CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 461:

  A network engineer is installing hardware in a newly renovated data center. Major concerns that were addressed during the renovation induded air circulation, building power redundancy, and the need for continuous monitoring. The network engineer IS creating alerts based on the following operation specifications:

  

  Which of the following should the network engineer configure?

  A. Environmental monitoring alerts for humidity greater than 95%
  B. SIEM to parse syslog events for a failed power supply
  C. SNMP traps to report when the chassis temperature exceeds 950F (3500)
  D. UPS monitoring to report when input voltage drops below 220VAC
  C. SNMP traps to report when the chassis temperature exceeds 950F (3500)

• Question 462:

  Which of the following BEST describes a split-tunnel client-to-server VPN connection?

  A. The client sends all network traffic down the VPN tunnel.
  B. The client has two different IP addresses that can be connected to a remote site from two different ISPs to ensure availability.
  C. The client sends some network traffic down the VPN tunnel and other traffic to the local gateway.
  D. The client connects to multiple remote sites at the same time.
  C. The client sends some network traffic down the VPN tunnel and other traffic to the local gateway.

• Question 463:

  An organization purchased an allocation of public IPv4 addresses. Instead of receiving the network address and subnet mask, the purchase paperwork indicates the allocation is a /28. This type of notation is referred to as:

  A. CIDR
  B. classful
  C. classless
  D. RFC1918
  A. CIDR

  ---

  Explanation/Reference:

  Classless Inter-Domain Routing (CIDR) is a group of IP addresses that are allocated to the customer when they demand a fixed number of IP addresses.

  In CIDR there is no wastage of IP addresses as compared to classful addressing because only the numbers of IP addresses that are demanded by the customer are allocated to the customer.

  The group of IP addresses is called Block in Classless Inter - Domain (CIDR).

  CIDR follows CIDR notation or Slash notation. The representation of CIDR notation is x.y.z.w /n the x.y.z.w is IP address and n is called mask or number of bits that are used in network id.

  https://www.tutorialspoint.com/what-is-cidr-and-how-it-works

• Question 464:

  A network administrator needs to monitor traffic on a specific port on a switch. Which of the following should the administrator configure to accomplish the task?

  A. Port security
  B. Port tagging
  C. Port mirroring
  D. Media access control
  C. Port mirroring

  ---

  Explanation/Reference:

  Port mirroring is a feature that allows a network technician to monitor traffic on a specific port on a switch by copying all the traffic from that port to another port where a monitoring device is connected. Port mirroring can be used for troubleshooting, analysis, or security purposes, such as detecting network anomalies, performance issues, or malicious activities.

  References: https://www.comptia.org/training/books/network-n10-008-study-guide (page 156)

• Question 465:

  A newly installed multifunction copier needs to be set up so scanned documents can be emailed to recipients. Which of the following ports from the copier's IP address should be allowed?

  A. 22
  B. 25
  C. 53
  D. 80
  B. 25

  ---

  Explanation/Reference:

  Port 25 is the port number that is commonly used for Simple Mail Transfer Protocol (SMTP), which is a protocol that allows sending and receiving email messages over a network1. Port 25 from the copier's IP address should be allowed so

  that scanned documents can be emailed to recipients.

  Port 22 is the port number that is commonly used for Secure Shell (SSH), which is a protocol that allows secure and encrypted remote access and control of a device over a network1. Port 22 from the copier's IP address is not necessary for

  emailing scanned documents.

  Port 53 is the port number that is commonly used for Domain Name System (DNS), which is a protocol that allows resolving domain names to IP addresses and vice versa on a network1. Port 53 from the copier's IP address is not necessary

  for emailing scanned documents.

  Port 80 is the port number that is commonly used for Hypertext Transfer Protocol (HTTP), which is a protocol that allows transferring web pages and other resources over a network1. Port 80 from the copier's IP address is not necessary for

  emailing scanned documents.

• Question 466:

  Which of the following is BEST described as a technology that allows for the segmentation of networks into different broadcast domains throughout the network?

  A. DMZ
  B. VLAN
  C. VLSM
  D. CSMA
  B. VLAN

• Question 467:

  An engineer needs to restrict the database servers that are in the same subnet from communicating with each other. The database servers will still need to communicate with the application servers in a different subnet. In some cases, the database servers will be clustered, and the servers will need to communicate with other cluster members. Which of the following technologies will be BEST to use to implement this filtering without creating rules?

  A. Private VLANs
  B. Access control lists
  C. Firewalls
  D. Control plane policing
  A. Private VLANs

  ---

  Explanation/Reference:

  "Use private VLANs: Also known as port isolation, creating a private VLAN is a method of restricting switch ports (now called private ports) so that they can communicate only with a particular uplink. The private VLAN usually has numerous private ports and only one uplink, which is usually connected to a router, or firewall."

• Question 468:

  A small, family-run business uses a single SOHO router to provide Internet and WiFi to its employees At the start of a new week, employees come in and find their usual WiFi network is no longer available, and there is a new wireless network to which they cannot connect. Given that information, which of the following should have been done to avoid this situation'

  A. The device firmware should have been kept current.
  B. Unsecure protocols should have been disabled.
  C. Parental controls should have been enabled
  D. The default credentials should have been changed
  D. The default credentials should have been changed

  ---

  Explanation/Reference:

  The default credentials are the username and password that come with a device or service when it is first installed or configured. They are often easy to guess or find online, which makes them vulnerable to unauthorized access or attacks.

  The default credentials should be changed to something unique and strong as soon as possible to avoid this situation. If the default credentials were not changed, someone could have accessed the SOHO router and changed the WiFi

  settings without the employees' knowledge.

  References: https://www.comptia.org/blog/network-security-basics-6-easy-ways-to-protect-your-network

• Question 469:

  Which of the following storage types allows for the connection of storage devices that are located several miles apart?

  A. SFTP
  B. InfiniBand
  C. eSATA
  D. iSCSI
  D. iSCSI

• Question 470:

  Which of the following issues are present with RIPv2? (Select TWO).

  A. Route poisoning
  B. Time to converge
  C. Scalability
  D. Unicast
  E. Adjacent neighbors
  F. Maximum transmission unit
  B. Time to converge
  C. Scalability

  ---

  Explanation/Reference:

  The disadvantages of RIP (Routing Information Protocol) include the following. ---Outdated, insecure, and slow. This is your parents' protocol. It was a thing before the Web was born. ---The more well-known problem of the 15 hop limitation in which data must travel ---Convergence time is terrible for information propagation in a network ---Metrics. It determines the number of hops from source to destination, and gives no regard to other factors when determining the best path for data to travel ---Overhead. A good example would be routing tables. These are broadcast at half-minute intervals to other routers regardless of whether the data has changed or not. It's essentially like those old cartoons where the town guard in the walled city cries out, '10 o' the clock and all is well!'.

  RIPv2 introduced more security and reduced broadcast traffic, which is relevant for some available answers here.