SSH is a protocol that provides a secure remote access connection to network devices.
SSH uses the well-known TCP port 23 for its communication.
A Telnet network management connection is dropped when a router reboots.
Telnet is a protocol that provides a secure remote access connection to network devices.
Telnet is preferred over SSH for security reasons.

Answer(s): A,C

Show Answer Next Question

QUESTION: 4

Which address facilitates the routing of packets over an IP network?

physical
transport
network
MAC

Answer(s): C

Show Answer Next Question

QUESTION: 5

Which two IPv4 addresses can be assigned to a host computer? (Choose two.)

255.255.255.255
10.1.1.20
0.0.0.0
192.168.10.15
292.10.3.4

Answer(s): B,D

Show Answer Next Question

Download PDF Next Page

Viewing page 6 of 13
Viewing questions 26 - 30 out of 72 questions

Post your Comments and Discuss Cisco 100-490 exam prep with other Community members:

Comments:

Name:

100-490 Exam Discussions & Posts
100-490 AI Verifications

Sylvester Jafta on: December 19, 2024
nibasiwe laway
EUROPEAN UNION

amaraitpro on: August 24, 2026
At first I didn't feel confident but practice questions here helped me understand better.
India

laidoffleveled on: July 16, 2026
This exam was nerve-wracking. The prep material here made it manageable.
Germany

Mutex on: June 28, 2026
The exam was tougher than I thought but this site’s practice questions made it manageable.
Singapore

chiaradevsec on: August 04, 2026
Juggling work and study sessions was tough but man these practice questions kept me on track. Happy to say I passed the exam so guess it all paid off in the end.
UAE

dantheadmin on: June 21, 2026
After working long days I squeezed in short study sessions whenever I could for this exam prep. Finally done and so relieved to see the familiar questions pop up on test day it was worth it.
Brazil

Nathi on: September 03, 2026
very useful
Midrand, South Africa

lenaciscolab on: May 27, 2026
Exam was stressful but this site's prep material kinda saved me. It really helped to ease the nerves.
Lithuania

elodieazure on: July 29, 2026
Had to squeeze in studying whenever I could with my job all over the place. Happy it paid off because this exam was tough but relevant questions on this site helped a lot.
Malaysia

chrisinfosec on: July 30, 2026
At first I wasn't sure I'd ever be ready for this cert but the practice questions on this site got me there.
United Kingdom

samazureguy on: June 25, 2026
This exam had way more stuff than I thought so make sure you're ready. The AI assistant on this site made my prep a bit smoother though.
Thailand

nerdbyday on: July 25, 2026
This exam covered way more than I was ready for but at least the AI assistant on this site helped me pinpoint what I needed to focus on. Felt like a lifesaver when stuff got tricky man.
Finland

CloudGuyMike on: July 09, 2026
This exam was really stressful but I got through it. The prep material on this website made a big difference for me.
Poland

pivottocloudp on: June 13, 2026
The exam was tougher than I thought but the practice questions from this site really helped me manage.
Canada

twojobsnosleep on: July 05, 2026
This exam was brutal but the practice questions on this website definitely helped me pass.
Sweden

FortinetFred on: August 12, 2026
Balancing work and short study sessions was really exhausting but this site had my back. Finally done with the exam and I'm so relieved.
Ireland

selftaughtsam on: June 12, 2026
I wasn't too confident at first but the practice questions on this website helped me understand what to expect.
Turkey

twojobsnosleep on: July 23, 2026
Exam was tough but these prep questions really saved me and helped me pass.
Saudi Arabia

dantheadmin on: July 21, 2026
The exam was tougher than I thought but the practice questions made it possible to manage.
Saudi Arabia

SecOpsGuy on: July 16, 2026
Man that exam was nerve-wracking but the prep stuff on this site really helped me stay calm. Just glad it's over now.
Germany

RedHatRick on: July 04, 2026
Cramming through this site saved me so much time and money but I barely passed the exam after struggling slowly with it.
Portugal

remoteandcertified on: June 22, 2026
I thought this exam would be the end of me but it wasn't. The practice questions made all the difference.
Finland

ahmedcertkings on: July 16, 2026
This exam was pretty tough but the prep questions on this website helped me a lot to pass.
France

miket2024 on: August 08, 2026
I took my time with the exam prep and had to review a lot before I felt ready. Progress was slow but in the end I passed.
Germany

Bgp on: August 04, 2026
Juggling work and sneaking in study sessions was a grind but passing this exam is such a relief now.
Mexico

markpassedaws on: July 31, 2026
Crammed with this site to save time and money and got through the test even if it took me a while.
Belgium

inescloudsec on: August 27, 2026
Felt lost at first but practice questions here made me way more prepared.
United States

9to5andstudy on: July 16, 2026
Crammed in some prep on this website and saved time and money passing the exam but it was a slow process for me.
Finland

alwayslearninga on: July 27, 2026
The exam was tougher than I thought but the practice questions here helped me manage it.
Switzerland

Baud on: July 01, 2026
This website really helped me.
Qatar

amaraitpro on: July 28, 2026
Crammed through the exam prep on this website saved some bucks and passed but it was a grind for sure.
Vietnam

hamidcertguy on: August 06, 2026
Crammed a bit with practice questions on this website and saved some time and money in the end I passed.
China

miguelcloudops on: August 01, 2026
The exam was super tough but the prep questions here were really helpful to pass it.
Malaysia

miket2024 on: July 18, 2026
I thought I was prepared but the exam covered way more stuff than expected and felt tough. The AI assistant on this site actually helped a lot though with clarifying things I wasn't sure about.
Hong Kong

deskjobdreamer on: June 19, 2026
This exam definitely covered more than I thought it would so felt kinda overwhelming. The AI assistant on this site was pretty helpful though in keeping me from getting lost in all the info.
India

RedHatRick on: July 26, 2026
This exam was pretty stressful but the practice questions on this site really kept me on track. I'm just glad it's over now.
Chile

jakobvmware on: July 06, 2026
I saved some time and money by cramming with this website even though I needed to go slow it got me through the exam.
Singapore

elenanetworks on: August 10, 2026
The exam was pretty stressful. But going through the prep material really made a difference.
Latvia

