Sunday, July 5, 2026

netwok

CCNA Practice Flashcards for Genetec Engineers — 500 Questions

CCNA Practice Flashcards for Genetec Engineers

500 multiple-choice questions with answers and explanations, tailored for CCTV, Genetec Security Center, access control, camera VLANs, routing, QoS, multicast, and secure network operations.

Study format: 5 flashcards per weekday. At 5 per day, 500 cards equals 100 study days, or about 20 weeks. For a strict three-month pace, complete about 8 cards per weekday.

How to use this guide

Answer each question first, then open “Show answer and explanation.” Use the filters to focus by week, day, or topic. Print to PDF from your browser if you want an offline copy.

Networking fundamentals Subnetting and addressing Switching and VLANs Routing Wireless and RF basics IP services Security fundamentals NAT and WAN QoS and multicast video Automation and programmability

Study Schedule

PlanPaceCompletion
Standard flashcard plan5 cards/day, 5 days/week20 weeks / 100 weekdays
Three-month accelerated plan8–9 cards/day, 5 days/weekAbout 12–13 weeks
Week 1 • Monday • Card 1 • Networking fundamentals

Q1. Which OSI layer is responsible for logical IP addressing?

  1. A. Layer 2
  2. B. Layer 3
  3. C. Layer 4
  4. D. Layer 7
Show answer and explanation

Answer: B

Layer 3, the Network layer, provides logical addressing and routing using IP. This is where video clients, cameras, and servers are routed between subnets.

Week 1 • Monday • Card 2 • Networking fundamentals

Q2. Which device primarily separates broadcast domains?

  1. A. Switch
  2. B. Hub
  3. C. Router
  4. D. Patch panel
Show answer and explanation

Answer: C

Routers and Layer 3 switches separate broadcast domains. This matters when separating camera VLANs, access control VLANs, and corporate LANs.

Week 1 • Monday • Card 3 • Networking fundamentals

Q3. What is the purpose of a default gateway?

  1. A. Encrypt traffic
  2. B. Forward traffic outside the local subnet
  3. C. Assign VLAN IDs
  4. D. Convert fiber to copper
Show answer and explanation

Answer: B

A host sends traffic to its default gateway when the destination is outside the local subnet.

Week 1 • Monday • Card 4 • Networking fundamentals

Q4. Which protocol resolves an IPv4 address to a MAC address?

  1. A. DNS
  2. B. ARP
  3. C. DHCP
  4. D. NTP
Show answer and explanation

Answer: B

ARP maps IPv4 addresses to MAC addresses on the local network.

Week 1 • Monday • Card 5 • Networking fundamentals

Q5. Which value identifies a VLAN on an 802.1Q trunk?

  1. A. DSCP
  2. B. VLAN ID
  3. C. MAC address
  4. D. TCP port
Show answer and explanation

Answer: B

802.1Q inserts a VLAN tag that includes the VLAN ID.

Week 1 • Tuesday • Card 1 • Networking fundamentals

Q6. What does MTU define?

  1. A. Maximum frame count per second
  2. B. Maximum transmission unit size
  3. C. Minimum trunk utilization
  4. D. MAC table update time
Show answer and explanation

Answer: B

MTU is the largest packet/frame payload size supported without fragmentation.

Week 1 • Tuesday • Card 2 • Networking fundamentals

Q7. Which address is a private IPv4 address?

  1. A. 8.8.8.8
  2. B. 172.16.5.10
  3. C. 1.1.1.1
  4. D. 224.0.0.1
Show answer and explanation

Answer: B

172.16.0.0/12 is private IPv4 space.

Week 1 • Tuesday • Card 3 • Networking fundamentals

Q8. Which address is link-local IPv4?

  1. A. 169.254.10.20
  2. B. 10.10.10.20
  3. C. 192.168.1.20
  4. D. 172.20.1.20
Show answer and explanation

Answer: A

169.254.0.0/16 is APIPA/link-local addressing used when DHCP fails.

Week 1 • Tuesday • Card 4 • Networking fundamentals

Q9. Which protocol translates hostnames to IP addresses?

  1. A. DNS
  2. B. SNMP
  3. C. RTP
  4. D. SSH
Show answer and explanation

Answer: A

DNS resolves names such as servers or cloud services to IP addresses.

Week 1 • Tuesday • Card 5 • Networking fundamentals

Q10. Which transport protocol is connection-oriented?

  1. A. UDP
  2. B. TCP
  3. C. ICMP
  4. D. ARP
Show answer and explanation

Answer: B

TCP uses sessions, acknowledgements, and retransmission.

Week 1 • Wednesday • Card 1 • Subnetting and addressing

Q11. How many usable IPv4 host addresses are in a /24 subnet?

  1. A. 254
  2. B. 255
  3. C. 256
  4. D. 510
Show answer and explanation

Answer: A

A /24 has 256 total addresses; network and broadcast are not usable for hosts.

Week 1 • Wednesday • Card 2 • Subnetting and addressing

Q12. What subnet mask matches /26?

  1. A. 255.255.255.0
  2. B. 255.255.255.128
  3. C. 255.255.255.192
  4. D. 255.255.255.224
Show answer and explanation

Answer: C

/26 equals 255.255.255.192 and provides 62 usable host addresses.

Week 1 • Wednesday • Card 3 • Subnetting and addressing

Q13. Which subnet contains host 10.10.5.77/26?

  1. A. 10.10.5.0/26
  2. B. 10.10.5.64/26
  3. C. 10.10.5.128/26
  4. D. 10.10.5.192/26
Show answer and explanation

Answer: B

/26 subnets increment by 64. Address .77 belongs to 10.10.5.64/26.

Week 1 • Wednesday • Card 4 • Subnetting and addressing

Q14. What is the broadcast address for 192.168.20.32/27?

  1. A. 192.168.20.31
  2. B. 192.168.20.63
  3. C. 192.168.20.64
  4. D. 192.168.20.95
Show answer and explanation

Answer: B

/27 increments by 32. The .32 subnet ends at .63.

Week 1 • Wednesday • Card 5 • Subnetting and addressing

Q15. How many usable hosts are available in a /30?

  1. A. 2
  2. B. 4
  3. C. 6
  4. D. 14
Show answer and explanation

Answer: A

A /30 has four total addresses and two usable host addresses, common for point-to-point links.

Week 1 • Thursday • Card 1 • Subnetting and addressing

Q16. Which prefix gives approximately 14 usable host addresses?

  1. A. /28
  2. B. /27
  3. C. /26
  4. D. /25
Show answer and explanation

Answer: A

/28 provides 16 total addresses and 14 usable host addresses.

Week 1 • Thursday • Card 2 • Subnetting and addressing

Q17. What does CIDR notation /23 represent?

  1. A. 255.255.255.0
  2. B. 255.255.254.0
  3. C. 255.255.252.0
  4. D. 255.255.248.0
Show answer and explanation

Answer: B

/23 corresponds to 255.255.254.0.

Week 1 • Thursday • Card 3 • Subnetting and addressing

Q18. Which range is private IPv4?

  1. A. 192.0.2.0/24
  2. B. 192.168.0.0/16
  3. C. 198.51.100.0/24
  4. D. 203.0.113.0/24
Show answer and explanation

Answer: B

192.168.0.0/16 is private. The other ranges are documentation/test networks.

Week 1 • Thursday • Card 4 • Subnetting and addressing

Q19. What is the network address of 172.20.14.199/24?

  1. A. 172.20.14.0
  2. B. 172.20.14.199
  3. C. 172.20.14.255
  4. D. 172.20.0.0
Show answer and explanation

Answer: A

With /24, the first three octets define the network.

Week 1 • Thursday • Card 5 • Subnetting and addressing

Q20. Why should camera IP plans avoid overlapping subnets?

  1. A. It disables PoE
  2. B. Routing becomes ambiguous
  3. C. DNS stops working
  4. D. NTP cannot synchronize
Show answer and explanation

Answer: B

Overlapping subnets can cause routing ambiguity and difficult troubleshooting between camera, server, and client networks.

Week 1 • Friday • Card 1 • Switching and VLANs

Q21. Which switch port mode carries multiple VLANs?

  1. A. Access
  2. B. Trunk
  3. C. Shutdown
  4. D. Loopback
Show answer and explanation

Answer: B

A trunk carries traffic for multiple VLANs using tagging, usually 802.1Q.

Week 1 • Friday • Card 2 • Switching and VLANs

Q22. Which switch port mode should normally be used for a single IP camera?

  1. A. Trunk
  2. B. Access
  3. C. Routed
  4. D. Monitor
Show answer and explanation

Answer: B

A single camera usually belongs to one VLAN, so an access port is appropriate.

Week 1 • Friday • Card 3 • Switching and VLANs

Q23. What is the native VLAN on an 802.1Q trunk?

  1. A. The VLAN carried untagged
  2. B. The voice VLAN only
  3. C. The management VLAN only
  4. D. The disabled VLAN
Show answer and explanation

Answer: A

The native VLAN is sent untagged across an 802.1Q trunk.

Week 1 • Friday • Card 4 • Switching and VLANs

Q24. What problem does STP help prevent?

  1. A. IP address exhaustion
  2. B. Layer 2 loops
  3. C. DNS poisoning
  4. D. NAT overload
Show answer and explanation

Answer: B

Spanning Tree Protocol blocks redundant paths to prevent Layer 2 loops.

Week 1 • Friday • Card 5 • Switching and VLANs

Q25. What does a switch use to forward frames?

  1. A. ARP table
  2. B. MAC address table
  3. C. Routing table
  4. D. DNS cache
Show answer and explanation

Answer: B

Switches forward frames based on destination MAC addresses learned in the MAC table.

Week 2 • Monday • Card 1 • Switching and VLANs

Q26. Which command commonly verifies VLAN membership on Cisco IOS?

  1. A. show vlan brief
  2. B. show ip route
  3. C. show clock
  4. D. show arp vrf
Show answer and explanation

Answer: A

show vlan brief displays VLANs and assigned access ports.

Week 2 • Monday • Card 2 • Switching and VLANs

Q27. What happens when a switch receives an unknown unicast frame?

  1. A. It drops it always
  2. B. It floods within the VLAN
  3. C. It sends it to the router only
  4. D. It converts it to multicast
Show answer and explanation

Answer: B

Unknown unicast frames are flooded within the same VLAN.

Week 2 • Monday • Card 3 • Switching and VLANs

Q28. Why place cameras in a dedicated VLAN?

  1. A. To increase pixel resolution
  2. B. To reduce broadcast scope and improve security
  3. C. To remove the need for DNS
  4. D. To disable multicast
Show answer and explanation

Answer: B

A camera VLAN limits broadcast traffic and improves segmentation and security.

Week 2 • Monday • Card 4 • Switching and VLANs

Q29. What is port security commonly used for?

  1. A. Limiting MAC addresses on a switch port
  2. B. Encrypting routing updates
  3. C. Creating VLAN trunks
  4. D. Assigning IPv6 addresses
Show answer and explanation

Answer: A

Port security can restrict which MAC addresses are allowed on an access port.

Week 2 • Monday • Card 5 • Switching and VLANs

Q30. What is a switched virtual interface, or SVI?

  1. A. A logical Layer 3 interface for a VLAN
  2. B. A physical fiber port
  3. C. A DNS record
  4. D. A PoE injector
Show answer and explanation

Answer: A

An SVI provides Layer 3 gateway functionality for a VLAN on a multilayer switch.

Week 2 • Tuesday • Card 1 • Routing

Q31. Which route is used when no more specific route matches?

  1. A. Connected route
  2. B. Default route
  3. C. Host route
  4. D. Summary route
Show answer and explanation

Answer: B

A default route, often 0.0.0.0/0, is used when no better match exists.

Week 2 • Tuesday • Card 2 • Routing

Q32. What is administrative distance used for?

  1. A. Choosing between routing sources
  2. B. Setting switch speed
  3. C. Assigning VLAN numbers
  4. D. Encrypting packets
Show answer and explanation

Answer: A

Administrative distance ranks route sources when multiple protocols advertise the same destination.

Week 2 • Tuesday • Card 3 • Routing

Q33. Which route type is automatically created when an interface has an IP address and is up?

  1. A. Static
  2. B. Connected
  3. C. BGP
  4. D. Default
Show answer and explanation

Answer: B

Connected routes appear automatically for active interfaces with IP addressing.

Week 2 • Tuesday • Card 4 • Routing

Q34. What does longest prefix match mean?

  1. A. The route with the largest metric wins
  2. B. The most specific matching route is chosen
  3. C. The oldest route is chosen
  4. D. The default route always wins
Show answer and explanation

Answer: B

Routers choose the most specific route that matches the destination IP.

Week 2 • Tuesday • Card 5 • Routing

Q35. Which command commonly displays the IPv4 routing table on Cisco IOS?

  1. A. show ip route
  2. B. show vlan
  3. C. show mac address-table
  4. D. show power inline
Show answer and explanation

Answer: A

show ip route displays learned and configured IPv4 routes.

Week 2 • Wednesday • Card 1 • Routing

Q36. Which protocol is an interior gateway protocol?

  1. A. OSPF
  2. B. HTTP
  3. C. ARP
  4. D. NTP
Show answer and explanation

Answer: A

OSPF is an IGP used for dynamic routing inside an organization.

Week 2 • Wednesday • Card 2 • Routing

Q37. What is a static route?

  1. A. A manually configured route
  2. B. A DHCP lease
  3. C. A VLAN tag
  4. D. A DNS alias
Show answer and explanation

Answer: A

Static routes are manually entered and do not dynamically adapt unless tracking is configured.

Week 2 • Wednesday • Card 3 • Routing

Q38. What is a next-hop IP address?

  1. A. The destination host
  2. B. The neighboring router to forward traffic to
  3. C. The DNS server
  4. D. The DHCP server
Show answer and explanation

Answer: B

The next hop is the router address used to reach a destination network.

Week 2 • Wednesday • Card 4 • Routing

Q39. What is route summarization?

  1. A. Combining multiple networks into a shorter prefix
  2. B. Encrypting routes
  3. C. Removing VLAN tags
  4. D. Converting IPv4 to IPv6
Show answer and explanation

Answer: A

Summarization advertises multiple contiguous networks as one route to reduce table size.

Week 2 • Wednesday • Card 5 • Routing

Q40. Why is asymmetric routing sometimes a problem for security systems?

  1. A. It changes camera resolution
  2. B. Firewalls may see only one side of a session
  3. C. It disables PoE
  4. D. It prevents ARP
Show answer and explanation

Answer: B

Stateful firewalls may drop traffic if return traffic follows a different path and session state is not seen.

Week 2 • Thursday • Card 1 • Wireless and RF basics

Q41. Which Wi-Fi band generally has better wall penetration?

  1. A. 2.4 GHz
  2. B. 5 GHz
  3. C. 6 GHz
  4. D. 60 GHz
Show answer and explanation

Answer: A

2.4 GHz usually penetrates walls better, but has more interference and fewer non-overlapping channels.

Week 2 • Thursday • Card 2 • Wireless and RF basics

Q42. Which Wi-Fi band usually offers more channels and higher throughput than 2.4 GHz?

  1. A. 900 MHz
  2. B. 5 GHz
  3. C. AM radio
  4. D. Bluetooth only
Show answer and explanation

Answer: B

5 GHz usually has more available channels and higher throughput, but shorter range.

Week 2 • Thursday • Card 3 • Wireless and RF basics

Q43. What is SSID?

  1. A. A wireless network name
  2. B. A routing protocol
  3. C. A PoE class
  4. D. A firewall action
Show answer and explanation

Answer: A

SSID is the advertised or configured wireless network name.

Week 2 • Thursday • Card 4 • Wireless and RF basics

Q44. Which security mode is stronger than WPA2-Personal when available?

  1. A. WEP
  2. B. Open
  3. C. WPA3
  4. D. TKIP only
Show answer and explanation

Answer: C

WPA3 improves authentication and cryptographic protections over older modes.

Week 2 • Thursday • Card 5 • Wireless and RF basics

Q45. What is roaming in Wi-Fi?

  1. A. Moving a client between access points
  2. B. Changing IP subnets manually
  3. C. Replacing antennas
  4. D. Turning off encryption
Show answer and explanation

Answer: A

Roaming occurs when a wireless client moves between APs while maintaining connectivity.

Week 2 • Friday • Card 1 • Wireless and RF basics

Q46. What does RSSI indicate?

  1. A. Received signal strength
  2. B. Routing table size
  3. C. Camera frame rate
  4. D. Switch buffer size
Show answer and explanation

Answer: A

RSSI is a measure of received signal strength.

Week 2 • Friday • Card 2 • Wireless and RF basics

Q47. Why are wireless cameras often avoided for critical CCTV?

  1. A. They cannot use IP
  2. B. Wireless links may be less predictable than wired links
  3. C. They cannot use DNS
  4. D. They require IPv6
Show answer and explanation

Answer: B

Wireless is vulnerable to interference, capacity limits, and RF design issues.

Week 2 • Friday • Card 3 • Wireless and RF basics

Q48. Which issue is caused by too many APs on the same channel?

  1. A. Co-channel interference
  2. B. DNS recursion
  3. C. DHCP starvation only
  4. D. NTP drift
Show answer and explanation

Answer: A

Co-channel interference occurs when too many devices contend on the same channel.

Week 2 • Friday • Card 4 • Wireless and RF basics

Q49. What does a captive portal typically provide?

  1. A. Web-based authentication or acceptance
  2. B. PoE negotiation
  3. C. OSPF adjacency
  4. D. Camera lens focus
Show answer and explanation

Answer: A

Captive portals intercept web traffic for login or terms acceptance.

Week 2 • Friday • Card 5 • Wireless and RF basics

Q50. Which design best supports mobile Genetec client devices over Wi-Fi?

  1. A. Strong coverage, capacity planning, and secure authentication
  2. B. One AP at maximum power
  3. C. Open Wi-Fi only
  4. D. Disable roaming
Show answer and explanation

Answer: A

Mobile video clients need reliable coverage, adequate capacity, secure authentication, and controlled roaming.

Week 3 • Monday • Card 1 • IP services

Q51. Which protocol dynamically assigns IP addresses?

  1. A. DHCP
  2. B. DNS
  3. C. SNMP
  4. D. SSH
Show answer and explanation

Answer: A

DHCP leases IP configuration such as address, mask, gateway, and DNS.

Week 3 • Monday • Card 2 • IP services

Q52. Which DHCP message does a client send first?

  1. A. DISCOVER
  2. B. OFFER
  3. C. REQUEST
  4. D. ACK
Show answer and explanation

Answer: A

A DHCP client starts by broadcasting DHCPDISCOVER.

Week 3 • Monday • Card 3 • IP services

Q53. What is the purpose of DHCP reservation?

  1. A. Assigning a consistent IP to a known MAC address
  2. B. Encrypting DHCP
  3. C. Creating VLANs
  4. D. Blocking DNS
Show answer and explanation

Answer: A

Reservations help keep devices such as cameras or servers at predictable addresses.

Week 3 • Monday • Card 4 • IP services

Q54. Which service synchronizes time across network devices?

  1. A. NTP
  2. B. DNS
  3. C. DHCP
  4. D. FTP
Show answer and explanation

Answer: A

NTP synchronizes clocks, which is critical for video evidence timelines and logs.

Week 3 • Monday • Card 5 • IP services

Q55. Which protocol is commonly used for device monitoring?

  1. A. SNMP
  2. B. SMTP
  3. C. RDP
  4. D. RTP
Show answer and explanation

Answer: A

SNMP can monitor device status, interfaces, and alerts.

Week 3 • Tuesday • Card 1 • IP services

Q56. What does Syslog provide?

  1. A. Centralized log messages
  2. B. IP address assignment
  3. C. MAC learning
  4. D. Power delivery
Show answer and explanation

Answer: A

Syslog sends event messages to a centralized logging system.

Week 3 • Tuesday • Card 2 • IP services

Q57. Which protocol securely administers network devices by CLI?

  1. A. Telnet
  2. B. SSH
  3. C. TFTP
  4. D. HTTP
Show answer and explanation

Answer: B

SSH encrypts remote CLI access. Telnet is unencrypted.

Week 3 • Tuesday • Card 3 • IP services

Q58. Which protocol is commonly used to transfer configuration files but is not secure?

  1. A. TFTP
  2. B. HTTPS
  3. C. SSH
  4. D. SCP
Show answer and explanation

Answer: A

TFTP is simple and unencrypted.

Week 3 • Tuesday • Card 4 • IP services

Q59. What is DNS A record used for?

  1. A. Mapping a hostname to IPv4
  2. B. Mapping IP to MAC
  3. C. Assigning VLANs
  4. D. Setting PoE class
Show answer and explanation

Answer: A

An A record maps a hostname to an IPv4 address.

Week 3 • Tuesday • Card 5 • IP services

Q60. Why is accurate NTP important for Genetec systems?

  1. A. It improves lens zoom
  2. B. It keeps video, access events, and audit logs aligned
  3. C. It increases PoE wattage
  4. D. It prevents all packet loss
Show answer and explanation

Answer: B

Accurate time keeps camera video, access control events, and audit logs correlated.

Week 3 • Wednesday • Card 1 • Security fundamentals

Q61. What does AAA stand for?

  1. A. Authentication, Authorization, Accounting
  2. B. Access, Allow, Audit
  3. C. Address, ARP, ACL
  4. D. Analyze, Alert, Archive
Show answer and explanation

Answer: A

AAA identifies users, determines permissions, and records activity.

Week 3 • Wednesday • Card 2 • Security fundamentals

Q62. Which protocol provides centralized AAA for network devices?

  1. A. RADIUS
  2. B. ARP
  3. C. ICMP
  4. D. NTP
Show answer and explanation

Answer: A

RADIUS is commonly used for centralized authentication and authorization.

Week 3 • Wednesday • Card 3 • Security fundamentals

Q63. What is the purpose of an ACL?

  1. A. Filter traffic based on rules
  2. B. Assign DHCP leases
  3. C. Increase PoE
  4. D. Store video
Show answer and explanation

Answer: A

Access control lists permit or deny traffic based on criteria such as IPs, ports, and protocols.

Week 3 • Wednesday • Card 4 • Security fundamentals

Q64. Which management method is least secure?

  1. A. SSH
  2. B. HTTPS
  3. C. Telnet
  4. D. SNMPv3
Show answer and explanation

Answer: C

Telnet sends credentials and traffic in clear text.

Week 3 • Wednesday • Card 5 • Security fundamentals

Q65. Which SNMP version supports authentication and encryption?

