I85PREP
⌘ K
MSCE study materials
MSCE study resources

MSCE practice questions

One question at a time. Build your MSCE understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Planning the network infrastructure

Which address range is reserved for private IPv4 internetworks under RFC 1918?

  1. 172.16.0.0 through 172.31.255.255 Correct answer.
  2. 192.168.0.0 through 192.168.255.255 only
  3. 169.254.0.0 through 169.254.255.255
  4. 172.0.0.0 through 172.255.255.255

Explanation

RFC 1918 defines three private blocks: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. The 172.16.0.0/12 block spans 172.16.0.0 through 172.31.255.255.

Question 2Planning the network infrastructure

A subnet uses the mask 255.255.255.192. How many usable host addresses does each subnet provide?

  1. 64
  2. 62 Correct answer.
  3. 30
  4. 126

Explanation

A /26 mask leaves 6 host bits, giving 2^6 = 64 addresses per subnet. Subtracting the network and broadcast addresses leaves 62 usable host addresses.

Question 3Planning the network infrastructure

Which protocol resolves a known IPv4 address to a MAC address on a local segment?

  1. ARP Correct answer.
  2. DNS
  3. ICMP
  4. DHCP

Explanation

ARP broadcasts a request for the hardware address that owns a given IPv4 address. DNS resolves names to addresses, DHCP assigns addresses, and ICMP carries control and error messages.

Question 4Planning the network infrastructure

What is the primary purpose of a default gateway on an IPv4 host?

  1. To assign the host its IP address at startup
  2. To forward traffic destined for networks outside the host's local subnet Correct answer.
  3. To cache DNS responses for the local subnet
  4. To authenticate the host to the local switch

Explanation

A host compares the destination address with its own subnet mask; if the destination is remote, the packet is sent to the default gateway for routing. Address assignment is DHCP's role, and authentication is handled by other mechanisms.

Question 5Planning the network infrastructure

Which Windows Server role feature allows a server to centrally assign IPv4 and IPv6 configuration to clients?

  1. DHCP Server Correct answer.
  2. Remote Access
  3. DNS Server
  4. Windows Deployment Services

Explanation

The DHCP Server role leases IP addresses, masks, gateways, and options to clients. DNS resolves names, Remote Access provides VPN and routing, and WDS deploys operating system images.

Question 6Planning the network infrastructure

Which record type maps a host name to an IPv6 address in DNS?

  1. PTR
  2. MX
  3. AAAA Correct answer.
  4. A

Explanation

An AAAA record holds a 128-bit IPv6 address for a host name. An A record holds an IPv4 address, PTR supports reverse lookups, and MX identifies mail exchangers.

Question 7Planning the network infrastructure

Which technology groups multiple physical network adapters into one logical interface for redundancy and throughput?

  1. QoS prioritization
  2. VLAN tagging
  3. Port mirroring
  4. NIC teaming Correct answer.

Explanation

NIC teaming, also called load balancing and failover, combines adapters so that traffic survives a link failure and can be spread across links. VLAN tagging separates traffic, QoS prioritizes it, and mirroring copies it for monitoring.

Question 8Planning the network infrastructure

Which Windows tool is used to create and manage virtual switches for Hyper-V virtual machines?

  1. Hyper-V Manager Correct answer.
  2. Task Scheduler
  3. Disk Management
  4. Performance Monitor

Explanation

Hyper-V Manager provides the Virtual Switch Manager for creating external, internal, and private virtual switches. Disk Management handles volumes, Performance Monitor collects counters, and Task Scheduler runs automated jobs.

Question 9Planning the network infrastructure

A network segment must support 500 hosts on a single IPv4 subnet. Which prefix length is the smallest that satisfies the requirement?

  1. /24
  2. /25
  3. /23 Correct answer.
  4. /22

Explanation

A /23 provides 2^9 = 512 addresses, of which 510 are usable, which meets 500 hosts. A /24 yields only 254 usable addresses, so it is too small, while /22 would also work but is larger than the minimum needed.

Question 10Planning the network infrastructure

A host has address 192.168.10.130 with mask 255.255.255.192. What is the network address of its subnet?

