CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 121:

  A company's management team wants to implement NAC on the wired and wireless networks. Which of the following is an authentication component that must be used in this solution?

  A. IPSec
  B. 802.1X
  C. EAP
  D. TACACS+
  B. 802.1X

  ---

  Explanation/Reference:

  802.1X is an authentication component that must be used in a network access control (NAC) solution. NAC is a method of enforcing security policies on devices that want to access a network, by verifying their identity, compliance, and authorization. 802.1X is a standard that defines how to provide authentication for devices trying to connect to a LAN or WLAN. It uses the Extensible Authentication Protocol (EAP) to exchange authentication information between the device (supplicant), the network access device (authenticator), and the authentication server (typically RADIUS or TACACS+). 802.1X can prevent unauthorized devices from accessing the network, and can also assign them to different VLANs or apply different policies based on their role or group. IPSec is a protocol suite that provides encryption, authentication, and integrity for IP packets. It can be used to create secure VPN tunnels between networks or hosts. IPSec is not an authentication component for NAC, but rather a security component for protecting data in transit. EAP is a framework that supports multiple authentication methods, such as passwords, certificates, tokens, or biometrics. EAP is used by 802.1X to provide authentication for network access, but it is not a component by itself. EAP requires a carrier protocol, such as 802.1X, to transport the authentication messages.

• Question 122:

  Which of the following is a major difference between a router and a Layer 3 switch?

  A. A router can perform PAT, but a Layer 3 switch cannot.
  B. A Layer 3 switch is more efficient than a router.
  C. A router uses higher speed interfaces than a Layer 3 switch.
  D. A Layer 3 switch can run more routing protocols than a router.
  B. A Layer 3 switch is more efficient than a router.

• Question 123:

  Which of the following technologies requires a username and password to authenticate to a backbone network?

  A. PPPoE
  B. MPLS
  C. ATM
  D. SIP
  A. PPPoE

• Question 124:

  Which of the following DNS records maps an alias to a true name?

  A. AAAA
  B. NS
  C. TXT
  D. CNAME
  D. CNAME

  ---

  Explanation/Reference:

  A CNAME (Canonical Name) record is a type of DNS (Domain Name System) record that maps an alias name to a canonical or true domain name. For example, a CNAME record can map blog.example.com to example.com, which means that blog.example.com is an alias of example.com. A CNAME record is useful when you want to point multiple subdomains to the same IP address, or when you want to change the IP address of a domain without affecting the subdomains1.

• Question 125:

  A technician needs to allow a device to maintain the same IP address lease based on the physical address of a network card. Which of the following should the technician use?

  A. MAC address reservation
  B. Static IP address
  C. Custom DNS server entry
  D. IP address exclusion
  A. MAC address reservation

• Question 126:

  A company, which is located in a coastal town, retrofitted an office building for a new data center. The underground fiber optics were brought in and connected to the switches in the basement network MDF. A server data center was built on the fifth floor with the two rooms vertically connected by fiber optics. Which of the following types of environmental sensors is MOST needed?

  A. Temperature sensor in the network MDF
  B. Water sensor in the network MDF
  C. Temperature sensor in the data center
  D. Water sensor in the data center
  B. Water sensor in the network MDF

  ---

  Explanation/Reference:

  A water sensor is a type of environmental sensor that detects the presence of water or moisture in an area. A water sensor is most needed in a network main distribution frame (MDF) that is located in a basement near underground fiber-optic cables. A network MDF is a central point where all the network connections converge and where network equipment such as switches and routers are located. If water leaks into the basement and damages the fiber-optic cables or the network equipment, it can cause network outages, performance degradation, or data loss. A water sensor can alert the network administrator of any water intrusion and help prevent or minimize the damage. References: https:// www.comptia.org/training/books/network-n10-008-study-guide (page 446)

• Question 127:

  A corporate client is experiencing global system outages. The IT team has identified multiple potential underlying causes throughout the enterprise Each team member has been assigned an area to trouble shoot. Which of the following approaches is being used?

  A. Divide-and-conquer
  B. Top-to-bottom
  C. Bottom-to-top
  D. Determine if anything changed
  A. Divide-and-conquer

  ---

  Explanation/Reference:

  The "divide-and-conquer" approach is a problem-solving strategy where a large, complex problem is broken down into smaller, more manageable parts. In this case, the IT team has identified multiple potential underlying causes for the global system outages, and each team member has been assigned an area to troubleshoot. This is an example of the divide-and-conquer approach, as the IT team is breaking down the large problem of global system outages into smaller, more manageable parts that can be investigated and resolved individually.

• Question 128:

  A network administrator received a ticket about intermittent poor performance of a manufacturing device. The engineer who submitted the ticket states the issue occurs when the device is sending or receiving larger volumes of network traffic. The physical copper path between the device and the switch tests successfully. Which of the following should the network administrator do NEXT?

  A. Verify the speed/duplex settings.
  B. Replace the switch uplink transceivers.
  C. Enable port aggregation.
  D. Change to shielded patch cables.
  E. Enable quality of service.
  A. Verify the speed/duplex settings.

• Question 129:

  Which of the following attack vectors represents a large number of devices sending access requests to a website, making it unavailable to respond?

  A. Virus
  B. Botnet
  C. ARP spooling
  D. DOoS
  D. DOoS

  ---

  Explanation/Reference:

  DDoS (Distributed Denial of Service) attack is an attack vector in which a large number of devices send access requests to a website, making it unavailable to respond. In a DDoS attack, the devices used to send the access requests are often part of a botnet, which is a network of compromised devices that are controlled by a single entity. The goal of a DDoS attack is to overwhelm the website with traffic, making it difficult or impossible for legitimate users to access the site. Other attack vectors such as viruses, ARP spoofing, or individual devices sending access requests are not likely to cause the same level of disruption as a DDoS attack.

• Question 130:

  Which of the following protocols is used to allow multiple hosts to share a common IP address?

  A. HTTPS
  B. ARP
  C. CARP
  D. NAT
  D. NAT