SSH is a protocol that provides a secure remote access connection to network devices.
SSH uses the well-known TCP port 23 for its communication.
A Telnet network management connection is dropped when a router reboots.
Telnet is a protocol that provides a secure remote access connection to network devices.
Telnet is preferred over SSH for security reasons.

Answer(s): A,C

Show Answer Next Question

QUESTION: 4

Which address facilitates the routing of packets over an IP network?

physical
transport
network
MAC

Answer(s): C

Show Answer Next Question

QUESTION: 5

Which two IPv4 addresses can be assigned to a host computer? (Choose two.)

255.255.255.255
10.1.1.20
0.0.0.0
192.168.10.15
292.10.3.4

Answer(s): B,D

Show Answer Next Question

Download PDF Next Page

Viewing page 5 of 13
Viewing questions 21 - 25 out of 72 questions

Post your Comments and Discuss Cisco 100-490 exam prep with other Community members:

Comments:

Name:

100-490 Exam Discussions & Posts
100-490 AI Verifications

Sylvester Jafta on: December 19, 2024
nibasiwe laway
EUROPEAN UNION

Fiber on: June 23, 2026
This exam was so stressful but I got through it. The prep materials really made a difference.
Ireland

Pids on: August 15, 2026
This exam hard but prep questions helped.
United Kingdom

Pip on: July 14, 2026
The exam was a bit tougher than I thought it would be honestly. But the AI assistant on this site really helped out when I got stuck with concepts.
Italy

Strace on: August 24, 2026
The exam was kinda tough but these practice questions helped it feel manageable.
Monaco

Vlan on: June 29, 2026
The exam was tough. Glad I used the prep material here.
Spain

Synack on: September 11, 2026
Man this exam was a beast but these questions helped me chill. Glad I used the prep material here.
Israel

Zsh on: September 07, 2026
Felt a bit lost at first but the practice questions here helped me learn.
Taiwan

Udp on: September 20, 2026
Working and studying sucks but man I'm relieved.
Sweden

Synack on: June 16, 2026
Worked all day crammed a bit at night passed the exam boom.
Japan

Heap on: August 07, 2026
Man this exam was stressful. Thankful for the practice questions here they made it less painful.
Australia

Cgroups on: September 21, 2026
Thought I'd bomb the exam but them practice questions taught me good.
Uruguay

Regex on: August 23, 2026
I wasn't feeling too confident at first but the practice questions on this website actually helped a lot.
Switzerland

Sudoer on: September 19, 2026
The exam was tough but these questions helped.
Canada

Symlink on: July 15, 2026
Between hectic days at work and squeezing in short study sessions I finally knocked out this cert and feel so relieved.
Saudi Arabia

Runlevel on: August 07, 2026
Studied late after work and passing was a relief.
Austria

Symlink on: July 15, 2026
Had little time but passed.
Monaco

Parity on: September 01, 2026
Used this website for exam prep saved me a ton of time and cash by cramming relevant questions slow and steady passed it eventually.
United States

Replica on: August 22, 2026
Slowly worked through exam prep and passed.
Austria

Sudoer on: September 08, 2026
The exam covered more than expected and caught me off guard a bit. The AI assistant on this site really helped fill some gaps though.
Slovenia

Ring0 on: August 04, 2026
Long workdays short study times but man passing this exam feels so good.
Finland

Daemon on: August 19, 2026
Slow start but passed finally.
Italy

VlanId on: July 05, 2026
This exam is tough but these questions saved me.
Switzerland

Anycast on: August 30, 2026
The exam was tougher than I thought. The AI assistant on this site really helped a lot.
Canada

Payload on: September 20, 2026
The exam had way more in it. AI assistant on this site really helped though.
Iceland

Endianness on: July 23, 2026
I didn't feel confident at first but the practice questions on this site helped me understand the material a lot better.
Ireland

Initd on: September 02, 2026
This exam was way more difficult than I expected but the material helped. The AI assistant on this site was a real lifesaver for understanding tricky parts.
Mexico

Vlan on: July 28, 2026
Didn't feel ready but practice questions helped.
Italy

Kmem on: June 20, 2026
Saved me time and money slowly cramming for this cert but I managed to pass the exam.
Croatia

Loopback on: August 16, 2026
Took me some time but I reviewed questions and passed.
Germany

Initd on: September 04, 2026
The exam was harder than I thought but using practice questions from this site made it manageable.
Kuwait

Heap on: July 05, 2026
I wasn't super confident but the practice questions here really helped me learn fast.
Sweden

Traceroute on: July 09, 2026
Passed this exam but man it was tough.
Ireland

Dotfile on: August 23, 2026
The exam was harder than I thought but these practice questions from this site made it manageable.
Iceland

Geetha on: October 02, 2026
Q 91)you have a GitHub repository. You need to ensure that all the code in the repository is scanned for vulnerabilities. What should you use? Dependabot alerts branch protection rules CodeQL actions GitHub Advisory Database databases The answer should be marked as Code QL analysis and not dDependabot alerts .CodeQL is GitHub's code-scanning technology. It analyzes the repository's source code to identify potential security vulnerabilities and coding errors.
Mumbai, India

Uptime on: September 16, 2026
This cert was tough but doable.
Germany

Payload on: August 18, 2026
Man this exam was tougher than I thought but with some good prep it’s totally doable.
Canada

Sysctl on: July 21, 2026
Wasn't confident first learned with practice.
Germany

Grep on: July 30, 2026
Crammed with this site and barely passed but saved me time.
United States

Daemon on: August 06, 2026
Crammed like crazy using the exam prep on this site saved me some time and money for sure happy with how it turned out.
Australia

Scsi on: September 01, 2026
Thought I was toast but the practice questions helped heaps.
Argentina

Sudoer on: July 21, 2026
The exam was harder than I thought but the practice questions on this website made it manageable.
Sweden

