CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 371:

  After installing a series of Cat 8 keystones, a data center architect notices higher than normal interference during tests. Which of the following steps should the architect take to troubleshoot the issue?

  A. Check to see if the end connections were wrapped in copper tape before terminating.

  B. Use passthrough modular crimping plugs instead of traditional crimping plugs.

  C. Connect the RX/TX wires to different pins.

  D. Run a speed test on a device that can only achieve 100Mbps speeds.

  Correct Answer: A

  Cat 8 keystones are shielded to prevent interference from external sources, but they also require proper grounding to avoid interference from within the cable. Wrapping the end connections with copper tape before terminating them is one way to ensure a good ground connection and reduce interference. Using passthrough modular crimping plugs, connecting the RX/TX wires to different pins, or running a speed test on a slow device are not relevant or effective steps to troubleshoot the issue. References: CompTIA Network+ N10-008 Certification Study Guide, page 191 CompTIA Network+ N10-008 Cert Guide, Deluxe Edition, page 362 CAT8 RJ45 Keystone Problem : r/HomeNetworking2 How to Terminate Cat8 Shielded Keystone Jacks3

• Question 372:

  A network administrator replaced a faulty NIC in a printer, but the printer is still not reachable. The printer is configured with the correct IP address, mask, and gateway, and a link light is lit on the switch port that the printer is attached to. Which of the following is the best command for the administrator to run first on the switch?

  A. show vlan

  B. show route

  C. show arp

  D. show config

  Correct Answer: A

  The best command for the administrator to run first on the switch is show vlan, which displays the VLAN configuration information on the switch, such as the VLAN IDs, names, and ports. The show vlan command can help the administrator to verify if the printer is assigned to the correct VLAN, and if there is any mismatch or misconfiguration that prevents the printer from being reachable. The show route command displays the routing table on the switch, which is not relevant for the printer connectivity, as the printer is configured with the correct gateway. The show arp command displays the ARP cache on the switch, which maps the IP addresses to the MAC addresses of the devices. The show arp command can help the administrator to check if the switch has learned the MAC address of the printer, but it is not the best command to run first, as the ARP cache can be cleared or updated frequently. The show config command displays the running configuration on the switch, which includes the VLAN configuration, but it also includes other information that is not related to the printer issue, such as the hostname, the interface settings, the security settings, and so on. The show config command can be overwhelming and time-consuming to analyze, so it is not the best command to run first. References

  1: VLANs and Trunking -N10-008 CompTIA Network+ : 2.3

  2: N10-008 CompTIA Network+ : 5.5

  3: Interface Configurations -N10-008 CompTIA Network+ : 2.3

  4: Configuring VLANs -CompTIA Network+ N10-006 -2.6

• Question 373:

  A security team updated a web server to require https:// in the URL. Although the IP address did not change, users report being unable to reach the site. Which of the following should the security team do to allow users to reach the server again?

  A. Configure the switch port with the correct VLAN.

  B. Configure inbound firewall rules to allow traffic to port 443.

  C. Configure the router to include the subnet of the server.

  D. Configure the server with a default route.

  Correct Answer: B

  One possible reason why users are unable to reach the site after the security team updated the web server to require https:// in the URL is that the firewall rules are blocking the traffic to port 443. Port 443 is the default port for HTTPS, which is the protocol that encrypts and secures the web communication. If the firewall rules do not allow inbound traffic to port 443, then users will not be able to access the web server using HTTPS12. To troubleshoot this issue, the security team should configure inbound firewall rules to allow traffic to port 443. This can be done by using the firewall-cmd command on RHEL 8.2, which is a tool that manages firewalld, the default firewall service on RHEL. The command to add a rule to allow traffic to port 443 is: firewall-cmd --permanent --add-port=443/tcp The --permanent option makes the rule persistent across reboots, and the --add-port option specifies the port number and protocol (TCP) to allow. After adding the rule, the security team should reload the firewalld service to apply the changes: firewall-cmd --reload The security team can verify that the rule is active by using this command: firewall-cmd --list-ports The output should show 443/tcp among the ports that are allowed34. The other options are not relevant to troubleshooting this issue. Configuring the switch port with the correct VLAN may help with network segmentation or isolation, but it will not affect the HTTPS protocol or port. Configuring the router to include the subnet of the server may help with network routing or connectivity, but it will not enable HTTPS communication. Configuring the server with a default route may help with network access or reachability, but it will not allow HTTPS traffic.

• Question 374:

  Which of the following protocols should be used when Layer 3 availability is of the highest concern?

  A. LACP

  B. LDAP

  C. FHRP

  D. DHCP

  Correct Answer: C

  FHRP stands for First Hop Redundancy Protocol, which is a group of protocols that allow routers or switches to provide backup or failover for the default gateway in a network. FHRP ensures that the network traffic can reach its destination even if the primary gateway fails or becomes unavailable. Some examples of FHRP protocols are HSRP, VRRP, and GLBP.

• Question 375:

  Which of the following steps of the troubleshooting methodology would most likely include checking through each level of the OSI model after the problem has been identified?

  A. Establish a theory.

  B. Implement the solution.

  C. Create a plan of action.

  D. Verify functionality.

  Correct Answer: A

• Question 376:

  A network administrator is planning to implement device monitoring to enhance network visibility. The security team requires that the solution provides authentication and encryption.

