TestOut Labs Practice Test

These questions are part of the practice quiz. Start practicing

• Which Learning Mode is set on the GE1 port for Port Security?
• Which IP address is specified in the MgtAccess profile rule for allowing management from a specific host?
• Which username is created in pfSense with group membership admins?
• What is NAT, and what is the difference between NAT and PAT?
• For the iPad Secure Email lab, what setting enables SSL for incoming mail?
• On the iPad, which setting turns on the Fraudulent Website Warning?
• What is the effect of adding a permit any statement to Access List 11?
• Which command blocks the hosts 199.68.111.199, 202.177.9.1, and 211.55.67.11 using Standard Access List 25?
• In File History backup configuration, which drive is used as the target for automatic backups?
• Define VLAN trunking and the purpose of 802.1Q tagging.
• During Active Directory setup, which combination of group scope and group type should you select when creating a group to manage access control lists?
• Which of the following is an example of Software as a Service (SaaS)?
• What is the Output Stego File name specified in the OpenStego lab?
• What is the passcode configured on the iPad in the lab?
• Which email exemplifies a whaling social engineering attempt?
• Name two common Windows event log sources you would check for troubleshooting: System and Application. What kind of information would you look for?
• With a subnet mask of 255.255.255.0, which portion of an IPv4 address is the host portion?
• What is DHCP and what is one advantage of using it on a large network?
• Which policy area was remediated in the Default Domain Policy during vulnerability remediation?
• When logging into the Ruckus wireless access controller console, what credentials are used for the initial login?
• Which statement best describes IPAM's role in network management?
• What is the correct order of the seven layers of the OSI model from bottom to top?
• What is the encryption method for the Guest WLAN?
• Which subnet is listed as restricted for guest access?
• Which command copies the running configuration to the startup configuration?
• Which BitLocker encryption mode is selected in this lab?
• Which IP addresses are included in the HighBW alias for high bandwidth users?
• What is the purpose of subnetting in IP networks?
• Describe the difference between a switch and a router and provide a scenario for each.
• Which command would you use to search for a file by name starting from a specified path?
• What is NAT in the context of a router and how does it help with IPv4 address conservation?
• Which of the following correctly matches IaaS, PaaS, and SaaS with a representative example?
• What is Remote Desktop and what security considerations should you apply when enabling it?
• What is the name of the Guest WLAN created for BYOD?
• What is the primary function of a firewall?
• If you have a /24 network 10.0.0.0/24, how many usable hosts are available and what is the maximum number of subnets you can create using a /28 subnetting within that /24?
• Convert the CIDR notation 192.168.10.0/26 to determine its first usable IP, last usable IP, and the broadcast address.
• Which statement describes which package manager is typically used on Debian-based distributions?
• Which statement best describes event IDs in Windows event logs?
• How do you revert a revoked certificate back to valid status for CorpDev3?
• In the Smart Card Authentication lab, which GPO setting is used to enforce the policies across the linked Research-Dev OU?
• Which command is used to set a password for a Linux user?
• Which of the following is a listed VPN user account username?
• After remediation, what should you do to confirm all issues are resolved?
• What is the logon name for Juan Suarez, given the policy to use first initial + last name and append the domain CorpNet.local?
• How long can you defer a feature update in Windows Update Advanced options?
• Which username is used to sign in to the pfSense management console in these labs?
• What is the result of disabling inheritance and converting inherited permissions to explicit permissions on an NTFS folder?
• Which two steps are required to stop inheriting permissions from the parent for the Personnel folder?
• What Auto-Lock duration was set on the iPad?
• To access the Protection updates page for threat definitions, which option is the correct path?
• In a vulnerable ARP poisoning lab, which IP address is used to help determine poisoning?
• What is virtualization, and why is it beneficial in IT labs or data centers?
• After encryption completes, how can you verify that BitLocker is enabled on the System (C:) drive?
• In the email filtering lab, which option blocks content from unknown senders by blocking attachments, pictures, and links?
• Where is the known hash for the original file stored in the lab?
• Which statement about the default gateway is correct?
• Which protocol is typically used for streaming media due to low overhead and tolerance for packet loss?
• Which VM is configured to use dynamic memory?
• What port/protocol combination is used for the DNS block/allow rules in pfBlockerNG?
• Which statement best describes best practice for broadcast SSID in a corporate wireless network?
• For groups intended to include all users in an OU and its sub-OUs, which group scope should be used?
• Which setting must be enabled to report rogue devices on the wireless access controller?
• What TCP port is used by HTTPS and why is TLS important?
• Which statement describes local versus domain user accounts in Windows?
• Which command sequence creates an MD5 rainbow table using ascii-32-95 and sorts it?
• To run a vulnerability evaluation for the wireless access controller at 192.168.0.6, which steps are required?
