CompTIA Network+ (N10-009) Practice Questions with Explanations

Correct answer: D

A heat map is a graphical representation that uses colors (typically from cool to warm) to illustrate data density or intensity across a geographic area. In wireless networking, heat maps display signal strength and coverage effectiveness throughout a building.

Why the other options are wrong:

• A. Logical diagrams show network topology and connections, not coverage intensity.
• B. Layer 3 diagrams illustrate IP addressing and routing, not wireless coverage.
• C. Service-level agreements are documents defining performance standards, not visual coverage illustrations.

Correct answer: C

MAC flooding attacks intentionally overflow the Content Addressable Memory (CAM) table on a switch by transmitting numerous frames with different source MAC addresses. Once the CAM table is full, the switch cannot learn new MAC addresses and enters fail-open mode, broadcasting frames to all ports, allowing the attacker to sniff network traffic.

Why the other options are wrong:

• A. ARP spoofing sends fraudulent ARP replies to redirect traffic, not related to CAM table overflow.
• B. Evil twin creates a rogue wireless access point, unrelated to CAM table attacks.
• D. DNS poisoning corrupts DNS records, not involving CAM table manipulation.

Correct answer: A

X.509 certificates are the standard certificate format used within Public Key Infrastructure (PKI) systems for digital authentication, encryption, and identity verification. PKI is the framework that manages, distributes, and validates X.509 certificates.

Why the other options are wrong:

• B. VLAN tagging is for network segmentation, unrelated to certificate technology.
• C. While LDAP can work with certificates, X.509 is most fundamentally associated with PKI, not LDAP specifically.
• D. MFA uses various authentication factors but X.509 certificates are not its primary association.

Correct answer: A

A toner probe (tone generator and tracer) is specifically designed to identify cable runs from a patch panel to their destinations. By sending an audible tone down a cable at the patch panel, the technician can use the probe to detect which port the cable connects to at the switch, making it the most efficient tool for identifying unlabeled ports.

Why the other options are wrong:

• B. A laptop can test connectivity but requires the cable to be properly connected and patched, which is what the technician is trying to accomplish.
• C. A cable tester verifies cable integrity but does not identify which physical port a cable connects to.
• D. A visual fault locator detects breaks in fiber optic cables and is not applicable to identifying patch panel ports.

Correct answer: A

Microwave ovens operate at 2.4GHz, the same frequency band used by Wi-Fi and many other wireless devices. The electromagnetic radiation from microwaves causes significant interference in the 2.4GHz band, leading to wireless connectivity loss. The 5GHz, 6GHz, and 900MHz bands are not affected by microwave interference.

Why the other options are wrong:

• B. 5GHz Wi-Fi is not significantly affected by microwave oven interference.
• C. 6GHz is a newer Wi-Fi band that does not overlap with microwave frequencies.
• D. 900MHz is not a standard Wi-Fi band and is not affected by microwave interference.

Correct answer: B

802.11ax (Wi-Fi 6) is specifically designed to handle high-density environments with improved device saturation capabilities through features like OFDMA, spatial reuse, and BSS coloring. It provides better performance and coverage in congested areas compared to earlier standards.

Why the other options are wrong:

• A. 802.11ac (5 GHz, up to 3.5 Gbps) is older and lacks the high-density optimization features of 802.11ax.
• C. 802.11g (2.4 GHz, 54 Mbps) is an older standard with limited throughput and poor high-density performance.
• D. 802.11n predates 802.11ax and does not have the advanced features designed for high-density device saturation scenarios.

Correct answer: C

A hub-and-spoke topology routes all traffic through a central hub or core point, making it a centralized architecture. This is contrasted with mesh topologies where devices connect directly, hybrid topologies that combine multiple approaches, and point-to-point which connects only two devices directly.