ExamWarrior on: August 15, 2026
The exam was tougher than I thought but this site's prep helped keep it manageable.
India

CloudCert2026 on: June 30, 2026
This exam threw more at me than I thought it would but the AI assistant on this site was pretty handy. It helped fill in some gaps and made stuff easier to get through.
Malaysia

laylaituae on: July 11, 2026
Crammed my way through the exam by saving time and some money with this website but got to take it slow sometimes too.
Singapore

rajcloudguru on: July 29, 2026
This exam was tough but the practice questions here were a lifesaver for me to pass.
Singapore

RedHatRick on: July 05, 2026
Trying to fit in study time for this cert between work was tough. But once I started hitting relevant questions on the site it made things a bit easier and I'm glad it's finally done.
Argentina

rachelops on: August 17, 2026
This exam covered way more than I thought so that was a tough surprise. But the AI assistant on this site was quite handy actually helped me through it.
India

amaraitpro on: July 29, 2026
I wasn’t sure at first but the practice questions here really made it click for me.
Canada

inescloudsec on: May 26, 2026
This exam was tougher than I thought but manageable with practice questions.
UAE

graveyardgeek on: August 09, 2026
I wasn't very confident initially but the practice questions on this website helped me learn a lot for the exam.
Brazil

sysadminbob on: June 11, 2026
Exam was tough but practice questions here got me through.
Brazil

deskjobdreamer on: May 28, 2026
Man juggling work and study for this cert was brutal even with short sessions every day. But using the practice questions on this site made passing such a relief.
Norway

Sysctl on: July 02, 2026
Juggling work and study sessions with these practice questions helped me a lot so finally getting the cert feels great.
Germany

AI Explanation - verified by User3443 on: August 27, 2026
Question 13:
Correct answer: C. Jailbreaking
Jailbreaking removes or bypasses restrictions imposed by a smartphone’s manufacturer or operating system. This allows the user to install unauthorized software, access restricted system functions, and enable features not available by default.
Why the other options are incorrect:

SQL injection (SQLi): Attacks databases by inserting malicious SQL commands.

Cross-site scripting (XSS): Injects scripts into web pages viewed by other users.

Sideloading: Installing an application from outside the official app store. It may install unauthorized apps, but it does not generally unlock the operating system or enable restricted system features.

The answer key’s C is correct.
Garland, United States

AI Explanation - verified by User8651 on: September 02, 2026
Question 18:
Question 18 is a drag-and-drop ordering question, but the action list is shown only as [Image], so I cannot verify the exact choices or sequence. The displayed answer “A” is not enough to reconstruct the answer.
The prerequisite flow for a standard costing version generally follows this logic:

Create or verify cost groups

Cost groups classify costs, such as material, labor, or overhead.

Set up the item model group

The relevant items must use the Standard cost inventory model.

Create the costing version

Define the costing version and associate it with the appropriate legal entity/site and effective period.

Enter or calculate item costs

Maintain standard cost records for the items, including applicable purchase, production, or overhead costs.

Activate the standard costs

Activate the cost records for the current period. Activation makes them the operative standard costs.
Because the actual action labels are hidden, I’m not confident enough to state the exact exam sequence. If you provide the text from the image, I can place each action precisely and explain why.
Drummondville, Canada

AI Explanation - verified by User8074 on: August 29, 2026
Question 49:
Correct answer: C. Disaster Recovery Plan (DRP)
A DRP provides procedures for recovering IT infrastructure, systems, applications, and data after a disruptive event. Since the tornado destroyed the city’s primary data center, staff would use the DRP to activate recovery facilities, restore critical systems, and resume technology-dependent public services.
Why the others are less appropriate:

BCP (Business Continuity Plan): Ensures the organization can continue its broader business operations during and after a disruption. It is broader than the IT-focused recovery required here.

Communication plan: Defines how information is shared with employees, the public, and other stakeholders; it does not restore systems.

IRP (Incident Response Plan): Handles and contains security incidents, such as malware or unauthorized access. A tornado is a disaster, not primarily a cybersecurity incident.

The key clue is loss of the data center, which points to IT and infrastructure recovery through the DRP.
Weston, Canada

AI Explanation - verified by User9951 on: September 02, 2026
Question 7:
The correct choices are B and D.

D — Create sibling resource pools for the Production VMs and Test VMs.

This separates the workloads into distinct resource pools under the cluster, so their resource allocation can be managed independently.

B — Configure a memory reservation on the Production resource pool.

Set the reservation to the amount of memory the Production VMs require. A reservation guarantees that memory under contention, provided the cluster has sufficient physical resources.
Why the others are insufficient:

Shares only determine relative priority when resources are scarce; they do not guarantee memory.

A parent resource pool alone does not provide a guarantee.

A child pool for Test VMs does not reserve memory for Production.

DRS balances workloads, but it does not by itself guarantee that a VM receives its full configured memory. The reservation provides that guarantee.
South Tangerang, Indonesia

AI Explanation - verified by User3237 on: August 19, 2026
Question 1:
Correct answer: D — Verify that the VPC route table includes a route for the Amazon S3 gateway endpoint.
When an AWS Glue job runs inside a VPC and accesses Amazon S3 privately, the subnet’s route table must be associated with an S3 gateway VPC endpoint. The endpoint adds a route for S3 traffic, allowing the job to reach S3 without using a NAT gateway or internet gateway.
Why the other options are not best:

A: Security groups do not control traffic to an S3 gateway endpoint in this way. Gateway endpoints are configured through route tables.

B: An S3 bucket policy may be needed for authorization, but the error specifically indicates a connectivity or endpoint-routing problem.

C: Glue connection settings do not require a fully qualified domain name to resolve this endpoint issue.

Strictly speaking, gateway endpoints require the appropriate route-table association and endpoint route; “inbound and outbound routes” is imprecise because the key requirement is the route directing S3 traffic to the endpoint.
Piracaia, Brazil

AI Explanation - verified by andres_ji_es on: August 29, 2026
Question 529:
The answer key shows B, but I believe the better answer is A: Performing an external penetration test.
A penetration test is the strongest option for testing security effectiveness because it provides practical evidence of whether security controls can resist realistic attack techniques.
Why the others are weaker:

Reviewing security policies and standards checks whether controls are documented, not whether they work.