• Within the Sales OU, which OUs should be created?
• Differentiate between a System Restore point and a full backup in Windows, and when you would use each.
• Which package manager is typically used on Red Hat-based distributions?
• Which statement differentiates symmetric and asymmetric encryption?
• Which action revokes a certificate for a user due to compromise?
• Which statement accurately describes the function of a subnet mask and what 255.255.255.0 indicates?
• Which statement about VLANs is true in terms of traffic management?
• Where should the new password hash be stored after changing a user's password on a Linux system?
• In the BYOD guest access setup, what is the ESSID of the guest WLAN?
• Where do you access junk email filters and reporting in the WebEmail interface?
• Name two common wireless frequencies and discuss their typical use cases.
• In the BYOD Guest Access lab, which isolation setting prevents guest clients from communicating with other clients on the same access point?
• Which path allows restricting a user's logon to specific computers?
• Which command shows all supplementary groups for a user?
• In the Advanced Audit Policy lab, which Local Policy setting forces audit policy subcategory settings to override audit policy category settings?
• Which BIOS action must be performed to enable BitLocker on the OS drive in this lab?
• Which command creates a new group named eastern_sales_division?
• Describe what a VLAN is and one benefit of using VLANs in an enterprise network.
• In the Local Security Policy lab, how many incorrect password attempts trigger an account lockout?
• What description was used for the firewall rule that allows DMZ traffic to any destination?
• Which sequence adds a file exclusion for D:\Graphics\cat.jpg in Windows Defender?
• In the John the Ripper workflow, where is the cracked password for the root account first revealed?
• How should unknown networks be added on the iPad as per the lab?
• What is the DNS Client service and what happens if it is disabled?
• In the Kerberos policy, what is the maximum lifetime for a user ticket?
• What is the initial password used when creating new domain user accounts?
• What is the purpose of a broadcast domain in a network?
• In the WLAN configuration, what is the ESSID value?
• During the lab, what should you select for the junk email filter to enforce exclusive handling?
• Name two common Windows command-line tools used for troubleshooting and what they do?
• Which statement best describes the performance and use of symmetric encryption such as AES?
• Which command initiates a password change on a Linux system?
• In the DMZ firewall rule, which source network was used when duplicating the LAN rule?
• What URL path is used to request the guest password in the lab?
• Explain the NTFS permissions model and the difference between DACL and SACL.
• Snort was assigned to monitor which interface in pfSense?
• What is the purpose of a SACL in NTFS permissions?
• The default gateway is typically which network device?
• To which location should the BitLocker recovery key be backed up in this lab?
• Which statement about containerization is true?
• Which command sequence correctly applies the MAC-Based ACE Table to VTY lines 0-4?
• Which Wi‑Fi frequency is more prone to interference in crowded environments?
• Which OU path should Juan Suarez be placed in based on his Marketing Manager role?
• Which statement describes the role of 802.1Q tagging in Ethernet networks?
• Which statement best describes the differences between TCP and UDP and their typical use cases?
• What is containerization and how does it differ from virtualization?
• What is the configured Maximum Password Age in days in the Local Security Policy lab?
• In IPv6, what is the purpose of link-local addresses and what prefix do they typically begin with?
• Which entry correctly represents the first ACE of the GameConsoles MAC-based ACL (Destination MAC 00041F111111, Mask 000000111111)?
• In Active Directory, Local Groups serve what purpose?
• Which command sets a user's supplementary groups, effectively removing unspecified groups from the user's existing supplementary list?
• Which statement correctly describes the permissions represented by rw-r--r--?
• What is the update interval configured for Snort rules?
• Which statement best describes why virtualization is beneficial for lab environments?
• What is MFA and why is it important?
• In vulnerability evaluation terms, which status indicates there are issues requiring remediation?
• Under CorpNet.local, which organizational units (OUs) must be created?
• What password is used to password-protect the stego file in the OpenStego lab?
• Which certificate request was denied?
• What is the purpose of Windows Services and how can you configure them to start automatically?
• What is the IPSec VPN server address used for the iPad connection?
• What is Spanning Tree Protocol and why is it important in a Layer 2 network?
• What is the static WAN IPv4 address assigned to pfSense?
• Which OUs should the Workstation Settings GPO be linked to?
• Explain the purpose of Group Policy Objects (GPOs) and how they are enforced on client machines.
• Which command creates a new Linux user with a comment field?
• Which actions unlock Mary Barnes' account and require a password change at next logon?
• In analyzing a suspected SYN flood, which filter shows packets that have both SYN and ACK flags set?
• For the Guest WLAN, which option describes the wireless type selected?
• How should you add multiple user accounts to a group in Active Directory Users and Computers?
• How do you access Virus & threat protection options in Windows Security?
• In the email filtering lab, which setting ensures only emails from the safe senders list are allowed?
