CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 141:

  A security team would like to use a system in an isolated network to record the actions of potential attackers. Which of the following solutions is the security team implementing?

  A. Perimeter network

  B. Honeypot

  C. Zero trust infrastructure

  D. Network segmentation

  Correct Answer: B

  A honeypot is a security mechanism set up to act as a trap, simulating vulnerabilities and services that might attract attackers. Its primary purpose is to be probed, attacked, or compromised in order to study the attackers' behavior, techniques, and methods without affecting the actual production systems.

  The isolated network containing the honeypot is separate from the main network and is designed to monitor and log any unauthorized access attempts or malicious activities. It allows the security team to study the attackers' tactics, tools, and motives while preventing them from reaching critical systems or causing damage to the actual infrastructure.

• Question 142:

  An organization has a factory automation solution that requires accurate timing between devices. Which of the following should the network administrator implement?

  A. PTP

  B. NTP

  C. NTS

  D. DoT

  Correct Answer: A

  PTP is a highly accurate time synchronization protocol used in industries and applications where precise time is critical, such as telecommunications, finance, and industrial automation. PTP is designed for precisely synchronizing the clocks of devices within a network. It provides highly accurate time distribution by synchronizing the clocks to a master clock, ensuring the devices maintain very close time alignment. This level of precision is crucial in scenarios where timing between devices needs to be synchronized, such as in factory automation solutions where events or processes are time-dependent and require exact timing for proper execution.

• Question 143:

  A network administrator needs to set up a file server to allow user access. The organization uses DHCP to assign IP addresses. Which of the following is the best solution for the administrator to set up?

  A. A separate scope for the file server using a /32 subnet

  B. A reservation for the server based on the MAC address

  C. A static IP address within the DHCP IP range

  D. A SLAAC for the server

  Correct Answer: B

  Assigning a DHCP reservation for the server based on its MAC address ensures that the file server will consistently receive the same IP address every time it connects to the network. This approach provides the advantages of DHCP (automatic assignment of IP addresses) while also guaranteeing a specific and consistent IP address for the file server, making it easy for users to access it reliably.

• Question 144:

  Which of the following ports is a secure protocol?

  A. 20

  B. 23

  C. 443

  D. 445

  Correct Answer: C

• Question 145:

  A company is hosting a secure server that requires all connections to the server to be encrypted. A junior administrator needs to harden the web server. The following ports on the web server are open:

  

  Which of the following ports should be disabled?

  A. 22

  B. 80

  C. 443

  D. 587

  Correct Answer: B

  Port 80 is used for HTTP, which is unencrypted web traffic. Since the requirement is for all connections to the server to be encrypted, disabling port 80 (which facilitates unencrypted connections) would ensure that all web traffic to the server is encrypted, typically via HTTPS on port 443.

• Question 146:

  A network technician has identified a breach and is attempting to determine how the attacker connected to a device on the network. The technician uses tcpdump to perform a port scan and receives the following result:

  

  Which of the following describes how the attacker connected to the device?

  A. The attacker used Telnet.

  B. The attacker used VNC.

  C. The attacker used SSH.

  D. The attacker used RDP.

  Correct Answer: C

• Question 147:

  A company, which is located in a coastal town, retrofitted an office building for a new data center. The underground fiber optics were brought in and connected to the switches in the basement network MDF. A server data center was built on the fifth floor with the two rooms vertically connected by fiber optics. Which of the following types of environmental sensors is most needed?

  A. Temperature sensor in the network MOF

  B. Water sensor in the network MDF

  C. Temperature sensor in the data center

  D. Water sensor in the data center

  Correct Answer: B

• Question 148:

  A network administrator needs to monitor traffic on a specific port on a switch. Which of the following should the administrator configure to accomplish the task?

  A. Port security

  B. Port tagging

  C. Port mirroring

  D. Media access control

  Correct Answer: C

• Question 149:

  A company is designing a new complex. The primary and alternate data centers will be in separate buildings 6.2mi (10km) apart and will be connected via fiber. Which of the following types of SFP is the best choice?

  A. 10GBASE-SR

  B. 10000BASE-LX

  C. 10GBASE-LR

  D. 1000BASE-SX

  Correct Answer: C

• Question 150:

  Which of the following should a junior security administrator recommend implementing to mitigate malicious network activity?

  A. Intrusion prevention system

  B. Load balancer

  C. Access logging

  D. Endpoint encryption

  Correct Answer: A