CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 551:

  A computer engineer needs to ensure that only a specific workstation can connect to port 1 on a switch. Which of the following features should the engineer configure on the switch interface?

  A. Port tagging
  B. Port security
  C. Port mirroring
  D. Port aggregation
  B. Port security

  ---

  Explanation/Reference:

  Port security is a feature that can be configured on a switch interface to limit and identify the MAC addresses of workstations that are allowed to connect to that specific port. This can help ensure that only a specific workstation (or workstations) can connect to the interface. According to the CompTIA Network+ Study Manual, "Port security can be used to specify which MAC addresses are allowed to connect to a particular switch port. If a port security violation is detected, the switch can take a number of different actions, such as shutting down the port, sending an SNMP trap, or sending an email alert."

• Question 552:

  A technician is deploying a new SSID for an industrial control system. The control devices require the network to use encryption that employs TKIP and a symmetrical password to connect. Which of the following should the technician configure to ensure compatibility with the control devices?

  A. WPA2-Enterprise
  B. WPA-Enterprise
  C. WPA-PSK
  D. WPA2-PSK
  C. WPA-PSK

  ---

  Explanation/Reference:

  "WPA uses Temporal Key Integrity Protocol (TKIP) for enhanced encryption. TKIP uses RC4 for the encryption algorithm, and the CompTIA Network+ exam may reference TKIP-RC4 in a discussion of wireless."

  " WPA2 uses Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for integrity checking and Advanced Encryption Standard (AES) for encryption. On the Network+ exam, you might find this referenced as simply CCMP-AES"

• Question 553:

  Which of the following is used to purposely attack a system to exploit vulnerabilities?

  A. Honeypot
  B. Vulnerability scan
  C. Device hardening
  D. Penetration te
  D. Penetration te

  ---

  Explanation/Reference:

  Honeypot is used to capture information from unauthorized intruders. Basically, they do not allow users into their networks. They allow them into a fake network that looks like it is a part of their actual network. Penetration testing is where you are purposely attacking to see any valnurabilites

• Question 554:

  An administrator needs to connect to a server to install security patches. The administrator requests that port 3389 be allowed through the firewall. Which of the following access methods is the administrator looking to use?

  A. SSH
  B. Telnet
  C. SFTP
  D. RDP
  D. RDP

• Question 555:

  A company is upgrading the network switches at its backup data center, which is geographically separated from the main data center. The company hired a contractor to physically install and cable the new switches in their cabinets. Which of the following should the network engineering team provide to ensure the job is completed accurately?

  A. Rack diagram
  B. IDF diagram
  C. Site survey
  D. Logical diagram
  A. Rack diagram

• Question 556:

  Which of the following is a cost-effective advantage of a split-tunnel VPN?

  A. Web traffic is filtered through a web filter.
  B. More bandwidth is required on the company's internet connection.
  C. Monitoring detects insecure machines on the company's network.
  D. Cloud-based traffic flows outside of the company's network.
  D. Cloud-based traffic flows outside of the company's network.

  ---

  Explanation/Reference:

  A split-tunnel VPN is a configuration where only specific traffic is routed through a VPN, while the remaining data is sent directly over the internet. This can reduce the bandwidth consumption and cost of the company's internet connection, as cloud-based traffic does not need to pass through the VPN tunnel. A web filter, monitoring, and security are not advantages of a split-tunnel VPN, as they may require all traffic to go through the VPN.

  https://www.auvik.com/franklyit/blog/vpn-split-tunneling/

• Question 557:

  Which of the following would be BEST suited for a long cable run with a 40Gbps bandwidth?

  A. Cat 5e
  B. Cat 6a
  C. Cat 7
  D. Cat 8
  D. Cat 8

  ---

  Explanation/Reference:

  For a long cable run with a 40Gbps bandwidth, the BEST option would be Cat 8 cable. Cat 8 is designed to support up to 40Gbps over a distance of up to 30 meters, making it the most suitable option for long cable runs with high bandwidth requirements.

• Question 558:

  Which of the following attacks blocks access to resources by flooding that resource with invalid requests?

  A. On-path attack
  B. IP spoofing attack
  C. DoS attack
  D. DNS poisoning attack
  C. DoS attack

• Question 559:

  Which of the following is the DNS feature that controls how long a lookup is stored in cache on a server?

  A. CNAME
  B. TTL
  C. SOA
  D. SRV
  B. TTL

  ---

  Explanation/Reference:

  TTL stands for Time to Live, and it is a field on DNS records that controls how long each record is valid and cached by the DNS resolver before it expires and requests a new one. The TTL value is measured in seconds, and it affects how quickly DNS changes propagate across the Internet. A lower TTL means that the DNS resolver will refresh the record more frequently, but it also increases the load on the DNS servers. A higher TTL means that the DNS resolver will cache the record longer, but it also delays the update of the record.

• Question 560:

  A technician completed troubleshooting and was able to fix an issue. Which of the following is the BEST method the technician can use to pass along the exact steps other technicians should follow in case the issue arises again?

  A. Use change management to build a database
  B. Send an email stating that the issue is resolved.
  C. Document the lessons learned
  D. Close the ticket and inform the users.
  C. Document the lessons learned

  ---

  Explanation/Reference:

  Documenting the lessons learned is the best method for passing along the exact steps other technicians should follow in case the issue arises again. Lessons learned are the knowledge and experience gained from completing a project or solving a problem. Documenting the lessons learned helps to capture the best practices, challenges, solutions, and recommendations for future reference and improvement. Documenting the lessons learned can also help to update the knowledge base, standard operating procedures, or policies related to the issue. References: [CompTIA Network+ Certification Exam Objectives], Lessons Learned: Definition and Examples for Project Managers