
ICMP (Internet Control Message Protocol): ICMP is used for diagnostic or control purposes, and the ping command uses ICMP to test the reachability of a host on an IP network.
Reference: DNS Basics: What is DNS?
DHCP Overview: What is DHCP?
ICMP and Ping: Understanding ICMP
質問 # 61
An engineer configured a new VLAN named VLAN2 for the Data Center team. When the team tries to ping addresses outside VLAN2 from a computer in VLAN2, they are unable to reach them.
What should the engineer configure?
- A. Additional VLAN
- B. Default route
- C. Static route
- D. Default gateway
正解：D
解説：
When devices within a VLAN are unable to reach addresses outside their VLAN, it typically indicates that they do not have a configured path to external networks. The engineer should configure a default gateway for VLAN2. The default gateway is the IP address of the router's interface that is connected to the VLAN, which will route traffic from the VLAN to other networks12.
References :=
*Understanding and Configuring VLAN Routing and Bridging on a Router Using the IRB Feature
*VLAN 2 not able to ping gateway - Cisco Community
*VLANs: Virtual Local Area Networks (VLANs) logically segment network traffic to improve security and performance. Devices within the same VLAN can communicate directly.
*Default Gateway: For devices in VLAN2 to communicate with devices outside their VLAN, they need a default gateway configured. The default gateway is typically a router or Layer 3 switch that routes traffic between different VLANs and subnets.
*Additional VLAN: Not needed in this scenario as the issue is related to routing traffic outside VLAN2, not creating another VLAN.
*Default Route: While a default route on the router may be necessary, the primary issue for devices within VLAN2 is to have a configured default gateway.
*Static Route: This is used on routers to manually specify routes to specific networks but does not address the need for a default gateway on the client devices.
References:
*Cisco VLAN Configuration Guide: Cisco VLAN Configuration
*Understanding and Configuring VLANs: VLANs Guide
質問 # 62
A support technician examines the front panel of a Cisco switch and sees 4 Ethernet cables connected in the first four ports. Ports 1, 2, and 3 have a green LED. Port 4 has a blinking green light.
What is the state of the Port 4?
- A. Link is up with cable malfunctions.
- B. Link is up and there is no activity.
- C. Link is up and not stable.
- D. Link is up and active.
正解：D
解説：
On a Cisco switch, a port with a blinking green LED typically indicates that the port is up (active) and is currently transmitting or receiving data.
This is a normal state indicating active traffic on the port.
* A. Link is up with cable malfunctions: Usually indicated by an amber or blinking amber light.
* B. Link is up and not stable: Not typically indicated by a green blinking light.
* D. Link is up and there is no activity: Would be indicated by a solid green light without blinking.
Thus, the correct answer is C. Link is up and active.
Reference: =
* Cisco Switch LED Indicators
* Cisco Ethernet Switch LED Patterns
質問 # 63
A host is given the IP address 172.16.100.25 and the subnet mask 255.255.252.0.
What is the CIDR notation for this address?
- A. 172.16.100.25 /22
- B. 172.16.100.25 /23
- C. 172.16.100.25 /21
- D. 172.16.100.25 /20
正解：A
解説：
The CIDR (Classless Inter-Domain Routing) notation for the subnet mask 255.255.252.0 is /22. This notation indicates that the first 22 bits of the IP address are used for network identification, and the remaining bits are used for host addresses within the network1.
Reference: =
* Subnet Cheat Sheet - 24 Subnet Mask, 30, 26, 27, 29, and other IP Address CIDR Network Reference
* Subnet Mask to CIDR Notation: The given subnet mask is 255.255.252.0.
To convert this to CIDR notation:
* Convert the subnet mask to binary: 11111111.11111111.11111100.00000000
* Count the number of consecutive 1s in the binary form: There are 22 ones.
* Therefore, the CIDR notation is /22.
Reference: * Understanding Subnetting and CIDR: Cisco CIDR Guide
質問 # 64
Which wireless security option uses a pre-shared key to authenticate clients?
