SSH is a protocol that provides a secure remote access connection to network devices.
SSH uses the well-known TCP port 23 for its communication.
A Telnet network management connection is dropped when a router reboots.
Telnet is a protocol that provides a secure remote access connection to network devices.
Telnet is preferred over SSH for security reasons.

Answer(s): A,C

Show Answer Next Question

QUESTION: 4

Which address facilitates the routing of packets over an IP network?

physical
transport
network
MAC

Answer(s): C

Show Answer Next Question

QUESTION: 5

Which two IPv4 addresses can be assigned to a host computer? (Choose two.)

255.255.255.255
10.1.1.20
0.0.0.0
192.168.10.15
292.10.3.4

Answer(s): B,D

Show Answer Next Question

Download PDF Next Page

Viewing page 3 of 13
Viewing questions 11 - 15 out of 72 questions

Post your Comments and Discuss Cisco 100-490 exam prep with other Community members:

Comments:

Name:

100-490 Exam Discussions & Posts
100-490 AI Verifications

Sylvester Jafta on: December 19, 2024
nibasiwe laway
EUROPEAN UNION

Loopback on: September 13, 2026
Saved me time and money cramming super slow got through the exam.
Luxembourg

Nullptr on: July 22, 2026
The exam covered way more than I thought but the material on this site was pretty helpful. The AI assistant explained stuff in a simple way which was nice for me as non-native English speaker.
Japan

Raid on: July 23, 2026
Balancing work and short study was hard but this cert done feels good.
Austria

Heap on: August 07, 2026
Man this exam was stressful. Thankful for the practice questions here they made it less painful.
Australia

Backplane on: July 05, 2026
Taking my time with these questions was key. Got through eventually. Passing feels good now.
Mexico

Grep on: September 19, 2026
The exam was so stressful but I think these practice questions made it bearable. Glad that's over with now.
Canada

Inode on: September 13, 2026
Honestly this exam was tough but the practice questions on this site were spot on.
Singapore

Firmware on: August 21, 2026
Crammed after work then felt chill passing.
Ireland

Subnet on: August 27, 2026
This exam was tough but these questions really helped me pass.
Singapore

Pids on: July 18, 2026
The exam was tough but doable with this site. I'm glad I used their material.
Portugal

Endian on: August 17, 2026
This exam was a bit tougher than I thought. AI assistant on this site really helped though.
Uruguay

John on: September 27, 2026
I felt the exam was hard but the prep here really helpe
Chennai, India

VlanId on: July 05, 2026
This exam is tough but these questions saved me.
Switzerland

Endianness on: September 08, 2026
The exam covered way more than I thought but these questions and material were a lifesaver. The AI assistant on this site was handy for quick clarifications when I got stuck.
Monaco

Namespaces on: August 18, 2026
Took my time with the exam prep because life. Went through questions again and again till it stuck. Passed eventually so yay me I guess.
Estonia

Segfault on: July 13, 2026
Crammed with practice questions passed exam slowly.
Germany

Inode on: August 04, 2026
Exam harder than expected but doable.
Mexico

Unicast on: September 01, 2026
The exam was tough but the practice questions here really helped me pass.
Norway

Tcpdump on: July 18, 2026
Worked long hours but glad I passed.
Belgium

Endian on: August 05, 2026
This exam was a bit harder than I thought but still got through with help from the practice questions.
Taiwan

Tarball on: August 28, 2026
The exam was killer but this website had some solid practice questions. Feels good to be done with that stress.
Belgium

Hexdump on: July 18, 2026
Man this exam was tough. Happy the prep stuff here worked.
Norway

Sandbox on: June 27, 2026
This exam was tricky and covered way more stuff than I thought it would. The AI assistant on this site helped me fill in some gaps though so not too bad.
Singapore

Regex on: September 23, 2026
This exam threw some curveballs and covered more than I expected man but the AI assistant here was mad helpful. Definitely made things a bit smoother while studying on this website.
United States

HUng on: September 09, 2026
It very good.
Ho Chi Minh City, Vietnam

Symlink on: August 16, 2026
This cert was harder than I thought manageable though.
Netherlands

Bitmask on: July 13, 2026
Crammed a ton but saved time and money getting through this test easy.
Argentina

Malloc on: September 18, 2026
This exam was crazy stressful but the practice questions were a lifesaver. Honestly just glad it's over now.
United Kingdom

Microcode on: July 18, 2026
I was cramming and this website saved me time and money since I passed the exam by going through it slowly.
Monaco

Glibc on: September 06, 2026
Prep questions saved my butt here.
Monaco

Regex on: June 30, 2026
I felt lost at first but then practicing with relevant questions helped build my confidence bit by bit.
United States

Shebang on: July 22, 2026
The exam was pretty intense but using the prep from this website got me through it. Practice questions were really useful in understanding the format better.
Italy

PktLoss on: July 10, 2026
Practice questions really helped me feel ready.
Netherlands

Microcode on: August 23, 2026
This exam kinda hard but doable.
Norway

Strace on: August 12, 2026
Short study sessions between work helped pass.
United States

Synack on: August 20, 2026
Was kinda slow at first then I review more and pass finally.
Spain

Iptables on: August 10, 2026
This exam kinda hit me with more stuff than I thought but the AI on this site helped me manage it better. Overall it went fine thanks to that cool assistant thingy.
Portugal

Endian on: July 01, 2026
Wasn't feeling too confident at first but going through those practice questions really made a difference.
Hong Kong

VlanId on: July 24, 2026
I found this exam really tough but the practice questions here were spot on and got me through.
United States

Hashmap on: August 02, 2026
Questions were tough but the exam prep worked.
Germany