  1. A. SNMPv1
  2. B. SNMPv2c
  3. C. SNMPv3
  4. D. All versions equally
Show answer and explanation

Answer: C

SNMPv3 supports stronger authentication and privacy features.

Week 3 • Thursday • Card 1 • Security fundamentals

Q66. What is 802.1X used for?

  1. A. Port-based network access control
  2. B. DNS forwarding
  3. C. Static routing
  4. D. PoE measurement
Show answer and explanation

Answer: A

802.1X authenticates devices or users before granting network access.

Week 3 • Thursday • Card 2 • Security fundamentals

Q67. What is a firewall zone?

  1. A. A logical security area with policy controls
  2. B. A switch backplane
  3. C. A DHCP scope
  4. D. A Wi-Fi antenna pattern
Show answer and explanation

Answer: A

Zones group interfaces or networks so policies can control traffic between them.

Week 3 • Thursday • Card 3 • Security fundamentals

Q68. Why should camera default passwords be changed?

  1. A. To improve image quality
  2. B. To prevent unauthorized access
  3. C. To increase FPS
  4. D. To enable ARP
Show answer and explanation

Answer: B

Default credentials are widely known and create serious security risk.

Week 3 • Thursday • Card 4 • Security fundamentals

Q69. What is least privilege?

  1. A. Giving only the permissions required
  2. B. Giving all users admin rights
  3. C. Disabling all logging
  4. D. Using only one password
Show answer and explanation

Answer: A

Least privilege reduces risk by limiting access to required functions only.

Week 3 • Thursday • Card 5 • Security fundamentals

Q70. Why segment access control panels from general user PCs?

  1. A. To reduce security exposure and limit lateral movement
  2. B. To increase monitor resolution
  3. C. To eliminate DHCP
  4. D. To disable routing
Show answer and explanation

Answer: A

Segmentation helps protect physical security systems from compromise on less trusted networks.

Week 3 • Friday • Card 1 • NAT and WAN

Q71. What does NAT do?

  1. A. Translates IP addresses
  2. B. Encrypts wireless
  3. C. Assigns VLANs
  4. D. Learns MAC addresses
Show answer and explanation

Answer: A

Network Address Translation changes source or destination IP information.

Week 3 • Friday • Card 2 • NAT and WAN

Q72. What is PAT also called?

  1. A. NAT overload
  2. B. Static routing
  3. C. DNS relay
  4. D. ARP proxy
Show answer and explanation

Answer: A

PAT maps many internal hosts to one public IP using port numbers.

Week 3 • Friday • Card 3 • NAT and WAN

Q73. Which private address is commonly translated before Internet access?

  1. A. 10.1.1.10
  2. B. 8.8.8.8
  3. C. 1.1.1.1
  4. D. 203.0.113.1
Show answer and explanation

Answer: A

10.0.0.0/8 is private and typically translated for Internet access.

Week 3 • Friday • Card 4 • NAT and WAN

Q74. What is a site-to-site VPN commonly used for?

  1. A. Securely connecting two networks
  2. B. Powering cameras
  3. C. Assigning VLANs
  4. D. Replacing DNS
Show answer and explanation

Answer: A

A site-to-site VPN securely connects networks across an untrusted transport.

Week 3 • Friday • Card 5 • NAT and WAN

Q75. Which protocol helps verify reachability across WAN links?

  1. A. ICMP
  2. B. PoE
  3. C. LLDP
  4. D. STP
Show answer and explanation

Answer: A

ICMP echo requests/replies are commonly used with ping.

Week 4 • Monday • Card 1 • NAT and WAN

Q76. What is split tunneling?

  1. A. Sending some traffic through VPN and some directly
  2. B. Dividing a VLAN tag
  3. C. Splitting fiber strands
  4. D. Using two DHCP servers
Show answer and explanation

Answer: A

Split tunneling routes selected traffic through a VPN while other traffic goes directly.

Week 4 • Monday • Card 2 • NAT and WAN

Q77. Why avoid exposing camera web interfaces directly to the Internet?

  1. A. It increases attack surface
  2. B. It disables DNS
  3. C. It prevents recording
  4. D. It changes MTU
Show answer and explanation

Answer: A

Direct exposure increases risk from credential attacks and vulnerabilities.

Week 4 • Monday • Card 3 • NAT and WAN

Q78. What is port forwarding?

  1. A. Mapping an external port to an internal host/service
  2. B. Creating a VLAN
  3. C. Blocking ARP
  4. D. Learning MAC addresses
Show answer and explanation

Answer: A

Port forwarding directs traffic received on a public IP/port to an internal IP/port.

Week 4 • Monday • Card 4 • NAT and WAN

Q79. Which WAN issue most affects live video smoothness?

  1. A. Latency, jitter, and packet loss
  2. B. Hostnames only
  3. C. Keyboard layout
  4. D. Cable color
Show answer and explanation

Answer: A

Video performance is affected by latency, jitter, packet loss, and available bandwidth.

Week 4 • Monday • Card 5 • NAT and WAN

Q80. What is QoS used for over constrained WAN links?

  1. A. Prioritizing important traffic
  2. B. Creating IP addresses
  3. C. Replacing firewalls
  4. D. Changing camera lens angle
Show answer and explanation

Answer: A

QoS classifies and prioritizes traffic when bandwidth is limited.

Week 4 • Tuesday • Card 1 • QoS and multicast video

Q81. What is multicast designed for?

  1. A. One-to-many efficient traffic delivery
  2. B. Only one-to-one delivery
  3. C. Encrypting packets
  4. D. Assigning DHCP addresses
Show answer and explanation

Answer: A

Multicast efficiently sends one stream to multiple receivers.

Week 4 • Tuesday • Card 2 • QoS and multicast video

Q82. Which protocol lets hosts join IPv4 multicast groups?

  1. A. IGMP
  2. B. ARP
  3. C. DNS
  4. D. NTP
Show answer and explanation

Answer: A

IGMP is used by hosts and switches/routers for IPv4 multicast group membership.

Week 4 • Tuesday • Card 3 • QoS and multicast video

Q83. What does IGMP snooping do on a switch?

  1. A. Limits multicast flooding by tracking group membership
  2. B. Encrypts multicast
  3. C. Assigns multicast IPs
  4. D. Blocks all video
Show answer and explanation

Answer: A

IGMP snooping helps switches forward multicast only to interested ports.

Week 4 • Tuesday • Card 4 • QoS and multicast video

Q84. Which IPv4 range is multicast?

  1. A. 224.0.0.0/4
  2. B. 10.0.0.0/8
  3. C. 172.16.0.0/12
  4. D. 192.168.0.0/16
Show answer and explanation

Answer: A

IPv4 multicast uses 224.0.0.0 through 239.255.255.255.

Week 4 • Tuesday • Card 5 • QoS and multicast video

Q85. What does QoS classification do?

  1. A. Identifies traffic for policy treatment
  2. B. Creates a subnet
  3. C. Changes MAC addresses
  4. D. Erases logs
Show answer and explanation

Answer: A

Classification identifies traffic types so QoS policies can mark, queue, or police them.

Week 4 • Wednesday • Card 1 • QoS and multicast video

Q86. What is DSCP?

  1. A. A Layer 3 QoS marking field
  2. B. A switch port mode
  3. C. A wireless SSID
  4. D. A DHCP option
Show answer and explanation

Answer: A

DSCP marks packets for differentiated QoS treatment.

Week 4 • Wednesday • Card 2 • QoS and multicast video

Q87. Why can video surveillance traffic need QoS?

  1. A. Video can be bandwidth-intensive and delay-sensitive
  2. B. Video cannot use IP
  3. C. Video disables VLANs
  4. D. Video requires Telnet
Show answer and explanation

Answer: A

Live viewing and control traffic may need priority when links are congested.

Week 4 • Wednesday • Card 3 • QoS and multicast video

Q88. What is jitter?

  1. A. Variation in packet delay
  2. B. Static IP assignment
  3. C. MAC address aging
  4. D. A VLAN mismatch
Show answer and explanation

Answer: A

Jitter is inconsistent packet delay, which can affect real-time video and audio.

Week 4 • Wednesday • Card 4 • QoS and multicast video

Q89. What should be enabled to prevent multicast flooding in a camera VLAN?

  1. A. IGMP snooping
  2. B. Telnet
  3. C. PortFast disablement
  4. D. NAT overload
Show answer and explanation

Answer: A

IGMP snooping reduces unnecessary multicast flooding within a VLAN.

Week 4 • Wednesday • Card 5 • QoS and multicast video

Q90. Which traffic is often best kept unicast unless multicast is designed properly?

  1. A. Camera video streams
  2. B. NTP queries
  3. C. ARP replies
  4. D. DHCP offers
Show answer and explanation

Answer: A

Multicast video needs proper IGMP and routing design. Without it, unicast is often simpler and safer.

Week 4 • Thursday • Card 1 • Automation and programmability

Q91. Which data format is commonly used by REST APIs?

  1. A. JSON
  2. B. STP
  3. C. ARP
  4. D. VLAN
Show answer and explanation

Answer: A

JSON is widely used to exchange structured data in REST APIs.

Week 4 • Thursday • Card 2 • Automation and programmability

Q92. What does REST commonly use as its transport/application protocol?

  1. A. HTTP/HTTPS
  2. B. ARP
  3. C. ICMP only
  4. D. STP
Show answer and explanation

Answer: A

RESTful APIs commonly use HTTP or HTTPS methods.

Week 4 • Thursday • Card 3 • Automation and programmability

Q93. Which HTTP method is commonly used to retrieve information?

  1. A. GET
  2. B. POST
  3. C. PUT
  4. D. DELETE
Show answer and explanation

Answer: A

GET retrieves a resource without changing it.

Week 4 • Thursday • Card 4 • Automation and programmability

Q94. Which HTTP method is commonly used to create a new object?

  1. A. POST
  2. B. GET
  3. C. PING
  4. D. TRACEPATH
Show answer and explanation

Answer: A

POST is commonly used to submit data or create resources.

Week 4 • Thursday • Card 5 • Automation and programmability

Q95. What is an API token used for?

  1. A. Authentication/authorization to an API
  2. B. PoE negotiation
  3. C. MAC learning
  4. D. Fiber splicing
Show answer and explanation

Answer: A

API tokens are used to authenticate and authorize API requests.

Week 4 • Friday • Card 1 • Automation and programmability

Q96. Which tool is often used for API testing from a workstation?

  1. A. Postman
  2. B. STP
  3. C. DHCP relay
  4. D. LLDP-MED
Show answer and explanation

Answer: A

Postman is commonly used for testing REST APIs.

Week 4 • Friday • Card 2 • Automation and programmability

Q97. What is idempotency?

  1. A. Repeating an operation gives the same result
  2. B. Traffic is encrypted
  3. C. A port is trunking
  4. D. A camera is recording
Show answer and explanation

Answer: A

An idempotent operation can be repeated without changing the result beyond the first application.

Week 4 • Friday • Card 3 • Automation and programmability

Q98. Why is network automation useful for security systems?

  1. A. It reduces repetitive configuration errors
  2. B. It removes need for IP addresses
  3. C. It prevents all outages
  4. D. It replaces physical cabling
Show answer and explanation

Answer: A

Automation improves consistency, speeds changes, and reduces manual mistakes.

Week 4 • Friday • Card 4 • Automation and programmability

Q99. Which file format is commonly used for network automation variables?

  1. A. YAML
  2. B. JPEG
  3. C. MP3
  4. D. BMP
Show answer and explanation

Answer: A

YAML is frequently used for human-readable configuration data.

Week 4 • Friday • Card 5 • Automation and programmability

Q100. What is Git used for?

  1. A. Version control
  2. B. Packet switching
  3. C. PoE delivery
  4. D. Wireless roaming
Show answer and explanation

Answer: A

Git tracks changes to files such as scripts, templates, and configurations.

Week 5 • Monday • Card 1 • Networking fundamentals

Q101. While troubleshooting a Security Center client connection, which OSI layer is responsible for logical IP addressing?

  1. A. Layer 2
  2. B. Layer 3
  3. C. Layer 4
  4. D. Layer 7
Show answer and explanation

Answer: B

Layer 3, the Network layer, provides logical addressing and routing using IP. This is where video clients, cameras, and servers are routed between subnets.

Week 5 • Monday • Card 2 • Networking fundamentals

Q102. During a jail CCTV network audit, which device primarily separates broadcast domains?

  1. A. Switch
  2. B. Hub
  3. C. Router
  4. D. Patch panel
Show answer and explanation

Answer: C

Routers and Layer 3 switches separate broadcast domains. This matters when separating camera VLANs, access control VLANs, and corporate LANs.

Week 5 • Monday • Card 3 • Networking fundamentals

Q103. For an access control panel network, what is the purpose of a default gateway?

  1. A. Encrypt traffic
  2. B. Forward traffic outside the local subnet
  3. C. Assign VLAN IDs
  4. D. Convert fiber to copper
Show answer and explanation

Answer: B

A host sends traffic to its default gateway when the destination is outside the local subnet.

Week 5 • Monday • Card 4 • Networking fundamentals

Q104. When reviewing a county security electronics network, which protocol resolves an IPv4 address to a MAC address?

  1. A. DNS
  2. B. ARP
  3. C. DHCP
  4. D. NTP
Show answer and explanation

Answer: B

ARP maps IPv4 addresses to MAC addresses on the local network.

Week 5 • Monday • Card 5 • Networking fundamentals

Q105. During commissioning of Axis cameras into Genetec, which value identifies a VLAN on an 802.1Q trunk?

  1. A. DSCP
  2. B. VLAN ID
  3. C. MAC address
  4. D. TCP port
Show answer and explanation

Answer: B

802.1Q inserts a VLAN tag that includes the VLAN ID.

Week 5 • Tuesday • Card 1 • Networking fundamentals

Q106. For a remote video monitoring site, what does MTU define?

  1. A. Maximum frame count per second
  2. B. Maximum transmission unit size
  3. C. Minimum trunk utilization
  4. D. MAC table update time
Show answer and explanation

Answer: B

MTU is the largest packet/frame payload size supported without fragmentation.

Week 5 • Tuesday • Card 2 • Networking fundamentals

Q107. When separating CCTV from the corporate LAN, which address is a private IPv4 address?

  1. A. 8.8.8.8
  2. B. 172.16.5.10
  3. C. 1.1.1.1
  4. D. 224.0.0.1
Show answer and explanation

Answer: B

172.16.0.0/12 is private IPv4 space.

Week 5 • Tuesday • Card 3 • Networking fundamentals

Q108. During network cutover testing, which address is link-local IPv4?

  1. A. 169.254.10.20
  2. B. 10.10.10.20
  3. C. 192.168.1.20
  4. D. 172.20.1.20
Show answer and explanation

Answer: A

169.254.0.0/16 is APIPA/link-local addressing used when DHCP fails.

Week 5 • Tuesday • Card 4 • Networking fundamentals

Q109. For a recorder-to-camera traffic path, which protocol translates hostnames to IP addresses?

  1. A. DNS
  2. B. SNMP
  3. C. RTP
  4. D. SSH
Show answer and explanation

Answer: A

DNS resolves names such as servers or cloud services to IP addresses.

Week 5 • Tuesday • Card 5 • Networking fundamentals

Q110. For a Genetec camera VLAN deployment, which transport protocol is connection-oriented?

  1. A. UDP
  2. B. TCP
  3. C. ICMP
  4. D. ARP
Show answer and explanation

Answer: B

TCP uses sessions, acknowledgements, and retransmission.

Week 5 • Wednesday • Card 1 • Subnetting and addressing

Q111. While troubleshooting a Security Center client connection, how many usable IPv4 host addresses are in a /24 subnet?

  1. A. 254
  2. B. 255
  3. C. 256
  4. D. 510
Show answer and explanation

Answer: A

A /24 has 256 total addresses; network and broadcast are not usable for hosts.

Week 5 • Wednesday • Card 2 • Subnetting and addressing

Q112. During a jail CCTV network audit, what subnet mask matches /26?

  1. A. 255.255.255.0
  2. B. 255.255.255.128
  3. C. 255.255.255.192
  4. D. 255.255.255.224
Show answer and explanation

Answer: C

/26 equals 255.255.255.192 and provides 62 usable host addresses.

Week 5 • Wednesday • Card 3 • Subnetting and addressing

Q113. For an access control panel network, which subnet contains host 10.10.5.77/26?

  1. A. 10.10.5.0/26
  2. B. 10.10.5.64/26
  3. C. 10.10.5.128/26
  4. D. 10.10.5.192/26
Show answer and explanation

Answer: B

/26 subnets increment by 64. Address .77 belongs to 10.10.5.64/26.

Week 5 • Wednesday • Card 4 • Subnetting and addressing

Q114. When reviewing a county security electronics network, what is the broadcast address for 192.168.20.32/27?

  1. A. 192.168.20.31
  2. B. 192.168.20.63
  3. C. 192.168.20.64
  4. D. 192.168.20.95
Show answer and explanation

Answer: B

/27 increments by 32. The .32 subnet ends at .63.

Week 5 • Wednesday • Card 5 • Subnetting and addressing

Q115. During commissioning of Axis cameras into Genetec, how many usable hosts are available in a /30?

  1. A. 2
  2. B. 4
  3. C. 6
  4. D. 14
Show answer and explanation

Answer: A

A /30 has four total addresses and two usable host addresses, common for point-to-point links.

Week 5 • Thursday • Card 1 • Subnetting and addressing

Q116. For a remote video monitoring site, which prefix gives approximately 14 usable host addresses?

  1. A. /28
  2. B. /27
  3. C. /26
  4. D. /25
Show answer and explanation

Answer: A

/28 provides 16 total addresses and 14 usable host addresses.

Week 5 • Thursday • Card 2 • Subnetting and addressing

Q117. When separating CCTV from the corporate LAN, what does CIDR notation /23 represent?

  1. A. 255.255.255.0
  2. B. 255.255.254.0
  3. C. 255.255.252.0
  4. D. 255.255.248.0
Show answer and explanation

Answer: B

/23 corresponds to 255.255.254.0.

Week 5 • Thursday • Card 3 • Subnetting and addressing

Q118. During network cutover testing, which range is private IPv4?

  1. A. 192.0.2.0/24
  2. B. 192.168.0.0/16
  3. C. 198.51.100.0/24
  4. D. 203.0.113.0/24
Show answer and explanation

Answer: B

192.168.0.0/16 is private. The other ranges are documentation/test networks.

Week 5 • Thursday • Card 4 • Subnetting and addressing

Q119. For a recorder-to-camera traffic path, what is the network address of 172.20.14.199/24?

  1. A. 172.20.14.0
  2. B. 172.20.14.199
  3. C. 172.20.14.255
  4. D. 172.20.0.0
Show answer and explanation

Answer: A

With /24, the first three octets define the network.

Week 5 • Thursday • Card 5 • Subnetting and addressing

Q120. For a Genetec camera VLAN deployment, why should camera IP plans avoid overlapping subnets?

  1. A. It disables PoE
  2. B. Routing becomes ambiguous
  3. C. DNS stops working
  4. D. NTP cannot synchronize
Show answer and explanation

Answer: B

Overlapping subnets can cause routing ambiguity and difficult troubleshooting between camera, server, and client networks.

Week 5 • Friday • Card 1 • Switching and VLANs

Q121. While troubleshooting a Security Center client connection, which switch port mode carries multiple VLANs?

  1. A. Access
  2. B. Trunk
  3. C. Shutdown
  4. D. Loopback
Show answer and explanation

Answer: B

A trunk carries traffic for multiple VLANs using tagging, usually 802.1Q.

Week 5 • Friday • Card 2 • Switching and VLANs

Q122. During a jail CCTV network audit, which switch port mode should normally be used for a single IP camera?

  1. A. Trunk
  2. B. Access
  3. C. Routed
  4. D. Monitor
Show answer and explanation

Answer: B

A single camera usually belongs to one VLAN, so an access port is appropriate.

Week 5 • Friday • Card 3 • Switching and VLANs

Q123. For an access control panel network, what is the native VLAN on an 802.1Q trunk?

  1. A. The VLAN carried untagged
  2. B. The voice VLAN only
  3. C. The management VLAN only
  4. D. The disabled VLAN
Show answer and explanation

Answer: A

The native VLAN is sent untagged across an 802.1Q trunk.

Week 5 • Friday • Card 4 • Switching and VLANs

Q124. When reviewing a county security electronics network, what problem does STP help prevent?

  1. A. IP address exhaustion
  2. B. Layer 2 loops
  3. C. DNS poisoning
  4. D. NAT overload
Show answer and explanation

Answer: B

Spanning Tree Protocol blocks redundant paths to prevent Layer 2 loops.

Week 5 • Friday • Card 5 • Switching and VLANs

Q125. During commissioning of Axis cameras into Genetec, what does a switch use to forward frames?

  1. A. ARP table
  2. B. MAC address table
  3. C. Routing table
  4. D. DNS cache
Show answer and explanation

Answer: B

Switches forward frames based on destination MAC addresses learned in the MAC table.

Week 6 • Monday • Card 1 • Switching and VLANs

Q126. For a remote video monitoring site, which command commonly verifies VLAN membership on Cisco IOS?

  1. A. show vlan brief
  2. B. show ip route
  3. C. show clock
  4. D. show arp vrf
Show answer and explanation

Answer: A

show vlan brief displays VLANs and assigned access ports.

Week 6 • Monday • Card 2 • Switching and VLANs

Q127. When separating CCTV from the corporate LAN, what happens when a switch receives an unknown unicast frame?

  1. A. It drops it always
  2. B. It floods within the VLAN
  3. C. It sends it to the router only
  4. D. It converts it to multicast
Show answer and explanation

Answer: B

Unknown unicast frames are flooded within the same VLAN.

Week 6 • Monday • Card 3 • Switching and VLANs

Q128. During network cutover testing, why place cameras in a dedicated VLAN?

  1. A. To increase pixel resolution
  2. B. To reduce broadcast scope and improve security
  3. C. To remove the need for DNS
  4. D. To disable multicast
Show answer and explanation

Answer: B

A camera VLAN limits broadcast traffic and improves segmentation and security.

Week 6 • Monday • Card 4 • Switching and VLANs

Q129. For a recorder-to-camera traffic path, what is port security commonly used for?

  1. A. Limiting MAC addresses on a switch port
  2. B. Encrypting routing updates
  3. C. Creating VLAN trunks
  4. D. Assigning IPv6 addresses
Show answer and explanation

Answer: A

Port security can restrict which MAC addresses are allowed on an access port.

