Question 1: What is the MAIN difference between a threat and a vulnerability in risk terminology?

• A vulnerability causes harm directly; a threat only describes weakness
• They are interchangeable terms
• A threat is a potential danger; a vulnerability is a weakness that can be exploited (Correct answer)
• A threat is internal; a vulnerability is external

Correct answer: A threat is a potential danger; a vulnerability is a weakness that can be exploited

A threat is any circumstance or event that could exploit a vulnerability, while a vulnerability is the specific weakness being exploited.

Question 2: How many subnets does a /28 mask create from a Class C network?

• 32
• 16 (Correct answer)
• 4
• 8

Correct answer: 16

A /28 borrows 4 bits from a Class C (/24) network, creating 2^4 = 16 subnets.

Question 3: What is the maximum data rate of Fast Ethernet (100BASE-TX)?

• 100 Mbps (Correct answer)
• 10 Gbps
• 1000 Mbps
• 10 Mbps

Correct answer: 100 Mbps

Fast Ethernet (100BASE-TX) operates at 100 Megabits per second (Mbps) over Cat 5 or better twisted-pair cabling.

Question 4: Which tool is most effective for documenting and tracking stakeholder-reported network issues over time?

• Email threads between the user and administrator
• A shared spreadsheet updated manually by IT staff
• Verbal updates at weekly meetings
• A ticketing system such as ServiceNow or Jira Service Management (Correct answer)

Correct answer: A ticketing system such as ServiceNow or Jira Service Management

A ticketing system provides structured tracking, history, escalation paths, and accountability for all reported issues.

Question 5: How does a Microsoft Networking Essentials Exam professional communicate risks to stakeholders?

• By minimizing all risks
• By presenting risks clearly with context, potential impacts, and recommended actions (Correct answer)
• Using technical jargon only
• Through annual reports only

Correct answer: By presenting risks clearly with context, potential impacts, and recommended actions

This is fundamental to Microsoft Networking Essentials Exam practice. By presenting risks clearly with context, potential impacts, and recommended actions represents the professional standard for risk management in the Microsoft Networking Essentials Exam certification framework.

Question 6: When troubleshooting a network connectivity issue, which evidence-based first step is recommended before making any configuration changes?

• Reboot all network devices immediately
• Document the current network state and gather baseline data (Correct answer)
• Escalate to the vendor without investigation
• Replace the suspected faulty hardware

Correct answer: Document the current network state and gather baseline data

Documenting current state and gathering baseline data ensures you have evidence to compare against after changes, following a structured troubleshooting methodology.

Question 7: Which device is used to connect a LAN to a WAN and typically provided by an ISP?

• Bridge
• Modem (Correct answer)
• Switch
• Access point

Correct answer: Modem

A modem (modulator-demodulator) connects a local network to a WAN (like the internet) by converting digital signals to the format required by the ISP's network (DSL, cable, fiber).

Question 8: Which feature on a managed switch helps ensure consistent network quality by preventing broadcast storms?

• Link aggregation
• Storm control (Correct answer)
• Port mirroring
• VLAN tagging

Correct answer: Storm control

Storm control limits the rate of broadcast, multicast, and unknown unicast traffic to prevent storms that degrade network performance.

Question 9: Which of the following best describes NAT (Network Address Translation)?

• Translates private IP addresses to a public IP for internet access (Correct answer)
• Encrypts IP packets before transmission
• Assigns DNS names to IP addresses
• Divides a network into multiple VLANs

Correct answer: Translates private IP addresses to a public IP for internet access

NAT translates private (RFC 1918) IP addresses to one or more public IP addresses, allowing internal hosts to communicate with the internet.

Question 10: Which practice best ensures clear communication when handing off a network incident to a colleague at shift change?

• Ask the colleague to start investigation fresh without bias from prior findings
• Leave notes only in the ticket system and assume the colleague will find them
• Provide a verbal and written handoff summary covering current status, actions taken, and next steps (Correct answer)
• Mark the ticket as resolved before leaving to keep queue metrics clean

Correct answer: Provide a verbal and written handoff summary covering current status, actions taken, and next steps

A combined verbal and written handoff ensures continuity, reduces duplication of effort, and prevents gaps in incident management.

Question 11: An IPv6 address is how many bits long?

• 64 bits
• 128 bits (Correct answer)
• 32 bits
• 256 bits

Correct answer: 128 bits

IPv6 addresses are 128 bits long, expressed as eight groups of four hexadecimal digits.

Question 12: What device operates at Layer 3 and forwards packets between different networks?

