Q1. Which OSI layer is responsible for logical addressing and determining the best path for packets between networks?

Q2. An organization publishes several internal web applications to the internet through a single device that terminates TLS, hides the real server addresses, and forwards requests to the correct backend server. Which of the following BEST describes this device?

Q3. A startup needs encrypted connectivity from its office to its cloud VPC by the end of the week with minimal cost, and moderate internet-dependent performance is acceptable. Which cloud connectivity option should it choose?

Q4. Users in a branch office cannot map drives to Windows file shares at headquarters after a firewall change. Which port MOST likely needs to be re-opened?

Q5. New cabling will be routed through the air-handling space above a suspended ceiling. Which cable requirement does the fire code impose?

Q6. A packet capture shows OSPF hello messages sent to 224.0.0.5, delivered only to routers that joined that group. Which address class and traffic type are being used?

Q7. A network administrator wants full control over the exact path traffic takes to a remote subnet and manually enters the route on the router. Which routing method is being used?

Q8. Which of the following BEST describes the primary purpose of NAT on an Internet edge router?

Q9. How do switches running STP elect the root bridge?

Q10. A technician replaces a user's patch cable, but the connection remains slow and the switch logs show late collisions incrementing on that port. Which of the following should the technician check NEXT?

Q11. Two laptops in a conference room with no access point available need to exchange files directly over Wi-Fi. Which wireless network type does this describe?

Q12. A network administrator is documenting a data center. One document must show the actual cable runs, patch panels, and physical port connections between devices, while a second document must show subnets, VLANs, and traffic flow. Which of the following BEST describes these two documents?

Q13. A network team maintains an approved, known-good configuration for each switch model. Every deployed switch is compared against this reference to detect unauthorized changes. Which of the following BEST describes this reference configuration?

Q14. A NOC uses one tool that pings and probes services to confirm systems are reachable, and another that graphs latency, utilization, and error rates over time. Which of the following pairs of monitoring solutions do these describe, in order?

Q15. An administrator configures a DHCP server to hand out addresses from 10.1.50.10 through 10.1.50.250 on the sales subnet, along with a subnet mask and lease settings. Which of the following BEST describes this configured range?

Q16. A privacy-focused organization wants client DNS queries encrypted. One proposed method sends DNS inside HTTPS on TCP 443, blending with web traffic; the other uses a dedicated TLS session on TCP 853, which is easier to identify and filter. Which of the following pairs is being compared, in order?

Q17. A company encrypts all customer records stored on its file servers so that a stolen drive cannot be read. Which element of the CIA triad does this control primarily protect?

Q18. After several unauthorized entries into a wiring closet, a facilities team wants a physical control that both deters intruders and provides recorded evidence for investigations. Which control BEST meets this need?

Q19. An attacker secretly positions themselves between a user and a web server, relaying the conversation in both directions while reading and selectively altering its contents. Neither endpoint notices. What is this attack called?

Q20. A user reports that they cannot reach any network resources. According to the CompTIA troubleshooting methodology, which of the following should the technician do FIRST?

Q21. A technician troubleshooting a slow web application starts by checking the application's configuration and DNS records, then plans to work down toward the physical layer if needed. Which approach is the technician using?

Q22. A technician checks a switch port and sees the status 'administratively down.' Which of the following actions will bring the port up?

Q23. In a converged STP topology, which port role does each non-root switch use to reach the root bridge?

Q24. Users of an interactive terminal application hosted overseas complain that every keystroke takes noticeably long to echo, although downloads run at full speed. Which network characteristic is MOST likely responsible?

Q25. An application team reports slow transactions, and the network team wants to inspect the actual conversation — TCP handshakes, retransmissions, and response times — between a client and server. Which tool BEST provides this visibility?