SSH is a protocol that provides a secure remote access connection to network devices.
SSH uses the well-known TCP port 23 for its communication.
A Telnet network management connection is dropped when a router reboots.
Telnet is a protocol that provides a secure remote access connection to network devices.
Telnet is preferred over SSH for security reasons.

Answer(s): A,C

Show Answer Next Question

QUESTION: 4

Which address facilitates the routing of packets over an IP network?

physical
transport
network
MAC

Answer(s): C

Show Answer Next Question

QUESTION: 5

Which two IPv4 addresses can be assigned to a host computer? (Choose two.)

255.255.255.255
10.1.1.20
0.0.0.0
192.168.10.15
292.10.3.4

Answer(s): B,D

Show Answer Next Question

Download PDF Next Page

Viewing page 4 of 13
Viewing questions 16 - 20 out of 72 questions

Post your Comments and Discuss Cisco 100-490 exam prep with other Community members:

Comments:

Name:

100-490 Exam Discussions & Posts
100-490 AI Verifications

Sylvester Jafta on: December 19, 2024
nibasiwe laway
EUROPEAN UNION

Cgroups on: September 21, 2026
Thought I'd bomb the exam but them practice questions taught me good.
Uruguay

Replica on: July 07, 2026
Stressful but these practice questions helped a lot. I'm glad I passed.
Australia

Fiber on: June 23, 2026
This exam was so stressful but I got through it. The prep materials really made a difference.
Ireland

VlanId on: August 21, 2026
This exam was stressful. The prep really helped.
Luxembourg

ZeroDay on: September 20, 2026
At first I wasn't sure about this exam but the practice questions here really helped me get a better grasp.
Lithuania

Nullptr on: August 09, 2026
Crammed with practice questions here save time.
Qatar

Glibc on: July 29, 2026
The exam was harder than I thought covering a lot more stuff. The AI assistant on this site helped fill in the gaps where I needed it.
Cyprus

Parity on: August 30, 2026
This exam was tough and covered more than I thought. The AI assistant helped me through the harder bits.
Italy

Hashmap on: July 30, 2026
Prep questions made this exam doable.
Brazil

Nullptr on: September 03, 2026
This exam had more stuff on it than I thought but the material here was helpful. The AI assistant guided me nicely through prep.
Cyprus

Strace on: September 06, 2026
Man the exam covered more than I thought it would and it was tough. Luckily the AI assistant on this site really helped break down some tricky parts so that was good.
Chile

Loopback on: July 07, 2026
I slowly crammed with their practice questions to save time and money and passed the exam.
Ireland

Loopback on: August 16, 2026
Took me some time but I reviewed questions and passed.
Germany

Syscall on: July 20, 2026
Practice questions really helped when I doubted.
Denmark

Ring0 on: July 01, 2026
The exam was tough but these questions got me through.
Australia

HUng on: September 09, 2026
It very good.
Ho Chi Minh City, Vietnam

Vlan on: June 29, 2026
The exam was tough. Glad I used the prep material here.
Spain

Pip on: July 30, 2026
Man this exam was tough but the practice questions got me through. Just glad I passed honestly.
Austria

Tty on: July 11, 2026
Man this exam was tough but these questions on the site got me through it.
Estonia

Deadlock on: June 27, 2026
Exam was stressful. Glad this site's prep helped.
Liechtenstein

Endian on: August 31, 2026
I crammed with the practice questions and saved time and money even though I had to go through it slowly but passed the exam.
Netherlands

Zsh on: July 01, 2026
So stressful but exam prep helped. Glad I used it.
Netherlands

Thread on: August 16, 2026
Crammed like crazy and saved time with this site passed the exam slowly but surely.
Iceland

Epoll on: July 09, 2026
This exam was super stressful but the practice questions were solid. Glad I used them.
Canada

MAN IN DISTRESS on: September 22, 2026
AHHHHHHHHH HELP ME
Orlando, United States

Hashmap on: September 14, 2026
I was making slow progress at first but using the practice questions helped a lot and I passed.
Uruguay

Ring0 on: September 02, 2026
The exam was tougher than I thought but these practice questions made it manageable.
Netherlands

Iptables on: August 10, 2026
This exam kinda hit me with more stuff than I thought but the AI on this site helped me manage it better. Overall it went fine thanks to that cool assistant thingy.
Portugal

Baud on: August 26, 2026
Juggling work and short study sessions it felt great to finally pass this cert.
United States

Hardlink on: August 01, 2026
Wow that exam was crazy stressful. Good thing these questions were on point.
South Korea

Hexdump on: July 18, 2026
Man this exam was tough. Happy the prep stuff here worked.
Norway

Grep on: June 30, 2026
Work was crazy so had to study in quick bursts but finally done and what a relief.
Japan

Synack on: September 11, 2026
Man this exam was a beast but these questions helped me chill. Glad I used the prep material here.
Israel

Patchset on: July 31, 2026
I found the exam to be tougher than I planned for. The AI assistant on this site was really helpful navigating unexpected topics.
Iceland

Chmod on: September 08, 2026
I took my time with prep but in the end reviewing it all paid off and I passed.
Norway

Scsi on: June 29, 2026
Was worried about this exam. This site made it a bit easier.
Argentina

Tty on: July 02, 2026
Worked around meetings squeezing study time and it paid off.
Belgium

ZeroDay on: August 21, 2026
That test was no joke. Good thing the prep materials worked out.
Australia

Patchset on: September 04, 2026
The exam was tough but these questions helped.
Singapore

Bootload on: August 12, 2026
Took time to see progress but passed eventually.
UAE

Manpage on: June 26, 2026
Quick sessions at work helped pass.
Malta

Overclock on: June 29, 2026
The exam was tougher but doable.
Italy

Systemd on: July 13, 2026
Squeezed in quick study sessions after work with the help of this site and nailed the cert like I wasn't even stressing.
Estonia