Week 6 • Monday • Card 5 • Switching and VLANs

Q130. For a Genetec camera VLAN deployment, what is a switched virtual interface, or SVI?

  1. A. A logical Layer 3 interface for a VLAN
  2. B. A physical fiber port
  3. C. A DNS record
  4. D. A PoE injector
Show answer and explanation

Answer: A

An SVI provides Layer 3 gateway functionality for a VLAN on a multilayer switch.

Week 6 • Tuesday • Card 1 • Routing

Q131. While troubleshooting a Security Center client connection, which route is used when no more specific route matches?

  1. A. Connected route
  2. B. Default route
  3. C. Host route
  4. D. Summary route
Show answer and explanation

Answer: B

A default route, often 0.0.0.0/0, is used when no better match exists.

Week 6 • Tuesday • Card 2 • Routing

Q132. During a jail CCTV network audit, what is administrative distance used for?

  1. A. Choosing between routing sources
  2. B. Setting switch speed
  3. C. Assigning VLAN numbers
  4. D. Encrypting packets
Show answer and explanation

Answer: A

Administrative distance ranks route sources when multiple protocols advertise the same destination.

Week 6 • Tuesday • Card 3 • Routing

Q133. For an access control panel network, which route type is automatically created when an interface has an IP address and is up?

  1. A. Static
  2. B. Connected
  3. C. BGP
  4. D. Default
Show answer and explanation

Answer: B

Connected routes appear automatically for active interfaces with IP addressing.

Week 6 • Tuesday • Card 4 • Routing

Q134. When reviewing a county security electronics network, what does longest prefix match mean?

  1. A. The route with the largest metric wins
  2. B. The most specific matching route is chosen
  3. C. The oldest route is chosen
  4. D. The default route always wins
Show answer and explanation

Answer: B

Routers choose the most specific route that matches the destination IP.

Week 6 • Tuesday • Card 5 • Routing

Q135. During commissioning of Axis cameras into Genetec, which command commonly displays the IPv4 routing table on Cisco IOS?

  1. A. show ip route
  2. B. show vlan
  3. C. show mac address-table
  4. D. show power inline
Show answer and explanation

Answer: A

show ip route displays learned and configured IPv4 routes.

Week 6 • Wednesday • Card 1 • Routing

Q136. For a remote video monitoring site, which protocol is an interior gateway protocol?

  1. A. OSPF
  2. B. HTTP
  3. C. ARP
  4. D. NTP
Show answer and explanation

Answer: A

OSPF is an IGP used for dynamic routing inside an organization.

Week 6 • Wednesday • Card 2 • Routing

Q137. When separating CCTV from the corporate LAN, what is a static route?

  1. A. A manually configured route
  2. B. A DHCP lease
  3. C. A VLAN tag
  4. D. A DNS alias
Show answer and explanation

Answer: A

Static routes are manually entered and do not dynamically adapt unless tracking is configured.

Week 6 • Wednesday • Card 3 • Routing

Q138. During network cutover testing, what is a next-hop IP address?

  1. A. The destination host
  2. B. The neighboring router to forward traffic to
  3. C. The DNS server
  4. D. The DHCP server
Show answer and explanation

Answer: B

The next hop is the router address used to reach a destination network.

Week 6 • Wednesday • Card 4 • Routing

Q139. For a recorder-to-camera traffic path, what is route summarization?

  1. A. Combining multiple networks into a shorter prefix
  2. B. Encrypting routes
  3. C. Removing VLAN tags
  4. D. Converting IPv4 to IPv6
Show answer and explanation

Answer: A

Summarization advertises multiple contiguous networks as one route to reduce table size.

Week 6 • Wednesday • Card 5 • Routing

Q140. For a Genetec camera VLAN deployment, why is asymmetric routing sometimes a problem for security systems?

  1. A. It changes camera resolution
  2. B. Firewalls may see only one side of a session
  3. C. It disables PoE
  4. D. It prevents ARP
Show answer and explanation

Answer: B

Stateful firewalls may drop traffic if return traffic follows a different path and session state is not seen.

Week 6 • Thursday • Card 1 • Wireless and RF basics

Q141. While troubleshooting a Security Center client connection, which Wi-Fi band generally has better wall penetration?

  1. A. 2.4 GHz
  2. B. 5 GHz
  3. C. 6 GHz
  4. D. 60 GHz
Show answer and explanation

Answer: A

2.4 GHz usually penetrates walls better, but has more interference and fewer non-overlapping channels.

Week 6 • Thursday • Card 2 • Wireless and RF basics

Q142. During a jail CCTV network audit, which Wi-Fi band usually offers more channels and higher throughput than 2.4 GHz?

  1. A. 900 MHz
  2. B. 5 GHz
  3. C. AM radio
  4. D. Bluetooth only
Show answer and explanation

Answer: B

5 GHz usually has more available channels and higher throughput, but shorter range.

Week 6 • Thursday • Card 3 • Wireless and RF basics

Q143. For an access control panel network, what is SSID?

  1. A. A wireless network name
  2. B. A routing protocol
  3. C. A PoE class
  4. D. A firewall action
Show answer and explanation

Answer: A

SSID is the advertised or configured wireless network name.

Week 6 • Thursday • Card 4 • Wireless and RF basics

Q144. When reviewing a county security electronics network, which security mode is stronger than WPA2-Personal when available?

  1. A. WEP
  2. B. Open
  3. C. WPA3
  4. D. TKIP only
Show answer and explanation

Answer: C

WPA3 improves authentication and cryptographic protections over older modes.

Week 6 • Thursday • Card 5 • Wireless and RF basics

Q145. During commissioning of Axis cameras into Genetec, what is roaming in Wi-Fi?

  1. A. Moving a client between access points
  2. B. Changing IP subnets manually
  3. C. Replacing antennas
  4. D. Turning off encryption
Show answer and explanation

Answer: A

Roaming occurs when a wireless client moves between APs while maintaining connectivity.

Week 6 • Friday • Card 1 • Wireless and RF basics

Q146. For a remote video monitoring site, what does RSSI indicate?

  1. A. Received signal strength
  2. B. Routing table size
  3. C. Camera frame rate
  4. D. Switch buffer size
Show answer and explanation

Answer: A

RSSI is a measure of received signal strength.

Week 6 • Friday • Card 2 • Wireless and RF basics

Q147. When separating CCTV from the corporate LAN, why are wireless cameras often avoided for critical CCTV?

  1. A. They cannot use IP
  2. B. Wireless links may be less predictable than wired links
  3. C. They cannot use DNS
  4. D. They require IPv6
Show answer and explanation

Answer: B

Wireless is vulnerable to interference, capacity limits, and RF design issues.

Week 6 • Friday • Card 3 • Wireless and RF basics

Q148. During network cutover testing, which issue is caused by too many APs on the same channel?

  1. A. Co-channel interference
  2. B. DNS recursion
  3. C. DHCP starvation only
  4. D. NTP drift
Show answer and explanation

Answer: A

Co-channel interference occurs when too many devices contend on the same channel.

Week 6 • Friday • Card 4 • Wireless and RF basics

Q149. For a recorder-to-camera traffic path, what does a captive portal typically provide?

  1. A. Web-based authentication or acceptance
  2. B. PoE negotiation
  3. C. OSPF adjacency
  4. D. Camera lens focus
Show answer and explanation

Answer: A

Captive portals intercept web traffic for login or terms acceptance.

Week 6 • Friday • Card 5 • Wireless and RF basics

Q150. For a Genetec camera VLAN deployment, which design best supports mobile Genetec client devices over Wi-Fi?

  1. A. Strong coverage, capacity planning, and secure authentication
  2. B. One AP at maximum power
  3. C. Open Wi-Fi only
  4. D. Disable roaming
Show answer and explanation

Answer: A

Mobile video clients need reliable coverage, adequate capacity, secure authentication, and controlled roaming.

Week 7 • Monday • Card 1 • IP services

Q151. While troubleshooting a Security Center client connection, which protocol dynamically assigns IP addresses?

  1. A. DHCP
  2. B. DNS
  3. C. SNMP
  4. D. SSH
Show answer and explanation

Answer: A

DHCP leases IP configuration such as address, mask, gateway, and DNS.

Week 7 • Monday • Card 2 • IP services

Q152. During a jail CCTV network audit, which DHCP message does a client send first?

  1. A. DISCOVER
  2. B. OFFER
  3. C. REQUEST
  4. D. ACK
Show answer and explanation

Answer: A

A DHCP client starts by broadcasting DHCPDISCOVER.

Week 7 • Monday • Card 3 • IP services

Q153. For an access control panel network, what is the purpose of DHCP reservation?

  1. A. Assigning a consistent IP to a known MAC address
  2. B. Encrypting DHCP
  3. C. Creating VLANs
  4. D. Blocking DNS
Show answer and explanation

Answer: A

Reservations help keep devices such as cameras or servers at predictable addresses.

Week 7 • Monday • Card 4 • IP services

Q154. When reviewing a county security electronics network, which service synchronizes time across network devices?

  1. A. NTP
  2. B. DNS
  3. C. DHCP
  4. D. FTP
Show answer and explanation

Answer: A

NTP synchronizes clocks, which is critical for video evidence timelines and logs.

Week 7 • Monday • Card 5 • IP services

Q155. During commissioning of Axis cameras into Genetec, which protocol is commonly used for device monitoring?

  1. A. SNMP
  2. B. SMTP
  3. C. RDP
  4. D. RTP
Show answer and explanation

Answer: A

SNMP can monitor device status, interfaces, and alerts.

Week 7 • Tuesday • Card 1 • IP services

Q156. For a remote video monitoring site, what does Syslog provide?

  1. A. Centralized log messages
  2. B. IP address assignment
  3. C. MAC learning
  4. D. Power delivery
Show answer and explanation

Answer: A

Syslog sends event messages to a centralized logging system.

Week 7 • Tuesday • Card 2 • IP services

Q157. When separating CCTV from the corporate LAN, which protocol securely administers network devices by CLI?

  1. A. Telnet
  2. B. SSH
  3. C. TFTP
  4. D. HTTP
Show answer and explanation

Answer: B

SSH encrypts remote CLI access. Telnet is unencrypted.

Week 7 • Tuesday • Card 3 • IP services

Q158. During network cutover testing, which protocol is commonly used to transfer configuration files but is not secure?

  1. A. TFTP
  2. B. HTTPS
  3. C. SSH
  4. D. SCP
Show answer and explanation

Answer: A

TFTP is simple and unencrypted.

Week 7 • Tuesday • Card 4 • IP services

Q159. For a recorder-to-camera traffic path, what is DNS A record used for?

  1. A. Mapping a hostname to IPv4
  2. B. Mapping IP to MAC
  3. C. Assigning VLANs
  4. D. Setting PoE class
Show answer and explanation

Answer: A

An A record maps a hostname to an IPv4 address.

Week 7 • Tuesday • Card 5 • IP services

Q160. For a Genetec camera VLAN deployment, why is accurate NTP important for Genetec systems?

  1. A. It improves lens zoom
  2. B. It keeps video, access events, and audit logs aligned
  3. C. It increases PoE wattage
  4. D. It prevents all packet loss
Show answer and explanation

Answer: B

Accurate time keeps camera video, access control events, and audit logs correlated.

Week 7 • Wednesday • Card 1 • Security fundamentals

Q161. While troubleshooting a Security Center client connection, what does AAA stand for?

  1. A. Authentication, Authorization, Accounting
  2. B. Access, Allow, Audit
  3. C. Address, ARP, ACL
  4. D. Analyze, Alert, Archive
Show answer and explanation

Answer: A

AAA identifies users, determines permissions, and records activity.

Week 7 • Wednesday • Card 2 • Security fundamentals

Q162. During a jail CCTV network audit, which protocol provides centralized AAA for network devices?

  1. A. RADIUS
  2. B. ARP
  3. C. ICMP
  4. D. NTP
Show answer and explanation

Answer: A

RADIUS is commonly used for centralized authentication and authorization.

Week 7 • Wednesday • Card 3 • Security fundamentals

Q163. For an access control panel network, what is the purpose of an ACL?

  1. A. Filter traffic based on rules
  2. B. Assign DHCP leases
  3. C. Increase PoE
  4. D. Store video
Show answer and explanation

Answer: A

Access control lists permit or deny traffic based on criteria such as IPs, ports, and protocols.

Week 7 • Wednesday • Card 4 • Security fundamentals

Q164. When reviewing a county security electronics network, which management method is least secure?

  1. A. SSH
  2. B. HTTPS
  3. C. Telnet
  4. D. SNMPv3
Show answer and explanation

Answer: C

Telnet sends credentials and traffic in clear text.

Week 7 • Wednesday • Card 5 • Security fundamentals

Q165. During commissioning of Axis cameras into Genetec, which SNMP version supports authentication and encryption?

  1. A. SNMPv1
  2. B. SNMPv2c
  3. C. SNMPv3
  4. D. All versions equally
Show answer and explanation

Answer: C

SNMPv3 supports stronger authentication and privacy features.

Week 7 • Thursday • Card 1 • Security fundamentals

Q166. For a remote video monitoring site, what is 802.1X used for?

  1. A. Port-based network access control
  2. B. DNS forwarding
  3. C. Static routing
  4. D. PoE measurement
Show answer and explanation

Answer: A

802.1X authenticates devices or users before granting network access.

Week 7 • Thursday • Card 2 • Security fundamentals

Q167. When separating CCTV from the corporate LAN, what is a firewall zone?

  1. A. A logical security area with policy controls
  2. B. A switch backplane
  3. C. A DHCP scope
  4. D. A Wi-Fi antenna pattern
Show answer and explanation

Answer: A

Zones group interfaces or networks so policies can control traffic between them.

Week 7 • Thursday • Card 3 • Security fundamentals

Q168. During network cutover testing, why should camera default passwords be changed?

  1. A. To improve image quality
  2. B. To prevent unauthorized access
  3. C. To increase FPS
  4. D. To enable ARP
Show answer and explanation

Answer: B

Default credentials are widely known and create serious security risk.

Week 7 • Thursday • Card 4 • Security fundamentals

Q169. For a recorder-to-camera traffic path, what is least privilege?

  1. A. Giving only the permissions required
  2. B. Giving all users admin rights
  3. C. Disabling all logging
  4. D. Using only one password
Show answer and explanation

Answer: A

Least privilege reduces risk by limiting access to required functions only.

Week 7 • Thursday • Card 5 • Security fundamentals

Q170. For a Genetec camera VLAN deployment, why segment access control panels from general user PCs?

  1. A. To reduce security exposure and limit lateral movement
  2. B. To increase monitor resolution
  3. C. To eliminate DHCP
  4. D. To disable routing
Show answer and explanation

Answer: A

Segmentation helps protect physical security systems from compromise on less trusted networks.

Week 7 • Friday • Card 1 • NAT and WAN

Q171. While troubleshooting a Security Center client connection, what does NAT do?

  1. A. Translates IP addresses
  2. B. Encrypts wireless
  3. C. Assigns VLANs
  4. D. Learns MAC addresses
Show answer and explanation

Answer: A

Network Address Translation changes source or destination IP information.

Week 7 • Friday • Card 2 • NAT and WAN

Q172. During a jail CCTV network audit, what is PAT also called?

  1. A. NAT overload
  2. B. Static routing
  3. C. DNS relay
  4. D. ARP proxy
Show answer and explanation

Answer: A

PAT maps many internal hosts to one public IP using port numbers.

Week 7 • Friday • Card 3 • NAT and WAN

Q173. For an access control panel network, which private address is commonly translated before Internet access?

  1. A. 10.1.1.10
  2. B. 8.8.8.8
  3. C. 1.1.1.1
  4. D. 203.0.113.1
Show answer and explanation

Answer: A

10.0.0.0/8 is private and typically translated for Internet access.

Week 7 • Friday • Card 4 • NAT and WAN

Q174. When reviewing a county security electronics network, what is a site-to-site VPN commonly used for?

  1. A. Securely connecting two networks
  2. B. Powering cameras
  3. C. Assigning VLANs
  4. D. Replacing DNS
Show answer and explanation

Answer: A

A site-to-site VPN securely connects networks across an untrusted transport.

Week 7 • Friday • Card 5 • NAT and WAN

Q175. During commissioning of Axis cameras into Genetec, which protocol helps verify reachability across WAN links?

  1. A. ICMP
  2. B. PoE
  3. C. LLDP
  4. D. STP
Show answer and explanation

Answer: A

ICMP echo requests/replies are commonly used with ping.

Week 8 • Monday • Card 1 • NAT and WAN

Q176. For a remote video monitoring site, what is split tunneling?

  1. A. Sending some traffic through VPN and some directly
  2. B. Dividing a VLAN tag
  3. C. Splitting fiber strands
  4. D. Using two DHCP servers
Show answer and explanation

Answer: A

Split tunneling routes selected traffic through a VPN while other traffic goes directly.

Week 8 • Monday • Card 2 • NAT and WAN

Q177. When separating CCTV from the corporate LAN, why avoid exposing camera web interfaces directly to the Internet?

  1. A. It increases attack surface
  2. B. It disables DNS
  3. C. It prevents recording
  4. D. It changes MTU
Show answer and explanation

Answer: A

Direct exposure increases risk from credential attacks and vulnerabilities.

Week 8 • Monday • Card 3 • NAT and WAN

Q178. During network cutover testing, what is port forwarding?

  1. A. Mapping an external port to an internal host/service
  2. B. Creating a VLAN
  3. C. Blocking ARP
  4. D. Learning MAC addresses
Show answer and explanation

Answer: A

Port forwarding directs traffic received on a public IP/port to an internal IP/port.

Week 8 • Monday • Card 4 • NAT and WAN

Q179. For a recorder-to-camera traffic path, which WAN issue most affects live video smoothness?

  1. A. Latency, jitter, and packet loss
  2. B. Hostnames only
  3. C. Keyboard layout
  4. D. Cable color
Show answer and explanation

Answer: A

Video performance is affected by latency, jitter, packet loss, and available bandwidth.

Week 8 • Monday • Card 5 • NAT and WAN

Q180. For a Genetec camera VLAN deployment, what is QoS used for over constrained WAN links?

  1. A. Prioritizing important traffic
  2. B. Creating IP addresses
  3. C. Replacing firewalls
  4. D. Changing camera lens angle
Show answer and explanation

Answer: A

QoS classifies and prioritizes traffic when bandwidth is limited.

Week 8 • Tuesday • Card 1 • QoS and multicast video

Q181. While troubleshooting a Security Center client connection, what is multicast designed for?

  1. A. One-to-many efficient traffic delivery
  2. B. Only one-to-one delivery
  3. C. Encrypting packets
  4. D. Assigning DHCP addresses
Show answer and explanation

Answer: A

Multicast efficiently sends one stream to multiple receivers.

Week 8 • Tuesday • Card 2 • QoS and multicast video

Q182. During a jail CCTV network audit, which protocol lets hosts join IPv4 multicast groups?

  1. A. IGMP
  2. B. ARP
  3. C. DNS
  4. D. NTP
Show answer and explanation

Answer: A

IGMP is used by hosts and switches/routers for IPv4 multicast group membership.

Week 8 • Tuesday • Card 3 • QoS and multicast video

Q183. For an access control panel network, what does IGMP snooping do on a switch?

  1. A. Limits multicast flooding by tracking group membership
  2. B. Encrypts multicast
  3. C. Assigns multicast IPs
  4. D. Blocks all video
Show answer and explanation

Answer: A

IGMP snooping helps switches forward multicast only to interested ports.

Week 8 • Tuesday • Card 4 • QoS and multicast video

Q184. When reviewing a county security electronics network, which IPv4 range is multicast?

  1. A. 224.0.0.0/4
  2. B. 10.0.0.0/8
  3. C. 172.16.0.0/12
  4. D. 192.168.0.0/16
Show answer and explanation

Answer: A

IPv4 multicast uses 224.0.0.0 through 239.255.255.255.

Week 8 • Tuesday • Card 5 • QoS and multicast video

Q185. During commissioning of Axis cameras into Genetec, what does QoS classification do?

  1. A. Identifies traffic for policy treatment
  2. B. Creates a subnet
  3. C. Changes MAC addresses
  4. D. Erases logs
Show answer and explanation

Answer: A

Classification identifies traffic types so QoS policies can mark, queue, or police them.

Week 8 • Wednesday • Card 1 • QoS and multicast video

Q186. For a remote video monitoring site, what is DSCP?

  1. A. A Layer 3 QoS marking field
  2. B. A switch port mode
  3. C. A wireless SSID
  4. D. A DHCP option
Show answer and explanation

Answer: A

DSCP marks packets for differentiated QoS treatment.

Week 8 • Wednesday • Card 2 • QoS and multicast video

Q187. When separating CCTV from the corporate LAN, why can video surveillance traffic need QoS?

  1. A. Video can be bandwidth-intensive and delay-sensitive
  2. B. Video cannot use IP
  3. C. Video disables VLANs
  4. D. Video requires Telnet
Show answer and explanation

Answer: A

Live viewing and control traffic may need priority when links are congested.

Week 8 • Wednesday • Card 3 • QoS and multicast video

Q188. During network cutover testing, what is jitter?

  1. A. Variation in packet delay
  2. B. Static IP assignment
  3. C. MAC address aging
  4. D. A VLAN mismatch
Show answer and explanation

Answer: A

Jitter is inconsistent packet delay, which can affect real-time video and audio.

Week 8 • Wednesday • Card 4 • QoS and multicast video

Q189. For a recorder-to-camera traffic path, what should be enabled to prevent multicast flooding in a camera VLAN?

  1. A. IGMP snooping
  2. B. Telnet
  3. C. PortFast disablement
  4. D. NAT overload
Show answer and explanation

Answer: A

IGMP snooping reduces unnecessary multicast flooding within a VLAN.

Week 8 • Wednesday • Card 5 • QoS and multicast video

Q190. For a Genetec camera VLAN deployment, which traffic is often best kept unicast unless multicast is designed properly?

  1. A. Camera video streams
  2. B. NTP queries
  3. C. ARP replies
  4. D. DHCP offers
Show answer and explanation

Answer: A

Multicast video needs proper IGMP and routing design. Without it, unicast is often simpler and safer.

Week 8 • Thursday • Card 1 • Automation and programmability

Q191. While troubleshooting a Security Center client connection, which data format is commonly used by REST APIs?