- A. 802.1q
- B. WPA2-Personal
- C. 802.1x
- D. WPA2-Enterprise
正解：B
解説：
WPA2-Personal, also known as WPA2-PSK (Pre-Shared Key), is the wireless security option that uses a pre-shared key to authenticate clients. This method is designed for home and small office networks and doesn't require an authentication server. Instead, every user on the network uses the same key or passphrase to connect1.
Reference: =
* What is a Wi-Fi Protected Access Pre-Shared Key (WPA-PSK)?
* Exploring WPA-PSK and WiFi Security
* WPA2-Personal: This wireless security option uses a pre-shared key (PSK) for authentication. Each client that connects to the network must use this key to gain access. It is designed for home and small office networks where simplicity and ease of use are important.
* WPA2-Enterprise: Unlike WPA2-Personal, WPA2-Enterprise uses 802.1x authentication with an authentication server (such as RADIUS) and does not rely on a pre-shared key.
* 802.1x: This is a network access control protocol for LANs, particularly wireless LANs. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN.
* 802.1q: This is a networking standard that supports VLAN tagging on Ethernet networks and is not related to wireless security.
Reference:
* Cisco Documentation on WPA2 Security: Cisco WPA2
* Understanding Wireless Security: Wireless Security Guide
質問 # 65
Move the MFA factors from the list on the left to their correct examples on the right. You may use each factor once, more than once, or not at all.
Note: You will receive partial credit for each correct selection.
正解：
解説：
Explanation:
The correct matching of the MFA factors to their examples is as follows:
* Entering a one-time security code sent to your device after logging in: Possession
* Holding your phone to your face to be recognized: Inherence
* Specifying your user name and password to log on to a service: Knowledge Here's why each factor matches the example:
* Possession: This factor is something the user has, like a mobile device. A one-time security code sent to this device falls under this category.
* Inherence: This factor is something the user is, such as a biometric characteristic. Facial recognition using a phone is an example of this factor.
* Knowledge: This factor is something the user knows, like a password or PIN.
Multi-Factor Authentication (MFA) enhances security by requiring two or more of these factors to verify a user's identity before granting access.
* Entering a one-time security code sent to your device after logging in.
* Factor: Possession
* Explanation: This factor relates to something you have, such as a device that receives a security code.
* Holding your phone to your face to be recognized.
* Factor: Inference (typically referred to as Inherence or Biometric)
* Explanation: This factor relates to something you are, such as biometric authentication like facial recognition.
* Specifying your username and password to log on to a service.
* Factor: Knowledge
* Explanation: This factor relates to something you know, such as a username and password.
* Possession Factor: This involves something the user has in their possession. Receiving a one-time security code on a device (e.g., phone) is an example of this.
* Inference Factor (Inherence/Biometric): This involves something inherent to the user, such as biometric verification (e.g., facial recognition or fingerprint scanning).
* Knowledge Factor: This involves something the user knows, such as login credentials (username and password).
References:
* Multi-Factor Authentication (MFA) Explained: MFA Guide
* Understanding Authentication Factors: Authentication Factors
質問 # 66
Hotspot Question
For each statement about bandwidth and throughput, select True or False.
Note: You will receive partial credit for each correct selection.
正解：
解説：
Explanation:
Bandwidth is the network's capacity, while latency is the delay in transmission, so low bandwidth does not by itself increase latency. High latency does not change the actual bandwidth of a link, but it can reduce how efficiently data is delivered. Reducing latency can improve the rate of successful data delivery, which increases throughput.
質問 # 67
How is the following IP address written when using CIDR notation?
Address: 192.168.0.16
Subnet Mask: 255.255.255.240
- A. 192.168.0.16 /15
- B. 192.168.0.16 /30
- C. 192.168.0.16 /28
- D. 192.168.0.16 /24
正解：C
解説：
The subnet mask 255.255.255.240 contains 28 network bits, so the address is written in CIDR notation as 192.168.0.16/28.
質問 # 68
HOTSPOT
You want to list the IPv4 addresses associated with the host name www.companypro.net.
Complete the command by selecting the correct option from each drop-down list.
正解：
解説：
Explanation:
To list the IPv4 addresses associated with the host name www.companypro.net, you should use the following command:
nslookup www.companypro.net
This command will query the DNS servers to find the IP address associated with the hostname provided. If you want to ensure that it returns the IPv4 address, you can specify the -type=A option, which stands for Address records that hold IPv4 addresses1. However, the nslookup command by default should return the IPv4 address if available.
