⚡ CompTIA Network+ PBQ 1: VLSM Subnet Allocation & Hierarch…
⚡ CompTIA Network+ PBQ 1: VLSM Subnet Allocation & Hierarchy Design An enterprise is allocated base address block 192.168.100.0/24. You are tasked with designing a non-overlapping Variable Length Subnet Masking (VLSM) scheme supporting four departmental networks, ordered by host requirements from largest to smallest: 1. Sales Subnet: Requires 60 host addresses 2. IT Support Subnet: Requires 28 host addresses 3. VoIP Subnet: Requires 12 host addresses 4. WAN Point-to-Point Link: Dedicated routed link between core routers (2 hosts) Allocate each subnet by selecting the smallest viable CIDR prefix, Network ID, and Directed Broadcast IP: Sales Subnet (60 hosts): – CIDR Mask: [pbq1_s1_cidr] – Network ID: [pbq1_s1_net] – Directed Broadcast: [pbq1_s1_bcast] IT Support Subnet (28 hosts): – CIDR Mask: [pbq1_s2_cidr] – Network ID: [pbq1_s2_net] – Directed Broadcast: [pbq1_s2_bcast] VoIP Subnet (12 hosts): – CIDR Mask: [pbq1_s3_cidr] – Network ID: [pbq1_s3_net] – Directed Broadcast: [pbq1_s3_bcast] WAN Point-to-Point Link (2 hosts): – CIDR Mask: [pbq1_s4_cidr] – Network ID: [pbq1_s4_net] – Directed Broadcast: [pbq1_s4_bcast]
Read Details⚡ CompTIA Network+ PBQ 3: Switch Port & 802.1Q VLAN Assignm…
⚡ CompTIA Network+ PBQ 3: Switch Port & 802.1Q VLAN Assignment Matrix You are configuring a 24-port Layer 2 distribution switch connected to workstations, an auxiliary access switch, and a core router using Router-on-a-Stick. The network uses VLAN 10 (Finance), VLAN 20 (Engineering), and VLAN 99 (Management / Native VLAN). Configure the switch ports: Port Gi0/1 (Uplink to Core Router): – Operational Mode: [pbq3_p1_mode] – Allowed VLANs: [pbq3_p1_vlan] – Native VLAN: [pbq3_p1_native] Port Gi0/2 (Uplink to Auxiliary Switch IDF-2): – Operational Mode: [pbq3_p2_mode] – Allowed VLANs: [pbq3_p2_vlan] – Trunking Encapsulation: [pbq3_p2_proto] Ports Fa0/1 – Fa0/10 (Finance Workstations): – Operational Mode: [pbq3_p3_mode] – Access VLAN ID: [pbq3_p3_vlan] – STP / Security Feature: [pbq3_p3_sec] Ports Fa0/11 – Fa0/20 (Engineering Workstations): – Operational Mode: [pbq3_p4_mode] – Access VLAN ID: [pbq3_p4_vlan] – STP / Security Feature: [pbq3_p4_sec]
Read Details⚡ CompTIA Network+ PBQ 5: Firewall Access Control List (ACL…
⚡ CompTIA Network+ PBQ 5: Firewall Access Control List (ACL) Hardening You must harden an enterprise perimeter firewall protecting three security zones: Outside (Internet), DMZ (192.168.50.0/24), and Internal LAN (10.10.0.0/16). Security policy mandates: 1. Permit inbound Internet traffic to access the DMZ Web Server (192.168.50.10) exclusively over encrypted HTTPS. 2. Permit the internal IT Admin subnet (10.10.100.0/24) to manage DMZ appliances exclusively over encrypted SSH. 3. Explicitly deny and log legacy unencrypted cleartext protocols (Telnet and HTTP) from all sources. 4. Enforce the principle of least privilege with a default termination rule. Configure the Access Control List (ACL) rules: Rule 10 (Public Web Traffic): – Action: [pbq5_r1_act] – Destination IP: [pbq5_r1_dst] – Destination Port: [pbq5_r1_port] Rule 20 (Secure IT Administration): – Action: [pbq5_r2_act] – Destination IP: [pbq5_r2_dst] – Destination Port: [pbq5_r2_port] Rule 30 (Block Legacy Cleartext Traffic): – Action: [pbq5_r3_act] – Blocked Destination Ports: [pbq5_r3_port] – Intent Description: [pbq5_r3_desc] Rule 999 (Default Posture): – Action: [pbq5_r4_act] – Source: [pbq5_r4_src] – Destination: [pbq5_r4_dst]
Read DetailsAn enterprise migration plan mandates that internal file and…
An enterprise migration plan mandates that internal file and database servers must use non-routable private IPv6 addresses that route across internal corporate subnets and WAN sites, but are guaranteed never to route across the public Internet. Which IPv6 prefix must be assigned?
Read Details