I85PREP
⌘ K
CTSF study materials
CTSF study resources

CTSF practice questions

One question at a time. Build your CTSF understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Technology Fundamentals and Terminology

Which OSI model layer is responsible for logical addressing and routing of packets between networks?

  1. Session layer
  2. Network layer Correct answer.
  3. Data link layer
  4. Transport layer

Explanation

The network layer handles logical addressing (such as IP addresses) and determines paths for packets across interconnected networks. Routing protocols operate at this layer.

Question 2Technology Fundamentals and Terminology

What is the primary function of DNS in an IP network?

  1. Assigning IP addresses dynamically
  2. Encrypting traffic between hosts
  3. Resolving hostnames to IP addresses Correct answer.
  4. Filtering packets by port number

Explanation

DNS is a distributed naming system that maps human-readable hostnames to IP addresses so clients can locate services. It does not assign addresses or encrypt traffic.

Question 3Technology Fundamentals and Terminology

Which protocol provides reliable, connection-oriented delivery with sequencing and acknowledgments?

  1. UDP
  2. TCP Correct answer.
  3. ARP
  4. ICMP

Explanation

TCP establishes a connection and uses sequence numbers and acknowledgments to guarantee ordered, reliable delivery. UDP is connectionless and does not guarantee delivery.

Question 4Technology Fundamentals and Terminology

What does the CIDR notation /24 indicate about an IPv4 network?

  1. The subnet mask is 255.255.0.0
  2. The first 24 bits are the network portion Correct answer.
  3. There are 24 usable host addresses
  4. The host portion is 24 bits long

Explanation

In CIDR notation the number after the slash counts the leading network bits. A /24 means 24 network bits and 8 host bits, giving 256 addresses.

Question 5Technology Fundamentals and Terminology

Which technology is commonly used to extend a Layer 2 network across a shared provider infrastructure by tagging frames with a VLAN identifier?

  1. PPPoE
  2. 802.1Q VLAN tagging Correct answer.
  3. NAT
  4. BGP

Explanation

802.1Q inserts a tag into Ethernet frames to identify VLAN membership, allowing multiple logical networks to share physical links. This is the basis of VLAN trunking.

Question 6Technology Fundamentals and Terminology

A user reports intermittent connectivity that resolves when the network cable is reseated. Which layer of the OSI model most directly corresponds to this fault?

  1. Layer 7, application
  2. Layer 3, network
  3. Layer 1, physical Correct answer.
  4. Layer 4, transport

Explanation

Cabling, connectors, and signal transmission are physical-layer concerns. Reseating a cable addresses a Layer 1 fault.

Question 7Technology Fundamentals and Terminology

Which cloud service model provides virtual machines and storage while the customer manages the operating system and above?

  1. FaaS
  2. SaaS
  3. IaaS Correct answer.
  4. PaaS

Explanation

Infrastructure as a service delivers compute, storage, and networking primitives; the customer controls the OS, middleware, and applications. PaaS and SaaS abstract more of the stack.

Question 8Technology Fundamentals and Terminology

What is the purpose of a default gateway on a host?

  1. To resolve hostnames for the host
  2. To authenticate users before network access
  3. To forward traffic destined for other networks Correct answer.
  4. To assign the host an IP address

Explanation

A default gateway is the router address a host uses when the destination is not on its local subnet. The host forwards such traffic to the gateway for routing.

Question 9Technology Fundamentals and Terminology

Which statement best describes the difference between a stateful and a stateless firewall?

  1. Stateful firewalls track connection state; stateless firewalls evaluate each packet independently Correct answer.
  2. Stateful firewalls inspect only packet headers; stateless firewalls inspect payloads
  3. Stateless firewalls require user authentication; stateful firewalls do not
  4. Stateful firewalls operate only at Layer 2; stateless firewalls operate at Layer 3

Explanation

A stateful firewall maintains a connection table so return traffic is recognized as part of an established session. A stateless firewall applies rules to each packet in isolation.

Question 10Technology Fundamentals and Terminology

A network engineer needs to segment a /24 into four equal subnets. What prefix length should each subnet use?

  1. /27
  2. /25
  3. /26 Correct answer.
  4. /28

Explanation

Borrowing two host bits from a /24 yields four subnets, since 2^2 = 4. The new prefix length is 24 + 2 = /26.

Question 11Technology Fundamentals and Terminology

Which characteristic distinguishes UDP from TCP when supporting real-time voice traffic?

  1. UDP performs congestion control more aggressively
  2. UDP has lower latency because it avoids retransmission and connection setup Correct answer.
  3. UDP provides built-in encryption
  4. UDP guarantees ordered delivery

Explanation

UDP is connectionless and does not retransmit lost segments, which reduces overhead and latency. Real-time media tolerates occasional loss better than delayed delivery.

Question 12Technology Fundamentals and Terminology

What does a NAT device do when translating outbound traffic from an internal host?

  1. Blocks traffic that lacks a valid certificate
  2. Assigns a new DNS name to the host
  3. Encrypts the payload before forwarding
  4. Replaces the private source address with a public address Correct answer.

Explanation

NAT rewrites the source IP address (and often port) of outbound packets to a public address so internal hosts can share routable addresses. It tracks the mapping to return replies.

Question 13Technology Fundamentals and Terminology

Which record type in DNS maps a hostname to an IPv6 address?

  1. AAAA Correct answer.
  2. A
  3. MX
  4. CNAME

Explanation

An AAAA record holds a 128-bit IPv6 address for a hostname. The A record serves the equivalent role for IPv4.

Question 14Technology Fundamentals and Terminology

Which protocol is used by a host to automatically obtain an IP address, subnet mask, and default gateway?

  1. NTP
  2. SNMP
  3. LDAP
  4. DHCP Correct answer.

Explanation

DHCP delivers network configuration parameters to clients through a discover-offer-request-acknowledge exchange. It centralizes address assignment.

Question 15Technology Fundamentals and Terminology

What is the main benefit of using a VPN tunnel between two sites?

  1. It encrypts traffic and provides confidentiality over an untrusted network Correct answer.
  2. It removes the need for routing between sites
  3. It increases available bandwidth on the link
  4. It eliminates the need for IP addressing

Explanation

A VPN encapsulates and encrypts traffic so data crossing a public network remains confidential and integrity-protected. It does not increase bandwidth or remove addressing needs.

Question 16Technology Fundamentals and Terminology

In a software-defined network, what is the role of the control plane?

  1. Deciding how traffic should be routed Correct answer.
  2. Forwarding individual packets between interfaces
  3. Providing physical connectivity between switches
  4. Encrypting data at rest

Explanation

The control plane computes routing and policy decisions and programs the forwarding plane. SDN often centralizes this function in a controller.

Question 17Technology Fundamentals and Terminology

Which statement accurately describes the relationship between a hypervisor and virtual machines?

  1. A hypervisor provides Layer 3 routing between VLANs
  2. A hypervisor allocates physical resources to guest virtual machines Correct answer.
  3. A hypervisor is an application that runs only inside a container
  4. A hypervisor replaces the need for an operating system in guests

Explanation

A hypervisor abstracts physical CPU, memory, and I/O and presents them to virtual machines. Guests run their own operating systems on these virtual resources.

Question 18Technology Fundamentals and Terminology

A security analyst sees many outbound connections to a single external IP on port 443 from internal hosts at regular intervals. Which technique best helps identify whether this is command-and-control beaconing?

  1. Checking the ARP cache on the gateway
  2. Analyzing connection periodicity and payload patterns Correct answer.
  3. Reviewing DHCP lease times
  4. Verifying NTP synchronization status

Explanation

Beaconing is characterized by regular, repeated connections and consistent payloads to a command-and-control endpoint. Periodicity and payload analysis reveal this pattern.

Question 19Technology Fundamentals and Terminology

Which component of an identity system issues and signs tokens that assert a user's identity to relying applications?

  1. A reverse proxy
  2. A DNS resolver
  3. An identity provider Correct answer.
  4. A load balancer

Explanation

An identity provider authenticates users and issues signed assertions or tokens that applications trust. This enables federated single sign-on.

Question 20Technology Fundamentals and Terminology

What does the term 'least privilege' mean in access control?

  1. Rotating passwords on a fixed schedule
  2. Requiring multi-factor authentication for all logins
  3. Granting only the permissions required to perform a task Correct answer.
  4. Granting users the maximum access needed for convenience

Explanation

Least privilege limits each identity to the minimum permissions necessary for its function, reducing the impact of compromise or error. It is a foundational access-control principle.