Anycast on: September 08, 2026
I not feel confident at first but practice questions on this website help me learn lots.
Croatia

ZeroDay on: July 04, 2026
Cramming on this site saved me time and money passed slowly but surely.
Italy

Bitshift on: July 27, 2026
The exam was way tougher than I thought and covered more stuff than what I'd expected. But the AI assistant on this site helped me a lot to get through the complex parts with good guidance.
Austria

Tarball on: July 08, 2026
Didn't feel confident at first but practice questions helped a lot.
Iceland

Packet on: September 08, 2026
Crammed like mad using this website's practice questions saved a ton of time and passed the exam bit by bit.
United Kingdom

Shebang on: September 13, 2026
The exam was tough but these questions were spot on so I passed.
South Korea

Namespaces on: July 06, 2026
The exam was tougher than I thought but with the practice questions here it felt manageable.
Denmark

Traceroute on: August 15, 2026
I passed the exam but wow it was tough those practice questions were lifesavers.
Hong Kong

AI Explanation - verified by ajaykamath69055 on: September 22, 2026
Question 15:
Correct answer: A — ACID transactions
Delta Lake adds ACID transaction support to data lakes. This provides:

Atomicity: a write fully succeeds or does not appear.

Consistency: table state remains valid.

Isolation: concurrent operations do not corrupt one another.

Durability: committed changes persist.

This is a major advantage over a basic data lake, where simultaneous reads and writes can result in incomplete or inconsistent data.
Why the others are less suitable:

Flexible schemas: common data lakes often support flexible or schema-on-read data.

Open-source formats: common data lakes commonly use open formats such as Parquet.

Scalable storage: cloud data lakes already provide scalable storage.

The key distinction is that Delta Lake provides database-like reliability while retaining data-lake scalability and open storage.
Chiyoda City, Japan

AI Explanation - verified by User6133 on: September 20, 2026
Which of the following is a feature of a next-generation SIEM system?
Correct answer: B. Automated response actions
A next-generation SIEM combines log collection and correlation with advanced capabilities such as:

Behavioral and anomaly detection

Threat intelligence integration

User and entity behavior analytics

Automated response actions, often through SOAR integration

Why the others are less appropriate:

Virus signatures: Associated primarily with antivirus or endpoint protection.

Security agent deployment: Usually an endpoint-management or EDR function.

Vulnerability scanning: Typically performed by vulnerability-management tools, though a SIEM may integrate their results.

The key distinction is that a next-generation SIEM can help detect and automatically respond to threats, rather than only recording and displaying events.
Kissimmee, United States

AI Explanation - verified by khaleel_mehdi on: September 28, 2026
Question 36:
The answer key shows A (1), but I believe the correct answer is B (2).
A single Teams auto attendant supports:

A business-hours greeting

An after-hours greeting

A holiday greeting

However, with business hours set to Monday–Friday, 09:00–17:00, the same after-hours greeting would normally apply to both:

Weekday evenings/nights

Saturdays and Sundays

That does not meet the requirement for separate weekday after-hours and weekend greetings.
A possible two-auto-attendant design is:

Auto attendant 1

- Business hours: office-hours greeting - Holidays: national-holiday greeting - Outside those periods: route calls to Auto attendant 2

Auto attendant 2

- Weekend schedule: weekend greeting - Its after-hours flow: weekday outside-office-hours greeting
Therefore, two auto attendants are needed to provide four distinct time-based greetings.
Hyderabad, India

AI Explanation - verified by User6966 on: September 23, 2026
Question 19:
Correct answer: A, B, C, D, and E — all listed options.
Snowflake supports MFA authentication through:

JDBC

SnowSQL

Snowflake Web Interface (UI)

ODBC

Python connector

MFA adds a second verification factor, such as a passcode from an authenticator app, in addition to the username and password. The exact setup can differ by client—for example, the UI may prompt interactively, while connectors may use an MFA token cache or authenticator configuration.
The key exam point is that MFA is not limited to browser logins; Snowflake supports it across these major connection methods.
Columbus, United States

AI Explanation - verified by User4405 on: September 19, 2026
Wrong answer. You use groups to assign devices to it. The use those groups as scope in policies, effectively passing devices between policies
You’re right—the answer key’s B (Use sub-rules) is incorrect. The better answer is D: Use groups.

Assign endpoints to a group based on the result of one policy.

Use that group as the scope of another policy.

This effectively passes the endpoints from one policy’s processing flow to another.

Sub-rules create branches within a single policy; they are not the standard mechanism for transferring endpoints between separate policies.
Madrid, Spain

AI Explanation - verified by User4124 on: September 08, 2026
Question 4:
Correct answer: D. Shadow IT
Shadow IT is the use of applications, services, devices, or systems without the organization’s knowledge or approval. In this scenario, the R&D department is bypassing the company VPN and likely using unauthorized methods or services to access corporate resources.
Why the other options are incorrect:

Espionage: Stealing confidential information, often for a competitor or government.

Data exfiltration: Unauthorized transfer of data outside the organization. This could occur, but the question focuses on using unapproved access methods.

Nation-state attack: An attack sponsored or conducted by a government.

Shadow IT: Employees using technology or access methods outside the organization’s approved security controls.

The key clue is employees bypassing a required security control, such as the corporate VPN. That creates visibility, authentication, and monitoring risks, even if the employees do not intend to cause harm.
Biloxi, United States

AI Explanation - verified by User9046 on: September 27, 2026
Question 154:
The answer key shows B, but I believe the better answer is A — Establishment of accountability.
An information security governance program defines:

Who owns security risks and decisions

Who is responsible for implementing controls

Who reports security performance to management

How security responsibilities align with business objectives

Accountability is fundamental because security cannot be managed effectively if ownership is unclear. Compliance and audit readiness are valuable outcomes, but they are not the primary purpose of governance.
Why the other options are weaker:

B — Compliance with audit requirements: Governance may support compliance, but audit compliance is not its main objective.

