Cisco Certified Support Technician (CCST) Networking 100-150 Practice Test 18
Question 170
Before changing settings, consider this issue: At the fictional Silverleaf Clinic while assessing a controlled network fault, the team observes: A team wants protected web traffic but configures a browser to send login data over unencrypted HTTP port 80. What is the MOST specific underlying cause?
- HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport.
- A local switched site is a LAN rather than a WAN spanning distant geographic locations.
- Megabytes per second and megabits per second use different units, with eight bits per byte.
- Forwarding at Ethernet and IP layers generally uses link and network metadata rather than the HTTP application URL.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Silverleaf Clinic: HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport. The corresponding remedy is “Use an HTTPS URL and verify a valid server certificate for the requested site.”. Confirmation: The browser negotiates TLS and reports a certificate matching the intended hostname.
Incorrect Answers
B:That cause belongs to a different case: A small office connects printers and PCs through one local switch but the diagram labels the network a transcontinental WAN. The observed fictional Silverleaf Clinic condition is specifically explained by “HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport.”.
C:That cause belongs to a different case: A support engineer compares 12 MB/s file-transfer throughput directly with 100 Mb/s link speed and says 12 is much less than 100. The observed fictional Silverleaf Clinic condition is specifically explained by “HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport.”.
D:That cause belongs to a different case: A home router sends a packet to a remote web server but the team claims every intermediate switch must read the HTTP URL to forward it. The observed fictional Silverleaf Clinic condition is specifically explained by “HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport.”.
Question 171
A reviewer evaluates a proposed repair for: At the fictional Silverleaf Clinic while assessing a controlled network fault, the team observes: A team wants protected web traffic but configures a browser to send login data over unencrypted HTTP port 80. The approved corrective action is: “Use an HTTPS URL and verify a valid server certificate for the requested site.” Which result BEST demonstrates success?
- Client association and SSID map to the WLAN while the modem's carrier link maps to cellular service.
- A sample file can be restored to the agreed recovery point and its owner is documented.
- The annotation identifies the nested TCP, IP and Ethernet headers around the application payload.
- The browser negotiates TLS and reports a certificate matching the intended hostname.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Use an HTTPS URL and verify a valid server certificate for the requested site.” at the fictional Silverleaf Clinic. It demonstrates correction of the original cause: HTTP does not itself provide TLS protection whereas HTTPS uses TLS for secure web transport.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Identify the Wi-Fi WLAN and its wired LAN uplink separately from cellular WAN connectivity.”. It does not establish the intended outcome “The browser negotiates TLS and reports a certificate matching the intended hostname.” for the fictional Silverleaf Clinic case.
B:That result is evidence for a separate corrective action, “Design and test the appropriate backup and recovery controls for the hosted file server.”. It does not establish the intended outcome “The browser negotiates TLS and reports a certificate matching the intended hostname.” for the fictional Silverleaf Clinic case.
C:That result is evidence for a separate corrective action, “Draw the encapsulation stack for an HTTPS request from application data to transmitted Ethernet bits.”. It does not establish the intended outcome “The browser negotiates TLS and reports a certificate matching the intended hostname.” for the fictional Silverleaf Clinic case.
Question 172
The technician plans a correction for: At the fictional Silverleaf Clinic while assessing a controlled network fault, the team observes: A team wants protected web traffic but configures a browser to send login data over unencrypted HTTP port 80. During “Use an HTTPS URL and verify a valid server certificate for the requested site.”, which precaution MOST specifically prevents a related risk?
- Do not inflate application goodput by counting retransmitted frames twice.
- Do not plan WAN routing equipment for a personal Bluetooth link.
- Do not send credentials over plain HTTP when secure HTTPS is required.
- Do not conflate application payload size with total on-wire frame size including headers.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Use an HTTPS URL and verify a valid server certificate for the requested site.” at the fictional Silverleaf Clinic. The required protection is “Do not send credentials over plain HTTP when secure HTTPS is required.”; success still requires “The browser negotiates TLS and reports a certificate matching the intended hostname.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: A technician measures a file copy with frequent packet retransmissions and labels the retransmitted bytes useful application throughput. The principal adjacent risk here is controlled by “Do not send credentials over plain HTTP when secure HTTPS is required.”.