Question 21Technology Fundamentals and Terminology

Which hashing property makes it infeasible to find two different inputs producing the same digest?

  1. Key stretching
  2. Salting
  3. Collision resistance Correct answer.
  4. Forward secrecy

Explanation

Collision resistance means it is computationally infeasible to find two distinct inputs with the same hash output. This underpins integrity and signature schemes.

Question 22Technology Fundamentals and Terminology

An organization uses a /26 subnet and must reserve the first usable address for the gateway and the last usable address for a server. How many addresses remain assignable to other hosts?

  1. 62
  2. 58
  3. 60 Correct answer.
  4. 64

Explanation

A /26 has 64 total addresses; removing the network and broadcast addresses leaves 62 usable. Reserving two of those for the gateway and server leaves 60 assignable to other hosts.

Question 23Technology Fundamentals and Terminology

Why does a stateful inspection firewall rely on its connection table when evaluating return traffic?

  1. To translate private addresses to public ones
  2. To compress packet headers for efficiency
  3. To recognize packets belonging to an established session Correct answer.
  4. To authenticate users against a directory

Explanation

The connection table records active sessions so the firewall can allow return packets that match an established flow without re-evaluating static rules. This improves both security and performance.

Question 24Technology Fundamentals and Terminology

A service is reachable by IP but not by hostname from a client, while other hosts on the same subnet resolve it correctly. Which cause is most consistent with these symptoms?

  1. The server's TLS certificate has expired
  2. The server's default gateway is misconfigured
  3. The client is using a DNS server that lacks the correct record Correct answer.
  4. The switch port for the server is in the wrong VLAN

Explanation

Successful access by IP shows the network path and service are working, so the failure lies in name resolution. A client pointed at a DNS server without the correct record would fail only for that client.

Question 25Technology Fundamentals and Terminology

Which design choice best reduces the blast radius of a compromised workload in a segmented data center?

  1. Enforcing east-west policy between workload groups Correct answer.
  2. Placing all workloads on a single flat VLAN
  3. Disabling logging to reduce overhead
  4. Increasing the size of each subnet

Explanation

East-west policy controls traffic between workloads so a compromise cannot spread freely. Segmentation limits lateral movement, shrinking the blast radius.

Question 26Technology Fundamentals and Terminology

Which layer of the OSI model is responsible for logical addressing and routing of packets between networks?

  1. Transport layer
  2. Data link layer
  3. Network layer Correct answer.
  4. Session layer

Explanation

The network layer (layer 3) handles logical addressing (such as IP addresses) and determines the best path for packets across interconnected networks.

Question 27Technology Fundamentals and Terminology

In the TCP/IP model, which layer corresponds to the OSI model's network layer?

  1. Internet layer Correct answer.
  2. Transport layer
  3. Application layer
  4. Network access layer

Explanation

The Internet layer of the TCP/IP model maps to the OSI network layer, handling logical addressing and routing of packets.

Question 28Technology Fundamentals and Terminology

Which type of address is used at the data link layer to deliver frames on a local network segment?

  1. URL
  2. Port number
  3. MAC address Correct answer.
  4. IP address

Explanation

MAC addresses are burned into network interfaces and used by the data link layer to deliver frames to devices on the same local segment.

Question 29Technology Fundamentals and Terminology

Which protocol provides connection-oriented, reliable delivery of data with error recovery?

  1. ARP
  2. ICMP
  3. UDP
  4. TCP Correct answer.

Explanation

TCP establishes a connection, uses acknowledgments and retransmissions, and ensures ordered, reliable delivery of data.

Question 30Technology Fundamentals and Terminology

What is the primary purpose of DNS?

  1. To assign IP addresses dynamically to hosts
  2. To encrypt traffic between web browsers and servers
  3. To route packets between different networks
  4. To translate human-readable domain names into IP addresses Correct answer.

Explanation

DNS is a hierarchical naming system that resolves domain names to IP addresses so users can access resources without remembering numeric addresses.

Question 31Technology Fundamentals and Terminology

Which technology allows multiple virtual machines to run on a single physical host?