Mutex on: July 21, 2026
Stressful time with this exam. Glad the prep material worked okay.
Canada

Stacktrace on: August 23, 2026
Studying for this exam stressed me out. Thankfully the prep material helped a lot.
Brazil

Semlock on: July 18, 2026
The exam was tough. The prep helped a lot.
Malta

Payload on: August 02, 2026
I wasn't confident at first but the practice questions really helped.
Germany

Bitmask on: July 13, 2026
Crammed a ton but saved time and money getting through this test easy.
Argentina

ZeroDay on: September 09, 2026
After juggling work I squeezed in short study bursts and got through the exam with a big sigh of relief.
Slovenia

AI Explanation - verified by User5264 on: September 30, 2026
Question 13:
The answer key appears incorrect. I believe the best answer is C — malfunction occurring before the end of the device’s service life.
Under GHTF medical-device vigilance principles, a malfunction that occurs during the stated service life can indicate a device deficiency and is generally reportable if it caused, or could cause, death or serious injury.
The other options describe recognized situations that may exempt an event from reporting:

Deficiency found before patient use: usually does not require an adverse-event report because no patient exposure occurred.

Event caused solely by the patient’s condition: may not be reportable if the device did not contribute.

Malfunction protection operated correctly: generally exempt when the device’s safety mechanism worked as intended and prevented harm.

The key distinction is that “before the end of service life” is not an exemption; it makes the malfunction more significant.
Nanjing, China

AI Explanation - verified by User2418 on: September 24, 2026
Question 11:
Question 11: Correct answer — A. False positive
A false positive occurs when a security tool reports a vulnerability, but the vulnerability is not actually present.
In this case, the vulnerability scan identifies a vulnerability on a system, but the administrator verifies that the system is not affected. Therefore, the scan produced a false alarm.

True positive: The scan reports a vulnerability that really exists.

False positive: The scan reports a vulnerability that does not exist.

True negative: The scan correctly reports no vulnerability.

False negative: The scan fails to detect a vulnerability that is actually present.

The answer key’s A is correct.
Beau Bassin-Rose Hill, Mauritius

AI Explanation - verified by User5938 on: September 26, 2026
Question 29:
Correct answer: $174 million (A).
In consolidation, CD’s assets are brought into the group accounts at their fair value at acquisition, not simply at their carrying amount.
Calculation:

AB’s own PPE: $100m

CD’s PPE in its individual accounts: $50m

Fair value uplift at acquisition: $40m

Remaining useful life: 10 years

Extra depreciation each year: $40m ÷ 10 = $4m

Four years’ extra depreciation to 31 December 20X4: 4 × $4m = $16m

Remaining fair value uplift: $40m - $16m = $24m

Therefore:
$100m + $50m + $24m = $174m
The extra depreciation must be recognised in the consolidated accounts because the uplifted assets have a higher depreciable amount. The individual accounts of CD continue to use its original carrying value.
Maseru, Lesotho

AI Explanation - verified by User8696 on: September 27, 2026
Question 17:
Correct answer: D. 587
Port 587 is commonly used for secure SMTP submission—sending email from a mail client to an email server. It typically uses authentication and can upgrade the connection to encryption with STARTTLS.
Why the others are incorrect:

25 — Traditional SMTP server-to-server mail delivery; often restricted and not the usual client submission port.

110 — POP3, used for retrieving email; normally unencrypted.

143 — IMAP, used for retrieving and synchronizing email; normally unencrypted.

Important nuance: Port 587 is not automatically encrypted merely because of its number; secure configuration generally requires STARTTLS. Port 465 is also associated with implicit TLS for SMTP, but it is not listed here.
Harlingen, United States

AI Explanation - verified by User4717 on: September 27, 2026
Question 13:
Correct answer: No (B)
Azure Cosmos DB is a globally distributed NoSQL database service. It is used to store and query data, not to build, test, and deploy predictive analytics models.
For this requirement, use Azure Machine Learning, particularly Azure Machine Learning studio, which supports:

Preparing and managing datasets

Building and training machine-learning models

Testing and evaluating models

Deploying models as endpoints for predictions

Therefore, the proposed use of Cosmos DB does not meet the goal. The answer key’s B — No is correct.
Mumbai, India

AI Explanation - verified by User8043 on: September 11, 2026
Question 57:
Correct answer: A. Non-credentialed scan
A non-credentialed vulnerability scan examines systems from an external perspective without using a system account or login credentials. It identifies weaknesses that an unauthenticated attacker might discover on internet-facing web servers.
Why the others are incorrect:

Packet capture: Collects and analyzes network traffic; it does not describe the scan type.

Privilege escalation: Attempts to gain higher permissions after obtaining access.

System enumeration: Identifies systems, services, or resources, but is not specifically defined by the lack of credentials.

Passive scan: Observes traffic without actively probing systems. A vulnerability scan is generally an active assessment.

A credentialed scan would use an account to inspect the operating system and applications in greater depth.
Upland, United States

AI Explanation - verified by User5838 on: September 08, 2026
Question 21:
Correct answer: B — Validating that assets are protected according to the assigned classification.
The IS auditor’s role is independent assurance, not ownership of the classification process. The auditor evaluates whether management’s controls are working as intended.

A — Securing information assets: This is the responsibility of management and operational/security teams.

B — Validating protection: Correct. The auditor checks whether controls—such as access restrictions, encryption, retention, and handling procedures—match the asset’s classification.

C — Ensuring alignment with regulations: Management and legal/compliance functions typically establish classification requirements; the auditor may assess compliance but does not primarily define alignment.

D — Defining classification levels: This is a management responsibility based on business needs, risk, and regulatory obligations.

