CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 11:

  Which of the following should a network administrator configure when adding OT devices to an organization's architecture?

  A. Honeynet

  B. Data-at-rest encryption

  C. Time-based authentication

  D. Network segmentation

  Correct Answer: D

  Network segmentation is the process of dividing a network into smaller subnets or segments, each with its own security policies and access controls. This can help isolate OT devices from IT devices, guest networks, and other potential

  threats, as well as improve network performance and efficiency. Network segmentation is a recommended security practice for OT environments, as it can limit the attack surface, contain the damage of a breach, and comply with regulatory

  standards.

  https://sectrio.com/complete-guide-to-ot-network-segmentation/

• Question 12:

  Which of the following synchronizes time on all devices within a network?

  A. DHCP

  B. DNS

  C. NTP

  D. SNMP

  Correct Answer: C

  Network Time Protocol (NTP): NTP is a widely adopted protocol for synchronizing clocks across network devices. It ensures that all devices have accurate and consistent time. NTP uses a hierarchical system of time sources to maintain synchronization. References: Professor Messer - Network+ Certification Course CompTIA Network+ N10-008 Study Guide Auvik - Network Time Synchronization: Why and How It Works

• Question 13:

  An engineer recently installed a new distribution switch and connected two servers provisioned with the following IPs: 192.168.17.20 and 192.168.17.30.

  The servers cannot connect to the internet, but they can reach themselves. The engineer observes that the distribution switch has the following setup:

  interface VLAN 100 IP address 192.168.17.5 255.255.255.0

  The engineer is able to reach the core router 192.168.17.1 from the distribution switch. Which of the following is the most likely cause of this issue?

  A. A routing loop has occurred.

  B. The subnet mask is incorrect.

  C. The servers are not configured with default gateway.

  D. There is an improper Layer 1 connection between the router and the ISP modem.

  Correct Answer: C

  The servers can communicate with each other but not the internet, indicating local network connectivity is fine. The distribution switch's VLAN and IP configuration are correct, and the engineer can reach the core router, suggesting the issue is not with the switch or the router. The most likely cause is that the servers do not have a default gateway configured, which is necessary for traffic to leave the local network and reach the internet.

• Question 14:

  Which of the following devices is found in the middle tier of a three-tier network architecture?

  A. Router

  B. Multilayer switch

  C. Access switch

  D. Firewall

  Correct Answer: B

  In a three-tier network architecture, the middle tier is typically where the distribution layer resides, which connects network services to the access layer below and the core layer above. A multilayer switch operates at this level, providing routing, switching, and traffic management between subnets and VLANs.

• Question 15:

  An organization needs a solution that will inspect network traffic, determine security threats using signature-based rules, and block the traffic in real time based on the security assessment.

  Which of the following network devices will support these requirements?

  A. SIEM

  B. VPN

  C. IPS

  D. DLP

  Correct Answer: C

  An Intrusion Prevention System (IPS) is designed to inspect network traffic, identify malicious activity using signature-based rules, and block potentially harmful traffic in real time. This aligns with the requirements stated in the question.

  References:

  CompTIA Network+ N10-008 Certification Study Guide1 CompTIA Network+ N10-007 vs. N10-008: What's New

• Question 16:

  A user is unable to perform a reverse DNS lookup of an IP address to a hostname. Which of the following DNS record types is missing?

  A. PTR

  B. CNAME

  C. SOA

  D. AAAA

  Correct Answer: A

  When a user is unable to perform a reverse DNS lookup of an IP address to a hostname, the missing DNS record type is the PTR (Pointer) record. Here's what you need to know: PTR (Pointer) Record:

• Question 17:

  A technician is troubleshooting a report about network connectivity issues on a workstation. Upon investigation, the technician notes the workstation is showing an APIPA address on the network interface. The technician verifies that the VLAN assignment is correct and that the network interface has connectivity.

  Which of the following is MOST likely the issue the workstation is experiencing?

  A. DHCP exhaustion

  B. A rogue DHCP server

  C. A DNS server outage

  D. An incorrect subnet mask

  Correct Answer: A

  DHCP exhaustion is a situation where the DHCP server runs out of available IP addresses to assign to clients. This can happen due to misconfiguration, malicious attacks, or high demand. When a client requests an IP address from the DHCP server and does not receive a response, it may resort to using an APIPA address, which is a self-assigned address in the range of 169.254.0.1 to 169.254.255.254. APIPA addresses are only valid for local communication and cannot access the internet or other networks. Therefore, a workstation showing an APIPA address indicates that it failed to obtain a valid IP address from the DHCP server, most likely due to DHCP exhaustion

• Question 18:

  A network administrator is switching to IPv6 and wants to be able to use packet-tracing software on the network to monitor traffic. The administrator wants to set up the IP addressing to include the MAC address of each machine that is connected. Which of the following should the administrator implement? (Choose two.)

  A. EUI-64

  B. RFC1819

  C. APIPA

  D. DHCPv6

  E. SLAAC

  F. CIDR

  Correct Answer: AE

• Question 19:

  A network consultant is working with a software-defined network and is troubleshooting an issue with an application's instructions being properly translated for the network components. Which of the following is most likely at fault?

  A. Infrastructure layer

  B. Session layer

  C. Control layer

  D. Application layer

  Correct Answer: C

• Question 20:

  A network administrator is creating a VLAN that will only allow executives to connect to a data source. Which of the following is this scenario an example of?

  A. Availability

  B. Confidentiality

  C. Internal threat

  D. External threat

  E. Integrity

  Correct Answer: B