C — Monitoring security incidents: This is an operational security activity, not the central purpose of governance.

D — Creation of tactical solutions: Governance establishes direction and oversight; tactical solutions belong to management and operational teams.

So, based on standard ISACA governance principles, A is more defensible than the stated answer B.
Caloocan, Philippines

AI Explanation - verified by User5938 on: September 11, 2026
resuma
Resposta: Não.
Máquinas virtuais do Azure usam o modelo IaaS, não PaaS.

IaaS: você gerencia a VM e o sistema operacional.

PaaS: o Azure gerencia a infraestrutura; você se concentra no aplicativo.

Logo, a solução proposta não atende ao objetivo.
Cabo Frio, Brazil

AI Explanation - verified by User5264 on: September 30, 2026
Question 13:
The answer key appears incorrect. I believe the best answer is C — malfunction occurring before the end of the device’s service life.
Under GHTF medical-device vigilance principles, a malfunction that occurs during the stated service life can indicate a device deficiency and is generally reportable if it caused, or could cause, death or serious injury.
The other options describe recognized situations that may exempt an event from reporting:

Deficiency found before patient use: usually does not require an adverse-event report because no patient exposure occurred.

Event caused solely by the patient’s condition: may not be reportable if the device did not contribute.

Malfunction protection operated correctly: generally exempt when the device’s safety mechanism worked as intended and prevented harm.

The key distinction is that “before the end of service life” is not an exemption; it makes the malfunction more significant.
Nanjing, China

AI Explanation - verified by User8851 on: September 30, 2026
Question 81:
Correct answer: B — Swap the HDMI cable with a new one.
The key clue is that the problem continues when the same laptop and HDMI cable are connected to a monitor. This makes the projector less likely to be the cause. The HDMI cable is the shared component and may have an intermittent fault, such as damaged conductors or poor connector contacts.

A. Adjust resolution: Incorrect because an incompatible resolution usually causes no display, distortion, or an unsupported-mode message—not intermittent flickering.

B. Swap the HDMI cable: Correct. Replacing the common, easily tested component is the appropriate troubleshooting step.

C. Replace the projector: Incorrect because the issue also occurs with a monitor.

D. Configure refresh rate: A mismatched refresh rate can cause visual problems, but the repeated flicker across displays points more strongly to the cable.

The general troubleshooting method is to isolate the fault by replacing or testing components shared by both setups.
Lilongwe, Malawi

AI Explanation - verified by User7918 on: September 25, 2026
Question 7:
Correct answer: D — From Power Query, merge the Orders query and the Order Line Items query.
Why:

Orders contains order-level information, such as the order date.

Order Line Items contains the products, quantities, and line amounts associated with each order.

Merging them on the order key, such as OrderID, places the order date alongside each line item. This allows you to calculate total order value and analyze it over time.

Product attributes can remain in the Products table and be related to the resulting line-item table through ProductID.

Using Power Query performs the merge during data refresh. The resulting model requires less work when users interact with report visuals, helping minimize interaction times.
The other choices are less suitable:

Merging line items with products addresses product attributes but does not first provide the order-level date and value needed for time analysis.

DAX calculated columns or lists add unnecessary model complexity.

Calculating order counts is not the first requirement and does not combine the required order and line-item data.

Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User5505 on: September 20, 2026
Question 5:
Question 5 is about Power Query data profiling in a Fabric dataflow.
To find the minimum and maximum values for every column, you need the column profile, because it provides column statistics such as:

Minimum

Maximum

Average

Count

Null/empty values

Distinct values

The relevant selections are:

Enable column profile

Enable details pane

Show column profile in details pane

The answer key showing only B and E appears incomplete because the question asks for three selections. Show column value distribution is not sufficient—it displays value-frequency patterns, not the min/max statistics.
Also note that Power Query profiling may use only the first 1,000 rows by default. Since this dataflow has 500 rows, the default profiling range covers the complete result set.
Fort Mill, United States

AI Explanation - verified by User8578 on: September 09, 2026
Question 102:
Correct answer: B. Masking
Data masking hides sensitive portions of information while preserving enough format for troubleshooting or identification. For example:
4111 1111 1111 1111 ? ** ** 1111
This is appropriate for a database log file because logs may need to show that a transaction occurred without exposing the full credit card number.

Tokenization: Replaces the value with a nonsensitive token, often reversible through a secure token vault.

Hashing: Converts data into a one-way fixed-length value, generally used for integrity checks or password storage.

Obfuscation: A broad term for making data difficult to understand; it is less precise than masking in this context.

Therefore, masking is the most specific choice.
San Jose, United States

AI Explanation - verified by rjbnyc on: September 15, 2026
Question 240:
Correct answer: D — Deploy one VM scale set configured with ScaleSetVM orchestration mode.
ScaleSetVM is the traditional, uniform orchestration mode. It is designed for a group of identical VM instances managed as a scale set, making it the appropriate choice for quickly deploying five equivalent instances.
Why the others are incorrect:

Deploy five individual VMs: This does not create a VM scale set.

Modify Availability Zones or Size settings: These actions do not create the required scale set and add unnecessary steps.

VM orchestration mode: This is Flexible orchestration, intended for more individually managed VMs and mixed configurations. It is not the best choice for a straightforward group of identical instances.

The key distinction is: ScaleSetVM = uniform, identical instances; VM = flexible, individually managed instances.
Oviedo, United States

AI Explanation - verified by francis4fnc on: September 13, 2026
Question 73:
Question 73 is flawed as displayed. It asks for two answers, but the key lists only B.
The likely correct answers are:

B. Versioned configuration files — Infrastructure is defined in machine-readable files and tracked in version control, allowing repeatable provisioning and change history.