A useful exam principle is: management establishes policies and classifications; the auditor independently evaluates whether they are appropriate and implemented effectively.
Kampala, Uganda

AI Explanation - verified by francis4fnc on: September 13, 2026
Question 108:
Correct answer: C — A script that contains a series of public cloud CLI commands.
Infrastructure as Code (IaC) means defining and provisioning infrastructure through repeatable, version-controlled code rather than manually using a graphical interface.

A script of cloud CLI commands: IaC because the commands can be saved, reviewed, versioned, and rerun consistently.

Manually run curl commands: Not necessarily IaC; they are manual actions unless organized into an automated script.

A sequence of REST requests passed to an API: Could represent automation, but the wording does not explicitly say they are stored and executed as reusable code.

Commands entered into a cloud console: Manual operation, not IaC.

The key distinction is repeatable automation expressed as code, not simply using a command or API once.
Lagos, Nigeria

AI Explanation - verified by Azebrgb17 on: September 23, 2026
how to anlsis an offences in qradar siem
To analyze an offense in IBM QRadar SIEM, use this workflow:

Open the Offenses tab

- Review offense magnitude, severity, credibility, relevance, status, and time.

Open the offense details

- Check the offense description, source and destination IPs, users, ports, protocols, rules, and event counts.

Review contributing events

- Examine the raw events that caused the offense. - Verify timestamps, log sources, event names, usernames, and action fields.

Analyze the attack chain

- Look for related authentication failures, successful logins, privilege changes, malware alerts, network connections, or data access. - Use flow data to identify communication patterns and transferred data.

Investigate the assets

- Determine whether the source is an internal workstation, server, privileged account, or known threat indicator. - Check asset criticality and historical offenses.

Validate and respond

- Decide whether it is a true or false positive. - Add notes, assign the offense, follow the response playbook, and close it only after documenting the investigation.
Useful QRadar concepts include rules, offense contributors, events, flows, log sources, and offense magnitude.
Addis Ababa, Ethiopia

AI Explanation - verified by User2881 on: September 17, 2026
Question 17:
Correct answer: C — Create three sales processes, three record types, and three page layouts.
Each team needs different Opportunity stages and fields, so configure a separate set for each business process:

Sales process: Controls which Opportunity Stage values are available.

Record type: Associates the appropriate sales process with a business scenario and controls available picklist values.

Page layout: Controls which fields are displayed and whether they are required or read-only.

For example:

Energy Market Team 1 ? Record Type 1, Sales Process 1, Page Layout 1

Energy Market Team 2 ? Record Type 2, Sales Process 2, Page Layout 2

Services/Installation Team ? Record Type 3, Sales Process 3, Page Layout 3

A single sales process would not support different stage paths, and one page layout would not provide the teams with different field arrangements.
Porto, Portugal

AI Explanation - verified by User7687 on: September 10, 2026
E is correct and D means nothing since "production server" is not a salesforce terminology
You’re right to challenge that. The stronger answer is B, C, and E, not B, C, and D.

B: Developer Edition has limited user, storage, and data-volume capacity, making realistic community testing difficult.

C: A Developer Edition org cannot contain sandboxes, so it cannot provide separate environments for development, integration, and UAT.

E: A standalone Developer Edition org is not part of the production org’s deployment path, so change sets cannot be used to deploy from it directly to that production org. The team would need Metadata API, Salesforce CLI, or another deployment method.

D is poorly worded and should not be treated as a sound Salesforce risk. “Production servers” is not the meaningful distinction for this architecture decision, and an org’s environment type alone is not a reliable basis for concluding that it will perform poorly.
So the page’s stated answer B, C, D appears incorrect; B, C, E better matches the risks described.
Marseille, France

AI Explanation - verified by User2319 on: September 22, 2026
Yes but thez sais p"primary value TO customers
You’re right that the wording makes D tempting. “Primary value to customers” can sound like the business outcome—personalized campaigns.
However, for this Salesforce question, A is still the stronger answer because it describes Data Cloud’s foundational value:

Data Cloud combines data from multiple systems.

It resolves and organizes that data into a unified customer view.

That unified view enables downstream actions such as personalized campaigns, segmentation, analytics, and activation.

D describes one important outcome, mainly for marketing:
> Listen to behavior ? understand customers ? act with personalization.
But Data Cloud is broader than campaign personalization. It supports sales, service, commerce, analytics, and other activations too. Therefore:

A = core platform value

D = a resulting business use case or benefit

So the wording is somewhat ambiguous, but the intended exam answer is A.
Touques, France

AI Explanation - verified by User3085 on: September 21, 2026
Question 40:
Correct answer: B — Transitioning the platform to an IaaS provider
IaaS can satisfy all three requirements:

50% memory utilization baseline: The environment can be provisioned with excess capacity, leaving room for growth and workload spikes.

Storage scalability: Cloud storage can generally be expanded as needed without redesigning the physical platform.

Single circuit failure resilience: A properly designed IaaS provider uses redundant power circuits and infrastructure, so failure of one circuit should not take the platform offline.

Why the other options are weaker:

A — Dual PDUs: Helps with power redundancy but does not provide storage scalability.

C — Network load balancing: Provides network-path resilience, not memory or storage scalability, and does not address a power-circuit failure.

D — Multiple NAS devices: May improve storage capacity, but does not inherently provide power resilience or the required compute-capacity baseline.

Atlanta, United States

AI Explanation - verified by User9424 on: October 05, 2026
what are virtual team-building activities
Virtual team-building activities are structured online activities that improve trust, communication, collaboration, and relationships among geographically dispersed team members.
Examples include:

Virtual introductions: Team members share their role, experience, location, and working preferences.

Online icebreakers: Short, informal activities such as “two truths and a lie.”

Virtual coffee chats: Pair team members for informal, non-project conversations.

Collaborative problem-solving: The team works together on an online puzzle or scenario.

Retrospectives: The team discusses what went well, what did not, and how to improve.

Working-agreement sessions: The team agrees on response times, meeting etiquette, communication channels, and handoffs.

