CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 321:

  Which of the following routing protocols is hierarchal by nature and uses the router ID to control convergence?

  A. BGP

  B. OSPF

  C. EIGRP

  D. RIP

  Correct Answer: B

  OSPF stands for Open Shortest Path First, which is a link-state routing protocol that is hierarchal by nature and uses the router ID to control convergence. OSPF divides a large network into areas, which are logical groupings of routers that share the same topology information. Each area has a unique identifier and a designated router that connects it to the backbone area (area 0). OSPF uses the router ID, which is a 32-bit number that uniquely identifies each router in the network, to establish adjacencies and exchange routing information. OSPF also uses the router ID to break ties when choosing the best path to a destination. OSPF converges faster than distance-vector routing protocols such as RIP and EIGRP, as it uses the Dijkstra algorithm to calculate the shortest path based on the link cost. BGP, on the other hand, is a path-vector routing protocol that is used to exchange routing information between autonomous systems on the Internet. BGP does not use the router ID to control convergence, but rather uses attributes such as AS path, local preference, and MED to select the best route. BGP is not hierarchal by nature, as it does not divide the network into areas, but rather uses prefixes and policies to control the routing behavior.

• Question 322:

  A technician is working on a ticket for a user in the human resources department who received a new PC that does not connect to the internet. All users in human resources can access the internet. The technician can ping the PC from the human resources router but not from the IT network. Which of the following is the most likely cause of the issue?

  A. Duplicate IP address

  B. Misconfigured RIP

  C. Improper VLAN assignment

  D. Incorrect default gateway

  Correct Answer: D

  An incorrect default gateway can cause a PC to not connect to the internet, because the default gateway is the device that routes traffic from the local network to other networks. If the PC has a wrong default gateway configured, it may not be

  able to reach the internet router or the IT network router. The technician can ping the PC from the human resources router because they are on the same local network, but not from the IT network router because they are on different

  networks.

  A duplicate IP address can cause a PC to not communicate with other devices on the same network, because the IP address is the unique identifier of a device on a network. If two devices have the same IP address, they may cause IP

  conflicts and packet loss. However, a duplicate IP address would not prevent the technician from pinging the PC from the human resources router, because they are on the same network. A misconfigured RIP can cause a router to not learn

  or advertise routes to other networks, because RIP is a routing protocol that dynamically exchanges routing information between routers. If a router has a wrong RIP configuration, it may not be able to reach or share routes with other routers.

  However, a misconfigured RIP would not affect the PC's connectivity to the internet, because the PC does not use RIP. An improper VLAN assignment can cause a PC to not communicate with other devices on the same or different networks,

  because a VLAN is a logical segmentation of a network that isolates traffic based on criteria such as function, security, or performance. If a PC is assigned to a wrong VLAN, it may not be able to access the resources or services that it needs.

  However, an improper VLAN assignment would not prevent the technician from pinging the PC from the human resources router, because they are on the same physical network.

• Question 323:

  To reduce costs and increase mobility, a Chief Technology Officer (CTO) wants to adopt cloud services for the organization and its affiliates. To reduce the impact for users, the CTO wants key services to run from the on-site data center and enterprise services to run in the cloud. Which of the following deployment models is the best choice for the organization?

  A. Public

  B. Hybrid

  C. SaaS

  D. Private

  Correct Answer: B

  A hybrid cloud deployment model is a combination of on-premise and cloud solutions, where some resources are hosted in-house and some are hosted by a cloud provider. A hybrid cloud model can offer the benefits of both public and private clouds, such as scalability, cost-efficiency, security, and control12. A hybrid cloud model can also reduce the impact for users, as they can access the key services from the on-site data center and the enterprise services from the cloud

• Question 324:

  Which of the following network cables involves bouncing light off of protective cladding?

  A. Twinaxial

  B. Coaxial

  C. Single-mode

  D. Multimode

  Correct Answer: D

  Multimode fiber optic cables use multiple paths of light that bounce off the cladding, which is a layer of glass or plastic that surrounds the core of the cable. https://www.explainthatstuff.com/fiberoptics.html

• Question 325:

  Which of the following is a major difference between a router and a Layer 3 switch?

  A. A router can perform PAT, but a Layer 3 switch cannot.

  B. A Layer 3 switch is more efficient than a router.

  C. A router uses higher speed interfaces than a Layer 3 switch.

  D. A Layer 3 switch can run more routing protocols than a router.

  Correct Answer: B

• Question 326:

  A network engineer is troubleshooting application connectivity issues between a server and a client. The network engineer needs to view the certificate exchange between the two hosts. Which of the following tools should the network engineer use?

  A. dig

  B. tcpdump

  C. nmap

  D. traceroute

  Correct Answer: B

  tcpdump is a tool that can capture and analyze network traffic, including the certificate exchange between two hosts. It can display the contents of packets, such as the SSL/TLS handshake, which involves the exchange of certificates. dig is a tool that can query DNS servers for domain name information. nmap is a tool that can scan ports and services on a network. traceroute is a tool that can show the path and hops between a source and a destination.

• Question 327:

  After installing a new wireless access point, an engineer tests the device and sees that it is not performing at the rated speeds. Which of the following should the engineer do to troubleshoot the issue? (Select two).

