CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 1001:

  Which of the following policies would be best to refer to when trying to prevent a disgruntled employee from copying sensitive materials off company servers after termination?

  A. Incident response plan
  B. Offboarding
  C. Change management
  D. Acceptable use
  B. Offboarding

• Question 1002:

  Which of the following functions is used to prioritize network traffic based on the type of traffic?

  A. QoS
  B. VPN
  C. CDN
  D. TTL
  A. QoS

  ---

  Explanation/Reference:

  QoS stands for Quality of Service, which is a feature that allows you to prioritize network traffic based on the type of traffic, such as voice, video, data, or gaming. QoS can help improve the performance and reliability of critical applications by

  allocating more bandwidth and lower latency to them, while reducing the impact of less important or non-essential traffic1.

  VPN stands for Virtual Private Network, which is a technology that creates a secure and encrypted connection between two or more devices over the Internet. VPN can help protect your privacy and data from hackers, ISPs, and government

  surveillance, as well as access geo-restricted content and services2.

  CDN stands for Content Delivery Network, which is a network of servers that deliver web content to users based on their geographic location, the origin of the content, and the performance of the network. CDN can help improve the speed and

  availability of web content, such as images, videos, and scripts, by caching them on servers closer to the users3.

  TTL stands for Time To Live, which is a value that determines how long a packet can stay in a network before it is discarded or returned. TTL can help prevent network congestion and loops by limiting the lifespan of packets that are lost,

  corrupted, or delayed4.

• Question 1003:

  A network administrator has implemented file integrity monitoring on all relevant devices. This will provide the ability to detect whenever the files are:

  A. reinstalled.
  B. executed.
  C. read.
  D. written.
  D. written.

• Question 1004:

  An organization recently connected a new computer to the LAN. The user is unable to ping the default gateway. Which of the following is the most likely cause?

  A. The DHCP server is not available.
  B. An RFC1918 address is being used
  C. The VLAN is incorrect.
  D. A static IP is assigned.
  A. The DHCP server is not available.

  ---

  Explanation/Reference:

  The DHCP server is not available is the most likely cause of the issue where a new computer is unable to ping the default gateway. DHCP stands for Dynamic Host Configuration Protocol, which is a network protocol that automatically assigns IP addresses and other configuration parameters to clients on a network. The default gateway is the IP address of the router or device that connects a local network to other networks, such as the internet. Pinging is a network utility that tests the connectivity and reachability between two devices by sending and receiving echo packets. If the DHCP server is not available, the new computer will not be able to obtain an IP address or other configuration parameters, such as the default gateway, from the DHCP server. This will prevent the new computer from communicating with other devices on the network or the internet, resulting in ping failure.

• Question 1005:

  A systems operator is granted access to a monitoring application, configuration application, and timekeeping application. The operator Is denied access to the financial and project management applications by the system's security configuration. Which of the following BEST describes the security principle in use?

  A. Network access control
  B. Least privilege
  C. Multifactor authentication
  D. Separation of duties
  B. Least privilege

• Question 1006:

  Which of the following types of planes propagates routing information in an SDWAN solution?

  A. Orchestration plane
  B. Management plane
  C. Control plane
  D. Data plane
  C. Control plane

  ---

  Explanation/Reference:

  The vEdge router in a Cisco SD-WAN solution is primarily responsible for functions related to the control plane. The control plane in a network is responsible for the exchange of routing and control information, including the establishment and maintenance of routing tables, forwarding decisions, and signaling between network devices.

  In the context of SD-WAN, the vEdge router participates in the control plane activities by exchanging routing information, making decisions about traffic paths, and maintaining connectivity and reachability information with other vEdge routers and the centralized SD-WAN controller (such as the Cisco vSmart controller). This enables the SD-WAN solution to dynamically adapt to changing network conditions and optimize traffic flows across the WAN.

• Question 1007:

  A technician uses a badge to enter a security checkpoint on a corporate campus. An unknown individual quickly walks in behind the technician without speaking. Which of the following types of attacks did the technician experience?

  A. Tailgating
  B. Evil twin
  C. On-path
  D. Piggybacking
  A. Tailgating

  ---

  Explanation/Reference:

  Tailgating is a type of physical security attack where an unauthorized person follows an authorized person into a restricted area without their consent or knowledge. Tailgating can allow an attacker to bypass security measures and gain access to sensitive information or resources. In this scenario, the technician experienced tailgating when the unknown individual walked in behind the technician without speaking. Piggybacking is similar to tailgating, but it involves the consent or cooperation of the authorized person. Evil twin is a type of wireless network attack where an attacker sets up a rogue access point that mimics a legitimate one. On-path is a type of network attack where an attacker intercepts and modifies traffic between two parties. References: CompTIA Network+ Certification Exam Objectives Version 7.0 (N10-007), Objective 3.2: Given a scenario, use appropriate network hardening techniques.

• Question 1008:

  A customer cannot reach a web application on a local server. The network consultant suspects that the server is not accepting the HTTPS connection. Which of the following commands should the consultant run on the server to determine what is occurring?

  A. route
  B. arp
  C. nmap
  D. netstat
  D. netstat

  ---

  Explanation/Reference:

  The netstat command is a useful tool for checking open ports on a system, along with active connections and associated processes. By running the netstat command with appropriate options, the consultant can determine if the server is listening on the HTTPS port and if any connections are being established to the server on that port.

• Question 1009:

  A network administrator is setting up several loT devices on a new VLAN and wants to accomplish the following

  1.

  Reduce manual configuration on each system

  2.

  Assign a specific IP address to each system

  3.

  Allow devices to move to different switchports on the same VLAN

  Which of the following should the network administrator do to accomplish these requirements?

  A. Set up a reservation for each device
  B. Configure a static IP on each device
  C. Implement private VLANs for each device
  D. Use DHCP exclusions to address each device
  A. Set up a reservation for each device

  ---

  Explanation/Reference:

  A reservation is a feature of DHCP that assigns a specific IP address to a device based on its MAC address. This way, the device will always receive the same IP address from the DHCP server, regardless of its location or connection time. A network administrator can set up a reservation for each loT device to accomplish the requirements of reducing manual configuration, assigning a specific IP address, and allowing devices to move to different switchports on the same VLAN. References: https://www.comptia.org/blog/what-is-dhcp

• Question 1010:

  A network administrator is configuring a link-state routing protocol for traffic. Which of the following routing protocols should be implemented?

  A. BGP
  B. EIGRP
  C. OSPF
  D. RIPv2
  C. OSPF

  ---

  Explanation/Reference: