CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 1161:

  A customer wants to install a network that can utilize 802.1X authentication protocols. The customer uses a Windows laptop and does not want to install any additional software; therefore, a technician needs to configure the network to work with what is available natively. Which of the following should the technician configure for the 802.1X network?

  A. PEAP

  B. LDAP

  C. EAP-FAST

  D. NAC

  Correct Answer: B

• Question 1162:

  Which of the following accurately describes a warm site in datacenter disaster recovery?

  A. An online standby datacenter that is fully equipped without company data

  B. A backup datacenter location that is ready for equipment to be installed

  C. A backup datacenter location that is fully equipped bot not online

  D. An online, standby datacenter that is fully equipped with all company data

  Correct Answer: C

• Question 1163:

  A technician is planning a network wiring installation and must ensure all cabling meets the installation requirements for air-handling spaces in the celling in case of a fire. Which of the following characteristics does plenum cabling have to meet this requirement?

  A. Outer jacket made of PVC

  B. Outer jacket with metal shielding

  C. Low-smoke material jacket

  D. Fiber-optic glass core

  Correct Answer: C

• Question 1164:

  A network technician installs a new Layer 3 switch in the accounting office. Which of the following should the technician configure on the switch to enhance network security?

  A. Spanning tree

  B. Access control list

  C. QoS settings

  D. Duplex settings

  Correct Answer: B

• Question 1165:

  Which of the following is BEST described as a technology that allows for the segmentation of networks into different broadcast domains throughout the network?

  A. DMZ

  B. VLAN

  C. VLSM

  D. CSMA

  Correct Answer: B

• Question 1166:

  A network technician is configuring a new firewall for a company with the necessary access requirements to be allowed through the firewall. Which of the following should be applied as the LAST rule in the firewall?

  A. Secure SNMP

  B. Port security

  C. Implicit deny

  D. DHCP snooping

  Correct Answer: C

  Implicit deny is a firewall rule that blocks all traffic that is not explicitly allowed by other rules. Implicit deny is usually applied as the last rule in the firewall to ensure that only the necessary access requirements are allowed through the firewall

  and that any unwanted or malicious traffic is rejected. Implicit deny can also provide a default security policy and a baseline for auditing and logging purposes. Secure SNMP is a protocol that allows network devices to send event messages

  to a centralized server or console for logging and analysis. Secure SNMP can be used to monitor and manage the status, performance, and configuration of network devices. Secure SNMP can also help to detect and respond to potential

  problems or faults on the network. However, secure SNMP is not a firewall rule; it is a network management protocol.

  Port security is a feature that allows a switch to restrict the devices that can connect to a specific port based on their MAC addresses. Port security can help to prevent unauthorized access, spoofing, or MAC flooding attacks on the switch.

  However, port security is not a firewall rule; it is a switch feature.

  DHCP snooping is a feature that allows a switch to filter DHCP messages and prevent rogue DHCP servers from assigning IP addresses to devices on the network. DHCP snooping can help to prevent IP address conflicts, spoofing, or denialof-service attacks on the network. However, DHCP snooping is not a firewall rule; it is a switch feature.

• Question 1167:

  A Chief Information Officer (CIO) wants to control the category of sites that employees access when using the Internet web browser. This objective must be achieved to be compliant with corporate policy and avoid some security and legal risks. Which of the following devices would BEST accomplish this task? (Choose two.)

  A. IDS

  B. Proxy server

  C. Content filter

  D. Virtual firewall

  E. Hypervisor

  F. Load balancer

  Correct Answer: BC

• Question 1168:

  An administrator needs to connect to a server to install security patches. The administrator requests that port 3389 be allowed through the firewall. Which of the following access methods is the administrator looking to use?

  A. SSH

  B. Telnet

  C. SFTP

  D. RDP

  Correct Answer: D

• Question 1169:

  A network administrator has discovered a low-end managed switch connected to the company's LAN. While reading about the device's specifications on the manufacturer's website, the administrator discovers the switch does not support a command-line interface for administration. Which of the following remote access methods should the administrator use to log in to the switch?

  A. Install a VNC plugin on the web browser.

  B. Connect to the HTTPS management interface.

  C. Replace the managed switch with an unmanaged switch.

  D. Establish an SSH session.

  Correct Answer: B

• Question 1170:

  A store owner would like to have secure wireless access available for both equipment and patron use. Which of the following features should be configured to allow different wireless access through the same equipment?

  A. MIMO

  B. TKIP

  C. LTE

  D. SSID

  Correct Answer: D

  SSID stands for Service Set Identifier and is the name of a wireless network. A wireless access point (WAP) can support multiple SSIDs, which allows different wireless access through the same equipment. For example, the store owner can create one SSID for business equipment and another SSID for patron use, and assign different security settings and bandwidth limits for each SSID. MIMO stands for Multiple Input Multiple Output and is a technology that uses multiple antennas to improve wireless performance. TKIP stands for Temporal Key Integrity Protocol and is an encryption method for wireless networks. LTE stands for Long Term Evolution and is a cellular network technology. References: CompTIA Network+ Certification Exam Objectives Version 7.0 (N10-007), Objective 3.1: Given a scenario, install and configure wireless LAN infrastructure and implement the appropriate technologies in support of wireless capable devices.