CompTIA CompTIA Certifications N10-007 Questions & Answers

• Question 651:

  A network administrator receives a call from the sales department requesting ports 20 and 21 be opened on the company's firewall to allow customers to retrieve a large file. Which of the following should the administrator perform BEFORE making the needed changes? (Choose two.)

  A. Document the reason for the request

  B. Scan the file for malware to protect the sales department's computers

  C. Follow the company's approval process for the implementation

  D. Install a TFTP server for the customers to use for the transfer

  E. Create a honeypot to store the file on for the customers to use

  F. Write the SLA for the sales department authorizing the change

  Correct Answer: AC

• Question 652:

  An analyst is developing a proof of concept of a wireless-based attack as part of a penetration test against an organization's network. As part of the attack, the analyst launches a fake access point matching the SSID of the organization's guest access network. When a user connects to the fake access point, the analyst allows the traffic to flow through the access point to the legitimate site while the data traversing the network is logged for latest analysis and explogtation. Which of the following attacks has the analyst successfully performed in this scenario?

  A. Bluesnarfing

  B. Session hijacking

  C. MAC spoofing

  D. VLAN hopping

  E. Man-in-the-middle

  Correct Answer: E

• Question 653:

  Which of the following protocols can be both connection-oriented and connectionless?

  A. 20 FTP

  B. 53 DNS

  C. 67 DHCP

  D. 80 HTTP

  Correct Answer: B

• Question 654:

  Which of the following BEST describes the differences between VLAN hopping and session hijacking?

  A. VLAN hopping involves the unauthorized transition from one VLAN to another to gain additional access. Session hijacking involves overriding a user's web connection to execute commands

  B. VLAN hopping is a brute force attack executed to gain additional access. Session hijacking involves physically disrupting a network connection

  C. VLAN hopping involves overriding a user network connection to execute malicious commands.Session hijacking involves compromising a host to elevate privileges

  D. VLAN hopping is the act of explogting poor VLAN tagging. Session hijacking is a web-based attack aimed at privilege escalation

  Correct Answer: A

• Question 655:

  A small town is attempting to attract tourists who visit larger nearby cities. A network engineer is asked to implement a network encompassing the five-block town center and nearby businesses. The inclusion of smartphones and portable devices is crucial to the plan. Which of the following is the network engineer being asked to implement?

  A. LAN

  B. PAN

  C. MAN

  D. WAN

  Correct Answer: C

• Question 656:

  An employee wishes to use a personal cell phone for work-related purposes, including storage of sensitive company data, during long business trips. Which of the following is needed to protect BOTH the employee and the company?

  A. An NDA ensuring work data stored on the personal phone remains confidential

  B. An AUP covering how a personal phone may be used for work matters

  C. A consent to monitoring policy covering company audits of the personal phone

  D. Real-time remote monitoring of the phone's activity and usage

  Correct Answer: D

• Question 657:

  A forensic first responder arrives at the scene where an employee is suspected to have committed a computer-based crime. Which of the following should the first responder do FIRST?

  A. Document the scene

  B. Take pictures upon arrival

  C. Secure the area

  D. Implement chain of custody

  Correct Answer: C

• Question 658:

  Which of the following communication media can carry many voice, data, and video channels simultaneously over multiple frequencies?

  A. Broadband

  B. Baseband

  C. Analog modem

  D. CSMA

  Correct Answer: A

• Question 659:

  To replace a defective UPS, the network administrator must take the switch offline. The administrator wants to be able to perform maintenance UPS in the future without affecting the availability of the attached switch. Which of the following would BEST allow this to happen?

  A. Add a redundant power supply to the switch

  B. Implement stacking on the switches in the rack

  C. Add a second UPS into the rack

  D. Install a power converter for the switch

  Correct Answer: A

• Question 660:

  A user checks an IP address using an external website. The address is different than the one the user sees when opening a command prompt and typing in ipconfig/all. The user does not understand why the two tools show different IP addresses. This is BEST explained by the interworking of:

  A. network devices

  B. packet flow

  C. public/private networks

  D. traffic-routing protocols

  Correct Answer: C