Troubleshooting Methodology & Baselines
This represents the absolute first step a network technician must perform when managing a new support ticket or addressing an automated system alert
What is identify the problem?
This general term is used to describe a structured packet of data wrapped with a protocol header at any given functional layer of the OSI stack
What is a protocol data unit (PDU)?
This physical property describes the loss of signal strength over a distance, which is mathematically expressed in decibels (dB)
What is attenuation?
This is the term for a wiring fault where both ends of a single wire in one pair are accidentally wired to terminals belonging to a completely different pair
What is a split pair?
This type of intermediate physical network device operates like a multiport repeater by flooding an incoming signal out of every single port, creating a massive collision domain
What is a hub?
This mathematical method is applied by a layer 3 device to combine an IP address with a network mask to reveal the exact network ID portion
What is an ANDing process?
This term describes a routing table entry that maps a specific individual destination host address using a /32 prefix in IPv4 or a /128 prefix in IPv6
What is a host route?
This is the main unit of a logically segmented network where the security configuration and trust requirements are identical for every host inside it
What is a network security zone?
This media access mechanism is implemented by 802.11 Wi-Fi networks to manage contention on half-duplex shared channels through ACK verification and RTS/CTS signals
What is CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance)?
This service-related entry point marks the boundary where an access provider's public network terminates and the customer's private network architecture begins
What is the demarcation point (or demarc)?
This specific style of questioning should be utilized during the initial user interview to let them explain symptoms in their own words without introducing pre-made assumptions
What are open-ended questions?
This process describes how a protocol running at a specific layer on a local host communicates directly with its corresponding layer on a remote host
What is a same layer interaction?
This metric is the nonlinear ratio of the intended data signal compared to background noise, where lower noise values closer to zero degrade the link.
What is the signal-to-noise ratio (SNR)?
This device applies an electrical signal to a cabled conductor, allowing a technician to use an inductive probe to trace a specific wire within a massive bundle
What is a network tone generator (or toner)?
This network mapping method isolates collisions to an individual full-duplex switch port by establishing a dedicated point-to-point circuit between the node and the switch
What is microsegmentation?
This is the maximum length of a standard IPv4 address, which is subdivided internally into four distinct 8-bit blocks known as octets
What is 32 bits?
This specific value is hard-coded into routers to express the relative trustworthiness of a route source, where directly connected routes hold a value of zero
What is administrative distance (AD)?
This secure buffer zone sits directly between an organization's internal private LAN and the external untrusted public Internet
What is a perimeter network (or screened subnet/DMZ)?
This wireless standard introduced multi-user, multiple-input, multiple-output (MU-MIMO) support on non-overlapping channels specifically in the 5 GHz band
What is IEEE 802.11ac (Wi-Fi 5)?
This foundation-level digital signaling connection multiplexes 24 individual 64 Kbps time slots into a single 1.544 Mbps full-duplex leased line link
What is a T1 line (or DS1 circuit)?
"Did it ever work?" and "What has changed since it was last working?" are two critical questions a technician must ask during this phase of identifying symptoms
What is determining if anything has changed?
This specific structural layer of the OSI model is responsible for the actual transmission and receipt of signals that represent raw bits of data
What is the Physical layer (Layer 1)?
This copper cabling standard supports 10 Gbps data rates over a maximum distance of 100 meters using frequencies up to 500 MHz
What is Category 6A (Cat 6A)?
Cable certifiers look for this specific logarithmic value, representing the difference between measured insertion loss and the maximum permitted loss allowed by a standard
What is the margin?
If a managed switch port has been intentionally turned off by an administrator using a CLI command, its functional status will be diagnosed as this
What is administratively down/down?
This is the mathematical formula used by network engineers to find the precise number of assignable, valid host IP addresses available within any given subnet mask scope
What is (2^n - 2)?
This occurs when two routers misconfigure their tables to point to each other as the next hop for a network, causing packets to bounce until their TTL hits zero
What is a routing loop?