B:This caution is appropriate for a separate failure pattern: An inventory lists a phone and nearby wireless earbuds and classifies their Bluetooth pairing as a WAN between cities. The principal adjacent risk here is controlled by “Do not send credentials over plain HTTP when secure HTTPS is required.”.
D:This caution is appropriate for a separate failure pattern: A capture analyst describes a complete HTTP request as a raw electrical bitstream without any transport, IP or Ethernet encapsulation. The principal adjacent risk here is controlled by “Do not send credentials over plain HTTP when secure HTTPS is required.”.
Question 173
A service desk receives this network finding: At the fictional Rivergate Branch after a site connectivity report, the team observes: A technician uses ordinary FTP to transfer sensitive credentials and assumes its login is encrypted because it uses TCP. Which action MOST directly resolves the reported issue?
- Classify the switch links as a ring while separately naming the office as a LAN.
- Select SFTP for the sensitive file transfer and validate the SSH server host identity.
- Map the on-premises database and hosted analytics as distinct components of a hybrid design.
- Distinguish the campus inter-building network from the individual Bluetooth headset's PAN.
Explanation
Correct Answer
B:Correct. In the fictional Rivergate Branch case, Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH. The specified corrective action, “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”, directly targets that condition. Evidence of resolution: A test SFTP session transfers the file over the authenticated encrypted channel.
Incorrect Answers
A:That action addresses a different network issue: A help desk sees switches arranged in a ring on a diagram and assumes the topology is a star because all switches are in one office. The present fictional Rivergate Branch finding instead needs “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”, verified by “A test SFTP session transfers the file over the authenticated encrypted channel.”.
C:That action addresses a different network issue: A hospital retains sensitive databases on-site while using hosted analytics and labels the design exclusively public cloud with no private component. The present fictional Rivergate Branch finding instead needs “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”, verified by “A test SFTP session transfers the file over the authenticated encrypted channel.”.
D:That action addresses a different network issue: An engineer calls a university's connected building networks a personal area network used by one headset. The present fictional Rivergate Branch finding instead needs “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”, verified by “A test SFTP session transfers the file over the authenticated encrypted channel.”.
Question 174
Before changing settings, consider this issue: At the fictional Rivergate Branch after a site connectivity report, the team observes: A technician uses ordinary FTP to transfer sensitive credentials and assumes its login is encrypted because it uses TCP. What is the MOST specific underlying cause?
- Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH.
- Local IPv4 delivery still requires resolution of the neighbor's IP address to a local Ethernet MAC address.
- A metropolitan area network can interconnect sites across a city beyond a single-site LAN.
- PaaS supplies a managed application runtime whereas IaaS exposes infrastructure such as virtual machines.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Rivergate Branch: Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH. The corresponding remedy is “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”. Confirmation: A test SFTP session transfers the file over the authenticated encrypted channel.
Incorrect Answers
B:That cause belongs to a different case: A PC can learn another host's IP address but cannot deliver an Ethernet unicast on the same IPv4 subnet because it has no destination MAC. The observed fictional Rivergate Branch condition is specifically explained by “Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH.”.
C:That cause belongs to a different case: A municipal network interconnects public sites across one city but is labeled a LAN confined to one wiring closet. The observed fictional Rivergate Branch condition is specifically explained by “Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH.”.
D:That cause belongs to a different case: A developer uses a managed application runtime to deploy code without administering servers but classifies it as raw IaaS virtual-machine rental. The observed fictional Rivergate Branch condition is specifically explained by “Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH.”.
Question 175
A reviewer evaluates a proposed repair for: At the fictional Rivergate Branch after a site connectivity report, the team observes: A technician uses ordinary FTP to transfer sensitive credentials and assumes its login is encrypted because it uses TCP. The approved corrective action is: “Select SFTP for the sensitive file transfer and validate the SSH server host identity.” Which result BEST demonstrates success?
- The report distinguishes useful delivered bytes from extra retransmission traffic.
- A single host is shown performing multiple OSI-layer functions without a dedicated appliance for each function.
- Packet captures show the end-to-end target IP and the changing link-layer destinations at successive hops.
