A network administrator notices that a switch's CPU utilization is consistently high and the network is experiencing intermittent slowdowns. The switch logs show repeated MAC address flapping between two ports. What is the most likely cause?

A faulty NIC is generating excessive collisions.

A switching loop is causing broadcast storms.

A rogue DHCP server is assigning incorrect IP addresses.

The switch's VLAN configuration is misconfigured.

A network technician is troubleshooting a connectivity issue on a switch port. The port is connected to a workstation, and the link light is on, but the workstation cannot obtain an IP address via DHCP. The technician runs `show mac address-table` and sees the workstation's MAC address on the port. What is the most likely cause?

The switch port is administratively down.

The workstation's NIC is faulty.

The port is configured as an access port in the wrong VLAN.

After resolving a network outage, a junior administrator is asked to document the incident. Which of the following is the most important information to include in the documentation to support future troubleshooting?

The time and date the issue was reported.

The exact steps taken to resolve the issue, including commands and configurations changed.

The brand and model of the network equipment involved.

The names of the users who reported the issue.

A web server is experiencing slow response times. The administrator runs `netstat -an` and sees many connections in the `SYN_RECEIVED` state. What is the most likely cause?

The server's DNS is misconfigured.

The server's TCP window size is too small.

The server's network cable is faulty.

The server is under a SYN flood attack.

EC-CouncilCertified Cybersecurity Technician

Domain 6Objective 1

Network Troubleshooting CCT Practice Questions (Page 8)

Part of the Network Monitoring and Troubleshooting domain, which makes up ~14% of our current practice bank.

51questions here

11free pages

10concepts

Questions 36–40

36application · medium
A network administrator notices that a switch's CPU utilization is consistently high and the network is experiencing intermittent slowdowns. The switch logs show repeated MAC address flapping between two ports. What is the most likely cause?
Select an answer first
37expert · hard
A network technician is troubleshooting a connectivity issue on a switch port. The port is connected to a workstation, and the link light is on, but the workstation cannot obtain an IP address via DHCP. The technician runs `show mac address-table` and sees the workstation's MAC address on the port. What is the most likely cause?
Select an answer first
38application · medium
After resolving a network outage, a junior administrator is asked to document the incident. Which of the following is the most important information to include in the documentation to support future troubleshooting?
Select an answer first
39expert · hard
A web server is experiencing slow response times. The administrator runs `netstat -an` and sees many connections in the `SYN_RECEIVED` state. What is the most likely cause?
Select an answer first
40foundation · easy
A technician is troubleshooting a wireless network that experiences intermittent drops. The technician suspects interference from neighboring access points. Which tool would help identify overlapping Wi-Fi channels?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Troubleshooting CCT Practice Questions (Page 8)

Questions 36–40

A network administrator notices that a switch's CPU utilization is consistently high and the network is experiencing intermittent slowdowns. The switch logs show repeated MAC address flapping between two ports. What is the most likely cause?

After resolving a network outage, a junior administrator is asked to document the incident. Which of the following is the most important information to include in the documentation to support future troubleshooting?

A web server is experiencing slow response times. The administrator runs `netstat -an` and sees many connections in the `SYN_RECEIVED` state. What is the most likely cause?

A technician is troubleshooting a wireless network that experiences intermittent drops. The technician suspects interference from neighboring access points. Which tool would help identify overlapping Wi-Fi channels?

Keep studying — Network Monitoring and Troubleshooting