This is the name given to the internal-facing firewall in a screened subnet architecture that acts as a narrow gateway to enforce strict traffic filtering.
What is a choke firewall?
This specific 802.11 standard was the first to use the 5 GHz frequency band along with an OFDM multiplexed carrier scheme to deliver up to 54 Mbps data rates
What is the 802.11a standard?
This full-fiber FTTP connection infrastructure runs a single strand to a street cabinet and deploys optical splitters to stream traffic over to a customer's ONT
What is a Passive Optical Network (PON)?
This is the term for the precise area or number of systems affected by an outage, which helps determine both incident priority and the possible source of the fault
What is the scope of the problem?
This layer organizes the raw stream of incoming bits from the physical medium into structured units called frames
What is the Data Link layer (Layer 2)?
This cabling type is marked as CMP under the U.S. National Electrical Code and is treated with fire-retardant materials for installation inside HVAC voids
What is plenum-rated cable?
This form of local crosstalk is measured on the receive pairs at the transmitter end and is usually caused by excessive untwisting of wire pairs during termination
What is Near End Crosstalk (NEXT)?
This specific error counter increments on a switch port when an incoming Ethernet frame contains a 32-bit checksum that does not match the frame's contents
What is a cyclic redundancy check (CRC) error?
Under the legacy 1980s classful addressing layout, any IP address with a first octet decimal range from 128 through 191 is classified as this
What is a Class B network?
This distance vector loop prevention mechanism explicitly blocks a router from advertising a routing update back out of the exact interface it learned it from
What is split horizon?
This security technology performs real-time traffic or log analysis by matching data streams against signature patterns, but it relies on an external block mechanism like a firewall to halt an attack
What is an Intrusion Detection System (IDS)?
These three non-overlapping channels must be selected when configuring a 2.4 GHz 802.11b/g network in the Americas to eliminate co-channel interference
What are channels 1, 6, and 11?
This specific virtual private network protocol uses an Authentication Header (AH) and Encapsulating Security Payload (ESP) to encrypt whole IP packets at Layer 3
What is IPSec (Internet Protocol Security)?
This standard troubleshooting approach dictates starting diagnostics at the layer most likely causing the issue, then moving either up or down the stack depending on what the tests reveal
What is the divide and conquer approach?
This layer is functionally responsible for moving data packets around a network of networks—known as an internetwork—using logical network and host IDs
What is the Network layer (Layer 3)?
This specific copper connector features an 8-position/8-contact configuration and is the standard interface used for terminating Ethernet twisted pair cabling
What is an RJ45 connector?
This specific value combines crosstalk metrics by energizing three out of four twisted pairs simultaneously to confirm the cable can support Gigabit or 10 GbE applications
What is power sum crosstalk (such as PSNEXT)?
This error counter tracks frames that are larger than the maximum permissible Ethernet standard of 1,518 bytes, which often points to a jumbo frame misconfiguration
What is a giant?
This specific private IP address pool, defined under RFC 1918, restricts its non-routable address space to a range between 172.16.0.0 and 172.31.255.255
What is the Class B private address range?
This state defines a network environment where all running dynamic routers have completely synchronized their databases and agree on the entire active topology
What is a steady state (or convergence)?
This active, inline security solution can immediately stop a detected network attack by dropping packets or injecting a TCP reset packet directly to the attacking host
What is an Intrusion Prevention System (IPS)?
This WPA3 encryption feature mandates the use of a Password Authenticated Key Exchange (PAKE) protocol to fully eliminate the four-way handshake vulnerabilities of WPA2
What is Simultaneous Authentication of Equals (SAE)?
This remote access feature allows a VPN client to browse the public Internet directly using its home ISP routers while simultaneously tunneling private corporate traffic to a company gateway
What is a split tunnel?