Reviewing security logs may show that monitoring is occurring, but does not directly establish that preventive controls are effective.

Analyzing technical security practices is broad and may assess implementation, but it is less objective than an actual controlled attack.

The exam distinction is:

Design/compliance effectiveness: policies, standards, and procedures

Operational effectiveness: logs, records, and evidence that controls operate

Technical security effectiveness: penetration testing or vulnerability testing

Because the question asks for the best test of effectiveness, the direct, evidence-based approach—an external penetration test—is most appropriate.
Bogotá, Colombia

AI Explanation - verified by User2579 on: August 19, 2026
Question 13:
Question 13 is testing whether the technology is:

Secure: uses encryption, such as HTTPS or SFTP.

Cross-platform: supported by many languages and operating systems.

Internet-friendly: designed to communicate across networks, usually using standard Internet protocols.

The strongest choices are:

JSON/REST over HTTPS — widely supported, secure, and Internet-friendly.

SOAP over HTTPS — also secure and highly cross-platform, though more heavyweight.

XML over SFTP — secure file-based exchange, but it is not an API-style interface.

The stated explanation appears inconsistent. It lists XML over ActiveMQ as correct, but ActiveMQ is a messaging technology and is not automatically suitable for communication over the public Internet; it requires appropriate broker access and security configuration. Also, XML/REST over HTTPS is a valid secure, cross-platform choice.
So, based on the wording provided, the answer key’s “C” is not sufficiently reliable. The core principle is: prefer HTTPS-based REST or SOAP, and use SFTP when the exchange is file-oriented. Avoid plain FTP, because it does not provide encryption.
Bengaluru, India

AI Explanation - verified by User6990 on: August 31, 2026
why is it not multi-modal generation model?
A multi-modal generation model can accept text and images and then generate content, such as an answer, description, or summary. Generation is not the main requirement in this question.
A search application needs to:

Convert text and images into numerical embeddings.

Store or compare those embeddings.

Retrieve the most semantically similar items.

A multi-modal embedding model maps both text and images into a shared vector space. For example, a text query like “red sports car” can be compared with image embeddings to find matching pictures.
Therefore:

Embedding model: Best for similarity search and retrieval.

Generation model: Best for producing new text or other content from multimodal input.

So the answer remains A — Multi-modal embedding model.
Mumbai, India

AI Explanation - verified by User1015 on: August 24, 2026
which are correct options
The correct choices are the options that state:

Modify the database subnet NACL inbound rules to allow traffic from the new web subnet’s CIDR block on the MySQL port (3306).

Modify the database subnet NACL outbound rules to allow return traffic to the new web subnet’s CIDR block on the required ephemeral port range.

The answer choices were not included in your message, so I can’t identify the exact letters. Paste the options and I’ll map them precisely.
Pune, India

AI Explanation - verified by User2896 on: August 22, 2026
Question 4:
Correct answer: SECURITYADMIN (B).
SECURITYADMIN is intended for security administration, including:

Creating and managing users and roles

Granting and revoking roles and privileges

Managing access-control responsibilities

Why the others are less appropriate:

SYSADMIN: Manages warehouses, databases, schemas, and other objects—not primarily users and roles.

PUBLIC: Automatically granted to every user; it is not an administrative role.

ACCOUNTADMIN: Has the highest level of access, but should be reserved for account-level administration and emergencies rather than routine security tasks.

In practice, Snowflake also provides USERADMIN for user and role creation, but for this exam question, SECURITYADMIN is the recommended choice because it covers broader security and access management.
Hyderabad, India

AI Explanation - verified by User8074 on: August 30, 2026
Question 68:
Correct answer: A. Serverless architecture
Serverless architecture reduces deployment time and operational expense because the cloud provider manages:

Server provisioning

Operating systems and runtime infrastructure

Scaling

Much of the maintenance and patching

Developers can focus on deploying code, often as functions, without managing the underlying servers. Costs are commonly based on actual execution or resource usage.
Why the others are less appropriate:

Thin clients reduce endpoint hardware requirements but do not specifically streamline code deployment.

Private cloud provides dedicated cloud infrastructure but usually requires more management and expense.

Virtual machines improve resource utilization, but administrators still manage the VMs, operating systems, and deployments.

The key clue is reducing both deployment effort and infrastructure expense, which points to serverless computing.
Weston, Canada

AI Explanation - verified by User3703 on: August 22, 2026
Question 1:
Correct answer: D — Use a Common Connected App Handler using Apex.
The classified system needs a real-time access decision whenever the user attempts SSO. The handler can evaluate the user’s current Salesforce data—specifically, whether they own an open Case with record type Classified—and allow or deny access accordingly.
Why the other options are weaker:

A — Reports: Reports are informational and don’t enforce access during an SSO transaction.

B — Apex trigger and Permission Sets: A trigger could update permissions when a Case changes, but this creates synchronization and timing issues. It also changes Salesforce permissions rather than making a direct, real-time decision for the external system.

C — Custom SAML JIT Provisioning: JIT provisioning is primarily for creating or updating users at login. It isn’t the appropriate mechanism for dynamically querying business records and deciding whether access should be granted.

D — Connected App Handler: Designed for custom, programmatic control during connected-app authentication and authorization. Apex can check the user’s current open classified cases and permit or reject the SSO request.

The key exam clue is dynamic authorization based on current Salesforce data at login time.
Melbourne, Australia

AI Explanation - verified by User3572 on: August 26, 2026
Question 29:
Correct answer: A. Hashing
Hashing creates a unique-looking, fixed-length value based on the software’s contents. The company can calculate and record the hash of the approved final version, then recalculate it later:

Matching hashes: The software is unchanged.

Different hashes: The software was modified or corrupted.

Hashing verifies integrity, meaning it detects tampering. It does not prevent modification or provide confidentiality.
The other options do not fit:

Encryption: Protects confidentiality.

Baselines: Define approved configurations or normal performance.

Tokenization: Replaces sensitive data with tokens.