  1. 192.168.10.128 Correct answer.
  2. 192.168.10.130
  3. 192.168.10.192
  4. 192.168.10.0

Explanation

The /26 mask places subnet boundaries every 64 addresses in the last octet: 0, 64, 128, 192. The address 130 falls in the 128 block, so 192.168.10.128 is the network address.

Question 11Planning the network infrastructure

You need to split 10.0.0.0/24 into four subnets of equal size. Which mask should you apply?

  1. 255.255.255.224
  2. 255.255.255.128
  3. 255.255.255.192 Correct answer.
  4. 255.255.255.240

Explanation

Borrowing two host bits from a /24 creates four /26 subnets. The /26 mask is 255.255.255.192, giving 62 usable hosts per subnet.

Question 12Planning the network infrastructure

Two departments must share one physical switch but remain isolated at Layer 2. What should you configure?

  1. Enable NIC teaming across both departments
  2. Apply QoS policies to each department's traffic
  3. Assign each department to a separate VLAN and use tagged uplinks Correct answer.
  4. Place both departments in the same subnet with static ARP entries

Explanation

VLANs create separate broadcast domains on shared hardware, and 802.1Q tagging carries multiple VLANs over a trunk to a router or Layer 3 switch. Static ARP and QoS do not isolate broadcast domains.

Question 13Planning the network infrastructure

A DHCP scope must exclude a range of addresses already assigned statically to servers. Which configuration achieves this?

  1. Shorten the lease duration for the scope
  2. Add a second scope on the same subnet
  3. Define an exclusion range within the scope Correct answer.
  4. Create a reservation for each server

Explanation

An exclusion range prevents the DHCP server from offering addresses that are in use by statically configured devices. Reservations tie specific addresses to specific clients but do not block the rest of the range from being leased.

Question 14Planning the network infrastructure

What is the effect of configuring a DHCP relay agent on a router?

  1. It converts DHCP leases into static reservations
  2. It forwards client DHCP broadcasts to a DHCP server on another subnet Correct answer.
  3. It encrypts DHCP traffic between subnets
  4. It assigns addresses locally when the DHCP server is offline

Explanation

DHCP discover messages are broadcasts and do not cross routers by default. A relay agent forwards them to a configured DHCP server address on another subnet so clients can obtain leases.

Question 15Planning the network infrastructure

Which DNS configuration ensures clients can resolve names even if the preferred DNS server fails?

  1. Disable recursion on the DNS server
  2. Configure at least two DNS servers in the client resolver settings Correct answer.
  3. Enable DNS scavenging on the zone
  4. Raise the TTL on all zone records

Explanation

The resolver tries alternate servers in its configured list when the first does not respond, so listing multiple DNS servers provides fault tolerance. TTL, scavenging, and recursion settings affect caching and lookup behavior, not server failover.

Question 16Planning the network infrastructure

In an IPv6 deployment, which mechanism lets IPv6-only hosts reach IPv4-only hosts?

  1. Neighbor Discovery
  2. Router Advertisement
  3. NAT64 with DNS64 Correct answer.
  4. Stateful DHCPv6

Explanation

NAT64 translates between IPv6 and IPv4 addresses, and DNS64 synthesizes AAAA records so IPv6 clients can reach IPv4-only destinations. DHCPv6, Router Advertisement, and Neighbor Discovery configure and discover IPv6 hosts but do not translate protocols.

Question 17Planning the network infrastructure

An organization wants traffic between two sites encrypted over the public internet while keeping private addressing. Which solution fits best?

  1. A VLAN trunk between the two sites
  2. A DHCP relay at each site
  3. A site-to-site VPN tunnel between the two gateways Correct answer.
  4. A DNS forwarder at each site

Explanation

A site-to-site VPN encrypts traffic between gateway devices and encapsulates private addresses across the public network. VLAN trunks, DHCP relay, and DNS forwarding do not provide encrypted transport between sites.

Question 18Planning the network infrastructure

Which Windows Server feature provides centralized network access authentication and authorization for VPN and wireless clients?

  1. DFS Replication
  2. Routing and Remote Access
  3. Windows Server Update Services
  4. Network Policy Server Correct answer.

