CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 511:

  A network security administrator needs to monitor the contents of data sent between a secure network and the rest of the company. Which of the following monitoring methods will accomplish this task?

  A. Port mirroring
  B. Flow data
  C. Syslog entries
  D. SNMP traps
  A. Port mirroring

  ---

  Explanation/Reference:

  Port mirroring is a method of monitoring network traffic by copying the data packets from one port to another port on the same switch or router. This allows the network security administrator to analyze the contents of the data sent between different networks without affecting the performance or security of the original traffic. Port mirroring can be configured to capture all traffic or only specific types of traffic, such as VLANs, protocols, or IP addresses.

• Question 512:

  A network engineer performed a migration to a new mail server. The engineer changed the MX record, verified the change was accurate, and confirmed the new mail server was reachable via the IP address in the A record. However, users are not receiving email. Which of the following should the engineer have done to prevent the issue from occurring?

  A. Change the email client configuration to match the MX record.
  B. Reduce the TTL record prior to the MX record change.
  C. Perform a DNS zone transfer prior to the MX record change.
  D. Update the NS record to reflect the IP address change.
  B. Reduce the TTL record prior to the MX record change.

  ---

  Explanation/Reference:

  TTL (Time To Live): TTL is a value in a DNS record that determines the amount of time it can be cached by DNS resolvers and other devices on the internet. When making changes to DNS records, reducing the TTL beforehand helps minimize the time it takes for the changes to propagate throughout the internet.

  MX Record Change: Changing the MX (Mail Exchange) record directs email traffic to the specified mail server. However, DNS changes take time to propagate across the internet due to caching. If the TTL is set too high, old records may be cached for an extended period, leading to email delivery issues.

• Question 513:

  A technician installed an 8-port switch in a user's office. The user needs to add a second computer in the office, so the technician connects both PCs to the switch and connects the switch to the wall jack. However, the new PC cannot connect to network resources. The technician then observes the following:

  1.

  The new computer does not get an IP address on the client's VLAN.

  2.

  Both computers have a link light on their NICs.

  3.

  The new PC appears to be operating normally except for the network issue.

  4.

  The existing computer operates normally.

  Which of the following should the technician do NEXT to address the situation?

  A. Contact the network team to resolve the port security issue.
  B. Contact the server team to have a record created in DNS for the new PC.
  C. Contact the security team to review the logs on the company's SIEM.
  D. Contact the application team to check NetFlow data from the connected switch.
  A. Contact the network team to resolve the port security issue.

• Question 514:

  Which of the following is the best VPN to use for only encrypting and routing data for a specific destination?

  A. Split-tunnel
  B. Site-to-site
  C. Client
  D. Layer 2
  A. Split-tunnel

  ---

  Explanation/Reference:

  A split-tunnel VPN is the best choice when you want to encrypt and route data for a specific destination. It allows for only part of the network traffic to be sent over the VPN, while the rest accesses the internet directly.

• Question 515:

  A company requires a disaster recovery site to have equipment ready to go in the event of a disaster at its main datacenter. The company does not have the budget to mirror all the live data to the disaster recovery site. Which of the following concepts should the company select?

  A. Cold site
  B. Hot site
  C. Warm site
  D. Cloud site
  C. Warm site

  ---

  Explanation/Reference:

  A warm site is a type of disaster recovery site that has equipment ready to go in the event of a disaster at the main datacenter, but does not have live data or applications. A warm site requires some time and effort to restore the data and services from backups, but it is less expensive than a hot site that has live data and applications. A cold site is a disaster recovery site that has no equipment or data, and requires a lot of time and money to set up after a disaster. A cloud site is a disaster recovery site that uses cloud computing resources to provide data and services, but it may have issues with bandwidth, latency, security, and cost. References: https://www.comptia.org/blog/what-is-a-warm-site

• Question 516:

  Which of the following describes the ability of a corporate IT department to expand its cloud-hosted VM environment with minimal effort?

  A. Scalability
  B. Load balancing
  C. Multitenancy
  D. Geo-redundancy
  A. Scalability

  ---

  Explanation/Reference:

  Scalability is the ability of a corporate IT department to expand its cloud- hosted virtual machine (VM) environment with minimal effort. This allows IT departments to quickly and easily scale up their cloud environment to meet increased demand. Scalability also allows for the efficient use of resources, as IT departments can quickly and easily scale up or down as needed.

• Question 517:

  A network administrator installed an additional IDF during a building expansion project. Which of the following documents need to be updated to reflect the change? (Select TWO).

  A. Data loss prevention policy
  B. BYOD policy
  C. Acceptable use policy
  D. Non-disclosure agreement
  E. Disaster recovery plan
  F. Physical network diagram
  E. Disaster recovery plan
  F. Physical network diagram

  ---

  Explanation/Reference:

  Physical network diagram: The physical network diagram needs to be updated to include the new IDF location and the connections to the existing network infrastructure.

  Disaster recovery plan: The disaster recovery plan needs to be updated to reflect the addition of the new IDF. This may include updating the recovery procedures and identifying any new critical systems or applications that are now located in the new IDF.

• Question 518:

  A help desk supervisor discovers the following ticket excerpt while reviewing notes in a customer's account:

  1.

  Received report that customer was unable to use the scanner to read barcodes, the internet no longer worked, and the monitor was fuzzy. Arrived on site and began troubleshooting.

  2.

  Confirmed monitor issue. Replaced VGA cable.

  3.

  Confirmed scanner failure. Scanner USB cable was unattached. Reattached cable.

  4.

  Confirmed internet issue. Duplicated on test laptop. Escalated to ISP.

  Which of the following BEST describes what the technician was doing?

  A. The technician was questioning the obvious.
  B. The technician was implementing preventative measures.
  C. The technician was approaching multiple problems individually.
  D. The technician was determining if anything had changed.
  C. The technician was approaching multiple problems individually.

• Question 519:

  A network manager is configuring switches in IDFs to ensure unauthorized client computers are not connecting to a secure wired network. Which of the following is the network manager MOST likely performing?

  A. Disabling unneeded switchports
  B. Changing the default VLAN
  C. Configuring DHCP snooping
  D. Writing ACLs to prevent access to the switch
  A. Disabling unneeded switchports
  D. Writing ACLs to prevent access to the switch

  ---

  By configuring port security, the network manager can enforce restrictions on the MAC (Media Access Control) addresses allowed to connect to specific switch ports. This prevents unauthorized client computers or devices from gaining access to the secure wired network.

  Typically, the network manager would configure port security to allow only authorized MAC addresses to connect to each switch port. If an unauthorized device attempts to connect, the switch can take actions such as shutting down the port, generating an alert, or applying other security measures to protect the network.

• Question 520:

  Which of the following would be used to adjust resources dynamically for a virtual web server under variable loads?

  A. Elastic computing
  B. Scalable networking
  C. Hybrid deployment
  D. Multitenant hosting
  A. Elastic computing

  ---

  Explanation/Reference:

  Elastic computing involves the allocation of resources on demand, so that the resources available to a virtual web server can be increased or decreased as needed in order to handle varying levels of traffic or demand. This can help to ensure that the web server has the resources it needs to handle any workload, without wasting resources when demand is low.

  Scalable networking refers to the ability of a network to expand or contract as needed in order to meet changing demand. Hybrid deployment involves the use of a combination of on-premises and cloud-based resources. Multitenant hosting involves the use of a single instance of a software application to serve multiple customers, each with their own customized version of the application.

  https://en.wikipedia.org/wiki/Elasticity_(cloud_computing) https://www.geeksforgeeks.org/scalability-and-elasticity-in-cloud-computing/