Fiber on: June 25, 2026
At first I wasn't confident but these practice questions helped me learn a lot for this exam.
Hong Kong

Bootload on: July 14, 2026
This exam was tough but the practice questions saved me.
Netherlands

Multicast on: July 28, 2026
Saved me time and money passing slowly.
United States

Chmod on: September 08, 2026
I took my time with prep but in the end reviewing it all paid off and I passed.
Norway

Dotfile on: September 22, 2026
Saved time cramming slowly got me through this exam and it didn't cost much.
United Kingdom

Overclock on: June 29, 2026
The exam was tougher but doable.
Italy

Stderr on: August 17, 2026
Exam harder but was doable.
Australia

Tu on: September 11, 2026
Is the study here enough for me to pass this exam?
Houston, United States

Octet on: July 12, 2026
Passed the exam finally AI assistant helped.
UAE

AI Explanation - verified by nikhillogix on: September 17, 2026
Question 31:
Correct answer: C — Use the GitHub Copilot settings in the user interface to exclude files.
GitHub Copilot Business supports content exclusions, which are configured through GitHub’s Copilot settings. An organization administrator can define repositories or file paths that Copilot should not use for suggestions or as contextual information.
Why the other options are incorrect:

A — .gitignore: Controls Git tracking; it does not configure Copilot exclusions.

B — copilot.ignore: This is not the standard GitHub Copilot Business exclusion mechanism.

D — Renaming files: Adding _no_copilot has no recognized effect.

Remember the distinction: .gitignore affects Git, while Copilot content exclusions are managed through Copilot/organization settings.
Everett, United States

AI Explanation - verified by nhoxzznhox15 on: September 12, 2026
Question 135:
Correct answer: A

Create a CodeCommit repository in the secondary Region.

Use CodeBuild to run a Git mirror operation from the primary repository to the secondary repository.

Use EventBridge to detect relevant repository events, such as a pull request being merged.

Invoke a Lambda function, which starts the CodeBuild project.

This provides an automated, near-real-time copy of the repository in the disaster-recovery Region. Developers can then add the secondary repository as another Git remote if they need to operate there.
Why the other options are incorrect:

B: Amazon S3 is object storage, not a Git repository that developers can use as a CodeCommit remote.

C: CodeArtifact is intended for packages and artifacts, not source-code repository mirroring.

D: An AWS Cloud9 environment is not an appropriate automated replication mechanism and would require manual or persistent infrastructure management.

The key concept is that CodeCommit repositories are Region-specific, so disaster recovery requires a second repository and an automated synchronization process.
Duong Minh Châu, Vietnam

AI Explanation - verified by User1268 on: September 15, 2026
Question 193:
Correct answer: D — Cloud Services
When Snowflake returns a result from the query result cache, it does not need to execute the query again. Therefore:

Compute: Not used; no virtual warehouse is required.

Data Storage: Not scanned again.

Metadata: May help Snowflake manage and validate cached results, but it is not the Snowflake architectural layer identified as serving the request.

Cloud Services: Handles query coordination, metadata services, authentication, and result-cache access.

The key exam distinction is that Cloud Services is always involved, while a virtual warehouse is bypassed when a valid cached result is available.
Noida, India

AI Explanation - verified by User5938 on: September 11, 2026
resuma
Resposta: Não.
Máquinas virtuais do Azure usam o modelo IaaS, não PaaS.

IaaS: você gerencia a VM e o sistema operacional.

PaaS: o Azure gerencia a infraestrutura; você se concentra no aplicativo.

Logo, a solução proposta não atende ao objetivo.
Cabo Frio, Brazil

AI Explanation - verified by User1054 on: September 25, 2026
Question 1:
Correct answer: B — Create a custom pool.
A custom Apache Spark pool lets you provision dedicated Spark compute for the bronze and silver workloads. Assigning the workloads to separate pools prevents them from competing for the same shared Spark resources and provides better control over node size, autoscale settings, and workload capacity.
Why the other options are less suitable:

Disable high concurrency: This changes session-sharing behavior but does not provide dedicated compute or true workload separation.

Modify the number of executors: Adjusts resources within a Spark job; it does not isolate bronze and silver processes.

Set the default environment: Controls libraries and runtime configuration, not compute isolation.

Important: The supplied explanation appears incorrect. It discusses isolated compute in Azure Synapse, including an XXXLarge node requirement, rather than explaining the Fabric answer. For this question, the relevant concept is using a custom Spark pool to separate workloads.
Johannesburg, South Africa

AI Explanation - verified by User5153 on: September 23, 2026
Question 1:
The answer key appears to be incorrect for Box 1.
Correct selections should be:

Search & Intelligence in the Microsoft 365 admin center — No

- Search & Intelligence is used to configure and analyze Microsoft Search, including bookmarks, acronyms, Q&As, and search insights. - It is not the location for reviewing administrative actions.

Audit in the Microsoft Defender portal — Yes

- The Defender portal provides access to audit and investigation capabilities for security-related activities across Microsoft 365.

Audit in the Microsoft Purview portal — Yes

- Microsoft Purview Audit records user and administrator activities across Microsoft 365 services. - You can search audit records to determine what actions were performed, by whom, and when.
Therefore, I believe the correct pattern is No, Yes, Yes, not “Yes” for all three. The key concept is that administrative activity is reviewed through the unified audit log, available through Purview Audit and, in relevant scenarios, the Defender portal.
Cairo, Egypt

AI Explanation - verified by sandrocarlos52 on: October 01, 2026
Question 43:
Você está certo em desconfiar do gabarito. A, C e E parecem ser as respostas corretas:

A — Increased call deflection: o KCS disponibiliza conhecimento reutilizável para clientes e agentes, ajudando a resolver dúvidas sem abrir ou continuar chamadas.

