01. The online ordering site for a farm supply store is flooded with bogus requests and stays offline for three hours. No customer data is stolen or changed. Which property of the CIA triad was compromised?
a) Non-repudiation (a sender cannot deny sending)
b) Confidentiality (data is hidden from unauthorized people)
c) Integrity (data is not changed without authorization)
d) Availability (authorized users can reach the service when needed)
02. While a teller at a credit union types her password, a person waiting in line watches her keyboard and later signs in with that password. Which attack is this?
a) Shoulder surfing
b) Sniffing traffic on the network
c) Dumpster diving for printouts
d) Tailgating
03. Staff at a dental practice report that laptops on the 2.4 GHz Wi-Fi network lose their connection at certain times of day. The technician lists the equipment near the front desk as possible sources of radio interference.
Which two sources commonly interfere with 2.4 GHz Wi-Fi?
(Choose two.)
a) Fiber-optic cable runs above the ceiling
b) Bluetooth headsets
c) LED status lights blinking on the wiring closet switches
d) A microwave oven running in the break room
e) Nearby access points transmitting only in the 5 GHz band
04. Logs on a fitness club's member web portal show thousands of sign-in attempts against a few accounts, each attempt trying a different password.
Which control most directly defeats this attack?
a) Lengthen the DHCP lease time on the portal's web server
b) Hide the club's Wi-Fi SSID
c) Turn off failed sign-in logging on the portal server
d) Lock an account after repeated failed sign-ins
05. Ransomware has encrypted the file server at a small architecture firm. The firm has two backups: a network backup share that was mapped as a writable drive on the file server during the attack, and a weekly copy on a USB drive that is disconnected and stored in a safe.
Which recovery path is most likely to restore the data without paying the ransom?
a) Pay the ransom, since the attacker will send a working key
b) Restore from the mapped backup share, because it holds the newest copy of the files
c) Restore from the offline USB backup drive, because the ransomware had no path to reach it
d) Run a full antivirus scan to decrypt the files
06. At a hotel, the booking web server at 10.10.5.20 replies normally when the front desk PC pings it, but the booking website will not load in the browser.
What does the successful ping prove?
a) Only that the server is reachable with ICMP
b) That DNS resolved the name correctly
c) That the web service on TCP 443 is open and listening
d) That the booking website is running and should load
07. During an inventory at an animal shelter, a technician finds an old hub still connecting three office PCs.
Which two statements describe how that hub works?
(Choose two.)
a) It repeats every incoming signal out all of its other ports without reading MAC addresses
b) All of its ports share a single collision domain, so devices must use half duplex
c) It routes packets between IP subnets
d) It learns MAC addresses to forward frames
e) Each of its ports is its own collision domain
08. Six PCs in a school computer lab lost network access at the same time. After gathering information, the technician establishes a theory that one failed port on the lab's access switch is the cause.
According to a standard troubleshooting methodology, what should the technician do next?
a) Document the findings and the outcome in the ticket
b) Escalate the issue to a senior network engineer
c) Plan and implement the fix by replacing the switch
d) Test the theory to confirm the cause
09. In a public library, switch port Gi0/3 is documented as a wall jack for one catalog PC. The technician runs show mac address-table:
10 0011.2233.4401 DYNAMIC Gi0/3
10 0011.2233.4402 DYNAMIC Gi0/3
10 0011.2233.4403 DYNAMIC Gi0/3
10 0011.2233.4404 DYNAMIC Gi0/3
10 00aa.bb01.0005 DYNAMIC Gi0/4
What is the most likely explanation for the entries on Gi0/3?
a) Gi0/3 is configured as a console port
b) The catalog PC is spoofing several MAC addresses to hide its real identity on the network
c) A small switch or access point has been connected to that jack
d) A duplex mismatch on Gi0/3 is creating duplicate MAC entries in the table
10. Members of a coworking space join and leave every week. The manager wants each person to sign in to the Wi-Fi with their own username and password, and to cut off one departing member without changing anything for everyone else.
Which wireless security configuration meets these requirements?
a) MAC filtering on the access point
b) WPA2-Personal with a long passphrase that is changed monthly
c) A hidden SSID known only to current staff members
d) WPA3-Enterprise with 802.1X and a RADIUS server