Recognition sessions: Members acknowledge one another’s contributions.

Remote workshops: Teams jointly create plans, diagrams, or schedules using collaboration tools.

For the exam, choose activities that address the underlying issue. In Question 7, team-building should be combined with better communication practices, such as scheduled overlap, clear communication protocols, and inclusive meeting participation.
New York, United States

AI Explanation - verified by User6966 on: September 23, 2026
Question 19:
Correct answer: A, B, C, D, and E — all listed options.
Snowflake supports MFA authentication through:

JDBC

SnowSQL

Snowflake Web Interface (UI)

ODBC

Python connector

MFA adds a second verification factor, such as a passcode from an authenticator app, in addition to the username and password. The exact setup can differ by client—for example, the UI may prompt interactively, while connectors may use an MFA token cache or authenticator configuration.
The key exam point is that MFA is not limited to browser logins; Snowflake supports it across these major connection methods.
Columbus, United States

AI Explanation - verified by User8057 on: September 16, 2026
Question 101:
Correct answer: D. Due diligence
The analyst is evaluating a SaaS vendor before allowing the HR department to implement the service. Requesting a SOC 2 report helps assess the vendor’s security controls, availability, confidentiality, and related risks.

Due diligence: Investigating and evaluating a third party before entering into or continuing a business relationship.

Attestation: An independent party provides assurance about an organization’s claims or controls. A SOC 2 examination is an example of an attestation engagement, but the analyst requesting and reviewing the report is performing due diligence.

Internal audit: Reviews the organization’s own internal controls.

Penetration testing: Actively tests systems for exploitable vulnerabilities.

Chicago, United States

AI Explanation - verified by User6537 on: September 28, 2026
Question 13:
The correct answer is C: The Layer 2 switch floods the frame to all ports except the receiving port in the same VLAN.
When a switch receives a frame:

It examines the source MAC address and learns it on the incoming port.

It examines the destination MAC address.

If the destination MAC is already in the MAC/CAM table, it forwards the frame only through the associated port.

If the destination MAC is unknown, it performs unknown-unicast flooding:

- Sends the frame out every other port in the same VLAN. - Does not send it back out the port where it arrived.
The switch does not normally add the unknown destination MAC address to its table. It can learn that address later when a frame arrives with it as the source address.
Minato, Japan

AI Explanation - verified by User4457 on: September 19, 2026
what does utm mean
UTM means Unified Threat Management.
It is a security appliance or platform that combines multiple functions in one device, such as:

Firewall

Intrusion prevention and detection

Antivirus or antimalware

Web and email filtering

Virtual private networking (VPN)

Sometimes content filtering and centralized reporting

For Question 104, UTM is not the best answer because the service is specifically accessed through a web portal. A WAF (Web Application Firewall) is designed to protect web applications from attacks such as SQL injection and cross-site scripting.
Toronto, Canada

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 82:
The correct answers are C and D:

C — Before update

D — Before insert

In before triggers, records in Trigger.new can be modified directly. Changes are automatically saved with the operation, so you typically do not call update or insert.

apex trigger AccountTrigger on Account (before insert, before update) { for (Account acct : Trigger.new) { acct.Description = 'Updated automatically'; } }

Why not after triggers?

In after insert and after update, Trigger.new records are read-only.

Use after triggers when you need the record’s final database Id or want to create/update related records.

Attempting to change a field directly in an after trigger causes a read-only error.

Chennai, India

AI Explanation - verified by User9317 on: September 18, 2026
Question 120:
The answer key’s C is the best answer:
> If a stored procedure executes multiple SQL statements, test-run it separately to size the compute resource.
A task’s warehouse should be sized according to the actual workload performed by the task. Running the procedure independently lets you inspect execution time, query history, and resource usage before assigning an appropriate warehouse size.
Why the other options are weaker:

A: Concerns task scheduling and avoiding missed runs, not directly sizing the warehouse.

B: The amount of data in a stream alone does not reliably determine compute needs; the SQL processing is what matters.

D: A multi-cluster warehouse addresses concurrency, not the compute size needed for one task execution.

For exam purposes, distinguish warehouse sizing from concurrency and scheduling. Test the task workload first, then select the warehouse size based on observed performance.
Bengaluru, India

AI Explanation - verified by khamankopane66 on: September 14, 2026
Question 15:
Correct answers: B, C and D.
The Sales Director has increased an already unrealistic target by 40% and introduced dismissal after three consecutive months of failure. This creates pressure and dysfunctional behaviour.

B — Sales staff will tender for riskier contracts:

To achieve higher sales and margins, staff may accept contracts with greater commercial or delivery risks. They may also submit low bids or agree to demanding terms.

C — Sales staff will encroach on other territories:

Because performance is judged individually, salespeople may compete for opportunities belonging to colleagues. This can damage cooperation and create internal conflict.

D — Sales staff will look for new jobs:

Unrealistic targets combined with the threat of dismissal reduce job security and morale. Capable employees may leave rather than work under an apparently unattainable system.
A is unlikely because the policy increases anxiety rather than job satisfaction. E is also incorrect because the dismissal threat makes staff feel less secure, not more secure.
The key CIMA concept is that poorly designed targets and incentives can cause dysfunctional behaviour, rather than improved performance.
Maseru, Lesotho

AI Explanation - verified by User6966 on: September 23, 2026
Question 18:
Correct answer: False (B).
A Reader Account lets a data consumer access shared data without having its own paid Snowflake account. However, the Data Provider is responsible for the Reader Account’s usage costs, including compute consumed by its virtual warehouses.
The fact that the consumer only reads shared data does not make compute free. Queries still require compute resources, and those resources are billed to the provider. The consumer cannot modify the shared data, but reading it can still generate compute usage.
Columbus, United States

AI Explanation - verified by joatan.fontoura on: September 21, 2026
Question 58:
Correct answer: A — Because SIR is a scoped application, roles and script includes begin with the sn_si prefix.
The answer key’s B appears incorrect. sn_si is the application’s scope/namespace prefix, used to distinguish Security Incident Response records, roles, scripts, and other application artifacts from those belonging to other applications.

sn_si_admin is an SIR administrator role.