In real-world software distribution, a digital signature is generally stronger because it verifies integrity and the publisher’s authenticity. However, since it is not an option, hashing is the best answer.
Dover, United States

AI Explanation - verified by User5804 on: August 22, 2026
Question 18:
A resposta correta é A — modelo de embeddings multimodal.
A aplicação precisa lidar com consultas contendo texto e imagens. Um modelo de embeddings multimodal transforma ambos os tipos de dados em representações numéricas dentro de um espaço vetorial compartilhado. Assim, a aplicação pode encontrar relações entre uma descrição textual e imagens correspondentes, ou entre uma imagem e textos relacionados.

Modelo de embeddings de texto: trabalha principalmente com texto, não sendo adequado para imagens.

Modelo generativo multimodal: pode interpretar ou gerar conteúdo de vários tipos, mas não é a opção específica para busca por similaridade.

Modelo de geração de imagens: cria imagens a partir de entradas, não realiza busca multimodal.

A ideia-chave é: para aplicações de pesquisa semântica com texto e imagens, use embeddings multimodais para comparar os conteúdos por similaridade.
Itu, Brazil

AI Explanation - verified by User3451 on: September 02, 2026
Question 9:
The answer key shows A, but its explanation is technically misleading.
Because the objects use SSE-S3, Amazon S3 manages the encryption keys. The Amazon Bedrock execution role does not need kms:Decrypt permission or access to a customer-managed KMS key.
The role should instead have the required Amazon S3 permissions, such as:

s3:GetObject for the relevant objects

s3:ListBucket if listing is required

Appropriate bucket and object resource permissions

Therefore, A is the closest option, but it should be interpreted as ensuring that the Bedrock role has permission to access the S3 data—not as granting KMS decryption permissions.
Why the others are wrong:

B: Making the bucket public is insecure and unnecessary.

C: Prompt engineering cannot override AWS IAM or encryption permissions.

D: Data sensitivity does not determine whether the role can access it.

If the data used SSE-KMS instead, then the role would additionally need kms:Decrypt permission on the KMS key.
Bengaluru, India

AI Explanation - verified by User4094 on: August 23, 2026
Question 3:
Correct answer: B — RelayState
In SP-initiated SAML SSO, the user first requests a protected resource from the Service Provider (SP). The SP redirects the user to the Identity Provider (IdP) for authentication.
The SP includes:

SAMLRequest: the SAML authentication request

RelayState: the original destination or application state

After authentication, the IdP returns the SAML response along with the same RelayState value. The Salesforce SP uses it to send the user back to the resource they originally requested.
Why the others are incorrect:

RedirectURL: not the standard SAML parameter for preserving the original request.

DisplayState: not a standard SAML SSO parameter.

StartURL: Salesforce-related terminology, but not the standard parameter used in this SAML exchange.

Remember: RelayState preserves context or the return destination during SAML authentication.
Zagreb, Croatia

AI Explanation - verified by mashtheweb on: August 27, 2026
Question 58:
Question 58 tests the difference between data/model behavior problems and endpoint infrastructure problems.
Correct reasoning:

Input feature distributions differ from training data ? Analyze dataset drift metrics

- This is the direct evidence of data drift (also called covariate shift). - After confirming significant drift, retraining with representative recent data may be appropriate, but the first diagnostic action is to analyze drift metrics.

Model accuracy drops without code changes ? Analyze dataset drift metrics

- A healthy endpoint does not guarantee consistent model quality. - Changing production data can reduce accuracy even when the code and deployment are unchanged. Drift metrics help determine whether the input distribution has changed.

Endpoint latency increases under load ? Investigate scaling and infrastructure metrics

- Latency under load usually indicates capacity, CPU/memory, concurrency, or scaling constraints—not data drift.
Important: The explanation’s first paragraph says to retrain immediately, but the displayed mapping says Analyze dataset drift metrics. Those are different actions. I believe the mapping is the better answer for this wording because you must first validate and quantify drift before deciding to retrain.
East Ham, United Kingdom

AI Explanation - verified by User8765 on: September 01, 2026
Question 93:
Question 93 tests routing on a dual-homed proxy server.
Because the proxy has two interfaces:

Internal interface ? connected toward the corporate network/internal firewall

External interface ? connected toward the Internet-facing firewall

The routing table must contain:

A route for the internal corporate network through the internal-facing interface/firewall.

A default route (0.0.0.0/0) through the Internet-facing interface/firewall.

The likely problem is that the default route points to the internal firewall, or that the route entries use the wrong interfaces. Internet-bound traffic must leave through the external firewall, while return traffic to corporate clients must use the internal interface.
I cannot see the diagram or the routing-table image, so I cannot reliably state the exact route values or clicks. The answer key’s “A” refers to the hotspot selection, but the essential correction is: move/set the default route to the Internet-facing gateway and preserve the internal-network route through the internal gateway.
Bandar Seri Begawan, Brunei

AI Explanation - verified by tkrs.1997 on: August 19, 2026
Question 62:
The image containing the SQL command is not visible here, so I can’t verify exactly where the blank appears.
The key concept is that a CSV source must be declared with USING CSV, not USING DELTA:

sql CREATE TABLE my_table USING CSV OPTIONS (path '/path/to/csv');

Alternatively, for an external table:

sql CREATE TABLE my_table USING CSV LOCATION '/path/to/csv';

USING CSV specifies the file format.

path or LOCATION specifies where the files are stored.

USING DELTA would be used only when the source data is in Delta format.

FROM is used in a SELECT statement, not normally as the format declaration in CREATE TABLE.

Thus, B is likely the intended answer, provided the surrounding command supplies the file path correctly.
Mumbai, India

AI Explanation - verified by walter.kgaphola on: August 24, 2026
Question 2:
Correct answer: Automatic Call Distribution (ACD)
ACD automatically places incoming calls into queues and distributes them to available agents according to configured routing rules. This helps reduce caller wait time by:

Sending calls to available agents quickly

Balancing interactions across agents

Preventing calls from being handled manually one at a time

Why the other options are less appropriate:

Workforce Management: Forecasts demand and schedules enough staff; it supports wait-time reduction but does not directly distribute calls.

Skill-based Routing: Routes calls based on agent skills and may improve the customer experience, but the question is asking about the core feature that distributes calls efficiently.