Why the other options are wrong:

• A. Mesh topology allows direct device-to-device connections without a single central point.
• B. Hybrid topology combines multiple topologies but does not necessarily route all traffic through one point.
• D. Point-to-point topology directly connects two devices without a central hub.

Correct answer: B

An infrastructure network topology is the standard enterprise wireless architecture where multiple WAPs (wireless access points) are centrally managed by a wireless LAN controller. This allows centralized configuration, security policies, and roaming. Mesh networks are self-healing but decentralized, point-to-point links two devices, and ad hoc networks operate without central control.

Why the other options are wrong:

• A. Mesh networks are decentralized and self-healing, not controlled by a central controller.
• C. Point-to-point connects only two devices, not suitable for multiple WAPs.
• D. Ad hoc networks lack centralized control and are not designed for enterprise deployment.

Correct answer: D

Network Access Control (NAC) is specifically designed to authenticate and authorize devices before they can access the network. It prevents unauthorized devices from connecting to network ports by checking device compliance, credentials, and other security policies. This directly addresses the vulnerability where visitors could plug in personal laptops.

Why the other options are wrong:

• A. URL filters control web traffic, not physical port access.
• B. VPN is for remote secure connections, not preventing local port access.
• C. ACLs control traffic rules but don't prevent unauthorized device connections at the port level.

Correct answer: D

Port 587 is used for SMTP with STARTTLS encryption, providing secure email submission. This port allows clients to authenticate and send email securely through TLS/SSL encryption, making it the standard secure email submission port in modern email infrastructure.

Why the other options are wrong:

• A. Port 25 is standard SMTP without encryption, not secure email.
• B. Port 110 is POP3 without encryption, used for receiving but not secure.
• C. Port 143 is IMAP without encryption, used for receiving but not secure.

Correct answer: B

A hash function provides integrity by generating a unique fingerprint of data that changes if the data is modified. When data is hashed and later rehashed, matching hash values confirm the data has not been altered. Hashes do not provide non-repudiation (which requires digital signatures), confidentiality (hashes are one-way but not encryption), or availability (which is a system characteristic).

Why the other options are wrong:

• A. Non-repudiation requires digital signatures, not hashes alone.
• C. Confidentiality requires encryption; hashes do not encrypt data.
• D. Availability is a system design concern, not a hash function property.

Correct answer: C

Port security is a switch feature that limits the number of MAC addresses allowed on a port and can restrict access to only pre-authorized devices. This is the direct mechanism for ensuring only assigned devices can connect to specific switch ports.

Why the other options are wrong:

• A. ACLs filter traffic but don't control which devices can physically connect to ports.
• B. Captive portals are used for guest networks, not device authorization on switch ports.
• D. Disabling services hardens the switch but doesn't control which devices can connect.

Correct answer: A

A signal power of -97dB is extremely weak (normal is typically -10 to -7dB for downstream). Splitters cause signal loss and attenuation; removing them will improve signal strength and resolve disconnections and slow speeds. This is a physical layer issue that requires improving the signal quality at the modem.

Why the other options are wrong:

• B. Switching to wireless would not address the underlying modem signal issue and would not resolve wired device problems.
• C. Moving devices closer to the modem does not address weak incoming signal from the ISP line.
• D. Lowering network speed does not address the root cause of weak signal power affecting connection stability.

Correct answer: D

SAML (Security Assertion Markup Language) is an XML-based standard that enables single sign-on by securely passing authentication and user attribute information between identity providers and service providers. IAM is a broad concept not XML-based, MFA is multi-factor authentication unrelated to XML protocols, and RADIUS is an authentication protocol that predates and differs from SAML's XML approach.

Why the other options are wrong:

• A. IAM is a management framework, not an XML-based protocol for passing user information.
• B. MFA is multi-factor authentication, not an XML-based federation standard.
• C. RADIUS is a protocol for authentication but uses a different mechanism, not XML.