The prefix helps prevent naming conflicts between applications.

It does not refer to a “Secure Identity token” or an instance security check.

For the exam, associate prefixes such as sn_si with scoped application namespaces.
Sapiranga, Brazil

AI Explanation - verified by User3138 on: October 03, 2026
Question 2:
Correct answer: D — Empowered the team to improve their processes, tools, and interactions.
The team is completing sprints, but delivery is suffering through reduced scope and poor quality. This indicates that simply increasing speed—such as fast-tracking every feature—is making the problem worse.
In an agile environment, the project leader or Scrum Master should act as a servant leader by helping the team inspect and adapt:

Allow the team to identify the causes of delays.

Encourage improvements to processes, tools, and collaboration.

Help remove impediments without dictating solutions.

Protect quality and maintain a sustainable pace.

Why the other options are weaker:

A: An impediment log may help track issues, but merely recording them does not resolve the root causes.

B: Directing teams toward solutions conflicts with the agile principle of a self-managing team.

C: Adding impediments to the product backlog may delay their resolution and incorrectly treats them as product features.

The key exam concept is that agile leaders enable and empower the team to solve problems, rather than forcing the team to work faster or prescribing every solution.
Kwai Chung, Hong Kong

AI Explanation - verified by User2425 on: September 29, 2026
Question 17:
Correct answer: C. Firewalls
Firewalls primarily control network traffic between security zones, such as the internet and an internal network. They are useful against external attacks, but they are not particularly effective against insiders who already have authorized access to systems or data.
The other controls directly address insider risk:

Least privilege: Limits users to only the access necessary for their job.

Background checks: Help identify potentially risky individuals before employment.

Separation of duties: Ensures that one person cannot complete a sensitive process alone, reducing fraud and abuse.

The answer key’s C is correct.
Rota, Spain

AI Explanation - verified by User7357 on: October 01, 2026
Question 34:
Correct answer: C — periodic review of alignment with business management goals.
Senior management is most likely to support information security when they see that it continuously helps achieve business objectives, such as reducing business risk, enabling new services, or meeting strategic requirements.

A: CEO-sponsored formal policy — demonstrates executive support, but sponsorship at one point in time may not sustain commitment.

B: Security awareness training — primarily improves employee behavior, not senior management commitment.

C: Periodic alignment reviews — ongoing reviews show that security remains relevant, supports business priorities, and uses resources appropriately.

D: Senior management signoff on the strategy — useful for governance and accountability, but signoff is generally a one-time event.

The exam emphasis is that security must remain aligned with business goals, rather than operate as an isolated technical function.
Bacoor, Philippines

AI Explanation - verified by User5926 on: September 12, 2026
Question 7:
Question 7 correct answers: A and C
The question asks for two advantages of a version control system (VCS).

A: It allows for branching and merging...

Correct. Branches let developers work independently on features or fixes. Changes can later be merged into the main or feature branch after review and testing.

C: It allows multiple engineers to work against the same code and configuration files and manage differences and conflicts.

Correct. A VCS tracks everyone’s changes and helps identify and resolve conflicts when multiple people modify the same files.
Why the others are incorrect:

B: Build automation and infrastructure provisioning are handled by CI/CD and automation tools, not by version control alone.

D: User Stories and backlogs are managed by project-management tools.

E: Version control stores and tracks code, but it does not itself ensure that developers write effective unit tests.

Yaoundé, Cameroon

AI Explanation - verified by User8578 on: September 17, 2026
Question 2:
You can assign the Microsoft Entra ID P2 license to Group1 and Group2.

Group1 — security-enabled: Eligible.

Group2 — mail-enabled and security-enabled: Eligible because it is still a security group.

Group3 — Microsoft 365 group: Not eligible for group-based licensing.

Group4 — Microsoft 365 group, not security-enabled: Not eligible.

Therefore, the correct answer is Group1 and Group2 only.
The supplied answer key stating Group1 and Group3 appears to be incorrect.
Bhopal, India

AI Explanation - verified by User4405 on: September 19, 2026
Wrong answer. You use groups to assign devices to it. The use those groups as scope in policies, effectively passing devices between policies
You’re right—the answer key’s B (Use sub-rules) is incorrect. The better answer is D: Use groups.

Assign endpoints to a group based on the result of one policy.

Use that group as the scope of another policy.

This effectively passes the endpoints from one policy’s processing flow to another.

Sub-rules create branches within a single policy; they are not the standard mechanism for transferring endpoints between separate policies.
Madrid, Spain

AI Explanation - verified by User4651 on: September 14, 2026
ok mulai sekrang anda terjemahkan juga soalnya ketika saya tanya yaa
Baik. Mulai sekarang, ketika Anda menanyakan suatu soal, saya akan:

Menerjemahkan soal ke bahasa Indonesia.

Menyebutkan jawaban yang benar.

Menjelaskan alasan jawaban tersebut.

Memberi tahu jika kunci jawaban yang tersedia tampaknya keliru.

Menjelaskan istilah teknis penting dalam soal.

Untuk soal yang memiliki gambar atau log yang tidak terlihat, saya akan meminta Anda mengunggah gambar atau menyalin informasinya terlebih dahulu.
Surabaya, Indonesia

AI Explanation - verified by User3350 on: September 20, 2026
Question 18:
Correct answer: C — try to expand its customer base to avoid becoming dependent on the corporation.
The passage warns that a minority-owned business may become dependent on one large corporate customer. If that customer reduces its orders or ends the relationship, the small business could suffer serious financial problems. The business might also become complacent and stop seeking other opportunities.
Therefore, it should develop relationships with additional customers, even though it may have to compete with larger, established companies.
Why the other choices are wrong:

A: Not expanding would increase its dependence.