• Where would you find the threat definition version number in Windows Defender setup?
• Which approach binds the GameConsoles ACL to all GE1–GE30 interfaces most efficiently?
• Which System subcategory is configured to audit the IPsec Driver?
• Which protocol is commonly used for dynamic routing within an autonomous system?
• In cloud networking, what is an IP address management (IPAM) system and why is it important?
• What is the primary DNS server IP configured on pfSense in this lab?
• Which is an example of a private IP address commonly used in home networks?
• What character in the /etc/shadow password field indicates a disabled account?
• Which drive is encrypted by BitLocker in this configuration?
• After extracting the stego data, which file should you open to verify the embedded username?
• Which path is added in AppLocker to allow the call center software?
• Which statement differentiates a host-based firewall from a network firewall?
• Which utility is used to capture and analyze traffic for ARP poisoning in these labs?
• What is Active Directory and what is a Group Policy Object (GPO) used for?
• In Linux, which statement best describes the relationship between a terminal and a shell, and which are two common shells?
• In Active Directory, what is the purpose of a Global Group and when would you assign permissions?
• How do you add a process exclusion for welcome.scr in Windows Defender?
• Which ports were configured as untagged members of VLAN 2 on the switch?
• What is the Bluetooth setting for the iPad in this lab?
• In the CorpNet SSL binding lab, which port is used for the HTTPS binding?
• In the Advanced Audit Policy Configuration, which Account Logon subcategory is configured for Credential Validation with success and failure?
• What is a hypervisor, and name two commonly used types?
• Which IPv4 address range is reserved for private networks?
• Which username is used to request the guest password in the BYOD lab?
• For the HTTP firewall rule allowing WAN to the DMZ web server, what is the destination address?
• What is the difference between WPA2 and WPA3 security, and why is WPA3 considered more secure?
• Which Windows PowerShell command computes the MD5 hash of Release.zip?
• When restoring a file using File History, which option allows you to restore a previous version to the original location?
• What is the purpose of virtualization technologies like Hyper-V or VMware in a Windows environment?
• In DNS spoofing lab, which action enables the DNS spoofing attack after selecting the target 192.168.0.30?
• Which account is disabled in the Secure Default Accounts lab?
• What is the primary purpose of encryption in confidentiality?
• Which option describes where Snort alerts are sent when the WAN interface starts or stops?
• In Active Directory, what is the difference between a Global Group and a Local Group, and when would you assign permissions using each?
• In the Secure Default Accounts lab, what is the new name given to the built-in Administrator account?
• What is the name of the private virtual switch created in the lab?
• Which OSI layer is responsible for logical addressing and routing?
• Which command deletes a Linux user account and its home directory?
• Which executable is excluded from DEP in the Office DEP lab steps?
• Which property must be enabled to encrypt the Finances folder in Windows?
• Which tool can be used to view Windows event logs?
• What is the meaning of availability in the CIA triad?
• What static IPv4 address and subnet were assigned to the DMZ interface?
• On the iPad, which action turns off JavaScript?
• Which command renames the group 'sales' to 'western_sales_division'?
• What is the purpose of the /proc filesystem in Linux?
• For RAM Memory Logging, which levels should be enabled?
• Which action enables both Logging and Syslog Aggregator on the switch?
• What is PowerShell and provide an example of a simple command to list processes?
• What is the action on violation configured for Port Security on the used GE1 port?
• What is the lockout duration (in minutes) configured in the lab?
• Which file did you authorize Susan to modify in the D: Finances folder?
• Which action starts a quick virus scan from Windows Security?
• Differentiate between static routing and dynamic routing, and name a common dynamic routing protocol.
• What is the new logon name after renaming Andrea Simmons to Andrea Socko?
• In the NAT port forwarding configuration for SSH, which destination IP is used?
• Which Account Management subcategory is configured to audit Other Account Management Events?
• Which configuration correctly sets up a mirrored system volume and a RAID 5 data volume for the specified disks?
• Which CIA triad element is best represented by checksums?
• What is the purpose of the Windows Registry and what is a safe practice when editing it?
• What is the required new password for the default pfSense admin account?
• Which command and options are used to rename a Linux user, move their home directory, and update the comment?
• In Windows Server Backup, which items are included in the immediate backup alongside the System State?
• Which Password Policy setting enforces compliance with password complexity requirements?
• What is the DHCP address range configured for the DMZ interface?
• In the email filtering lab, which option should you select to report junk email messages to your email provider?
• Which statement best describes the role of apt-get, yum, and dnf?
• What Tunnel Network was configured for the OpenVPN server?
• What MAC address is used as the spoofed address in the SMAC lab?
• Group Policy Objects are applied to which two types of targets?
• Which Group Policy Object is edited to configure UAC settings in the Default Domain Policy?