Explanation

Network Policy Server implements RADIUS and enforces connection policies for VPN, wireless, and 802.1X access. RRAS provides routing and remote access but relies on NPS for policy in centralized designs.

Question 19Planning the network infrastructure

Which Windows Server feature lets you centrally manage IP address space and track address assignments across subnets?

  1. IP Address Management (IPAM) Correct answer.
  2. Hyper-V Manager
  3. Group Policy Management
  4. DNS Manager

Explanation

IPAM discovers and manages address space, DHCP scopes, and DNS zones from a central console. DNS Manager administers zones, Hyper-V Manager administers virtual machines, and Group Policy Management administers policy objects.

Question 20Planning the network infrastructure

A branch office has 300 employees and requires local internet breakout plus a resilient link to headquarters. Which design element is most important?

  1. A single high-capacity link to headquarters
  2. Redundant WAN links with dynamic routing failover Correct answer.
  3. A local DNS cache-only server
  4. A larger DHCP lease duration

Explanation

Two WAN paths with a dynamic routing protocol allow automatic failover if one link fails, preserving connectivity to headquarters and the internet. A single link creates a single point of failure regardless of capacity.

Question 21Planning the network infrastructure

You must plan addressing for 1,000 hosts, 500 hosts, and 200 hosts across three subnets within 10.10.0.0/22. Which allocation leaves the most contiguous free space?

  1. Assign /22, /23, and /24 blocks in descending size order from the start of the range Correct answer.
  2. Assign /24 blocks to each subnet and reserve the rest
  3. Assign /23 to the largest subnet and split the remainder evenly
  4. Assign addresses randomly across the range as hosts are added

Explanation

Allocating the largest blocks first from the low end of the range, using sizes that satisfy each requirement, keeps the remaining space contiguous. Random or uniform allocations fragment the range and may not fit larger subnets later.

Question 22Planning the network infrastructure

A host can ping 8.8.8.8 but cannot resolve www.example.com. Which configuration is the most likely cause?

  1. The default gateway on the host is incorrect
  2. The DNS server address on the host is incorrect Correct answer.
  3. The DHCP lease on the host has expired
  4. The subnet mask on the host is incorrect

Explanation

Successful pinging of a public address shows routing and gateway function are working, pointing to name resolution as the failure. An incorrect DNS server setting prevents the host from resolving names.

Question 23Planning the network infrastructure

A design requires that a failed DHCP server not interrupt addressing for existing clients while new clients still obtain leases. Which approach best meets this?

  1. Deploy one DHCP server with a short lease duration
  2. Deploy static addressing for all clients
  3. Deploy a DHCP relay on each subnet
  4. Deploy two DHCP servers with a split scope and a longer lease duration Correct answer.

Explanation

A split scope across two servers provides redundancy for new leases, and a longer lease duration lets existing clients keep their addresses while the failed server is restored. A short lease increases the frequency of renewal and hastens outage impact.

Question 24Planning the network infrastructure

An IPv4 subnet must be summarized with a single route that covers 172.16.8.0/24 through 172.16.15.0/24. Which summary route is correct?

  1. 172.16.8.0/22
  2. 172.16.8.0/24
  3. 172.16.0.0/20
  4. 172.16.8.0/21 Correct answer.

Explanation

The eight /24 networks from 172.16.8.0 to 172.16.15.0 share the first 21 bits, so a /21 summarizes them exactly. A /22 covers only four of the eight networks.

Question 25Planning the network infrastructure

A server must be reachable from two separate VLANs, and the design must avoid routing traffic through a single physical router. Which approach provides the best resilience?

  1. Use a bridge between the two VLANs
  2. Use a DHCP relay configured for both VLANs
  3. Use a single router with two physical interfaces on the VLANs
  4. Use a Layer 3 switch with switched virtual interfaces and redundant links Correct answer.

Explanation

A Layer 3 switch with switched virtual interfaces routes between VLANs in hardware, and redundant links with a first-hop redundancy protocol remove the single point of failure. A single router with two interfaces remains a single point of failure.

Question 26Planning the network infrastructure

Which protocol operates at the transport layer to provide reliable, connection-oriented delivery of data between hosts?