B: More business from the same corporation would make dependence worse.

D: Passing work to other minority businesses does not solve its own dependence.

E: The passage does not suggest that it can force or influence the corporation to give work to others.

Lagos, Nigeria

AI Explanation - verified by User5041 on: September 10, 2026
Question 17:
Correct answer: B — Enabling malware detection through a UTM
The company accepts PDF uploads, which creates a risk that an attacker could upload a malicious or weaponized file. A UTM (Unified Threat Management) appliance can inspect uploaded content and use antimalware/content filtering to detect and block malicious files.
Why the others are less appropriate:

A. IDS attack signatures: An IDS primarily detects suspicious network activity; it is not the best control for scanning uploaded documents for malware.

C. Load balancer: Distributes traffic among servers and improves availability, but does not inspect files for malware.

D. WAF: Protects web applications against attacks such as SQL injection and command injection. It may help secure the upload function, but malware scanning is the key requirement here.

The exam clue is “upload PDF documents”: think file-based malware detection, not just web-request filtering.
Biloxi, United States

AI Explanation - verified by User5344 on: September 21, 2026
Question 58:
Correct answer: A — Audit logging is not enabled.
For a shared CRM system, audit logs are essential for:

Tracking who accessed or changed customer information

Detecting unauthorized activity

Supporting accountability and investigations

Providing evidence for compliance and incident response

Without logging, the organization may be unable to determine what happened, when it happened, or which user performed an action. This is especially serious for systems containing sensitive customer data.
Why the others are less concerning:

Single sign-on not enabled: SSO improves convenience and centralized authentication, but it is not essential for access control.

Complex passwords not required: This weakens authentication, but other controls may reduce the risk.

Security baseline not consistently applied: A concern, but it is less specific and less immediately damaging than having no activity records at all.

The key exam principle is that logging provides accountability and supports the detection of inappropriate access.
Hyderabad, India

AI Explanation - verified by User4832 on: September 20, 2026
Question 20:
Correct answer: A and C — Disable default accounts and remove unnecessary services.
Server hardening reduces the server’s attack surface before it is deployed:

Disable default accounts: Default or unused accounts may have known usernames or predictable settings, making them targets. They should be disabled, removed, or securely configured.

Remove unnecessary services: Every running service creates potential vulnerabilities. Removing services the server does not need reduces exploitable entry points.

Why the others are less appropriate:

Add the server to the asset inventory: Important for asset management, but not a hardening step.

Document default passwords: Default passwords should be changed or eliminated—not documented for continued use.

Send server logs to the SIEM: Valuable for monitoring and detection, but generally performed as part of logging/monitoring configuration.

Join the server to the corporate domain: May be necessary operationally, but does not itself harden the server.

Lagos, Nigeria

AI Explanation - verified by mengwalcien on: September 26, 2026
Question 285:
Question 285 has an issue: the answer key says B (255.255.255.192, /26), but C (255.255.255.224, /27) is the best answer if the goal is three subnets with 30 hosts each.

/27 (255.255.255.224)

- 32 total addresses per subnet - 30 usable host addresses - Creates 8 subnets from the original /24 - Exactly fits the requirement of 30 hosts per subnet

/26 (255.255.255.192)

- 64 total addresses per subnet - 62 usable hosts - Creates only 4 subnets - It can technically support three subnets, but wastes address space
The other choices do not fit:

/25: Creates only 2 subnets, not 3

/28: Provides only 14 usable hosts per subnet

Best exam answer: C, /27. The stated answer B is technically capable of supporting the hosts, but it is not the most efficient or precise choice.
Quezon City, Philippines

AI Explanation - verified by User6425 on: October 02, 2026
Question 6:
Correct answer: B. SLA (Service-Level Agreement)
An SLA defines the service expectations between a customer and vendor, including measurable requirements such as:

Response and resolution times

Availability or uptime

Performance targets

Support obligations

Penalties for failing to meet commitments

In this question, the phrase “time frame in which a vendor needs to respond” directly describes an SLA requirement.
Why the others are incorrect:

SOW (Statement of Work): Describes the work, deliverables, scope, and tasks.

MOA (Memorandum of Agreement): Documents a formal agreement about roles or responsibilities.

MOU (Memorandum of Understanding): Records a general mutual understanding, often without detailed service metrics.

Warsaw, Poland

AI Explanation - verified by aodwodud on: October 02, 2026
Question 87:
The answer key appears to be incorrect. The better answer is D: Record Producer.
A Record Producer is the HR Catalog Item used to create an HR Case. The association between the catalog item and the HR Service is made through the Record Producer configuration—not through Topic Detail.

COE: Identifies the Center of Excellence, such as Payroll or Benefits.

Topic Detail: Classifies the HR service within its COE; it does not identify the catalog item.

Template: Supplies default values or case configuration.

Record Producer: Represents the catalog item that employees use to submit the request and create the case.

So the explanation shown for answer B incorrectly treats Topic Detail as a reference to the HR Catalog Item. For exam preparation, verify the exact field label in your ServiceNow release, but conceptually the catalog-item relationship is through the Record Producer.
Hwaseong-Si, South Korea

AI Explanation - verified by User3133 on: September 21, 2026
Question 54:
Correct answer: C — Guardrails for Amazon Bedrock
Guardrails for Amazon Bedrock help control both the input prompts and model responses. The company can configure safeguards such as:

Filtering harmful or inappropriate content

Blocking specified topics

Detecting and masking sensitive information

Enforcing content policies suitable for children

Why the others are incorrect:

Amazon Rekognition analyzes images and videos; it does not control text generated by a language model.

Amazon Bedrock playgrounds are for testing models and prompts, not enforcing production safety policies.

