Correct Answer:

Network sniffer

- A sniffer shows and captures real-time traffic, including the MAC address of devices that are sending frames.

Incorrect Answers:

History logs and network maps show installation diagrams and things that have happened to the network in the past.  

Traffic shaping allots different types of traffic to defined maximum bandwidth.

Correct Answer:

Working at the Data Link Layer (Layer 2), a switch works as a hub that can filter and forward frames using the MAC address of the intended recipient of the frame. This device is used in 10xBaseT networks. In a 10Base5 or 10Base2 network, a Bridge would supply this function.

Incorrect Answers:

Servers are systems, not devices, Hubs and Repeaters work at Layer 1 (Physical Layer), and Routers work at Layer 3 (Network Layer).

Correct Answer:

Proxy Server - Takes HTTP (and other) requests and goes to the appropriate site, thus protecting your system from exposure.

Incorrect Answers:

DNS is about name-to-IP translation, and the other options are about network traffic management.

Correct Answer:

NEXT - With near end cross talk, signal from wire(s) at the near end of the cable are being induced onto other wire(s).

Incorrect Answers:

TX/RX reversals, split cables, and DB loss would all be reported in plain text.

Correct Answer:

Establish a theory of probable cause - Just because there are no changes to the workstation or switch port doesn't mean something else hasn't changed. The technician must use knowledge and intuition to think of things that might cause the problem. That's a theory!

Incorrect Answers:

Establishing a plan comes after the theory has been tested and the problem has been identified.  

Implementing the solution happens after a plan has been established.  

Implementing preventative measures is done when the problem is fixed and we take steps to avoid it in the future.

Correct Answer:

Of the choices, the network-based firewall will provide the MOST amount of protection. It is a filtering system that can work at many layers of the OSI model.

Incorrect Answers:

A host-based IDS is great for an individual system. Even still, it is only a detection system.  

An online vulnerability scanner would be useful for checking for holes your network, but it probably won't do much protecting.

A network-based IPS will either be signature-based or behavior-based. Either way, both of those methods won't be as good as an actual firewall on your network. Having said that, please, by all means, use both a firewall and an IPS!

Correct Answers:

Divide-and-conquer is a troubleshooting approach.

Top-to-bottom and Bottom-to-top of the OSI model are valid approaches to troubleshooting.

Incorrect Answers:

Power supply, video, memory, storage, CPU, peripherals is a possible approach, but it misses many elements and is not a recommended approach.

Gather information, reproduce symptoms, establish and test theory, implement solution, and document results are steps in the troubleshooting process but are not an approach methodology to troubleshooting.

Correct Answer:

Layer 3 - The Network layer deals with IP addresses.

Incorrect Answers:

Layer 2 (Data Link), Layer 4 (Transport), and Layer 5 (Session) do not deal with IP.

Correct Answers:

Crimper and cable certifier - A crimper can cut the cable and attach a connector to the end, while a cable certifier can confirm that the cable is in spec.

Incorrect Answers:

A multimeter can't confirm that the cable lengths are within spec.  

A punch-down tool is for wiring a 66 or 110 block.  

Loopback plugs check NIC function. While they may be used to check cable function, they can't confirm that the cable is in spec.

Correct Answer:

10BaseT is limited to 10 Mbps, has a maximum segment distance of 100 meters, and uses UTP cable.

Incorrect Answers:

10Base2 is 10 Mbps, 185 meter maximum segment length, and uses RG-58 coax cable.

10BaseFL is 10 Mbps, 2000 meter maximum segment length, and uses fiber cable.

100BaseFX is 100 Mbps, 400 meter maximum segment length, and uses fiber cable.

1000BaseCX is 1000 Mbps, 25 meter maximum segment length, and uses 150-ohm twin axial cable.