  Which of the following meets these requirements?

  A. SIEM

  B. Syslog

  C. NetFlow

  D. SNMPv3

  Correct Answer: D

  SNMPv3 is a protocol that allows network administrators to monitor and manage network devices such as routers, switches, servers, printers, and more. SNMPv3 provides authentication and encryption features that ensure the security and

  integrity of the data exchanged between the management station and the network devices. SNMPv3 uses a user-based security model (USM) that supports three levels of security: noAuthNoPriv, authNoPriv, and authPriv. The noAuthNoPriv

  level provides no authentication or encryption, the authNoPriv level provides authentication but no encryption, and the authPriv level provides both authentication and encryption12.

  References

  SNMP is one of the common network monitoring protocols covered in Objective 3.1 of the CompTIA Network+ N10-008 certification exam3. SNMPv3 provides authentication and encryption features for network monitoring12.

  SNMPv3 uses a user-based security model with three levels of security12.

  1: SNMP - N10-008 CompTIA Network+ : 3.1 - Professor Messer IT Certification Training Courses 2: CompTIA Network+ N10-008 Cert Guide, Chapter 13, page 413 3: CompTIA Network+ Certification Exam Objectives, page 7

• Question 377:

  Which of the following would most likely affect design considerations when building out an IDF?

  A. The source panel amperage

  B. The fire suppression system

  C. The humidity levels

  D. The cable transmission speeds

  Correct Answer: B

  The fire suppression system is a design consideration when building out an IDF because it can affect the safety and reliability of the network equipment and cabling. A fire suppression system is a system that detects and extinguishes fires in

  a building, using water, gas, or chemicals. Depending on the type of fire suppression system, it can have different impacts on the IDF design, such as:

  Water-based systems, such as sprinklers, can damage the network equipment and cabling if they are activated by a fire or a false alarm. Therefore, the IDF should be designed to protect the equipment and cabling from water exposure, such

  as using waterproof cabinets, drip pans, and conduits.

  Gas-based systems, such as clean agent systems, can displace the oxygen in the IDF and cause suffocation for anyone inside. Therefore, the IDF should be designed to allow for ventilation and air circulation, as well as warning signs and

  alarms to alert anyone in the IDF before the gas is released. Chemical-based systems, such as dry chemical systems, can leave a residue on the network equipment and cabling that can affect their performance and lifespan. Therefore, the

  IDF should be designed to minimize the contact between the chemical and the equipment and cabling, as well as provide a means for cleaning and restoring them after a fire.

  The other options are not correct because:

  The source panel amperage is not a design consideration when building out an IDF, as it is determined by the electrical circuit and the power needs of the network equipment and cabling. The source panel amperage does not affect the

  layout, location, or protection of the IDF.

  The humidity levels are not a design consideration when building out an IDF, as they are controlled by the HVAC system and the ventilation of the IDF. The humidity levels do not affect the layout, location, or protection of the IDF. The cable transmission speeds are not a design consideration when building out an IDF, as they are determined by the type and quality of the network cabling and the network equipment. The cable transmission speeds do not affect the layout, location, or protection of the IDF.

• Question 378:

  A company's publicly accessible servers are connected to a switch between the company's ISP-connected router and the firewall in front of the company network. The firewall is stateful, and the router is running an ACL. Which of the following best describes the area between the router and the firewall?

  A. Untrusted zone

  B. Screened subnet

  C. Trusted zone

  D. Private VLAN

  Correct Answer: B

  A screened subnet is a network segment that is isolated from both the internal and external networks by firewalls or routers. It is used to host publicly accessible servers that need some protection from external attacks, but also need to be separated from the internal network for security reasons. References

  1: Seven-Second Subnetting ?N10-008 CompTIA Network+ : 1.4

  2: CompTIA Network+ Study Guide: Exam N10-008, 5th Edition, page 56

  3: CompTIA Network+ N10-008 Exam Subnetting Quiz,

• Question 379:

  Which of the following technologies are certificates most commonly associated with?

  A. PKI

  B. VLAN tagging

  C. LDAP

  D. MFA

  Correct Answer: A

  PKI stands for Public Key Infrastructure, which is a system of processes, technologies, and policies that allows you to encrypt and sign data using digital certificates1. Digital certificates are issued by Certificate Authorities (CAs) and authenticate the identity of users, devices, or services that communicate online12. Digital certificates also provide the means to encrypt and decrypt messages between sender and receiver using public and private keys2

• Question 380:

  A network administrator is installing a new server in me data center. The administrator is concerned the amount of traffic generated will exceed 1GB. and higher-throughput NiCs are not available for installation. Which of the following is the BEST solution for this issue?

  A. Install an additional NIC and configure LACP.

  B. Remove some of the applications from the server.

  C. Configure the NIC to use fun duplex

  D. Configure port mirroring to send traffic to another server.

  E. Install a SSD to decrease data processing time.

  Correct Answer: A

  Install an additional NIC and configure Link Aggregation Control Protocol (LACP) also known as NIC Teaming. This will allow the administrator to combine the bandwidth of multiple NICs to increase the total throughput and handle the expected traffic. This is the most efficient solution for this issue as it can provide more bandwidth without having to remove any applications from the server or decrease data processing time.