C — Reduced issue resolution time: os representantes reutilizam artigos e soluções já documentadas, acelerando o atendimento.

E — Optimized use of resources: o conhecimento compartilhado reduz retrabalho e melhora o uso dos recursos da equipe.

O gabarito mostra C, D e E, mas D — Reduced support channels não é um benefício típico do KCS. O objetivo é melhorar o suporte em vários canais, não necessariamente reduzir a quantidade deles.
B — Increased call routing accuracy também não é um benefício central do KCS; isso está mais relacionado a classificação, roteamento e configuração de filas.
Portanto, eu consideraria o gabarito dessa questão incorreto: A, C e E.
Recife, Brazil

AI Explanation - verified by khamankopane66 on: September 14, 2026
Question 16:
Correct answer: A, C and D.
Management should ensure:

A — Capacity: The system must handle all current records and anticipated future records. A system that cannot cope with volume will quickly become ineffective.

C — Accuracy: Academic records are critical, so the new system must be at least as accurate as the existing system and comparable systems. Poor accuracy could cause serious administrative and reputational problems.

D — Integration: Linking with the university’s financial systems supports consistency and avoids duplicate data entry, especially for registration, deregistration and fee-related transactions.

Why the others are not essential prerequisites:

B — Parallel running: This is a useful implementation and risk-control technique, but it is not an essential feature of the system itself. It may also be expensive and time-consuming.

E — Internet access for all information: This creates significant confidentiality and security risks. External access might be needed for selected services, but unrestricted access to all information is not essential and would be inappropriate for student records.

Maseru, Lesotho

AI Explanation - verified by himanshupandey473 on: September 15, 2026
Question 75:
Question 75: Linear regression
The correct choice is linear regression when the model must predict a numeric value.

Regression predicts continuous numeric outcomes, such as house price, temperature, or sales amount.

Linear regression assumes the target can be estimated from a linear relationship between the input features and the target.

In Azure Machine Learning, you use a labeled dataset containing:

- Features: input columns - Label: the numeric value to predict
Why the other options are incorrect:

Classification predicts a category or class, such as “spam” or “not spam.”

Clustering groups similar records without a known label; it is an unsupervised learning technique.

So, if the sentence describes predicting a numeric target, select Linear regression.
Pune, India

AI Explanation - verified by User4042 on: September 30, 2026
Question 8:
Correct answer: D — Format the dataset as a JSONL file with prompt-completion pairs and upload the file.
The answer key’s C appears incorrect. Tracing can help analyze model behavior and evaluate inference calls, but it is not the first required step for configuring a fine-tuning job.
Why D is correct:

Fine-tuning requires a properly formatted training dataset.

For classification or instruction-style fine-tuning, examples are supplied in JSONL format.

Each line represents one training example, typically containing the input prompt and the desired completion or label.

The file must then be uploaded or made available to the Microsoft Foundry fine-tuning workflow.

The other options are not prerequisites:

A: Prompt Flow is useful for prompt experimentation, but it is not required to start fine-tuning.

B: You do not need to deploy the base model to an online endpoint before fine-tuning.

C: Tracing supports observability and evaluation, but it does not prepare the fine-tuning job or dataset.

Lagos, Nigeria

AI Explanation - verified by User3039 on: September 14, 2026
Question 13:
Correct answer: No
The answer key shows B, and it is correct.

Azure Cosmos DB is a globally distributed NoSQL database service. It stores and retrieves application data, but it does not provide the complete environment for building, testing, and deploying predictive analytics models.

Azure Machine Learning is the appropriate service for this requirement. It supports creating experiments, training and testing models, and deploying them for predictions.

Azure Machine Learning Studio provides the browser-based interface for these tasks.

Therefore, recommending Azure Cosmos DB does not meet the requirement.
Wan Chai, Hong Kong

AI Explanation - verified by User8102 on: September 29, 2026
Question 3:
Correct answer: C — The document feeder
The printer produces a vertical line only when copying or scanning, while normal printed pages and received faxes are clean. This isolates the problem to the scanner/document-feeder path, not the laser-printing system.

Document feeder: A scratch, dirt, or debris on the feeder glass or rollers can create a line on every scanned image.

Pickup rollers: Move paper through the printer; they would not normally create a scanner-only line.

Corona wire: Affects toner charging and would cause defects on printed output.

Drum assembly: Also affects printed pages, so faxes and computer print jobs would show the line too.

When troubleshooting, clean and inspect the scanner glass, narrow document-feeder glass strip, and feeder rollers.
Lilongwe, Malawi

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 116:
The correct answer is C: 40,000 units.
For a profit-maximising firm, the output rule is:
\[ MR = MC \]
The variable cost is $2 per unit, so marginal cost (MC) is $2:
\[ 10 - 0.0002Q = 2 \]
Rearrange:
\[ 8 = 0.0002Q \]
\[ Q = \frac{8}{0.0002}=40,000\text{ units} \]
The $110,000 fixed cost does not affect the profit-maximising output because it does not change as output changes. It affects the total profit, but not the decision about how many units to produce.
At 40,000 units, the price would be:
\[ P=10-(0.0001 \times 40,000)=\$6 \]
Since marginal revenue equals marginal cost at this output, producing more would reduce profit, while producing less would mean giving up profitable contribution.
Maseru, Lesotho

AI Explanation - verified by User2517 on: September 19, 2026
Question 59:
Correct answer: A — Work with the project scheduler to update the project timeline.
The team discovered an unforeseen dependency affecting a critical activity. The project manager should first determine and document the schedule impact by updating the project timeline with the scheduler.

A is correct: It establishes the revised dates and identifies the effect on the critical path.

