CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 391:

  Which of the following would be used to indicate when unauthorized access to physical internal hardware has occurred?

  A. Motion detectors

  B. Radio frequency identification tags

  C. Tamper evident seal

  D. Locking racks

  Correct Answer: C

  A tamper-evident seal is used to indicate when unauthorized access to physical internal hardware has occurred. These seals are designed to break or show visible signs of tampering if someone tries to open or access a piece of equipment or hardware. This provides a visual indication that unauthorized access or tampering has taken place, alerting security personnel to investigate further.

• Question 392:

  A sales team at a company uses a SaaS solution primarily for videoconferencing and a CRM application that connects to a database server in the corporate data center. Which of the following VPN solutions would allow secure, remote access for sales staff to the CRM application without impacting videoconferencing traffic?

  A. Clientless

  B. Site-to-site

  C. Split tunnel

  D. Full tunnel

  Correct Answer: C

  The best VPN solution for the sales team would be a split tunneling VPN. This type of VPN allows you to route specific traffic through the VPN tunnel, while sending other traffic directly over the internet.

  In this case, the sales team would route the CRM traffic through the VPN tunnel to ensure that it is secure. However, they would not route the videoconferencing traffic through the VPN tunnel, as this could impact the performance of their video calls.

  Here are some of the benefits of using a split tunneling VPN:

  Security: Split tunneling VPNs can help to improve the security of your network by routing sensitive traffic through the VPN tunnel. Performance: Split tunneling VPNs can help to improve the performance of your network by sending nonsensitive traffic directly over the internet.

  Flexibility: Split tunneling VPNs give you more flexibility in how you route your traffic.

• Question 393:

  An IT administrator needs to connect older smart-plug devices to the network. The administrator wants to prevent future issues from occurring by using an 802.11 standard that only operates on the 2.4GHz frequency. Which of the following standards should the administrator choose?

  A. 802.11a

  B. 802.11ac

  C. 802.11ax

  D. 802.11b

  Correct Answer: D

  802.11b is a wireless networking standard that operates on the 2.4 GHz frequency band. It supports a maximum data rate of 11 Mbps and has a range of about 35 meters indoors and 140 meters outdoors. 802.11b is compatible with older smart-plug devices that use the same frequency band, but it may suffer from interference from other devices that also use the 2.4 GHz band, such as microwave ovens, Bluetooth devices, and cordless phones.

• Question 394:

  A company's management team wants to implement NAC on the wired and wireless networks. Which of the following is an authentication component that must be used in this solution?

  A. IPSec

  B. 802.1X

  C. EAP

  D. TACACS+

  Correct Answer: B

  802.1X is an authentication component that must be used in a network access control (NAC) solution. NAC is a method of enforcing security policies on devices that want to access a network, by verifying their identity, compliance, and authorization. 802.1X is a standard that defines how to provide authentication for devices trying to connect to a LAN or WLAN. It uses the Extensible Authentication Protocol (EAP) to exchange authentication information between the device (supplicant), the network access device (authenticator), and the authentication server (typically RADIUS or TACACS+). 802.1X can prevent unauthorized devices from accessing the network, and can also assign them to different VLANs or apply different policies based on their role or group. IPSec is a protocol suite that provides encryption, authentication, and integrity for IP packets. It can be used to create secure VPN tunnels between networks or hosts. IPSec is not an authentication component for NAC, but rather a security component for protecting data in transit. EAP is a framework that supports multiple authentication methods, such as passwords, certificates, tokens, or biometrics. EAP is used by 802.1X to provide authentication for network access, but it is not a component by itself. EAP requires a carrier protocol, such as 802.1X, to transport the authentication messages.

• Question 395:

  Which of the following is a valid alternative to maintain a deployed proxy technology while saving physical space in the data center by moving the network service to the virtualization infrastructure?

  A. NFV

  B. SDWAN

  C. Networking as code

  D. VIP

  Correct Answer: A

  Network functions virtualization (NFV) is a network architecture concept that leverages IT virtualization technologies to virtualize entire classes of network node functions into building blocks that may connect, or chain together, to create and deliver communication services

• Question 396:

  Which of the following focuses on application delivery?

  A. DaaS

  B. IaaS

  C. SaaS

  D. PaaS

  Correct Answer: D

  PaaS stands for Platform as a Service. It is a cloud computing service that provides a platform for developing, deploying, and managing applications. PaaS providers typically provide the following services:

  1.

  Operating system

  2.

  Programming language runtime

  3.

  Database

  4.

  Web server

  5.

  Application server

• Question 397:

  Which of the following layers of the OSI model lies between the transport layer and the network layer?

  A. Application

  B. Data link

  C. Session

  D. Presentation

  Correct Answer: D

• Question 398:

  A customer calls the help desk to report that users are unable to access any network resources. The issue started earlier in the day when an employee rearranged the wiring closet. A technician goes to the site but does not observe any obvious damage. The statistics output on the switch indicates high CPU usage, and all the lights on the switch are blinking rapidly in unison. Which of the following is the MOST likely explanation for these symptoms?

  A. The switch was rebooted and set to run in safe mode.

  B. The line between the switch and the upstream router was removed.

  C. A cable was looped and created a broadcast storm.

  D. A Cat 6 cable from the modem to the router was replaced with Cat 5e.

  Correct Answer: C

  The symptoms, including high CPU usage and rapidly blinking switch lights, are most likely due to a cable loop in the network causing a broadcast storm, which is overwhelming network resources and disrupting connectivity.

• Question 399:

  Which of the following routing protocols should be implemented to create a route between a local area network and an ISP?

  A. BGP

  B. EIGRP

  C. RIP

  D. OSPF

  Correct Answer: A

  BGP (Border Gateway Protocol): BGP is designed for routing between different autonomous systems (ASes) on the internet. It is used to exchange routing and reachability information between ISPs, enterprises, and other networks. BGP is well-suited for handling large-scale networks and providing policy-based routing control.

• Question 400:

  A network technician wants to identify which DNS servers a computer is configured to use. Which of the following commands should the technician use?

  A. nbtstat

  B. arp

  C. nslookup

  D. netstat

  Correct Answer: C