CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 171:

  Which of the following security concepts is related to ensuring that encrypted data is not edited while in transit?

  A. Zero trust

  B. Integrity

  C. Availability

  D. Confidentiality

  Correct Answer: B

• Question 172:

  Which of the following antenna types would most likely be used in a network repeater that is housed in a central point in a home office?

  A. Omnidirectional

  B. Parabolic

  C. High-gain

  D. Patch

  Correct Answer: A

• Question 173:

  A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10GB connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

  A. Port mirroring

  B. Log aggregation

  C. Flow data

  D. Packet capture

  Correct Answer: C

  Flow data, collected through flow monitoring protocols such as NetFlow, sFlow, or IPFIX, provides aggregated information about network traffic, including details on source and destination IP addresses, ports, protocols, and more. This method doesn't capture the actual packet contents but summarizes network traffic flow.

  By leveraging flow data, the network administrator can gather information about the traffic patterns and bandwidth usage across the network. This method is less resource-intensive than performing packet captures and can provide valuable insights into the sources and destinations of the traffic causing the saturation on the 40Gb connection.

• Question 174:

  Which of the following OSI model layers are responsible for handling packets from the sources to the destination and checking for errors? (Choose two.)

  A. Physical

  B. Session

  C. Data link

  D. Network

  E. Presentation F. Application

  Correct Answer: CD

  Layers responsible for handling packets from source to destination and checking for errors in the OSI model are:

  Data link: This layer is responsible for framing packets, error detection, and handling the access to the physical network medium. It includes the logical link control (LLC) sublayer and the media access control (MAC) sublayer. Network: This

  layer is responsible for routing packets between different networks, logical addressing, and providing services such as fragmentation and error handling. It includes IP (Internet Protocol) in the case of the TCP/IP protocol suite.

• Question 175:

  A network administrator needs to implement routing capabilities in a hypervisor. Which of the following should the administrator most likely implement?

  A. VPC

  B. Firewall

  C. NFV

  D. laaS

  Correct Answer: C

  To implement routing capabilities in a hypervisor, the administrator should most likely implement NFV (Network Functions Virtualization). NFV involves virtualizing network functions, such as routing, within a software environment rather than relying on dedicated hardware appliances. This allows for more flexibility, scalability, and efficient use of resources in a virtualized environment.

• Question 176:

  Which of the following is the most secure way to provide site-to-site connectivity?

  A. VXLAN

  B. IKE

  C. GRE

  D. IPSec

  Correct Answer: D

  IPSec (Internet Protocol Security) is considered the most secure way to provide site-to-site connectivity. IPSec is a suite of protocols that provides secure communication over IP networks. It is commonly used to establish Virtual Private Network (VPN) connections, ensuring confidentiality, integrity, and authenticity of the data being transmitted between sites.

  VXLAN (Virtual Extensible LAN), IKE (Internet Key Exchange), and GRE (Generic Routing Encapsulation) are also used in networking but are not specifically designed for providing the same level of end-to-end security as IPSec. VXLAN is used for virtualized networks, IKE is a key exchange protocol often used with IPSec, and GRE is a tunneling protocol that doesn't inherently provide encryption.

• Question 177:

  A network administrator requires redundant routers on the network, but only one default gateway is configurable on a workstation. Which of the following will allow for redundant routers with a single IP address?

  A. EIGRP

  B. VRRP

  C. MPLS

  D. STP

  Correct Answer: B

  VRRP (Virtual Router Redundancy Protocol) is a protocol that provides a way to have redundant routers on a network, allowing for a single default gateway IP address to be configured on workstations. In a VRRP setup, multiple routers share a virtual IP address and a virtual MAC address. One router is elected as the master, and if it fails, another router takes over, ensuring continuous network connectivity.

  Options A (EIGRP), C (MPLS), and D (STP) are not specifically designed for providing redundant routers with a single IP address for workstations. EIGRP is a routing protocol, MPLS is a networking technology, and STP (Spanning Tree Protocol) is used for loop prevention in Ethernet networks.

• Question 178:

  Which of the following security methods uses physical characteristics of a person to authorize access to a location?

  A. Access control vestibule

  B. Palm scanner

  C. PIN pad

  D. Digital card reader

  E. Photo ID

  Correct Answer: B

  A palm scanner is a security method that uses physical characteristics of a person, specifically the unique features of their palm or hand, to authorize access to a location. This biometric method is based on the individual's palm print, which is unique to each person.

• Question 179:

  Which of the following fiber connector types is the most likely to be used on a network interface card?

  A. LC

  B. SC

  C. ST

  D. MPO

  Correct Answer: A

  The LC (Lucent Connector) is the most likely fiber connector type to be used on a network interface card (NIC). LC connectors are small, have a high density, and are commonly used in data center and enterprise environments. They are well-suited for connections on NICs and switches due to their compact size and ease of use.

• Question 180:

  Which of the following is the most cost-effective way for a network administrator to establish a persistent, secure connection between two facilities?

  A. Site-to-site VPN

  B. SSH tunnel

  C. API gateway

  D. Dedicated line

  Correct Answer: A

  A site-to-site VPN (Virtual Private Network) is the most cost-effective way for a network administrator to establish a persistent, secure connection between two facilities. It allows secure communication over the internet by encrypting the data transmitted between the two locations. Site-to-site VPNs are a practical and economical solution for connecting geographically dispersed sites over the public internet while maintaining a high level of security.