To list the IPv4 addresses associated with the host name www.companypro.net, you should use the nslookup command.
Command: nslookup
Target: www.companypro.net
So, the completed command is:
nslookup www.companypro.net
nslookup: This command is used to query the Domain Name System (DNS) to obtain domain name or IP address mapping or for any other specific DNS record.
www.companypro.net: This is the domain name you want to query to obtain its associated IP addresses.
Reference: Using nslookup: nslookup Command Guide
質問 # 69
For each statement about bandwidth and throughput, select True or False.
Note: You will receive partial credit for each correct selection.
正解：
解説：
Explanation:
* Statement 1: Low bandwidth can increase network latency.
* True: Low bandwidth can result in increased network latency because the network may become congested, leading to delays in data transmission.
* Statement 2: High levels of network latency decrease network bandwidth.
* False: High levels of network latency do not decrease the available network bandwidth, but they do affect the perceived performance and throughput of the network.
* Statement 3: You can increase throughput by decreasing network latency.
* True: Decreasing network latency can increase throughput because data can be transmitted more quickly and efficiently without delays.
* Bandwidth vs. Latency: Bandwidth refers to the maximum rate at which data can be transferred over a network path. Latency is the time it takes for a data packet to travel from the source to the destination.
* Low bandwidth can cause network congestion, which can increase latency as packets wait to be transmitted.
* High latency does not reduce the actual bandwidth but can affect the overall performance and efficiency of data transmission.
* Reducing latency can lead to higher throughput because the network can handle more data in a given period without delays.
References:
* Network Performance Metrics: Cisco Network Performance
* Understanding Bandwidth and Latency: Bandwidth vs. Latency
質問 # 70
Move each protocol from the list on the left to its correct example on the right.
正解：
解説：
Explanation:
The correct matching of the protocols to their examples is as follows:
* DHCP: Assign the reserved IP address 10.10.10.200 to a web server at your company.
* DNS: Perform a query to translate companypro.net to an IP address.
* ICMP: Perform a ping to ensure that a server is responding to network connections.
Here's how each protocol corresponds to its example:
* DHCP (Dynamic Host Configuration Protocol) is used to assign IP addresses to devices on a network. In this case, DHCP would be used to assign the reserved IP address 10.10.10.200 to a web server.
* DNS (Domain Name System) is used to translate domain names into IP addresses. Therefore, to translate companypro.net to an IP address, DNS would be utilized.
* ICMP (Internet Control Message Protocol) is used for sending error messages and operational information indicating success or failure when communicating with another IP address. An example of this is using the ping command to check if a server is responding to network connections.
These protocols are essential for the smooth operation of networks and the internet.
* Perform a query to translate companypro.net to an IP address.
* DNS (Domain Name System): DNS is used to resolve domain names to IP addresses.
* Assign the reserved IP address 10.10.10.200 to a web server at your company.
* DHCP (Dynamic Host Configuration Protocol): DHCP is used to assign IP addresses to devices on a network.
* Perform a ping to ensure that a server is responding to network connections.
* ICMP (Internet Control Message Protocol): ICMP is used by network devices to send error messages and operational information, and it is the protocol used by the ping command.
* DNS (Domain Name System): DNS translates human-friendly domain names like "companypro.net" into IP addresses that computers use to identify each other on the network.
* DHCP (Dynamic Host Configuration Protocol): DHCP automatically assigns IP addresses to devices on a network, ensuring that no two devices have the same IP address.
* ICMP (Internet Control Message Protocol): ICMP is used for diagnostic or control purposes, and the ping command uses ICMP to test the reachability of a host on an IP network.
References:
* DNS Basics: What is DNS?
* DHCP Overview: What is DHCP?
* ICMP and Ping: Understanding ICMP
質問 # 71
......
Cisco 100-150 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
合格を確定するガイドで100-150試験準備しよう：https://www.jpntest.com/shiken/100-150-mondaishu
CCST 100-150無料最新のリアル試験問題と回答：https://drive.google.com/open?id=1nVhDAWGy2Xi8QhZfSTA3ZhLCs8fI53Wj