  1. A. JSON
  2. B. STP
  3. C. ARP
  4. D. VLAN
Show answer and explanation

Answer: A

JSON is widely used to exchange structured data in REST APIs.

Week 8 • Thursday • Card 2 • Automation and programmability

Q192. During a jail CCTV network audit, what does REST commonly use as its transport/application protocol?

  1. A. HTTP/HTTPS
  2. B. ARP
  3. C. ICMP only
  4. D. STP
Show answer and explanation

Answer: A

RESTful APIs commonly use HTTP or HTTPS methods.

Week 8 • Thursday • Card 3 • Automation and programmability

Q193. For an access control panel network, which HTTP method is commonly used to retrieve information?

  1. A. GET
  2. B. POST
  3. C. PUT
  4. D. DELETE
Show answer and explanation

Answer: A

GET retrieves a resource without changing it.

Week 8 • Thursday • Card 4 • Automation and programmability

Q194. When reviewing a county security electronics network, which HTTP method is commonly used to create a new object?

  1. A. POST
  2. B. GET
  3. C. PING
  4. D. TRACEPATH
Show answer and explanation

Answer: A

POST is commonly used to submit data or create resources.

Week 8 • Thursday • Card 5 • Automation and programmability

Q195. During commissioning of Axis cameras into Genetec, what is an API token used for?

  1. A. Authentication/authorization to an API
  2. B. PoE negotiation
  3. C. MAC learning
  4. D. Fiber splicing
Show answer and explanation

Answer: A

API tokens are used to authenticate and authorize API requests.

Week 8 • Friday • Card 1 • Automation and programmability

Q196. For a remote video monitoring site, which tool is often used for API testing from a workstation?

  1. A. Postman
  2. B. STP
  3. C. DHCP relay
  4. D. LLDP-MED
Show answer and explanation

Answer: A

Postman is commonly used for testing REST APIs.

Week 8 • Friday • Card 2 • Automation and programmability

Q197. When separating CCTV from the corporate LAN, what is idempotency?

  1. A. Repeating an operation gives the same result
  2. B. Traffic is encrypted
  3. C. A port is trunking
  4. D. A camera is recording
Show answer and explanation

Answer: A

An idempotent operation can be repeated without changing the result beyond the first application.

Week 8 • Friday • Card 3 • Automation and programmability

Q198. During network cutover testing, why is network automation useful for security systems?

  1. A. It reduces repetitive configuration errors
  2. B. It removes need for IP addresses
  3. C. It prevents all outages
  4. D. It replaces physical cabling
Show answer and explanation

Answer: A

Automation improves consistency, speeds changes, and reduces manual mistakes.

Week 8 • Friday • Card 4 • Automation and programmability

Q199. For a recorder-to-camera traffic path, which file format is commonly used for network automation variables?

  1. A. YAML
  2. B. JPEG
  3. C. MP3
  4. D. BMP
Show answer and explanation

Answer: A

YAML is frequently used for human-readable configuration data.

Week 8 • Friday • Card 5 • Automation and programmability

Q200. For a Genetec camera VLAN deployment, what is Git used for?

  1. A. Version control
  2. B. Packet switching
  3. C. PoE delivery
  4. D. Wireless roaming
Show answer and explanation

Answer: A

Git tracks changes to files such as scripts, templates, and configurations.

Week 9 • Monday • Card 1 • Networking fundamentals

Q201. During a jail CCTV network audit, which OSI layer is responsible for logical IP addressing?

  1. A. Layer 2
  2. B. Layer 3
  3. C. Layer 4
  4. D. Layer 7
Show answer and explanation

Answer: B

Layer 3, the Network layer, provides logical addressing and routing using IP. This is where video clients, cameras, and servers are routed between subnets.

Week 9 • Monday • Card 2 • Networking fundamentals

Q202. For an access control panel network, which device primarily separates broadcast domains?

  1. A. Switch
  2. B. Hub
  3. C. Router
  4. D. Patch panel
Show answer and explanation

Answer: C

Routers and Layer 3 switches separate broadcast domains. This matters when separating camera VLANs, access control VLANs, and corporate LANs.

Week 9 • Monday • Card 3 • Networking fundamentals

Q203. When reviewing a county security electronics network, what is the purpose of a default gateway?

  1. A. Encrypt traffic
  2. B. Forward traffic outside the local subnet
  3. C. Assign VLAN IDs
  4. D. Convert fiber to copper
Show answer and explanation

Answer: B

A host sends traffic to its default gateway when the destination is outside the local subnet.

Week 9 • Monday • Card 4 • Networking fundamentals

Q204. During commissioning of Axis cameras into Genetec, which protocol resolves an IPv4 address to a MAC address?

  1. A. DNS
  2. B. ARP
  3. C. DHCP
  4. D. NTP
Show answer and explanation

Answer: B

ARP maps IPv4 addresses to MAC addresses on the local network.

Week 9 • Monday • Card 5 • Networking fundamentals

Q205. For a remote video monitoring site, which value identifies a VLAN on an 802.1Q trunk?

  1. A. DSCP
  2. B. VLAN ID
  3. C. MAC address
  4. D. TCP port
Show answer and explanation

Answer: B

802.1Q inserts a VLAN tag that includes the VLAN ID.

Week 9 • Tuesday • Card 1 • Networking fundamentals

Q206. When separating CCTV from the corporate LAN, what does MTU define?

  1. A. Maximum frame count per second
  2. B. Maximum transmission unit size
  3. C. Minimum trunk utilization
  4. D. MAC table update time
Show answer and explanation

Answer: B

MTU is the largest packet/frame payload size supported without fragmentation.

Week 9 • Tuesday • Card 2 • Networking fundamentals

Q207. During network cutover testing, which address is a private IPv4 address?

  1. A. 8.8.8.8
  2. B. 172.16.5.10
  3. C. 1.1.1.1
  4. D. 224.0.0.1
Show answer and explanation

Answer: B

172.16.0.0/12 is private IPv4 space.

Week 9 • Tuesday • Card 3 • Networking fundamentals

Q208. For a recorder-to-camera traffic path, which address is link-local IPv4?

  1. A. 169.254.10.20
  2. B. 10.10.10.20
  3. C. 192.168.1.20
  4. D. 172.20.1.20
Show answer and explanation

Answer: A

169.254.0.0/16 is APIPA/link-local addressing used when DHCP fails.

Week 9 • Tuesday • Card 4 • Networking fundamentals

Q209. For a Genetec camera VLAN deployment, which protocol translates hostnames to IP addresses?

  1. A. DNS
  2. B. SNMP
  3. C. RTP
  4. D. SSH
Show answer and explanation

Answer: A

DNS resolves names such as servers or cloud services to IP addresses.

Week 9 • Tuesday • Card 5 • Networking fundamentals

Q210. While troubleshooting a Security Center client connection, which transport protocol is connection-oriented?

  1. A. UDP
  2. B. TCP
  3. C. ICMP
  4. D. ARP
Show answer and explanation

Answer: B

TCP uses sessions, acknowledgements, and retransmission.

Week 9 • Wednesday • Card 1 • Subnetting and addressing

Q211. During a jail CCTV network audit, how many usable IPv4 host addresses are in a /24 subnet?

  1. A. 254
  2. B. 255
  3. C. 256
  4. D. 510
Show answer and explanation

Answer: A

A /24 has 256 total addresses; network and broadcast are not usable for hosts.

Week 9 • Wednesday • Card 2 • Subnetting and addressing

Q212. For an access control panel network, what subnet mask matches /26?

  1. A. 255.255.255.0
  2. B. 255.255.255.128
  3. C. 255.255.255.192
  4. D. 255.255.255.224
Show answer and explanation

Answer: C

/26 equals 255.255.255.192 and provides 62 usable host addresses.

Week 9 • Wednesday • Card 3 • Subnetting and addressing

Q213. When reviewing a county security electronics network, which subnet contains host 10.10.5.77/26?

  1. A. 10.10.5.0/26
  2. B. 10.10.5.64/26
  3. C. 10.10.5.128/26
  4. D. 10.10.5.192/26
Show answer and explanation

Answer: B

/26 subnets increment by 64. Address .77 belongs to 10.10.5.64/26.

Week 9 • Wednesday • Card 4 • Subnetting and addressing

Q214. During commissioning of Axis cameras into Genetec, what is the broadcast address for 192.168.20.32/27?

  1. A. 192.168.20.31
  2. B. 192.168.20.63
  3. C. 192.168.20.64
  4. D. 192.168.20.95
Show answer and explanation

Answer: B

/27 increments by 32. The .32 subnet ends at .63.

Week 9 • Wednesday • Card 5 • Subnetting and addressing

Q215. For a remote video monitoring site, how many usable hosts are available in a /30?

  1. A. 2
  2. B. 4
  3. C. 6
  4. D. 14
Show answer and explanation

Answer: A

A /30 has four total addresses and two usable host addresses, common for point-to-point links.

Week 9 • Thursday • Card 1 • Subnetting and addressing

Q216. When separating CCTV from the corporate LAN, which prefix gives approximately 14 usable host addresses?

  1. A. /28
  2. B. /27
  3. C. /26
  4. D. /25
Show answer and explanation

Answer: A

/28 provides 16 total addresses and 14 usable host addresses.

Week 9 • Thursday • Card 2 • Subnetting and addressing

Q217. During network cutover testing, what does CIDR notation /23 represent?

  1. A. 255.255.255.0
  2. B. 255.255.254.0
  3. C. 255.255.252.0
  4. D. 255.255.248.0
Show answer and explanation

Answer: B

/23 corresponds to 255.255.254.0.

Week 9 • Thursday • Card 3 • Subnetting and addressing

Q218. For a recorder-to-camera traffic path, which range is private IPv4?

  1. A. 192.0.2.0/24
  2. B. 192.168.0.0/16
  3. C. 198.51.100.0/24
  4. D. 203.0.113.0/24
Show answer and explanation

Answer: B

192.168.0.0/16 is private. The other ranges are documentation/test networks.

Week 9 • Thursday • Card 4 • Subnetting and addressing

Q219. For a Genetec camera VLAN deployment, what is the network address of 172.20.14.199/24?

  1. A. 172.20.14.0
  2. B. 172.20.14.199
  3. C. 172.20.14.255
  4. D. 172.20.0.0
Show answer and explanation

Answer: A

With /24, the first three octets define the network.

Week 9 • Thursday • Card 5 • Subnetting and addressing

Q220. While troubleshooting a Security Center client connection, why should camera IP plans avoid overlapping subnets?

  1. A. It disables PoE
  2. B. Routing becomes ambiguous
  3. C. DNS stops working
  4. D. NTP cannot synchronize
Show answer and explanation

Answer: B

Overlapping subnets can cause routing ambiguity and difficult troubleshooting between camera, server, and client networks.

Week 9 • Friday • Card 1 • Switching and VLANs

Q221. During a jail CCTV network audit, which switch port mode carries multiple VLANs?

  1. A. Access
  2. B. Trunk
  3. C. Shutdown
  4. D. Loopback
Show answer and explanation

Answer: B

A trunk carries traffic for multiple VLANs using tagging, usually 802.1Q.

Week 9 • Friday • Card 2 • Switching and VLANs

Q222. For an access control panel network, which switch port mode should normally be used for a single IP camera?

  1. A. Trunk
  2. B. Access
  3. C. Routed
  4. D. Monitor
Show answer and explanation

Answer: B

A single camera usually belongs to one VLAN, so an access port is appropriate.

Week 9 • Friday • Card 3 • Switching and VLANs

Q223. When reviewing a county security electronics network, what is the native VLAN on an 802.1Q trunk?

  1. A. The VLAN carried untagged
  2. B. The voice VLAN only
  3. C. The management VLAN only
  4. D. The disabled VLAN
Show answer and explanation

Answer: A

The native VLAN is sent untagged across an 802.1Q trunk.

Week 9 • Friday • Card 4 • Switching and VLANs

Q224. During commissioning of Axis cameras into Genetec, what problem does STP help prevent?

  1. A. IP address exhaustion
  2. B. Layer 2 loops
  3. C. DNS poisoning
  4. D. NAT overload
Show answer and explanation

Answer: B

Spanning Tree Protocol blocks redundant paths to prevent Layer 2 loops.

Week 9 • Friday • Card 5 • Switching and VLANs

Q225. For a remote video monitoring site, what does a switch use to forward frames?

  1. A. ARP table
  2. B. MAC address table
  3. C. Routing table
  4. D. DNS cache
Show answer and explanation

Answer: B

Switches forward frames based on destination MAC addresses learned in the MAC table.

Week 10 • Monday • Card 1 • Switching and VLANs

Q226. When separating CCTV from the corporate LAN, which command commonly verifies VLAN membership on Cisco IOS?

  1. A. show vlan brief
  2. B. show ip route
  3. C. show clock
  4. D. show arp vrf
Show answer and explanation

Answer: A

show vlan brief displays VLANs and assigned access ports.

Week 10 • Monday • Card 2 • Switching and VLANs

Q227. During network cutover testing, what happens when a switch receives an unknown unicast frame?

  1. A. It drops it always
  2. B. It floods within the VLAN
  3. C. It sends it to the router only
  4. D. It converts it to multicast
Show answer and explanation

Answer: B

Unknown unicast frames are flooded within the same VLAN.

Week 10 • Monday • Card 3 • Switching and VLANs

Q228. For a recorder-to-camera traffic path, why place cameras in a dedicated VLAN?

  1. A. To increase pixel resolution
  2. B. To reduce broadcast scope and improve security
  3. C. To remove the need for DNS
  4. D. To disable multicast
Show answer and explanation

Answer: B

A camera VLAN limits broadcast traffic and improves segmentation and security.

Week 10 • Monday • Card 4 • Switching and VLANs

Q229. For a Genetec camera VLAN deployment, what is port security commonly used for?

  1. A. Limiting MAC addresses on a switch port
  2. B. Encrypting routing updates
  3. C. Creating VLAN trunks
  4. D. Assigning IPv6 addresses
Show answer and explanation

Answer: A

Port security can restrict which MAC addresses are allowed on an access port.

Week 10 • Monday • Card 5 • Switching and VLANs

Q230. While troubleshooting a Security Center client connection, what is a switched virtual interface, or SVI?

  1. A. A logical Layer 3 interface for a VLAN
  2. B. A physical fiber port
  3. C. A DNS record
  4. D. A PoE injector
Show answer and explanation

Answer: A

An SVI provides Layer 3 gateway functionality for a VLAN on a multilayer switch.

Week 10 • Tuesday • Card 1 • Routing

Q231. During a jail CCTV network audit, which route is used when no more specific route matches?

  1. A. Connected route
  2. B. Default route
  3. C. Host route
  4. D. Summary route
Show answer and explanation

Answer: B

A default route, often 0.0.0.0/0, is used when no better match exists.

Week 10 • Tuesday • Card 2 • Routing

Q232. For an access control panel network, what is administrative distance used for?

  1. A. Choosing between routing sources
  2. B. Setting switch speed
  3. C. Assigning VLAN numbers
  4. D. Encrypting packets
Show answer and explanation

Answer: A

Administrative distance ranks route sources when multiple protocols advertise the same destination.

Week 10 • Tuesday • Card 3 • Routing

Q233. When reviewing a county security electronics network, which route type is automatically created when an interface has an IP address and is up?

  1. A. Static
  2. B. Connected
  3. C. BGP
  4. D. Default
Show answer and explanation

Answer: B

Connected routes appear automatically for active interfaces with IP addressing.

Week 10 • Tuesday • Card 4 • Routing

Q234. During commissioning of Axis cameras into Genetec, what does longest prefix match mean?

  1. A. The route with the largest metric wins
  2. B. The most specific matching route is chosen
  3. C. The oldest route is chosen
  4. D. The default route always wins
Show answer and explanation

Answer: B

Routers choose the most specific route that matches the destination IP.

Week 10 • Tuesday • Card 5 • Routing

Q235. For a remote video monitoring site, which command commonly displays the IPv4 routing table on Cisco IOS?

  1. A. show ip route
  2. B. show vlan
  3. C. show mac address-table
  4. D. show power inline
Show answer and explanation

Answer: A

show ip route displays learned and configured IPv4 routes.

Week 10 • Wednesday • Card 1 • Routing

Q236. When separating CCTV from the corporate LAN, which protocol is an interior gateway protocol?

  1. A. OSPF
  2. B. HTTP
  3. C. ARP
  4. D. NTP
Show answer and explanation

Answer: A

OSPF is an IGP used for dynamic routing inside an organization.

Week 10 • Wednesday • Card 2 • Routing

Q237. During network cutover testing, what is a static route?

  1. A. A manually configured route
  2. B. A DHCP lease
  3. C. A VLAN tag
  4. D. A DNS alias
Show answer and explanation

Answer: A

Static routes are manually entered and do not dynamically adapt unless tracking is configured.

Week 10 • Wednesday • Card 3 • Routing

Q238. For a recorder-to-camera traffic path, what is a next-hop IP address?

  1. A. The destination host
  2. B. The neighboring router to forward traffic to
  3. C. The DNS server
  4. D. The DHCP server
Show answer and explanation

Answer: B

The next hop is the router address used to reach a destination network.

Week 10 • Wednesday • Card 4 • Routing

Q239. For a Genetec camera VLAN deployment, what is route summarization?

  1. A. Combining multiple networks into a shorter prefix
  2. B. Encrypting routes
  3. C. Removing VLAN tags
  4. D. Converting IPv4 to IPv6
Show answer and explanation

Answer: A

Summarization advertises multiple contiguous networks as one route to reduce table size.

Week 10 • Wednesday • Card 5 • Routing

Q240. While troubleshooting a Security Center client connection, why is asymmetric routing sometimes a problem for security systems?

  1. A. It changes camera resolution
  2. B. Firewalls may see only one side of a session
  3. C. It disables PoE
  4. D. It prevents ARP
Show answer and explanation

Answer: B

Stateful firewalls may drop traffic if return traffic follows a different path and session state is not seen.

Week 10 • Thursday • Card 1 • Wireless and RF basics

Q241. During a jail CCTV network audit, which Wi-Fi band generally has better wall penetration?

  1. A. 2.4 GHz
  2. B. 5 GHz
  3. C. 6 GHz
  4. D. 60 GHz
Show answer and explanation

Answer: A

2.4 GHz usually penetrates walls better, but has more interference and fewer non-overlapping channels.

Week 10 • Thursday • Card 2 • Wireless and RF basics

Q242. For an access control panel network, which Wi-Fi band usually offers more channels and higher throughput than 2.4 GHz?

  1. A. 900 MHz
  2. B. 5 GHz
  3. C. AM radio
  4. D. Bluetooth only
Show answer and explanation

Answer: B

5 GHz usually has more available channels and higher throughput, but shorter range.

Week 10 • Thursday • Card 3 • Wireless and RF basics

Q243. When reviewing a county security electronics network, what is SSID?

  1. A. A wireless network name
  2. B. A routing protocol
  3. C. A PoE class
  4. D. A firewall action
Show answer and explanation

Answer: A

SSID is the advertised or configured wireless network name.

Week 10 • Thursday • Card 4 • Wireless and RF basics

Q244. During commissioning of Axis cameras into Genetec, which security mode is stronger than WPA2-Personal when available?

  1. A. WEP
  2. B. Open
  3. C. WPA3
  4. D. TKIP only
Show answer and explanation

Answer: C

WPA3 improves authentication and cryptographic protections over older modes.

Week 10 • Thursday • Card 5 • Wireless and RF basics

Q245. For a remote video monitoring site, what is roaming in Wi-Fi?

  1. A. Moving a client between access points
  2. B. Changing IP subnets manually
  3. C. Replacing antennas
  4. D. Turning off encryption
Show answer and explanation

Answer: A

Roaming occurs when a wireless client moves between APs while maintaining connectivity.

Week 10 • Friday • Card 1 • Wireless and RF basics

Q246. When separating CCTV from the corporate LAN, what does RSSI indicate?

  1. A. Received signal strength
  2. B. Routing table size
  3. C. Camera frame rate
  4. D. Switch buffer size
Show answer and explanation

Answer: A

RSSI is a measure of received signal strength.

Week 10 • Friday • Card 2 • Wireless and RF basics

Q247. During network cutover testing, why are wireless cameras often avoided for critical CCTV?

  1. A. They cannot use IP
  2. B. Wireless links may be less predictable than wired links
  3. C. They cannot use DNS
  4. D. They require IPv6
Show answer and explanation

Answer: B

Wireless is vulnerable to interference, capacity limits, and RF design issues.

Week 10 • Friday • Card 3 • Wireless and RF basics

Q248. For a recorder-to-camera traffic path, which issue is caused by too many APs on the same channel?

  1. A. Co-channel interference
  2. B. DNS recursion
  3. C. DHCP starvation only
  4. D. NTP drift
Show answer and explanation

Answer: A

Co-channel interference occurs when too many devices contend on the same channel.

Week 10 • Friday • Card 4 • Wireless and RF basics

Q249. For a Genetec camera VLAN deployment, what does a captive portal typically provide?

  1. A. Web-based authentication or acceptance
  2. B. PoE negotiation
  3. C. OSPF adjacency
  4. D. Camera lens focus
Show answer and explanation

Answer: A

Captive portals intercept web traffic for login or terms acceptance.

Week 10 • Friday • Card 5 • Wireless and RF basics

Q250. While troubleshooting a Security Center client connection, which design best supports mobile Genetec client devices over Wi-Fi?

  1. A. Strong coverage, capacity planning, and secure authentication
  2. B. One AP at maximum power
  3. C. Open Wi-Fi only
  4. D. Disable roaming
Show answer and explanation

Answer: A

Mobile video clients need reliable coverage, adequate capacity, secure authentication, and controlled roaming.

Week 11 • Monday • Card 1 • IP services

Q251. During a jail CCTV network audit, which protocol dynamically assigns IP addresses?

  1. A. DHCP
  2. B. DNS
  3. C. SNMP
  4. D. SSH
Show answer and explanation

Answer: A

DHCP leases IP configuration such as address, mask, gateway, and DNS.

Week 11 • Monday • Card 2 • IP services

Q252. For an access control panel network, which DHCP message does a client send first?

  1. A. DISCOVER
  2. B. OFFER
  3. C. REQUEST
  4. D. ACK
Show answer and explanation

Answer: A

A DHCP client starts by broadcasting DHCPDISCOVER.

Week 11 • Monday • Card 3 • IP services

Q253. When reviewing a county security electronics network, what is the purpose of DHCP reservation?

