CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 291:

  After a company installed a new IPS, the network is experiencing speed degradation. A network administrator is troubleshooting the issue and runs a speed test. The results from the different network locations are as follows:

  Which of the following is the most likely issue?

  A. Packet loss

  B. Bottlenecking

  C. Channel overlap

  D. Network congestion

  Correct Answer: B

  The most likely issue is bottlenecking. Bottlenecking occurs when a component or device limits the performance or capacity of the network. In this case, the IPS (intrusion prevention system) may be causing a bottleneck by inspecting and filtering the incoming and outgoing traffic, which reduces the speed and bandwidth available for the network devices12 To confirm this issue, the network administrator can compare the speed test results before and after installing the IPS, and check the IPS configuration and logs for any errors or warnings. The network administrator can also try to bypass the IPS temporarily and run the speed test again to see if there is any improvement3 If the IPS is indeed the cause of the bottleneck, the network administrator can try to optimize the IPS settings, such as adjusting the inspection rules, thresholds, and priorities, to reduce the processing overhead and latency. Alternatively, the network administrator can upgrade the IPS hardware or software, or add more IPS devices to balance the load and increase the throughput45

• Question 292:

  While working in a coffee shop, an attacker watches a user log in to a corporate system and writes down the user's log-in credentials. Which of the following social engineering attacks is this an example of?

  A. Shoulder surfing

  B. Dumpster diving

  C. Phishing

  D. Tailgating

  Correct Answer: A

  Shoulder surfing is the social engineering attack where an attacker watches a user log in to a corporate system and writes down the user's log-in credentials. Social engineering is a type of attack that exploits human psychology and behavior to manipulate or trick people into revealing sensitive information or performing malicious actions. Shoulder surfing is a form of social engineering that involves observing or eavesdropping on someone's screen, keyboard, or paper documents to obtain confidential information such as passwords, PINs, or credit card numbers. Shoulder surfing can be done in person or remotely using cameras or other devices. Shoulder surfing can be prevented by using privacy filters, locking screens, shielding keyboards, or being aware of one's surroundings.

• Question 293:

  A customer connects a firewall to an ISP router that translates traffic destined for the internet. The customer can connect to the internet but not to the remote site. Which of the following will verify the status of NAT?

  A. tcpdump

  B. nmap

  C. ipconfig

  D. tracert

  Correct Answer: A

  tcpdump is a command-line tool that can capture and analyze network traffic on a given interface. tcpdump can verify the status of NAT by showing the source and destination IP addresses of the packets before and after they pass through the ISP router that translates traffic destined for the internet. tcpdump can also show the NAT protocol and port numbers used by the router. nmap, ipconfig, and tracert are not suitable tools for verifying the status of NAT, as they do not show the IP address translation process.

• Question 294:

  A server application requires large amounts of data to be sent at a consistent rate. Which of the following should an engineer most likely configure to meet these requirements?

  A. Link speed

  B. Jumbo frames

  C. Switch Virtual Interface

  D. Spanning tree

  Correct Answer: B

  Jumbo frames are Ethernet frames that have a payload size greater than the standard 1500 bytes. Jumbo frames can carry more data in each frame, which reduces the overhead and improves the throughput and efficiency of data transmission. Jumbo frames are commonly used in storage area networks (SANs), where large amounts of data need to be transferred between servers and storage devices

• Question 295:

  A network technician is troubleshooting an issue that involves connecting to a server via SSH. The server has one network interface that does not support subinterfaces. The technician runs a command on the server and receives the following output:

  

  On the host, the technician runs another command and receives the following:

  

  Which of the following best explains the issue?

  A. A firewall is blocking access to the server.

  B. The server is plugged into a trunk port.

  C. The host does not have a route to the server.

  D. The server is not running the SSH daemon.

  Correct Answer: C

• Question 296:

  A network administrator is deploying a new switch and wants to make sure that the default priority value was set for a spanning tree. Which of the following values would the network administrator expect to see?

  A. 4096

  B. 8192

  C. 32768

  D. 36684

  Correct Answer: C

  The default priority value for spanning tree is 32768, regardless of the STP version (legacy STP, RSTP, MSTP, Per-VLAN STP, Per-VLAN RSTP). This value can be modified by the network administrator to influence the root bridge election. The priority value must be set in increments of 4096, which is the minimum unit of change for the priority value.

• Question 297:

  Which of the following functions is used to prioritize network traffic based on the type of traffic?

  A. QoS

  B. VPN

  C. CDN

  D. TTL

  Correct Answer: A

  QoS stands for Quality of Service, which is a feature that allows you to prioritize network traffic based on the type of traffic, such as voice, video, data, or gaming. QoS can help improve the performance and reliability of critical applications by

  allocating more bandwidth and lower latency to them, while reducing the impact of less important or non-essential traffic1.

  VPN stands for Virtual Private Network, which is a technology that creates a secure and encrypted connection between two or more devices over the Internet. VPN can help protect your privacy and data from hackers, ISPs, and government

  surveillance, as well as access geo-restricted content and services2.

  CDN stands for Content Delivery Network, which is a network of servers that deliver web content to users based on their geographic location, the origin of the content, and the performance of the network. CDN can help improve the speed and

  availability of web content, such as images, videos, and scripts, by caching them on servers closer to the users3.

  TTL stands for Time To Live, which is a value that determines how long a packet can stay in a network before it is discarded or returned. TTL can help prevent network congestion and loops by limiting the lifespan of packets that are lost,

  corrupted, or delayed4.

• Question 298:

  A network administrator is looking for a solution to extend Layer 2 capabilities and replicate backups between sites. Which of the following is the best solution?

  A. Security Service Edge

  B. Data center interconnect

  C. Infrastructure as code

  D. Zero trust architecture

  Correct Answer: B

  Data center interconnect (DCI) is a solution that allows Layer 2 connectivity and data replication between geographically dispersed data centers. DCI can be implemented using various technologies, such as optical networks, MPLS, VPNs, or Ethernet. DCI can provide benefits such as improved disaster recovery, load balancing, resource pooling, and cloud services.

• Question 299:

  Which of the following can be used to identify users after an action has occurred?

  A. Access control vestibule

  B. Cameras

  C. Asset tag

  D. Motion detectors

  Correct Answer: B

• Question 300:

  A network engineer is interested in using wireless technologies in densely forested areas. Which of the following frequencies would be best for this use?

  A. 2.4GHz

  B. 5GHz

  C. 5.9GHz

  D. 6GHz

  Correct Answer: A

  2.4GHz frequency has better penetration and range than higher frequencies in forested environments, where there are many obstacles and interference sources.

  References:

  Wireless in The Woods: Experimental Evaluation of IEEE 802.11a/b/g in Forested Environments1

  High-Speed Wireless Access in Forested Rural Areas Using Analog Radio Over Fiber2