• Switch
• Bridge
• Router (Correct answer)
• Hub

Correct answer: Router

A router operates at Layer 3 (Network Layer) and uses IP addresses to forward packets between different networks, making routing decisions based on routing tables.

Question 13: How has digital technology transformed Microsoft Networking Essentials Exam practice?

• It has enhanced data collection, analysis, communication, and operational efficiency (Correct answer)
• It has replaced all traditional methods
• It has had no impact
• It only affects large organizations

Correct answer: It has enhanced data collection, analysis, communication, and operational efficiency

This is fundamental to Microsoft Networking Essentials Exam practice. It has enhanced data collection, analysis, communication, and operational efficiency represents the professional standard for technology in the Microsoft Networking Essentials Exam certification framework.

Question 14: A private network that enables data sharing between members of an organization is:

• Intranet (Correct answer)
• Internet
• Extranet
• Ethernet

Correct answer: Intranet

An intranet is a private network that uses Internet protocols and technologies (like TCP/IP, HTTP) but is accessible only to authorized users within a single organization. Its primary purpose is to facilitate internal communication, collaboration, and data sharing among employees. It functions like a private version of the internet, confined to the organization's boundaries.

Question 15: What is the broadcast address of the subnet 192.168.10.64/26?

• 192.168.10.127 (Correct answer)
• 192.168.10.95
• 192.168.10.255
• 192.168.10.128

Correct answer: 192.168.10.127

A /26 has a block size of 64; the 64 subnet spans .64–.127, so the broadcast address is 192.168.10.127.

Question 16: Why is evidence-based practice important in Microsoft Networking Essentials Exam?

• It integrates best available evidence with professional expertise for optimal outcomes (Correct answer)
• It is a theoretical concept only
• It only applies to academic settings
• It replaces experience

Correct answer: It integrates best available evidence with professional expertise for optimal outcomes

This is fundamental to Microsoft Networking Essentials Exam practice. It integrates best available evidence with professional expertise for optimal outcomes represents the professional standard for research in the Microsoft Networking Essentials Exam certification framework.

Question 17: Which category of UTP cable supports Gigabit Ethernet (1000BASE-T)?

• Cat 5
• Cat 4
• Cat 5e (Correct answer)
• Cat 3

Correct answer: Cat 5e

Cat 5e (Category 5 enhanced) cable supports Gigabit Ethernet (1000BASE-T) at distances up to 100 meters, with improved specifications over standard Cat 5.

Question 18: Which wireless network standard introduced MIMO (Multiple Input, Multiple Output) technology?

• 802.11g
• 802.11a
• 802.11b
• 802.11n (Correct answer)

Correct answer: 802.11n

IEEE 802.11n introduced MIMO technology, which uses multiple antennas to transmit and receive data simultaneously, significantly increasing throughput and range.

Question 19: How many usable host addresses are available in a /28 subnet?

• 30
• 14 (Correct answer)
• 16
• 32

Correct answer: 14

A /28 subnet has 2^4 = 16 addresses, minus 2 (network and broadcast) = 14 usable hosts.

Question 20: What is the primary benefit of using a ticketing system to manage network support requests?

• It automatically resolves common network issues without technician input
• It replaces the need for verbal communication between technicians
• It allows clients to directly modify network configurations
• It provides accountability, traceability, and workload visibility for support teams (Correct answer)

Correct answer: It provides accountability, traceability, and workload visibility for support teams

Ticketing systems create an auditable record of requests, responses, and resolutions, improving accountability and team coordination.

Question 21: An administrator needs to divide a 192.168.1.0/24 network into at least 6 subnets. What is the minimum prefix length required?

• /27 (Correct answer)
• /25
• /28
• /26

Correct answer: /27

A /27 borrows 3 bits from the host portion, creating 2^3 = 8 subnets, which meets the requirement of at least 6.

Question 22: What does a DMZ (Demilitarized Zone) represent in network architecture?

• A network segment between the internet and internal network for hosting public-facing services (Correct answer)
• A completely isolated internal network segment
• A backup network for disaster recovery
• A wireless-only network zone

Correct answer: A network segment between the internet and internal network for hosting public-facing services

A DMZ is a network segment that sits between the internet and the internal corporate network, used to host public-facing servers like web and email servers while protecting internal resources.

Question 23: Which type of fiber optic cable is designed for long-distance transmission and uses a single light path?

• Multimode fiber
• Plastic optical fiber
• Single-mode fiber (Correct answer)
• Coaxial fiber

Correct answer: Single-mode fiber

Single-mode fiber has a smaller core diameter that allows only one light path, enabling transmission over much greater distances with less signal loss than multimode fiber.