  A. Ensure a bottleneck is not coming from other devices on the network.

  B. Install the latest firmware for the device.

  C. Create a new VLAN for the access point.

  D. Make sure the SSID is not longer than 16 characters.

  E. Configure the AP in autonomous mode.

  F. Install a wireless LAN controller.

  Correct Answer: AB

  One possible cause of poor wireless performance is a bottleneck in the network, which means that other devices or applications are consuming too much bandwidth or resources and limiting the speed of the wireless access point. To troubleshoot this issue, the engineer should ensure that there is no congestion or interference from other devices on the network, such as wired clients, servers, routers, switches, or other wireless access points. The engineer can use tools such as network analyzers, bandwidth monitors, or ping tests to check the network traffic and latency12. Another possible cause of poor wireless performance is outdated firmware on the device, which may contain bugs or vulnerabilities that affect the functionality or security of the wireless access point. To troubleshoot this issue, the engineer should install the latest firmware for the device from the manufacturer's website or support portal. The engineer should follow the instructions carefully and backup the configuration before updating the firmware. The engineer can also check the release notes or changelog of the firmware to see if there are any improvements or fixes related to the wireless performance3 . The other options are not relevant to troubleshooting poor wireless performance. Creating a new VLAN for the access point may help with network segmentation or security, but it will not improve the speed of the wireless connection. Making sure the SSID is not longer than 16 characters may help with compatibility or readability, but it will not affect the wireless performance. Configuring the AP in autonomous mode may give more control or flexibility to the engineer, but it will not enhance the wireless speed. Installing a wireless LAN controller may help with managing multiple access points or deploying advanced features, but it will not increase the wireless performance.

• Question 328:

  A virtual machine has the following configuration:

  IPv4 address: 169.254.10.10 Subnet mask: 255.255.0.0

  The virtual machine can reach colocated systems but cannot reach external addresses on the internet. Which of the following is most likely the root cause?

  A. The subnet mask is incorrect.

  B. The DHCP server is offline.

  C. The IP address is an RFC1918 private address.

  D. The DNS server is unreachable.

  Correct Answer: B

  The IP address 169.254.10.10 is an APIPA (Automatic Private IP Addressing) address, which is assigned by the operating system when a DHCP server is not available or reachable. APIPA addresses are in the range of 169.254.0.0/16, and they allow the device to communicate with other devices on the same local network, but not with external networks or the internet. Therefore, the most likely root cause of the virtual machine's connectivity issue is that the DHCP server is offline or malfunctioning, and the virtual machine cannot obtain a valid IP address from it.

• Question 329:

  A company has been added to an unapproved list because of spam. The network administrator confirmed that a workstation was infected by malware. Which of the following processes did the administrator use to identify the root cause?

  A. Traffic analysis

  B. Availability monitoring

  C. Baseline metrics

  D. Network discovery

  Correct Answer: A

  One possible process that the administrator used to identify the root cause of the spam issue is traffic analysis. Traffic analysis is a technique that monitors and analyzes the network traffic that flows between devices or applications. Traffic

  analysis can help troubleshoot network problems by identifying the source, destination, volume, frequency, and content of the network packets12.

  To use traffic analysis to identify the root cause of the spam issue, the administrator could follow these steps:

  Install a traffic analysis tool on the server or a device that is connected to the same network as the server, such as Wireshark3, tcpdump4, or Microsoft Network Monitor5. Start capturing the network traffic and filter it by using the IP address or

  hostname of the server, or by using a specific port or protocol that is used by the email service, such as SMTP (port 25), POP3 (port 110), or IMAP (port 143). Analyze the filtered traffic and look for any signs of abnormal or malicious activity,

  such as high volume of outgoing emails, unknown recipients, suspicious attachments, or spam keywords.

  Trace back the source of the spam emails to the infected workstation by using its IP address or MAC address.

  Isolate and clean up the infected workstation by using an antivirus or malware removal tool.

  The other options are not processes that the administrator used to identify the root cause of the spam issue. Availability monitoring is a technique that measures and reports the uptime and downtime of a network device or service. Availability

  monitoring can help troubleshoot network problems by detecting any failures or outages that affect the network performance. Baseline metrics are a set of standard measurements that establish the normal behavior or performance of a

  network device or service. Baseline metrics can help troubleshoot network problems by comparing the current state of the network with the expected state and identifying any deviations or anomalies. Network discovery is a technique that

  scans and maps the network devices and services that are connected to a network. Network discovery can help troubleshoot network problems by providing a comprehensive and updated view of the network topology and configuration.

• Question 330:

  A network security administrator needs to monitor the contents of data sent between a secure network and the rest of the company. Which of the following monitoring methods will accomplish this task?

  A. Port mirroring

  B. Flow data

  C. Syslog entries

  D. SNMP traps

  Correct Answer: A

  Port mirroring is a method of monitoring network traffic by copying the data packets from one port to another port on the same switch or router. This allows the network security administrator to analyze the contents of the data sent between different networks without affecting the performance or security of the original traffic. Port mirroring can be configured to capture all traffic or only specific types of traffic, such as VLANs, protocols, or IP addresses.