Microsoft Networking Essentials Exam Research & Evidence-Based Practice 2 — Questions and Answers
Question 1: When troubleshooting a network connectivity issue, which evidence-based first step is recommended before making any configuration changes?
- Reboot all network devices immediately
- Document the current network state and gather baseline data (Correct answer)
- Replace the suspected faulty hardware
- Escalate to the vendor without investigation
Correct answer: Document the current network state and gather baseline data
Documenting current state and gathering baseline data ensures you have evidence to compare against after changes, following a structured troubleshooting methodology.
Question 2: Which Microsoft tool is primarily used to collect and analyze network performance data as evidence for capacity planning?
- Task Manager
- Performance Monitor (PerfMon) (Correct answer)
- Device Manager
- Registry Editor
Correct answer: Performance Monitor (PerfMon)
Performance Monitor collects detailed counters and logs over time, providing the empirical data needed for evidence-based network capacity planning.
Question 3: A network administrator notices intermittent packet loss. Which approach best represents evidence-based troubleshooting?
- Replace all cables immediately
- Capture packet traces with Wireshark to identify the loss pattern (Correct answer)
- Assume the ISP is at fault
- Disable QoS settings network-wide
Correct answer: Capture packet traces with Wireshark to identify the loss pattern
Capturing packet traces provides objective data about where and when packet loss occurs, enabling targeted remediation based on actual evidence.
Question 4: What is the purpose of reviewing RFCs (Request for Comments) when implementing a new network protocol?
- To find marketing materials about the protocol
- To understand the authoritative technical specification and expected behavior (Correct answer)
- To obtain Microsoft licensing information
- To check hardware compatibility lists
Correct answer: To understand the authoritative technical specification and expected behavior
RFCs are the authoritative standards documents that define how protocols should behave, making them essential evidence-based references for correct implementation.
Question 5: Which practice best supports evidence-based network management when responding to a security incident?
- Immediately shut down all systems
- Preserve logs and forensic evidence before making changes (Correct answer)
- Wipe affected systems right away
- Notify users before containing the threat
Correct answer: Preserve logs and forensic evidence before making changes
Preserving logs and forensic evidence first ensures you have data to understand the incident scope and prevent recurrence based on factual analysis.
Question 6: When comparing two network switch configurations, which method provides the most reliable evidence for a performance difference?
- User subjective feedback alone
- A/B testing with controlled benchmarks and documented metrics (Correct answer)
- Vendor marketing materials
- Visual inspection of the hardware
Correct answer: A/B testing with controlled benchmarks and documented metrics
Controlled A/B benchmarking with documented metrics isolates variables and produces reproducible, objective evidence for comparing configurations.
Question 7: A technician wants to validate that a new VLAN configuration meets company policy. Which document type serves as the primary evidence-based reference?
- The technician's personal notes
- The official network design specification and security policy (Correct answer)
- A blog post about VLANs
- The switch's default factory settings
Correct answer: The official network design specification and security policy
Official network design specifications and security policies are the authoritative documents against which configurations should be validated.
Microsoft Networking Essentials Exam Research & Evidence-Based Practice 2
When troubleshooting a network connectivity issue, which evidence-based first step is recommended before making any configuration changes?