CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 341:

  A security engineer is installing a new IOS on the network. The engineer has asked a network administrator to ensure all traffic entering and leaving the router interface is available for the IDS. Which of the following should the network administrator do?

  A. Install a network tap for the IDS
  B. Configure ACLs to route traffic to the IDS.
  C. Install an additional NIC into the IDS
  D. Install a loopback adapter for the IDS.
  E. Add an additional route on the router for the IDS.
  A. Install a network tap for the IDS

  ---

  Explanation/Reference:

  a network tap is a way of connecting an IDS out of band, which means it does not interfere with the normal network traffic. A network tap allows you to view a copy of the network traffic transmitted over the media being tapped.

• Question 342:

  Which of the following ports is commonly used by VoIP phones?

  A. 20
  B. 143
  C. 445
  D. 5060
  D. 5060

  ---

  Explanation/Reference:

  -

  Port 20 is used by the FTP (File Transfer Protocol) protocol for data transfers.

  -

  Port 143 is used by the IMAP (Internet Message Access Protocol) protocol for retrieving email messages from a server.

  -

  Port 445 is used by the SMB (Server Message Block) protocol for file and printer sharing in Microsoft Windows environments.

  -

  Port 5060 is commonly used by the SIP (Session Initiation Protocol) for signalling and establishing voice and video calls over IP networks.

• Question 343:

  Which of the following DNS record types assists with the routing of email?

  A. MX
  B. PTR
  C. SRV
  D. AAAA
  A. MX

• Question 344:

  After installing a new 6E wireless router in a small office, a technician notices that some wireless devices are not able to achieve the rated speeds. Which of the following should the technician check to troubleshoot the issue? (Choose two.)

  A. Client device compatibility
  B. Back-end cabling
  C. Weather phenomena
  D. Voltage source requirements
  E. Interference levels
  F. Processing power
  A. Client device compatibility
  E. Interference levels

• Question 345:

  A company receives a cease-and-desist order from its ISP regarding prohibited torrent activity. Which of the following should be implemented to comply with the cease-and-desist order?

  A. MAC security
  B. Content filtering
  C. Screened subnet
  D. Perimeter network
  B. Content filtering

  ---

  Explanation/Reference:

  Content filtering is a technique that blocks or allows access to certain types of web content, based on predefined criteria or policies. Content filtering can be used to comply with the cease-and-desist order by preventing users from accessing torrent sites or downloading torrent files, which are often used for illegal file sharing or piracy. Content filtering can also protect the network from malware, phishing, or inappropriate content. References: CompTIA Network+ N10-008 Cert Guide - O'Reilly Media, Chapter 14: Securing a Basic Network, page 520

• Question 346:

  A network administrator is configuring a database server and would like to ensure the database engine is listening on a certain port. Which of the following commands should the administrator use to accomplish this goal?

  A. nslookup
  B. netstate -a
  C. ipconfi / a
  D. arp -a
  B. netstate -a

• Question 347:

  Which of the following devices should be installed on a network to monitor the presence of and actively defend against attacks?

  A. An IPS
  B. A protocol analyzer
  C. A traffic shaper
  D. An IDS
  A. An IPS

• Question 348:

  A network engineer needs to create a subnet that has the capacity for five VLANs. with the following number of clients lo be allowed on each:

  

  Which of the following is the SMALLEST subnet capable of this setup that also has the capacity to double the number of clients in the future?

  A. 10.0.0.0/21
  B. 10.0.0.0/22
  C. 10.0.0.0/23
  D. 10.0.0.0/24
  B. 10.0.0.0/22

• Question 349:

  A network engineer is hardening the security of a remote office. The firewall at this location needs to remain accessible for remote management by technicians. The firewall vendor advises disabling port 443 from WAN-facing access. In addition to disabling port 443, which of the following can the engineer do to MOST effectively balance the remote connectivity and security needs for this site?

  A. Enable an IPSec tunnel.
  B. Enable RDP access to the firewall.
  C. Enable port 80 access.
  D. Enable Telnet access to the firewall
  B. Enable RDP access to the firewall.

• Question 350:

  A network technician is troubleshooting a network issue for employees who have reported issues with speed when accessing a server in another subnet. The server is in another building that is 410ft (125m) away from the employees' building. The 10GBASE-T connection between the two buildings uses Cat 5e.

  Which of the following BEST explains the speed issue?

  A. The connection type is not rated for that distance
  B. A broadcast storm is occurring on the subnet.
  C. The cable run has interference on it
  D. The connection should be made using a Cat 6 cable
  A. The connection type is not rated for that distance

  ---

  Explanation/Reference:

  10GBASE-T is a type of Ethernet standard that supports data transfer rates up to 10 Gbps over twisted-pair copper cabling. However, the maximum distance supported by 10GBASE-T over Cat 5e cabling is 328 feet (100 meters). In this scenario, the distance between the two buildings is 410 feet (125 meters), which exceeds the maximum distance limit for 10GBASE-T over Cat 5e cabling.