Correct answer: D

Link aggregation (also called EtherChannel or bonding) combines multiple physical ports into a single logical link, providing both redundancy and increased bandwidth. When one link fails, traffic automatically flows through the remaining aggregated links, ensuring continuous connectivity to the core switch.

Why the other options are wrong:

• A. Full duplex is a communication mode setting, not a redundancy configuration mechanism.
• B. 802.1Q tagging is a VLAN identification method, not directly related to port redundancy.
• C. Native VLAN is used for untagged traffic on trunk ports, not for providing redundancy between links.

Correct answer: C

OSPF uses multicast addresses (224.0.0.5 for OSPF routers and 224.0.0.6 for designated routers) to communicate routing updates. Multicast allows OSPF to efficiently send updates to only relevant routers rather than broadcasting to all devices on the network.

Why the other options are wrong:

• A. OSPF does not use unicast for standard routing updates; it uses multicast for efficiency.
• B. Anycast is not used by OSPF for routing updates.
• D. Broadcast would reach all devices on a segment, which is inefficient; OSPF uses targeted multicast instead.

Correct answer: B

A DHCP reservation binds a specific MAC address to a fixed IP address, ensuring the file server always receives the same IP while remaining under DHCP management. This provides the reliability needed for a server that must be consistently addressable while maintaining DHCP infrastructure benefits.

Why the other options are wrong:

• A. A /32 subnet is a single host and creates unnecessary complexity; reservations are simpler.
• C. Assigning a static IP within the DHCP range can cause conflicts if DHCP also assigns that address.
• D. SLAAC (Stateless Address Auto-Configuration) is for IPv6 and doesn't provide the centralized control needed for server management.

Correct answer: A

NS (Name Server) records are what must be changed at the registrar to point to a new DNS hosting provider. NS records tell the DNS system which servers are authoritative for a domain. Changing these at the registrar delegates DNS authority to the new hosting provider's servers.

Why the other options are wrong:

• B. SOA records are managed at the DNS server level, not at the registrar.
• C. PTR records are used for reverse DNS lookups and are not changed at the registrar.
• D. CNAME records are DNS records that create aliases and are not used to change DNS hosting providers.

Correct answer: D

Multimode fiber uses multiple light paths (modes) that bounce off the protective cladding at different angles as they travel through the core. This characteristic defines multimode fiber and distinguishes it from single-mode fiber, which uses a single light path with minimal bouncing off the cladding.

Why the other options are wrong:

• A. Twinaxial is a copper-based cable, not fiber optic.
• B. Coaxial is a copper-based cable with a center conductor, not fiber optic.
• C. Single-mode fiber uses a single light path with minimal reflection off the cladding, not bouncing.

Correct answer: D

SaaS (Software as a Service) describes a cloud delivery model where a hosted application is made available over the internet for both internal and external users to access. This is the definition of hosting an application in the cloud for organizational and third-party users.

Why the other options are wrong:

• A. Multitenancy describes architecture where multiple customers share infrastructure, but doesn't define the service model itself.
• B. VPC (Virtual Private Cloud) is infrastructure isolation, not a service delivery model for applications.
• C. NFV (Network Functions Virtualization) relates to virtualizing network services, not general application hosting.

Correct answer: A

QoS (Quality of Service) is the function that prioritizes network traffic based on traffic type, application, or other criteria to ensure optimal performance for critical applications. VPN provides encryption and tunneling, CDN distributes content geographically, and TTL controls packet lifetime in the network.

Why the other options are wrong:

• B. VPN provides secure tunneling and encryption, not traffic prioritization.
• C. CDN distributes content across multiple locations, not for traffic prioritization.
• D. TTL limits packet lifespan to prevent infinite loops, not for traffic prioritization.

Correct answer: A

Port mirroring (SPAN - Switched Port Analyzer) copies traffic from a source port to a destination port, allowing a monitoring device to capture and inspect the actual contents of data packets. This is the only method listed that directly captures full packet contents for deep inspection.