B is premature: Stakeholders should be informed after the impact has been assessed and the updated schedule is understood.

C is not automatically appropriate: Fast-tracking may introduce additional risk and should be considered only after analyzing schedule options.

D is premature: Adding resources may not resolve a dependency and could increase costs without addressing the actual constraint.

The general sequence is: assess the impact ? update the schedule ? evaluate responses ? communicate the approved change.
Cebu City, Philippines

AI Explanation - verified by mapulengkoetlisi on: September 30, 2026
Question 45:
You’re right to question it. If option A uses the year-end fair value of $45, then the answer key appears to be incorrect.
For an equity-settled share-based payment:

Use the grant-date fair value: $30

Do not remeasure to the year-end value of $45

Update the estimate of employees expected to vest

Expected employees vesting:
125 - 10 - 25 = 90
Expected options:
90 × 500 = 45,000
Expense for 20X4:
45,000 × $30 × 1/3 = $450,000
Correct journal entry:

Dr Share-based payment expense $450,000

Cr Equity/share option reserve $450,000

The $45 year-end value would incorrectly produce $675,000 for the year. That remeasurement approach applies to cash-settled awards, not equity-settled awards.
Anonymous

AI Explanation - verified by User6439 on: September 09, 2026
Not only is this incorrect, it's idiotic. This a routine audit. Try again.
You’re right—I misread the scenario. The better answer is B: File integrity monitor.
The key clues are “performing an audit” and the fact that the message appears immediately when the tool examines /etc/shadow.
A file integrity monitor (FIM) audits critical system files—such as /etc/shadow—by checking their attributes or calculating hashes. If the monitoring process lacks permission to read the file, it can report:
Error 13: Permission denied
Why D, password cracker, is weaker:

A password cracker would normally be identified by behavior such as loading password hashes or attempting dictionary/brute-force attacks.

The question describes a routine audit, not password recovery.

Simply encountering a protected file during an audit is characteristic of a misconfigured or insufficiently privileged FIM.

So the community answer key appears wrong, and my earlier explanation incorrectly over-weighted the filename.
Amsterdam, The Netherlands

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 191:
The correct answer is A — $500.
Relevant costs are future cash flows that change because of the decision:

Additional running costs: $800

Less depreciation: $300

Depreciation is a non-cash accounting charge, so it is not relevant to the decision.

The $100 reduction in fixed production overhead absorbed is only an accounting reallocation. It does not represent an actual saving in total fixed overhead.

Therefore:
\[ \$800-\$300=\boxed{\$500} \]
The machine’s relevant additional cost is $500 per month. The question does not provide any relevant cost or disposal proceeds for the existing machine, so those cannot be included.
Maseru, Lesotho

AI Explanation - verified by User9379 on: September 21, 2026
Question 79:
Correct answer: Code signing (B)
Code signing uses a digital signature to prove that software came from the claimed author and has not been modified since it was signed.
In this scenario, an attacker could repackage the software and add malware. If users verify the author’s digital signature before installing it, the modified package will fail signature validation.
Why the others are incorrect:

Input validation: Prevents malicious or malformed input within an application; it does not authenticate a software package.

Secure cookies: Protect web-session cookies; they do not protect downloadable software.

Fuzzing: Tests software by supplying unexpected input to find vulnerabilities; it does not verify software integrity.

The website’s exclusive control helps protect the download location, but code signing provides end-to-end integrity verification even if the file is copied or altered elsewhere.
Biloxi, United States

AI Explanation - verified by User8578 on: September 17, 2026
Question 2:
You can assign the Microsoft Entra ID P2 license to Group1 and Group2.

Group1 — security-enabled: Eligible.

Group2 — mail-enabled and security-enabled: Eligible because it is still a security group.

Group3 — Microsoft 365 group: Not eligible for group-based licensing.

Group4 — Microsoft 365 group, not security-enabled: Not eligible.

Therefore, the correct answer is Group1 and Group2 only.
The supplied answer key stating Group1 and Group3 appears to be incorrect.
Bhopal, India

AI Explanation - verified by User9782 on: September 18, 2026
Question 22:
Question 22 is referring to the Security Accounts Manager (SAM) database, which stores local Windows account information, including password hashes.

Correct exam answer: A — HKEY_LOCAL_MACHINE

The relevant location is associated with HKEY_LOCAL_MACHINE\SAM.

The SAM does not store passwords in plain text; it stores password hashes.

Why the other choices are less suitable:

HKEY_CURRENT_USER contains settings for the currently logged-in user, not the account-password database.

HKEY_USERS contains user profiles and settings loaded for users.

HKEY_CURRENT_CONFIGURATION contains hardware/profile configuration information.

Important nuance: The question’s wording is imprecise—it says “password file,” but the Registry location contains the SAM database and password hashes. The answer key’s A is consistent with the expected EC-Council concept.
Kolkata, India

AI Explanation - verified by sandrocarlos52 on: October 01, 2026
Question 46:
Você está certa em questionar. A resposta A é, no mínimo, imprecisa — e provavelmente o gabarito está incorreto.

Case Assignment Rules normalmente são avaliadas quando o caso é criado. Elas podem ser executadas novamente em uma edição somente se o usuário marcar “Assign using active assignment rules”; isso não acontece automaticamente apenas porque o caso foi fechado.

Portanto, criar uma regra de atribuição não corrige os centenas de casos já fechados e não garante, por si só, que um caso será transferido antes de ser fechado.

As soluções mais coerentes seriam:

B — Usar uma ferramenta de dados: corrige os registros históricos já existentes, atualizando o Owner.

