CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 171:

  Which of the following is a cost-effective advantage of a split-tunnel VPN?

  A. Web traffic is filtered through a web filter.

  B. More bandwidth is required on the company's internet connection.

  C. Monitoring detects insecure machines on the company's network.

  D. Cloud-based traffic flows outside of the company's network.

  Correct Answer: D

  A split-tunnel VPN allows certain traffic (e.g., cloud-based services) to bypass the VPN and go directly to the Internet. This reduces the amount of traffic that needs to traverse the company's VPN and Internet connection, conserving bandwidth and reducing costs. It also means that not all traffic is subject to the same level of inspection or filtering, which can improve performance for cloud-based services.References: CompTIA Network+ study materials.

• Question 172:

  As part of an attack, a threat actor purposefully overflows the content-addressable memory (CAM) table on a switch. Which of the following types of attacks is this scenario an example of?

  A. ARP spoofing

  B. Evil twin

  C. MAC flooding

  D. DNS poisoning

  Correct Answer: C

  Definition of MAC Flooding:

  uk.co.certification.simulator.questionpool.PList@c348527 Impact of MAC Flooding:

  Comparison with Other Attacks:

  Preventive Measures:

  References:

  CompTIA Network+ study materials on network security threats and mitigation techniques.

• Question 173:

  Which of the following would be violated if an employee accidentally deleted a customer's data?

  A. Integrity

  B. Confidentiality

  C. Vulnerability

  D. Availability

  Correct Answer: D

  Availability refers to ensuring that data is accessible when needed. If a customer's data is accidentally deleted, it impacts availability, as the data can no longer be accessed.

• Question 174:

  Following a fire in a data center, the cabling was replaced. Soon after, an administrator notices network issues. Which of the following are the most likely causes of the network issues? (Select two).

  A. The switches are not the correct voltage.

  B. The HVAC system was not verified as fully functional after the fire.

  C. The VLAN database was not deleted before the equipment was brought back online.

  D. The RJ45 cables were replaced with unshielded cables.

  E. The wrong transceiver type was used for the new termination.

  F. The new RJ45 cables are a higher category than the old ones.

  Correct Answer: DE

  Unshielded cables (D) are more prone to interference and may not be suitable for certain environments, especially after a fire where interference could be heightened. Using the wrong transceiver (E) for new terminations can lead to compatibility issues, causing network failures.

• Question 175:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

  A. SNMP trap

  B. Port mirroring

  C. Syslog collection

  D. API integration

  Correct Answer: B

  Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring.References: CompTIA Network+ study materials.

• Question 176:

  Which of the following is a company most likely enacting if an accountant for the company can only see the financial department's shared folders?

  A. General Data Protection Regulation

  B. Least privilege network access

  C. Acceptable use policy

  D. End user license agreement

  Correct Answer: B

  Least privilege network access is a principle that restricts users' access rights to only what is necessary for them to perform their job functions. In this case, the accountant's access is limited to only the financial department's shared folders, ensuring that they cannot access other parts of the network unnecessarily. This reduces the risk of unauthorized access and potential data breaches. References: CompTIA Network+ Exam Objectives and official study guides.

• Question 177:

  A customer is adding fiber connectivity between adjacent buildings. A technician terminates the multimode cable to the fiber patch panel. After the technician connects the fiber patch cable, the indicator light does not turn on. Which of the following should a technician try first to troubleshoot this issue?

  A. Reverse the fibers.

  B. Reterminate the fibers.

  C. Verify the fiber size.

  D. Examine the cable runs for visual faults.

  Correct Answer: A

  When working with fiber optic cables, one common issue is that the transmit (TX) and receive (RX) fibers might be reversed. The first step in troubleshooting should be to reverse the fibers at one end to ensure they are correctly aligned (TX to RX and RX to TX). This is a simple and quick step to rule out a common issue before moving on to more complex troubleshooting.References: CompTIA Network+ study materials.

• Question 178:

  Which of the following is the next step to take after successfully testing a root cause theory?

  A. Determine resolution steps.

  B. Duplicate the problem in a lab.

  C. Present the theory for approval.

  D. Implement the solution to the problem.

  Correct Answer: A

  Troubleshooting Methodology:

  uk.co.certification.simulator.questionpool.PList@28d0b044 Implementation of the Solution:

  Comparison with Other Steps:

  Final Verification:

  References:

  CompTIA Network+ study materials on troubleshooting methodologies and best practices.

• Question 179:

  A network administrator is implementing security zones for each department. Which of the following should the administrator use to accomplish this task?

  A. ACLs

  B. Port security

  C. Content filtering

  D. NAC

  Correct Answer: A

  Understanding ACLs:

  uk.co.certification.simulator.questionpool.PList@225558da Implementing Security Zones:

  Comparison with Other Options:

  Implementation Steps:

  References:

  CompTIA Network+ study materials on network security and access control methods.

• Question 180:

  An administrator is setting up an SNMP server for use in the enterprise network and needs to create device IDs within a MIB.

  Which of the following describes the function of a MIB?

  A. DHCP relay device

  B. Policy enforcement point

  C. Definition file for event translation

  D. Network access controller

  Correct Answer: C

  MIB (Management Information Base): A MIB is a database used for managing the entities in a communication network. The MIB is used by Simple Network Management Protocol (SNMP) to translate events into a readable format, enabling network administrators to manage and monitor network devices effectively. uk.co.certification.simulator.questionpool.PList@3d2ed4a0 : CompTIA Network+ materials discussing SNMP and MIB functionality.