CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 181:

  A user connects to a corporate VPN via a web browser and is able to use TLS to access the internal financial system to input a time card.

  Which of the following best describes how the VPN is being used?

  A. Clientless

  B. Client-to-site

  C. Full tunnel

  D. Site-to-site

  Correct Answer: A

  Reference: CompTIA Network+ Certification Exam Objectives - Remote Access Methods section.

• Question 182:

  A network administrator wants users to be able to authenticate to the corporate network using a port-based authentication framework when accessing both wired and wireless devices. Which of the following is the best security feature to accomplish this task?

  A. 802.1X

  B. Access control list

  C. Port security

  D. MAC filtering

  Correct Answer: A

  802.1X is a port-based network access control (PNAC) protocol that provides an authentication mechanism to devices wishing to connect to a LAN or WLAN. It is widely used for secure network access, ensuring that only authenticated devices can access the network, whether they are connecting via wired or wireless means. 802.1X works in conjunction with an authentication server, such as RADIUS, to validate the credentials of devices trying to connect.References: CompTIA Network+ study materials.

• Question 183:

  Which of the following most likely determines the size of a rack for installation? (Select two).

  A. KVM size

  B. Switch depth

  C. Hard drive size

  D. Cooling fan speed

  E. Outlet amperage

  F. Server height

  Correct Answer: B

  Understanding Rack Size Determination:

  uk.co.certification.simulator.questionpool.PList@5842899 Switch Depth:

  Server Height:

  Why Other Options are Less Relevant:

  References:

  CompTIA Network+ study materials on rack installation and equipment sizing.

• Question 184:

  Which of the following is a cost-effective advantage of a split-tunnel VPN?

  A. Web traffic is filtered through a web filter.

  B. More bandwidth is required on the company's internet connection.

  C. Monitoring detects insecure machines on the company's network.

  D. Cloud-based traffic flows outside of the company's network.

  Correct Answer: D

  A split-tunnel VPN allows some traffic to be routed through the VPN while other traffic goes directly to the internet. This setup offers several advantages, with a primary one being cost-effectiveness due to cloud-based traffic not consuming

  company bandwidth.

  Bandwidth Utilization: Split-tunnel VPNs reduce the amount of traffic passing through the company's network, freeing up bandwidth for other uses. Performance: By allowing internet-bound traffic to bypass the VPN, it can reduce latency and

  improve the performance for users accessing cloud services directly. Cost Savings: Reduced load on the company's VPN infrastructure can lead to lower costs in terms of both hardware and bandwidth.

  Network References:

  CompTIA Network+ N10-007 Official Certification Guide: Covers VPN types, including split-tunnel configurations and their advantages. Cisco Networking Academy: Discusses VPN technologies and the benefits of split- tunneling. Network+

  Certification All-in-One uide: Provides detailed information on VPN setups, including the cost-effectiveness of split-tunnel VPNs. By allowing cloud-based traffic to flow outside the company's network, a split-tunnel VPN optimizes

  resource usage and enhances the overall network performance without incurring extra costs for bandwidth.

• Question 185:

  Which of the following is most likely responsible for the security and handling of personal data in Europe?

  A. GDPR

  B. SCADA

  C. SAML

  D. PCI DSS

  Correct Answer: A

  Definition of GDPR:

  uk.co.certification.simulator.questionpool.PList@5f694049 Scope and Objectives:

  Comparison with Other Options:

  Key Provisions:

  References:

  CompTIA Network+ study materials on regulatory and compliance standards.

• Question 186:

  Which of the following cloud service models most likely requires the greatest up-front expense by the customer when migrating a data center to the cloud?

  A. Infrastructure as a service

  B. Software as a service

  C. Platform as a service

  D. Network as a service

  Correct Answer: A

  Reference: CompTIA Network+ Certification Exam Objectives - Cloud Models section.

• Question 187:

  Which of the following appliances provides users with an extended footprint that allows connections from multiple devices within a designated WLAN?

  A. Router

  B. Switch

  C. Access point

  D. Firewall

  Correct Answer: C

  An access point (AP) provides users with an extended footprint that allows connections from multiple devices within a designated Wireless Local Area Network (WLAN).

  Router: Typically used to connect different networks, not specifically for extending wireless coverage.

  Switch: Used to connect devices within a wired network, not for providing wireless access.

  Access Point (AP): Extends wireless network coverage, allowing multiple wireless devices to connect to the network.

  Firewall: Primarily used for network security, controlling incoming and outgoing traffic based on security rules, not for providing wireless connectivity.

  Network References:

  CompTIA Network+ N10-007 Official Certification Guide: Explains the roles and functions of network appliances, including access points. Cisco Networking Academy: Provides training on deploying and managing wireless networks with

  access points.

  Network+ Certification All-in-One uide: Covers network devices and their roles in creating and managing networks.

• Question 188:

  Which of the following most likely requires the use of subinterfaces?

  A. A router with only one available LAN port

  B. A firewall performing deep packet inspection

  C. A hub utilizing jumbo frames

  D. A switch using Spanning Tree Protocol

  Correct Answer: A

  Introduction to Subinterfaces:

  uk.co.certification.simulator.questionpool.PList@2a01aef5 Use Case for Subinterfaces:

  Example Configuration:

  interface GigabitEthernet0/0.10

  encapsulation dot1Q 10

  ip address 192.168.10.1 255.255.255.0

  !

  interface GigabitEthernet0/0.20

  encapsulation dot1Q 20

  ip address 192.168.20.1 255.255.255.0

  uk.co.certification.simulator.questionpool.PList@2f061c4c of the Options:

  Conclusion:

  References:

  CompTIA Network+ guide detailing VLAN configurations and the use of subinterfaces (see page Ref 9Basic Configuration Commands).

• Question 189:

  An organization has a security requirement that all network connections can be traced back to a user. A network administrator needs to identify a solution to implement on the wireless network. Which of the following is the best solution?

  A. Implementingenterprise authentication

  B. Requiring theuse of PSKs

  C. Configuring acaptive portal for users

  D. Enforcing wired equivalent protection

  Correct Answer: A

  Enterprise authentication (such as WPA2-Enterprise) utilizes unique credentials for each user, typically integrating with an authentication server like RADIUS. This allows for tracking and logging user activity, ensuring that all connections can

  be traced back to individual users. PSKs (Pre-Shared Keys) are shared among users and do not provide individual accountability. Captive portals can identify users but are less secure than enterprise authentication, and Wired Equivalent

  Privacy (WEP) is outdated and not recommended for security purposes.

  Reference:

  CompTIA Network+ materials highlight enterprise authentication methods as the preferred solution for secure and accountable wireless network access.

• Question 190:

  Three access points have Ethernet that runs through the ceiling. One of the access points cannot reach the internet.

  Which of the following tools can help identify the issue?

  A. Network tap

  B. Cable tester

  C. Visual fault locator

  D. Toner and probe

  Correct Answer: B

  A cable tester is a tool that can help identify issues with the physical cabling, such as breaks or improper terminations, which may prevent the access point from reaching the internet.