D. Docker files — Assuming “Doctor files” is a typo for Dockerfiles, a Dockerfile declaratively defines how to build a container image and is commonly considered infrastructure/configuration as code.

Why the others are less suitable:

A. Cloned virtual machine images — These are prebuilt infrastructure artifacts, but cloning an image is not itself a code-based infrastructure definition.

C. Change management database records — A CMDB records information about infrastructure; it does not define or provision that infrastructure.

So, the answer key is incomplete: it should likely be B and D, assuming D means Dockerfiles.
Lagos, Nigeria

AI Explanation - verified by User9738 on: September 22, 2026
Question 50:
A resposta correta é A — Comprar Provisioned Throughput para o modelo customizado.
No Amazon Bedrock, um modelo customizado ou fine-tuned precisa de capacidade dedicada para ser usado em inferência. O Provisioned Throughput reserva essa capacidade e permite invocar o modelo por meio das APIs do Bedrock.
As outras opções não são necessárias:

B: Não é preciso implantar o modelo em um endpoint do Amazon SageMaker, pois o Bedrock já oferece a infraestrutura de inferência.

C: O SageMaker Model Registry é usado para gerenciar modelos no SageMaker, não é requisito para modelos customizados no Bedrock.

D: Não existe uma etapa geral de “conceder acesso” ao modelo customizado como requisito principal de uso. O ponto essencial é adquirir o Provisioned Throughput.

A ideia da questão é distinguir entre usar um modelo base sob demanda e usar um modelo customizado, que exige capacidade provisionada no Bedrock.
São Paulo, Brazil

AI Explanation - verified by User7024 on: September 29, 2026
Question 52:
The answer key shows B: Containers, but I believe that is incorrect.
The better answer is C: Type 2 hypervisor.

A hypervisor allows multiple virtual machines to run on one physical server.

Each VM can have its own operating system, so the customer can consolidate Windows, Linux, and Unix servers.

A Type 2 hypervisor runs on a host operating system and can be deployed on local hardware, helping address data privacy and avoiding ongoing public-cloud charges.

Why containers are a poor fit:

Containers share the host operating system’s kernel.

They are well suited to consolidating applications, but they generally cannot independently run a mix of unrelated kernels such as Windows, Linux, and Unix on one host.

In a real-world design, a Type 1 hypervisor would usually be preferred for server consolidation, but it is not one of the choices.
Lilongwe, Malawi

AI Explanation - verified by User3039 on: September 14, 2026
Question 13:
Correct answer: No
The answer key shows B, and it is correct.

Azure Cosmos DB is a globally distributed NoSQL database service. It stores and retrieves application data, but it does not provide the complete environment for building, testing, and deploying predictive analytics models.

Azure Machine Learning is the appropriate service for this requirement. It supports creating experiments, training and testing models, and deploying them for predictions.

Azure Machine Learning Studio provides the browser-based interface for these tasks.

Therefore, recommending Azure Cosmos DB does not meet the requirement.
Wan Chai, Hong Kong

AI Explanation - verified by User5302 on: September 09, 2026
Question 77:
Correct answer: C. Channel configuration
Using multiple memory channels—such as dual-channel or quad-channel—allows the memory controller to access multiple RAM modules in parallel. This increases memory bandwidth, which is the amount of data that can be transferred per second.
Why the others are not best:

Error correction (ECC): Improves data reliability but does not maximize bandwidth.

RAM voltage: Increasing voltage may affect stability or speed, but it is not the primary method for increasing module bandwidth.

Physical module size: Refers to the capacity or form factor of the RAM, not its data-transfer bandwidth.

For a gaming system, install compatible modules in the motherboard’s recommended paired slots to enable dual-channel operation. Higher channel counts depend on the platform and motherboard.
Johannesburg, South Africa

AI Explanation - verified by User5178 on: September 28, 2026
Question 4:
Correct answer: D. Shadow IT
Shadow IT occurs when employees use systems, applications, services, or network connections that have not been approved or managed by the organization. The R&D department bypassing the company VPN to access company resources suggests it is using an unauthorized access method.
Why the others are incorrect:

Espionage: Stealing confidential information, often for a competitor or foreign entity.

Data exfiltration: Unauthorized removal or transfer of data.

Nation-state attack: A cyberattack sponsored or conducted by a government.

Shadow IT: Unapproved technology or services used outside IT oversight.

The security concern is that bypassing the VPN may evade monitoring, access controls, and security inspection.
Orlando, United States

AI Explanation - verified by User3112 on: September 24, 2026
Question 34:
Correct answer: D — All of the choices.
An Intrusion Detection System (IDS) is commonly described using three fundamental functional components:

Information sources: Collect security-related data, such as network packets, system logs, audit records, or application events.

Analysis: Examines the collected data to identify suspicious activity, attacks, or policy violations.

Response: Takes or recommends action, such as generating alerts, logging the event, or supporting a protective response.

Therefore, Response, Information Sources, and Analysis are all core IDS functions, making “All of the choices” the best answer.
Addis Ababa, Ethiopia

AI Explanation - verified by User7687 on: September 07, 2026
Question 18:
The answer key shows B and D, but I believe the stronger answers are A and D.

A — Correct: Identify the data required by Salesforce, its dependencies, and how it should be validated. Verification scripts help confirm record counts, relationships, field mappings, and data integrity after migration.

D — Correct: Use a full sandbox and perform trial migrations using realistic—or appropriately masked—legacy data. This exposes transformation, volume, dependency, and integration issues before production cutover.

B — Less appropriate: Phased user migration and parallel operation primarily address user adoption and rollout risk, not the technical risks of data migration.

C — Less appropriate: Although sandbox testing and integration testing are valuable, the option emphasizes test-data generation rather than validating the migration with representative legacy data. “A full sandbox for all systems” may also be impractical.