  1. Hypervisor Correct answer.
  2. Containerization
  3. VPN concentrator
  4. Load balancer

Explanation

A hypervisor abstracts physical hardware and allocates resources to multiple isolated virtual machines on one host.

Question 32Technology Fundamentals and Terminology

Which cloud service model provides a platform for developers to deploy applications without managing the underlying servers or operating systems?

  1. DaaS
  2. SaaS
  3. PaaS Correct answer.
  4. IaaS

Explanation

Platform as a Service (PaaS) supplies a managed runtime and development environment, so customers focus on code while the provider handles servers and OS maintenance.

Question 33Technology Fundamentals and Terminology

Which statement best describes the difference between a public cloud and a private cloud?

  1. A public cloud is shared among multiple tenants, while a private cloud is dedicated to a single organization. Correct answer.
  2. A public cloud only offers SaaS, while a private cloud only offers IaaS.
  3. A public cloud is owned by the customer, while a private cloud is owned by the provider.
  4. A public cloud is always less secure than a private cloud.

Explanation

Public clouds pool resources for many customers over shared infrastructure, whereas private clouds are provisioned exclusively for one organization.

Question 34Technology Fundamentals and Terminology

What is the main function of a router in a network?

  1. To provide power over Ethernet to connected devices
  2. To translate domain names into IP addresses
  3. To forward frames based on MAC addresses within a LAN
  4. To connect different networks and choose paths for packets Correct answer.

Explanation

Routers operate at layer 3, interconnect distinct networks, and use routing tables to determine the next hop for each packet.

Question 35Technology Fundamentals and Terminology

Which statement correctly describes the relationship between a VLAN and a subnet?

  1. A VLAN creates a broadcast domain at layer 2, while a subnet defines an IP addressing range at layer 3. Correct answer.
  2. A VLAN and a subnet are always the same thing.
  3. A VLAN can only exist if a subnet is configured on the same switch port.
  4. A subnet creates a broadcast domain at layer 2, while a VLAN defines an IP addressing range at layer 3.

Explanation

VLANs logically segment a switch into separate broadcast domains, whereas subnets partition IP address space; they are often aligned but operate at different layers.

Question 36Technology Fundamentals and Terminology

Which protocol is commonly used to monitor and manage network devices and collect interface statistics?

  1. NTP
  2. SNMP Correct answer.
  3. FTP
  4. SMTP

Explanation

SNMP (Simple Network Management Protocol) allows managers to query devices for status and receive traps, including interface statistics.

Question 37Technology Fundamentals and Terminology

Which statement accurately describes the role of a load balancer in a web application architecture?

  1. It encrypts all traffic between the client and the backend servers.
  2. It assigns IP addresses to backend servers dynamically.
  3. It stores session data for all users in a central database.
  4. It distributes incoming client requests across multiple backend servers to improve availability and scalability. Correct answer.

Explanation

A load balancer spreads requests over a pool of servers, preventing any single server from being overwhelmed and providing redundancy.

Question 38Technology Fundamentals and Terminology

Which characteristic best distinguishes a container from a virtual machine?

  1. Containers are always less portable than virtual machines.
  2. Containers include a full guest operating system, while virtual machines share the host kernel.
  3. Containers share the host operating system kernel, while virtual machines run a complete guest operating system. Correct answer.
  4. Containers require a hypervisor, while virtual machines do not.

Explanation

Containers isolate applications at the process level and share the host kernel, making them lighter than VMs, which each run a full OS with their own kernel.

Question 39Technology Fundamentals and Terminology

Which term describes the practice of using two or more distinct authentication factors, such as a password and a one-time code?

  1. Multi-factor authentication Correct answer.
  2. Federated identity
  3. Role-based access control
  4. Single sign-on

Explanation

Multi-factor authentication requires evidence from at least two different factor categories (something you know, have, or are) to verify identity.

Question 40Technology Fundamentals and Terminology

In a zero-trust security model, what is the primary principle for granting access to resources?

  1. Verify every request explicitly based on identity, device posture, and context before allowing access. Correct answer.
  2. Trust all users and devices once they are inside the corporate network perimeter.
  3. Grant broad access by default to simplify user experience.
  4. Rely solely on strong perimeter firewalls to block external threats.