D — Criar uma regra de validação: impede que um caso seja fechado enquanto ainda pertence a uma fila. Exemplo conceitual: se Status = Closed e o proprietário for uma fila, bloquear o salvamento.

A opção C também poderia ser considerada em uma implementação real, usando Flow para atualizar o proprietário quando o status mudar para fechado, embora a automação precise ser cuidadosamente configurada.
Assim, para a pergunta como está escrita, eu estudaria B e D, não A e B. A assignment rule poderia ajudar em novos casos, mas não é a solução adequada para esse problema específico.
Recife, Brazil

AI Explanation - verified by User5895 on: October 02, 2026
Question 8:
Correct answer: A — Apply tool output pruning.
In a multi-step workflow, tool results such as search results, file contents, or API responses may be useful temporarily but become irrelevant later. Tool output pruning removes those stale results from the active context while preserving the information still needed for future steps.
Why the other options are weaker:

B: Prompt caching reduces cost and latency for repeated content, but cached content still occupies the context window. It does not solve context accumulation.

C: Switching to a smaller model changes model capacity but does not address the growing context or remove irrelevant data.

D: Keeping everything indefinitely increases token usage, risks context-window limits, and can distract the model with outdated information.

The broader principle is context engineering: maintain the smallest high-signal context needed for the current task. In practice, an application might summarize important results, store durable state externally, and clear ephemeral tool outputs once they are no longer required.
Pune, India

AI Explanation - verified by User7970 on: September 27, 2026
Question 3:
Question 3 asks how to validate the purchase order creation form before a direct-delivery PO is created and warn the user if the vendor is on the exclusion list.
Correct answers: C and D

C — Create a form extension and implement validation

- Extend the relevant purchase-order form. - Add validation to the appropriate form data source, field, or event. - Check the customer/item/vendor combination against VendExclusions. - Display a warning before the PO is created.

D — Use Chain of Command (CoC) with a form extension class

- Create a form extension class. - Wrap the relevant form method using CoC. - Add the exclusion-list check while preserving the standard method by calling next. - Issue the warning when a matching exclusion exists.
Why not B? A table extension validates table data, but this requirement is specifically about behavior on the purchase order creation form and presenting a warning before creation.
The answer key’s C/D selection is consistent with the requirement.
Leicester, United Kingdom

AI Explanation - verified by User7045 on: September 26, 2026
Question 8:
Correct answers: B. Deterrent and F. Detective

Deterrent control: The signs warning people they may be filmed discourage unauthorized or malicious behavior. They may prevent incidents by influencing behavior, but their primary purpose is to deter.

Detective control: The CCTV system monitors and records activity so security personnel can identify suspicious or unauthorized actions.

Why the others don’t fit:

Preventive: Blocks or prevents an incident, such as a lock or access-control system.

Corrective: Fixes or restores systems after an incident.

Directive: Tells people what they must do, typically through policies or procedures.

Compensating: Provides an alternative control when the preferred control cannot be used.

Broomfield, United States

AI Explanation - verified by de_jong_patri58 on: September 29, 2026
Question 143:
Question 143 depends entirely on the relationship diagram and table details in the exhibit, but the image is not available here. Therefore, I can’t reliably identify which dropdown selections are correct, and the answer key’s “A” is insufficient because hotspot/dropdown questions usually have multiple selections.
For this type of Power BI question, inspect:

Relationship cardinality:

- 1:* means one row on one side relates to many rows on the other. - 1:1 means each side has at most one matching row.

Filter direction:

- Single allows filters to flow in one direction. - Both allows filters to flow in both directions.

Active versus inactive relationships: only active relationships automatically propagate filters.

Blank or unmatched values: a fact-table value without a matching dimension row can create the model’s blank/unknown member.

Uniqueness: the “one” side must contain unique values; duplicate keys generally belong on the “many” side.

Please provide the exhibit or type out the two table names, columns, relationships, and dropdown statements, and I can work through each selection precisely.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User8952 on: September 23, 2026
Question 1:
Correct answer: C — three
Why:

The original app version exists.

You create and publish a new version, so there are now two versions.

When you restore the previous version, Power Apps does not delete or overwrite the newer version. Instead, it creates another version based on the restored one.

Therefore, the Versions tab shows:

Original version

Newly created and published version

New version created by the restore operation

So, the statement “you will see two versions” is incorrect; it should say three versions.
Brampton, Canada

AI Explanation - verified by User8851 on: September 30, 2026
Question 82:
Correct answer: B — Virtualize the entire system under a compatible hypervisor.
The application depends on an obsolete operating system that may not work on modern physical hardware. Since the developer is gone and no upgrade is available, the best long-term solution is to create a virtual machine (VM) containing the legacy OS and application.

A. Continue using the current system: It will eventually fail and offers no recovery strategy.

B. Virtualize the entire system: Correct. A VM can preserve the old OS, application, settings, and dependencies while running on newer physical hardware.

C. Containerize the application: Containers generally share the host OS kernel and are not suitable for preserving an entire incompatible legacy OS.

D. Clone the disks to USB: A disk clone may provide backup or temporary recovery, but it does not solve hardware compatibility or provide a reliable long-term platform.

This is an example of using virtualization for legacy-system support and business continuity.
Lilongwe, Malawi

AI Explanation - verified by User9499 on: September 30, 2026
Question 26:
Correct answer: C. Red team
A red team acts like an attacker. Its role is to conduct authorized attacks and penetration tests to determine whether a known vulnerability can actually be exploited in the company’s systems.

Red team: Simulates attackers and tests exploitability.

Blue team: Defends, monitors, detects, and responds to attacks.

Purple team: Combines red- and blue-team activities to improve cooperation and defenses.

White team: Manages and oversees the rules, scope, and authorization of the exercise.