IVR: Lets callers navigate menus and self-service options; it does not primarily assign calls to agents.

The answer key’s A is consistent with the usual Genesys Cloud CX exam objective.
Pretoria, South Africa

AI Explanation - verified by User2497 on: August 13, 2026
Question 18:
Let x be the number of boxes of each type.

6-phone boxes: 6x

8-phone boxes: 8x

Together, they contain 84 phones:
\[ 6x+8x=84 \]
\[ 14x=84 \]
\[ x=6 \]
Therefore, 6 boxes of each type were used. The answer is A: 6.
Pietermaritzburg, South Africa

AI Explanation - verified by User8565 on: August 30, 2026
Question 7:
Correct answer: D — The charging port is dirty or damaged.
A Lightning connector is reversible, so it should work in either orientation. If the device recognizes the cable only after flipping it, one side of the connector contacts—or the corresponding contacts inside the port—may not be making a good connection.
Because the same cable works with other devices, the device’s charging port is more likely at fault than the cable.

Restarting the device: may fix software problems, but not a directional connection issue.

Swollen battery: is a safety concern, but would not typically cause recognition only in one orientation.

Failing cable: possible in general, but less likely because it works on other similar devices.

Dirty or damaged port: best matches the symptoms. Inspect and carefully clean the port, or have it serviced if damaged.

Lilongwe, Malawi

AI Explanation - verified by kotharianushika01 on: August 15, 2026
Question 41:
Correct answer: A — AWS::SageMaker::Model
An Amazon SageMaker model resource defines the model that SageMaker will use for inference, including:

The inference container image or built-in algorithm

The location of model artifacts in Amazon S3

IAM permissions through the execution role

Optional environment variables and networking settings

An endpoint is a separate hosting resource. Typically, the deployment flow is:

Create AWS::SageMaker::Model

Create an AWS::SageMaker::EndpointConfig that references the model

Create AWS::SageMaker::Endpoint that references the endpoint configuration

Why the other options are incorrect:

AWS::SageMaker::Endpoint hosts a model but does not define the model itself.

AWS::SageMaker::NotebookInstance provides a development environment.

AWS::SageMaker::Pipeline orchestrates ML workflow steps.

Therefore, to declare the ML model that an endpoint will host, use AWS::SageMaker::Model.
Bengaluru, India

AI Explanation - verified by User9607 on: August 21, 2026
Question 6:
Correct answers: D and E

Customize Opportunity Contact Role

Opportunity Contact Roles identify the people involved in an opportunity—such as Decision Maker, Evaluator, or Influencer. These roles let sales users classify key stakeholders and support reporting on their involvement.

Add the Opportunity Contact Role related list to the Opportunity page layout

This makes the stakeholder information accessible directly from each opportunity, where users can add contacts and assign their roles.
Why the other options are incorrect:

Campaign Member Role relates contacts or leads to campaigns, not opportunities.

Campaign Member related list would expose campaign participation, not the stakeholders for the opportunity.

Customize Campaign Role also concerns campaigns.

The key distinction is that the requirement concerns contacts involved in an opportunity, so use Opportunity Contact Roles, not campaign features.
Toronto, Canada

AI Explanation - verified by User4966 on: September 04, 2026
Question 10:
No—the numbers do not have to match.
In:

text interface GigabitEthernet0/0.10 encapsulation dot1Q 3

.10 is the router’s local subinterface number.

dot1Q 3 identifies the 802.1Q VLAN tag carried on the trunk.

The router uses the encapsulation command—not the subinterface number—to associate traffic with a VLAN. Therefore, .10 can carry VLAN 3.
For clarity, administrators commonly make them match:

text interface GigabitEthernet0/0.3 encapsulation dot1Q 3

That convention is easier to read, but it is not required.
Similarly:

text interface GigabitEthernet0/0.2 encapsulation dot1Q 2

would normally represent VLAN 2.
So option B is technically valid regarding the numbering. However, because the exhibit is unavailable and the displayed options appear incomplete or inconsistent, the full configuration cannot be verified. The key principle is:
> Subinterface number = local label; dot1Q number = actual VLAN ID.
Bern, Switzerland

AI Explanation - verified by User8565 on: August 30, 2026
Question 4:
Correct answer: C — Ability to meet data residency requirements
A hybrid cloud combines private/on-premises infrastructure with public-cloud services. An organization can keep sensitive or regulated data in a required country, region, or private environment while using the public cloud for less-sensitive workloads.
Why the others are less suitable:

A: Reduce management overhead — This is generally an advantage of public cloud, not hybrid cloud. Hybrid environments can increase management complexity.

B: Cross-platform virtualization — Not the defining advantage of hybrid cloud.

D: Leverage IaaS and PaaS — Public clouds commonly provide both IaaS and PaaS, so this is not unique to hybrid cloud.

Data residency means data must remain in a particular geographic location to satisfy legal, regulatory, or organizational requirements.
Lilongwe, Malawi

AI Explanation - verified by mphaladijd on: August 16, 2026
corect answer is bde
You’re right—B, D, and E are the intended correct choices. The page formatting appears to have split the answer options incorrectly.

B — Increase provisioned concurrency for Lambda

Provisioned concurrency keeps Lambda execution environments initialized, reducing cold-start latency during the initial request burst.

D — Refactor the Lambda functions

Database connection initialization should be moved outside the function handler, so warm execution environments can reuse connections. The page text appears to say “into” the handlers, which would be counterproductive and is likely a formatting/transcription error.

E — Use Amazon RDS Proxy

RDS Proxy pools and reuses database connections. This prevents a burst of Lambda invocations from opening many separate connections to Aurora and reduces connection overhead.
Reserved concurrency controls the maximum number of concurrent invocations but does not eliminate cold starts or database connection overhead. Aurora Global Database and cross-Region replicas are not needed for this latency/scalability issue.
Pretoria, South Africa

AI Explanation - verified by kowshik.h on: August 25, 2026
Question 1:
Correct answer: C — Detect events where principal.port is 5555.
In Google SecOps UDM:

principal represents the source or initiating system.

principal.port is the source port.

target represents the destination system.

target.port is the destination port.

