CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 301:

  Which of the following is the most likely reason an insurance brokerage would enforce VPN usage?

  A. To encrypt sensitive data in transit

  B. To secure the endpoints

  C. To maintain contractual agreements

  D. To comply with data retention requirements

  Correct Answer: A

  The most likely reason an insurance brokerage would enforce VPN usage is to encrypt sensitive data in transit. A VPN (Virtual Private Network) is a technology that creates a secure and encrypted tunnel between two or more devices over a public network, such as the internet. A VPN allows users to access remote resources or services as if they were on the same private network, while protecting their data from interception, modification, or spoofing by malicious actors. An insurance brokerage would use a VPN to protect the confidentiality and integrity of sensitive data, such as customer information, financial records, or insurance policies, that are transmitted over the internet. References: CompTIA Network+ N10-008 Certification Study Guide, page 403; The Official CompTIA Network+ Student Guide (Exam N10-008), page 15-5.

• Question 302:

  A network administrator is in the process of installing a new broadband circuit. The administrator assigns the new static IP address with a /30 prefix. However, the administrator is unable to connect to the internet. Given the following information:

  IP address: 4.11.17.6

  Subnet mask: 255.255.255.252

  Default gateway: 4.11.17.1 DNS1: 1.1.1.1

  DNS2: 8.8.8.8

  Which of the following is the most likely cause?

  A. Routing table

  B. Subnet mask

  C. DNS

  D. Default gateway

  Correct Answer: D

  The most likely cause of the administrator's inability to connect to the internet is the incorrect default gateway. The default gateway is the IP address of the router that connects the local network to the internet. The default gateway should be in the same subnet as the IP address of the device. However, in this case, the IP address of the device is 4.11.17.6 and the subnet mask is 255.255.255.252, which means the subnet has only four addresses: 4.11.17.4, 4.11.17.5, 4.11.17.6, and 4.11.17.7. The first and the last addresses are reserved for the network and the broadcast, respectively, so the only valid addresses for the device and the gateway are 4.11.17.5 and 4.11.17.6. Therefore, the default gateway should be 4.11.17.5, not 4.11.17.1, which is in a different subnet. The routing table, the subnet mask, and the DNS are not the causes of the problem, as they are either correct or irrelevant for the internet connectivity.

• Question 303:

  An IT intern moved the location of a WAP from one conference room to another. The WAP was unable to boot following the move. Which of the following should be used to fix the issue?

  A. Antenna

  B. WLAN controller

  C. Media converter

  D. PoE injector

  Correct Answer: D

  A PoE injector is a device that provides power over Ethernet (PoE) to a WAP or other network device that does not have a built-in power supply. A PoE injector connects to a power outlet and an Ethernet cable, and sends both power and

  data to the WAP. If the WAP was moved to a location where there is no power outlet or PoE switch, it would need a PoE injector to boot up.

  References:

  Part 3 of the current page talks about PoE and PoE injectors as a way to power WAPs.

  [This article] explains how PoE injectors work and how to use them.

• Question 304:

  An organization has a guest network with a network IP range of 192.168.1.0/28 using a DHCP pool. One visitor reported difficulties connecting and configured a static IP address. Following this action, another visitor reported intermittent connection issues. Which of the following is the most likely reason?

  A. Address pool exhaustion

  B. Duplicate IP addresses

  C. Misconfigured default gateway

  D. Incorrect subnet mask

  Correct Answer: B

  A duplicate IP address occurs when two devices on the same network have the same IP address assigned to them. This can cause intermittent connection issues, as the network devices may not be able to distinguish between the two conflicting devices. A duplicate IP address can be caused by a visitor manually configuring a static IP address that is already in use by another device on the guest network. The network IP range of 192.168.1.0/28 has only 14 usable host addresses, so the chances of a duplicate IP address are higher than a larger network.