The exam concept is to profile and validate the data first, then rehearse the migration with realistic data in a nonproduction environment.
Rome, Italy

AI Explanation - verified by User7080 on: September 27, 2026
Question 37:
Question 37: No.
Changing the semantic model from DirectQuery to another mode, such as Import, does not resolve the underlying issue: the source column contains case-sensitive values, while Power BI’s data model handles text comparisons in a case-insensitive way.
This mismatch can cause:

Undefined or blank values

Relationship matching problems

Duplicate or conflicting keys

Errors when querying the model

Changing storage mode does not normalize or uniquely identify the values. The data itself must be corrected before it reaches the model—for example:

Normalize all values to upper- or lowercase in the source query or Power Query.

Add an index or surrogate key when values that differ only by case must remain distinct.

Therefore, the answer key’s B — No is correct.
Puchong, Malaysia

AI Explanation - verified by User2319 on: September 22, 2026
Yes but thez sais p"primary value TO customers
You’re right that the wording makes D tempting. “Primary value to customers” can sound like the business outcome—personalized campaigns.
However, for this Salesforce question, A is still the stronger answer because it describes Data Cloud’s foundational value:

Data Cloud combines data from multiple systems.

It resolves and organizes that data into a unified customer view.

That unified view enables downstream actions such as personalized campaigns, segmentation, analytics, and activation.

D describes one important outcome, mainly for marketing:
> Listen to behavior ? understand customers ? act with personalization.
But Data Cloud is broader than campaign personalization. It supports sales, service, commerce, analytics, and other activations too. Therefore:

A = core platform value

D = a resulting business use case or benefit

So the wording is somewhat ambiguous, but the intended exam answer is A.
Touques, France

AI Explanation - verified by User1909 on: October 02, 2026
Question 3:
Correct answer: A — Use API calls to access and integrate third-party datasets from AWS Data Exchange.
AWS Data Exchange is designed to help organizations discover, subscribe to, and access third-party datasets. After subscribing to a dataset, the company can integrate it into its analytics platform using supported delivery methods, including APIs or delivery to services such as Amazon S3.
Why the other options are incorrect:

B — AWS DataSync: Transfers data between storage systems. It is not a marketplace or integration service for third-party datasets.

C — Kinesis Data Streams and CodeCommit: CodeCommit stores source code, not third-party analytical datasets. Kinesis is for streaming data, not retrieving datasets from repositories.

D — Kinesis Data Streams and ECR: Amazon ECR stores container images, not third-party datasets.

The key clue is “third-party datasets” plus “least operational overhead.” AWS Data Exchange provides a managed way to obtain external data instead of building custom ingestion and integration processes.
Dhaka, Bangladesh

AI Explanation - verified by nhoxzznhox15 on: September 12, 2026
Question 137:
Correct answer: C — AWS Network Firewall with a Lambda-created drop rule.
Why:

AWS Network Firewall can inspect and block traffic across a VPC when traffic is routed through the firewall. A Drop action rule can deny traffic from the suspicious source IP.

GuardDuty findings are sent to Security Hub.

A Lambda function can be invoked when Security Hub receives a new GuardDuty finding, extract the source IP, and update the Network Firewall policy with a blocking rule.

Why the others are incorrect:

GuardDuty threat lists: Used to identify or increase the severity of findings; they do not directly block VPC traffic.

AWS WAF: Protects supported web applications, such as CloudFront or Application Load Balancers. It does not provide general VPC-wide traffic blocking.

GuardDuty suppression rules: Suppress or hide findings. They do not block the suspicious traffic.

A practical implementation would also need appropriate IAM permissions and a mechanism to update or remove expired block rules. The firewall must be correctly placed in the VPC traffic path for the drop rule to be effective.
Duong Minh Châu, Vietnam

AI Explanation - verified by User4647 on: October 05, 2026
Question 32:
Correct answers: A and C

A — Consumption-based pricing: AWS generally uses a pay-as-you-go model. You pay for the resources you consume rather than purchasing hardware upfront or paying for unused capacity.

C — Economies of scale: AWS purchases and operates infrastructure at a very large scale, allowing it to reduce costs and pass some savings to customers through lower service prices.

Why the others are incorrect:

Perpetual licenses: These involve paying once for permanent software ownership and are not a primary AWS Cloud economic benefit.

AWS Enterprise Support at no additional cost: Enterprise Support has an additional charge.

Bring-your-own-hardware model: AWS provides and manages the underlying cloud infrastructure; customers do not normally bring their own physical servers.

The key distinction is that cloud economics reduce upfront capital expenditure and let organizations align costs more closely with actual usage.
Cairo, Egypt

AI Explanation - verified by User5768 on: September 21, 2026
Why asynchronous not appropriate ?
Asynchronous inference is not necessarily impossible, but it is less appropriate for this scenario.

Asynchronous inference is designed for applications that submit individual inference requests, place them in a queue, and retrieve results later. It is useful when requests may take a long time or when traffic is intermittent.

Batch transform is designed specifically to run inference over an entire large dataset stored in Amazon S3 and produce an output dataset.

The key distinction is:

Large dataset/offline processing ? Batch transform

Large or slow individual requests processed later ? Asynchronous inference

Because the question emphasizes archived data, multiple-GB datasets, and no need for immediate predictions, the exam’s intended answer is Batch transform.
Bangkok, Thailand

AI Explanation - verified by User2976 on: September 24, 2026
what is athena
Amazon Athena is a serverless interactive query service that lets you run SQL queries directly against data stored in services such as Amazon S3.
Key points:

No servers or database infrastructure to provision.

Uses standard SQL.

Supports formats such as JSON, CSV, Parquet, and ORC.

You typically define the table structure with AWS Glue Data Catalog or Athena’s own schema definitions.

Charges are generally based on the amount of data scanned, so partitioning and columnar formats can reduce cost.