  1. A. Assigning a consistent IP to a known MAC address
  2. B. Encrypting DHCP
  3. C. Creating VLANs
  4. D. Blocking DNS
Show answer and explanation

Answer: A

Reservations help keep devices such as cameras or servers at predictable addresses.

Week 11 • Monday • Card 4 • IP services

Q254. During commissioning of Axis cameras into Genetec, which service synchronizes time across network devices?

  1. A. NTP
  2. B. DNS
  3. C. DHCP
  4. D. FTP
Show answer and explanation

Answer: A

NTP synchronizes clocks, which is critical for video evidence timelines and logs.

Week 11 • Monday • Card 5 • IP services

Q255. For a remote video monitoring site, which protocol is commonly used for device monitoring?

  1. A. SNMP
  2. B. SMTP
  3. C. RDP
  4. D. RTP
Show answer and explanation

Answer: A

SNMP can monitor device status, interfaces, and alerts.

Week 11 • Tuesday • Card 1 • IP services

Q256. When separating CCTV from the corporate LAN, what does Syslog provide?

  1. A. Centralized log messages
  2. B. IP address assignment
  3. C. MAC learning
  4. D. Power delivery
Show answer and explanation

Answer: A

Syslog sends event messages to a centralized logging system.

Week 11 • Tuesday • Card 2 • IP services

Q257. During network cutover testing, which protocol securely administers network devices by CLI?

  1. A. Telnet
  2. B. SSH
  3. C. TFTP
  4. D. HTTP
Show answer and explanation

Answer: B

SSH encrypts remote CLI access. Telnet is unencrypted.

Week 11 • Tuesday • Card 3 • IP services

Q258. For a recorder-to-camera traffic path, which protocol is commonly used to transfer configuration files but is not secure?

  1. A. TFTP
  2. B. HTTPS
  3. C. SSH
  4. D. SCP
Show answer and explanation

Answer: A

TFTP is simple and unencrypted.

Week 11 • Tuesday • Card 4 • IP services

Q259. For a Genetec camera VLAN deployment, what is DNS A record used for?

  1. A. Mapping a hostname to IPv4
  2. B. Mapping IP to MAC
  3. C. Assigning VLANs
  4. D. Setting PoE class
Show answer and explanation

Answer: A

An A record maps a hostname to an IPv4 address.

Week 11 • Tuesday • Card 5 • IP services

Q260. While troubleshooting a Security Center client connection, why is accurate NTP important for Genetec systems?

  1. A. It improves lens zoom
  2. B. It keeps video, access events, and audit logs aligned
  3. C. It increases PoE wattage
  4. D. It prevents all packet loss
Show answer and explanation

Answer: B

Accurate time keeps camera video, access control events, and audit logs correlated.

Week 11 • Wednesday • Card 1 • Security fundamentals

Q261. During a jail CCTV network audit, what does AAA stand for?

  1. A. Authentication, Authorization, Accounting
  2. B. Access, Allow, Audit
  3. C. Address, ARP, ACL
  4. D. Analyze, Alert, Archive
Show answer and explanation

Answer: A

AAA identifies users, determines permissions, and records activity.

Week 11 • Wednesday • Card 2 • Security fundamentals

Q262. For an access control panel network, which protocol provides centralized AAA for network devices?

  1. A. RADIUS
  2. B. ARP
  3. C. ICMP
  4. D. NTP
Show answer and explanation

Answer: A

RADIUS is commonly used for centralized authentication and authorization.

Week 11 • Wednesday • Card 3 • Security fundamentals

Q263. When reviewing a county security electronics network, what is the purpose of an ACL?

  1. A. Filter traffic based on rules
  2. B. Assign DHCP leases
  3. C. Increase PoE
  4. D. Store video
Show answer and explanation

Answer: A

Access control lists permit or deny traffic based on criteria such as IPs, ports, and protocols.

Week 11 • Wednesday • Card 4 • Security fundamentals

Q264. During commissioning of Axis cameras into Genetec, which management method is least secure?

  1. A. SSH
  2. B. HTTPS
  3. C. Telnet
  4. D. SNMPv3
Show answer and explanation

Answer: C

Telnet sends credentials and traffic in clear text.

Week 11 • Wednesday • Card 5 • Security fundamentals

Q265. For a remote video monitoring site, which SNMP version supports authentication and encryption?

  1. A. SNMPv1
  2. B. SNMPv2c
  3. C. SNMPv3
  4. D. All versions equally
Show answer and explanation

Answer: C

SNMPv3 supports stronger authentication and privacy features.

Week 11 • Thursday • Card 1 • Security fundamentals

Q266. When separating CCTV from the corporate LAN, what is 802.1X used for?

  1. A. Port-based network access control
  2. B. DNS forwarding
  3. C. Static routing
  4. D. PoE measurement
Show answer and explanation

Answer: A

802.1X authenticates devices or users before granting network access.

Week 11 • Thursday • Card 2 • Security fundamentals

Q267. During network cutover testing, what is a firewall zone?

  1. A. A logical security area with policy controls
  2. B. A switch backplane
  3. C. A DHCP scope
  4. D. A Wi-Fi antenna pattern
Show answer and explanation

Answer: A

Zones group interfaces or networks so policies can control traffic between them.

Week 11 • Thursday • Card 3 • Security fundamentals

Q268. For a recorder-to-camera traffic path, why should camera default passwords be changed?

  1. A. To improve image quality
  2. B. To prevent unauthorized access
  3. C. To increase FPS
  4. D. To enable ARP
Show answer and explanation

Answer: B

Default credentials are widely known and create serious security risk.

Week 11 • Thursday • Card 4 • Security fundamentals

Q269. For a Genetec camera VLAN deployment, what is least privilege?

  1. A. Giving only the permissions required
  2. B. Giving all users admin rights
  3. C. Disabling all logging
  4. D. Using only one password
Show answer and explanation

Answer: A

Least privilege reduces risk by limiting access to required functions only.

Week 11 • Thursday • Card 5 • Security fundamentals

Q270. While troubleshooting a Security Center client connection, why segment access control panels from general user PCs?

  1. A. To reduce security exposure and limit lateral movement
  2. B. To increase monitor resolution
  3. C. To eliminate DHCP
  4. D. To disable routing
Show answer and explanation

Answer: A

Segmentation helps protect physical security systems from compromise on less trusted networks.

Week 11 • Friday • Card 1 • NAT and WAN

Q271. During a jail CCTV network audit, what does NAT do?

  1. A. Translates IP addresses
  2. B. Encrypts wireless
  3. C. Assigns VLANs
  4. D. Learns MAC addresses
Show answer and explanation

Answer: A

Network Address Translation changes source or destination IP information.

Week 11 • Friday • Card 2 • NAT and WAN

Q272. For an access control panel network, what is PAT also called?

  1. A. NAT overload
  2. B. Static routing
  3. C. DNS relay
  4. D. ARP proxy
Show answer and explanation

Answer: A

PAT maps many internal hosts to one public IP using port numbers.

Week 11 • Friday • Card 3 • NAT and WAN

Q273. When reviewing a county security electronics network, which private address is commonly translated before Internet access?

  1. A. 10.1.1.10
  2. B. 8.8.8.8
  3. C. 1.1.1.1
  4. D. 203.0.113.1
Show answer and explanation

Answer: A

10.0.0.0/8 is private and typically translated for Internet access.

Week 11 • Friday • Card 4 • NAT and WAN

Q274. During commissioning of Axis cameras into Genetec, what is a site-to-site VPN commonly used for?

  1. A. Securely connecting two networks
  2. B. Powering cameras
  3. C. Assigning VLANs
  4. D. Replacing DNS
Show answer and explanation

Answer: A

A site-to-site VPN securely connects networks across an untrusted transport.

Week 11 • Friday • Card 5 • NAT and WAN

Q275. For a remote video monitoring site, which protocol helps verify reachability across WAN links?

  1. A. ICMP
  2. B. PoE
  3. C. LLDP
  4. D. STP
Show answer and explanation

Answer: A

ICMP echo requests/replies are commonly used with ping.

Week 12 • Monday • Card 1 • NAT and WAN

Q276. When separating CCTV from the corporate LAN, what is split tunneling?

  1. A. Sending some traffic through VPN and some directly
  2. B. Dividing a VLAN tag
  3. C. Splitting fiber strands
  4. D. Using two DHCP servers
Show answer and explanation

Answer: A

Split tunneling routes selected traffic through a VPN while other traffic goes directly.

Week 12 • Monday • Card 2 • NAT and WAN

Q277. During network cutover testing, why avoid exposing camera web interfaces directly to the Internet?

  1. A. It increases attack surface
  2. B. It disables DNS
  3. C. It prevents recording
  4. D. It changes MTU
Show answer and explanation

Answer: A

Direct exposure increases risk from credential attacks and vulnerabilities.

Week 12 • Monday • Card 3 • NAT and WAN

Q278. For a recorder-to-camera traffic path, what is port forwarding?

  1. A. Mapping an external port to an internal host/service
  2. B. Creating a VLAN
  3. C. Blocking ARP
  4. D. Learning MAC addresses
Show answer and explanation

Answer: A

Port forwarding directs traffic received on a public IP/port to an internal IP/port.

Week 12 • Monday • Card 4 • NAT and WAN

Q279. For a Genetec camera VLAN deployment, which WAN issue most affects live video smoothness?

  1. A. Latency, jitter, and packet loss
  2. B. Hostnames only
  3. C. Keyboard layout
  4. D. Cable color
Show answer and explanation

Answer: A

Video performance is affected by latency, jitter, packet loss, and available bandwidth.

Week 12 • Monday • Card 5 • NAT and WAN

Q280. While troubleshooting a Security Center client connection, what is QoS used for over constrained WAN links?

  1. A. Prioritizing important traffic
  2. B. Creating IP addresses
  3. C. Replacing firewalls
  4. D. Changing camera lens angle
Show answer and explanation

Answer: A

QoS classifies and prioritizes traffic when bandwidth is limited.

Week 12 • Tuesday • Card 1 • QoS and multicast video

Q281. During a jail CCTV network audit, what is multicast designed for?

  1. A. One-to-many efficient traffic delivery
  2. B. Only one-to-one delivery
  3. C. Encrypting packets
  4. D. Assigning DHCP addresses
Show answer and explanation

Answer: A

Multicast efficiently sends one stream to multiple receivers.

Week 12 • Tuesday • Card 2 • QoS and multicast video

Q282. For an access control panel network, which protocol lets hosts join IPv4 multicast groups?

  1. A. IGMP
  2. B. ARP
  3. C. DNS
  4. D. NTP
Show answer and explanation

Answer: A

IGMP is used by hosts and switches/routers for IPv4 multicast group membership.

Week 12 • Tuesday • Card 3 • QoS and multicast video

Q283. When reviewing a county security electronics network, what does IGMP snooping do on a switch?

  1. A. Limits multicast flooding by tracking group membership
  2. B. Encrypts multicast
  3. C. Assigns multicast IPs
  4. D. Blocks all video
Show answer and explanation

Answer: A

IGMP snooping helps switches forward multicast only to interested ports.

Week 12 • Tuesday • Card 4 • QoS and multicast video

Q284. During commissioning of Axis cameras into Genetec, which IPv4 range is multicast?

  1. A. 224.0.0.0/4
  2. B. 10.0.0.0/8
  3. C. 172.16.0.0/12
  4. D. 192.168.0.0/16
Show answer and explanation

Answer: A

IPv4 multicast uses 224.0.0.0 through 239.255.255.255.

Week 12 • Tuesday • Card 5 • QoS and multicast video

Q285. For a remote video monitoring site, what does QoS classification do?

  1. A. Identifies traffic for policy treatment
  2. B. Creates a subnet
  3. C. Changes MAC addresses
  4. D. Erases logs
Show answer and explanation

Answer: A

Classification identifies traffic types so QoS policies can mark, queue, or police them.

Week 12 • Wednesday • Card 1 • QoS and multicast video

Q286. When separating CCTV from the corporate LAN, what is DSCP?

  1. A. A Layer 3 QoS marking field
  2. B. A switch port mode
  3. C. A wireless SSID
  4. D. A DHCP option
Show answer and explanation

Answer: A

DSCP marks packets for differentiated QoS treatment.

Week 12 • Wednesday • Card 2 • QoS and multicast video

Q287. During network cutover testing, why can video surveillance traffic need QoS?

  1. A. Video can be bandwidth-intensive and delay-sensitive
  2. B. Video cannot use IP
  3. C. Video disables VLANs
  4. D. Video requires Telnet
Show answer and explanation

Answer: A

Live viewing and control traffic may need priority when links are congested.

Week 12 • Wednesday • Card 3 • QoS and multicast video

Q288. For a recorder-to-camera traffic path, what is jitter?

  1. A. Variation in packet delay
  2. B. Static IP assignment
  3. C. MAC address aging
  4. D. A VLAN mismatch
Show answer and explanation

Answer: A

Jitter is inconsistent packet delay, which can affect real-time video and audio.

Week 12 • Wednesday • Card 4 • QoS and multicast video

Q289. For a Genetec camera VLAN deployment, what should be enabled to prevent multicast flooding in a camera VLAN?

  1. A. IGMP snooping
  2. B. Telnet
  3. C. PortFast disablement
  4. D. NAT overload
Show answer and explanation

Answer: A

IGMP snooping reduces unnecessary multicast flooding within a VLAN.

Week 12 • Wednesday • Card 5 • QoS and multicast video

Q290. While troubleshooting a Security Center client connection, which traffic is often best kept unicast unless multicast is designed properly?

  1. A. Camera video streams
  2. B. NTP queries
  3. C. ARP replies
  4. D. DHCP offers
Show answer and explanation

Answer: A

Multicast video needs proper IGMP and routing design. Without it, unicast is often simpler and safer.

Week 12 • Thursday • Card 1 • Automation and programmability

Q291. During a jail CCTV network audit, which data format is commonly used by REST APIs?

  1. A. JSON
  2. B. STP
  3. C. ARP
  4. D. VLAN
Show answer and explanation

Answer: A

JSON is widely used to exchange structured data in REST APIs.

Week 12 • Thursday • Card 2 • Automation and programmability

Q292. For an access control panel network, what does REST commonly use as its transport/application protocol?

  1. A. HTTP/HTTPS
  2. B. ARP
  3. C. ICMP only
  4. D. STP
Show answer and explanation

Answer: A

RESTful APIs commonly use HTTP or HTTPS methods.

Week 12 • Thursday • Card 3 • Automation and programmability

Q293. When reviewing a county security electronics network, which HTTP method is commonly used to retrieve information?

  1. A. GET
  2. B. POST
  3. C. PUT
  4. D. DELETE
Show answer and explanation

Answer: A

GET retrieves a resource without changing it.

Week 12 • Thursday • Card 4 • Automation and programmability

Q294. During commissioning of Axis cameras into Genetec, which HTTP method is commonly used to create a new object?

  1. A. POST
  2. B. GET
  3. C. PING
  4. D. TRACEPATH
Show answer and explanation

Answer: A

POST is commonly used to submit data or create resources.

Week 12 • Thursday • Card 5 • Automation and programmability

Q295. For a remote video monitoring site, what is an API token used for?

  1. A. Authentication/authorization to an API
  2. B. PoE negotiation
  3. C. MAC learning
  4. D. Fiber splicing
Show answer and explanation

Answer: A

API tokens are used to authenticate and authorize API requests.

Week 12 • Friday • Card 1 • Automation and programmability

Q296. When separating CCTV from the corporate LAN, which tool is often used for API testing from a workstation?

  1. A. Postman
  2. B. STP
  3. C. DHCP relay
  4. D. LLDP-MED
Show answer and explanation

Answer: A

Postman is commonly used for testing REST APIs.

Week 12 • Friday • Card 2 • Automation and programmability

Q297. During network cutover testing, what is idempotency?

  1. A. Repeating an operation gives the same result
  2. B. Traffic is encrypted
  3. C. A port is trunking
  4. D. A camera is recording
Show answer and explanation

Answer: A

An idempotent operation can be repeated without changing the result beyond the first application.

Week 12 • Friday • Card 3 • Automation and programmability

Q298. For a recorder-to-camera traffic path, why is network automation useful for security systems?

  1. A. It reduces repetitive configuration errors
  2. B. It removes need for IP addresses
  3. C. It prevents all outages
  4. D. It replaces physical cabling
Show answer and explanation

Answer: A

Automation improves consistency, speeds changes, and reduces manual mistakes.

Week 12 • Friday • Card 4 • Automation and programmability

Q299. For a Genetec camera VLAN deployment, which file format is commonly used for network automation variables?

  1. A. YAML
  2. B. JPEG
  3. C. MP3
  4. D. BMP
Show answer and explanation

Answer: A

YAML is frequently used for human-readable configuration data.

Week 12 • Friday • Card 5 • Automation and programmability

Q300. While troubleshooting a Security Center client connection, what is Git used for?

  1. A. Version control
  2. B. Packet switching
  3. C. PoE delivery
  4. D. Wireless roaming
Show answer and explanation

Answer: A

Git tracks changes to files such as scripts, templates, and configurations.

Week 13 • Monday • Card 1 • Networking fundamentals

Q301. For an access control panel network, which OSI layer is responsible for logical IP addressing?

  1. A. Layer 2
  2. B. Layer 3
  3. C. Layer 4
  4. D. Layer 7
Show answer and explanation

Answer: B

Layer 3, the Network layer, provides logical addressing and routing using IP. This is where video clients, cameras, and servers are routed between subnets.

Week 13 • Monday • Card 2 • Networking fundamentals

Q302. When reviewing a county security electronics network, which device primarily separates broadcast domains?

  1. A. Switch
  2. B. Hub
  3. C. Router
  4. D. Patch panel
Show answer and explanation

Answer: C

Routers and Layer 3 switches separate broadcast domains. This matters when separating camera VLANs, access control VLANs, and corporate LANs.

Week 13 • Monday • Card 3 • Networking fundamentals

Q303. During commissioning of Axis cameras into Genetec, what is the purpose of a default gateway?

  1. A. Encrypt traffic
  2. B. Forward traffic outside the local subnet
  3. C. Assign VLAN IDs
  4. D. Convert fiber to copper
Show answer and explanation

Answer: B

A host sends traffic to its default gateway when the destination is outside the local subnet.

Week 13 • Monday • Card 4 • Networking fundamentals

Q304. For a remote video monitoring site, which protocol resolves an IPv4 address to a MAC address?

  1. A. DNS
  2. B. ARP
  3. C. DHCP
  4. D. NTP
Show answer and explanation

Answer: B

ARP maps IPv4 addresses to MAC addresses on the local network.

Week 13 • Monday • Card 5 • Networking fundamentals

Q305. When separating CCTV from the corporate LAN, which value identifies a VLAN on an 802.1Q trunk?

  1. A. DSCP
  2. B. VLAN ID
  3. C. MAC address
  4. D. TCP port
Show answer and explanation

Answer: B

802.1Q inserts a VLAN tag that includes the VLAN ID.

Week 13 • Tuesday • Card 1 • Networking fundamentals

Q306. During network cutover testing, what does MTU define?

  1. A. Maximum frame count per second
  2. B. Maximum transmission unit size
  3. C. Minimum trunk utilization
  4. D. MAC table update time
Show answer and explanation

Answer: B

MTU is the largest packet/frame payload size supported without fragmentation.

Week 13 • Tuesday • Card 2 • Networking fundamentals

Q307. For a recorder-to-camera traffic path, which address is a private IPv4 address?

  1. A. 8.8.8.8
  2. B. 172.16.5.10
  3. C. 1.1.1.1
  4. D. 224.0.0.1
Show answer and explanation

Answer: B

172.16.0.0/12 is private IPv4 space.

Week 13 • Tuesday • Card 3 • Networking fundamentals

Q308. For a Genetec camera VLAN deployment, which address is link-local IPv4?

  1. A. 169.254.10.20
  2. B. 10.10.10.20
  3. C. 192.168.1.20
  4. D. 172.20.1.20
Show answer and explanation

Answer: A

169.254.0.0/16 is APIPA/link-local addressing used when DHCP fails.

Week 13 • Tuesday • Card 4 • Networking fundamentals

Q309. While troubleshooting a Security Center client connection, which protocol translates hostnames to IP addresses?

  1. A. DNS
  2. B. SNMP
  3. C. RTP
  4. D. SSH
Show answer and explanation

Answer: A

DNS resolves names such as servers or cloud services to IP addresses.

Week 13 • Tuesday • Card 5 • Networking fundamentals

Q310. During a jail CCTV network audit, which transport protocol is connection-oriented?

  1. A. UDP
  2. B. TCP
  3. C. ICMP
  4. D. ARP
Show answer and explanation

Answer: B

TCP uses sessions, acknowledgements, and retransmission.

Week 13 • Wednesday • Card 1 • Subnetting and addressing

Q311. For an access control panel network, how many usable IPv4 host addresses are in a /24 subnet?

  1. A. 254
  2. B. 255
  3. C. 256
  4. D. 510
Show answer and explanation

Answer: A

A /24 has 256 total addresses; network and broadcast are not usable for hosts.

Week 13 • Wednesday • Card 2 • Subnetting and addressing

Q312. When reviewing a county security electronics network, what subnet mask matches /26?

  1. A. 255.255.255.0
  2. B. 255.255.255.128
  3. C. 255.255.255.192
  4. D. 255.255.255.224
Show answer and explanation

Answer: C

/26 equals 255.255.255.192 and provides 62 usable host addresses.

Week 13 • Wednesday • Card 3 • Subnetting and addressing

Q313. During commissioning of Axis cameras into Genetec, which subnet contains host 10.10.5.77/26?

  1. A. 10.10.5.0/26
  2. B. 10.10.5.64/26
  3. C. 10.10.5.128/26
  4. D. 10.10.5.192/26
Show answer and explanation

Answer: B

/26 subnets increment by 64. Address .77 belongs to 10.10.5.64/26.

Week 13 • Wednesday • Card 4 • Subnetting and addressing

Q314. For a remote video monitoring site, what is the broadcast address for 192.168.20.32/27?

  1. A. 192.168.20.31
  2. B. 192.168.20.63
  3. C. 192.168.20.64
  4. D. 192.168.20.95
Show answer and explanation

Answer: B

/27 increments by 32. The .32 subnet ends at .63.

Week 13 • Wednesday • Card 5 • Subnetting and addressing

Q315. When separating CCTV from the corporate LAN, how many usable hosts are available in a /30?

