CompTIA Network+ · Domain 3 · 19% of the examNetwork Operations

Answer: C. Submit a change request that describes the change, its impact, the rollback plan and the proposed window, and get it approved

Change management requires a tracked request that is reviewed and approved before production is touched, including the risk, schedule and rollback plan. Backing up the configuration is good practice, but it doesn't replace getting approval.

Answer: B. Baseline (golden) configuration

A baseline or golden configuration is the approved standard that devices are measured against to detect configuration drift. The production configuration is whatever is actually running right now, which is what gets compared to the baseline.

Answer: A. End-of-support (EOS)

End-of-support is the date after which the vendor stops providing patches, updates and technical support. End-of-life usually marks when a product stops being sold or manufactured, which can come well before support ends.

Answer: D. Migrate to SNMPv3 with authentication and privacy (encryption) enabled

SNMPv3 adds user-based authentication and encryption (the authPriv security level). SNMPv2c still sends community strings in clear text however long they are, so a longer string doesn't protect it from capture.

Answer: C. Flow data (such as NetFlow or IPFIX) exported to a collector

Flow data records who talked to whom, on which ports, and how many bytes, without payloads, which makes top-talker reporting over long periods practical. A full packet capture holds the same information but takes up far more storage, which rules it out here.

Answer: A. Recovery point objective (RPO)

RPO is the maximum acceptable data loss measured in time, which drives how often backups or replication must happen. The 4-hour figure is the RTO, the maximum time allowed to restore service.

Answer: D. Warm site

A warm site has the infrastructure and equipment in place but not current data or live systems, so recovery takes hours to days. A hot site keeps systems and data continuously ready and can take over almost immediately, at a much higher cost.

Answer: A. Configure a DHCP relay (IP helper) on the VLAN 30 router interface pointing to 10.99.0.10

DHCP Discover messages are broadcasts that routers don't forward, so a relay agent on the client's gateway must forward them to the server as unicast. Changing the lease time doesn't help when the requests never reach the server in the first place.

Answer: B. A reservation that maps the printer's MAC address to 192.168.1.50

A reservation ties a specific MAC address to a specific IP, so the printer always gets 192.168.1.50 along with the rest of its DHCP options. An exclusion only stops the server from handing out that address, so the printer would still need a static IP configured by hand.

Answer: C. PTR

PTR records in a reverse zone (in-addr.arpa for IPv4) map an IP address back to a hostname. A records do the opposite, mapping a name to an IPv4 address in a forward zone.

Answer: D. Out-of-band management through a console server reachable over a separate cellular connection

Out-of-band management uses a path that doesn't depend on the production network, such as a console server with its own cellular or dial-up link. A jump box or a management VLAN is still in-band and travels over the same failed WAN link.

Answer: B. Split tunnel

A split tunnel sends only corporate-bound traffic through the VPN and lets everything else use the local internet connection. A full tunnel forces all traffic, including general web browsing, through headquarters, which is exactly the load the company wants to avoid.