It does not copy the data into a separate database; it reads the files in S3 when you run a query.

For Question 2, Athena is appropriate because the logs already exist in S3 and the company needs simple, on-demand analysis with minimal operational overhead.
Bengaluru, India

AI Explanation - verified by User6020 on: September 23, 2026
Question 1:
Question 1 is asking about the benefits and requirements of Direct Product Profitability (DPP).
The correct answers are A, B and C.

A — Improved management of storage space: Correct.

DPP calculates the profitability of individual products after considering costs such as warehousing, handling and delivery. Management can identify products that occupy substantial space but generate low profit.

B — Improved supplier relationships: Correct.

More detailed product-cost information supports better discussions with suppliers about prices, delivery arrangements, packaging and product range decisions.

C — Improved pricing decisions: Correct.

DPP provides a more realistic product profit figure than simply comparing selling price with purchase cost. This helps management set prices and negotiate discounts.

D — Non-product-specific costs must be apportioned: Incorrect.

DPP aims to allocate costs using appropriate cost drivers, rather than make arbitrary apportionments. For example, warehouse handling costs may be assigned based on handling activity.

E — Profitability of each customer group: Incorrect.

DPP focuses on the profitability of individual products, not customer groups. Customer profitability analysis is a separate technique.
Maseru, Lesotho

AI Explanation - verified by User8458 on: September 21, 2026
Question 19:
Correct answer: D — IP service affinity
IP service affinity allows Discovery to remember which protocol or service successfully identified a device at a particular IP address.
In this scenario:

Discovery tries the SSH probe first.

SSH fails.

Discovery tries SNMP, which succeeds.

Discovery records SNMP as the preferred service for that IP.

Future discoveries try SNMP first.

Why the others are incorrect:

Classification identifies the type of device, such as a server, router, or printer.

Credential affinity remembers which credentials work for a device.

MID Server affinity associates a device or network with a particular MID Server.

IP service affinity specifically controls the preferred discovery protocol or service.

Bengaluru, India

AI Explanation - verified by User9895 on: September 11, 2026
Question 12:
Correct answer: B. Port security
A MAC flooding attack sends many fake source MAC addresses to a switch. This can overwhelm the switch’s MAC address table, causing it to broadcast traffic out multiple ports and potentially allowing an attacker to capture traffic.
Port security mitigates this by:

Limiting the number of MAC addresses allowed on a switch port

Restricting ports to specific known MAC addresses

Taking an action—such as dropping frames or shutting down the port—when the limit is exceeded

Why the others are less suitable:

Load balancer: Distributes application traffic; it does not protect switch MAC tables.

IPS: May detect some attack traffic, but is not the primary control for switch-port MAC limits.

NGFW: Filters network traffic at the firewall, but does not directly control MAC addresses learned by a switch.

Cambridge, United Kingdom

AI Explanation - verified by User4712 on: October 01, 2026
Question 41:
Correct answer: A — Configure the External access settings.
External access controls communication between your organization’s Teams users and people in other organizations. You can configure an allow list containing only the five suppliers’ email domains, such as supplier1.com.
Why the others are incorrect:

Guest access: Controls external users invited into your teams as guests. It is not the primary setting for restricting federated communication by domain.

Messaging policy: Controls messaging features, such as chat or message editing, rather than which organizations users can communicate with.

Org-wide Teams settings: Contains broad Teams-wide configuration, but domain-based external communication is configured under External access.

The key distinction is: External access = communication with external organizations; Guest access = collaboration inside your teams and channels.
Schongau, Germany

AI Explanation - verified by User8125 on: September 09, 2026
Question 49:
La risposta corretta è C. DRP (Disaster Recovery Plan).
Un DRP descrive le procedure da seguire dopo un disastro per ripristinare sistemi, infrastrutture e servizi essenziali. Nel caso della municipalità, il tornado ha distrutto il data center principale, quindi il personale deve attivare il piano di disaster recovery, ad esempio utilizzando un sito alternativo o sistemi di backup.
Le altre opzioni:

BCP (Business Continuity Plan): è più ampio e mira a mantenere le funzioni essenziali dell’organizzazione durante un’interruzione. Il DRP è una componente più specifica del BCP.

Communication plan: stabilisce come comunicare con dipendenti, cittadini e altre parti interessate, ma non ripristina i sistemi.

IRP (Incident Response Plan): gestisce la risposta iniziale a un incidente di sicurezza, come un attacco informatico, non principalmente il recupero da un disastro fisico.

Da ricordare: DRP = ripristino dopo un disastro; BCP = continuità complessiva delle attività.
Rome, Italy

AI Explanation - verified by de_jong_patri58 on: September 28, 2026
Question 70:
Question 70 is testing fact-table grain in a star-schema design.

A class/teacher fact should contain one row per Class ID. It can support the count of classes and contain attributes such as Teacher First Name and Period Number.

An attendance fact should contain one row per attendance event, such as Class ID + student + date. It supports attendance counts by day and monthly averages.

Therefore, Teacher First Name belongs with the class/teacher-level data. Period Number is also a class attribute, so it should normally be stored there—or in a related Class dimension—not in the attendance fact.
The displayed answer key says:

Teacher First Name ? Teacher fact

Period Number ? Attendance fact

I believe the second mapping is questionable, and likely incorrect under proper star-schema modeling. It would only make sense if Period Number exists solely in View2 or is intentionally duplicated for reporting. The exhibit is missing here, so the exact intended mapping cannot be verified.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User5833 on: October 02, 2026
Question 17:
Correct answer: E. only new data added to the Eventhouse
When you enable OneLake availability for a KQL database, Fabric makes newly ingested data available in OneLake. It does not automatically backfill or copy the data that already exists in the Eventhouse.
Therefore:

Existing Eventhouse data: remains available only in the KQL database.