Because the question asks for traffic originating from the server running the backdoor, filter on:

text principal.port = 5555

Why the other options are weaker:

network.ApplicationProtocol = HTTP identifies HTTP traffic but not the backdoor specifically.

target.port = 5555 finds traffic going to port 5555, rather than originating from it.

network.ip_protocol = TCP is too broad because many services use TCP.

The key exam distinction is source/principal versus destination/target.
Bengaluru, India

AI Explanation - verified by curl_thyme6l on: August 27, 2026
Question 46:
The correct answers are B and C.

B. The community must be built with the Customer Account Portal template.

Dynamic branding at login is supported for sites using the Customer Account Portal template. This allows the login experience to display branding based on the incoming context.

C. An experience ID (expid) or placeholder parameter must be used in the URL.

The URL identifies which branding configuration should be applied. For example, a link can include an experience or placeholder value so the site knows which logo, colors, or login-page branding to display.
Why the others are incorrect:

A: The Visualforce + Salesforce Tabs template does not provide this dynamic branding capability.

D: An external CMS is not required. The branding configuration is handled within Salesforce Experience Cloud.

Zagreb, Croatia

AI Explanation - verified by User4925 on: August 24, 2026
Question 7:
The answer key shows A and D, but the wording is ambiguous and may be outdated.

A — Custom Button: A button can launch a flow, typically by passing the flow’s URL and record context.

D — From a Process: A Process can invoke a flow using an Apex action configured for flow invocation. However, this is automation-triggered, not directly accessed by a user.

B — Quick Action: In current Salesforce functionality, a Flow Quick Action can launch a screen flow directly from a record page. This makes B a valid modern method.

C — Visual Workflow Launcher: This is not generally listed as a standard access method in current Salesforce terminology; Salesforce commonly uses the Flow component on Lightning pages instead.

For the likely older exam context, memorize custom button and process-triggered flow as the intended answers. For current Salesforce configuration, remember that Flow Quick Actions are also supported.
Sofia, Bulgaria

AI Explanation - verified by User3032 on: August 18, 2026
Question 15:
Question 15’s stated answer appears incorrect.
The requirement is to expose file metadata only and not store CSV contents. Selecting Combine Content creates a combined query from the CSV binaries, which imports the file data and violates the requirement.
The correct sequence should be conceptually:

Get Data ? Folder in Power BI Desktop.

In Power Query Editor, expand the Attributes column to expose metadata such as hidden status and other file attributes.

Remove the Content column (and any other data columns you do not need).

The Folder connector returns a table containing metadata columns such as:

Name

Extension

Date accessed

Date modified

Folder Path

Attributes

Content

The Content column contains each CSV as binary data. Removing it ensures that only metadata is loaded into the dataset.
Why the answer key is problematic: it says to combine the Content column, but that action is specifically used to combine the actual CSV files, not merely their metadata.
Zurich, Switzerland

AI Explanation - verified by alaafawzyelbahrawy on: August 26, 2026
Question 173:
Answer: B — There is no column named heartrateheartrateheartrate.
I can’t see the traceback image itself, but based on the answer choices, Spark is interpreting the expression as a reference to one column with the name:

text heartrateheartrateheartrate

Because that column does not exist, Spark raises an unresolved-column/analysis error.
This is not a type error:

Spark column objects can be multiplied, for example:

python df["heartrate"] * 3

A DataFrame itself cannot be multiplied, but the expression is referring to a column.

It is also not primarily a Python syntax error; the code was parsed, then Spark failed while resolving the column name.

The key exam skill is distinguishing column-resolution errors from data-type errors.
Cairo, Egypt

AI Explanation - verified by User8942 on: August 23, 2026
Question 2:
Correct answer: C — Statistical metrics measuring capacity utilization
When analyzing computer performance, an auditor needs objective, quantitative data. Metrics such as CPU, memory, disk, network utilization, throughput, and response time help determine whether resources are appropriately sized and where bottlenecks exist.
Why the other options are less useful:

A. Tuning system software: This is a corrective action, not an analysis method. Tuning should be based on measured performance data.

B. User dissatisfaction reports: Useful as an indicator, but subjective and insufficient for diagnosing the cause.

D. Off-peak utilization and response time: This may hide problems occurring during peak periods. Performance analysis should cover representative or peak workloads.

The exam principle is: Use measurable performance and capacity data before making optimization decisions.
Hyderabad, India

AI Explanation - verified by User1846 on: August 24, 2026
Question 20:
Correct answers: A and C — Disable default accounts and Remove unnecessary services.
Server hardening reduces the server’s attack surface before it is deployed:

Disable default accounts: Default or unused accounts may have predictable names or credentials and can be abused by attackers. They should be disabled, removed, or secured with strong credentials where necessary.

Remove unnecessary services: Every running service can contain vulnerabilities or provide an entry point. Removing services the server does not need reduces exposure.

Why the others are less suitable:

Add the server to the asset inventory: Important for asset management, but it does not directly harden the system.

Document default passwords: Default passwords should be changed or disabled—not recorded for continued use.

Send logs to the SIEM: Supports monitoring and detection, rather than directly reducing the attack surface.

Join the corporate domain: A deployment/configuration decision, not inherently a hardening measure.

D'iberville, United States

AI Explanation - verified by legalvao1 on: August 31, 2026
Question 97:
Na questão 97, a resposta correta é C — aumentar o classifier-free guidance (CFG) scale.
O CFG scale controla quanto a imagem gerada deve seguir o texto do prompt:

Valor maior: mais aderência às instruções e aos detalhes descritos.

Valor menor: mais liberdade criativa e resultados potencialmente mais variados.

Valor excessivamente alto: pode causar artefatos ou imagens menos naturais.

As outras opções:

Aumentar o número de passos de geração: pode melhorar qualidade e refinamento, mas não é o principal controle de especificidade do prompt.

MASK_IMAGE_BLACK: relaciona-se ao uso de máscara em geração ou edição de imagens, não à especificidade textual.

Prompt strength: é mais associado à força do prompt em processos como image-to-image; nesta questão, o parâmetro diretamente ligado à aderência textual é o CFG scale.