  1. TCP Correct answer.
  2. ICMP
  3. UDP
  4. ARP

Explanation

TCP establishes a connection through a handshake and uses acknowledgments and retransmission to guarantee ordered, reliable delivery. UDP is connectionless and does not guarantee delivery, while ICMP and ARP serve diagnostic and address-resolution roles rather than reliable transport.

Question 27Planning the network infrastructure

Which type of IPv4 address is automatically assigned by a host to itself when no DHCP server is reachable?

  1. Public address
  2. APIPA address Correct answer.
  3. Loopback address
  4. Multicast address

Explanation

When DHCP discovery fails, Windows hosts self-assign an address in the 169.254.0.0/16 range, known as Automatic Private IP Addressing. This allows limited link-local communication but provides no default gateway for external routing.

Question 28Planning the network infrastructure

Which device forwards packets between separate IP subnets by consulting a routing table?

  1. Hub
  2. Layer 2 switch
  3. Router Correct answer.
  4. Repeater

Explanation

A router makes forwarding decisions based on destination network addresses in its routing table, moving packets between subnets. Hubs, switches, and repeaters operate at Layer 1 or Layer 2 and do not route between IP networks.

Question 29Planning the network infrastructure

Which service translates a fully qualified domain name into an IP address for client resolution requests?

  1. NTP
  2. WINS
  3. DHCP
  4. DNS Correct answer.

Explanation

DNS resolves host names to IP addresses through a hierarchical namespace and resolver queries. DHCP assigns addresses, WINS resolves NetBIOS names, and NTP synchronizes time.

Question 30Planning the network infrastructure

A network designer needs a single subnet that supports at least 60 usable host addresses while wasting as few addresses as possible. Which prefix length should be chosen?

  1. /26 Correct answer.
  2. /27
  3. /25
  4. /28

Explanation

A /26 provides 64 total addresses, of which 62 are usable after reserving the network and broadcast addresses, meeting the 60-host requirement with minimal waste. A /27 yields only 30 usable addresses and would be insufficient.

Question 31Planning the network infrastructure

A host is configured with address 10.20.30.200 and mask 255.255.255.224. Which address is the directed broadcast address for its subnet?

  1. 10.20.30.255
  2. 10.20.30.224
  3. 10.20.30.223 Correct answer.
  4. 10.20.30.207

Explanation

A /27 mask creates blocks of 32 addresses; the block containing .200 runs from .192 to .223. The highest address in the block, .223, is the broadcast address.

Question 32Planning the network infrastructure

Which Windows Server role feature allows an administrator to define a pool of addresses that clients receive automatically along with gateway and DNS settings?

  1. DHCP Server Correct answer.
  2. Web Application Proxy
  3. DNS Server
  4. Network Policy Server

Explanation

The DHCP Server role distributes IP addresses, subnet masks, default gateways, and DNS server options to clients through scopes and options. DNS Server provides name resolution, NPS handles access policy, and Web Application Proxy publishes internal applications.

Question 33Planning the network infrastructure

A designer plans an IPv6 addressing scheme and wants each site to derive its subnet portion from a globally assigned prefix while keeping the interface identifier stable per host. Which approach fits this design?

  1. Assign a /48 per site and use the next 16 bits for local subnets Correct answer.
  2. Assign a single /64 shared by all sites
  3. Assign a /32 per site and use the last 96 bits for subnets
  4. Assign a /128 to each host manually

Explanation

A common IPv6 plan gives each site a /48, leaving 16 bits for up to 65,536 local /64 subnets while hosts keep a stable 64-bit interface identifier. Sharing one /64 across sites breaks the flat-subnet model, and /128 or /32 assignments do not provide usable subnet space.

Question 34Planning the network infrastructure

An organization wants to ensure that a failed domain controller's DNS service does not stop name resolution for domain-joined clients. Which planning decision best addresses this requirement?

  1. Configure clients to use a public resolver as the only DNS server
  2. Configure the zone as a secondary zone on a standalone workgroup server
  3. Configure a single DNS server with a longer TTL
  4. Configure each client with multiple DNS servers that host the zone Correct answer.