This action must be taken by a technician prior to applying a software patch or altering a configuration in the production environment to ensure a rapid rollback is possible
What is making a configuration or data backup?
This structural layer tags data with application port numbers to track communication between multiple applications running on the source and destination hosts
What is the Transport layer (Layer 4)?
This smaller registered jack connector supports up to 6 positions but typically has only the center two contacts wired (6P2C) to carry analog phone lines
What is an RJ11 connector?
This tool shines visible light down an active optical strand to glow brightly at the exact spot where a glass fiber is broken, kinked, or poorly spliced
What is a visual fault locator?
This value represents the hardware address assigned hard-coded by a manufacturer, where the first 3 bytes are the organizationally unique identifier (OUI)
What is a burned-in address (or universal address)?
This reserved, non-routable IPv4 address block is utilized by an operating system like Windows to check that the local TCP/IP stack is loaded correctly
What is the loopback range (127.0.0.0/8 or 127.0.0.1)?
This dynamic protocol is characterized as a hierarchical link state system where networks within an autonomous system are segmented into discrete areas off Area 0
What is OSPF (Open Shortest Path First)?
This major drawback occurs when anomaly-based detection tools incorrectly flag legitimate, harmless production network traffic as a malicious attack pattern.
What is a false positive?
This specific 802.11 framing mechanism uses an encrypted management tunnel to natively insulate Wi-Fi clients from deauthentication and key recovery attacks
What is Management Frame Protection (MFP or 802.11w)?
This administration server or host is deployed inside a cloud network or screened subnet to provide a single, heavily fortified port-control entry point for engineers managing application servers
What is a jump box (or jump server)?
This final step of the CompTIA troubleshooting model gathers lessons learned to improve network design, adjust standard procedures, and guide future infrastructure investments
What is document findings, actions, and outcomes?
This specific layer is responsible for administering the dialog between a client and server, managing the data transfer, and tearing down the connection
What is the Session layer (Layer 5)?
This type of short-range, dual-conductor copper cabling uses 75-ohm characteristic impedance and is typically terminated with BNC or F-type connectors for CCTV or broadband
What is coaxial (coax) cable?
This specific phenomenon occurs when light is reflected straight back down an optical cable toward the source, which can be minimized by utilizing APC connectors
What is back-reflection (or optical return loss)?
This specific physical hardware layer component is responsible for driving data over the transmission media and is housed inside a NIC or hot-swappable module
What is a transceiver?
This specific address represents the local building entry point or lobby, acting as the designated router interface to forward packets bound for the public Internet
What is a default gateway?
This translation method is configured on an edge gateway to map a pool of internal private addresses onto a dynamic pool of external public IP addresses
What is dynamic NAT?
This architectural concept is achieved when an organization chains firewalls, IDS sensors, spam filters, and host-based agents together to form layered network security
What is defense in depth?
This enterprise authentication protocol uses an 802.1X EAPOW framework to securely pass wireless client credentials to a backend RADIUS or TACACS+ server
What is Extensible Authentication Protocol (EAP)?
This specific cloud deployment model consists of a shared architecture where a service provider runs multitenant public cloud infrastructure for various subscriber organizations
What is a public cloud?
This specific state of a configuration item, sometimes called a "golden configuration," documents the approved state used to audit and detect unexpected drift
What is a baseline configuration?
This layer handles the conversion of character sets, such as translating between ASCII and Unicode data formats
What is the Presentation layer (Layer 6)?
This type of fiber optic cabling features a tiny core of 8 to 10 microns, uses a laser to generate near-infrared signals, and supports long-distance runs of many kilometers
What is single mode fiber (SMF)?
To preserve safety, a technician must always wear appropriate protective goggles and never look directly into these two dangerous light-emitting locations
What are active transceiver ports and the ends of fiber cables?
These hot-swappable modules use LC connectors to terminate fiber links and are an enhanced pluggable form factor engineered to natively support 10 GbE rates
What are SFP+ transceivers?
