CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 501:

  A technician is setting up DNS records on local servers for the company's cloud DNS to enable access by hostname. Which of the following records should be used?

  A. A

  B. MX

  C. CNAME

  D. NS

  Correct Answer: C

  CNAME (Canonical Name) record: A CNAME record is used to create an alias or pointer to another domain name. It allows you to associate multiple hostnames with a single IP address or another domain name. In this scenario, using a CNAME record, you can map a hostname on your local servers to the corresponding hostname in the company's cloud DNS. This is useful when you want to provide a user-friendly name for accessing resources in the cloud.

• Question 502:

  A Chief Executive Officer (CEO) of a company purchases a new phone that will be used while traveling to different countries. The CEO needs to be able to place outgoing calls and receive incoming calls on the phone using a SIM card. Which of the following cellular technologies does the CEO's phone need?

  A. WDMA

  B. CDMA

  C. GSM

  D. SLA

  Correct Answer: C

  GSM (Global System for Mobile Communications): GSM is a widely used cellular technology that enables voice and data communication over cellular networks. It is the most prevalent standard for mobile communication globally and is used by many countries. GSM phones use SIM cards (Subscriber Identity Module) to identify and authenticate the user on the network. This technology allows users to switch between different GSM networks by changing the SIM card while keeping the same device.

• Question 503:

  A network technician is troubleshooting a connection to a local server and has verified that the RDP service is running on the server. After running a command, the technician receives the following output:

  

  Which of the following MOST likely describes the issue?

  A. A host-based firewall on the server is blocking the connection.

  B. Too many collisions are occurring on the network segment.

  C. A DoS attack is occurring locally.

  D. A routing loop is in the network.

  Correct Answer: A

• Question 504:

  A network administrator is configuring a static DSL connection on the perimeter router to use a backup route to the fiber connection using OSPF routing. The administrator notices all traffic is going over the DSL connection and both links are working. Which of the following should the administrator do to adjust the routing settings for the fiber connection to be used by the router?

  A. Add the DSL connection to the neighbor table for OSPF protocol

  B. Change the routing protocol to EIGRP for the fiber connection

  C. Increase the administrative distance of the DSL connection

  D. Create a separate VLAN for the DSL connection

  Correct Answer: C

  Administrative distance is a metric used by routers to determine the preference of a route. The lower the administrative distance, the higher the preference. By increasing the administrative distance of the DSL connection, the router will prefer the fiber connection since it has a lower administrative distance.

• Question 505:

  A technician is investigating why a PC cannot reach a file server with the IP address 192.168.8.129. Given the following TCP/IP network configuration:

  

  Which of the following configurations on the PC is incorrect?

  A. Subnet mask

  B. IPv4 address

  C. Default gateway

  D. IPv6 address

  Correct Answer: C

  The default gateway is the IP address of the router that connects the PC to other networks. The default gateway should be on the same subnet as the PC's IPv4 address. However, in this case, the default gateway is 192.168.9.1, which is on a different subnet than the PC's IPv4 address of 192.168.8.15. Therefore, the default gateway configuration on the PC is incorrect and prevents the PC from reaching the file server on another subnet.

• Question 506:

  A technician is concerned about unauthorized personnel moving assets that are installed in a data center server rack. The technician installs a networked sensor that sends an alert when the server rack door is opened. Which of the following did the technician install?

  A. Cipher lock

  B. Asset tags

  C. Access control vestibule

  D. Tamper detection

  Correct Answer: D

  The technician installed a tamper detection sensor. Tamper detection sensors are designed to detect and alert when an unauthorized attempt is made to access or move a protected asset. In this case, the sensor sends an alert when the server rack door is opened, allowing the technician to monitor and respond to any unauthorized access to the data center server rack.

• Question 507:

  An administrator is preparing an organization for a potential disaster. The administrator configures the network switches and turns off the equipment in a data center. Which of the following is this scenario an example of?

  A. Warm site

  B. Cold site

  C. Cloud site

  D. Hot site

  Correct Answer: A

• Question 508:

  Which of the following is used to require network devices to authenticate before gaining access to a LAN?

  A. 802.1Q

  B. 802.1X

  C. 802.11ax

  D. 802.3af

  Correct Answer: B

  802.1X: IEEE 802.1X is a network access control standard that provides an authentication framework for controlling access to LANs or WLANs (Wireless Local Area Networks). It ensures that only authorized devices and users are granted access to the network. 802.1X is commonly used in Ethernet and Wi-Fi networks to enforce user-based authentication and security policies before allowing network access.

• Question 509:

  Which of the following routing protocols is BEST suited for use on a perimeter router?

  A. OSPF

  B. RIPv2

  C. EIGRP

  D. BGP

  Correct Answer: D

  BGP is a path vector routing protocol that is designed for use between different autonomous systems (ASes) on the internet. It is commonly used for inter-domain routing, making it well-suited for perimeter routers that connect to external networks and ISPs. BGP allows the router to exchange routing information and make routing decisions based on policies, route preferences, and path attributes. It provides granular control over routing decisions and is particularly suited for large-scale networks with complex routing requirements.

• Question 510:

  Which of the following VPN types provides the highest security for a user who travels often but also has the highest bandwidth requirements to provide a satisfactory user experience?

  A. Full-tunnel

  B. Site-to-site

  C. Clientless D. Split-tunnel

  Correct Answer: A

  Full-tunnel VPN: In a full-tunnel VPN configuration, all of the user's internet traffic, regardless of destination, is routed through the VPN tunnel to the corporate network. This ensures that all communication is encrypted and secured, even when the user is accessing the internet from public or untrusted networks. While this level of security is ideal for protecting sensitive data, it can result in higher bandwidth usage due to routing all traffic through the VPN.

  Benefits of Full-tunnel VPN for the scenario described:

  Highest Security: All traffic is encrypted and protected, making it the most secure option for users who frequently travel and connect to various networks, including public Wi-Fi.