Agents for Amazon Bedrock help models complete tasks and use tools; they do not primarily provide content-safety controls.

For exam questions involving safe, age-appropriate, or policy-compliant Bedrock output, look for Guardrails for Amazon Bedrock.
Bangkok, Thailand

AI Explanation - verified by User3287 on: September 25, 2026
Question 1:
Correct answer: A — Configure SetupComplete.cmd in %windir%\Setup\Scripts.
SetupComplete.cmd runs automatically after Windows Setup completes and before the first user signs in. It is useful for applying final configuration to a newly deployed or generalized VM, such as:

Installing software

Applying configuration changes

Calling PowerShell scripts

Running setup or customization commands

The batch file can invoke a PowerShell script, for example:

cmd powershell.exe -ExecutionPolicy Bypass -File C:\Scripts\ConfigureVM.ps1

Why the other options are less suitable:

GPO logon script: Runs only when a user logs on and depends on domain/GPO processing.

GPO startup script: Runs during startup, but requires the VM to be domain joined and receives the applicable GPO.

Place scripts in a VHD: Merely makes the scripts available; it does not automatically execute them.

The explanation shown on the page discusses Azure’s Custom Script Extension, but that does not match the listed on-premises Hyper-V scenario. For the options provided, A is the best answer.
New Delhi, India

AI Explanation - verified by romuloruella on: September 27, 2026
Question 218:
Correct answer: D. Regularly checking agent communication with the central console
Vulnerability-management platforms often rely on agents installed on endpoints. If an agent stops communicating, the system may have incomplete or outdated vulnerability data. Checking agent health and communication status is:

Repetitive and time-consuming

Based on measurable conditions, such as last check-in time

Easy to automate with alerts, dashboards, or scheduled reports

Important for ensuring scan coverage

The other choices are less suitable as the first automation target:

Assigning custom recommendations usually requires analyst judgment and context.

Analyzing false positives can sometimes be assisted by automation, but validation often requires human review.

Rendering an additional executive report increases reporting activity rather than reducing a core operational workload.

Guará, Brazil

AI Explanation - verified by User7832 on: September 07, 2026
Question 106:
The answer key shows D, Operational, but I believe the better answer is Managerial.
An Acceptable Use Policy (AUP) is a management-approved document that defines how users may use company systems, networks, and data. It is a form of administrative/managerial control because it establishes rules and direction.

Managerial: policies, standards, risk management, governance

Operational: procedures carried out by people, such as training, incident response, and backups

Technical: firewalls, encryption, access-control systems

Physical: locks, guards, cameras

Some study materials may classify user-related activities surrounding an AUP—such as enforcing or training users on it—as operational. However, the AUP itself is a policy, so Managerial is the more precise classification.
Rose Hill, Mauritius

AI Explanation - verified by User7020 on: September 26, 2026
Question 86:
Correct answer: OWASP
OWASP, especially the OWASP Top 10, provides information about common ways web applications are exploited, such as:

Injection

Broken access control

Authentication failures

Security misconfiguration

Cross-site scripting

Why the others are less suitable:

STIX: A standardized language and format for exchanging threat intelligence.

OVAL: Used to describe and assess system vulnerabilities and configuration issues.

Threat intelligence feed: Provides current indicators and intelligence about threats, but not necessarily a structured overview of common application exploitation methods.

CVE: A catalog of individually identified, publicly disclosed vulnerabilities.

The answer key’s A is correct. For application-security attack methods, think OWASP; for vulnerability identifiers, think CVE.
Seattle, United States

AI Explanation - verified by User9738 on: September 22, 2026
Question 50:
A resposta correta é A — Comprar Provisioned Throughput para o modelo customizado.
No Amazon Bedrock, um modelo customizado ou fine-tuned precisa de capacidade dedicada para ser usado em inferência. O Provisioned Throughput reserva essa capacidade e permite invocar o modelo por meio das APIs do Bedrock.
As outras opções não são necessárias:

B: Não é preciso implantar o modelo em um endpoint do Amazon SageMaker, pois o Bedrock já oferece a infraestrutura de inferência.

C: O SageMaker Model Registry é usado para gerenciar modelos no SageMaker, não é requisito para modelos customizados no Bedrock.

D: Não existe uma etapa geral de “conceder acesso” ao modelo customizado como requisito principal de uso. O ponto essencial é adquirir o Provisioned Throughput.

A ideia da questão é distinguir entre usar um modelo base sob demanda e usar um modelo customizado, que exige capacidade provisionada no Bedrock.
São Paulo, Brazil

AI Explanation - verified by User4114 on: September 12, 2026
A highly regulated financial institution wants to use Gemini as the core decision engine for a loan approval system that will deterministically approve or reject loan applications based on a strict set of predefined criteri Why is this an inappropriate use case for Gemini? Gemini cannot integrate with required financial databases. Gemini is not equipped to handle structured numerical data for financial assessments. Gemini is designed for flexible content generation and inference, not rigid rule-based decisions. Gemini deployment for this scenario would be too expensive and complex.
Correct answer: Gemini is designed for flexible content generation and inference, not rigid rule-based decisions.
Gemini can analyze financial information, summarize applications, or assist loan officers. However, it is probabilistic and may produce variable outputs, so it should not be the authoritative engine for decisions requiring:

Deterministic approve/reject results

Strict adherence to predefined rules

Consistent, reproducible outcomes

Auditability and regulatory compliance

A traditional rules engine or explicitly programmed decision system is more appropriate for the final loan decision. Gemini could assist around that system—for example, extracting information from documents—but should not replace the deterministic approval logic.
Central, Hong Kong

AI Explanation - verified by User2959 on: September 17, 2026
Question 1:
With the identities you provided, User1 only is the correct answer.

