CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 251:

  An engineer is designing a network topology for a company that maintains a large on-premises private cloud. A design requirement mandates internet-facing hosts to be partitioned off from the internal LAN and internal server IP ranges. Which of the following defense strategies helps meet this requirement?

  A. Implementing a screened subnet
  B. Deploying a honeypot
  C. Utilizing network access control
  D. Enforcing a Zero Trust model
  A. Implementing a screened subnet

  ---

  Explanation/Reference:

  A screened subnet is a network segment that is isolated from both the internal LAN and the Internet by firewalls. A screened subnet can be used to host internet- facing hosts such as web servers, email servers, or DNS servers. A screened

  subnet provides an additional layer of security and prevents direct access to the internal network from the Internet.

  References: Network+ Study Guide Objective 3.1: Explain the purposes and use cases for advanced networking devices.

• Question 252:

  Which of the following can be used to aggregate logs from different devices and would make analysis less difficult?

  A. Syslog
  B. SIEM
  C. Event logs
  D. NetFlow
  B. SIEM

  ---

  Explanation/Reference:

  SIEM stands for Security Information and Event Management, and it is a system that collects, normalizes, and analyzes log data from different sources in a centralized platform. SIEM can help identify security incidents, monitor network performance, and generate reports and alerts. SIEM can make log analysis less difficult by providing a unified view of the log data, correlating events across different devices, and applying rules and filters to detect anomalies and patterns12. References: 1: CompTIA Network+ N10-008 Cert Guide - Chapter 14: Network Monitoring32: Log Aggregation: What It Is and How It Works | Datadog4

• Question 253:

  Given the following information:

  

  Which of the following command-line tools would generate this output?

  A. netstat
  B. arp
  C. dig
  D. tracert
  A. netstat

• Question 254:

  A network technician is required to install a network device to provide service to an office area. The office area has 23 users and two printers that must be able to connect to the file server in a different building. Which of the following network devices should the technician use?

  A. Media converter
  B. Switch
  C. Bridge
  D. Wireless range extender
  B. Switch

• Question 255:

  Which of the following is the first step to troubleshoot a network issue?

  A. Identify the problem.
  B. Document the findings.
  C. Establish a theory of probable cause.
  D. Test the theory to determine the cause.
  A. Identify the problem.

• Question 256:

  When accessing corporate network resources, users are required to authenticate to each application they try to access. Which of the following concepts does this BEST represent?

  A. SSO
  B. Zero Trust
  C. VPN
  D. Role-based access control
  B. Zero Trust

• Question 257:

  A network administrator received complaints of intermittent network connectivity issues. The administrator investigates and finds that the network design contains potential loop scenarios. Which of the following should the administrator do?

  A. Enable spanning tree.
  B. Configure port security.
  C. Change switch port speed limits.
  D. Enforce 802. IQ tagging.
  A. Enable spanning tree.

  ---

  Explanation/Reference:

  Spanning tree is a protocol that prevents network loops by dynamically disabling or enabling switch ports based on the network topology. Network loops can cause intermittent connectivity issues, such as broadcast storms, MAC address table

  instability, and multiple frame transmission. By enabling spanning tree, the network administrator can ensure that there is only one active path between any two network devices at any given time.

  References:

  CompTIA Network+ N10-008 Certification Exam Objectives, page 91 CompTIA Network+ Cert Guide: Switching and Virtual LANs, page 172

• Question 258:

  Which of the following can be used to limit the ability of devices to perform only HTTPS connections to an internet update server without exposing the devices to the public internet?

  A. Allow connections only to an internal proxy server.
  B. Deploy an IDS system and place it in line with the traffic.
  C. Create a screened network and move the devices to it.
  D. Use a host-based network firewall on each device.
  A. Allow connections only to an internal proxy server.

  ---

  Explanation/Reference:

  Allow connections only to an internal proxy server.

  By allowing connections only to an internal proxy server, you can limit the devices to perform only HTTPS connections to the internet update server without exposing them to the public internet. The proxy server can be configured to allow only HTTPS connections to the specific update server while blocking all other traffic, providing a secure and controlled connection.

• Question 259:

  Which of the following will reduce routing table lookups by performing packet forwarding decisions independently of the network layer header?

  A. MPLS
  B. mGRE
  C. EIGRP
  D. VRRP
  A. MPLS

  ---

  Explanation/Reference:

  Multiprotocol Label Switching, or MPLS, is a networking technology that routes traffic using the shortest path based on "labels," rather than network addresses, to handle forwarding over private wide area networks. As a scalable and protocol-independent solution, MPLS assigns labels to each data packet, controlling the path the packet follows. MPLS greatly improves the speed of traffic, so users don't experience downtime when connected to the network.

• Question 260:

  A new employee is learning how to use multiple company applications. Upon logging in to one application, the employee notices the other applications do not require authentication. Which of the following explains the reason why this is happening?

  A. Kerberos is being used to authenticate.
  B. The employee logged in to a captive portal.
  C. Single sign-on is being used.
  D. Local authentication was performed.
  C. Single sign-on is being used.