Why the other options are wrong:

• B. Flow data provides summary statistics about traffic patterns, not detailed packet contents.
• C. Syslog entries record system events and messages, not the actual contents of data packets.
• D. SNMP traps are alerts and notifications about network events, not mechanisms for inspecting data contents.

Correct answer: A

DNS poisoning (also called DNS spoofing) corrupts DNS cache with false DNS records, causing domain names to resolve to attacker-controlled IP addresses. When users attempt to access a company website, the poisoned DNS response redirects them to a completely different website under the attacker's control.

Why the other options are wrong:

• B. Denial-of-service attacks make services unavailable but don't redirect users to different websites.
• C. Social engineering manipulates users through deception but doesn't automatically redirect traffic.
• D. ARP spoofing redirects traffic to the attacker's machine on the local network, not to an entirely different website.

Correct answer: C

Network Function Virtualization (NFV) enables the implementation of network functions, including routing, as software-based virtual functions running on hypervisors rather than dedicated hardware appliances. This allows routing capabilities to be deployed and managed within a virtualized environment.

Why the other options are wrong:

• A. VPC (Virtual Private Cloud) is a cloud service offering, not a hypervisor routing capability.
• B. A firewall is a security function, not a routing implementation within a hypervisor.
• D. IaaS (Infrastructure as a Service) is a cloud service model, not a specific routing technology.

Correct answer: D

Tracert (traceroute) displays the path packets take through the network to reach a destination, showing each hop and which router/link is used. This allows the technician to determine which of the two internet links is carrying the web application traffic by observing the route taken to reach the web server.

Why the other options are wrong:

• A. Netstat shows active connections and network statistics but doesn't reveal which physical link or path is being used.
• B. Nslookup performs DNS lookups to resolve domain names, unrelated to identifying active data paths.
• C. Ping tests basic connectivity but doesn't show the path or which specific link is carrying traffic.

Correct answer: D

The cost-effective advantage of split-tunnel VPN is that cloud-based traffic flows outside of the company's network and VPN tunnel, reducing bandwidth consumption on corporate infrastructure. This allows non-sensitive traffic to bypass the VPN while maintaining VPN protection for corporate data, resulting in lower operational costs.

Why the other options are wrong:

• A. Web traffic filtering through a web filter is not specific to split-tunnel VPN architecture.
• B. Split-tunnel reduces bandwidth requirements on the company's connection by routing some traffic directly.
• C. Monitoring insecure machines is not a cost-effective advantage but rather a security concern of split-tunnel.

Correct answer: C

A Switched Virtual Interface (SVI) is a logical interface created on a Layer 3 switch to enable routing between VLANs. SVIs allow the separation and routing of traffic from different VLANs (such as voice and data) through a single logical interface, enabling inter- VLAN communication while maintaining traffic separation.

Why the other options are wrong:

• A. Physical interfaces are used for trunking; SVIs are logical constructs, not physical.
• B. While SVIs can be used for management, the primary use case here is VLAN routing, not management access.
• D. SVIs provide routing capabilities for VLANs, not a workaround for insufficient physical ports.

Correct answer: A

A captive portal is specifically designed to provide temporary, guest-level network access by presenting an authentication page that users must complete before accessing the network. This is the standard technology for temporary access scenarios.

Why the other options are wrong:

• B. Enterprise authentication is designed for permanent organizational users, not temporary access.
• C. Ad hoc networks are peer-to-peer connections, not suitable for centralized temporary access control.
• D. WPA3 is a wireless encryption standard, not an authentication/access control technology for temporary users.

Correct answer: D

SNMPv3 is the only option that provides both authentication and encryption for device monitoring. SNMPv1 and SNMPv2c lack security features, while SNMPv3 includes authentication (using MD5 or SHA) and encryption (using DES or AES) capabilities. SIEM, Syslog, and NetFlow do not inherently provide authentication and encryption at the protocol level for monitoring itself.