Data ingested after enabling the feature: is copied to OneLake and can be accessed through OneLake file explorer.

New databases: are irrelevant; the setting applies to the selected KQL database.

The exam clue is the timing: enabling OneLake availability affects future ingestion, not historical data.
Madison, United States

AI Explanation - verified by User3627 on: September 21, 2026
Question 11:
Correct answer: C — The log is updated every 10 minutes or when 20 MB of accounting data is collected, whichever occurs first.
When Accounting is enabled, the Security Gateway collects traffic-usage information before writing it to the management log. This data is not necessarily written continuously.
The update occurs when either condition is met:

10 minutes have elapsed, or

20 MB of accounting data has accumulated

Therefore, a large amount of traffic can cause an update before the 10-minute interval. The interval is not a configurable firewall kernel parameter, and it does not depend on Management Server process load.
Ulan Bator, Mongolia

AI Explanation - verified by romuloruella on: September 27, 2026
Question 218:
Correct answer: D. Regularly checking agent communication with the central console
Vulnerability-management platforms often rely on agents installed on endpoints. If an agent stops communicating, the system may have incomplete or outdated vulnerability data. Checking agent health and communication status is:

Repetitive and time-consuming

Based on measurable conditions, such as last check-in time

Easy to automate with alerts, dashboards, or scheduled reports

Important for ensuring scan coverage

The other choices are less suitable as the first automation target:

Assigning custom recommendations usually requires analyst judgment and context.

Analyzing false positives can sometimes be assisted by automation, but validation often requires human review.

Rendering an additional executive report increases reporting activity rather than reducing a core operational workload.

Guará, Brazil

AI Explanation - verified by khaleel_mehdi on: September 28, 2026
Question 16:
Correct answer: B — Microsoft Teams Call Quality Dashboard (CQD)
The Call Quality Dashboard is designed to analyze the quality of Teams calls and meetings. It provides metrics such as:

Packet loss

Latency

Jitter

Call quality by user, device, network, location, or building

For this scenario, you need to test calls from branch offices and view the packet loss experienced during those calls. CQD can help identify whether low-bandwidth locations are affecting call quality.
Why the other options are incorrect:

Teams Usage Report: Shows adoption and usage statistics, not detailed call-quality metrics.

Teams Device Usage Report: Reports which devices are being used and how, but does not provide detailed packet-loss analysis.

Microsoft Network Testing Companion: Helps assess network readiness before deployment, but it is not the primary tool for analyzing packet loss from actual Teams calls.

Hyderabad, India

AI Explanation - verified by User6058 on: September 10, 2026
Question 139:
Correct answers: D and E.

D — Value analysis: Correct. It examines an existing product to identify ways of reducing its cost while still providing the required functions, quality and reliability.

E — Kaizen costing: Correct. It involves making continuous, small improvements and cost reductions while the product is already in production.

Why the others are incorrect:

Functional analysis: It is not limited to minimizing the cost of the originally defined functions. It examines what functions are required and how they can be provided at the lowest overall cost.

Value engineering: Usually applies to the design and development of a new product, rather than being a fundamental redesign of existing organisational processes. That description is closer to business process re-engineering.

Target costing: The target cost is generally established during the product development stage, before production begins. It is not continuously reset while the product is in production.

Maseru, Lesotho

AI Explanation - verified by User7219 on: September 08, 2026
Question 87:
Answer: Footprinting the internal network
I can’t see the referenced image, so this explanation is based on the question text and answer choices. The unusual DNS activity likely shows queries for internal hostnames or internal naming patterns. Gathering those names helps an attacker map the organization’s internal systems, domains, and network structure—this is internal network footprinting.
Why the other options are less likely:

Determining ISP-assigned address space: Usually involves public reconnaissance, such as WHOIS or regional Internet registry information.

Bypassing DNS sinkholing: Would require evidence that malicious domains are resolving outside the organization’s sinkhole controls.

Achieving initial access: DNS log entries alone do not demonstrate compromise or entry.

Exfiltrating data: DNS tunneling generally involves repeated queries containing encoded or unusually long data, not merely internal host discovery.

The answer key’s C is reasonable, though the missing image limits certainty.
Ibadan, Nigeria

AI Explanation - verified by jeff.impale663 on: October 04, 2026
Question 2:
Yes—your reasoning is correct. The stated “No” for User2 appears incorrect, assuming User2 completes MFA.
For User2:

User2 is in Group1, so CA2 applies.

CA2 targets Office 365.

CA2 requires MFA OR an app protection policy.

User2 has no app protection policy, but if User2 successfully completes MFA, the OR condition is satisfied.

The device being noncompliant does not matter because CA2 does not require device compliance.

CA1 applies only to Global Administrators. Unless User2 is also a Global Administrator, CA1 does not apply.

Therefore, User2 should be granted access to Microsoft 365 after completing MFA.
Correct result for User2: Yes, not No. The answer key’s explanation incorrectly describes CA2 as requiring stricter combined controls, even though the policy explicitly says “Require one of the selected controls.”
Vantaa, Finland

AI Explanation - verified by User5977 on: September 14, 2026
Question 1:
Correct answer: A
The Lambda function should:

Write a structured log entry to CloudWatch Logs containing:

- API operation name - HTTP response code - Application version extracted from the User-Agent header

Create a CloudWatch Logs metric filter that:

- Matches the log entries - Increments a metric for each operation - Uses response code and application version as metric dimensions
This produces metrics such as:

text ApiRequests Operation=GetOrders ResponseCode=500 Version=2.4.0

This allows the company to monitor each API operation separately for every response code and application version.

B is incorrect: CloudWatch Logs Insights queries analyze logs but do not directly publish metrics in this manner.

C is incorrect: ALB access logs do not contain arbitrary Lambda response metadata as custom fields.

D is incorrect: X-Ray traces and insights are not the appropriate mechanism for creating these custom, dimensioned application metrics.

