Microsoft Networking Essentials Exam Microsoft Networking Essentials: Final Course 3 — Questions and Answers
Question 1: Which wireless security protocol replaced WPA2 and offers stronger encryption including SAE (Simultaneous Authentication of Equals)?
- WEP
- WPA
- WPA3 (Correct answer)
- TKIP
Correct answer: WPA3
WPA3 introduced SAE to replace the PSK handshake, providing stronger protection against offline dictionary attacks.
Question 2: A router receives a packet destined for 10.0.5.200. Its routing table has entries for 10.0.0.0/8, 10.0.5.0/24, and a default route. Which route does it use?
- 10.0.0.0/8
- Default route
- 10.0.5.0/24 (Correct answer)
- It drops the packet
Correct answer: 10.0.5.0/24
Routers use the longest prefix match; 10.0.5.0/24 is more specific than 10.0.0.0/8 and matches 10.0.5.200.
Question 3: Which protocol operates at Layer 3 and is used by routers to report error conditions and diagnostic information?
- ARP
- ICMP (Correct answer)
- UDP
- SNMP
Correct answer: ICMP
ICMP (Internet Control Message Protocol) is a Layer 3 protocol used to send error messages and operational information, including ping and traceroute.
Question 4: What type of DNS record maps a hostname to an IPv6 address?
- A
- AAAA (Correct answer)
- PTR
- CNAME
Correct answer: AAAA
The AAAA record (quad-A) maps a hostname to a 128-bit IPv6 address, while the A record maps to an IPv4 address.
Question 5: Which technology allows multiple VLANs to share a single physical uplink between a switch and a router, enabling inter-VLAN routing?
- Router-on-a-stick (Correct answer)
- Port aggregation
- VLAN Trunking Protocol
- Proxy ARP
Correct answer: Router-on-a-stick
Router-on-a-stick uses 802.1Q trunk subinterfaces on a router to route traffic between VLANs over a single physical link.
Question 6: A company uses IPsec in tunnel mode. What does tunnel mode do compared to transport mode?
- Encrypts only the payload
- Encapsulates the entire original IP packet with a new IP header (Correct answer)
- Only authenticates the packet header
- Uses UDP instead of TCP
Correct answer: Encapsulates the entire original IP packet with a new IP header
IPsec tunnel mode encapsulates the entire original IP packet (header + payload) within a new IP packet, which is common for VPN gateways.
Question 7: Which DHCP message does a client send to confirm acceptance of an offered IP address from a DHCP server?
- DHCPDISCOVER
- DHCPOFFER
- DHCPREQUEST (Correct answer)
- DHCPACK
Correct answer: DHCPREQUEST
After receiving a DHCPOFFER, the client broadcasts a DHCPREQUEST to indicate it accepts the offered address.
Microsoft Networking Essentials Exam Microsoft Networking Essentials: Final Course 3
Which wireless security protocol replaced WPA2 and offers stronger encryption including SAE (Simultaneous Authentication of Equals)?