Why the other options are wrong:

• A. SIEM is a log management and analysis tool, not a protocol that provides authentication and encryption for device monitoring.
• B. Syslog transmits logs in plaintext without authentication or encryption.
• C. NetFlow collects traffic flow data but does not provide authentication or encryption mechanisms.

Correct answer: A

EIGRP (Enhanced Interior Gateway Routing Protocol) supports unequal cost load balancing through its variance parameter and uses port 88 for communication between routers. BGP uses port 179, OSPF uses IP protocol 89 (not a port), and RIP does not support unequal cost load balancing.

Why the other options are wrong:

• B. BGP uses port 179, not port 88.
• C. RIP does not support unequal cost load balancing.
• D. OSPF uses IP protocol 89 and does not support unequal cost load balancing.

Correct answer: C

Public cloud is the deployment model most commonly associated with multitenancy, where multiple organizations share the same infrastructure and resources provided by a third- party service provider. It is the standard offering model for most cloud providers.

Why the other options are wrong:

• A. Private cloud is dedicated to a single organization, not multitenant.
• B. Community cloud serves specific organizations but is not the most common multitenancy model.
• D. Hybrid cloud combines private and public elements but is not primarily defined by multitenancy.

Correct answer: A

The Presentation Layer (Layer 6) is responsible for data encryption, decryption, and formatting. While end-to-end encryption concepts may involve multiple layers, the OSI model designates Layer 6 (Presentation) as the layer responsible for encryption/decryption operations and data translation.

Why the other options are wrong:

• B. The Application Layer provides user services and interfaces but delegates encryption responsibilities to lower layers.
• C. The Session Layer manages sessions and dialog control, not encryption.
• D. While the Transport Layer can participate in encryption (e.g., TLS), the Presentation Layer is the designated OSI layer for encryption.

Correct answer: D

A load balancer is specifically designed to listen for incoming client requests and distribute them across multiple backend servers based on various algorithms. It handles traffic distribution, health checks, and session persistence, which are the core functions needed for this scenario.

Why the other options are wrong:

• A. Routers direct traffic between networks but don't distribute load across servers.
• B. Switches connect devices within a network but don't distribute application traffic.
• C. Firewalls filter traffic but don't distribute requests across multiple servers.

Correct answer: A

Spanning Tree Protocol (STP) is designed specifically to detect and prevent network loops by blocking redundant paths while maintaining backup connections. Enabling spanning tree on switches in a topology with loop scenarios will eliminate the loops causing intermittent connectivity issues while preserving network redundancy.

Why the other options are wrong:

• B. Port security restricts access based on MAC addresses but does not prevent switching loops.
• C. Changing switch port speeds does not address the root cause of loops or prevent broadcast storms.
• D. 802.1Q tagging is for VLAN configuration and does not prevent or resolve network loops.

Correct answer: C

A full-tunnel VPN routes all network traffic through the VPN connection to the corporate network, enabling the organization to inspect and monitor all user traffic for security and compliance purposes. This provides complete visibility and control over employee network activity regardless of the destination.

Why the other options are wrong:

• A. Full-tunnel VPNs typically increase bandwidth requirements by routing all traffic through the tunnel.
• B. VPNs do not provide the capability to reset local computer passwords; that requires separate authentication mechanisms.
• D. Preventing access to blocked sites is the purpose of corporate filtering, and full- tunnel VPNs enforce this but don't inherently enable access to blocked sites.

Correct answer: B

The 2.4GHz Wi-Fi band has 11 usable channels in most regions, but only channels 1, 6, and 11 are non-overlapping. These channels are spaced 5 channels apart, providing sufficient separation to prevent interference when access points overlap. Using these three channels ensures minimal co-channel and adjacent-channel interference.