Question 24: How should an Microsoft Networking Essentials Exam professional approach a novel situation not covered by standard procedures?

• Refuse to proceed
• Apply foundational principles, assess risks, consult resources, and document the rationale for decisions (Correct answer)
• Improvise without documentation
• Follow the closest standard procedure exactly

Correct answer: Apply foundational principles, assess risks, consult resources, and document the rationale for decisions

This is fundamental to Microsoft Networking Essentials Exam practice. Apply foundational principles, assess risks, consult resources, and document the rationale for decisions represents the professional standard for practical in the Microsoft Networking Essentials Exam certification framework.

Question 25: Which protocol automatically assigns IP addresses to hosts on a network?

• DHCP (Correct answer)
• DNS
• ARP
• ICMP

Correct answer: DHCP

DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, gateways, and DNS info to clients.

Question 26: What is the default subnet mask for a Class B IP address?

• 255.0.0.0
• 255.255.0.0 (Correct answer)
• 255.255.255.128
• 255.255.255.0

Correct answer: 255.255.0.0

Class B addresses use a default subnet mask of 255.255.0.0, providing 65,534 usable host addresses per network.

Question 27: What is the primary purpose of a patch panel in a network infrastructure?

• Amplify network signals
• Provide a central point for organizing and connecting network cables (Correct answer)
• Assign IP addresses to devices
• Route traffic between VLANs

Correct answer: Provide a central point for organizing and connecting network cables

A patch panel provides a centralized, organized termination point for network cabling, making it easier to manage and reconfigure network connections in a data closet.

Question 28: What does CIDR stand for in networking?

• Class-Independent Data Routing
• Classless Inter-Domain Routing (Correct answer)
• Centralized IP Data Routing
• Common Internet Data Relay

Correct answer: Classless Inter-Domain Routing

CIDR stands for Classless Inter-Domain Routing and allows flexible allocation of IP address blocks using prefix notation.

Question 29: Which regulation requires US public companies to maintain internal controls over financial reporting and have executives certify the accuracy of financial statements?

• FISMA
• SOX Section 302 and 404 (Correct answer)
• FCPA
• GLBA

Correct answer: SOX Section 302 and 404

SOX Sections 302 and 404 require executives to certify financial statements and mandate management assessment of internal controls over financial reporting.

Question 30: A company conducts an annual review of its risk management plan to account for new technologies and emerging threats. This demonstrates which risk management practice?

• Vulnerability disclosure
• One-time risk assessment
• Continuous risk monitoring (Correct answer)
• Risk transference

Correct answer: Continuous risk monitoring

Continuous risk monitoring ensures the risk posture stays current as the threat landscape and business environment evolve.

Question 31: What is the function of a repeater in a network?

• Amplify and regenerate signals to extend network range (Correct answer)
• Assign IP addresses
• Filter network traffic
• Connect different network types

Correct answer: Amplify and regenerate signals to extend network range

A repeater amplifies or regenerates network signals to extend the maximum distance a signal can travel without degradation.

Question 32: Which of the following IPv4 addresses is a Class A private address?

• 192.169.0.1
• 10.200.50.1 (Correct answer)
• 172.32.0.1
• 169.254.1.1

Correct answer: 10.200.50.1

RFC 1918 defines 10.0.0.0/8 as the Class A private range; 10.200.50.1 falls within it.

Question 33: What layer of the Open Systems Interconnection (OSI) model specifies the network's medium, interfaces, hardware for connecting devices, and signaling techniques?

• Transport
• Data-link
• Network
• Physical (Correct answer)

Correct answer: Physical

The Physical layer (Layer 1) is the lowest layer of the OSI model and deals with the physical aspects of network communication. It defines the electrical, mechanical, procedural, and functional specifications for activating, maintaining, and deactivating the physical link between network devices. This includes specifying the type of cabling, connectors, voltage levels, and signaling methods used to transmit raw bits.

Question 34: Which behavior most undermines trust in a network administrator's stakeholder communications?

• Providing estimated resolution times that are sometimes revised
• Sending brief initial notifications before a full investigation is complete
• Downplaying the severity of an outage to avoid alarming stakeholders, later revealing it was worse than stated (Correct answer)
• Using plain language instead of technical terms

Correct answer: Downplaying the severity of an outage to avoid alarming stakeholders, later revealing it was worse than stated

Downplaying severity damages credibility because stakeholders feel misled when the true impact becomes clear later.

Question 35: What is the purpose of PoE (Power over Ethernet)?

