nerdexam
CompTIA

XK0-004 · Question #321

Users are reporting is inaccessible from the user VLAN, but there collaborate.company.com is no issue connecting to the system's web page from the DMZ. Given the following outputs from commands run on

The correct answer is C. Users cannot access the system because the connectivity port is running on the incorrect IP. The. A service on the system is bound to the wrong IP address or interface, making it reachable from the DMZ but not from the user VLAN.

Troubleshooting and Diagnostics

Question

Users are reporting is inaccessible from the user VLAN, but there collaborate.company.com is no issue connecting to the system's web page from the DMZ. Given the following outputs from commands run on the system: Which of the following explains why users are unable to access the system from the user VLAN, and how can the administrator remediate this issue?

Exhibit

XK0-004 question #321 exhibit

Options

  • AUsers cannot access the system because the IP subnet mask is /24. The remediation for this
  • BUsers cannot access the system because the DNS server has the incorrect IP address. The
  • CUsers cannot access the system because the connectivity port is running on the incorrect IP. The
  • DUsers cannot access the system because the default gateway has the wrong interface. The

How the community answered

(34 responses)
  • A
    29% (10)
  • B
    15% (5)
  • C
    47% (16)
  • D
    9% (3)

Why each option

A service on the system is bound to the wrong IP address or interface, making it reachable from the DMZ but not from the user VLAN.

AUsers cannot access the system because the IP subnet mask is /24. The remediation for this

A /24 subnet mask is standard and valid; it would not selectively block user VLAN access while allowing DMZ access unless there were broader misconfigurations not described here.

BUsers cannot access the system because the DNS server has the incorrect IP address. The

An incorrect DNS server IP causes name resolution failures, but such failures would typically affect both VLANs equally rather than only the user VLAN.

CUsers cannot access the system because the connectivity port is running on the incorrect IP. TheCorrect

When a service binds to a specific IP address rather than all interfaces (0.0.0.0), it only accepts connections destined for that IP. If the service is bound to the DMZ-facing IP, clients from the user VLAN will be rejected because their traffic arrives on a different interface. The remediation is to reconfigure the service to listen on the correct IP or bind it to all interfaces.

DUsers cannot access the system because the default gateway has the wrong interface. The

A misconfigured default gateway affects outbound routing from the system itself, not inbound connections from specific VLANs, and would not explain why DMZ access continues to work.

Concept tested: Service IP binding and network interface reachability

Topics

#VLAN connectivity#service binding#network troubleshooting#port configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full XK0-004 Practice