CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 21:

  A network engineer has added a new route on a border router and is trying to determine if traffic is using the new route. Which of the following commands should the engineer use?

  A. ping
  B. arp
  C. trace
  D. route
  C. trace

• Question 22:

  A network consultant is working with a software-defined network and is troubleshooting an issue with an application's instructions being properly translated for the network components. Which of the following is most likely at fault?

  A. Infrastructure layer
  B. Session layer
  C. Control layer
  D. Application layer
  C. Control layer

• Question 23:

  A technician has started a major network project to upgrade to a higher throughput standard. The technician will need to install new patch panels and breakout boxes to support this inlrastructure. Which of the following layers of the OSI model is the technician addressing at this stage of the upgrade?

  A. Physical
  B. Transport
  C. Network
  D. Data link
  A. Physical

• Question 24:

  A network security engineer is investigating a potentially malicious Insider on the network. The network security engineer would like to view all traffic coming from the user's PC to the switch without interrupting any traffic or having any downtime. Which of the following should the network security engineer do?

  A. Turn on port security.
  B. Implement dynamic ARP inspection.
  C. Configure 802.1Q.
  D. Enable port mirroring.
  D. Enable port mirroring.

  ---

  Explanation/Reference:

  Port mirroring is a feature that allows a network switch to copy the traffic from one or more ports to another port for monitoring purposes. Port mirroring can be used to analyze the network traffic from a specific source, destination, or protocol

  without affecting the normal operation of the network. Port mirroring can also help to detect and troubleshoot network problems, such as performance issues, security breaches, or policy violations. The other options are not correct because

  they do not meet the requirements of the question. They are:

  Turn on port security. Port security is a feature that restricts the number and type of devices that can connect to a switch port. Port security can help to prevent unauthorized access, MAC address spoofing, or MAC flooding attacks. However,

  port security does not allow the network security engineer to view the traffic from the user's PC to the switch.

  Implement dynamic ARP inspection. Dynamic ARP inspection (DAI) is a feature that validates the ARP packets on a network and prevents ARP spoofing attacks. DAI can help to protect the network from man-in-the-middle, denial-of-service,

  or data interception attacks. However, DAI does not allow the network security engineer to view the traffic from the user's PC to the switch. Configure 802.1Q. 802.1Q is a standard that defines how to create and manage virtual LANs (VLANs)

  on a network. VLANs can help to segment the network into logical groups based on function, security, or performance. However, 802.1Q does not allow the network security engineer to view the traffic from the user's PC to the switch.

  References1: Port Mirroring - an overview | ScienceDirect Topics2: Network+ (Plus) Certification | CompTIA IT Certifications3: Port Security - an overview | ScienceDirect Topics4: Dynamic ARP Inspection - an overview | ScienceDirect

  Topics5: 802.1Q - an overview | ScienceDirect Topics

• Question 25:

  A user from a remote office is reporting slow file transfers. Which of the following tools will an engineer MOST likely use to get detailed measurement data?

  A. Packet capture
  B. iPerf
  C. NetFlow analyzer
  D. Internet speed test
  B. iPerf

  ---

  Explanation/Reference:

  An engineer will most likely use IPerf to get detailed measurement data about the user's slow file transfers. IPerf is a tool used for measuring network performance and bandwidth, and it can be used to measure the speed and throughput of

  file transfers from the remote office. It can also provide detailed information about the latency and jitter of the connection, which can be used to troubleshoot the slow file transfers. Reference:

  CompTIA Network+ Study Manual (Chapter 10, Page 214).

• Question 26:

  A security engineer is trying to determine whether an internal server was accessed by hosts on the internet. The internal server was shut down during the investigation.

  Which of the following will the engineer review to determine whether the internal server had an unauthorized access attempt?

  A. The ARP table
  B. The NetFlow statistics
  C. The firewall logs
  D. The audit logs on the core switch
  C. The firewall logs

  ---

  Explanation/Reference:

  Although all these could be used in a situation like this, the key term was "from the internet," the only thing that watches/disseminates/monitors/ etc. your network from the internet is a firewall.

• Question 27:

  A network administrator is reviewing the following metrics from a network management system regarding a switchport. The administrator suspects an issue because users are calling in regards to the switchport's performance:

  

  Based on the information in the chart above, which of the following is the cause of these performance issues?

  A. The connected device is exceeding the configured MTU.
  B. The connected device is sending too many packets
  C. The switchport has been up for too long
  D. The connected device is receiving too many packets.
  E. The switchport does not have enough CRCs
  A. The connected device is exceeding the configured MTU.

  ---

  Explanation/Reference:

• Question 28:

  A network technician must connect a newly installed access switch in a warehouse to the distribution switch in the telecommunications closet. The distance between the two switches is 1,640ft (500m). Which of the following is the best cable choice?

  A. Fiber
  B. Cat 5e
  C. Cat 6a
  D. Coaxial
  A. Fiber

  ---

  Explanation/Reference:

  Fiber is the best cable choice for long distances, as it can transmit data over 1,640ft (500m) without significant signal loss or interference. Fiber is also immune to electromagnetic interference and can support higher bandwidths than copper cables. Cat 5e and Cat 6a are copper cables that have a maximum distance of 328ft (100m) for Ethernet networks. Coaxial cable is also a copper cable that can reach longer distances, but it is mainly used for cable TV and not for Ethernet networks.

• Question 29:

  A network technician receives a support ticket about an employee who has misplaced a company-owned cell phone that contains private company information. Which of the following actions should the network technician take to prevent data loss?

  A. Disable the user account.
  B. Lock the phone.
  C. Turn off the service.
  D. Execute remote wipe.
  D. Execute remote wipe.

  ---

  Explanation/Reference:

  Executing a remote wipe is the only way to ensure that company data is not released into the public or the wrong hands.

  Other answers will not release the data in the hard drive of the phone. Any attacker can take out the hard drive of the phone and extract the data.

• Question 30:

  Which of the following would MOST likely be used to review previous upgrades to a system?

  A. Business continuity plan
  B. Change management
  C. System life cycle
  D. Standard operating procedures
  B. Change management

  ---

  Explanation/Reference:

  Per CertMaster's own N10-008 book, it explains that the change-management process includes Request for Change (RFC) documentation--resources that record why and when a change, such as an upgrade, was made.

  None of the other options would provide documentation for PREVIOUS changes to a system. Standard operating procedures might document work instructions for handling previously encountered incidents, but not for systemic changes like upgrades.