Free RNS Practice Questions

Question 1

The equipment schedule for a large home lists six access points at 30 W each, four fixed cameras at 15 W each, and one PTZ camera at 45 W. These are maximum power allocations at the switch's PSE, not measurements at the devices. At least 20% of the usable PoE budget must remain unallocated with all devices operating. Each candidate has enough ports and the required network features. Which switch meets the requirements with the smallest total PoE budget?

Accepted Answer

370 W total PoE budget; up to 60 W on each powered port.

Answer

340 W total PoE budget; up to 60 W on each powered port.

Answer

360 W total PoE budget; up to 30 W on each powered port.

Answer

450 W total PoE budget; up to 60 W on each powered port.

Question 2

At a kitchen wall controller, an active survey records RSSI of -61 dBm and a noise floor of -79 dBm. The project requires RSSI of at least -67 dBm and SNR of at least 25 dB. The controller remains associated with one AP, although commands occasionally stall. Which entry correctly interprets the RF measurements?

Accepted Answer

RSSI is acceptable; the 18 dB SNR is below the required margin.

Answer

RSSI is acceptable; the 28 dB SNR is above the required margin.

Answer

RSSI is unacceptable; the 18 dB SNR is below the required margin.

Answer

RSSI is acceptable; the 18 dB SNR is adequate because association is stable.

Question 3

After network segmentation, a tablet in VLAN 10 can operate an amplifier in VLAN 30 when its IP address is entered manually, but automatic discovery no longer lists it. Captures show queries to 224.0.0.251 on UDP 5353 in VLAN 10, with none reaching VLAN 30. Routes and control-service permissions are correct. The router supports service-filtered discovery relaying, and other IoT services must remain undiscoverable from VLAN 10. Select the change that restores the missing function.

Accepted Answer

Relay only the amplifier's mDNS service between the two VLANs.

Answer

Permit UDP 5353 between the subnets without enabling discovery relaying.

Answer

Enable PIM multicast routing between the two VLAN interfaces.

Answer

Relay all mDNS service advertisements between the two VLANs.

Question 4

A multicast television picture appears when a decoder selects a channel, then freezes several minutes later. Selecting another channel restores playback temporarily. The switch ages out unrefreshed receiver memberships and drops traffic for groups with no registered receiver. A capture shows membership reports after channel changes but no IGMP queries. Sources and decoders are in the same VLAN. What is the most likely missing element?

Accepted Answer

An active IGMP querier in the AV VLAN.

Answer

A correctly synchronized PTP clock at the decoder.

Answer

A larger media de-jitter buffer at each decoder.

Answer

A PIM router between the source and decoder.

Question 5

Two encoders each send a different 300 Mbps multicast video stream through a core switch to a room switch over one 1 Gbps link. Four decoders on the room switch view the first stream and two view the second. Multicast replication for those decoders occurs on the room switch. The quoted rates include all traffic to be counted, and no other traffic uses the link. What should the designer conclude about the core-to-room direction?

Accepted Answer

600 Mbps is required; the link has sufficient capacity.

Answer

1,800 Mbps is required; the link is undersized.

Answer

300 Mbps is required; the link has sufficient capacity.

Answer

1,200 Mbps is required; the link is undersized.

Question 6

An authorized assessment reports TCP 443 open on a residential gateway from the installer's management VLAN. This is the required HTTPS administration service, with supported current firmware, unique credentials, and MFA. Tests from the guest VLAN and the Internet cannot establish a connection, matching the approved access policy. The scanner reports no vulnerability beyond the open-port observation. Which response is proportionate to this finding?

Accepted Answer

Retain the required service, recording its authorized purpose and verified access restrictions.

Answer

Move HTTPS to a high-numbered port without changing the access policy or authentication.

Answer

Disable HTTPS and require on-site console access for subsequent configuration changes.

Answer

Limit future assessments to external scans because management-VLAN access is already authorized.

Question 7

A Wi-Fi voice handset has adequate signal and SNR while moving between APs on the same SSID and VLAN. A roaming trace attributes almost all of an audible interruption to a new 802.1X authentication exchange; scanning and reassociation complete promptly. The handset and APs support 802.11k, 802.11v, and 802.11r. Which feature targets the measured delay?

Accepted Answer

802.11r Fast BSS Transition.

Answer

802.11k neighbor reports.

Answer

WMM voice traffic prioritization.

Answer

802.11v BSS transition recommendations.

Question 8

The IPv4-only broadband service at a holiday home assigns 100.92.18.6 to the router's WAN interface. The ISP confirms carrier-grade NAT, provides no inbound mappings, and will not supply a public address on that plan. The owner needs authorized remote maintenance without changing the service. DDNS already updates correctly. Which remote-access architecture can meet the requirement?

Accepted Answer

An outbound-initiated, authenticated tunnel to an approved remote-access service.

Answer

An inbound IPsec VPN terminating on the home router and reached through its DDNS name.

Answer

The home router's exposed-host setting forwarding inbound traffic to a maintenance computer.

Answer

A local port forward from an unused TCP port to the home router's management service.

Question 9

A workstation's upload to a NAS stalls. Both devices are on the same switch with 1 Gbps full-duplex links. The capture at the NAS repeatedly shows:
NAS -> workstation: ACK, advertised receive window = 0
Workstation -> NAS: TCP window probe
NAS -> workstation: ACK, advertised receive window = 0
The relevant interface counters show no errors or drops. Where should the investigation now concentrate?

Accepted Answer

The NAS application and storage subsystem's ability to accept data.

Answer

The switch port's egress queue and packet-drop behavior.

Answer

The workstation's retransmission timers and congestion window.

Answer

The Ethernet links' duplex negotiation and collision behavior.

Question 10

A guest-isolation test blocks access to a NAS by IPv4, but the NAS's IPv6 HTTPS page opens from the same guest device. Guests and the NAS occupy separate dual-stack VLANs. Inspection finds an IPv4 deny rule but no corresponding IPv6 policy. IPv6 service must remain available on both VLANs. The configuration should be corrected by:

Accepted Answer

Applying equivalent IPv6 inter-VLAN filtering while preserving necessary ICMPv6.

Answer

Disabling IPv6 across both VLANs and restoring access through IPv4 services instead.

Answer

Removing the NAS's IPv6 DNS record while retaining the existing firewall rules.

Answer

Adding an IPv6 WAN-inbound deny rule for connections to the NAS's HTTPS service.

Free RNS Practice Questions

Domain 1: Network Design & Documentation 35% of exam

Question 1

Question 2

Question 3

Domain 2: Network Configuration 15% of exam

Question 4

Question 5

Domain 3: Network Troubleshooting & Verification 15% of exam

Question 6

Question 7

Domain 4: Wireless Networking 20% of exam

Question 8

Question 9

Domain 5: Network Security 15% of exam

Question 10

That's 10 of 1,030