CompTIA CompTIA Certifications N10-009 Questions & Answers

• Question 251:

  SIMULATION

  A network technician needs to resolve some issues with a customer's SOHO network.

  The customer reports that some of the devices are not connecting to the network, while others appear to work as intended.

  INSTRUCTIONS

  Troubleshoot all the network components and review the cable test results by Clicking on each device and cable.

  Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem.

  

  

  

  Cable Test Results: Cable 1:

  

  Cable 2:

  

  Cable 3:

  

  Cable 4:

  

  

  

  A. See the for detailed information on this simulation.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  See the for detailed information on this simulation. (Note: Ips will be change on each simulation task, so we have given example answer for the understanding)

  To troubleshoot all the network components and review the cable test results, you can use the following steps:

  Click on each device and cable to open its information window. Review the information and identify any problems or errors that may affect the network connectivity or performance.

  Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem. Fill in the remediation form using the drop-down menus provided. Here is an example of how to fill in

  the remediation form for PC1:

  The component with a problem is PC1.

  The problem is Incorrect IP address.

  The solution is Change the IP address to 192.168.1.10. You can use the same steps to fill in the remediation form for other components.

  To enter commands in each device, you can use the following steps:

  Click on the device to open its terminal window.

  Enter the command ipconfig /all to display the IP configuration of the device, including its IP address, subnet mask, default gateway, and DNS servers. Enter the command ping to test the connectivity and reachability to another

  device on the network by sending and receiving echo packets. Replace with the IP address of the destination device, such as 192.168.1.1 for Core Switch 1.

  Enter the command tracert to trace the route and measure the latency of packets from the device to another device on the network by sending and receiving packets with increasing TTL values. Replace with the IP

  address of the destination device, such as 192.168.1.1 for Core Switch 1. Here is an example of how to enter commands in PC1:

  Click on PC1 to open its terminal window.

  Enter the command ipconfig /all to display the IP configuration of PC1. You should see that PC1 has an incorrect IP address of 192.168.2.10, which belongs to VLAN 2 instead of VLAN 1.

  Enter the command ping 192.168.1.1 to test the connectivity to Core Switch 1. You should see that PC1 is unable to ping Core Switch 1 because they are on different subnets.

  Enter the command tracert 192.168.1.1 to trace the route to Core Switch 1. You should see that PC1 is unable to reach Core Switch 1 because there is no route between them.

  You can use the same steps to enter commands in other devices, such as PC3, PC4, PC5, and Server 1.

• Question 252:

  SIMULATION

  Users are unable to access files on their department share located on file server 2.

  The network administrator has been tasked with validating routing between networks hosting workstation A and file server 2.

  INSTRUCTIONS

  Click on each router to review output, identify any issues, and configure the appropriate solution.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  

  

  A. See the solution in Explanation.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  To validate routing between networks hosting Workstation A and File Server 2, follow these steps:

  uk.co.certification.simulator.questionpool.PList@713050cf Review Routing Tables:

  uk.co.certification.simulator.questionpool.PList@8e0af20 Identify Missing Routes:

  Add Static Routes:

  uk.co.certification.simulator.questionpool.PList@783b5def Routing Table:

  Gateway of last resort is 0.0.0.0 to network 0.0.0.0 S* 0.0.0.0/0 is directly connected, GigabitEthernet3 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks C 10.0.4.0/22 is directly connected, GigabitEthernet2 C 10.0.6.0/24 is directly

  connected, GigabitEthernet2 L 10.0.6.1/32 is directly connected, GigabitEthernet2 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks C 172.16.27.0/30 is directly connected, GigabitEthernet3 L 172.16.27.1/32 is directly connected,

  GigabitEthernet3

  uk.co.certification.simulator.questionpool.PList@7b450e21 Routing Table:

  Gateway of last resort is 0.0.0.0 to network 0.0.0.0 S* 0.0.0.0/0 is directly connected, GigabitEthernet1 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks C 10.0.0.0/22 is directly connected, GigabitEthernet1 L 10.0.0.1/32 is directly

  connected, GigabitEthernet1 172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks C 172.16.27.4/30 is directly connected, GigabitEthernet1 L 172.16.27.5/32 is directly connected, GigabitEthernet1

  uk.co.certification.simulator.questionpool.PList@8809fae Routing Table:

  10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks S 10.0.0.0/22 [1/0] via GigabitEthernet1

  S 10.0.4.0/22 [1/0] via GigabitEthernet2

  172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks C 172.16.27.0/30 is directly connected, GigabitEthernet2 L 172.16.27.2/32 is directly connected, GigabitEthernet2 C 172.16.27.4/30 is directly connected, GigabitEthernet1 L

  172.16.27.6/32 is directly connected, GigabitEthernet1

  uk.co.certification.simulator.questionpool.PList@594a831 Install Static Route to 10.0.0.0/22 via 172.16.27.1 (assuming Router C's IP is 172.16.27.1):

  Destination Prefix: 10.0.0.0

  Destination Prefix Mask: 255.255.252.0

  Interface: GigabitEthernet3

  uk.co.certification.simulator.questionpool.PList@27624949 Install Static Route to 10.0.4.0/22 via 172.16.27.5 (assuming Router C's IP is 172.16.27.5):

  Destination Prefix: 10.0.4.0

  Destination Prefix Mask: 255.255.252.0

  Interface: GigabitEthernet1

  uk.co.certification.simulator.questionpool.PList@74056f82 Install Static Route to 10.0.6.0/24 via 172.16.27.2 (assuming Router A's IP is 172.16.27.2):

  Destination Prefix: 10.0.6.0

  Destination Prefix Mask: 255.255.255.0

  Interface: GigabitEthernet2

  Install Static Route to 10.0.0.0/22 via 172.16.27.1 (assuming Router B's IP is 172.16.27.1):

  Destination Prefix: 10.0.0.0

  Destination Prefix Mask: 255.255.252.0

  Interface: GigabitEthernet1

  Summary of Static Routes:

  Router A:

  uk.co.certification.simulator.questionpool.PList@7874e343 Router B:

  Router C:

  These configurations ensure that each router knows the correct paths to reach Workstation A and File Server 2, resolving the connectivity issue.

• Question 253:

  SIMULATION

  You have been tasked with implementing an ACL on the router that will:

  1.

  Permit the most commonly used secure remote access technologies from the management network to all other local network segments

  2.

  Ensure the user subnet cannot use the most commonly used remote access technologies in the Linux and Windows Server segments.

  3.

  Prohibit any traffic that has not been specifically allowed.

  INSTRUCTIONS

  Use the drop-downs to complete the ACL

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  A. See the answer and solution below.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  Answer: See the answer and solution below.

  

• Question 254:

  SIMULATION Users are unable to access files on their department share located on flle_server 2. The network administrator has been tasked with validating routing between networks hosting workstation A and file server 2. INSTRUCTIONS Click on each router to review output, identity any Issues, and configure the appropriate solution

  If at any time you would like to bring back the initial state of trie simulation, please click the reset All button; A. See the solution configuration below in Explanation.

  

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  

  

  

• Question 255:

  SIMULATION

  A network technician replaced a switch and needs to reconfigure it to allow the connected devices to connect to the correct networks.

  INSTRUCTIONS

  Click on the appropriate port(s) on Switch 1 and Switch 3 to verify or reconfigure the correct settings:

  1.

  Ensure each device accesses only its correctly associated network

  2.

  Disable all unused switch ports

  3.

  Require fault-tolerant connections between the switches

  4.

  Only make necessary changes to complete the above requirements

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  

  

  

  

  

  

  

  

  A. See the solution below in Explanation.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  To provide a complete solution for configuring the access layer switches, let's proceed with the following steps: Identify the correct VLANs for each device and port. Enable necessary ports and disable unused ports. Configure fault-tolerant connections between the switches. uk.co.certification.simulator.questionpool.PList@39f3ad93 Port 1 Configuration (Uplink to Core Switch) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220 Port 2 Configuration (Uplink to Core Switch) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220 Port 3 Configuration (Server Connection) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN90 (Servers) Port 4 Configuration (Server Connection) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN90 (Servers) Port 5 Configuration (Wired Users and WLAN) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150 Port 6 Configuration (Wired Users and WLAN) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150 Port 7 Configuration (Voice and Wired Users) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220 Port 8 Configuration (Voice, Printers, and Wired Users) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220 uk.co.certification.simulator.questionpool.PList@5a68d3d1 Port 1 Configuration (Unused) Status: Disabled LACP: Disabled Port 2 Configuration (Unused) Status: Disabled LACP: Disabled Port 3 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 4 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 5 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 6 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 7 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) uk.co.certification.simulator.questionpool.PList@23b20ca1 Ports 1 and 2 on Switch 1 are configured as trunk ports with VLAN tagging enabled for all necessary VLANs. Ports 3 and 4 on Switch 1 are configured for server connections with VLAN 90 untagged. Ports 5, 6, 7, and 8 on Switch 1 are configured for devices needing access to multiple VLANs.

