CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 31:

  A network engineer is interested in using wireless technologies in densely forested areas. Which of the following frequencies would be best for this use?

  A. 2.4GHz
  B. 5GHz
  C. 5.9GHz
  D. 6GHz
  A. 2.4GHz

  ---

  Explanation/Reference:

  2.4GHz frequency has better penetration and range than higher frequencies in forested environments, where there are many obstacles and interference sources.

  References:

  Wireless in The Woods: Experimental Evaluation of IEEE 802.11a/b/g in Forested Environments1

  High-Speed Wireless Access in Forested Rural Areas Using Analog Radio Over Fiber2

• Question 32:

  A network engineer is troubleshooting application connectivity issues between a server and a client. The network engineer needs to view the certificate exchange between the two hosts. Which of the following tools should the network engineer use?

  A. dig
  B. tcpdump
  C. nmap
  D. traceroute
  B. tcpdump

  ---

  Explanation/Reference:

  tcpdump is a tool that can capture and analyze network traffic, including the certificate exchange between two hosts. It can display the contents of packets, such as the SSL/TLS handshake, which involves the exchange of certificates. dig is a tool that can query DNS servers for domain name information. nmap is a tool that can scan ports and services on a network. traceroute is a tool that can show the path and hops between a source and a destination.

• Question 33:

  An attacker sends more connection requests than a server can handle, causing the server to crash- Which of the following types of attacks is this an example of?

  A. ARP poisoning
  B. Denial-of-service
  C. MAC flooding
  D. On-path
  B. Denial-of-service

  ---

  Explanation/Reference:

  A denial-of-service (DoS) attack is an example of an attack where an attacker sends more connection requests than a server can handle, causing the server to crash. A DoS attack is a type of cyberattack that aims to disrupt the normal functioning of a network service or resource by overwhelming it with excessive or malformed traffic. A DoS attack can prevent legitimate users from accessing the service or resource, resulting in degraded performance, unavailability, or data loss. A DoS attack can target various network layers, protocols, or components, such as servers, routers, firewalls, or applications.

• Question 34:

  An employee walked into a secure facility and allowed a newly hired employee to walk in as well. Which of the following is the BEST solution to prevent this from happening again?

  A. "No tailgating" sign
  B. Awareness training
  C. Entry log
  D. Camera
  B. Awareness training

• Question 35:

  A technician is running new Cat 5e cables to a server room. Which of the following tools should the technician use to terminate the cables at the patch panel?

  A. Multimeter
  B. Cable crimper
  C. Toner probe
  D. Punchdown tool
  D. Punchdown tool

  ---

  Explanation/Reference:

  The correct tool to terminate the cables at the patch panel would be a Punchdown tool. The Punchdown tool is specifically designed for terminating Ethernet cables onto a patch panel or keystone jack. It allows the technician to push the

  individual wires into the appropriate slots on the patch panel, ensuring proper connections and secure termination.

  A cable crimper is used to attach connectors to the ends of cables, but it is not suitable for terminating cables at a patch panel.

• Question 36:

  An organization needs a solution that will inspect network traffic, determine security threats using signature-based rules, and block the traffic in real time based on the security assessment.

  Which of the following network devices will support these requirements?

  A. SIEM
  B. VPN
  C. IPS
  D. DLP
  C. IPS

  ---

  Explanation/Reference:

  An Intrusion Prevention System (IPS) is designed to inspect network traffic, identify malicious activity using signature-based rules, and block potentially harmful traffic in real time. This aligns with the requirements stated in the question.

  References:

  CompTIA Network+ N10-008 Certification Study Guide1 CompTIA Network+ N10-007 vs. N10-008: What's New

• Question 37:

  Which of the following types of attacks can be used to gain credentials by setting up rogue APs with identical corporate SSIDs?

  A. VLAN hopping
  B. Evil twin
  C. DNS poisoning
  D. Social engineering
  B. Evil twin

  ---

  Explanation/Reference:

  evil twin, attacker AP setup with for example Starbucks1Guest to get you to attach, you still get out to internet but attacker can see all you do. FYI always use VPN when in public WIFI, or better yet NEVER EVER attach to any public WIFI use your cell service instead w/ VPN on of course.

• Question 38:

  A rural municipality has built an external public WiFi meshed network using omnidirectional antennas. After the initial build, the performance meets expectations, and the municipality enters a six-month pilot program in the fall. By the end of the pilot program in the spring, the performance has fallen dramatically. The pilot has a static number of users with no increases in usage from beginning to end. Which of the following would be the MOST likely reason for the performance issues?

  A. Too many users in the pilot creating overcapacity issues
  B. Buildings creating reflection issues
  C. Omnidirectional antennas being insufficient for outdoor use
  D. Foliage creating absorption issues
  D. Foliage creating absorption issues

• Question 39:

  A company is implementing a new firewall. The firewall is configured to allow only TCP ports 80 and 443 to exit the network and allow the same traffic back into the network using inbound stateful packet filtering. Users are not able to access URLs of common websites they visit. Which of the following is the MOST likely cause of the issue?

  A. Stateful packet filtering only allows connections that originate outside the network to enter.
  B. Web browsing uses UDP and not TCP ports 80 and 443.
  C. The firewall does not allow UDP port 53 to enter and exit the network.
  D. TCP 80 and 443 should be allowed inbound and stateful inspection should be allowed outbound.
  C. The firewall does not allow UDP port 53 to enter and exit the network.

• Question 40:

  Which of the following topologies is designed to fully support applications hosted in on- premises data centers, public or private clouds, and SaaS services?

  A. SDWAN
  B. MAN
  C. PAN
  D. MPLS
  A. SDWAN

  ---

  Explanation/Reference:

  SDWAN (Software Defined Wide Area Network) is a network architecture that enables the deployment of hybrid networks that can fully support applications hosted in on-premises data centers, public or private clouds, and SaaS services. SDWAN uses software-defined networking (SDN) concepts to simplify network management and reduce costs.