  1. A. 2
  2. B. 4
  3. C. 6
  4. D. 14
Show answer and explanation

Answer: A

A /30 has four total addresses and two usable host addresses, common for point-to-point links.

Week 13 • Thursday • Card 1 • Subnetting and addressing

Q316. During network cutover testing, which prefix gives approximately 14 usable host addresses?

  1. A. /28
  2. B. /27
  3. C. /26
  4. D. /25
Show answer and explanation

Answer: A

/28 provides 16 total addresses and 14 usable host addresses.

Week 13 • Thursday • Card 2 • Subnetting and addressing

Q317. For a recorder-to-camera traffic path, what does CIDR notation /23 represent?

  1. A. 255.255.255.0
  2. B. 255.255.254.0
  3. C. 255.255.252.0
  4. D. 255.255.248.0
Show answer and explanation

Answer: B

/23 corresponds to 255.255.254.0.

Week 13 • Thursday • Card 3 • Subnetting and addressing

Q318. For a Genetec camera VLAN deployment, which range is private IPv4?

  1. A. 192.0.2.0/24
  2. B. 192.168.0.0/16
  3. C. 198.51.100.0/24
  4. D. 203.0.113.0/24
Show answer and explanation

Answer: B

192.168.0.0/16 is private. The other ranges are documentation/test networks.

Week 13 • Thursday • Card 4 • Subnetting and addressing

Q319. While troubleshooting a Security Center client connection, what is the network address of 172.20.14.199/24?

  1. A. 172.20.14.0
  2. B. 172.20.14.199
  3. C. 172.20.14.255
  4. D. 172.20.0.0
Show answer and explanation

Answer: A

With /24, the first three octets define the network.

Week 13 • Thursday • Card 5 • Subnetting and addressing

Q320. During a jail CCTV network audit, why should camera IP plans avoid overlapping subnets?

  1. A. It disables PoE
  2. B. Routing becomes ambiguous
  3. C. DNS stops working
  4. D. NTP cannot synchronize
Show answer and explanation

Answer: B

Overlapping subnets can cause routing ambiguity and difficult troubleshooting between camera, server, and client networks.

Week 13 • Friday • Card 1 • Switching and VLANs

Q321. For an access control panel network, which switch port mode carries multiple VLANs?

  1. A. Access
  2. B. Trunk
  3. C. Shutdown
  4. D. Loopback
Show answer and explanation

Answer: B

A trunk carries traffic for multiple VLANs using tagging, usually 802.1Q.

Week 13 • Friday • Card 2 • Switching and VLANs

Q322. When reviewing a county security electronics network, which switch port mode should normally be used for a single IP camera?

  1. A. Trunk
  2. B. Access
  3. C. Routed
  4. D. Monitor
Show answer and explanation

Answer: B

A single camera usually belongs to one VLAN, so an access port is appropriate.

Week 13 • Friday • Card 3 • Switching and VLANs

Q323. During commissioning of Axis cameras into Genetec, what is the native VLAN on an 802.1Q trunk?

  1. A. The VLAN carried untagged
  2. B. The voice VLAN only
  3. C. The management VLAN only
  4. D. The disabled VLAN
Show answer and explanation

Answer: A

The native VLAN is sent untagged across an 802.1Q trunk.

Week 13 • Friday • Card 4 • Switching and VLANs

Q324. For a remote video monitoring site, what problem does STP help prevent?

  1. A. IP address exhaustion
  2. B. Layer 2 loops
  3. C. DNS poisoning
  4. D. NAT overload
Show answer and explanation

Answer: B

Spanning Tree Protocol blocks redundant paths to prevent Layer 2 loops.

Week 13 • Friday • Card 5 • Switching and VLANs

Q325. When separating CCTV from the corporate LAN, what does a switch use to forward frames?

  1. A. ARP table
  2. B. MAC address table
  3. C. Routing table
  4. D. DNS cache
Show answer and explanation

Answer: B

Switches forward frames based on destination MAC addresses learned in the MAC table.

Week 14 • Monday • Card 1 • Switching and VLANs

Q326. During network cutover testing, which command commonly verifies VLAN membership on Cisco IOS?

  1. A. show vlan brief
  2. B. show ip route
  3. C. show clock
  4. D. show arp vrf
Show answer and explanation

Answer: A

show vlan brief displays VLANs and assigned access ports.

Week 14 • Monday • Card 2 • Switching and VLANs

Q327. For a recorder-to-camera traffic path, what happens when a switch receives an unknown unicast frame?

  1. A. It drops it always
  2. B. It floods within the VLAN
  3. C. It sends it to the router only
  4. D. It converts it to multicast
Show answer and explanation

Answer: B

Unknown unicast frames are flooded within the same VLAN.

Week 14 • Monday • Card 3 • Switching and VLANs

Q328. For a Genetec camera VLAN deployment, why place cameras in a dedicated VLAN?

  1. A. To increase pixel resolution
  2. B. To reduce broadcast scope and improve security
  3. C. To remove the need for DNS
  4. D. To disable multicast
Show answer and explanation

Answer: B

A camera VLAN limits broadcast traffic and improves segmentation and security.

Week 14 • Monday • Card 4 • Switching and VLANs

Q329. While troubleshooting a Security Center client connection, what is port security commonly used for?

  1. A. Limiting MAC addresses on a switch port
  2. B. Encrypting routing updates
  3. C. Creating VLAN trunks
  4. D. Assigning IPv6 addresses
Show answer and explanation

Answer: A

Port security can restrict which MAC addresses are allowed on an access port.

Week 14 • Monday • Card 5 • Switching and VLANs

Q330. During a jail CCTV network audit, what is a switched virtual interface, or SVI?

  1. A. A logical Layer 3 interface for a VLAN
  2. B. A physical fiber port
  3. C. A DNS record
  4. D. A PoE injector
Show answer and explanation

Answer: A

An SVI provides Layer 3 gateway functionality for a VLAN on a multilayer switch.

Week 14 • Tuesday • Card 1 • Routing

Q331. For an access control panel network, which route is used when no more specific route matches?

  1. A. Connected route
  2. B. Default route
  3. C. Host route
  4. D. Summary route
Show answer and explanation

Answer: B

A default route, often 0.0.0.0/0, is used when no better match exists.

Week 14 • Tuesday • Card 2 • Routing

Q332. When reviewing a county security electronics network, what is administrative distance used for?

  1. A. Choosing between routing sources
  2. B. Setting switch speed
  3. C. Assigning VLAN numbers
  4. D. Encrypting packets
Show answer and explanation

Answer: A

Administrative distance ranks route sources when multiple protocols advertise the same destination.

Week 14 • Tuesday • Card 3 • Routing

Q333. During commissioning of Axis cameras into Genetec, which route type is automatically created when an interface has an IP address and is up?

  1. A. Static
  2. B. Connected
  3. C. BGP
  4. D. Default
Show answer and explanation

Answer: B

Connected routes appear automatically for active interfaces with IP addressing.

Week 14 • Tuesday • Card 4 • Routing

Q334. For a remote video monitoring site, what does longest prefix match mean?

  1. A. The route with the largest metric wins
  2. B. The most specific matching route is chosen
  3. C. The oldest route is chosen
  4. D. The default route always wins
Show answer and explanation

Answer: B

Routers choose the most specific route that matches the destination IP.

Week 14 • Tuesday • Card 5 • Routing

Q335. When separating CCTV from the corporate LAN, which command commonly displays the IPv4 routing table on Cisco IOS?

  1. A. show ip route
  2. B. show vlan
  3. C. show mac address-table
  4. D. show power inline
Show answer and explanation

Answer: A

show ip route displays learned and configured IPv4 routes.

Week 14 • Wednesday • Card 1 • Routing

Q336. During network cutover testing, which protocol is an interior gateway protocol?

  1. A. OSPF
  2. B. HTTP
  3. C. ARP
  4. D. NTP
Show answer and explanation

Answer: A

OSPF is an IGP used for dynamic routing inside an organization.

Week 14 • Wednesday • Card 2 • Routing

Q337. For a recorder-to-camera traffic path, what is a static route?

  1. A. A manually configured route
  2. B. A DHCP lease
  3. C. A VLAN tag
  4. D. A DNS alias
Show answer and explanation

Answer: A

Static routes are manually entered and do not dynamically adapt unless tracking is configured.

Week 14 • Wednesday • Card 3 • Routing

Q338. For a Genetec camera VLAN deployment, what is a next-hop IP address?

  1. A. The destination host
  2. B. The neighboring router to forward traffic to
  3. C. The DNS server
  4. D. The DHCP server
Show answer and explanation

Answer: B

The next hop is the router address used to reach a destination network.

Week 14 • Wednesday • Card 4 • Routing

Q339. While troubleshooting a Security Center client connection, what is route summarization?

  1. A. Combining multiple networks into a shorter prefix
  2. B. Encrypting routes
  3. C. Removing VLAN tags
  4. D. Converting IPv4 to IPv6
Show answer and explanation

Answer: A

Summarization advertises multiple contiguous networks as one route to reduce table size.

Week 14 • Wednesday • Card 5 • Routing

Q340. During a jail CCTV network audit, why is asymmetric routing sometimes a problem for security systems?

  1. A. It changes camera resolution
  2. B. Firewalls may see only one side of a session
  3. C. It disables PoE
  4. D. It prevents ARP
Show answer and explanation

Answer: B

Stateful firewalls may drop traffic if return traffic follows a different path and session state is not seen.

Week 14 • Thursday • Card 1 • Wireless and RF basics

Q341. For an access control panel network, which Wi-Fi band generally has better wall penetration?

  1. A. 2.4 GHz
  2. B. 5 GHz
  3. C. 6 GHz
  4. D. 60 GHz
Show answer and explanation

Answer: A

2.4 GHz usually penetrates walls better, but has more interference and fewer non-overlapping channels.

Week 14 • Thursday • Card 2 • Wireless and RF basics

Q342. When reviewing a county security electronics network, which Wi-Fi band usually offers more channels and higher throughput than 2.4 GHz?

  1. A. 900 MHz
  2. B. 5 GHz
  3. C. AM radio
  4. D. Bluetooth only
Show answer and explanation

Answer: B

5 GHz usually has more available channels and higher throughput, but shorter range.

Week 14 • Thursday • Card 3 • Wireless and RF basics

Q343. During commissioning of Axis cameras into Genetec, what is SSID?

  1. A. A wireless network name
  2. B. A routing protocol
  3. C. A PoE class
  4. D. A firewall action
Show answer and explanation

Answer: A

SSID is the advertised or configured wireless network name.

Week 14 • Thursday • Card 4 • Wireless and RF basics

Q344. For a remote video monitoring site, which security mode is stronger than WPA2-Personal when available?

  1. A. WEP
  2. B. Open
  3. C. WPA3
  4. D. TKIP only
Show answer and explanation

Answer: C

WPA3 improves authentication and cryptographic protections over older modes.

Week 14 • Thursday • Card 5 • Wireless and RF basics

Q345. When separating CCTV from the corporate LAN, what is roaming in Wi-Fi?

  1. A. Moving a client between access points
  2. B. Changing IP subnets manually
  3. C. Replacing antennas
  4. D. Turning off encryption
Show answer and explanation

Answer: A

Roaming occurs when a wireless client moves between APs while maintaining connectivity.

Week 14 • Friday • Card 1 • Wireless and RF basics

Q346. During network cutover testing, what does RSSI indicate?

  1. A. Received signal strength
  2. B. Routing table size
  3. C. Camera frame rate
  4. D. Switch buffer size
Show answer and explanation

Answer: A

RSSI is a measure of received signal strength.

Week 14 • Friday • Card 2 • Wireless and RF basics

Q347. For a recorder-to-camera traffic path, why are wireless cameras often avoided for critical CCTV?

  1. A. They cannot use IP
  2. B. Wireless links may be less predictable than wired links
  3. C. They cannot use DNS
  4. D. They require IPv6
Show answer and explanation

Answer: B

Wireless is vulnerable to interference, capacity limits, and RF design issues.

Week 14 • Friday • Card 3 • Wireless and RF basics

Q348. For a Genetec camera VLAN deployment, which issue is caused by too many APs on the same channel?

  1. A. Co-channel interference
  2. B. DNS recursion
  3. C. DHCP starvation only
  4. D. NTP drift
Show answer and explanation

Answer: A

Co-channel interference occurs when too many devices contend on the same channel.

Week 14 • Friday • Card 4 • Wireless and RF basics

Q349. While troubleshooting a Security Center client connection, what does a captive portal typically provide?

  1. A. Web-based authentication or acceptance
  2. B. PoE negotiation
  3. C. OSPF adjacency
  4. D. Camera lens focus
Show answer and explanation

Answer: A

Captive portals intercept web traffic for login or terms acceptance.

Week 14 • Friday • Card 5 • Wireless and RF basics

Q350. During a jail CCTV network audit, which design best supports mobile Genetec client devices over Wi-Fi?

  1. A. Strong coverage, capacity planning, and secure authentication
  2. B. One AP at maximum power
  3. C. Open Wi-Fi only
  4. D. Disable roaming
Show answer and explanation

Answer: A

Mobile video clients need reliable coverage, adequate capacity, secure authentication, and controlled roaming.

Week 15 • Monday • Card 1 • IP services

Q351. For an access control panel network, which protocol dynamically assigns IP addresses?

  1. A. DHCP
  2. B. DNS
  3. C. SNMP
  4. D. SSH
Show answer and explanation

Answer: A

DHCP leases IP configuration such as address, mask, gateway, and DNS.

Week 15 • Monday • Card 2 • IP services

Q352. When reviewing a county security electronics network, which DHCP message does a client send first?

  1. A. DISCOVER
  2. B. OFFER
  3. C. REQUEST
  4. D. ACK
Show answer and explanation

Answer: A

A DHCP client starts by broadcasting DHCPDISCOVER.

Week 15 • Monday • Card 3 • IP services

Q353. During commissioning of Axis cameras into Genetec, what is the purpose of DHCP reservation?

  1. A. Assigning a consistent IP to a known MAC address
  2. B. Encrypting DHCP
  3. C. Creating VLANs
  4. D. Blocking DNS
Show answer and explanation

Answer: A

Reservations help keep devices such as cameras or servers at predictable addresses.

Week 15 • Monday • Card 4 • IP services

Q354. For a remote video monitoring site, which service synchronizes time across network devices?

  1. A. NTP
  2. B. DNS
  3. C. DHCP
  4. D. FTP
Show answer and explanation

Answer: A

NTP synchronizes clocks, which is critical for video evidence timelines and logs.

Week 15 • Monday • Card 5 • IP services

Q355. When separating CCTV from the corporate LAN, which protocol is commonly used for device monitoring?

  1. A. SNMP
  2. B. SMTP
  3. C. RDP
  4. D. RTP
Show answer and explanation

Answer: A

SNMP can monitor device status, interfaces, and alerts.

Week 15 • Tuesday • Card 1 • IP services

Q356. During network cutover testing, what does Syslog provide?

  1. A. Centralized log messages
  2. B. IP address assignment
  3. C. MAC learning
  4. D. Power delivery
Show answer and explanation

Answer: A

Syslog sends event messages to a centralized logging system.

Week 15 • Tuesday • Card 2 • IP services

Q357. For a recorder-to-camera traffic path, which protocol securely administers network devices by CLI?

  1. A. Telnet
  2. B. SSH
  3. C. TFTP
  4. D. HTTP
Show answer and explanation

Answer: B

SSH encrypts remote CLI access. Telnet is unencrypted.

Week 15 • Tuesday • Card 3 • IP services

Q358. For a Genetec camera VLAN deployment, which protocol is commonly used to transfer configuration files but is not secure?

  1. A. TFTP
  2. B. HTTPS
  3. C. SSH
  4. D. SCP
Show answer and explanation

Answer: A

TFTP is simple and unencrypted.

Week 15 • Tuesday • Card 4 • IP services

Q359. While troubleshooting a Security Center client connection, what is DNS A record used for?

  1. A. Mapping a hostname to IPv4
  2. B. Mapping IP to MAC
  3. C. Assigning VLANs
  4. D. Setting PoE class
Show answer and explanation

Answer: A

An A record maps a hostname to an IPv4 address.

Week 15 • Tuesday • Card 5 • IP services

Q360. During a jail CCTV network audit, why is accurate NTP important for Genetec systems?

  1. A. It improves lens zoom
  2. B. It keeps video, access events, and audit logs aligned
  3. C. It increases PoE wattage
  4. D. It prevents all packet loss
Show answer and explanation

Answer: B

Accurate time keeps camera video, access control events, and audit logs correlated.

Week 15 • Wednesday • Card 1 • Security fundamentals

Q361. For an access control panel network, what does AAA stand for?

  1. A. Authentication, Authorization, Accounting
  2. B. Access, Allow, Audit
  3. C. Address, ARP, ACL
  4. D. Analyze, Alert, Archive
Show answer and explanation

Answer: A

AAA identifies users, determines permissions, and records activity.

Week 15 • Wednesday • Card 2 • Security fundamentals

Q362. When reviewing a county security electronics network, which protocol provides centralized AAA for network devices?

  1. A. RADIUS
  2. B. ARP
  3. C. ICMP
  4. D. NTP
Show answer and explanation

Answer: A

RADIUS is commonly used for centralized authentication and authorization.

Week 15 • Wednesday • Card 3 • Security fundamentals

Q363. During commissioning of Axis cameras into Genetec, what is the purpose of an ACL?

  1. A. Filter traffic based on rules
  2. B. Assign DHCP leases
  3. C. Increase PoE
  4. D. Store video
Show answer and explanation

Answer: A

Access control lists permit or deny traffic based on criteria such as IPs, ports, and protocols.

Week 15 • Wednesday • Card 4 • Security fundamentals

Q364. For a remote video monitoring site, which management method is least secure?

  1. A. SSH
  2. B. HTTPS
  3. C. Telnet
  4. D. SNMPv3
Show answer and explanation

Answer: C

Telnet sends credentials and traffic in clear text.

Week 15 • Wednesday • Card 5 • Security fundamentals

Q365. When separating CCTV from the corporate LAN, which SNMP version supports authentication and encryption?

  1. A. SNMPv1
  2. B. SNMPv2c
  3. C. SNMPv3
  4. D. All versions equally
Show answer and explanation

Answer: C

SNMPv3 supports stronger authentication and privacy features.

Week 15 • Thursday • Card 1 • Security fundamentals

Q366. During network cutover testing, what is 802.1X used for?

  1. A. Port-based network access control
  2. B. DNS forwarding
  3. C. Static routing
  4. D. PoE measurement
Show answer and explanation

Answer: A

802.1X authenticates devices or users before granting network access.

Week 15 • Thursday • Card 2 • Security fundamentals

Q367. For a recorder-to-camera traffic path, what is a firewall zone?

  1. A. A logical security area with policy controls
  2. B. A switch backplane
  3. C. A DHCP scope
  4. D. A Wi-Fi antenna pattern
Show answer and explanation

Answer: A

Zones group interfaces or networks so policies can control traffic between them.

Week 15 • Thursday • Card 3 • Security fundamentals

Q368. For a Genetec camera VLAN deployment, why should camera default passwords be changed?

  1. A. To improve image quality
  2. B. To prevent unauthorized access
  3. C. To increase FPS
  4. D. To enable ARP
Show answer and explanation

Answer: B

Default credentials are widely known and create serious security risk.

Week 15 • Thursday • Card 4 • Security fundamentals

Q369. While troubleshooting a Security Center client connection, what is least privilege?

  1. A. Giving only the permissions required
  2. B. Giving all users admin rights
  3. C. Disabling all logging
  4. D. Using only one password
Show answer and explanation

Answer: A

Least privilege reduces risk by limiting access to required functions only.

Week 15 • Thursday • Card 5 • Security fundamentals

Q370. During a jail CCTV network audit, why segment access control panels from general user PCs?

  1. A. To reduce security exposure and limit lateral movement
  2. B. To increase monitor resolution
  3. C. To eliminate DHCP
  4. D. To disable routing
Show answer and explanation

Answer: A

Segmentation helps protect physical security systems from compromise on less trusted networks.

Week 15 • Friday • Card 1 • NAT and WAN

Q371. For an access control panel network, what does NAT do?

  1. A. Translates IP addresses
  2. B. Encrypts wireless
  3. C. Assigns VLANs
  4. D. Learns MAC addresses
Show answer and explanation

Answer: A

Network Address Translation changes source or destination IP information.

Week 15 • Friday • Card 2 • NAT and WAN

Q372. When reviewing a county security electronics network, what is PAT also called?

  1. A. NAT overload
  2. B. Static routing
  3. C. DNS relay
  4. D. ARP proxy
Show answer and explanation

Answer: A

PAT maps many internal hosts to one public IP using port numbers.

Week 15 • Friday • Card 3 • NAT and WAN

Q373. During commissioning of Axis cameras into Genetec, which private address is commonly translated before Internet access?

  1. A. 10.1.1.10
  2. B. 8.8.8.8
  3. C. 1.1.1.1
  4. D. 203.0.113.1
Show answer and explanation

Answer: A

10.0.0.0/8 is private and typically translated for Internet access.

Week 15 • Friday • Card 4 • NAT and WAN

Q374. For a remote video monitoring site, what is a site-to-site VPN commonly used for?

  1. A. Securely connecting two networks
  2. B. Powering cameras
  3. C. Assigning VLANs
  4. D. Replacing DNS
Show answer and explanation

Answer: A

A site-to-site VPN securely connects networks across an untrusted transport.

Week 15 • Friday • Card 5 • NAT and WAN

Q375. When separating CCTV from the corporate LAN, which protocol helps verify reachability across WAN links?

  1. A. ICMP
  2. B. PoE
  3. C. LLDP
  4. D. STP
Show answer and explanation

Answer: A

ICMP echo requests/replies are commonly used with ping.

Week 16 • Monday • Card 1 • NAT and WAN

Q376. During network cutover testing, what is split tunneling?

  1. A. Sending some traffic through VPN and some directly
  2. B. Dividing a VLAN tag
  3. C. Splitting fiber strands
  4. D. Using two DHCP servers
Show answer and explanation

Answer: A

Split tunneling routes selected traffic through a VPN while other traffic goes directly.

Week 16 • Monday • Card 2 • NAT and WAN

Q377. For a recorder-to-camera traffic path, why avoid exposing camera web interfaces directly to the Internet?

  1. A. It increases attack surface
  2. B. It disables DNS
  3. C. It prevents recording
  4. D. It changes MTU
Show answer and explanation

Answer: A

Direct exposure increases risk from credential attacks and vulnerabilities.