Explanation

Zero trust assumes no implicit trust from network location and requires continuous verification of identity, device health, and context for each access request.

Question 41Hardware, Devices, and Peripherals

Which type of memory retains its contents only while power is supplied, losing data when the system is turned off?

  1. Volatile memory Correct answer.
  2. Flash memory
  3. Read-only memory
  4. Non-volatile memory

Explanation

Volatile memory requires continuous power to hold its stored data and is cleared when power is removed. RAM is the most common example in a computer system.

Question 42Hardware, Devices, and Peripherals

Which connector type is most commonly used to attach an internal SATA hard drive to a motherboard?

  1. SATA data cable Correct answer.
  2. HDMI cable
  3. VGA cable
  4. RJ45 patch cable

Explanation

SATA drives connect to the motherboard using a thin SATA data cable, with a separate SATA power connector from the PSU. The other listed cables carry video or network signals.

Question 43Hardware, Devices, and Peripherals

What is the primary purpose of a PSU in a desktop computer?

  1. Store the operating system between reboots
  2. Cool the CPU during heavy loads
  3. Provide wireless network connectivity
  4. Convert AC wall power into regulated DC voltages for components Correct answer.

Explanation

The power supply unit takes AC mains power and converts it into the DC voltages (such as 12V, 5V, and 3.3V) that internal components require.

Question 44Hardware, Devices, and Peripherals

Which port standard supports hot-swapping and delivers both data and power over a single cable to peripherals?

  1. Serial (RS-232)
  2. PS/2
  3. USB Correct answer.
  4. VGA

Explanation

USB is designed for hot-swapping and can supply power to peripherals while carrying data on the same connection. The other legacy ports do not provide this combination.

Question 45Hardware, Devices, and Peripherals

Which device is an example of an input peripheral?

  1. Optical mouse Correct answer.
  2. Powered speaker
  3. LCD monitor
  4. Laser printer

Explanation

An input peripheral sends data from the user into the computer; a mouse reports movement and clicks. Printers, monitors, and speakers receive output from the system.

Question 46Hardware, Devices, and Peripherals

Which component is responsible for executing program instructions and performing arithmetic operations?

  1. RAM module
  2. CPU Correct answer.
  3. NIC
  4. SSD

Explanation

The central processing unit fetches, decodes, and executes instructions, including arithmetic and logic operations. Other components store data or provide connectivity.

Question 47Hardware, Devices, and Peripherals

Which type of display technology produces its own light per pixel and therefore needs no separate backlight?

  1. LCD with LED backlight
  2. Plasma
  3. OLED Correct answer.
  4. LCD with CCFL backlight

Explanation

OLED pixels emit their own light when energized, so no backlight layer is required. Conventional LCD panels rely on a separate backlight to illuminate the liquid crystal layer.

Question 48Hardware, Devices, and Peripherals

What does the term 'form factor' describe for a motherboard?

  1. Its maximum supported clock speed
  2. Its physical dimensions and mounting layout Correct answer.
  3. The number of CPU cores it supports
  4. The file system it uses for storage

Explanation

Form factor refers to the physical size, shape, and mounting hole pattern of a motherboard, which must match the case. Standards like ATX and microATX define these dimensions.

Question 49Hardware, Devices, and Peripherals

A technician needs to add a discrete graphics card that requires more power than the motherboard slot can supply. Which action addresses this requirement?

  1. Move the card to a different PCIe slot
  2. Enable the integrated GPU in firmware
  3. Replace the SATA data cable with a higher-rated one
  4. Connect the card's auxiliary PCIe power connector to the PSU Correct answer.

Explanation

High-power graphics cards draw additional current through dedicated PCIe power connectors that must be attached to the power supply. The slot alone provides limited wattage.

Question 50Hardware, Devices, and Peripherals

A user reports that a laptop battery drains quickly and the chassis feels hot even at idle. Which component is the most likely cause to investigate first?

  1. The keyboard layout setting
  2. Cooling system and thermal paste condition Correct answer.
  3. The network printer driver
  4. The external monitor cable

Explanation

Excess heat and rapid battery drain at idle often point to degraded cooling, such as dried thermal paste or a failing fan, causing throttling and higher power draw. Peripheral cabling and settings do not cause chassis-wide heat.