CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 691:

  A computer engineer needs to ensure that only a specific workstation can connect to port 1 on a switch. Which of the following features should the engineer configure on the switch interface?

  A. Port tagging

  B. Port security

  C. Port mirroring

  D. Port aggregation

  Correct Answer: B

  Port security is a feature that can be configured on a switch interface to limit and identify the MAC addresses of workstations that are allowed to connect to that specific port. This can help ensure that only a specific workstation (or workstations) can connect to the interface. According to the CompTIA Network+ Study Manual, "Port security can be used to specify which MAC addresses are allowed to connect to a particular switch port. If a port security violation is detected, the switch can take a number of different actions, such as shutting down the port, sending an SNMP trap, or sending an email alert."

• Question 692:

  Which of the following is a security flaw in an application or network?

  A. A threat

  B. A vulnerability

  C. An exploit

  D. A risk

  Correct Answer: B

  A vulnerability is a security flaw in an application or network that can be exploited by an attacker, allowing them to gain access to sensitive data or take control of the system. Vulnerabilities can range from weak authentication methods to unpatched software, allowing attackers to gain access to the system or data they would not otherwise be able to access. Exploits are programs or techniques used to take advantage of vulnerabilities, while threats are potential dangers, and risks are the likelihood of a threat becoming a reality.

• Question 693:

  A network technician recently installed 35 additional workstations. After installation, some users are unable to access network resources. Many of the original workstations that are experiencing the network access issue were offline when the new workstations were turned on. Which of the following is the MOST likely cause of this issue?

  A. Incorrect VLAN setting

  B. Insufficient DHCP scope

  C. Improper NIC setting

  D. Duplicate IP address

  Correct Answer: B

• Question 694:

  Which of the following OSI model layers would allow a user to access and download flies from a remote computer?

  A. Session

  B. Presentation

  C. Network

  D. Application

  Correct Answer: D

  The application layer of the OSI model (Open Systems Interconnection) is responsible for providing services to applications that allow users to access and download files from a remote computer. These services include file transfer, email, and web access, as well as other related services. In order for a user to access and download files from a remote computer, the application layer must provide the necessary services that allow the user to interact with the remote computer.

• Question 695:

  A network administrator is installing a new server in the data center. The administrator is concerned the amount of traffic generated will exceed 1GB. and higher-throughput NiCs are not available for installation. Which of the following is the BEST solution for this issue?

  A. Install an additional NIC and configure LACP.

  B. Remove some of the applications from the server.

  C. Configure the NIC to use fun duplex

  D. Configure port mirroring to send traffic to another server.

  E. Install a SSD to decrease data processing time.

  Correct Answer: A

• Question 696:

  A network security engineer locates an unapproved wireless bridge connected to the corporate LAN that is broadcasting a hidden SSID, providing unauthenticated access to internal resources. Which of the following types of attacks BEST describes this finding?

  A. Rogue access point Most Voted

  B. Evil twin

  C. ARP spoofing

  D. VLAN hopping

  Correct Answer: A

  A rogue access point is an illegitimate access point plugged into a network to create a bypass from outside into the legitimate network. By contrast, an evil twin is a copy of a legitimate access point.

• Question 697:

  A network administrator is investigating a performance issue on a dual-link connection--VPN and MPLS--to a partner network. The MPLS is the primary path, and the VPN is used as a backup. While communicating, the delay is measured at 18ms, which is higher than the 6ms expected when the MPLS link is operational but lower than the 30ms expected tor the VPN connection. Which of the following will MOST likely point to the root cause of the Issue?

  A. Checking the routing tables on both sides to ensure there is no asymmetric routing

  B. Checking on the partner network for a missing route pointing to the VPN connection

  C. Running iPerf on both sides to confirm the delay that Is measured is accurate

  D. Checking for an incorrect VLAN assignment affecting the MPLS traffic

  Correct Answer: A

  Asymmetric routing can occur when two routers have different paths for the same two hosts, resulting in increased latency and possible packet loss. According to the CompTIA Network+ Study Manual, "If the path from the source to the destination is not the same in both directions, the packets will take different routes and the latency can increase significantly." To confirm this, the network administrator should check the routing tables on both sides of the connection and ensure that the same path is used in both directions.

• Question 698:

  Which of the following describes when an active exploit is used to gain access to a network?

  A. Penetration testing

  B. Vulnerability testing

  C. Risk assessment

  D. Posture assessment

  E. Baseline testing

  Correct Answer: A

  Penetration testing is a type of security testing that is used to assess the security of a system or network by actively exploiting known vulnerabilities. It is used to simulate an attack on the system and identify any weaknesses that may be exploited by malicious actors. As stated in the CompTIA Security+ Study Guide, "penetration testing is a type of security assessment that attempts to gain unauthorized access to networks and systems by exploiting security vulnerabilities."

• Question 699:

  An administrator is investigating reports of network slowness in a building. While looking at the uplink interface statistics In the switch's CLI, the administrator discovers the uplink Is at 100% utilization However, the administrator is unsure how to Identify what traffic is causing the saturation. Which of the following tools should the administrator utilize to identify the source and destination addresses of the traffic?

  A. SNMP

  B. Traps

  C. Syslog

  D. NetFlow

  Correct Answer: D

  To identify the source and destination addresses of the traffic causing network saturation, the network administrator should use a network protocol analyzer that supports the NetFlow protocol. NetFlow is a network protocol that collects IP traffic information as it enters or exits an interface and sends it to a NetFlow collector for analysis. This data includes the source and destination addresses of the traffic, the ports used, and the number of bytes and packets transferred. Therefore, the correct answer is option D, NetFlow. Reference: CompTIA Network+ Study Guide, Exam N10-007, Fourth Edition, by Todd Lammle (Chapter 6: Network Devices)

• Question 700:

  Which of the following is the NEXT step to perform network troubleshooting after identifying an issue?

  A. Implement a solution.

  B. Establish a theory.

  C. Escalate the issue.

  D. Document the findings.

  Correct Answer: B

  1 Identify the Problem.

  2 Develop a Theory.

  3 Test the Theory.

  4 Plan of Action.

  5 Implement the Solution.

  6 Verify System Functionality.

  7 Document the Issue.