CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 281:

  An organization has a security requirement that all network connections can be traced back to a user. A network administrator needs to identify a solution to implement on the wireless network. Which of the following is the best solution?

  A. Implementing enterprise authentication

  B. Requiring the use of PSKs

  C. Configuring a captive portal for users

  D. Enforcing wired equivalent protection

  Correct Answer: A

  Enterprise authentication is a method of securing wireless networks that uses an external authentication server, such as RADIUS, to verify the identity of users and devices. Enterprise authentication can provide user traceability by logging the

  network connections and activities of each authenticated user. This can help the organization meet its security requirement and comply with any regulations or policies that mandate user accountability12.

  References:

  CompTIA Network+ N10-008 Certification Exam Objectives, page 83 CompTIA Network+ Cert Guide: Wireless Networking, page 13

• Question 282:

  A network contains 25 access points. Which of the following devices would be best to change configurations on all the devices remotely?

  A. WLAN controller

  B. Load balancer

  C. Bridge

  D. Layer 3 switch

  Correct Answer: A

  A WLAN controller is a device that can centrally manage and configure multiple access points in a wireless network. A WLAN controller can change settings on all the devices remotely, such as SSIDs, security policies, firmware updates, and channel assignments. A WLAN controller can also monitor the performance and status of the access points and provide load balancing and fault tolerance

• Question 283:

  Which of the following attacks utilizes a network packet that contains multiple network tags?

  A. MAC flooding

  B. VLAN hopping

  C. DNS spoofing

  D. ARP poisoning

  Correct Answer: B

• Question 284:

  A network administrator is in the process of installing 35 PoE security cameras. After the administrator installed and tested the new cables, the administrator installed the cameras. However, a small number of the cameras do not work. Which of the following is the most likely reason?

  A. Incorrect wiring standard

  B. Power budget exceeded

  C. Signal attenuation

  D. Wrong voltage

  Correct Answer: B

  The power budget is the total amount of power that a PoE switch or injector can provide to the connected PoE devices. If the power budget is exceeded, some of the PoE devices may not receive enough power to function properly. To troubleshoot this issue, the network administrator should check the power consumption of each PoE device and the power capacity of the PoE switch or injector.

• Question 285:

  A network consultant is setting up a new wireless infrastructure. The new infrastructure is primarily focused on supporting legacy equipment that does not support the newest standards. Which of the following frequency ranges will the consultant most likely have to support?

  A. 2.4GHz

  B. 5GHz

  C. 5.9GHz

  D. 6GHz

  Correct Answer: A

  The most likely frequency range that the network consultant will have to support is 2.4GHz. This is because the most common legacy wireless standards, 802.11b and 802.11g, use the 2.4GHz range1. IEEE 802.11a uses 5GHz exclusively,

  and 5.9GHz and 6GHz are not widely used by legacy equipment. Therefore, A. 2.4GHz is the correct answer.

  https://www.networkcomputing.com/networking/wireless-beginners-part-1-rf-and-waves

• Question 286:

  A network engineer needs to change an entire subnet of SLAAC-configured workstation addresses. Which of the following methods would be the best for the engineer to use?

  A. Change the address prefix in ARP in order for the workstations to retrieve their new addresses.

  B. Change the address prefix in a router in order for the router to advertise the new prefix with an ND.

  C. Change the address prefix scope in a DHCP server in order for the workstations to retrieve their new addresses.

  D. Change the workstations' address prefix manually because an automated method does not exist.

  Correct Answer: B

  SLAAC (Stateless Address Autoconfiguration) is a mechanism that enables each host on the network to auto-configure a unique IPv6 address without any device keeping track of which address is assigned to which node12. SLAAC uses link-local addresses and the interface's MAC address or a random number to generate the host portion of the IPv6 address2. SLAAC also relies on Router Solicitation (RS) and Router Advertisement (RA) messages to obtain the network prefix and other information from a router12. Therefore, to change an entire subnet of SLAAC-configured workstation addresses, the network engineer needs to change the address prefix in a router and let the router advertise the new prefix with an ND (Neighbor Discovery) message. This way, the workstations will receive the new prefix and update their IPv6 addresses accordingly3.

• Question 287:

  An attacker sends more connection requests than a server can handle, causing the server to crash- Which of the following types of attacks is this an example of?

  A. ARP poisoning

  B. Denial-of-service

  C. MAC flooding

  D. On-path

  Correct Answer: B

  A denial-of-service (DoS) attack is an example of an attack where an attacker sends more connection requests than a server can handle, causing the server to crash. A DoS attack is a type of cyberattack that aims to disrupt the normal functioning of a network service or resource by overwhelming it with excessive or malformed traffic. A DoS attack can prevent legitimate users from accessing the service or resource, resulting in degraded performance, unavailability, or data loss. A DoS attack can target various network layers, protocols, or components, such as servers, routers, firewalls, or applications.

• Question 288:

  A global company has acquired a local company. The companies are geographically separate. The IP address ranges for the two companies are as follows:

  Global company: 10.0.0.0/16 Local company: 10.0.0.0/24

  Which of the following can the network engineer do to quickly connect the two companies?

  A. Assign static routing to advertise the local company's network.

  B. Assign an overlapping IP address range to both companies.

  C. Assign a new IP address range to the local company.

  D. Assign a NAT range to the local company.

  Correct Answer: C

  Assigning a new IP address range to the local company is the best option to quickly connect the two companies without causing any IP address conflicts or overlaps. This option requires reconfiguring the local company's network devices and updating the routing tables on both sides, but it avoids the need for any NAT or static routing solutions that may introduce additional complexity, cost, or performance issues12

• Question 289:

  Which of the following documents dictates the uptimes that were agreed upon by the involved parties?

  A. MOU

  B. BYOD

  C. SLA

  D. NDA

  Correct Answer: C

  An SLA (Service Level Agreement) is a document that defines the expected level of service and performance guaranteed by a service provider to a customer. It usually specifies metrics such as uptime, availability, reliability, response time, and compensation or penalties for not meeting the agreed standards. An SLA is a way of ensuring that both parties are clear about their roles and responsibilities, and that the customer receives the quality of service they paid for.

• Question 290:

  A network manager wants to view network traffic for devices connected to a switch. A network engineer connects an appliance to a free port on the switch and needs to configure the switch port connected to the appliance. Which of the following is the best option for the engineer to enable?

  A. Trunking

  B. Port mirroring

  C. Full duplex

  D. SNMP

  Correct Answer: B

  Port mirroring is a feature that allows a switch to copy the traffic from one or more ports to another port, where a network analyzer or a monitoring device can capture and analyze the traffic. Port mirroring is useful for troubleshooting and security purposes, as it allows the network engineer to see the traffic that is passing through the switch without affecting the normal operation of the network.