This address allows a packet to reach all nodes within a subnet simultaneously and is structurally formed when all the host bits in the address are set to 1
What is a broadcast address?
This specific version of the Border Gateway Protocol is the exterior gateway standard used to manage classless network prefixes across Internet ISPs
What is BGP with CIDR (or NLRI data)?
These specialized network agreements are deployed between companies to formally define the detailed performance metrics, scope, and responsibilities under which a service is delivered
What is a Service Level Agreement (SLA)?
This secondary web-browser redirect gateway requires a hotspot visitor to accept legal terms or submit a secure HTTPS payment before granting active Internet routing
What is a captive portal?
This precise cloud service framework allows an enterprise to directly rent core hardware computing blocks like virtual servers, load balancers, and block-level storage nodes
What is Infrastructure as a Service (IaaS)?
This is the term given to things, processes, or people that directly contribute to the delivery of an IT service and must be identified by a unique label
What are service assets?
This topmost layer provides a direct interface for software programs on network hosts to exchange data across a lower-level communications channel
What is the Application layer (Layer 7)?
This category of fiber optic cabling uses less expensive optics like LEDs or VCSELs to send multiple light waves, making it ideal for shorter distances like LANs
What is multimode fiber (MMF)?
This is the maximum length allowed for a cabled channel link when combining solid core structural cabling (up to 90m) with stranded wire patch cords
What is 100 meters?
This physical port link status indicator is characterized by a solid amber illumination on an active enterprise switch port
What is blocked by the spanning tree algorithm?
This classless subnetting design technique gives an engineer the flexibility to allocate subnets of varying sizes across a network using different length masks
What is Variable Length Subnet Masking (VLSM)?
To allow internal administrators to connect securely over SSH to a router even if a physical interface port fails, best practice dictates creating this virtual interface type
What is a loopback interface?
This form of logging level control prevents low-priority informational alerts (levels 5, 6, or 7) from being forwarded out to a remote syslog receiver
What is configuring the maximum logging level (setting the level to 4)?
This unauthorized backdoor is created on a corporate network when an employee plugs a consumer-grade SOHO wireless access point directly into a live LAN wall jack without permission
What is a rogue access point?
This data center traffic pattern describes the cascading, server-to-server information transfers that occur internally when handling cloud resource workloads
What is east-west traffic?
This dedicated system consists of tools and databases that collect, store, manage, update, and present information about tracked configuration items
What is a configuration management system (CMS)?
This process occurs on a receiving host when it strips headers from an incoming packet layer-by-layer to extract the original data payload
What is decapsulation?
This high-density connector aggregates parallel optical links by terminating 12 or more fiber strands into a single compact ferrule the size of a duplex LC pair
What is a multi-fiber push-on (MPO) connector?
This type of cable termination issue occurs when conductors 3 and 6 are swapped with conductors 1 and 2, which can be done intentionally to create a crossover cable
What is a crossed pair (or TX/RX transposition)?
This specific hardware configuration parameter allows multiple physical network interfaces on a single server card to be grouped to form a single logical channel link
What is NIC teaming (or link aggregation)?
This prefix notation method is used to consolidate routing table entries by using bits normally assigned to a network ID to mask the underlying complexity of multiple /24 blocks
What is Classless Inter-Domain Routing (CIDR or supernetting)?
This protocol field value is stamped directly onto the header of an IP datagram to identify that the payload contains EIGRP routing data
What is protocol number 88?
This specific type of packet filter examines packet headers independently at Layer 3 without keeping any record or memory of previously processed session packets
What is a stateless firewall?
This specific wireless attack occurs when a threat actor spoofs both the SSID and BSSID of an authorized AP, then deploys a DoS attack to force target stations to connect to it
What is an evil twin attack?
This modernization approach completely eliminates manual server setup by relying on carefully written scripts and playbooks to generate identical, idempotent machine builds
What is Infrastructure as Code (IaC)?