CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 201:

  A network manager wants to implement a SIEM system to correlate system events. Which of the following protocols should the network manager verify?

  A. NTP

  B. DNS

  C. LDAP

  D. DHCP

  Correct Answer: A

  Role of NTP (Network Time Protocol):

  uk.co.certification.simulator.questionpool.PList@73015a56 Importance for SIEM Systems:

  Comparison with Other Protocols:

  Implementation:

  References:

  CompTIA Network+ study materials on network protocols and SIEM systems.

• Question 202:

  Which of the following should be configured so users can authenticate to a wireless network using company credentials?

  A. SSO

  B. SAML

  C. MFA

  D. RADIUS

  Correct Answer: D

  RADIUS (Remote Authentication Dial-In User Service) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service. RADIUS is often used to manage access to wireless networks, enabling users to authenticate with their company credentials, ensuring secure access to the network.References: CompTIA Network+ study materials.

• Question 203:

  A network engineer is designing a secure communication link between two sites. The entire data stream needs to remain confidential. Which of the following will achieve this goal?

  A. GRE

  B. IKE

  C. ESP D. AH

  Correct Answer: C

  Definition of ESP (Encapsulating Security Payload):

  uk.co.certification.simulator.questionpool.PList@791927b3 Ensuring Confidentiality:

  Comparison with Other Protocols:

  Implementation:

  References:

  CompTIA Network+ study materials on IPsec and secure communication protocols.

• Question 204:

  Which of the following attacks can cause users who are attempting to access a company website to be directed to an entirely different website?

  A. DNS poisoning

  B. Denial-of-service

  C. Social engineering

  D. ARP spoofing

  Correct Answer: A

  Network segmentation involves dividing a network into smaller segments or subnets. This is particularly important when integrating OT (Operational Technology) devices to ensure that these devices are isolated from other parts of the

  network. Segmentation helps protect the OT devices from potential threats and minimizes the impact of any security incidents. It also helps manage traffic and improves overall network performance.

  References:

  CompTIA Network+ study materials.

• Question 205:

  A user's VoIP phone and workstation are connected through an inline cable. The user reports that the VoIP phone intermittently reboots, but the workstation is not having any network-related issues

  Which of the following is the most likely cause?

  A. The PoE power budget is exceeded.

  B. Port security is violated.

  C. The signal is degraded

  D. The Ethernet cable is not working

  Correct Answer: A

  Power over Ethernet (PoE) delivers power to devices such as VoIP phones over the same cables used for data. If the total power requirement of connected devices exceeds the PoE power budget of the switch or injector, some devices may not receive adequate power and could intermittently reboot. This issue would not affect the workstation, which is likely receiving power separately. References: CompTIA Network+ Exam Objectives and official study guides.

• Question 206:

  A company wants to implement data loss prevention by restricting user access to social media platforms and personal cloud storage on workstations. Which of the following types of filtering should the company deploy to achieve these goals?

  A. Port

  B. DNS

  C. MAC

  D. Content

  Correct Answer: D

  Reference: CompTIA Network+ Certification Exam Objectives - Network Security section.

• Question 207:

  A network administrator needs to change where the outside DNS records are hosted.

  Which of the following records should the administrator change the registrar to accomplish this task?

  A. NS

  B. SOA

  C. PTR

  D. CNAME

  Correct Answer: A

  To change where the outside DNS records are hosted, the network administrator needs to update the NS (Name Server) records at the domain registrar. NS records specify the authoritative name servers for a domain, directing where DNS

  queries should be sent.

  NS (Name Server) Records: These records indicate the servers that are authoritative for a domain. Changing the NS records at the registrar points DNS resolution to the new hosting provider.

  SOA (Start of Authority): Contains administrative information about the domain, including the primary name server.

  PTR (Pointer) Records: Used for reverse DNS lookups, mapping IP addresses to domain names.

  CNAME (Canonical Name) Records: Used to alias one domain name to another, not relevant for changing DNS hosting.

  Network References:

  CompTIA Network+ N10-007 Official Certification Guide: Discusses DNS records, their purposes, and how to manage them.

  Cisco Networking Academy: Provides training on DNS management and the role of different DNS record types.

  Network+ Certification All-in-One uide: Explains DNS records and their configuration for domain management.

• Question 208:

  Which of the following attacks utilizes a network packet that contains multiple network tags?

  A. MAC flooding

  B. VLAN hopping

  C. DNS spoofing

  D. ARP poisoning

  Correct Answer: B

  VLAN hopping is an attack where an attacker crafts packets with multiple VLAN tags, allowing them to traverse VLAN boundaries improperly. This can result in gaining unauthorized access to network segments that are supposed to be

  isolated. The other options do not involve the use of multiple network tags. MAC flooding aims to overwhelm a switch's MAC address table, DNS spoofing involves forging DNS responses, and ARP poisoning involves sending fake ARP

  messages.

  Reference:

  According to the CompTIA Network+ course materials, VLAN hopping exploits the tagging mechanism in network packets to gain unauthorized access.

• Question 209:

  Which of the following is the correct order of components in a bottom-up approach for the three-tier hierarchical model?

  A. Access, distribution, and core

  B. Core, root, and distribution

  C. Core, spine, and leaf

  D. Access, core, and roof

  Correct Answer: A

  The three-tier hierarchical model in network design consists of three layers: access, distribution, and core. The access layer is where devices like PCs and printers connect to the network. The distribution layer aggregates the data received

  from the access layer switches before it is transmitted to the core layer, which is responsible for high-speed data transfer and routing. This approach improves scalability and performance in larger networks.

  References: CompTIA Network+ Exam Objectives and official study guides.

• Question 210:

  Which of the following is used to estimate the average life span of a device?

  A. RTO

  B. RPO

  C. MTBF

  D. MTTR

  Correct Answer: C

  Understanding MTBF:

  uk.co.certification.simulator.questionpool.PList@3417c0b6 Calculation and Importance:

  Comparison with Other Metrics:

  Application:

  References:

  CompTIA Network+ study materials on reliability and maintenance metrics.