CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 661:

  A company needs a redundant link to provide a channel to the management network in an incident response scenario. Which of the following remote access methods provides the BEST solution?

  A. Out-of-band access
  B. Split-tunnel connections
  C. Virtual network computing
  D. Remote desktop gateways
  A. Out-of-band access

  ---

  Explanation/Reference:

  Out-of-band access is a remote access method that provides a separate, independent channel for accessing network devices and systems. Out-of-band access uses a dedicated network connection or a separate communication channel, such as a dial- up or cellular connection, to provide access to network devices and systems. This allows an administrator to access the management network even if the primary network connection is unavailable or impaired. Out-of- band access is a good solution for providing a redundant link to the management network in an incident response scenario because it can be used to access the network even if the primary connection is unavailable or impaired.

• Question 662:

  A network administrator is testing performance improvements by configuring channel bonding on an 802.11ac AP. Although a site survey detected the majority of the 5GHz frequency spectrum was idle, being used only by the company's WLAN and a nearby government radio system, the AP is not allowing the administrator to manually configure a large portion of the 5GHz frequency range.

  Which of the following would be BEST to configure for the WLAN being tested?

  A. Upgrade the equipment to an AP that supports manual configuration of the EIRP power settings
  B. Switch to 802.11n, disable channel auto-selection, and enforce channel bonding on configuration
  C. Set up the AP to perform a dynamic selection of the frequency according to regulatory requirements
  D. Deactivate the band 5GHz to avoid interference with the government radio
  C. Set up the AP to perform a dynamic selection of the frequency according to regulatory requirements

  ---

  Explanation/Reference:

  Set up the AP to perform a dynamic selection of the frequency according to regulatory requirements: If the AP is not allowing manual configuration, it is likely that the frequency range is being restricted by regulatory requirements or other limitations of the AP. By setting the AP to perform dynamic selection, it will automatically choose the best frequency and channel available based on the regulatory domain and available channels.

• Question 663:

  While working in a coffee shop, an attacker watches a user log in to a corporate system and writes down the user's log-in credentials. Which of the following social engineering attacks is this an example of?

  A. Shoulder surfing
  B. Dumpster diving
  C. Phishing
  D. Tailgating
  A. Shoulder surfing

  ---

  Explanation/Reference:

  Shoulder surfing is the social engineering attack where an attacker watches a user log in to a corporate system and writes down the user's log-in credentials. Social engineering is a type of attack that exploits human psychology and behavior to manipulate or trick people into revealing sensitive information or performing malicious actions. Shoulder surfing is a form of social engineering that involves observing or eavesdropping on someone's screen, keyboard, or paper documents to obtain confidential information such as passwords, PINs, or credit card numbers. Shoulder surfing can be done in person or remotely using cameras or other devices. Shoulder surfing can be prevented by using privacy filters, locking screens, shielding keyboards, or being aware of one's surroundings.

• Question 664:

  Users are reporting poor wireless performance in some areas of an industrial plant The wireless controller is measuring a tow EIRP value compared to me recommendations noted on me most recent site survey. Which of the following should be verified or replaced for the EIRP value to meet the site survey's specifications? (Select TWO).

  A. AP transmit power
  B. Channel utilization
  C. Signal loss
  D. Update ARP tables
  E. Antenna gain
  F. AP association time
  A. AP transmit power
  E. Antenna gain

  ---

  Explanation/Reference:

  AP transmit power: You should check if your APs have sufficient power output and adjust them if needed. You should also make sure they are not exceeding regulatory limits for your region. Antenna gain: You should check if your antennas have adequate gain for your coverage area and replace them if needed. You should also make sure they are aligned properly and not obstructed by any objects.

  In the scenario described, the wireless controller is measuring a low EIRP value compared to the recommendations noted in the most recent site survey. EIRP is the combination of the power transmitted by the access point and the antenna gain. Therefore, to increase the EIRP value to meet the site survey's specifications, the administrator should verify or replace the AP transmit power (option A) and the antenna gain (option E). This can be achieved by adjusting the transmit power settings on the AP or by replacing the AP's antenna with one that has a higher gain

• Question 665:

  Which of the following protocols is widely used in large-scale enterprise networks to support complex networks with multiple routers and balance traffic load on multiple links?

  A. OSPF
  B. RIPv2
  C. QoS
  D. STP
  A. OSPF

• Question 666:

  Which of the following architectures would allow the network-forwarding elements to adapt to new business requirements with the least amount of operating effort?

  A. Software-defined network
  B. Spine and leaf
  C. Three-tier
  D. Backbone
  A. Software-defined network

• Question 667:

  An attacker targeting a large company was able to inject malicious A records into internal name resolution servers. Which of the following attack types was MOST likely used?

  A. DNS poisoning
  B. On-path
  C. IP spoofing
  D. Rogue DHCP
  A. DNS poisoning

• Question 668:

  An organization is interested in purchasing a backup solution that supports the organization's goals. Which of the following concepts would specify the maximum duration that a given service can be down before impacting operations?

  A. MTTR
  B. RTO
  C. MTBF
  D. RPO
  B. RTO

  ---

  Explanation/Reference:

  The maximum duration that a given service can be down before it impacts operations is often referred to as the Recovery Time Objective (RTO). RTO is a key consideration in any backup and disaster recovery plan, as it determines how quickly the organization needs to be able to recover from a disruption or failure. It is typically expressed in terms of time, and it helps to inform the design and implementation of the backup solution. For example, if an organization has a critical service that must be available 24/7, it may have a very low RTO, requiring that the service be restored within a matter of minutes or even seconds. On the other hand, if the service can be down for a longer period of time without significantly impacting operations, the organization may have a higher RTO. When selecting a backup solution, it is important to consider the organization's RTO requirements and ensure that the solution is capable of meeting those needs. A solution that does not meet the organization's RTO requirements may not be sufficient to ensure the availability of critical services in the event of a disruption or failure.

• Question 669:

  A malicious user is using special software to perform an on-path attack. Which of the following best practices should be configured to mitigate this threat?

  A. Dynamic ARP inspection
  B. Role-based access
  C. Control plane policing
  D. MAC filtering
  A. Dynamic ARP inspection

  ---

  Explanation/Reference:

  The best practice to mitigate an on-path attack is dynamic ARP inspection. It helps prevent ARP spoofing attacks, which are a type of on-path attack. Dynamic ARP inspection uses information in the DHCP snooping table to validate ARP packets and ensure that the source IP address and MAC address in each packet match the sender's DHCP bindings. If the information does not match, the packet is dropped. Therefore, dynamic ARP inspection helps to prevent malicious users from intercepting network traffic by poisoning ARP caches on other devices.

• Question 670:

  Which of the following would allow a network administrator to analyze attacks coming from the internet without affecting latency?

  A. IPS
  B. IDS
  C. Load balancer
  D. Firewall
  B. IDS