- A test SFTP session transfers the file over the authenticated encrypted channel.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Select SFTP for the sensitive file transfer and validate the SSH server host identity.” at the fictional Rivergate Branch. It demonstrates correction of the original cause: Traditional FTP transmits credentials without the confidentiality provided by SFTP over SSH.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Compare transferred application payload to interface traffic including retransmissions during the test.”. It does not establish the intended outcome “A test SFTP session transfers the file over the authenticated encrypted channel.” for the fictional Rivergate Branch case.
B:That result is evidence for a separate corrective action, “Map application, transport, network, data-link and physical functions to the protocols involved in one workstation request.”. It does not establish the intended outcome “A test SFTP session transfers the file over the authenticated encrypted channel.” for the fictional Rivergate Branch case.
C:That result is evidence for a separate corrective action, “Distinguish the IP destination used by routers from the per-hop Ethernet destination in a two-router path.”. It does not establish the intended outcome “A test SFTP session transfers the file over the authenticated encrypted channel.” for the fictional Rivergate Branch case.
Question 176
The technician plans a correction for: At the fictional Rivergate Branch after a site connectivity report, the team observes: A technician uses ordinary FTP to transfer sensitive credentials and assumes its login is encrypted because it uses TCP. During “Select SFTP for the sensitive file transfer and validate the SSH server host identity.”, which precaution MOST specifically prevents a related risk?
- Do not assume managed database service grants secure application-level permissions automatically.
- Do not write an IPv4 dotted-decimal value into a MAC-address configuration field.
- Do not equate TCP connection reliability with encryption of FTP credentials.
- Do not confuse provider-operated PaaS runtimes with self-managed IaaS virtual machines.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Select SFTP for the sensitive file transfer and validate the SSH server host identity.” at the fictional Rivergate Branch. The required protection is “Do not equate TCP connection reliability with encryption of FTP credentials.”; success still requires “A test SFTP session transfers the file over the authenticated encrypted channel.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: A firm replaces an on-premises database with a managed cloud database but has no inventory of which party maintains schema versus engine patches. The principal adjacent risk here is controlled by “Do not equate TCP connection reliability with encryption of FTP credentials.”.
B:This caution is appropriate for a separate failure pattern: A network diagram puts a destination IP address inside an Ethernet frame's source-MAC field because both are called addresses. The principal adjacent risk here is controlled by “Do not equate TCP connection reliability with encryption of FTP credentials.”.
D:This caution is appropriate for a separate failure pattern: A developer uses a managed application runtime to deploy code without administering servers but classifies it as raw IaaS virtual-machine rental. The principal adjacent risk here is controlled by “Do not equate TCP connection reliability with encryption of FTP credentials.”.
Question 177
A service desk receives this network finding: At the fictional Lakebridge Travel Office during its network support shift, the team observes: A network installer uses TFTP to transfer a harmless device image on a protected maintenance VLAN but claims TFTP authenticates users like SSH. Which action MOST directly resolves the reported issue?
- Describe the star-shaped access wiring and meshed distribution uplinks as a hybrid topology.
- Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.
- Check ARP resolution for the peer and verify that the correct MAC mapping is learned on the local link.
- Reclassify the short-range phone-to-earbuds link as PAN and explain its limited scope.
Explanation
Correct Answer
B:Correct. In the fictional Lakebridge Travel Office case, TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption. The specified corrective action, “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”, directly targets that condition. Evidence of resolution: The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.
Incorrect Answers
A:That action addresses a different network issue: A multi-building installation combines a star of access switches with redundant mesh uplinks but is described as one pure star without redundancies. The present fictional Lakebridge Travel Office finding instead needs “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”, verified by “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.”.
C:That action addresses a different network issue: A PC can learn another host's IP address but cannot deliver an Ethernet unicast on the same IPv4 subnet because it has no destination MAC. The present fictional Lakebridge Travel Office finding instead needs “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”, verified by “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.”.
D:That action addresses a different network issue: An inventory lists a phone and nearby wireless earbuds and classifies their Bluetooth pairing as a WAN between cities. The present fictional Lakebridge Travel Office finding instead needs “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”, verified by “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.”.
Question 178
Before changing settings, consider this issue: At the fictional Lakebridge Travel Office during its network support shift, the team observes: A network installer uses TFTP to transfer a harmless device image on a protected maintenance VLAN but claims TFTP authenticates users like SSH. What is the MOST specific underlying cause?
- TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption.
- Ethernet frame headers and IP packet headers contain distinct address types and fields.