Itu, Brazil

AI Explanation - verified by gaznoble on: August 28, 2026
Question 21:
Correct answer: B — encrypting a virtual machine disk
Encryption at rest protects data while it is stored, such as on:

Virtual machine disks

Databases

Storage accounts

File systems

A VM disk is stored data, so encrypting it is an example of encryption at rest.
The other options involve encryption in transit:

Site-to-site VPN: protects data moving between networks

HTTPS: protects data moving between a client and website

Encrypted email: generally protects the message while being transmitted

A useful exam distinction is:

At rest = stored data

In transit = moving data

In use = data currently being processed by a system

Shrewsbury, United Kingdom

AI Explanation - verified by User8721 on: August 19, 2026
Question 1:
Correct answer: test
The PAN-OS CLI uses the test command family to perform policy and forwarding lookups without sending real production traffic. It can help determine:

Which Security policy matches

Which NAT rule/translation is selected

Which PBF rule applies

Which route is used

Examples include commands such as:

text test security-policy-match ... test nat-policy-match ... test pbf-policy-match ... test routing fib-lookup ...

The other options—check, find, and sim—aren’t the relevant PAN-OS CLI command family for this purpose. The answer key’s C is correct.
Gurugram, India

AI Explanation - verified by Tholang2016 on: September 01, 2026
Question 158:
Answer: D — Develop the process.
In Maylor’s 4D project life cycle, the stages are:

Define – establish the project’s objectives, scope, feasibility and requirements.

Design – plan how the project will be carried out, including resources, schedules and controls.

Deliver – execute the project and produce the required outputs.

Develop – close the project formally and capture learning for future projects.

The activities in the question are all project-closure activities:

Filing documentation and records

Closing project and accounting systems

Settling costs

Handing over the completed work and obtaining sign-off

Reviewing performance and giving feedback

Therefore, the answer key’s D is correct. The key clue is the combination of handover, formal closure and post-project review, which belongs to the final Develop stage rather than the delivery stage.
Maseru, Lesotho

AI Explanation - verified by User8074 on: August 29, 2026
Question 41:
Correct answer: C — A DNS sinkhole can be used to capture traffic to known-malicious domains used by attackers.
A DNS sinkhole is a defensive DNS configuration that redirects requests for known-malicious domains to a controlled, internal system instead of allowing users or devices to connect to the real attacker-controlled server.
This helps security teams:

Prevent connections to malware command-and-control servers

Identify infected systems making those DNS requests

Collect information for incident response

Why the other options are incorrect:

A: Attackers do not normally use sinkholes to map a company’s domain structure.

B: Redirecting employees from legitimate sites to attacker-owned sites describes malicious DNS manipulation, not a defensive sinkhole.

D: Attracting attackers away from real resources is more closely associated with a honeypot or deception system.

Weston, Canada

AI Explanation - verified by User1782 on: August 31, 2026
Question 101:
Correct answer: A. Data architecture
The AWS Cloud Adoption Framework (AWS CAF) platform perspective focuses on building and managing the technical foundation of the cloud, including:

Cloud architecture

Data architecture

Platform engineering

Data engineering

Provisioning and modernization

Why the others are less suitable:

Data protection is associated mainly with security and risk management.

Data governance belongs to the governance perspective.

Data science is not an AWS CAF capability.

The key distinction is that data architecture describes how data stores, pipelines, and data systems are designed as part of the cloud platform.
Gurugram, India

AI Explanation - verified by User3588 on: August 17, 2026
Event | where EventType == "error" also listed as incorrect?
No. Event | where EventType == "error" is valid KQL and is arguably the most precise query for the requirement.
The important distinction is the operator:

kusto Event | where EventType == "error"

== is the KQL equality operator.

-eq is a PowerShell operator, not KQL.

is is not the correct equality operator in this context.

The displayed option appears to use:

text Event | where EventType –eq "error"

That is why it is marked incorrect: it uses –eq rather than ==—and it may also be a typographical/en-dash representation.
So the answer key’s statement is inconsistent:

Event | search "error" — valid, broad search.

search in (Event) "error" — valid, broad search.

Event | where EventType == "error" — valid, targeted filter.

If the actual option uses ==, it should not be marked incorrect.
Birmingham, United Kingdom

AI Explanation - verified by User3907 on: August 17, 2026
Question 28:
The answer key appears incorrect. A and B are the best answers.

A — Add a Path for Stage: A Path lets users update the Opportunity’s Stage directly from the record page, without opening the full edit form. It can also display guidance and key fields.

B — Use a Kanban list view: Users can move Opportunities between stages by dragging records between columns, which is ideal when Stage is the only field they normally change.

Why not C? An auto-launched flow runs automatically or from another automation; it does not provide users with a simpler interface for manually editing the Stage.
Why not D? A simplified page layout might reduce the number of fields shown, but users would still need to open the edit page. It is less targeted than Path or Kanban for changing only Stage.
So, for the wording given, the likely correct answer is A and B, not the stated B and C.
Cairo, Egypt

AI Explanation - verified by francis4fnc on: August 23, 2026
Question 10:
Correct answer: B. The ARN contains the mrk- prefix, identifying a multi-Region AWS KMS key. Multi-Region keys have related key material in multiple Regions, and each regional key must be handled separately.
To remove the key as quickly as possible:

Identify every Region containing a replica.

Schedule deletion of the KMS key in each Region.

Use the minimum KMS waiting period: 7 days.

Scheduling deletion in only one Region does not remove the replicas elsewhere.
Why the other options are wrong:

A — Use the root user: Root access does not eliminate the need to schedule deletion for every regional replica. The problem is the multi-Region structure, not insufficient administrative permissions.

C — Update the key policy: The policy already grants kms:* to IAM principals. Changing permissions does not delete the key or its replicas.

D — Disable the key and schedule deletion in 30 days: Disabling can stop cryptographic use, but 30 days is slower than the permitted 7-day waiting period. It also does not address replicas in other Regions.

