CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 261:

  A technician is troubleshooting a user's connectivity issues and finds that the computer's IP address was changed to 169.254.0.1.

  Which of the following is the most likely reason?

  A. Two or more computers have the same IP address in the ARP table.

  B. The computer automatically set this address because the DHCP was not available.

  C. The computer was set up to perform as an NTP server.

  D. The computer is on a VPN and is the first to obtain a different IP address in that network.

  Correct Answer: B

  IP addresses beginning with 169.254. are called link-local addresses or APIPA (Automatic Private IP Addressing)1. They are assigned by the computer itself when it cannot reach a DHCP server to obtain a valid IP address from the network2. This can happen for several reasons, such as a faulty router, a misconfigured network, or a disconnected cable3. To troubleshoot this issue, the technician should check the network settings, the router configuration, and the physical connection of the computer. The technician should also try to renew the IP address by using the command ipconfig /renew in Windows or dhclient in Linux. If the problem persists, the technician may need to contact the network administrator or the ISP for further assistance.

• Question 262:

  Which of the following DNS records maps an alias to a true name?

  A. AAAA

  B. NS

  C. TXT

  D. CNAME

  Correct Answer: D

  A CNAME (Canonical Name) record is a type of DNS (Domain Name System) record that maps an alias name to a canonical or true domain name. For example, a CNAME record can map blog.example.com to example.com, which means that blog.example.com is an alias of example.com. A CNAME record is useful when you want to point multiple subdomains to the same IP address, or when you want to change the IP address of a domain without affecting the subdomains1.

• Question 263:

  A network administrator needs to create a way to redirect a network resource that has been on the local network but is now hosted as a SaaS solution. Which of the following records should be used to accomplish the task?

  A. TXT

  B. AAA

  C. PTR

  D. CNAME

  Correct Answer: D

  CNAME stands for Canonical Name, and it is a type of DNS record that creates an alias for another domain name. A CNAME record can be used to redirect a network resource that has been moved to a different location, such as a SaaS solution. For example, if a web server that was previously hosted on the local network with the domain name www.example.com is now hosted by a SaaS provider with the domain name www.saasprovider.com, a CNAME record can be created to point www.example.com to www.saasprovider.com. This way, the users can still access the web server using the original domain name, and the DNS server will resolve it to the new domain name.

• Question 264:

  Which of the following OSI model layers will ensure messages are transmitted to their destinations and no data is duplicated?

  A. Session

  B. Data link

  C. Network

  D. Transport

  Correct Answer: D

  The transport layer is the fourth layer of the OSI model, and it is responsible for end-to-end delivery of data over a network. It uses standard protocols such as TCP, UDP, and DCCP to enhance its functionalities. One of the main functions of the transport layer is to ensure that messages are transmitted to their destinations reliably and in the correct order. It also prevents data duplication by using sequence numbers, acknowledgments, and retransmission mechanisms

• Question 265:

  A network technician needs to install patch cords from the UTP patch panel to the access switch for a newly occupied set of offices. The patch panel is not labeled for easy jack identification. Which of the following tools provides the easiest way to identify the appropriate patch panel port?

  A. Toner

  B. Laptop

  C. Cable tester

  D. Visual fault locator

  Correct Answer: A

  A toner is a tool that generates an audible signal that can be traced by a probe. A network technician can use a toner to identify the appropriate patch panel port by connecting the toner to one end of the patch cord and using the probe to scan the patch panel until the signal is detected. A toner is the easiest way to identify the patch panel port when the patch panel is not labeled, as it does not require a laptop, a cable tester, or a visual fault locator. A toner can also be used to locate breaks or shorts in a cable, or to verify continuity.

• Question 266:

  A network administrator is notified that a user cannot access resources on the network. The network administrator checks the physical connections to the workstation labeled User and sees the Ethernet is properly connected. However, the network interface's indicator lights are not blinking on either the computer or the switch. Which of the following is the most likely cause?

  A. The switch failed.

  B. The default gateway is wrong.

  C. The port is shut down.

  D. The VLAN assignment is incorrect.

  Correct Answer: C

  If the port is shut down, it means that the switch has disabled the port and is not sending or receiving any traffic on it. This would explain why the network interface's indicator lights are not blinking on either the computer or the switch, and why the user cannot access resources on the network. The port could be shut down manually by the network administrator, or automatically by the switch due to security or error conditions.

• Question 267:

  A network security engineer is responding to a security incident. The engineer suspects that an attacker used an authorized administrator account to make configuration changes to the boundary firewall. Which of the following should the network security engineer review?

  A. Network traffic logs

  B. Audit logs

  C. Syslogs

  D. Event logs

  Correct Answer: B

  Audit logs are records of the actions performed by users or processes on a system or network device. They can provide information about who made what changes, when, and why. Audit logs are essential for detecting and investigating security incidents, as well as for ensuring compliance with policies and regulations. Audit logs can help the network security engineer to identify the source of the unauthorized configuration changes to the boundary firewall, as well as the scope and impact of the changes. References1 - Changes to Cyber Essentials requirements ?April 2021 update2 - 8 Firewall Best Practices for Securing the Network3 - How to secure your network boundaries with a firewall

• Question 268:

  Which of the following is a cost-effective advantage of a split-tunnel VPN?

  A. Web traffic is filtered through a web filter.

  B. More bandwidth is required on the company's internet connection.

  C. Monitoring detects insecure machines on the company's network.

  D. Cloud-based traffic flows outside of the company's network.

  Correct Answer: D

  A split-tunnel VPN is a configuration where only specific traffic is routed through a VPN, while the remaining data is sent directly over the internet. This can reduce the bandwidth consumption and cost of the company's internet connection, as cloud-based traffic does not need to pass through the VPN tunnel. A web filter, monitoring, and security are not advantages of a split-tunnel VPN, as they may require all traffic to go through the VPN.

  https://www.auvik.com/franklyit/blog/vpn-split-tunneling/

• Question 269:

  Which of the following objectives does an evil twin achieve?

  A. DNS poisoning

  B. Log-in credentials

  C. ARP spoofing

  D. Denial of service

  Correct Answer: B

  The objective that an evil twin achieves is log-in credentials. An evil twin is a type of rogue access point that mimics a legitimate wireless network by using the same SSID, encryption, and authentication methods. An evil twin can trick unsuspecting users into connecting to it instead of the real network, and then capture their log-in credentials or other sensitive data. An evil twin can also perform man-in-the-middle attacks, redirecting or modifying the user's traffic.

• Question 270:

  A network engineer is installing hardware in a newly renovated data center. Major concerns that were addressed during the renovation induded air circulation, building power redundancy, and the need for continuous monitoring. The network engineer IS creating alerts based on the following operation specifications:

  

  Which of the following should the network engineer configure?

  A. Environmental monitoring alerts for humidity greater than 95%

  B. SIEM to parse syslog events for a failed power supply

  C. SNMP traps to report when the chassis temperature exceeds 950F (3500)

  D. UPS monitoring to report when input voltage drops below 220VAC

  Correct Answer: C