- Cloud hosting does not by itself guarantee the workload's recovery-point or backup policy.
- Bursty congestion and buffering can introduce queueing latency even when physical link negotiation is fast.
Explanation
Correct Answer
A:Correct. This mechanism fits the observed network symptom at the fictional Lakebridge Travel Office: TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption. The corresponding remedy is “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”. Confirmation: The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.
Incorrect Answers
B:That cause belongs to a different case: A network diagram puts a destination IP address inside an Ethernet frame's source-MAC field because both are called addresses. The observed fictional Lakebridge Travel Office condition is specifically explained by “TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption.”.
C:That cause belongs to a different case: A shop moves a file server to a hosted VM and assumes backups are unnecessary because the VM resides in a cloud data center. The observed fictional Lakebridge Travel Office condition is specifically explained by “TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption.”.
D:That cause belongs to a different case: A technician sees intermittent application delays and assumes any fast Ethernet link prevents queueing delay. The observed fictional Lakebridge Travel Office condition is specifically explained by “TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption.”.
Question 179
A reviewer evaluates a proposed repair for: At the fictional Lakebridge Travel Office during its network support shift, the team observes: A network installer uses TFTP to transfer a harmless device image on a protected maintenance VLAN but claims TFTP authenticates users like SSH. The approved corrective action is: “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.” Which result BEST demonstrates success?
- The diagram distinguishes metropolitan transport links from local building switches.
- The ARP table contains the neighbor IPv4-to-MAC mapping and the host can exchange local frames.
- Packet captures show the end-to-end target IP and the changing link-layer destinations at successive hops.
- The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.
Explanation
Correct Answer
D:Correct. This is the required observable acceptance evidence for “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.” at the fictional Lakebridge Travel Office. It demonstrates correction of the original cause: TFTP is a simple UDP file-transfer protocol without built-in strong authentication or encryption.
Incorrect Answers
A:That result is evidence for a separate corrective action, “Identify the city-spanning MAN and the smaller LANs at participating buildings.”. It does not establish the intended outcome “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.” for the fictional Lakebridge Travel Office case.
B:That result is evidence for a separate corrective action, “Check ARP resolution for the peer and verify that the correct MAC mapping is learned on the local link.”. It does not establish the intended outcome “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.” for the fictional Lakebridge Travel Office case.
C:That result is evidence for a separate corrective action, “Distinguish the IP destination used by routers from the per-hop Ethernet destination in a two-router path.”. It does not establish the intended outcome “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.” for the fictional Lakebridge Travel Office case.
Question 180
The technician plans a correction for: At the fictional Lakebridge Travel Office during its network support shift, the team observes: A network installer uses TFTP to transfer a harmless device image on a protected maintenance VLAN but claims TFTP authenticates users like SSH. During “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.”, which precaution MOST specifically prevents a related risk?
- Do not use PAN design assumptions for campus backbone connectivity.
- Do not assume an unmanaged Layer 2 switch selects its outbound port by the packet's destination IP address.
- Do not place passwords or confidential files on an unprotected TFTP service.
- Do not use signal bars as a definitive application throughput benchmark.
Explanation
Correct Answer
C:Correct. This precaution prevents a second fault while applying “Restrict TFTP to an approved isolated environment and use a secure alternative for sensitive transfers.” at the fictional Lakebridge Travel Office. The required protection is “Do not place passwords or confidential files on an unprotected TFTP service.”; success still requires “The maintenance test runs only on the restricted segment and no secret data is sent over TFTP.”.
Incorrect Answers
A:This caution is appropriate for a separate failure pattern: An engineer calls a university's connected building networks a personal area network used by one headset. The principal adjacent risk here is controlled by “Do not place passwords or confidential files on an unprotected TFTP service.”.
B:This caution is appropriate for a separate failure pattern: A help-desk note identifies a network switch as the device that routes every frame by destination IP address on a flat access VLAN. The principal adjacent risk here is controlled by “Do not place passwords or confidential files on an unprotected TFTP service.”.
D:This caution is appropriate for a separate failure pattern: A Wi-Fi laptop shows a strong signal icon but transfers data slowly across a busy office. The principal adjacent risk here is controlled by “Do not place passwords or confidential files on an unprotected TFTP service.”.