CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 131:

  Users cannot connect to an internal website with an IP address 10.249.3.76. A network administrator runs a command and receives the following output:

  1 3ms 2ms 3ms 192.168.25.234

  2 2ms 3ms 1ms 192.168.3.100

  3 4ms 5ms 2ms 10.249.3.1

  4 *

  5 '

  6 *

  7 *

  Which of the following command-line tools is the network administrator using?

  A. tracert

  B. netstat

  C. tcpdump

  D. nmap

  Correct Answer: A

  Understanding Tracert:

  uk.co.certification.simulator.questionpool.PList@4dafadfc Output Analysis:

  Comparison with Other Tools:

  Usage:

  References:

  CompTIA Network+ study materials on network troubleshooting and diagnostic tools.

• Question 132:

  A customer recently moved into a new office and notices that some wall plates are not working and are not properly labeled

  Which of the following tools would be best to identify the proper wiring in the IDF?

  A. Toner and probe

  B. Cable tester

  C. Visual fault locator

  D. Network tap

  Correct Answer: A

  A toner and probe tool, also known as a tone generator and probe, is used to trace and identify individual cables within a bundle or to locate the termination points of cables in wiring closets and patch panels. It generates a tone that can be picked up by the probe, helping technicians quickly and accurately identify and label wall plates and wiring. This is the best tool for identifying proper wiring in the Intermediate Distribution Frame (IDF). References: CompTIA Network+ Exam Objectives and official study guides.

• Question 133:

  Which of the following protocols provides remote access utilizing port 22?

  A. SSH

  B. Telnet

  C. TLS

  D. RDP

  Correct Answer: A

  SSH (Secure Shell) is a protocol used to securely connect to a remote server/system over a network. It operates on port 22 and provides encrypted communication, unlike Telnet which operates on port 23 and is not secure. TLS is used for

  securing HTTP connections (HTTPS) and operates on ports like 443, while RDP (Remote Desktop Protocol) is used for remote desktop connections and operates on port 3389.

  Reference:

  The CompTIA Network+ materials and tutorials cover SSH as the standard protocol for secure remote access, highlighting its operation on port 22.

• Question 134:

  Which of the following is the most secure way to provide site-to-site connectivity?

  A. VXLAN

  B. IKE

  C. GRE

  D. IPsec

  Correct Answer: D

  IPsec (Internet Protocol Security) is the most secure way to provide site-to- site connectivity. It provides robust security services, such as data integrity, authentication, and encryption, ensuring that data sent across the network is protected from interception and tampering. Unlike other options, IPsec operates at the network layer and can secure all traffic that crosses the IP network, making it the most comprehensive and secure choice for site-to-site VPNs.References: CompTIA Network+ study materials and NIST Special Publication 800-77.

• Question 135:

  Which of the following connectors provides console access to a switch?

  A. ST

  B. RJ45

  C. BNC

  D. SFP

  Correct Answer: B

  Console Access:

  uk.co.certification.simulator.questionpool.PList@721d3324 RJ45 Connector:

  Comparison with Other Connectors:

  Practical Application:

  References:

  CompTIA Network+ study materials on network devices and connectors.

• Question 136:

  Which of the following steps in the troubleshooting methodology includes checking logs for recent changes?

  A. Identify the problem.

  B. Document the findings and outcomes.

  C. Test the theory to determine cause.

  D. Establish a plan of action.

  Correct Answer: A

  Reference: CompTIA Network+ Certification Exam Objectives - Troubleshooting section.

• Question 137:

  Which of the following should a network administrator configure when adding OT devices to an organization's architecture?

  A. Honeynet

  B. Data-at-rest encryption

  C. Time-based authentication

  D. Network segmentation

  Correct Answer: D

  Network segmentation involves dividing a network into smaller segments or subnets. This is particularly important when integrating OT (Operational Technology) devices to ensure that these devices are isolated from other parts of the

  network. Segmentation helps protect the OT devices from potential threats and minimizes the impact of any security incidents. It also helps manage traffic and improves overall network performance.References:

  CompTIA Network+ study materials.

• Question 138:

  While troubleshooting a VoIP handset connection, a technician's laptop is able to successfully connect to network resources using the same port. The technician needs to identify the port on the switch. Which of the following should the technician use to determine the switch and port?

  A. LLDP

  B. IKE

  C. VLAN

  D. netstat

  Correct Answer: A

  Link Layer Discovery Protocol (LLDP) is a network protocol used for discovering devices and their capabilities on a local area network, primarily at the data link layer (Layer 2). It helps in identifying the connected switch and the specific port to

  which a device is connected. When troubleshooting a VoIP handset connection, the technician can use LLDP to determine the exact switch and port where the handset is connected. This protocol is widely used in network management to

  facilitate the discovery of network topology and simplify troubleshooting.

  Other options such as IKE (Internet Key Exchange), VLAN (Virtual LAN), and netstat (network statistics) are not suitable for identifying the switch and port information. IKE is used in setting up secure IPsec connections, VLAN is used for

  segmenting networks, and netstat provides information about active connections and listening ports on a host but not for discovering switch port details.

  Reference: CompTIA Network+ Certification Exam Objectives - Network Troubleshooting and Tools section.

• Question 139:

  A network administrator wants to implement security zones in the corporate network to control access to only individuals inside of the corporation. Which of the following security zones is the best solution?

  A. Extranet

  B. Trusted

  C. VPN

  D. Public

  Correct Answer: B

  Introduction to Security Zones:

  uk.co.certification.simulator.questionpool.PList@350b00bc Types of Security Zones:

  Trusted Zone Implementation:

  Example Configuration:

  of the Options:

  Conclusion:

  References:

  CompTIA Network+ guide detailing security zones and their implementation in a corporate network (see page Ref 9Basic Configuration Commands).

• Question 140:

  Which of the following best explains the role of confidentiality with regard to data at rest?

  A. Datacanbe accessedby anyone on the administrative network.

  B. Datacanbe accessedremotely with proper training.

  C. Datacanbe accessedafter privileged access Is granted.

  D. Datacanbe accessedafter verifying the hash.

  Correct Answer: C

  Confidentiality with Data at Rest: Confidentiality is a core principle of data security, ensuring that data stored (at rest) is only accessible to authorized individuals. This protection is achieved through mechanisms such as encryption, access

  controls, and permissions.

  uk.co.certification.simulator.questionpool.PList@4c685200 : CompTIA Network+ materials on data security principles, particularly sections on confidentiality and access control mechanisms.