Microsoft Networking Essentials Exam Case Studies & Practical Application 2 — Questions and Answers
Question 1: A company's remote workers report they can access internal file shares but cannot browse the internet while connected to the VPN. What is the most likely cause?
- Split tunneling is disabled, forcing all traffic through the VPN (Correct answer)
- The VPN client is outdated
- DNS is not configured on the VPN server
- The firewall is blocking HTTPS traffic
Correct answer: Split tunneling is disabled, forcing all traffic through the VPN
When split tunneling is disabled, all traffic routes through the VPN tunnel, which may not have internet access configured.
Question 2: A network technician notices that a new switch port shows as 'err-disabled' after connecting a workstation. What is the most probable cause?
- The cable is too long
- Port security detected a MAC address violation (Correct answer)
- The switch needs a firmware update
- The workstation NIC is faulty
Correct answer: Port security detected a MAC address violation
Err-disabled status is commonly triggered by port security when an unauthorized MAC address is detected on a secured port.
Question 3: Users on VLAN 10 cannot communicate with users on VLAN 20 even though both VLANs are configured on the switch. What device or feature is needed?
- A second switch
- Inter-VLAN routing via a router or Layer 3 switch (Correct answer)
- A DHCP server
- A wireless access point
Correct answer: Inter-VLAN routing via a router or Layer 3 switch
VLANs segment traffic at Layer 2, so a Layer 3 device is required to route traffic between different VLANs.
Question 4: A company wants to ensure that only corporate laptops can connect to their Wi-Fi network. Which technology should they implement?
- WPA2-Personal with a complex passphrase
- MAC address filtering alone
- 802.1X authentication with certificates (Correct answer)
- Hiding the SSID
Correct answer: 802.1X authentication with certificates
802.1X with certificate-based authentication ensures only managed devices with valid certificates can authenticate to the network.
Question 5: After a power outage, users report they cannot connect to network resources by hostname but can connect using IP addresses. What service has failed?
- DHCP
- DNS (Correct answer)
- Active Directory
- WINS
Correct answer: DNS
DNS translates hostnames to IP addresses; if DNS is down, name resolution fails while direct IP access still works.
Question 6: A technician captures network traffic and observes large amounts of broadcast traffic consuming 40% of bandwidth. What is the best solution?
- Replace all switches with hubs
- Implement VLANs to segment the broadcast domain (Correct answer)
- Upgrade to faster network cables
- Add more DHCP servers
Correct answer: Implement VLANs to segment the broadcast domain
VLANs create separate broadcast domains, reducing the scope and impact of broadcast traffic.
Question 7: A small office has one public IP address from their ISP. All internal devices need internet access. Which technology allows this?
- Static routing
- Network Address Translation (NAT) (Correct answer)
- VLAN tagging
- Spanning Tree Protocol
Correct answer: Network Address Translation (NAT)
NAT allows multiple internal devices with private IP addresses to share a single public IP address for internet access.
A company's remote workers report they can access internal file shares but cannot browse the internet while connected to the VPN.
What is the most likely cause?