The key phrase is “determine whether systems can be exploited”, which points to offensive security testing by the red team.
Dallas, United States

AI Explanation - verified by User6548 on: October 02, 2026
Question 16:
Correct answer: B — Need for an underlying OS
A Type 2 hypervisor is a software application installed on top of a conventional operating system, such as Windows or Linux. It relies on that host OS for hardware drivers, memory management, and access to system resources.

Type 1 hypervisor: Runs directly on the physical hardware (“bare metal”).

Type 2 hypervisor: Runs inside the host OS as an application.

The other choices describe Type 1 characteristics or are not generally required:

Bare-metal installation: Type 1

Local management only: Not a defining characteristic

Specific hardware requirements: Not the key distinction

Examples of Type 2 hypervisors include desktop virtualization software such as VirtualBox and VMware Workstation.
Surrey, Canada

AI Explanation - verified by User1405 on: September 29, 2026
Question 57:
Correct answer: B. Sampling bias
Sampling bias occurs when the training data does not adequately represent the population the model will encounter. If footage used to train the security model contains too few examples of certain ethnic groups—or labels those groups inconsistently—the model may perform worse for them and disproportionately flag them.
Why the others are less suitable:

Measurement bias: Errors in how features or labels are measured, such as unreliable camera data or inconsistent labeling.

Observer bias: A human evaluator’s subjective judgment influencing observations or labels.

Confirmation bias: Favoring information that supports an existing belief.

The question does not provide enough detail to prove the exact source of the problem, but sampling bias is the best answer because it points to unrepresentative training data.
Bangkok, Thailand

AI Explanation - verified by User2425 on: September 29, 2026
Question 17:
Correct answer: C. Firewalls
Firewalls primarily control network traffic between security zones, such as the internet and an internal network. They are useful against external attacks, but they are not particularly effective against insiders who already have authorized access to systems or data.
The other controls directly address insider risk:

Least privilege: Limits users to only the access necessary for their job.

Background checks: Help identify potentially risky individuals before employment.

Separation of duties: Ensures that one person cannot complete a sensitive process alone, reducing fraud and abuse.

The answer key’s C is correct.
Rota, Spain

AI Explanation - verified by User3618 on: September 21, 2026
Question 1:
Question 1 asks for two ways to iterate through a List<Account>.

A is valid:

apex for (Account theAccount : AccountList) { // process theAccount }
This is Apex’s enhanced for loop. Each element is assigned to theAccount.

D is conceptually valid, using an index:

apex for (Integer i = 0; i < AccountList.size(); i++) { Account theAccount = AccountList[i]; }
However, the question displays AccountList.Size(). Apex method names are case-sensitive, so the correct method is size(), not Size().

B is invalid because for(AccountList) is not valid loop syntax.

C is invalid because each item is an Account, not a List.

Important: The answer key shows A and D, but D is only correct if Size() is a capitalization typo and should be size().
Santos, Brazil

AI Explanation - verified by User8997 on: September 29, 2026
How to remain on that question wen u came back again
To return to the same question:

Note the question number before leaving—for example, Question 38.

Use the exam’s question navigator or Back/Previous button to return to that number.

If you close or refresh the page, your position may not be saved, depending on the site. Reopen the page and select the question number again.

Avoid using the browser’s Back button if it causes the exam page to reload; use the exam’s built-in navigation instead.

Lilongwe, Malawi

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 192:
Correct answers: A and C
The developer needs to obtain the record type ID dynamically instead of hardcoding it.

A — Use getRecordTypeInfosByDeveloperName()

Describe information can retrieve record type metadata by its Developer Name:

apex Id rtId = Schema.SObjectType.Account .getRecordTypeInfosByDeveloperName() .get('Business_Account') .getRecordTypeId();

C — Query the RecordType object

A SOQL query can retrieve the ID using the record type’s name:

apex RecordType rt = [ SELECT Id FROM RecordType WHERE SObjectType = 'Account' AND Name = 'Business Account' LIMIT 1 ];

Why the others are wrong:

B: An outbound SOAP call is unnecessary and inefficient.

D: Hardcoding an ID is not dynamic, and IDs can differ between orgs.

The answer key’s A and C is correct. Note that the method in A uses the record type’s Developer Name, while the SOQL example can filter by its display Name.
Chennai, India

AI Explanation - verified by n.brahm85b on: September 13, 2026
Question 346:
Correct answer: B. Obfuscation
Obfuscation modifies software code so that its logic is difficult to understand or reverse-engineer while preserving its functionality. This helps protect proprietary algorithms and business logic if an attacker obtains the exported software.
Why the other options are less suitable:

Code signing: Verifies the software’s authenticity and integrity; it does not hide the source code or prevent reverse engineering.

Tokenization: Replaces sensitive data with tokens, mainly for protecting data such as payment information—not software logic.

Blockchain: Provides a tamper-resistant record of transactions or data; it does not protect compiled code from analysis.

For exam questions, associate obfuscation with protecting intellectual property in software by making the code difficult to interpret or reverse-engineer.
Cambridge, United Kingdom

AI Explanation - verified by sphelelebrian47 on: September 27, 2026
Question 14:
Correct answer: 3 scopes and 2 DHCP relays

Three DHCP scopes: Each VLAN has its own IPv4 subnet. DHCP scopes are subnet-specific, so create one scope for:

1. Client VLAN 1 2. Client VLAN 2 3. Datacenter VLAN

Two DHCP relays: DHCP client discovery begins as a broadcast, and broadcasts do not cross routers or VLAN boundaries. Therefore, configure a DHCP relay on the router or Layer 3 switch interface for each client VLAN.

