CompTIA Network+ Practice Test for Subdomain 1.8 #01

Question 1

A network architect at a large financial institution is evaluating a networking solution that would allow the organization to centrally manage traffic policies, dynamically adjust routing, and programmatically deploy configuration changes across all branch offices without manually configuring each device. Which of the following technologies best meets these requirements?

A. Software-defined wide area network (SD-WAN) B. Virtual Extensible Local Area Network (VXLAN) C. Network address translation (NAT) D. Spanning Tree Protocol (STP)

Question 2

A technician at a retail chain is deploying new switches to 15 remote store locations. Management wants the switches to automatically download their configurations and firmware from a central controller as soon as they are powered on and connected to the network, without requiring an on-site engineer. Which SD-WAN feature enables this capability?

A. Transport agnostic connectivity B. Central policy management C. Zero-touch provisioning D. Application-aware routing

Question 3

A cloud engineer is designing a multi-tenant data center network where hundreds of customers must be logically isolated from one another. The engineer determines that traditional VLAN IDs are insufficient because the 4,094 VLAN limit will be exceeded. Which overlay technology should the engineer implement to provide scalable Layer 2 segmentation across the data center fabric?

A. Generic Routing Encapsulation (GRE) B. Virtual Extensible Local Area Network (VXLAN) C. Internet Protocol Security (IPSec) D. Classless Inter-domain Routing (CIDR)

Question 4

A security consultant is advising a government agency on migrating from a traditional perimeter-based security model. The consultant recommends an architecture where every user, device, and application must be continuously verified before being granted access, regardless of whether they are inside or outside the corporate network. Which security framework aligns with this approach?

A. Demilitarized zone (DMZ) B. Zero trust architecture (ZTA) C. Network address translation (NAT) D. Virtual private network (VPN)

Question 5

The IT director at a healthcare organization wants to consolidate network security and WAN optimization into a single cloud-delivered service. The solution must provide secure web gateway, cloud access security broker, and zero trust network access capabilities without requiring on-premises hardware appliances at each clinic location. Which of the following solutions best fits this requirement?

A. Infrastructure as code (IaC) B. Software-defined networking (SDN) C. Secure Access Service Edge (SASE) D. Virtual Extensible Local Area Network (VXLAN)

Question 6

A DevOps engineer at an e-commerce company manages network configurations for 200 switches using version-controlled definition files stored in a central repository. When a configuration change is needed, the engineer modifies the definition file and applies it programmatically, ensuring that every switch reaches the exact desired state. Which modern networking concept does this process describe?

A. Zero trust architecture (ZTA) B. Infrastructure as code (IaC) C. Data center interconnect (DCI) D. Secure Access Service Edge (SASE)

Question 7

A junior network engineer discovers that several switches in the organization have drifted from the approved baseline configuration after various administrators made ad hoc changes over several months. The team wants to implement an automation solution that regularly compares the running configurations against the approved standard and flags any deviations. Which automation use case does this scenario represent?

A. Dynamic inventories B. Configuration drift and compliance C. Zero-touch provisioning D. Playbooks and reusable tasks

Question 8

A help desk analyst at a university is assisting a professor who wants to understand why the campus network assigns both an IPv4 and an IPv6 address to every device. The network team configured this approach to allow gradual adoption of IPv6 while maintaining full compatibility with legacy systems that only support IPv4. Which IPv6 transition strategy is the university using?

A. NAT64 B. Tunneling C. Dual stack D. Network address translation (NAT)

Question 9

The network team at a logistics company uses a central repository to store all network automation scripts and device configuration templates. Before merging any changes into the main branch, engineers must submit their modifications for peer review to prevent conflicting edits from being applied to production devices. Which source control practice does this workflow primarily demonstrate?

A. Dynamic inventories B. Branching and conflict identification C. Zero-touch provisioning D. Configuration drift and compliance

Question 10

An enterprise is operating an IPv6-only internal network but needs its users to access several critical external services that are only available over IPv4. The network team deploys a gateway device that translates IPv6 requests from internal hosts into IPv4 packets destined for those external servers and converts the IPv4 responses back to IPv6. Which IPv6 compatibility mechanism is the network team using?

A. Dual stack B. Tunneling C. NAT64 D. Generic Routing Encapsulation (GRE)

CompTIA Network+ Practice Test for Subdomain 1.8 #01

ByThe Test Master

Related Post

CompTIA Network+ Practice Test for Subdomain 1.1 #02

CompTIA Network+ Practice Test for Subdomain 5.5 #01

CompTIA Network+ Practice Test for Subdomain 5.4 #01

Leave a Reply Cancel reply

You missed

CEH v13 Domain 2.2 Practice Test 002

CEH v13 Domain 2.1 Practice Test 002

CEH v13 Domain 1.1 Practice Test 002

CEH v13 Domain 9.1 Practice Test 001