CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 591:

  A company is undergoing expansion but does not have sufficient rack space in its data center.

  Which of the following would be BEST to allow the company to host its new equipment without a major investment in facilities?

  A. Using a colocation service
  B. Using available rack space in branch offices
  C. Using a flat network topology
  D. Reorganizing the network rack and installing top-of-rack switching
  A. Using a colocation service

  ---

  Explanation/Reference:

  A colocation service is a service that provides rack space, power, cooling, security, and connectivity for a company's network equipment in a data center. A colocation service can be used when a company does not have sufficient rack space

  in its own data center and does not want to invest in building or expanding its own facilities. By using a colocation service, a company can host its new equipment in a professional and reliable environment without a major investment in

  facilities. References:

  https://www.comptia.org/training/books/network-n10-008-study-guide (page 414)

• Question 592:

  Which of the following, in addition to a password, can be asked of a user for MFA?

  A. PIN
  B. Favorite color
  C. Hard token
  D. Mother's maiden name
  A. PIN

  ---

  Explanation/Reference:

  MFA stands for Multi-Factor Authentication, which is a method of verifying the identity of a user by requiring two or more pieces of evidence that belong to different categories:

  something the user knows, something the user has, or something the user is. A password is something the user knows, and it is usually combined with another factor such as a PIN (Personal Identification Number) or a hard token (a physical

  device that generates a one- time code) that the user has. A favorite color or a mother's maiden name are not suitable for MFA, as they are also something the user knows and can be easily guessed or compromised.

• Question 593:

  A systems administrator needs to improve WiFi performance in a densely populated office tower and use the latest standard. There is a mix of devices that use 2.4 GHz and 5 GHz. Which of the following should the systems administrator select to meet this requirement?

  A. 802.11ac
  B. 802.11ax
  C. 802.11g
  D. 802.11n
  B. 802.11ax

  ---

  Explanation/Reference:

  Wi-Fi 6 (802.11ax) can now divide a wireless channel into a large number of subchannels. Each of these subchannels can carry data intended for a different device. This is achieved throug something called Orthogonal Frequency Division Multiple Access, or OFDMA. The Wi-Fi access point can talk to more devices at once. The new riderless standard also has improved MIMO - Multiple In/Multiple Out. This involves multiple antennas, which let the access point talk to multiple devices at once. With Wi-Fi 5, the access point could talk to devices at the same time, but those devices couldn't respond at the same time. Wi-Fi 6 has an improved version of multi-user or MU-MIMO that lets devices respond to the wireless access point at the same time

• Question 594:

  A network engineer is hardening the security of a remote office. The firewall at this location needs to remain accessible for remote management by technicians. The firewall vendor advises disabling port 443 from WAN-facing access. In addition to disabling port 443, which of the following can the engineer do to MOST effectively balance the remote connectivity and security needs for this site?

  A. Enable an IPSec tunnel.
  B. Enable RDP access to the firewall.
  C. Enable port 80 access.
  D. Enable Telnet access to the firewall
  B. Enable RDP access to the firewall.

• Question 595:

  A technician needs to back up network devices to a central location to prepare for a natural disaster. Which of the following should the technician use?

  A. VPN
  B. TFTP
  C. RDP
  D. VNC
  A. VPN

• Question 596:

  A network administrator has been assigned to a team that is currently troubleshooting a large-scale outage. The network administrator makes some configuration changes to an on-premises router to see if the link comes up. Which of the following troubleshooting stages is described in this scenario?

  A. Establish a theory of probable cause.
  B. Verify full system functionality
  C. Establish a plan of action to resolve the problem.
  D. Test the theory to determine the cause.
  D. Test the theory to determine the cause.

• Question 597:

  During an incident, an analyst sends reports regularly to the investigation and leadership teams. Which of the following best describes how Pll should be safeguarded during an incident?

  A. Implement data encryption and store the data so only the company has access.
  B. Ensure permissions are limited to the investigation team and encrypt the data.
  C. Implement data encryption and create a standardized procedure for deleting data that is no longer needed.
  D. Ensure the permissions are open only to the company.
  C. Implement data encryption and create a standardized procedure for deleting data that is no longer needed.

  ---

  Explanation/Reference:

  PII stands for Personally Identifiable Information, which is any data that can be used to identify, contact, or locate a specific individual, such as name, address, phone number, email, social security number, and so on. PII should be safeguarded during an incident to protect the privacy and security of the individuals involved, and to comply with the legal and ethical obligations of the organization. One way to safeguard PII during an incident is to implement data encryption, which is a process of transforming data into an unreadable format that can only be accessed by authorized parties who have the decryption key. Data encryption can prevent unauthorized access, modification, or disclosure of PII by malicious actors or third parties. Another way to safeguard PII during an incident is to create a standardized procedure for deleting data that is no longer needed, such as after the incident is resolved or the investigation is completed. Deleting data that is no longer needed can reduce the risk of data breaches, data leaks, or data theft, and can also save storage space and resources. A standardized procedure for deleting data can ensure that the data is erased securely and completely, and that the deletion process is documented and audited.

• Question 598:

  Which of the following are considered physical security detection methods? (Select TWO).

  A. Cameras
  B. Asset tags
  C. Biometric readers
  D. Access control vestibules
  E. IPS infrastructure
  F. Locking racks
  A. Cameras
  C. Biometric readers

  ---

  Explanation/Reference:

• Question 599:

  Which of the following would be used to enforce and schedule critical updates with supervisory approval and include backup plans in case of failure?

  A. Business continuity plan
  B. Onboarding and offboarding policies
  C. Acceptable use policy
  D. System life cycle
  E. Change management
  E. Change management

  ---

  Explanation/Reference:

  Change management: A structured approach for making changes to an organization's IT infrastructure, designed to minimize the risk of disruptions and ensure changes are implemented in a controlled and effective manner.

• Question 600:

  Which of the following is the most secure way to provide site-to-site connectivity?

  A. VXLAN
  B. IKE
  C. GRE
  D. IPSec
  D. IPSec

  ---

  Explanation/Reference:

  IPSec (Internet Protocol Security) is considered the most secure way to provide site-to-site connectivity. IPSec is a suite of protocols that provides secure communication over IP networks. It is commonly used to establish Virtual Private Network (VPN) connections, ensuring confidentiality, integrity, and authenticity of the data being transmitted between sites.

  VXLAN (Virtual Extensible LAN), IKE (Internet Key Exchange), and GRE (Generic Routing Encapsulation) are also used in networking but are not specifically designed for providing the same level of end-to-end security as IPSec. VXLAN is used for virtualized networks, IKE is a key exchange protocol often used with IPSec, and GRE is a tunneling protocol that doesn't inherently provide encryption.