Why the other options are wrong:

• A. Channels 1, 3, and 5 overlap significantly; channel 3 overlaps with both 1 and 5.
• C. Channels 2, 6, and 10 have overlap issues; channel 2 overlaps with 1 and 6, and channel 10 may not be available in all regions.
• D. Channels 3, 6, and 9 have overlapping frequencies that would cause interference between adjacent APs.

Correct answer: C

Creating a plan of action is the step where the technician systematically determines how to troubleshoot the problem, which includes checking through each OSI layer to isolate where the issue exists. This occurs after the problem is identified but before implementing solutions. Establishing a theory comes after gathering information, implementing the solution is execution, and verifying functionality is the final step.

Why the other options are wrong:

• A. Establishing a theory comes after information gathering, not necessarily involving systematic OSI layer checking.
• B. Implementation is execution of the solution, not the planning/checking phase.
• D. Verification occurs after the solution is implemented, not during the diagnostic checking phase.

Correct answer: A

The proper troubleshooting methodology after successfully testing and confirming a root cause is to determine the specific resolution steps needed to fix the problem. This comes before implementation and allows for planning the actual fix.

Why the other options are wrong:

• B. Duplicating in a lab occurs before testing the theory, not after.
• C. Presenting for approval happens after determining resolution steps.
• D. Implementation occurs after determining resolution steps, not immediately after testing the theory.

Correct answer: A

A hosts file on the user's local machine can override DNS resolution for specific URLs, causing them to resolve to incorrect IP addresses or not resolve properly while other users are unaffected. This explains why only one user has the issue-it's a local configuration problem rather than a network-wide DNS problem.

Why the other options are wrong:

• B. Self-signed certificates cause security warnings, not URL resolution failures.
• C. Nameserver record issues would affect all users trying to reach the site, not just one user.
• D. IP helper is used for DHCP relay, not for DNS resolution issues.

Correct answer: A

LLDP (Link Layer Discovery Protocol) allows devices to discover and identify neighboring network devices and the switch ports they are connected to. This is the standard protocol for determining switch identity and port information without requiring manual configuration or network access.

Why the other options are wrong:

• B. IKE (Internet Key Exchange) is related to VPN encryption, not device/port discovery.
• C. VLAN configuration helps segment networks but doesn't identify which physical switch port a device connects to.
• D. netstat displays network connections and statistics from the local device, not switch port information.

Correct answer: D

EIGRP (Enhanced Interior Gateway Routing Protocol) is the only routing protocol among the options that uses the concept of a successor (the primary next-hop route with the lowest cost) and a feasible successor (a backup route that meets the feasibility condition). This dual concept is central to EIGRP's fast convergence and loop-free topology guarantees.

Why the other options are wrong:

• A. IS-IS uses a shortest path tree but does not employ successor/feasible successor concepts.
• B. OSPF uses designated routers and shortest path first calculations, not successors and feasible successors.
• C. BGP uses path vectors and AS-path attributes, not the successor/feasible successor model.

Correct answer: B

An Intrusion Detection System (IDS) operates passively in a monitoring mode, analyzing traffic for signs of attacks without actively blocking or modifying traffic. This approach allows threat analysis without introducing latency, as IDS can be deployed out-of-band or in a tap configuration to observe traffic without being inline.

Why the other options are wrong:

• A. An IPS (Intrusion Prevention System) actively blocks threats inline, which adds latency to traffic flow.
• C. A load balancer distributes traffic but is not designed for attack analysis.
• D. A firewall actively processes and filters traffic, introducing latency as part of its blocking function.

Correct answer: C

Port Address Translation (PAT) is used to translate non-routable (private) addresses on internal networks to routable addresses for internet communication. Option C correctly identifies that PAT operates on non-routable addresses on the perimeter router, allowing private internal addresses to communicate externally through address translation.

Why the other options are wrong:

• A. VLANs on the perimeter are a network segmentation concept unrelated to PAT functionality.
• B. Public addresses on the perimeter are already routable and do not require translation via PAT.
• D. Server placement on the perimeter is a network topology decision separate from the purpose of PAT.