User1 (user1@contoso.com) — This is an external guest in the Fabrikam tenant. Assuming the guest uses email one-time passcode authentication, Azure AD emails a passcode to user1@contoso.com.

User2 (user2@outlook.com) — An Outlook.com address can authenticate with a Microsoft account, so Azure AD uses that account’s authentication rather than sending an email OTP. The fact that User2 has never accessed Fabrikam resources does not by itself trigger OTP.

User3 (user3@fabrikam.com) — This is an internal Fabrikam user, so the user signs in with the organization’s normal credentials and does not receive a guest OTP.

Therefore, the answer key’s User1 only is consistent with these identities. The important distinction is that guest status alone is not enough—OTP is used when the external user does not have another supported sign-in identity.
Amsterdam, The Netherlands

AI Explanation - verified by User6285 on: September 16, 2026
Question 17:
Correct answer: B — Enabling malware detection through a UTM.
Customers are uploading PDF files, which could contain malicious code or exploit payloads. A UTM (Unified Threat Management) appliance can inspect uploaded content using integrated antivirus or malware-detection capabilities and block suspicious files before they reach internal systems.
Why the others are less suitable:

A. IDS attack signatures: An IDS primarily detects suspicious network activity; it is not the best tool for scanning uploaded files.

C. Load balancer: Improves availability and distributes traffic but does not inspect files for malware.

D. WAF: Protects web applications against attacks such as SQL injection and command injection. It may inspect HTTP requests, but malware scanning of uploaded PDFs is the key requirement here.

The exam clue is “customers upload documents”—think file inspection and malware detection, not general web-attack filtering.
Secaucus, United States

AI Explanation - verified by User3169 on: September 13, 2026
Question 6:
Correct answer: B. SLA (Service-Level Agreement)
An SLA defines the expected level of service between a customer and a vendor. It commonly includes:

Response and resolution time frames

Availability or uptime requirements

Performance targets

Support obligations

Penalties for failing to meet requirements

Why the others are less appropriate:

SOW (Statement of Work): Defines the project’s scope, tasks, and deliverables.

MOA (Memorandum of Agreement): Describes cooperation and responsibilities between parties.

MOU (Memorandum of Understanding): Records a general mutual understanding, usually without detailed enforceable service targets.

Therefore, the agreement specifying how quickly a vendor must respond is an SLA.
Jonesboro, United States

AI Explanation - verified by User9108 on: September 28, 2026
Question 53:
Correct answers: A and E

A. Remove rows where Sales[Status] is Canceled

The analysis uses only finished sales, so canceled transactions do not contribute to the report. Filtering them out in Power Query reduces the number of rows loaded and processed.

E. Remove Sales[Canceled Date]

This column is relevant only to canceled transactions, which are removed. Since it is not used in the analysis, deleting it reduces the model’s column storage.
Why the others are less suitable:

B: Removing Sales_Date would remove information users need—the date portion.

C: Changing Delivery_Time to Integer could alter its meaning or precision and is not necessarily safe.

D: Splitting the date/time column creates additional columns rather than simply removing unnecessary data.

Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by lucas.eu on: October 01, 2026
Question 179:
Question 179 tests your understanding of Azure subscriptions.
The correct selections are:

Yes — One account can manage multiple subscriptions

A user account can have access to several Azure subscriptions. You can create additional subscriptions and assign permissions across them.

No — You cannot merge two subscriptions into one

Azure does not provide a general subscription-merge operation. However, you may be able to move supported resources between subscriptions, subject to the relevant limitations.

Yes — A resource belongs to only one subscription

An Azure resource instance has one subscription association. It cannot simultaneously belong to multiple subscriptions. You can sometimes move it to another subscription, but it is still associated with only one at a time.
Remember: a subscription is both a resource-management boundary and a billing boundary.
Singapore, Singapore

AI Explanation - verified by User5938 on: September 26, 2026
Question 21:
The answer key shows B and C, but the question appears flawed because three cash flows are relevant when calculating the yield to maturity/cost of redeemable debt:

Annual interest payments net of tax relief (A): future cash outflows for the issuer.

Redemption value (B): the final cash outflow when the bond is redeemed.

Market value now (C): the cash proceeds received now, acting as the initial cash flow in the IRR calculation.

The nominal value now (D) is not normally used because the debt is issued or traded at its current market value, not necessarily its nominal value. The conversion premium (E) is irrelevant unless the bond is being valued as a convertible.
So, if the question genuinely requires only two answers, B and C match the supplied key, but economically A is also a relevant cash flow.
Maseru, Lesotho

Hay Dear!

Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures.
You can access the rest of the 100-490 content, but please register or login to continue.

Login Or Register

AI Tutor 👋 I’m here to help!

AI Tutor — 100-490

Hello,
I’m your AI study assistant for the 100-490 exam. Ask me anything about the exam or the questions on this page, and I’ll break it down so it actually makes sense.
You want it in a different language? Just say it.

Contact Us

Exam Vendors

Hay AI, Learn About Us

Customer Reviews

DMCA

Terms of Service

Privacy Policy

© 2026 Free-Braindumps.com - A Community of Learners.
Free-Braindumps.com is owned by Xùnliàn Limited, a company registered at 15 Wang Chiu Rd, Kowloon Bay, Hong Kong.

The resources, practice tests, and study guides on Free-Braindumps.com are strictly for educational and research purposes. We are an independent community platform and are not affiliated with, endorsed by, or sponsored by any official certification vendors, including Microsoft, Cisco, Amazon, CompTIA, or others. All certification names, trademarks, and logos are the property of their respective owners. Our content is user-contributed or independently developed to assist with exam preparation and skill assessment; we do not host or provide access to proprietary, confidential, or live exam questions.

Cisco 100-490 Exam Prep Supporting Cisco Routing & Switching Network Devices (Page 4 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Cisco 100-490 Exam Prep
Supporting Cisco Routing & Switching Network Devices (Page 4 )