CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 241:

  A network administrator wants to improve the security of the management console on the company's switches and ensure configuration changes made can be correlated to the administrator who conformed them. Which of the following should the network administrator implement?

  A. Port security
  B. Local authentication
  C. TACACS+
  D. Access control list
  C. TACACS+

  ---

  Explanation/Reference:

  TACACS+ is a protocol that provides centralized authentication, authorization, and accounting (AAA) for network devices and users. TACACS+ can help improve the security of the management console on the company's switches by verifying the identity and credentials of the administrators, enforcing granular access policies and permissions, and logging the configuration changes made by each administrator. This way, the network administrator can ensure only authorized and authenticated users can access and modify the switch settings, and also track and correlate the changes made by each user. References: https://www.comptia.org/blog/what-is-tacacs

• Question 242:

  A network administrator is creating a VLAN that will only allow executives to connect to a data source. Which of the following is this scenario an example of?

  A. Availability
  B. Confidentiality
  C. Internal threat
  D. External threat
  E. Integrity
  B. Confidentiality

• Question 243:

  Users report they cannot reach any websites on the internet. An on-site network engineer is able to duplicate the issue on a different PC. The network engineer then tries to ping a website and receives the following message

  Ping request could not find host www.google.com. Please check the name and try again.

  Which of the following is the next step the engineer should take?

  A. Ping 127.0.0.l to test local hardware.
  B. Test the website from outside the company.
  C. Ping internal name server functionality.
  D. Check internet firewall logs for blocked DNS traffic.
  C. Ping internal name server functionality.

• Question 244:

  A network security engineer locates an unapproved wireless bridge connected to the corporate LAN that is broadcasting a hidden SSID, providing unauthenticated access to internal resources. Which of the following types of attacks BEST describes this finding?

  A. Rogue access point Most Voted
  B. Evil twin
  C. ARP spoofing
  D. VLAN hopping
  A. Rogue access point Most Voted

  ---

  Explanation/Reference:

  A rogue access point is an illegitimate access point plugged into a network to create a bypass from outside into the legitimate network. By contrast, an evil twin is a copy of a legitimate access point.

• Question 245:

  At which of the following OSI model layers does a MAC filter list for a wireless infrastructure operate?

  A. Physical
  B. Network
  C. Session
  D. Data link
  D. Data link

  ---

  Explanation/Reference:

  A MAC filter list is a security feature that allows or denies access to a wireless network based on the MAC address of the device. A MAC address is a unique identifier assigned to a network interface card (NIC) at the physical layer of the OSI model. However, MAC filtering operates at the data link layer of the OSI model, where MAC addresses are used to encapsulate and deliver data frames between devices on the same network segment. References: CompTIA Network+ Certification Exam Objectives Version 7.0 (N10-007), Objective 3.1: Given a scenario, install and configure wireless LAN infrastructure and implement the appropriate technologies in support of wireless capable devices.

• Question 246:

  A wireless engineer installs a new 802.11g access point in a new part of a building. Users begin reporting slow connections, even with a strong signal. The engineer uses a packet analyzer and sees retransmitted and malformed packets, as well as some malformed WiMax packets. Which of the following issues is described?

  A. Refraction
  B. Interference
  C. Latency
  D. Overcapacity
  B. Interference

• Question 247:

  Users are reporting intermittent WiFi connectivity in a specific parts of a building. Which of the following should the network administrator check FIRST when troubleshooting this issue? (Choose two.)

  A. Site survey
  B. EIRP
  C. AP placement
  D. Captive portal
  E. SSID assignment
  F. AP association time
  A. Site survey
  C. AP placement

  ---

  Explanation/Reference:

  This is a coverage issue. WAP placement and power need to be checked. Site survey should be done NEXT because it takes a while.

• Question 248:

  Many IP security cameras use RTSP to control media playback. Which of the following default transport layer port numbers does RTSP use?

  A. 445
  B. 554
  C. 587
  D. 5060
  B. 554

  ---

  Explanation/Reference:

  RTSP stands for Real Time Streaming Protocol and is an application-level network protocol designed for controlling media playback on streaming media servers. RTSP uses the default transport layer port number 554 for both TCP and UDP1.

  Port 445 is used for SMB (Server Message Block), a protocol for file and printer sharing. Port 587 is used for SMTP (Simple Mail Transfer Protocol), a protocol for sending email messages. Port 5060 is used for SIP (Session Initiation

  Protocol), a protocol for initiating and managing multimedia sessions.

  References:

  Real Time Streaming Protocol - Wikipedia (https://en.wikipedia.org/wiki/Real_Time_Streaming_Protocol)

• Question 249:

  A network administrator plans to install network connectivity at a new remote office location. The administrator is concerned about how to troubleshoot network connectivity issues and reconfigure the remote router. The technician should use:

  A. an SD card with a backup configuration
  B. a TFTP server on the main network for backup configurations
  C. a modem using POTS.
  D. a second Ethernet interface for remote access.
  C. a modem using POTS.

  ---

  Explanation/Reference:

• Question 250:

  An administrator needs to connect two laptops directly to each other using 802.11ac but does not have an AP available. Which of the following describes this configuration?

  A. Basic service set
  B. Extended service set
  C. Independent basic service set
  D. MU-MIMO
  C. Independent basic service set

  ---

  Explanation/Reference:

  Independent basic service set (IBSS) is a wireless network configuration in which two or more wireless devices connect directly to each other without the use of an access point. This is also sometimes referred to as an ad-hoc network. This configuration would meet the administrator's requirements of connecting two laptops directly to each other using 802.11ac without the use of an AP.