Microsoft Networking Essentials Exam Case Studies & Practical Application 4 — Questions and Answers
Question 1: A company has offices in New York and London that need to securely share resources over the internet. What is the best solution?
- Dedicated leased line between offices
- Site-to-site VPN over the internet (Correct answer)
- Public FTP server
- Email file sharing
Correct answer: Site-to-site VPN over the internet
A site-to-site VPN creates an encrypted tunnel over the internet, securely connecting both office networks.
Question 2: After adding a new printer to the network, users can print from the same subnet but not from other subnets. What is the likely issue?
- The printer's IP address is invalid
- No route exists between subnets or a firewall is blocking printer ports (Correct answer)
- The printer driver is incorrect
- The printer is connected to the wrong VLAN trunk
Correct answer: No route exists between subnets or a firewall is blocking printer ports
Cross-subnet printer access requires proper routing and firewall rules to allow printing protocols between network segments.
Question 3: A network administrator needs to provide internet access to guest users without exposing the corporate network. What is the best approach?
- Give guests the Wi-Fi password for the corporate network
- Create a separate guest VLAN with internet-only access and firewall isolation (Correct answer)
- Set up a second ISP connection
- Use MAC filtering on the corporate SSID
Correct answer: Create a separate guest VLAN with internet-only access and firewall isolation
A guest VLAN with firewall rules provides internet access to visitors while isolating them from internal corporate resources.
Question 4: A company's email server blacklisted because it is sending spam. Investigation reveals a compromised workstation. What should be done first?
- Change the email server's IP address
- Isolate the compromised workstation from the network immediately (Correct answer)
- Restart the email server
- Update the spam filter
Correct answer: Isolate the compromised workstation from the network immediately
Isolating the compromised workstation stops the spam flood and prevents further damage while remediation occurs.
Question 5: A technician needs to determine what IP address a specific hostname resolves to. Which command-line tool should be used?
- ping
- nslookup or dig (Correct answer)
- tracert
- netstat
Correct answer: nslookup or dig
nslookup and dig are DNS query tools that resolve hostnames to IP addresses and provide DNS record details.
Question 6: A network has grown and performance has degraded due to collisions. All devices are connected via hubs. What is the best upgrade path?
- Replace hubs with switches (Correct answer)
- Add more hubs to distribute load
- Upgrade to Category 3 cabling
- Enable half-duplex on all ports
Correct answer: Replace hubs with switches
Switches create dedicated collision domains per port, eliminating collisions that occur in hub-based shared media networks.
Question 7: An organization wants to monitor all traffic entering and leaving their network for security analysis. Where should a network tap or SPAN port be configured?
- On each end-user workstation
- At the network perimeter on the core switch or router (Correct answer)
- On the DHCP server
- On the wireless access points only
Correct answer: At the network perimeter on the core switch or router
Monitoring at the network perimeter captures all inbound and outbound traffic in a single location for comprehensive analysis.
Microsoft Networking Essentials Exam Case Studies & Practical Application 4
A company has offices in New York and London that need to securely share resources over the internet.
What is the best solution?