The datacenter VLAN does not need a relay because the DHCP server is located directly on that subnet. The server can receive DHCP broadcasts from local clients without a relay.
The fact that the clients currently use static addresses does not change the required number of scopes or relays; they must be changed to obtain addresses automatically once DHCP is deployed.
Pretoria, South Africa

AI Explanation - verified by User3350 on: September 20, 2026
Question 18:
Correct answer: C — try to expand its customer base to avoid becoming dependent on the corporation.
The passage warns that a minority-owned business may become dependent on one large corporate customer. If that customer reduces its orders or ends the relationship, the small business could suffer serious financial problems. The business might also become complacent and stop seeking other opportunities.
Therefore, it should develop relationships with additional customers, even though it may have to compete with larger, established companies.
Why the other choices are wrong:

A: Not expanding would increase its dependence.

B: More business from the same corporation would make dependence worse.

D: Passing work to other minority businesses does not solve its own dependence.

E: The passage does not suggest that it can force or influence the corporation to give work to others.

Lagos, Nigeria

AI Explanation - verified by User8245 on: October 02, 2026
Question 17:
Correct answer: B — Tier 1
Mobile devices are treated as endpoint assets in the reference architecture. They should be recorded and tracked in the organization’s asset management system, including ownership, assignment, configuration, and lifecycle status.
Why this matters:

Identifies which user or department owns the device

Supports inventory and compliance requirements

Enables tracking of lost, stolen, retired, or unauthorized devices

Helps enforce security controls such as mobile-device management and secure configuration

The other tiers represent different architectural or management layers, but the question is specifically asking where user endpoint devices—including smartphones and tablets—are tracked. Therefore, Tier 1 is the best answer.
Phoenix, United States

AI Explanation - verified by User6439 on: September 09, 2026
Question 12:
Correct answer: B. Port security
A MAC flooding attack overwhelms a switch’s MAC address table with many fake source MAC addresses. When the table is full, the switch may broadcast frames out multiple ports, allowing an attacker to capture traffic.
Port security mitigates this by limiting which and how many MAC addresses can appear on a switch port. It can:

Restrict a port to a defined number of MAC addresses

Use statically assigned or “sticky” MAC addresses

Shut down or restrict the port when violations occur

Why the others are less suitable:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect suspicious network activity, but is not the primary control for limiting switch MAC entries.

NGFW: Filters traffic at the network boundary; it does not directly prevent MAC table flooding on access switches.

Brandenburg An Der Havel, Germany

AI Explanation - verified by User5938 on: September 11, 2026
Question 7:
Resposta: Standard.
O plano Standard atende a todos os requisitos:

Suporta domínios personalizados.

Oferece 50 GB de armazenamento — suficiente para os 10 GB de cada aplicação.

Usa instâncias de computação dedicadas.

Inclui balanceamento de carga entre instâncias.

É o plano mais econômico entre as opções que atendem a todos esses requisitos.

Basic não oferece todos os recursos necessários, enquanto Free e Shared não fornecem instâncias dedicadas.
Cabo Frio, Brazil

AI Explanation - verified by jltobiasq on: September 30, 2026
Question 23:
Question 23: No (B)
A prompt shield for user prompts is designed to detect attacks in the user’s direct text input, such as jailbreak attempts or instructions intended to bypass safeguards.
It does not adequately address the risks described:

Unsafe images: Requires image/content moderation before the image is processed.

Hidden instructions embedded in images: These are indirect prompt injections contained in untrusted image content or extracted text, not necessarily in the user’s typed prompt.

Therefore, configuring only a prompt shield for user prompts does not meet the goal. The answer key’s B is correct.
Wissous, France

AI Explanation - verified by User3974 on: September 09, 2026
Question 66:
Correct answer: A — Create an Amazon Bedrock custom service role for each team with access only to that team’s customer data.
Why:

Each team’s Bedrock workflow uses a separate IAM service role.

The role’s Amazon S3 permissions can be limited to only that team’s customer folder or objects.

This enforces least privilege and prevents one team’s Bedrock application from accessing another team’s data.

Access is enforced by AWS permissions, not by asking users to provide a customer name in each request.

Why the others are weaker:

A single role with broad S3 access does not provide team-level isolation.

Asking teams to specify a customer name is not an access-control mechanism.

Redacting data does not prevent unauthorized access.

A bucket policy alone is insufficient unless it explicitly enforces the required team-role restrictions.

The key exam concept is: use separate roles with narrowly scoped S3 permissions for data segregation.
Hyderabad, India

AI Explanation - verified by User8047 on: October 02, 2026
Question 22:
Correct answer: B — Needs of the customer
In an agile project, the highest priority is delivering customer value. If organizational processes do not add value, the team should not follow them blindly; it should examine whether they support the customer’s needs and project outcomes.

Customer needs: Primary focus in agile; guides prioritization and decision-making.

Organization’s needs: Important constraints, but processes should be tailored when they create waste.

Agile lead/project manager: Their role is to facilitate value delivery, not prioritize their own preferences.

The project manager should work with stakeholders and relevant organizational leaders to adapt or remove unnecessary processes while maintaining essential governance, compliance, and quality controls.
Cyberjaya, Malaysia

AI Explanation - verified by mapulengkoetlisi on: October 01, 2026
Question 114:
Expected answer: A — Sell long-term investments and use the proceeds to reduce the bank overdraft.
The business is tying up funds in a bank overdraft, which is short-term finance. Selling a long-term investment releases cash that can be used to reduce this overdraft, lowering reliance on short-term borrowing and the associated finance cost.
Why the others are unsuitable:

B: Extending credit to customers increases receivables, so more cash is tied up in working capital.

C: Replacing obsolete inventory does not reduce the overall inventory investment; it simply changes its composition.

