1. Users are reporting longer delays in authentication and in accessing network resources during certain time periods of the week. What kind of information should network engineers check to find out if this situation is part of a normal network behavior?

syslog records and messages
the network performance baseline
debug output and packet captures
network configuration files

2. A team of engineers has identified a solution to a significant network problem. The proposed solution is likely to affect critical network infrastructure components. What should the team follow while implementing the solution to avoid interfering with other processes and infrastructure?

change-control procedures
one of the layered troubleshooting approaches
knowledge base guidelines
syslog messages and reports

3. After which step in the network troubleshooting process would one of the layered troubleshooting methods be used?

documenting symptoms
determining ownership
narrowing the scope
gathering symptoms from suspect devices

4. A user reports that the workstation cannot connect to a networked printer in the office in order to print a report created with word processing software. Which troubleshooting action by the helpdesk technician would follow the divide-and-conquer approach?

Ask the user to launch the web browser.
Ask the user to save the working document.
Ask the user to issue the ipconfig command.
Ask the user to unplug and reattach the network cable.

5. A network engineer is troubleshooting a network problem and can successfully ping between two devices. However, Telnet between the same two devices does not work. Which OSI layers should the administrator investigate next?

all of the layers
from the network layer to the application layer
from the network layer to the physical layer
only the network layer

6. Which troubleshooting method begins by examining cable connections and wiring issues?

top-down
bottom-up
substitution
divide-and-conquer

7.

Refer to the exhibit. Which two statements describe the results of entering these commands?(Choose two.)

R1 will send system messages of levels 0 (emergencies) to level 4 (warnings) to a server.
R1 will not send critical system messages to the server until the command debug all is entered.
R1 will reset all the warnings to clear the log.
R1 will output the system messages to the local RAM.
The syslog server has the IPv4 address 192.168.10.10.

8. An administrator is troubleshooting an Internet connectivity problem on a router. The output of the show interfaces gigabitethernet 0/0 command reveals higher than normal framing errors on the interface that connects to the Internet. At what layer of the OSI model is the problem likely occurring?

Layer 1
Layer 2
Layer 3
Layer 4
Layer 7

9. Users report that the new web site http://www.company1.biz cannot be accessed. The helpdesk technician checks and verifies that the web site can be accessed with http://www.company1.biz:90. Which layer in the TCP/IP model is involved in troubleshooting this issue?

application
transport
internet
network access

10. A user reports that after an OS patch of the networking subsystem has been applied to a workstation, it performs very slowly when connecting to network resources. A network technician tests the link with a cable analyzer and notices that the workstation sends an excessive number of frames smaller than 64 bytes and also other meaningless frames. What is the possible cause of the problem?

cabling faults
corrupted NIC driver
Ethernet signal attenuation
corrupted application installation

11. A network administrator is configuring SSH on a router. When verifying the configuration, the administrator notices that the SSH connection requests fail, but the Telnet connection requests from the same workstation are successful. Which two parts of the router configuration should be checked to try to locate the problem? (Choose two.)

The ip access-class command is missing.
The password is misconfigured on the console line.
The transport input command is incorrect on the vty lines.*
A standard ACL is possibly blocking the workstation from access to the router.
An extended ACL that is referencing the port argument for SSH is misconfigured.*

12. A user in a large office calls technical support to complain that a PC has suddenly lost connectivity to the network. The technician asks the caller to talk to nearby users to see if other machines are affected. The caller reports that several immediate neighbors in the same department have a similar problem and that they cannot ping each other. Those who are seated in other departments have connectivity. What should the technician check as the first step in troubleshooting the issue?

the power outlet to the PC that is used by the caller
the trunks between switches in the wiring closet
the status of the departmental workgroup switch in the wiring closet
the cable that connects the PC of the caller to the network jack
the cable connection between a PC and a network outlet that is used by a neighbor

13. After cables were reconnected to a switch in a wiring closet, several PCs that had been previously configured manually can no longer access resources outside the local network. The PC configurations were not altered in the process and resources on the local network can still be accessed. What is a possible cause of the problem?

The cabling to the PCs is faulty.
The PCs are no longer on the correct VLAN.
The DHCP server has been misconfigured.
The DNS configuration on the PCs is incorrect.

14.

Refer to the exhibit. On the basis of the output, which two statements about network connectivity  are correct? (Choose two.)

There is connectivity between this device and the device at 192.168.100.1.
The connectivity between these two hosts allows for videoconferencing calls.
There are 4 hops between this device and the device at 192.168.100.1.
The average transmission time between the two hosts is 2 miliseconds.
This host does not have a default gateway configured.

15. Fill in the blank.

Use the ”  ARP    ” cache to verify IPv4 address to Layer 2 Ethernet address mappings on a host computer.

16. Which two specialized troubleshooting tools can monitor the amount of traffic that passes through a switch? (Choose two.)

digital multimeter
TDR
NAM
portable network analyzer
DTX cable analyzer

17. A group of Windows PCs in a new subnet has been added to an Ethernet network. When testing the connectivity, a technician finds that these PCs can access local network resources but not the Internet resources. To troubleshoot the problem, the technician wants to initially confirm the IP address and DNS configurations on the PCs, and also verify connectivity to the local router. Which three Windows CLI commands and utilities will provide the necessary information? (Choose three.)

ipconfig
telnet
ping
arp -a
nslookup
tracert
netsh interface ipv6 show neighbor

18. A company is setting up a web site with SSL technology to protect the authentication credentials required to access the web site. A network engineer needs to verify that the setup is correct and that the authentication is indeed encrypted. Which tool should be used?

baselining tool
cable analyzer
protocol analyzer
fault-management tool

19. In which step of gathering symptoms does the network engineer determine if the problem is at the core, distribution, or access layer of the network?

Determine ownership.
Narrow the scope.
Gather information.
Document the symptoms.
Determine the symptoms.

20. A network technician is troubleshooting an email connection problem. Which question to the end-user will provide clear information to better define the problem?

How big are the emails you tried to send?
When did you first notice your email problem?
Is your email working now?
What kind of equipment are you using to send emails?

21. A network engineer issues the show cdp neighbor command on several network devices during the process of network documentation. What is the purpose of performing this command?

to obtain information about directly connected Cisco devices  
to check the networks that are advertised by the neighboring routers
to verify the network addresses that are attached to the network devices
to check the connectivity of PCs that are connected to the network devices

22.

Refer to exhibit. A network engineer is troubleshooting a WAN connectivity problem. A ping to a remote router is successful and an attempt to telnet to the same router displays the exhibited output. What does the output verify?

A Telnet password has not been configured on the remote router.
The transport layer is connecting successfully.
The web server service is password protected.
The remote router IPv6 address is incorrect.

23. When should a network performance baseline be measured?

after normal work hours to reduce possible interruptions
during normal work hours of an organization  
when a denial of service attack to the network is detected and blocked
immediately after the main network devices restarted

24. Which number represents the most severe level of syslog logging?

7
0
1
10

25.

Place the options in the following order:
[+] CiscoView
[+] What’s Up Gold
[+] HP OpenviewBTO
[#] SolarWinds LAN surveyor
[#] CyberGauge software
[*] Internet search engines
[*] Cisco Tools & Resources web site

[+] Order does not matter within this group.
[#] Order does not matter within this group.
[*] Order does not matter within this group.