New York, United States

AI Explanation - verified by sophia786.ahmed on: October 02, 2026
Question 553:
Correct answers: A. CBWFQ and E. PQ
Both are congestion-management mechanisms: they decide which packets are placed into queues and how those queues are serviced when an interface is congested.

CBWFQ (Class-Based Weighted Fair Queuing): Creates traffic classes and assigns each class a guaranteed bandwidth or queueing treatment.

PQ (Priority Queuing): Uses multiple queues with strict priority. Higher-priority queues are serviced before lower-priority queues, making it useful for delay-sensitive traffic—but it can starve lower-priority traffic.

Why the others are incorrect:

FRTS: Traffic shaping for Frame Relay; it controls the transmission rate rather than selecting packets during congestion.

CAR: Polices traffic by rate, typically dropping or remarking packets that exceed a limit.

PBR: Policy-Based Routing; it selects forwarding paths and is not a QoS queueing mechanism.

Birmingham, United Kingdom

AI Explanation - verified by User5476 on: October 01, 2026
Question 27:
Correct answers: B and D

B — The glass core component is encased in a cladding.

Fiber-optic cable has a glass or plastic core surrounded by cladding. The cladding has a different refractive index and helps keep the light confined within the core.

D — Light is transmitted through the core of the fiber.

Data is carried as pulses of light through the fiber’s core, not through the cladding.
Why the other options are incorrect:

BNC connectors are associated mainly with coaxial copper cabling, not standard fiber connections.

Data does not pass through the cladding; the cladding helps reflect and contain the light.

RJ-45 connectors are used with copper Ethernet cabling, not fiber-optic interfaces.

Amman, Jordan

AI Explanation - verified by User6966 on: September 23, 2026
Question 37:
Question 37 asks you to choose three true statements about Snowflake data loading.
Correct answers: A, C, and D.

A — VARIANT "null" values are not the same as SQL NULL values: True

- A JSON null stored in a VARIANT column is a value representing JSON null. - SQL NULL means the value is missing or unknown. Snowflake treats them differently in comparisons and functions.

B — Frequent, single-row DMLs: False

- Snowflake is optimized for batch-oriented processing rather than many individual INSERT or UPDATE statements. - Loading data in batches generally provides better performance and efficiency.

C — Validate data before loading into the target table: True

- Data should be checked for format, structure, data types, and quality before it reaches the production target. - Snowflake supports validation approaches such as checking staged files and using COPY INTO validation options.

D — Use staging tables to manage MERGE statements: True

- Data is commonly loaded into a staging table first. - A MERGE can then compare staging data with the target and perform controlled inserts, updates, or deletes.
The answer key’s A, C, D is consistent with Snowflake loading b
Erlanger, United States

AI Explanation - verified by mapulengkoetlisi on: September 30, 2026
Question 45:
You’re right to question it. If option A uses the year-end fair value of $45, then the answer key appears to be incorrect.
For an equity-settled share-based payment:

Use the grant-date fair value: $30

Do not remeasure to the year-end value of $45

Update the estimate of employees expected to vest

Expected employees vesting:
125 - 10 - 25 = 90
Expected options:
90 × 500 = 45,000
Expense for 20X4:
45,000 × $30 × 1/3 = $450,000
Correct journal entry:

Dr Share-based payment expense $450,000

Cr Equity/share option reserve $450,000

The $45 year-end value would incorrectly produce $675,000 for the year. That remeasurement approach applies to cash-settled awards, not equity-settled awards.
Anonymous

AI Explanation - verified by User6146 on: September 30, 2026
Question 1:
Answer: B — network route
The /32 in 10.10.13.10/32 identifies the destination host, not necessarily the route type in R1’s routing table.
R1 checks its routing table for a route that matches 10.10.13.10:

Default route: 0.0.0.0/0; used only when no more specific route exists.

Network route: A route covering the destination, such as 10.10.13.0/24.

Host route: An exact 10.10.13.10/32 entry in the routing table.

Floating static route: A backup static route with a higher administrative distance.

The answer key indicates that the exhibit shows a broader route covering 10.10.13.10, so R1 uses a network route, not an exact host route. Note that the exhibit itself is unavailable here, so this explanation relies on the stated answer and options.
Gilgit, Pakistan

AI Explanation - verified by User2425 on: September 29, 2026
Question 17:
Correct answer: C. Firewalls
Firewalls primarily control network traffic between security zones, such as the internet and an internal network. They are useful against external attacks, but they are not particularly effective against insiders who already have authorized access to systems or data.
The other controls directly address insider risk:

Least privilege: Limits users to only the access necessary for their job.

Background checks: Help identify potentially risky individuals before employment.

Separation of duties: Ensures that one person cannot complete a sensitive process alone, reducing fraud and abuse.

The answer key’s C is correct.
Rota, Spain

AI Explanation - verified by User5177 on: September 23, 2026
Question 12:
Question 12 tests data profiling in Power Query Editor, specifically the difference between distinct and unique values.

Distinct values = 69

There are 69 different state values in the State column. Each value is counted once for this metric, regardless of how many times it appears.

Unique values = 4

Four state values appear only once in the entire column.
For example, if a column contains:
CA, CA, NY, TX, FL
there are 4 distinct values (CA, NY, TX, FL), but 3 unique values (NY, TX, and FL appear once).
So the selections indicated by the answer key—69 distinct values and 4 unique values—are consistent with Power Query’s column distribution metrics. The column quality area is a separate metric that shows valid, error, and empty values; it does not determine the distinct or unique counts.
New Delhi, India

AI Tutor 👋 I’m here to help!

Cisco 100-490 Exam Prep Supporting Cisco Routing & Switching Network Devices (Page 5 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Cisco 100-490 Exam Prep
Supporting Cisco Routing & Switching Network Devices (Page 5 )