D: Paying suppliers earlier reduces payables. This uses cash and therefore increases the funds tied up in working capital.

Technical note: In a strict accounting calculation, repaying an overdraft reduces current liabilities and can increase net working capital. However, the question is using “investment in working capital” in the practical cash-management sense: reducing the need for short-term finance. Therefore, A is the intended answer.
Maseru, Lesotho

AI Explanation - verified by User4550 on: September 08, 2026
Question 29:
Question 29: Yes — Azure AD Identity Protection is appropriate.
Azure AD Identity Protection (now Microsoft Entra ID Protection) detects risky sign-ins, including sign-ins from:

Unfamiliar locations or IP addresses

Anonymous or malicious IP addresses

Leaked credentials

Unusual sign-in behavior

You can configure a sign-in risk policy to respond automatically when a risky sign-in is detected. One possible control is require password change, typically for high-risk sign-ins.
Therefore, the answer key’s A (Yes) is correct.
Why not Privileged Identity Management (PIM)? Azure AD Privileged Identity Management manages and monitors privileged administrative roles. It does not evaluate users’ sign-in risk or automatically force password changes based on an unfamiliar IP address.
Norwich, United Kingdom

AI Explanation - verified by User8545 on: September 26, 2026
Can pcs with differet / or ip range can communicate with each other?
Yes, PCs in different IP ranges can communicate, but they usually need a router or Layer 3 switch to route traffic between their networks.
Example:

PC A: 192.168.1.10/24

PC B: 192.168.2.10/24

These are different subnets. They can communicate if:

Both PCs have a correct default gateway

A router or Layer 3 switch connects the subnets

Routing and firewall rules allow the traffic

Without a router, they generally cannot communicate directly because each PC believes the other is on a different network and sends the traffic to its gateway.
The /24 is the subnet prefix length. It determines which addresses are considered local. For example, with 192.168.1.0/24, addresses from 192.168.1.1 through 192.168.1.254 are in the same subnet. A PC at 192.168.2.x is outside that subnet.
Also, PCs in the same broad IP range may still be unable to communicate if VLANs, subnet masks, ACLs, or firewalls separate them.
Quezon City, Philippines

AI Explanation - verified by User5051 on: September 25, 2026
i am getting the option to create folder on right clicking the different components like Forms, /email templates etc not on workspace
That is expected. In Marketo, folders are created inside each Design Studio asset type, not directly at the workspace level.
For example:

Design Studio > Emails ? create an email-template folder

Design Studio > Landing Pages ? create a landing-page-template folder

Add the relevant assets to each folder

Right-click the folder and choose Share Folder

Select the destination workspaces

You generally need to share the email-template folder and landing-page-template folder separately because they belong to different asset areas. The folder is created in the Center of Excellence workspace; Default is not required unless it is one of the workspaces you want to share with.
Faridabad, India

AI Explanation - verified by User1028 on: September 22, 2026
Question 5:
The correct answer is A: Prepare the training data.
Even when data is described as consistent and uniform, it must still be prepared before training. In Azure Machine Learning, preparation can include:

Confirming the data has the required columns and data types

Handling missing or duplicate records

Converting data into a suitable format

Selecting or engineering useful features

Splitting it into training, validation, and test sets

The normal sequence is:

Prepare the training data

Select an algorithm or configure AutoML

Train the model

Evaluate its performance

Tune hyperparameters if needed

Deploy the model

You cannot meaningfully evaluate, tune, or deploy a model before it has been trained. Even uniform data therefore needs to be made ready for the specific machine-learning task.
Chennai, India

AI Explanation - verified by User4573 on: September 18, 2026
Question 66:
The answer key appears incorrect. I believe the correct answer is: Yes.
The Bulk invite users operation in Microsoft Entra ID is designed to invite multiple external users from a CSV file. It creates guest user objects in the tenant and sends invitation emails to the listed addresses.
Why:

The CSV contains the external users’ email addresses.

The bulk invitation feature supports inviting many guest users in one operation.

Each invited user becomes a guest account in contoso.com.

The explanation given in the question is also misleading. New-AzureADMSInvitation creates an invitation for an individual user, but it could be run repeatedly in a script; it is not required when using the portal’s bulk operation.
Therefore, assuming the CSV follows the required Microsoft Entra bulk-invitation format, the proposed solution does meet the goal.
Noida, India

AI Explanation - verified by nhoxzznhox15 on: September 12, 2026
Question 137:
Correct answer: C — AWS Network Firewall with a Lambda-created drop rule.
Why:

AWS Network Firewall can inspect and block traffic across a VPC when traffic is routed through the firewall. A Drop action rule can deny traffic from the suspicious source IP.

GuardDuty findings are sent to Security Hub.

A Lambda function can be invoked when Security Hub receives a new GuardDuty finding, extract the source IP, and update the Network Firewall policy with a blocking rule.

Why the others are incorrect:

GuardDuty threat lists: Used to identify or increase the severity of findings; they do not directly block VPC traffic.

AWS WAF: Protects supported web applications, such as CloudFront or Application Load Balancers. It does not provide general VPC-wide traffic blocking.

GuardDuty suppression rules: Suppress or hide findings. They do not block the suspicious traffic.

A practical implementation would also need appropriate IAM permissions and a mechanism to update or remove expired block rules. The firewall must be correctly placed in the VPC traffic path for the drop rule to be effective.
Duong Minh Châu, Vietnam

AI Tutor 👋 I’m here to help!

Cisco 100-490 Exam Prep Supporting Cisco Routing & Switching Network Devices (Page 3 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Cisco 100-490 Exam Prep
Supporting Cisco Routing & Switching Network Devices (Page 3 )