Correct Answer:

Make a CAT 5e connection between offices via the patch panel - A typical CompTIA-type question (i.e. not very clear). Given the choices, we presume that all the offices terminate at the MDF. With that said, a simple trunk port between the new and old office is more secure since it is inside the MDF.

Incorrect Answers: 

Running the cable through the public area doesn't sound too secure to me.  

The VPN between routers sounds too complex, and WEP is just pointless.

Correct Answer:

Access control lists and Firewalls - Both of these can be configured to allow/restrict specific ports or IP addresses from accessing the network.

Incorrect Answers:

MAC filtering and switches are at layer 2.

IIS is for hosting Web pages, and a port scanner is for detecting open ports for security purposes.

Correct Answer:

Data Link - Layer 2 is where the MAC addresses are, and the bridge looks at the frames' MAC addresses to decide whether to let traffic through or not.

Incorrect Answers:

The Network layer is for IP addresses, and the Session and Transport layers are too high in the OSI model for bridges.

Correct Answer:

Honeynet - A Honeynet draws in attackers so their methods and location can be determined and subsequently protected against without jeopardizing vital information.

Incorrect Answers: A honeypot is a single machine.  

Vulnerability scanners and IDS are very helpful, but you don't want them to "receive security attacks."

Correct Answer:

100BaseFX - Remember, the "F" stands for fiber, and in this case, 100Base FX is capable of reaching the 250 meter requirement.

Incorrect Answers:

10GBaseT is twisted pair, coaxial is even shorter than UTP, and MPLS is not a type of LAN technology.

Correct Answer:

This is a private address which cannot be seen by external users. (This is the best answer to deal with a bad CompTIA question. In reality, we can use DNS to map internal/private FQDNs to IP addresses with an internal DNS server.)

Incorrect Answers:

The subnet is irrelevant in this case, 10.0.0.15 is not a public address, and it cannot be seen by external users.

Correct Answer:

Carrier sense, also known as carrier detect, is the test that a NIC performs prior to transmitting on a network medium.

Incorrect Answers:

Multiple access means that when the station transmits, all stations on the segment will hear the transmission.

Collision detection means that a station sending data can tell when another station transmits at the same time.

Collision avoidance is the technique used by a network interface to recover from or prevent a collision.

Correct Answer:

A fusion splicer is used to combine two fiber cables without losing quality.

Incorrect Answers:

All of the other options do not exist.

Correct Answer:

Enable an SNMP agent - The SNMP agent (or device) will monitor traffic and report findings back.  

Incorrect Answers:

Network mapping and SSID monitoring will not allow you to remotely monitor traffic.

WPA2 is used for Wi-Fi encryption.

Correct Answer:

Wireless client isolation is also called guest network isolation. It allows users the benefit of the Internet without intruding on your network.

Incorrect Answers:

Wireless client separation is not a term.

MAC Address filtering is blocking hosts from the wireless network based on MAC Address.

Disabling SSID broadcast will not let anyone see the wireless network unless they know the SSID name.