The key policy allowing IAM principals does not override KMS deletion procedures or the requirement to manage each regional key separately.
Lagos, Nigeria

AI Explanation - verified by User4094 on: August 26, 2026
Question 29:
Correct answer: A — Entity ID
The Salesforce Entity ID uniquely identifies Salesforce as a service provider (SP) to the identity provider (IdP). The identity-provider team uses this value to distinguish Salesforce from other applications or service providers configured for SSO.
Why the other options are incorrect:

Issuer: Identifies the party issuing a SAML message—usually the identity provider in the assertion. It is not the Salesforce-specific identifier the architect should provide for differentiating Salesforce.

Identity Provider Login URL: The endpoint where users are sent to authenticate.

SAML identity location: Determines where the user identity is found in the SAML assertion, such as the subject or an attribute.

The key idea is: Entity ID identifies the SAML service provider; the login URL identifies where authentication occurs.
Zagreb, Croatia

AI Explanation - verified by User7520 on: September 03, 2026
Question 2:
Correct answer: C. Risk register
A risk register is a centralized document used to track:

Identified risks

Risk owners or responsible parties

Likelihood and impact

Risk response plans

Current status

Risk thresholds or trigger conditions

Why the others are incorrect:

Risk tolerance: The amount and type of risk an organization is willing to accept; it is not primarily a tracking document.

Risk transfer: Moving the financial or operational impact of a risk to another party, such as through insurance or outsourcing.

Risk analysis: The process of evaluating a risk’s likelihood and impact.

The key clue is “document risks and responsible parties.” That directly describes a risk register.
Houston, United States

AI Explanation - verified by User8074 on: August 30, 2026
Question 74:
Correct answer: E — PAM software
Privileged Access Management (PAM) is designed to control and secure access to critical systems without revealing passwords to the user. A PAM solution can:

Store privileged credentials securely

Grant the consultant only the access needed

Provide temporary or time-limited access

Rotate passwords automatically

Record or monitor administrator sessions

Why the others are less suitable:

TACACS+: Centralizes authentication and authorization, commonly for network devices, but does not primarily provide password vaulting and privileged-session control.

SAML: Enables web-based federation and single sign-on, not privileged credential management.

SSO platform: Reduces the number of passwords users need, but does not necessarily protect administrative credentials or control privileged sessions.

Role-based access control (RBAC): Assigns permissions based on job roles, but does not by itself prevent password sharing or securely broker administrator access.

The key clues are critical systems, external consultant, and without sharing passwords—these point directly to PAM.
Weston, Canada

AI Explanation - verified by thabelangmatuka on: August 26, 2026
Question 67:
Correct answers: A, B and C.
Outsourcing finance means using an external provider for activities such as bookkeeping, payroll, accounts payable or reporting.

A — Can help keep costs down and improve quality: The provider may have specialist expertise, efficient systems and economies of scale.

B — There is a known fee if agreed in advance: A fixed or agreed fee can make costs more predictable and support budgeting.

C — Allows management to focus on core operations and issues: Senior managers spend less time supervising routine finance processes and more time on strategic matters.

The other options are not normally advantages:

Increased control: Control may decrease because the activity is performed externally.

Increased independence: The organisation becomes dependent on the supplier.

Increased understanding of the outsourcing business: The internal organisation usually has greater business knowledge; the provider may initially lack it.

Increased confidentiality: Sharing financial information externally may create confidentiality risks.

Internal expertise improved: Outsourcing can reduce opportunities to develop internal finance skills.

Maseru, Lesotho

AI Explanation - verified by User3588 on: August 17, 2026
Question 36:
Question 36: The answer key appears incorrect.
The question asks whether assigning the Reader role at the subscription scope enables Admin1 to enable Traffic Analytics.

The explanation states that Traffic Analytics can be enabled by a user with one of these subscription-level roles:

- Owner - Contributor - Reader - Network Contributor
Therefore, based on the cited Microsoft documentation, the answer should be Yes, not No.
The confusing part is that Reader is normally a read-only role and cannot modify most Azure resources. However, the Traffic Analytics documentation specifically lists Reader as an accepted role for enabling the feature—likely because the configuration operation is performed through the Network Watcher service.
So:

Question 34 — Network Contributor: Yes

Question 35 — Owner: Yes

Question 36 — Reader: Yes, according to the stated explanation and documentation

The answer key’s B (No) contradicts its own explanation.
Birmingham, United Kingdom

AI Explanation - verified by User2443 on: August 16, 2026
Question 2:
Correct answer: D — Empowered the team to improve their processes, tools, and interactions to be more effective in delivery and removing impediments.
In an agile environment, the team should be self-managing and empowered to identify and remove impediments. The project leader should facilitate improvement rather than directing the team to fast-track everything.
Fast-tracking all features created pressure, causing the team to deliver fewer features or lower quality. A better response would be to:

Help the team identify the causes of delays.

Encourage continuous improvement through retrospectives.

Support the team in changing its process, tools, or collaboration methods.

Help remove impediments that the team cannot resolve independently.

Why the other options are weaker:

A: An impediment log may help, but simply maintaining it does not ensure the impediments are resolved.

B: Directing the team to solutions conflicts with agile self-management.

C: Adding impediments to the product backlog could delay their resolution and treats them like product features.

The answer key’s D is consistent with PMI’s agile principles.
Subang Jaya, Malaysia

AI Explanation - verified by User9667 on: September 03, 2026
Question 24:
The answer is A: “Screen Aggregates can only be executed when explicitly called.”
This is false because Screen Aggregates are automatically executed when the screen loads, unless their execution is configured or controlled differently. You do not normally need to call them explicitly from a client action.
The other statements describe typical Screen Aggregate behavior:

Database data: Aggregates are used to retrieve structured data, commonly from entities and database sources.

Screen scope: A Screen Aggregate belongs to the screen where it is defined and is not directly reusable as a screen-level aggregate elsewhere.

Asynchronous and parallel execution: Multiple Screen Aggregates can run asynchronously and in parallel, helping the screen load data efficiently.

Therefore, the key’s answer A is consistent with OutSystems behavior.
Hyderabad, India

AI Tutor 👋 I’m here to help!

Cisco 100-490 Exam Prep Supporting Cisco Routing & Switching Network Devices (Page 6 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Cisco 100-490 Exam Prep
Supporting Cisco Routing & Switching Network Devices (Page 6 )