• Connect devices across different network segments
• Increase Ethernet cable speed
• Encrypt data over Ethernet
• Deliver electrical power through Ethernet cables to devices (Correct answer)

Correct answer: Deliver electrical power through Ethernet cables to devices

PoE (Power over Ethernet) delivers electrical power along with data through standard Ethernet cabling, eliminating the need for separate power supplies for devices like IP phones and wireless access points.

Question 36: Which address range is used by APIPA (Automatic Private IP Addressing) when a DHCP server is unreachable?

• 10.0.0.0/8
• 192.168.0.0/16
• 169.254.0.0/16 (Correct answer)
• 172.16.0.0/12

Correct answer: 169.254.0.0/16

APIPA assigns addresses in the 169.254.0.0/16 range when a DHCP server cannot be contacted.

Question 37: To communicate over the network, a client device on an Ethernet segment requires an IP address. On the network, a DHCP server with the IP address 192.168.1.1 has been set up and activated. How can a client device get an IP address that works on this network?

• Send a DHCPREQUEST packet to IP address 255.255.255.255.
• Send a DHCPACK packet to the default gateway address
• Send a DHCPDISCOVER message to physical address FF-FF-FF-FF-FF-FF.
• Use a statically configured IP address from the pool of IP addresses that is offered by the DHCP server.

When a client device needs an IP address from a DHCP server, it initiates the process by sending a DHCPDISCOVER message. This message is broadcast at both the MAC layer (using FF-FF-FF-FF-FF-FF) and the IP layer (using 255.255.255.255) to ensure that any DHCP server on the local network segment receives it. This broadcast allows the client to find a DHCP server without knowing its specific IP address beforehand.

Question 38: Which class of IPv4 address uses the range 192.168.0.0 to 192.168.255.255 as private address space?

• Class D
• Class C (Correct answer)
• Class A
• Class B

Correct answer: Class C

Class C private addresses fall in the range 192.168.0.0–192.168.255.255, as defined by RFC 1918.

Question 39: What type of firewall inspects the state of active connections and makes filtering decisions based on context?

• Packet filter
• Application proxy
• Circuit-level gateway
• Stateful inspection firewall (Correct answer)

Correct answer: Stateful inspection firewall

A stateful inspection firewall tracks the state of network connections and allows or blocks packets based on their context within an established session.

Question 40: What is the maximum cable length for a standard Cat 5e Ethernet (100BASE-TX) run?

• 100 meters (Correct answer)
• 150 meters
• 200 meters
• 50 meters

Correct answer: 100 meters

The maximum recommended cable length for Cat 5e Ethernet (100BASE-TX) is 100 meters (328 feet) to ensure reliable signal quality.

Question 41: Given the IP address 172.16.50.100/20, what is the network address?

• 172.16.48.0 (Correct answer)
• 172.16.32.0
• 172.16.64.0
• 172.16.50.0

Correct answer: 172.16.48.0

With a /20 mask, the third octet block size is 16; 50 falls in the 48–63 block, so the network address is 172.16.48.0.

Question 42: What is the total number of possible IPv4 addresses?

• About 340 undecillion
• About 43 million
• About 4.3 billion (Correct answer)
• About 4.3 million

Correct answer: About 4.3 billion

IPv4 uses 32-bit addresses, providing 2^32 = approximately 4.29 billion total addresses.

Question 43: A user reports they can ping 127.0.0.1 but cannot ping their default gateway. What does this most likely indicate?

• DNS is not resolving names
• The TCP/IP stack is corrupt
• The network cable or physical layer connection has a problem (Correct answer)
• The firewall is blocking ICMP entirely

Correct answer: The network cable or physical layer connection has a problem

Successfully pinging 127.0.0.1 confirms the local TCP/IP stack is functional, so the failure to reach the gateway points to a physical connectivity issue such as a bad cable or disconnected switch port.

Question 44: A network has grown and performance has degraded due to collisions. All devices are connected via hubs. What is the best upgrade path?

• Replace hubs with switches (Correct answer)
• Add more hubs to distribute load
• Upgrade to Category 3 cabling
• Enable half-duplex on all ports

Correct answer: Replace hubs with switches

Switches create dedicated collision domains per port, eliminating collisions that occur in hub-based shared media networks.

Question 45: A network administrator uses Microsoft's Message Analyzer to find evidence of a DNS resolution problem. Which packet filter would best isolate the relevant traffic?

• icmp
• arp
• tcp.port == 80
• udp.port == 53 or tcp.port == 53 (Correct answer)

Correct answer: udp.port == 53 or tcp.port == 53

DNS operates on port 53 using both UDP (standard queries) and TCP (zone transfers and large responses), so filtering on port 53 for both protocols isolates DNS traffic.