  Unused ports on Switch 3 are disabled.

  Ports 3, 4, 5, 6, and 7 on Switch 3 are enabled for default VLAN1. uk.co.certification.simulator.questionpool.PList@328cca61 Core Switch Ports should be configured as needed for uplinks to Switch 1. Ensure LACP is enabled for redundancy

  on trunk ports between switches. By following these configurations, each device will access only its correctly associated network, unused switch ports will be disabled, and fault-tolerant connections will be established between the switches.

• Question 256:

  SIMULATION

  A network administrator has been tasked with configuring a network for a new corporate office. The office consists of two buildings, separated by 50 feet with no physical connectivity. The configuration must meet the following requirements:

  . Devices in both buildings should be

  able to access the Internet.

  . Security insists that all Internet traffic

  be inspected before entering the

  network.

  . Desktops should not see traffic

  destined for other devices.

  INSTRUCTIONS

  Select the appropriate network device for each location. If applicable, click on the magnifying glass next to any device which may require configuration updates and make any necessary changes.

  Not all devices will be used, but all locations should be filled.

  If at any time you would like to bring back the initial state of the simulation, please

  click the Reset All button.

  

  

  A. See the solution below in Explanation.

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  See the step by step complete solution below. Devices in both buildings should be able to access the Internet. Security insists that all Internet traffic be inspected before entering the network. Desktops should not see traffic destined for other

  devices.

  Here is the corrected layout with

  Building A:

  uk.co.certification.simulator.questionpool.PList@180bf167 Building B:

  Between Buildings:

  Connection to the Internet:

  Firewall: The firewall should be placed between the router and the internal network to inspect all traffic before it enters the network.

  Corrected Setup:

  Top-left (Building A): Switch

  Bottom-left (Building A): Firewall (inspect traffic before it enters the network) Top-middle (Internet connection): Router

  Bottom-middle (between buildings): Wireless Range Extender Top-right (Building B): Wireless Access Point (WAP) In this corrected setup, the WAP in Building B will connect wirelessly to the Wireless Range Extender, which is connected to

  the Router. The Router is connected to the Firewall to ensure all traffic is inspected before it enters the network.

  Configuration for Wireless Range Extender:

  SSID: CORP

  Security Settings: WPA2 or WPA2 - Enterprise

  Key or Passphrase: [Enter a strong passphrase]

  Mode: [Set based on your network plan]

  Channel: [Set based on your network plan]

  Speed: Auto

  Duplex: Auto

  With these settings, both buildings will have secure access to the Internet, and all traffic will be inspected by the firewall before entering the network. Desktops and other devices will not see traffic intended for others, maintaining the required

  security and privacy.

  

