CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 91:

  Which of the following services provides the network information for the address when IPv6 is used for SLAAC addressing?

  A. EUI-64

  B. IPv6 unicast routing

  C. Router advertisement

  D. DHCPv6

  Correct Answer: C

  Router advertisement is part of the Neighbor Discovery Protocol (NDP) in IPv6 and is used in Stateless Address Autoconfiguration (SLAAC) to provide network information to IPv6 hosts. Router advertisements inform hosts about the presence of routers, network prefixes for address configuration, and various other parameters necessary for the host to configure its IPv6 address and connect to the IPv6 network. This mechanism allows IPv6 devices to automatically configure themselves with an IPv6 address and other related network information without the need for a DHCPv6 server, although DHCPv6 can be used alongside SLAAC for additional configuration options like DNS server addresses.

• Question 92:

  A network administrator wants to install new VoIP switches in small network closet but is concerned about the current heat level of the room. Which of the following should the administrator take into consideration before installing the new equipment?

  A. The power load of the switches

  B. The humidity in the room

  C. The fire suppression system

  D. The direction of airflow within the switches

  Correct Answer: D

• Question 93:

  A company is designing a new complex. The primary and alternate data centers will be in separate buildings 6.2mi (10km) apart and will be connected via fiber. Which of the following types of SFP is the best choice?

  A. 10GBASE-SR

  B. 10000BASE-LX

  C. 10GBASE-LR

  D. 1000BASE-SX

  Correct Answer: C

• Question 94:

  Which of the following is most likely to be implemented to actively mitigate intrusions on a host device?

  A. HIDS

  B. NIDS

  C. HIPS

  D. NIPS

  Correct Answer: C

  HIPS is designed to operate on individual host devices (like workstations, servers, etc.) and can actively prevent and mitigate intrusions. It not only detects malicious activities but also has the capability to automatically take action against these threats, such as blocking network traffic or quarantining malware.

• Question 95:

  A customer lost the connection to the telephone system. The administration console is configured with multiple network interfaces and is connected to multiple switches. The network administrator troubleshoots and verifies the following:

  1.

  The support team is able to connect remotely to the administration console.

  2.

  Rebooting the switch shows solid link and activity lights even on unused ports.

  3.

  Rebooting the telephone system does not bring the system back online.

  4.

  The console is able to connect directly to individual modules successfully.

  Which of the following is the most likely reason the customer lost the connection?

  A. A switch failed.

  B. The console software needs to be reinstalled.

  C. The cables to the modules need to be replaced.

  D. A module failed.

  Correct Answer: A

• Question 96:

  A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?

  A. Change the email client configuration to match the MX record.

  B. Reduce the TTL record prior to the MX record change.

  C. Perform a DNS zone transfer prior to the MX record change.

  D. Update the NS record to reflect the IP address change.

  Correct Answer: B

  TTL (Time To Live): TTL is a value in a DNS record that determines the amount of time it can be cached by DNS resolvers and other devices on the internet. When making changes to DNS records, reducing the TTL beforehand helps minimize the time it takes for the changes to propagate throughout the internet.

  MX Record Change: Changing the MX (Mail Exchange) record directs email traffic to the specified mail server. However, DNS changes take time to propagate across the internet due to caching. If the TTL is set too high, old records may be cached for an extended period, leading to email delivery issues.

• Question 97:

  Which of the following security concepts is related to ensuring that encrypted data is not edited while in transit?

  A. Zero trust

  B. Integrity

  C. Availability

  D. Confidentiality

  Correct Answer: B

• Question 98:

  A network administrator wants to implement an authentication process for temporary access to an organization's network. Which of the following technologies would facilitate this process?

  A. Captive portal

  B. Enterprise authentication

  C. Ad hoc network

  D. WPA3

  Correct Answer: A

  A captive portal is a technology that facilitates the authentication process for temporary access to a network. It is commonly used in public Wi-Fi hotspots, hotels, airports, and other environments where temporary network access is provided. When users connect to the network, they are redirected to a captive portal page where they must authenticate or agree to terms and conditions before gaining access to the internet or other network resources.

• Question 99:

  Which of the following security methods uses physical characteristics of a person to authorize access to a location?

  A. Access control vestibule

  B. Palm scanner

  C. PIN pad

  D. Digital card reader

  E. Photo ID

  Correct Answer: B

  A palm scanner is a security method that uses physical characteristics of a person, specifically the unique features of their palm or hand, to authorize access to a location. This biometric method is based on the individual's palm print, which is unique to each person.

• Question 100:

  A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10GB connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

  A. Port mirroring

  B. Log aggregation

  C. Flow data

  D. Packet capture

  Correct Answer: C

  Flow data, collected through flow monitoring protocols such as NetFlow, sFlow, or IPFIX, provides aggregated information about network traffic, including details on source and destination IP addresses, ports, protocols, and more. This method doesn't capture the actual packet contents but summarizes network traffic flow.

  By leveraging flow data, the network administrator can gather information about the traffic patterns and bandwidth usage across the network. This method is less resource-intensive than performing packet captures and can provide valuable insights into the sources and destinations of the traffic causing the saturation on the 40Gb connection.