Explanation

Listing multiple DNS servers that each host the zone gives clients alternate resolvers if one fails. Long TTLs affect caching duration, not server availability, and relying solely on a public resolver breaks internal name resolution.

Question 35Planning the network infrastructure

A network planner must segment traffic so that voice, data, and management traffic each occupy a separate broadcast domain on shared physical switches. Which configuration accomplishes this?

  1. Assign each traffic type a distinct subnet mask on one VLAN
  2. Assign each traffic type a distinct DNS suffix
  3. Assign each traffic type to a distinct VLAN Correct answer.
  4. Assign each traffic type a distinct default gateway on one VLAN

Explanation

VLANs create separate Layer 2 broadcast domains on shared switches, isolating traffic types. Gateways, DNS suffixes, and masks do not by themselves separate broadcast domains.

Question 36Planning the network infrastructure

Which routing approach requires the least administrative effort when a new subnet is added to an existing OSPF area?

  1. Policy-based routing rules
  2. Dynamic routing with OSPF Correct answer.
  3. Static routes on every router
  4. Host routes on each client

Explanation

OSPF routers exchange link-state information and automatically learn new subnets within the area, reducing manual updates. Static routes and policy rules must be configured on each affected device, and host routes on clients do not scale.

Question 37Planning the network infrastructure

A company plans a remote-access design where users authenticate against Active Directory and access is granted based on group membership and health status. Which combination of Windows Server roles supports this?

  1. DNS Server with a forwarder
  2. File Server with DFS Replication
  3. DHCP Server with a relay agent
  4. Network Policy Server with Remote Access and a RADIUS client Correct answer.

Explanation

NPS acts as a RADIUS server that evaluates connection requests against AD group membership and health policies, while Remote Access provides the VPN or dial-in endpoint. DNS, DHCP, and File Server roles do not perform authentication and authorization for access.

Question 38Planning the network infrastructure

A designer must place a subnet of publicly reachable web servers so that inbound traffic is filtered while internal hosts remain hidden. Which design element is most appropriate?

  1. A subnet placed inside the internal domain with no filtering
  2. A perimeter network segment separated by firewalls from internal networks Correct answer.
  3. A dedicated VLAN with no route to the internet
  4. A flat network shared by internal and public hosts

Explanation

A perimeter network (DMZ) isolates public-facing servers behind firewalls, allowing controlled inbound access while shielding internal hosts. Placing public servers on the internal network or a flat network exposes internal systems, and a VLAN with no internet route cannot serve public clients.

Question 39Planning the network infrastructure

An administrator must plan address assignments so that a critical server always keeps the same IP address while still being centrally documented in the DHCP database. Which approach satisfies both goals?

  1. Configure the server to use APIPA
  2. Exclude the server's address from the scope without a reservation
  3. Create a reservation that binds the server's MAC address to a fixed address Correct answer.
  4. Assign the server an address from a dynamic pool

Explanation

A reservation ties a specific address to a client's hardware address, so the server consistently receives the same IP while the assignment remains visible and managed in DHCP. Exclusions and dynamic pools do not guarantee a fixed address, and APIPA provides no managed configuration.

Question 40Planning the network infrastructure

A design must summarize the networks 192.168.16.0/24 through 192.168.23.0/24 into the smallest single summary route. Which prefix should be advertised?

  1. 192.168.16.0/21 Correct answer.
  2. 192.168.16.0/23
  3. 192.168.16.0/20
  4. 192.168.16.0/22

Explanation

The eight /24 networks from .16 through .23 occupy a contiguous block of 2,048 addresses, which corresponds to a /21. A /20 would include additional networks outside the range, while /22 and /23 are too small to cover all eight.

Question 41Installing, configuring, and troubleshooting the network infrastructure

A technician needs to assign a device a static IPv4 address that will never be handed out by the DHCP server on the same subnet. Which addressing approach satisfies this requirement?

  1. Reserve an address from the DHCP pool range for the device
  2. Configure an address outside the DHCP scope range Correct answer.
  3. Enable DHCP on the device and rely on a lease
  4. Use an APIPA address in the 169.254.0.0/16 range

Explanation

Static addresses should be chosen from within the subnet but outside the range the DHCP server distributes, so no conflict can occur. Addresses inside the scope may be leased to another host.