  To configure the wireless range extender for security, follow these steps: SSID (Service Set Identifier): uk.co.certification.simulator.questionpool.PList@8dcd0d6 Security Settings: Key or Passphrase: Wireless Mode and Channel: Wired Speed and Duplex: Save Configuration: Here is how the configuration should look after adjustments: SSID: CORP Security Settings: WPA2 or WPA2 - Enterprise Key or Passphrase: [Enter a strong passphrase] Mode: [Set based on your network plan] Channel: [Set based on your network plan] Speed: Auto Duplex: Auto Once these settings are configured, your wireless range extender will provide secure connectivity for devices in both buildings. Firewall setting to to ensure complete compliance with the requirements and best security practices, consider the following adjustments and additions: DNS Rule: This rule allows DNS traffic from the internal network to any destination, which is fine. HTTPS Outbound: This rule allows HTTPS traffic from the internal network (assuming 192.169.0.1/24 is a typo and should be 192.168.0.1/24) to any destination, which is also good for secure web browsing. Management: This rule allows SSH access to the firewall for management purposes, which is necessary for administrative tasks. HTTPS Inbound: This rule denies inbound HTTPS traffic to the internal network, which is good unless you have a web server that needs to be accessible from the internet. HTTP Inbound: This rule denies inbound HTTP traffic to the internal network, which is correct for security purposes. Suggested Additional Settings: Permit General Outbound Traffic: Allow general outbound traffic for web access, email, etc. Block All Other Traffic: Ensure that all other traffic is blocked to prevent unauthorized access. Firewall Configuration Adjustments: Correct the Network Typo: uk.co.certification.simulator.questionpool.PList@4f9b9863 Permit General Outbound Traffic: Deny All Other Traffic: Here is how your updated firewall settings should look: Rule Name Source Destination Service Action DNS Rule 192.168.0.1/24 ANY DNS PERMIT HTTPS Outbound 192.168.0.1/24 ANY HTTPS PERMIT Management ANY 192.168.0.1/24 SSH PERMIT HTTPS Inbound ANY 192.168.0.1/24 HTTPS DENY HTTP Inbound ANY 192.168.0.1/24 HTTP DENY General Outbound 192.168.0.1/24 ANY ANY PERMIT Block All ANY ANY ANY DENY These settings ensure that: Internal devices can access DNS and HTTPS services externally. Management access via SSH is permitted. Inbound HTTP and HTTPS traffic is denied unless otherwise specified. General outbound traffic is allowed. All other traffic is blocked by default, ensuring a secure environment. Make sure to save the settings after making these adjustments.

• Question 257:

  SIMULATION

  A network technician was recently onboarded to a company. A manager has

  tasked the technician with documenting the network and has provided the technician With partial information from previous documentation.

  Instructions:

  Click on each switch to perform a network discovery by entering commands into the terminal. Fill in the missing information using drop-down menus provided.

  

  

  A. See the for detailed information on this simulation. (Note: Ips will be change on each simulation task, so we have given example answer for the understanding)

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  To perform a network discovery by entering commands into the terminal, you can use the following steps:

  Click on each switch to open its terminal window.

  Enter the command show ip interface brief to display the IP addresses and statuses of the switch interfaces.

  Enter the command show vlan brief to display the VLAN configurations and assignments of the switch interfaces.

  Enter the command show cdp neighbors to display the information about the neighboring devices that are connected to the switch. Fill in the missing information in the diagram using the drop-down menus provided. Here is an example of how

  to fill in the missing information for Core Switch 1:

  The IP address of Core Switch 1 is 192.168.1.1.

  The VLAN configuration of Core Switch 1 is VLAN 1: 192.168.1.0/24, VLAN 2:

  192.168.2.0/24, VLAN 3: 192.168.3.0/24.

  The neighboring devices of Core Switch 1 are Access Switch 1 and Access Switch 2.

  The interfaces that connect Core Switch 1 to Access Switch 1 are GigabitEthernet0/1 and GigabitEthernet0/2.

  The interfaces that connect Core Switch 1 to Access Switch 2 are GigabitEthernet0/3 and GigabitEthernet0/4.

  You can use the same steps to fill in the missing information for Access Switch 1 and Access Switch 2.

• Question 258:

  A hacker used a packet sniffer on the network to capture the hardware address of the server. Which of the following types of attacks can the hacker perform now?

  A. Piggybacking

  B. MAC spoofing

  C. Evil twin

  D. VLAN hopping

  Correct Answer: B

  MAC spoofing is a technique that allows a hacker to change the media access control (MAC) address of their network interface card (NIC) to impersonate another device on the network. By capturing the hardware address of the server, the hacker can spoof their MAC address to match the server's and bypass any MAC-based security measures, such as MAC filtering or MAC authentication. MAC spoofing can also be used to perform man-in- the-middle attacks, where the hacker intercepts and alters the traffic between two devices on the network. References: CompTIA Network+ N10-008 Cert Guide, Chapter 7, Section 7.3

• Question 259:

  An on-call network technician receives an automated email alert stating that a power supply on a firewall has just powered down. Which of the following protocols would BEST allow for this level of detailed device monitoring?

  A. TFTP

  B. TLS

  C. SSL

  D. SNMP

  Correct Answer: D

• Question 260:

  A network technician is troubleshooting a connection to a web server. The technician is unable to ping the server but is able to verify connectivity to the web service using Telnet. Which of the following protocols is being blocked by the firewall?

  A. UDP

  B. ARP

  C. ICMP

  D. TCP

  Correct Answer: C