Week 16 • Monday • Card 3 • NAT and WAN

Q378. For a Genetec camera VLAN deployment, what is port forwarding?

  1. A. Mapping an external port to an internal host/service
  2. B. Creating a VLAN
  3. C. Blocking ARP
  4. D. Learning MAC addresses
Show answer and explanation

Answer: A

Port forwarding directs traffic received on a public IP/port to an internal IP/port.

Week 16 • Monday • Card 4 • NAT and WAN

Q379. While troubleshooting a Security Center client connection, which WAN issue most affects live video smoothness?

  1. A. Latency, jitter, and packet loss
  2. B. Hostnames only
  3. C. Keyboard layout
  4. D. Cable color
Show answer and explanation

Answer: A

Video performance is affected by latency, jitter, packet loss, and available bandwidth.

Week 16 • Monday • Card 5 • NAT and WAN

Q380. During a jail CCTV network audit, what is QoS used for over constrained WAN links?

  1. A. Prioritizing important traffic
  2. B. Creating IP addresses
  3. C. Replacing firewalls
  4. D. Changing camera lens angle
Show answer and explanation

Answer: A

QoS classifies and prioritizes traffic when bandwidth is limited.

Week 16 • Tuesday • Card 1 • QoS and multicast video

Q381. For an access control panel network, what is multicast designed for?

  1. A. One-to-many efficient traffic delivery
  2. B. Only one-to-one delivery
  3. C. Encrypting packets
  4. D. Assigning DHCP addresses
Show answer and explanation

Answer: A

Multicast efficiently sends one stream to multiple receivers.

Week 16 • Tuesday • Card 2 • QoS and multicast video

Q382. When reviewing a county security electronics network, which protocol lets hosts join IPv4 multicast groups?

  1. A. IGMP
  2. B. ARP
  3. C. DNS
  4. D. NTP
Show answer and explanation

Answer: A

IGMP is used by hosts and switches/routers for IPv4 multicast group membership.

Week 16 • Tuesday • Card 3 • QoS and multicast video

Q383. During commissioning of Axis cameras into Genetec, what does IGMP snooping do on a switch?

  1. A. Limits multicast flooding by tracking group membership
  2. B. Encrypts multicast
  3. C. Assigns multicast IPs
  4. D. Blocks all video
Show answer and explanation

Answer: A

IGMP snooping helps switches forward multicast only to interested ports.

Week 16 • Tuesday • Card 4 • QoS and multicast video

Q384. For a remote video monitoring site, which IPv4 range is multicast?

  1. A. 224.0.0.0/4
  2. B. 10.0.0.0/8
  3. C. 172.16.0.0/12
  4. D. 192.168.0.0/16
Show answer and explanation

Answer: A

IPv4 multicast uses 224.0.0.0 through 239.255.255.255.

Week 16 • Tuesday • Card 5 • QoS and multicast video

Q385. When separating CCTV from the corporate LAN, what does QoS classification do?

  1. A. Identifies traffic for policy treatment
  2. B. Creates a subnet
  3. C. Changes MAC addresses
  4. D. Erases logs
Show answer and explanation

Answer: A

Classification identifies traffic types so QoS policies can mark, queue, or police them.

Week 16 • Wednesday • Card 1 • QoS and multicast video

Q386. During network cutover testing, what is DSCP?

  1. A. A Layer 3 QoS marking field
  2. B. A switch port mode
  3. C. A wireless SSID
  4. D. A DHCP option
Show answer and explanation

Answer: A

DSCP marks packets for differentiated QoS treatment.

Week 16 • Wednesday • Card 2 • QoS and multicast video

Q387. For a recorder-to-camera traffic path, why can video surveillance traffic need QoS?

  1. A. Video can be bandwidth-intensive and delay-sensitive
  2. B. Video cannot use IP
  3. C. Video disables VLANs
  4. D. Video requires Telnet
Show answer and explanation

Answer: A

Live viewing and control traffic may need priority when links are congested.

Week 16 • Wednesday • Card 3 • QoS and multicast video

Q388. For a Genetec camera VLAN deployment, what is jitter?

  1. A. Variation in packet delay
  2. B. Static IP assignment
  3. C. MAC address aging
  4. D. A VLAN mismatch
Show answer and explanation

Answer: A

Jitter is inconsistent packet delay, which can affect real-time video and audio.

Week 16 • Wednesday • Card 4 • QoS and multicast video

Q389. While troubleshooting a Security Center client connection, what should be enabled to prevent multicast flooding in a camera VLAN?

  1. A. IGMP snooping
  2. B. Telnet
  3. C. PortFast disablement
  4. D. NAT overload
Show answer and explanation

Answer: A

IGMP snooping reduces unnecessary multicast flooding within a VLAN.

Week 16 • Wednesday • Card 5 • QoS and multicast video

Q390. During a jail CCTV network audit, which traffic is often best kept unicast unless multicast is designed properly?

  1. A. Camera video streams
  2. B. NTP queries
  3. C. ARP replies
  4. D. DHCP offers
Show answer and explanation

Answer: A

Multicast video needs proper IGMP and routing design. Without it, unicast is often simpler and safer.

Week 16 • Thursday • Card 1 • Automation and programmability

Q391. For an access control panel network, which data format is commonly used by REST APIs?

  1. A. JSON
  2. B. STP
  3. C. ARP
  4. D. VLAN
Show answer and explanation

Answer: A

JSON is widely used to exchange structured data in REST APIs.

Week 16 • Thursday • Card 2 • Automation and programmability

Q392. When reviewing a county security electronics network, what does REST commonly use as its transport/application protocol?

  1. A. HTTP/HTTPS
  2. B. ARP
  3. C. ICMP only
  4. D. STP
Show answer and explanation

Answer: A

RESTful APIs commonly use HTTP or HTTPS methods.

Week 16 • Thursday • Card 3 • Automation and programmability

Q393. During commissioning of Axis cameras into Genetec, which HTTP method is commonly used to retrieve information?

  1. A. GET
  2. B. POST
  3. C. PUT
  4. D. DELETE
Show answer and explanation

Answer: A

GET retrieves a resource without changing it.

Week 16 • Thursday • Card 4 • Automation and programmability

Q394. For a remote video monitoring site, which HTTP method is commonly used to create a new object?

  1. A. POST
  2. B. GET
  3. C. PING
  4. D. TRACEPATH
Show answer and explanation

Answer: A

POST is commonly used to submit data or create resources.

Week 16 • Thursday • Card 5 • Automation and programmability

Q395. When separating CCTV from the corporate LAN, what is an API token used for?

  1. A. Authentication/authorization to an API
  2. B. PoE negotiation
  3. C. MAC learning
  4. D. Fiber splicing
Show answer and explanation

Answer: A

API tokens are used to authenticate and authorize API requests.

Week 16 • Friday • Card 1 • Automation and programmability

Q396. During network cutover testing, which tool is often used for API testing from a workstation?

  1. A. Postman
  2. B. STP
  3. C. DHCP relay
  4. D. LLDP-MED
Show answer and explanation

Answer: A

Postman is commonly used for testing REST APIs.

Week 16 • Friday • Card 2 • Automation and programmability

Q397. For a recorder-to-camera traffic path, what is idempotency?

  1. A. Repeating an operation gives the same result
  2. B. Traffic is encrypted
  3. C. A port is trunking
  4. D. A camera is recording
Show answer and explanation

Answer: A

An idempotent operation can be repeated without changing the result beyond the first application.

Week 16 • Friday • Card 3 • Automation and programmability

Q398. For a Genetec camera VLAN deployment, why is network automation useful for security systems?

  1. A. It reduces repetitive configuration errors
  2. B. It removes need for IP addresses
  3. C. It prevents all outages
  4. D. It replaces physical cabling
Show answer and explanation

Answer: A

Automation improves consistency, speeds changes, and reduces manual mistakes.

Week 16 • Friday • Card 4 • Automation and programmability

Q399. While troubleshooting a Security Center client connection, which file format is commonly used for network automation variables?

  1. A. YAML
  2. B. JPEG
  3. C. MP3
  4. D. BMP
Show answer and explanation

Answer: A

YAML is frequently used for human-readable configuration data.

Week 16 • Friday • Card 5 • Automation and programmability

Q400. During a jail CCTV network audit, what is Git used for?

  1. A. Version control
  2. B. Packet switching
  3. C. PoE delivery
  4. D. Wireless roaming
Show answer and explanation

Answer: A

Git tracks changes to files such as scripts, templates, and configurations.

Week 17 • Monday • Card 1 • Networking fundamentals

Q401. When reviewing a county security electronics network, which OSI layer is responsible for logical IP addressing?

  1. A. Layer 2
  2. B. Layer 3
  3. C. Layer 4
  4. D. Layer 7
Show answer and explanation

Answer: B

Layer 3, the Network layer, provides logical addressing and routing using IP. This is where video clients, cameras, and servers are routed between subnets.

Week 17 • Monday • Card 2 • Networking fundamentals

Q402. During commissioning of Axis cameras into Genetec, which device primarily separates broadcast domains?

  1. A. Switch
  2. B. Hub
  3. C. Router
  4. D. Patch panel
Show answer and explanation

Answer: C

Routers and Layer 3 switches separate broadcast domains. This matters when separating camera VLANs, access control VLANs, and corporate LANs.

Week 17 • Monday • Card 3 • Networking fundamentals

Q403. For a remote video monitoring site, what is the purpose of a default gateway?

  1. A. Encrypt traffic
  2. B. Forward traffic outside the local subnet
  3. C. Assign VLAN IDs
  4. D. Convert fiber to copper
Show answer and explanation

Answer: B

A host sends traffic to its default gateway when the destination is outside the local subnet.

Week 17 • Monday • Card 4 • Networking fundamentals

Q404. When separating CCTV from the corporate LAN, which protocol resolves an IPv4 address to a MAC address?

  1. A. DNS
  2. B. ARP
  3. C. DHCP
  4. D. NTP
Show answer and explanation

Answer: B

ARP maps IPv4 addresses to MAC addresses on the local network.

Week 17 • Monday • Card 5 • Networking fundamentals

Q405. During network cutover testing, which value identifies a VLAN on an 802.1Q trunk?

  1. A. DSCP
  2. B. VLAN ID
  3. C. MAC address
  4. D. TCP port
Show answer and explanation

Answer: B

802.1Q inserts a VLAN tag that includes the VLAN ID.

Week 17 • Tuesday • Card 1 • Networking fundamentals

Q406. For a recorder-to-camera traffic path, what does MTU define?

  1. A. Maximum frame count per second
  2. B. Maximum transmission unit size
  3. C. Minimum trunk utilization
  4. D. MAC table update time
Show answer and explanation

Answer: B

MTU is the largest packet/frame payload size supported without fragmentation.

Week 17 • Tuesday • Card 2 • Networking fundamentals

Q407. For a Genetec camera VLAN deployment, which address is a private IPv4 address?

  1. A. 8.8.8.8
  2. B. 172.16.5.10
  3. C. 1.1.1.1
  4. D. 224.0.0.1
Show answer and explanation

Answer: B

172.16.0.0/12 is private IPv4 space.

Week 17 • Tuesday • Card 3 • Networking fundamentals

Q408. While troubleshooting a Security Center client connection, which address is link-local IPv4?

  1. A. 169.254.10.20
  2. B. 10.10.10.20
  3. C. 192.168.1.20
  4. D. 172.20.1.20
Show answer and explanation

Answer: A

169.254.0.0/16 is APIPA/link-local addressing used when DHCP fails.

Week 17 • Tuesday • Card 4 • Networking fundamentals

Q409. During a jail CCTV network audit, which protocol translates hostnames to IP addresses?

  1. A. DNS
  2. B. SNMP
  3. C. RTP
  4. D. SSH
Show answer and explanation

Answer: A

DNS resolves names such as servers or cloud services to IP addresses.

Week 17 • Tuesday • Card 5 • Networking fundamentals

Q410. For an access control panel network, which transport protocol is connection-oriented?

  1. A. UDP
  2. B. TCP
  3. C. ICMP
  4. D. ARP
Show answer and explanation

Answer: B

TCP uses sessions, acknowledgements, and retransmission.

Week 17 • Wednesday • Card 1 • Subnetting and addressing

Q411. When reviewing a county security electronics network, how many usable IPv4 host addresses are in a /24 subnet?

  1. A. 254
  2. B. 255
  3. C. 256
  4. D. 510
Show answer and explanation

Answer: A

A /24 has 256 total addresses; network and broadcast are not usable for hosts.

Week 17 • Wednesday • Card 2 • Subnetting and addressing

Q412. During commissioning of Axis cameras into Genetec, what subnet mask matches /26?

  1. A. 255.255.255.0
  2. B. 255.255.255.128
  3. C. 255.255.255.192
  4. D. 255.255.255.224
Show answer and explanation

Answer: C

/26 equals 255.255.255.192 and provides 62 usable host addresses.

Week 17 • Wednesday • Card 3 • Subnetting and addressing

Q413. For a remote video monitoring site, which subnet contains host 10.10.5.77/26?

  1. A. 10.10.5.0/26
  2. B. 10.10.5.64/26
  3. C. 10.10.5.128/26
  4. D. 10.10.5.192/26
Show answer and explanation

Answer: B

/26 subnets increment by 64. Address .77 belongs to 10.10.5.64/26.

Week 17 • Wednesday • Card 4 • Subnetting and addressing

Q414. When separating CCTV from the corporate LAN, what is the broadcast address for 192.168.20.32/27?

  1. A. 192.168.20.31
  2. B. 192.168.20.63
  3. C. 192.168.20.64
  4. D. 192.168.20.95
Show answer and explanation

Answer: B

/27 increments by 32. The .32 subnet ends at .63.

Week 17 • Wednesday • Card 5 • Subnetting and addressing

Q415. During network cutover testing, how many usable hosts are available in a /30?

  1. A. 2
  2. B. 4
  3. C. 6
  4. D. 14
Show answer and explanation

Answer: A

A /30 has four total addresses and two usable host addresses, common for point-to-point links.

Week 17 • Thursday • Card 1 • Subnetting and addressing

Q416. For a recorder-to-camera traffic path, which prefix gives approximately 14 usable host addresses?

  1. A. /28
  2. B. /27
  3. C. /26
  4. D. /25
Show answer and explanation

Answer: A

/28 provides 16 total addresses and 14 usable host addresses.

Week 17 • Thursday • Card 2 • Subnetting and addressing

Q417. For a Genetec camera VLAN deployment, what does CIDR notation /23 represent?

  1. A. 255.255.255.0
  2. B. 255.255.254.0
  3. C. 255.255.252.0
  4. D. 255.255.248.0
Show answer and explanation

Answer: B

/23 corresponds to 255.255.254.0.

Week 17 • Thursday • Card 3 • Subnetting and addressing

Q418. While troubleshooting a Security Center client connection, which range is private IPv4?

  1. A. 192.0.2.0/24
  2. B. 192.168.0.0/16
  3. C. 198.51.100.0/24
  4. D. 203.0.113.0/24
Show answer and explanation

Answer: B

192.168.0.0/16 is private. The other ranges are documentation/test networks.

Week 17 • Thursday • Card 4 • Subnetting and addressing

Q419. During a jail CCTV network audit, what is the network address of 172.20.14.199/24?

  1. A. 172.20.14.0
  2. B. 172.20.14.199
  3. C. 172.20.14.255
  4. D. 172.20.0.0
Show answer and explanation

Answer: A

With /24, the first three octets define the network.

Week 17 • Thursday • Card 5 • Subnetting and addressing

Q420. For an access control panel network, why should camera IP plans avoid overlapping subnets?

  1. A. It disables PoE
  2. B. Routing becomes ambiguous
  3. C. DNS stops working
  4. D. NTP cannot synchronize
Show answer and explanation

Answer: B

Overlapping subnets can cause routing ambiguity and difficult troubleshooting between camera, server, and client networks.

Week 17 • Friday • Card 1 • Switching and VLANs

Q421. When reviewing a county security electronics network, which switch port mode carries multiple VLANs?

  1. A. Access
  2. B. Trunk
  3. C. Shutdown
  4. D. Loopback
Show answer and explanation

Answer: B

A trunk carries traffic for multiple VLANs using tagging, usually 802.1Q.

Week 17 • Friday • Card 2 • Switching and VLANs

Q422. During commissioning of Axis cameras into Genetec, which switch port mode should normally be used for a single IP camera?

  1. A. Trunk
  2. B. Access
  3. C. Routed
  4. D. Monitor
Show answer and explanation

Answer: B

A single camera usually belongs to one VLAN, so an access port is appropriate.

Week 17 • Friday • Card 3 • Switching and VLANs

Q423. For a remote video monitoring site, what is the native VLAN on an 802.1Q trunk?

  1. A. The VLAN carried untagged
  2. B. The voice VLAN only
  3. C. The management VLAN only
  4. D. The disabled VLAN
Show answer and explanation

Answer: A

The native VLAN is sent untagged across an 802.1Q trunk.

Week 17 • Friday • Card 4 • Switching and VLANs

Q424. When separating CCTV from the corporate LAN, what problem does STP help prevent?

  1. A. IP address exhaustion
  2. B. Layer 2 loops
  3. C. DNS poisoning
  4. D. NAT overload
Show answer and explanation

Answer: B

Spanning Tree Protocol blocks redundant paths to prevent Layer 2 loops.

Week 17 • Friday • Card 5 • Switching and VLANs

Q425. During network cutover testing, what does a switch use to forward frames?

  1. A. ARP table
  2. B. MAC address table
  3. C. Routing table
  4. D. DNS cache
Show answer and explanation

Answer: B

Switches forward frames based on destination MAC addresses learned in the MAC table.

Week 18 • Monday • Card 1 • Switching and VLANs

Q426. For a recorder-to-camera traffic path, which command commonly verifies VLAN membership on Cisco IOS?

  1. A. show vlan brief
  2. B. show ip route
  3. C. show clock
  4. D. show arp vrf
Show answer and explanation

Answer: A

show vlan brief displays VLANs and assigned access ports.

Week 18 • Monday • Card 2 • Switching and VLANs

Q427. For a Genetec camera VLAN deployment, what happens when a switch receives an unknown unicast frame?

  1. A. It drops it always
  2. B. It floods within the VLAN
  3. C. It sends it to the router only
  4. D. It converts it to multicast
Show answer and explanation

Answer: B

Unknown unicast frames are flooded within the same VLAN.

Week 18 • Monday • Card 3 • Switching and VLANs

Q428. While troubleshooting a Security Center client connection, why place cameras in a dedicated VLAN?

  1. A. To increase pixel resolution
  2. B. To reduce broadcast scope and improve security
  3. C. To remove the need for DNS
  4. D. To disable multicast
Show answer and explanation

Answer: B

A camera VLAN limits broadcast traffic and improves segmentation and security.

Week 18 • Monday • Card 4 • Switching and VLANs

Q429. During a jail CCTV network audit, what is port security commonly used for?

  1. A. Limiting MAC addresses on a switch port
  2. B. Encrypting routing updates
  3. C. Creating VLAN trunks
  4. D. Assigning IPv6 addresses
Show answer and explanation

Answer: A

Port security can restrict which MAC addresses are allowed on an access port.

Week 18 • Monday • Card 5 • Switching and VLANs

Q430. For an access control panel network, what is a switched virtual interface, or SVI?

  1. A. A logical Layer 3 interface for a VLAN
  2. B. A physical fiber port
  3. C. A DNS record
  4. D. A PoE injector
Show answer and explanation

Answer: A

An SVI provides Layer 3 gateway functionality for a VLAN on a multilayer switch.

Week 18 • Tuesday • Card 1 • Routing

Q431. When reviewing a county security electronics network, which route is used when no more specific route matches?

  1. A. Connected route
  2. B. Default route
  3. C. Host route
  4. D. Summary route
Show answer and explanation

Answer: B

A default route, often 0.0.0.0/0, is used when no better match exists.

Week 18 • Tuesday • Card 2 • Routing

Q432. During commissioning of Axis cameras into Genetec, what is administrative distance used for?

  1. A. Choosing between routing sources
  2. B. Setting switch speed
  3. C. Assigning VLAN numbers
  4. D. Encrypting packets
Show answer and explanation

Answer: A

Administrative distance ranks route sources when multiple protocols advertise the same destination.

Week 18 • Tuesday • Card 3 • Routing

Q433. For a remote video monitoring site, which route type is automatically created when an interface has an IP address and is up?

  1. A. Static
  2. B. Connected
  3. C. BGP
  4. D. Default
Show answer and explanation

Answer: B

Connected routes appear automatically for active interfaces with IP addressing.

Week 18 • Tuesday • Card 4 • Routing

Q434. When separating CCTV from the corporate LAN, what does longest prefix match mean?

  1. A. The route with the largest metric wins
  2. B. The most specific matching route is chosen
  3. C. The oldest route is chosen
  4. D. The default route always wins
Show answer and explanation

Answer: B

Routers choose the most specific route that matches the destination IP.

Week 18 • Tuesday • Card 5 • Routing

Q435. During network cutover testing, which command commonly displays the IPv4 routing table on Cisco IOS?

  1. A. show ip route
  2. B. show vlan
  3. C. show mac address-table
  4. D. show power inline
Show answer and explanation

Answer: A

show ip route displays learned and configured IPv4 routes.

Week 18 • Wednesday • Card 1 • Routing

Q436. For a recorder-to-camera traffic path, which protocol is an interior gateway protocol?

  1. A. OSPF
  2. B. HTTP
  3. C. ARP
  4. D. NTP
Show answer and explanation

Answer: A

OSPF is an IGP used for dynamic routing inside an organization.

Week 18 • Wednesday • Card 2 • Routing

Q437. For a Genetec camera VLAN deployment, what is a static route?

  1. A. A manually configured route
  2. B. A DHCP lease
  3. C. A VLAN tag
  4. D. A DNS alias
Show answer and explanation

Answer: A

Static routes are manually entered and do not dynamically adapt unless tracking is configured.

Week 18 • Wednesday • Card 3 • Routing

Q438. While troubleshooting a Security Center client connection, what is a next-hop IP address?

  1. A. The destination host
  2. B. The neighboring router to forward traffic to
  3. C. The DNS server
  4. D. The DHCP server
Show answer and explanation

Answer: B

The next hop is the router address used to reach a destination network.

Week 18 • Wednesday • Card 4 • Routing

Q439. During a jail CCTV network audit, what is route summarization?