Question 42Installing, configuring, and troubleshooting the network infrastructure

Which IPv4 address is a valid private address under RFC 1918?

  1. 172.15.10.5
  2. 192.169.1.20
  3. 11.0.0.1
  4. 10.200.15.7 Correct answer.

Explanation

RFC 1918 defines 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 as private ranges. Only 10.200.15.7 falls inside one of these blocks.

Question 43Installing, configuring, and troubleshooting the network infrastructure

A host is configured with IP 192.168.1.50/27. What is the network address of its subnet?

  1. 192.168.1.64
  2. 192.168.1.0
  3. 192.168.1.32 Correct answer.
  4. 192.168.1.48

Explanation

A /27 mask leaves 5 host bits, so subnets advance in blocks of 32. The block containing .50 runs from .32 to .63, making .32 the network address.

Question 44Installing, configuring, and troubleshooting the network infrastructure

What is the primary purpose of a default gateway on an end host?

  1. To assign IP addresses to local clients
  2. To forward traffic destined for other networks Correct answer.
  3. To resolve host names to IP addresses
  4. To filter inbound traffic by port number

Explanation

The default gateway is the router interface a host sends packets to when the destination is not on the local subnet. Local destinations are reached directly via ARP.

Question 45Installing, configuring, and troubleshooting the network infrastructure

Users on a VLAN report they can reach local peers but cannot reach any host on other VLANs. Which configuration should be verified first?

  1. The spanning-tree priority of the root bridge
  2. The inter-VLAN routing configuration on the Layer 3 device Correct answer.
  3. The DNS suffix on the client workstations
  4. The duplex setting on the access ports

Explanation

When local communication works but cross-VLAN traffic fails, routing between VLANs is the likely fault. This points to the router-on-a-stick subinterfaces or switched virtual interfaces.

Question 46Installing, configuring, and troubleshooting the network infrastructure

Which record type maps a fully qualified domain name to an IPv6 address?

  1. PTR
  2. CNAME
  3. A
  4. AAAA Correct answer.

Explanation

The AAAA record stores a 128-bit IPv6 address for a host name. The A record serves the equivalent purpose for IPv4.

Question 47Installing, configuring, and troubleshooting the network infrastructure

A DHCP scope is configured but clients on the subnet receive no address. The DHCP server sits on a different subnet and the router interface acts as the relay. What must be configured on the router interface?

  1. A static route to the DHCP server
  2. A DHCP reservation for each client
  3. A secondary subnet mask
  4. An IP helper address pointing to the DHCP server Correct answer.

Explanation

Because DHCP DISCOVER messages are broadcasts, a relay agent must forward them to a server on another subnet. On Cisco-style devices this is the ip helper-address command.

Question 48Installing, configuring, and troubleshooting the network infrastructure

Which characteristic distinguishes a trunk port from an access port on a switch?

  1. A trunk port is always assigned to VLAN 1
  2. A trunk port carries traffic for multiple VLANs using tags Correct answer.
  3. A trunk port disables spanning tree on the link
  4. A trunk port only permits untagged frames

Explanation

Trunk links carry frames for several VLANs, using 802.1Q tags to identify the VLAN of each frame. Access ports belong to a single VLAN and normally send untagged frames.

Question 49Installing, configuring, and troubleshooting the network infrastructure

A workstation can ping its default gateway by IP but cannot reach any website by name. Pinging 8.8.8.8 succeeds. What is the most likely cause?

  1. The default gateway is misconfigured
  2. The NIC duplex is set incorrectly
  3. The DNS server setting is incorrect Correct answer.
  4. The subnet mask is wrong

Explanation

Successful pings to an external IP prove routing works, so the failure is name resolution. An unreachable or wrong DNS server prevents the client from resolving host names.

Question 50Installing, configuring, and troubleshooting the network infrastructure

Which technology allows multiple private networks to share one public IPv4 address by translating port numbers?

  1. Static NAT
  2. VLAN trunking
  3. Proxy ARP
  4. PAT Correct answer.

Explanation

Port Address Translation, also called NAT overload, multiplexes many internal sessions over one public address by rewriting source ports. This conserves public IPv4 addresses.