• Question 305:

  A SQL server connects over port:

  A. 445.

  B. 995

  C. 1433.

  D. 1521.

  Correct Answer: C

  A SQL server connects over port 1433. Port numbers are used to identify specific applications or services on a network device. Port 1433 is the default port for Microsoft SQL Server, which is a relational database management system that uses SQL (Structured Query Language) to store and manipulate data. References: CompTIA Network+ N10-008 Certification Study Guide, page 147; The Official CompTIA Network+ Student Guide (Exam N10-008), page 6-4.

• Question 306:

  Which of the following best describes the purpose of an access control vestibule?

  A. To mitigate an on-path attack

  B. To mitigate tailgating

  C. To mitigate phishing

  D. To mitigate snooping

  Correct Answer: B

  An access control vestibule, also known as a mantrap, is a physical security access control system that consists of a small space with two sets of interlocking doors. The first set of doors must close before the second set opens, preventing

  unauthorized individuals from following authorized individuals into facilities with controlled access. This activity, also known as tailgating, results in unauthorized access to the facility. An access control vestibule can help deter and detect

  tailgating attempts, as well as provide a containment area while authorization for physical access is verified.

  References:

  Access Control Vestibules: Types and Peculiarities Mantrap (access control)

  PE-3 (8): Access Control Vestibules

• Question 307:

  A company wants to implement a disaster recovery site for non-critical applications, which can tolerate a short period of downtime. Which of the following types of sites should the company implement to achieve this goal?

  A. Hot

  B. Cold

  C. warm

  D. Passive

  Correct Answer: C

  The type of site that the company should implement for non-critical applications that can tolerate a short period of downtime is a warm site. A warm site is a disaster recovery site that has some pre-installed equipment and software, but not as much as a hot site, which is fully operational and ready to take over the primary site's functions in case of a disaster. A warm site requires some time and effort to activate and synchronize with the primary site, but not as much as a cold site, which has no equipment or software installed and requires a lot of configuration and testing. A passive site is not a common term for a disaster recovery site, but it could refer to a site that only receives backups from the primary site and does not actively participate in the network operations.

• Question 308:

  A customer hired a network consultant to install a new wireless network with the following specifications:

  2.4GHz 11Mbps 20MHz

  Which of the following standards best fits these requirements?

  A. 802.11ac

  B. 802.11b

  C. 802.11g

  D. 802.11n

  Correct Answer: B

  The 802.11b standard is a wireless networking protocol that operates in the 2.4GHz frequency band and supports a maximum data rate of 11Mbps. It uses a 20MHz channel width and a direct-sequence spread spectrum (DSSS) modulation technique2. The 802.11b standard was released in 1999 and is backward compatible with the original 802.11 standard3. The other standards do not match the specifications given by the customer. 802.11ac operates in the 5GHz band and supports higher data rates up to 6.9Gbps. 802.11g also operates in the 2.4GHz band but supports data rates up to 54Mbps. 802.11n can operate in both 2.4GHz and 5GHz bands and supports data rates up to 600Mbps. It also uses a wider channel width of 40MHz and a multiple-input multiple-output (MIMO) technology3.

• Question 309:

  Which of the following is a document that states what the minimum performance expectations are within a network?

  A. Memorandum of understanding

  B. Service-level agreement

  C. Non-disclosure agreement

  D. Baseline metrics

  Correct Answer: B

  A service-level agreement (SLA) is a document that states what the minimum performance expectations are within a network, such as uptime, throughput, latency, and security. An SLA is usually signed between a service provider and a customer, and it specifies the penalties or remedies if the service level is not met

• Question 310:

  A network manager wants to set up a remote access system for the engineering staff. Access to this system will be over a public IP and secured with an ACL.

  Which of the following best describes this system?

  A. VPN

  B. Secure Shell

  C. Jump server D. API

  Correct Answer: A

  Setting up a remote access system for the engineering staff that is accessible over a public IP and secured with an Access Control List (ACL) best describes a Virtual Private Network (VPN) setup. A VPN allows remote users to securely connect to the internal network over the internet by encrypting the data traffic.