  1. A. Combining multiple networks into a shorter prefix
  2. B. Encrypting routes
  3. C. Removing VLAN tags
  4. D. Converting IPv4 to IPv6
Show answer and explanation

Answer: A

Summarization advertises multiple contiguous networks as one route to reduce table size.

Week 18 • Wednesday • Card 5 • Routing

Q440. For an access control panel network, why is asymmetric routing sometimes a problem for security systems?

  1. A. It changes camera resolution
  2. B. Firewalls may see only one side of a session
  3. C. It disables PoE
  4. D. It prevents ARP
Show answer and explanation

Answer: B

Stateful firewalls may drop traffic if return traffic follows a different path and session state is not seen.

Week 18 • Thursday • Card 1 • Wireless and RF basics

Q441. When reviewing a county security electronics network, which Wi-Fi band generally has better wall penetration?

  1. A. 2.4 GHz
  2. B. 5 GHz
  3. C. 6 GHz
  4. D. 60 GHz
Show answer and explanation

Answer: A

2.4 GHz usually penetrates walls better, but has more interference and fewer non-overlapping channels.

Week 18 • Thursday • Card 2 • Wireless and RF basics

Q442. During commissioning of Axis cameras into Genetec, which Wi-Fi band usually offers more channels and higher throughput than 2.4 GHz?

  1. A. 900 MHz
  2. B. 5 GHz
  3. C. AM radio
  4. D. Bluetooth only
Show answer and explanation

Answer: B

5 GHz usually has more available channels and higher throughput, but shorter range.

Week 18 • Thursday • Card 3 • Wireless and RF basics

Q443. For a remote video monitoring site, what is SSID?

  1. A. A wireless network name
  2. B. A routing protocol
  3. C. A PoE class
  4. D. A firewall action
Show answer and explanation

Answer: A

SSID is the advertised or configured wireless network name.

Week 18 • Thursday • Card 4 • Wireless and RF basics

Q444. When separating CCTV from the corporate LAN, which security mode is stronger than WPA2-Personal when available?

  1. A. WEP
  2. B. Open
  3. C. WPA3
  4. D. TKIP only
Show answer and explanation

Answer: C

WPA3 improves authentication and cryptographic protections over older modes.

Week 18 • Thursday • Card 5 • Wireless and RF basics

Q445. During network cutover testing, what is roaming in Wi-Fi?

  1. A. Moving a client between access points
  2. B. Changing IP subnets manually
  3. C. Replacing antennas
  4. D. Turning off encryption
Show answer and explanation

Answer: A

Roaming occurs when a wireless client moves between APs while maintaining connectivity.

Week 18 • Friday • Card 1 • Wireless and RF basics

Q446. For a recorder-to-camera traffic path, what does RSSI indicate?

  1. A. Received signal strength
  2. B. Routing table size
  3. C. Camera frame rate
  4. D. Switch buffer size
Show answer and explanation

Answer: A

RSSI is a measure of received signal strength.

Week 18 • Friday • Card 2 • Wireless and RF basics

Q447. For a Genetec camera VLAN deployment, why are wireless cameras often avoided for critical CCTV?

  1. A. They cannot use IP
  2. B. Wireless links may be less predictable than wired links
  3. C. They cannot use DNS
  4. D. They require IPv6
Show answer and explanation

Answer: B

Wireless is vulnerable to interference, capacity limits, and RF design issues.

Week 18 • Friday • Card 3 • Wireless and RF basics

Q448. While troubleshooting a Security Center client connection, which issue is caused by too many APs on the same channel?

  1. A. Co-channel interference
  2. B. DNS recursion
  3. C. DHCP starvation only
  4. D. NTP drift
Show answer and explanation

Answer: A

Co-channel interference occurs when too many devices contend on the same channel.

Week 18 • Friday • Card 4 • Wireless and RF basics

Q449. During a jail CCTV network audit, what does a captive portal typically provide?

  1. A. Web-based authentication or acceptance
  2. B. PoE negotiation
  3. C. OSPF adjacency
  4. D. Camera lens focus
Show answer and explanation

Answer: A

Captive portals intercept web traffic for login or terms acceptance.

Week 18 • Friday • Card 5 • Wireless and RF basics

Q450. For an access control panel network, which design best supports mobile Genetec client devices over Wi-Fi?

  1. A. Strong coverage, capacity planning, and secure authentication
  2. B. One AP at maximum power
  3. C. Open Wi-Fi only
  4. D. Disable roaming
Show answer and explanation

Answer: A

Mobile video clients need reliable coverage, adequate capacity, secure authentication, and controlled roaming.

Week 19 • Monday • Card 1 • IP services

Q451. When reviewing a county security electronics network, which protocol dynamically assigns IP addresses?

  1. A. DHCP
  2. B. DNS
  3. C. SNMP
  4. D. SSH
Show answer and explanation

Answer: A

DHCP leases IP configuration such as address, mask, gateway, and DNS.

Week 19 • Monday • Card 2 • IP services

Q452. During commissioning of Axis cameras into Genetec, which DHCP message does a client send first?

  1. A. DISCOVER
  2. B. OFFER
  3. C. REQUEST
  4. D. ACK
Show answer and explanation

Answer: A

A DHCP client starts by broadcasting DHCPDISCOVER.

Week 19 • Monday • Card 3 • IP services

Q453. For a remote video monitoring site, what is the purpose of DHCP reservation?

  1. A. Assigning a consistent IP to a known MAC address
  2. B. Encrypting DHCP
  3. C. Creating VLANs
  4. D. Blocking DNS
Show answer and explanation

Answer: A

Reservations help keep devices such as cameras or servers at predictable addresses.

Week 19 • Monday • Card 4 • IP services

Q454. When separating CCTV from the corporate LAN, which service synchronizes time across network devices?

  1. A. NTP
  2. B. DNS
  3. C. DHCP
  4. D. FTP
Show answer and explanation

Answer: A

NTP synchronizes clocks, which is critical for video evidence timelines and logs.

Week 19 • Monday • Card 5 • IP services

Q455. During network cutover testing, which protocol is commonly used for device monitoring?

  1. A. SNMP
  2. B. SMTP
  3. C. RDP
  4. D. RTP
Show answer and explanation

Answer: A

SNMP can monitor device status, interfaces, and alerts.

Week 19 • Tuesday • Card 1 • IP services

Q456. For a recorder-to-camera traffic path, what does Syslog provide?

  1. A. Centralized log messages
  2. B. IP address assignment
  3. C. MAC learning
  4. D. Power delivery
Show answer and explanation

Answer: A

Syslog sends event messages to a centralized logging system.

Week 19 • Tuesday • Card 2 • IP services

Q457. For a Genetec camera VLAN deployment, which protocol securely administers network devices by CLI?

  1. A. Telnet
  2. B. SSH
  3. C. TFTP
  4. D. HTTP
Show answer and explanation

Answer: B

SSH encrypts remote CLI access. Telnet is unencrypted.

Week 19 • Tuesday • Card 3 • IP services

Q458. While troubleshooting a Security Center client connection, which protocol is commonly used to transfer configuration files but is not secure?

  1. A. TFTP
  2. B. HTTPS
  3. C. SSH
  4. D. SCP
Show answer and explanation

Answer: A

TFTP is simple and unencrypted.

Week 19 • Tuesday • Card 4 • IP services

Q459. During a jail CCTV network audit, what is DNS A record used for?

  1. A. Mapping a hostname to IPv4
  2. B. Mapping IP to MAC
  3. C. Assigning VLANs
  4. D. Setting PoE class
Show answer and explanation

Answer: A

An A record maps a hostname to an IPv4 address.

Week 19 • Tuesday • Card 5 • IP services

Q460. For an access control panel network, why is accurate NTP important for Genetec systems?

  1. A. It improves lens zoom
  2. B. It keeps video, access events, and audit logs aligned
  3. C. It increases PoE wattage
  4. D. It prevents all packet loss
Show answer and explanation

Answer: B

Accurate time keeps camera video, access control events, and audit logs correlated.

Week 19 • Wednesday • Card 1 • Security fundamentals

Q461. When reviewing a county security electronics network, what does AAA stand for?

  1. A. Authentication, Authorization, Accounting
  2. B. Access, Allow, Audit
  3. C. Address, ARP, ACL
  4. D. Analyze, Alert, Archive
Show answer and explanation

Answer: A

AAA identifies users, determines permissions, and records activity.

Week 19 • Wednesday • Card 2 • Security fundamentals

Q462. During commissioning of Axis cameras into Genetec, which protocol provides centralized AAA for network devices?

  1. A. RADIUS
  2. B. ARP
  3. C. ICMP
  4. D. NTP
Show answer and explanation

Answer: A

RADIUS is commonly used for centralized authentication and authorization.

Week 19 • Wednesday • Card 3 • Security fundamentals

Q463. For a remote video monitoring site, what is the purpose of an ACL?

  1. A. Filter traffic based on rules
  2. B. Assign DHCP leases
  3. C. Increase PoE
  4. D. Store video
Show answer and explanation

Answer: A

Access control lists permit or deny traffic based on criteria such as IPs, ports, and protocols.

Week 19 • Wednesday • Card 4 • Security fundamentals

Q464. When separating CCTV from the corporate LAN, which management method is least secure?

  1. A. SSH
  2. B. HTTPS
  3. C. Telnet
  4. D. SNMPv3
Show answer and explanation

Answer: C

Telnet sends credentials and traffic in clear text.

Week 19 • Wednesday • Card 5 • Security fundamentals

Q465. During network cutover testing, which SNMP version supports authentication and encryption?

  1. A. SNMPv1
  2. B. SNMPv2c
  3. C. SNMPv3
  4. D. All versions equally
Show answer and explanation

Answer: C

SNMPv3 supports stronger authentication and privacy features.

Week 19 • Thursday • Card 1 • Security fundamentals

Q466. For a recorder-to-camera traffic path, what is 802.1X used for?

  1. A. Port-based network access control
  2. B. DNS forwarding
  3. C. Static routing
  4. D. PoE measurement
Show answer and explanation

Answer: A

802.1X authenticates devices or users before granting network access.

Week 19 • Thursday • Card 2 • Security fundamentals

Q467. For a Genetec camera VLAN deployment, what is a firewall zone?

  1. A. A logical security area with policy controls
  2. B. A switch backplane
  3. C. A DHCP scope
  4. D. A Wi-Fi antenna pattern
Show answer and explanation

Answer: A

Zones group interfaces or networks so policies can control traffic between them.

Week 19 • Thursday • Card 3 • Security fundamentals

Q468. While troubleshooting a Security Center client connection, why should camera default passwords be changed?

  1. A. To improve image quality
  2. B. To prevent unauthorized access
  3. C. To increase FPS
  4. D. To enable ARP
Show answer and explanation

Answer: B

Default credentials are widely known and create serious security risk.

Week 19 • Thursday • Card 4 • Security fundamentals

Q469. During a jail CCTV network audit, what is least privilege?

  1. A. Giving only the permissions required
  2. B. Giving all users admin rights
  3. C. Disabling all logging
  4. D. Using only one password
Show answer and explanation

Answer: A

Least privilege reduces risk by limiting access to required functions only.

Week 19 • Thursday • Card 5 • Security fundamentals

Q470. For an access control panel network, why segment access control panels from general user PCs?

  1. A. To reduce security exposure and limit lateral movement
  2. B. To increase monitor resolution
  3. C. To eliminate DHCP
  4. D. To disable routing
Show answer and explanation

Answer: A

Segmentation helps protect physical security systems from compromise on less trusted networks.

Week 19 • Friday • Card 1 • NAT and WAN

Q471. When reviewing a county security electronics network, what does NAT do?

  1. A. Translates IP addresses
  2. B. Encrypts wireless
  3. C. Assigns VLANs
  4. D. Learns MAC addresses
Show answer and explanation

Answer: A

Network Address Translation changes source or destination IP information.

Week 19 • Friday • Card 2 • NAT and WAN

Q472. During commissioning of Axis cameras into Genetec, what is PAT also called?

  1. A. NAT overload
  2. B. Static routing
  3. C. DNS relay
  4. D. ARP proxy
Show answer and explanation

Answer: A

PAT maps many internal hosts to one public IP using port numbers.

Week 19 • Friday • Card 3 • NAT and WAN

Q473. For a remote video monitoring site, which private address is commonly translated before Internet access?

  1. A. 10.1.1.10
  2. B. 8.8.8.8
  3. C. 1.1.1.1
  4. D. 203.0.113.1
Show answer and explanation

Answer: A

10.0.0.0/8 is private and typically translated for Internet access.

Week 19 • Friday • Card 4 • NAT and WAN

Q474. When separating CCTV from the corporate LAN, what is a site-to-site VPN commonly used for?

  1. A. Securely connecting two networks
  2. B. Powering cameras
  3. C. Assigning VLANs
  4. D. Replacing DNS
Show answer and explanation

Answer: A

A site-to-site VPN securely connects networks across an untrusted transport.

Week 19 • Friday • Card 5 • NAT and WAN

Q475. During network cutover testing, which protocol helps verify reachability across WAN links?

  1. A. ICMP
  2. B. PoE
  3. C. LLDP
  4. D. STP
Show answer and explanation

Answer: A

ICMP echo requests/replies are commonly used with ping.

Week 20 • Monday • Card 1 • NAT and WAN

Q476. For a recorder-to-camera traffic path, what is split tunneling?

  1. A. Sending some traffic through VPN and some directly
  2. B. Dividing a VLAN tag
  3. C. Splitting fiber strands
  4. D. Using two DHCP servers
Show answer and explanation

Answer: A

Split tunneling routes selected traffic through a VPN while other traffic goes directly.

Week 20 • Monday • Card 2 • NAT and WAN

Q477. For a Genetec camera VLAN deployment, why avoid exposing camera web interfaces directly to the Internet?

  1. A. It increases attack surface
  2. B. It disables DNS
  3. C. It prevents recording
  4. D. It changes MTU
Show answer and explanation

Answer: A

Direct exposure increases risk from credential attacks and vulnerabilities.

Week 20 • Monday • Card 3 • NAT and WAN

Q478. While troubleshooting a Security Center client connection, what is port forwarding?

  1. A. Mapping an external port to an internal host/service
  2. B. Creating a VLAN
  3. C. Blocking ARP
  4. D. Learning MAC addresses
Show answer and explanation

Answer: A

Port forwarding directs traffic received on a public IP/port to an internal IP/port.

Week 20 • Monday • Card 4 • NAT and WAN

Q479. During a jail CCTV network audit, which WAN issue most affects live video smoothness?

  1. A. Latency, jitter, and packet loss
  2. B. Hostnames only
  3. C. Keyboard layout
  4. D. Cable color
Show answer and explanation

Answer: A

Video performance is affected by latency, jitter, packet loss, and available bandwidth.

Week 20 • Monday • Card 5 • NAT and WAN

Q480. For an access control panel network, what is QoS used for over constrained WAN links?

  1. A. Prioritizing important traffic
  2. B. Creating IP addresses
  3. C. Replacing firewalls
  4. D. Changing camera lens angle
Show answer and explanation

Answer: A

QoS classifies and prioritizes traffic when bandwidth is limited.

Week 20 • Tuesday • Card 1 • QoS and multicast video

Q481. When reviewing a county security electronics network, what is multicast designed for?

  1. A. One-to-many efficient traffic delivery
  2. B. Only one-to-one delivery
  3. C. Encrypting packets
  4. D. Assigning DHCP addresses
Show answer and explanation

Answer: A

Multicast efficiently sends one stream to multiple receivers.

Week 20 • Tuesday • Card 2 • QoS and multicast video

Q482. During commissioning of Axis cameras into Genetec, which protocol lets hosts join IPv4 multicast groups?

  1. A. IGMP
  2. B. ARP
  3. C. DNS
  4. D. NTP
Show answer and explanation

Answer: A

IGMP is used by hosts and switches/routers for IPv4 multicast group membership.

Week 20 • Tuesday • Card 3 • QoS and multicast video

Q483. For a remote video monitoring site, what does IGMP snooping do on a switch?

  1. A. Limits multicast flooding by tracking group membership
  2. B. Encrypts multicast
  3. C. Assigns multicast IPs
  4. D. Blocks all video
Show answer and explanation

Answer: A

IGMP snooping helps switches forward multicast only to interested ports.

Week 20 • Tuesday • Card 4 • QoS and multicast video

Q484. When separating CCTV from the corporate LAN, which IPv4 range is multicast?

  1. A. 224.0.0.0/4
  2. B. 10.0.0.0/8
  3. C. 172.16.0.0/12
  4. D. 192.168.0.0/16
Show answer and explanation

Answer: A

IPv4 multicast uses 224.0.0.0 through 239.255.255.255.

Week 20 • Tuesday • Card 5 • QoS and multicast video

Q485. During network cutover testing, what does QoS classification do?

  1. A. Identifies traffic for policy treatment
  2. B. Creates a subnet
  3. C. Changes MAC addresses
  4. D. Erases logs
Show answer and explanation

Answer: A

Classification identifies traffic types so QoS policies can mark, queue, or police them.

Week 20 • Wednesday • Card 1 • QoS and multicast video

Q486. For a recorder-to-camera traffic path, what is DSCP?

  1. A. A Layer 3 QoS marking field
  2. B. A switch port mode
  3. C. A wireless SSID
  4. D. A DHCP option
Show answer and explanation

Answer: A

DSCP marks packets for differentiated QoS treatment.

Week 20 • Wednesday • Card 2 • QoS and multicast video

Q487. For a Genetec camera VLAN deployment, why can video surveillance traffic need QoS?

  1. A. Video can be bandwidth-intensive and delay-sensitive
  2. B. Video cannot use IP
  3. C. Video disables VLANs
  4. D. Video requires Telnet
Show answer and explanation

Answer: A

Live viewing and control traffic may need priority when links are congested.

Week 20 • Wednesday • Card 3 • QoS and multicast video

Q488. While troubleshooting a Security Center client connection, what is jitter?

  1. A. Variation in packet delay
  2. B. Static IP assignment
  3. C. MAC address aging
  4. D. A VLAN mismatch
Show answer and explanation

Answer: A

Jitter is inconsistent packet delay, which can affect real-time video and audio.

Week 20 • Wednesday • Card 4 • QoS and multicast video

Q489. During a jail CCTV network audit, what should be enabled to prevent multicast flooding in a camera VLAN?

  1. A. IGMP snooping
  2. B. Telnet
  3. C. PortFast disablement
  4. D. NAT overload
Show answer and explanation

Answer: A

IGMP snooping reduces unnecessary multicast flooding within a VLAN.

Week 20 • Wednesday • Card 5 • QoS and multicast video

Q490. For an access control panel network, which traffic is often best kept unicast unless multicast is designed properly?

  1. A. Camera video streams
  2. B. NTP queries
  3. C. ARP replies
  4. D. DHCP offers
Show answer and explanation

Answer: A

Multicast video needs proper IGMP and routing design. Without it, unicast is often simpler and safer.

Week 20 • Thursday • Card 1 • Automation and programmability

Q491. When reviewing a county security electronics network, which data format is commonly used by REST APIs?

  1. A. JSON
  2. B. STP
  3. C. ARP
  4. D. VLAN
Show answer and explanation

Answer: A

JSON is widely used to exchange structured data in REST APIs.

Week 20 • Thursday • Card 2 • Automation and programmability

Q492. During commissioning of Axis cameras into Genetec, what does REST commonly use as its transport/application protocol?

  1. A. HTTP/HTTPS
  2. B. ARP
  3. C. ICMP only
  4. D. STP
Show answer and explanation

Answer: A

RESTful APIs commonly use HTTP or HTTPS methods.

Week 20 • Thursday • Card 3 • Automation and programmability

Q493. For a remote video monitoring site, which HTTP method is commonly used to retrieve information?

  1. A. GET
  2. B. POST
  3. C. PUT
  4. D. DELETE
Show answer and explanation

Answer: A

GET retrieves a resource without changing it.

Week 20 • Thursday • Card 4 • Automation and programmability

Q494. When separating CCTV from the corporate LAN, which HTTP method is commonly used to create a new object?

  1. A. POST
  2. B. GET
  3. C. PING
  4. D. TRACEPATH
Show answer and explanation

Answer: A

POST is commonly used to submit data or create resources.

Week 20 • Thursday • Card 5 • Automation and programmability

Q495. During network cutover testing, what is an API token used for?

  1. A. Authentication/authorization to an API
  2. B. PoE negotiation
  3. C. MAC learning
  4. D. Fiber splicing
Show answer and explanation

Answer: A

API tokens are used to authenticate and authorize API requests.

Week 20 • Friday • Card 1 • Automation and programmability

Q496. For a recorder-to-camera traffic path, which tool is often used for API testing from a workstation?

  1. A. Postman
  2. B. STP
  3. C. DHCP relay
  4. D. LLDP-MED
Show answer and explanation

Answer: A

Postman is commonly used for testing REST APIs.

Week 20 • Friday • Card 2 • Automation and programmability

Q497. For a Genetec camera VLAN deployment, what is idempotency?

  1. A. Repeating an operation gives the same result
  2. B. Traffic is encrypted
  3. C. A port is trunking
  4. D. A camera is recording
Show answer and explanation

Answer: A

An idempotent operation can be repeated without changing the result beyond the first application.

Week 20 • Friday • Card 3 • Automation and programmability

Q498. While troubleshooting a Security Center client connection, why is network automation useful for security systems?

  1. A. It reduces repetitive configuration errors
  2. B. It removes need for IP addresses
  3. C. It prevents all outages
  4. D. It replaces physical cabling
Show answer and explanation

Answer: A

Automation improves consistency, speeds changes, and reduces manual mistakes.

Week 20 • Friday • Card 4 • Automation and programmability

Q499. During a jail CCTV network audit, which file format is commonly used for network automation variables?

  1. A. YAML
  2. B. JPEG
  3. C. MP3
  4. D. BMP
Show answer and explanation

Answer: A

YAML is frequently used for human-readable configuration data.

Week 20 • Friday • Card 5 • Automation and programmability

Q500. For an access control panel network, what is Git used for?

  1. A. Version control
  2. B. Packet switching
  3. C. PoE delivery
  4. D. Wireless roaming
Show answer and explanation

Answer: A

Git tracks changes to files such as scripts, templates, and configurations.

at

CCNA Network Practice for Genetec Engineers

CCNA Practice Flashcards for Genetec Engineers — 500 Questions CCNA Practice Flashcards for Genetec Engineers 500 multiple-ch...