CompTIA Network+ Practice Test for Subdomain 3.2 #01

Question 1

A NOC technician at a telecommunications provider is auditing SNMP configurations across all managed devices. The security team has flagged every device still running SNMPv2c for immediate remediation, citing the protocol's lack of encryption and its reliance on cleartext community strings for authentication. Which SNMPv3 security configuration directly addresses both weaknesses identified by the security team?

A. NoAuthNoPriv mode with a read-only community string B. AuthPriv mode using SHA authentication and AES encryption C. SNMPv3 with UDP port 161 restricted to the management VLAN only D. AuthNoPriv mode using MD5 authentication without encryption

Question 2

A network engineer at a hospital is configuring a network management system (NMS) to monitor CPU utilization and interface error counters on newly deployed switches from a third-party vendor. The NMS needs to query specific metrics by their unique object identifiers (OIDs). The vendor has provided a file that defines the hierarchical structure mapping each OID to its corresponding device metric. What is this file called?

A. A syslog configuration file B. A NetFlow template C. A management information base (MIB) D. An SNMP community string definition

Question 3

A junior engineer at a financial services firm is reviewing SNMP configurations on the network. The operations manager wants the network management system to receive immediate notification the moment a WAN interface goes down, rather than discovering the failure during the next scheduled polling cycle. Which SNMP mechanism is specifically designed to provide this real-time event notification from a managed device to the NMS?

A. SNMP GET request B. SNMP trap C. MIB walk D. SNMPv2c community string query

Question 4

A security analyst at a retail company needs to capture all traffic passing through a core distribution switch in order to feed it into a network intrusion detection system (IDS). The analyst requires a method that copies traffic from production ports to a dedicated monitoring port without disrupting existing network operations or inserting inline hardware. Which switch feature enables this traffic duplication capability?

A. 802.1Q VLAN trunking B. Link aggregation (LACP) C. Port mirroring (SPAN) D. Jumbo frame configuration

Question 5

The network team at a shipping company is investigating unexplained saturation on their primary WAN link. Rather than capturing and storing full packet payloads, the team wants a lightweight method that reveals traffic metadata -- including source and destination IP addresses, ports, protocols, and byte counts -- to identify top talkers and application usage patterns. Which monitoring method provides this type of summarized traffic metadata?

A. Full packet capture using a protocol analyzer B. Syslog event collection C. Flow data analysis using NetFlow or IPFIX D. SNMP polling of interface counters

Question 6

A network administrator at a manufacturing plant is centralizing event logging from all routers, switches, and firewalls. Each device is configured to forward timestamped event messages to a single server using UDP port 514. The server aggregates and stores these messages for security review and troubleshooting. Which protocol and corresponding server role are being used in this deployment?

A. SNMP with a management information base (MIB) collector B. NetFlow with a flow collector C. Syslog with a log aggregator D. NTP with a time synchronization server

Question 7

A SOC team at an insurance company receives log data from firewalls, endpoint agents, VPN concentrators, and authentication systems. The team needs a centralized platform that can ingest all of these data sources, correlate events across them using detection rules, generate automated alerts for suspicious activity patterns, and support forensic investigations. Which solution is specifically designed to fulfill all of these functions?

A. A syslog collector B. A security information and event management (SIEM) system C. A network performance monitor (NPM) D. An SNMP management station

Question 8

A network engineer at a university has configured the NMS to alert the team when CPU utilization on the core router exceeds 80% for more than three consecutive minutes. During normal operations over the past 90 days, CPU utilization on that device has averaged 35%. The thresholds were derived from historical data collected during normal operations. Which network monitoring concept is being applied when historical performance data is used to define the threshold for triggering alerts?

A. Availability monitoring B. Ad hoc network discovery C. Configuration monitoring D. Baseline metrics and anomaly alerting

Question 9

A network technician at a growing startup has been asked to immediately inventory all devices currently active on the network following a suspected security incident. The standard automated scan is scheduled to run at midnight, but the security team cannot wait. The technician manually initiates a network scan on demand to generate a current device list. Which type of network discovery method is the technician using?

A. Scheduled discovery B. Passive network tap discovery C. Flow-based discovery D. Ad hoc discovery

Question 10

A network operations team at a media streaming company uses two separate monitoring dashboards. The first dashboard uses ping tests and service checks to alert the team whenever DNS, DHCP, or critical application servers become unreachable. The second dashboard graphs interface utilization, CPU load, memory usage, and packet error rates over time to help the team identify degradation trends before they become outages. Which monitoring categories do these two dashboards represent, respectively?

A. Configuration monitoring and traffic analysis B. Availability monitoring and performance monitoring C. Flow data analysis and log aggregation D. SNMP trapping and syslog collection

CompTIA Network+ Practice Test for Subdomain 3.2 #01

ByThe Test Master

Related Post

CompTIA Network+ Practice Test for Subdomain 1.1 #02

CompTIA Network+ Practice Test for Subdomain 5.5 #01

CompTIA Network+ Practice Test for Subdomain 5.4 #01

Leave a Reply Cancel reply

You missed

CEH v13 Domain 2.2 Practice Test 002

CEH v13 Domain 2.1 Practice Test 002

CEH v13 Domain 1.1 Practice Test 002

CEH v13 Domain 9.1 Practice Test 001