Correct answer: D

Out-of-band management provides remote access to network devices through a separate, independent management channel (such as serial console, IPMI, or dedicated management port) that remains accessible even when the main system has failed. This is essential for recovering devices that won't start normally.

Why the other options are wrong:

• A. A crash cart is physical equipment for on-site access, not remote access.
• B. A jump box is for accessing secured networks, not for direct device recovery during startup failures.
• C. SSH requires the device to be fully operational, which won't work for a device that failed to start properly.

Correct answer: B

VLAN hopping attacks exploit multiple network tags (double tagging) within a single packet. An attacker inserts an additional 802.1Q tag into a frame, allowing the packet to traverse multiple VLANs and reach restricted network segments. This technique specifically leverages the presence of multiple VLAN tags in a packet structure.

Why the other options are wrong:

• A. MAC flooding attacks overwhelm the CAM table with numerous MAC addresses, not involving multiple network tags.
• C. DNS spoofing involves forging DNS responses to redirect users, unrelated to network packet tagging.
• D. ARP poisoning uses fraudulent ARP messages to map IP addresses to incorrect MAC addresses, not involving VLAN tags.

Correct answer: B

Nmap (Network Mapper) is a specialized tool designed to discover hosts and services on a network by sending packets and analyzing responses. It identifies which ports are open, closed, or filtered on a target server, making it ideal for determining why the file server is inaccessible by revealing port status.

Why the other options are wrong:

• A. Dig queries DNS records, not port status.
• C. Tracert traces the route packets take but doesn't identify open ports.
• D. Nslookup performs DNS lookups, not port scanning.

Correct answer: B

Broadcast traffic is specifically designed to be sent to all nodes on a network segment or subnet. A broadcast address (such as 255.255.255.255 in IPv4) ensures delivery to every host on the local network, making it the defining characteristic of broadcast transmission.

Why the other options are wrong:

• A. Unicast sends data to a single specific destination node.
• C. Multicast sends data to a group of selected nodes that have subscribed to a multicast address.
• D. Anycast sends data to the nearest node in a group based on routing metrics, not all nodes.

Correct answer: D

A /28 subnet mask (255.255.255.240) provides 16 total addresses with 14 usable addresses (16 - 2 for network and broadcast). This is the smallest subnet that meets the requirement of six usable IP addresses while being the most efficient allocation.

Why the other options are wrong:

• A. /25 (255.255.255.128) provides 126 usable addresses, more than needed.
• B. /26 (255.255.255.192) provides 62 usable addresses, more than needed.
• C. /27 (255.255.255.224) provides 30 usable addresses, more than needed.

Correct answer: C

Fiber-optic cable provides the highest transmission speeds among the options, capable of supporting speeds in the terabits per second range. It uses light propagation rather than electrical signals, eliminating electromagnetic interference and allowing for vastly greater bandwidth compared to copper-based alternatives.

Why the other options are wrong:

• A. Plenum is a fire-rated cable type classification; it does not determine speed independently.
• B. Ethernet refers to the protocol/standard, not a specific cable type; speeds vary based on the actual medium used.
• D. DAC (Direct Attach Copper) is limited to shorter distances and lower speeds compared to fiber-optic technology.

Correct answer: C

A warm site is ideal for non-critical applications that can tolerate short downtime. It maintains some systems and data in a ready state but is not fully operational, making it more cost-effective than a hot site while providing faster recovery than a cold site. Hot sites are too expensive for non-critical applications, cold sites have unacceptable recovery times, and passive is not a standard DR site classification.

Why the other options are wrong:

• A. Hot sites are fully operational and expensive, unnecessary for non-critical applications.
• B. Cold sites have long recovery times unsuitable for applications needing minimal downtime.
• D. Passive is not a recognized disaster recovery site type in standard classifications.