CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 771:

  A customer wants to segregate the traffic between guests on a hypervisor. Which of the following does a technician need to configure to meet the requirement?

  A. Virtual switches

  B. OSPF routing

  C. Load balancers

  D. NIC teaming

  E. Fibre Channel

  Correct Answer: A

  A virtual switch is a software-based switch that connects virtual machines on a hypervisor. A virtual switch can create and manage VLANs, which are logical segments of a network that isolate traffic between different groups of devices. A

  customer can use virtual switches to segregate the traffic between guests on a hypervisor by creating a separate VLAN for each guest and assigning it to a virtual switch port.

  References:

  https://www.comptia.org/blog/what-is-a-virtual-switch

• Question 772:

  Which of the following is a system that is installed directly on a server's hardware and abstracts the hardware from any guest machines?

  A. Storage array

  B. Type 1 hypervisor

  C. Virtual machine

  D. Guest QS

  Correct Answer: B

  A type 1 hypervisor is a system that is installed directly on a server's hardware and abstracts the hardware from any guest machines. A hypervisor is a software layer that enables virtualization by creating and managing virtual machines (VMs)

  on a physical host. A type 1 hypervisor, also known as a bare-metal hypervisor or a native hypervisor, runs directly on the host's hardware without requiring an underlying operating system (OS). It provides better performance and security

  than a type 2 hypervisor, which runs on top of an existing OS and relies on it for hardware access. References:

  https://www.vmware.com/topics/glossary/content/hypervisor

• Question 773:

  A network technician has multimode fiber optic cable available in an existing IDF. Which of the following Ethernet standards should the technician use to connect the network switch to the existing fiber?

  A. 10GBaseT

  B. 1000BaseT

  C. 1000BaseSX

  D. 1000BaseLX

  Correct Answer: C

  1000BaseSX is an Ethernet standard that should be used to connect the network switch to the existing multimode fiber optic cable. 1000BaseSX is a Gigabit Ethernet standard that uses short-wavelength laser (850 nm) over multimode fiber optic cable. It can support distances up to 550 meters depending on the cable type and quality. It is suitable for short-range network segments such as campus or building backbone networks.

  References: https://www.cisco.com/c/en/us/products/collateral/interfaces-modules/gigabit-ethernet-gbic-sfp-modules/product_data_sheet09186a008014cb5e.html

• Question 774:

  A network administrator needs to run a single command-line tool capable of displaying routing table and multicast memberships. Which of the following would BEST help the administrator achieve the requirements?

  A. arp

  B. show route

  C. show config

  D. netstate

  Correct Answer: A

• Question 775:

  An organization wants to implement a method of centrally managing logins to network services. Which of the following protocols should the organization use to allow for authentication, authorization and auditing?

  A. MS-CHAP

  B. RADIUS

  C. LDAPS

  D. RSTP

  Correct Answer: B

  RADIUS (Remote Authentication Dial-In User Service) is a protocol that should be used by the organization to allow for authentication, authorization, and auditing of network services. RADIUS is an AAA (Authentication, Authorization, and Accounting) protocol that manages network access by verifying user credentials, granting access permissions, and logging user activities. RADIUS uses a client-server model where a RADIUS client (such as a router, switch, or VPN server) sends user information to a RADIUS server (such as an authentication server) for verification and authorization. The RADIUS server can also send accounting information to another server for billing or reporting purposes.

  References: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html

• Question 776:

  A network technician is investigating an IP phone that does not register in the VoIP system Although it received an IP address, it did not receive the necessary DHCP options The information that is needed for the registration is distributes by the OHCP scope All other IP phones are working properly. Which of the following does the technician need to verify?

  A. VLAN mismatch

  B. Transceiver mismatch

  C. Latency

  D. DHCP exhaustion

  Correct Answer: A

  A VLAN mismatch is the most likely reason why an IP phone does not receive the necessary DHCP options for registration. A VLAN mismatch occurs when a device is connected to a switch port that belongs to a different VLAN than the device's intended VLAN. This can cause communication problems or prevent access to network resources. For example, if an IP phone is connected to a switch port that belongs to the data VLAN instead of the voice VLAN, it may not receive the DHCP options that contain information such as the TFTP server address, the NTP server address, or the default gateway address for the voice VLAN. These DHCP options are essential for the IP phone to register with the VoIP system and function properly.

  References: https://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-communications-manager-callmanager/13979-dhcp-option-150-00.html

• Question 777:

  A network administrator has been directed to present the network alerts from the past week to the company's executive staff. Which of the following will provide the BEST collection and presentation of this data?

  A. A port scan printout

  B. A consolidated report of various network devices

  C. A report from the SIEM tool

  D. A report from a vulnerability scan done yesterday

  Correct Answer: C

  SIEM stands for Security Information and Event Management, which is a tool that collects, analyzes, and correlates data from various network devices and sources to provide alerts and reports on security incidents and events. A report from the SIEM tool can provide a comprehensive overview of the network alerts from the past week to the executive staff, highlighting any potential threats, vulnerabilities, or anomalies. References: https://www.comptia.org/blog/what-is-siem

• Question 778:

  Which of the following policies is MOST commonly used for guest captive portals?

  A. AUP

  B. DLP

  C. BYOD

  D. NDA

  Correct Answer: A

  AUP stands for Acceptable Use Policy, which is a policy that defines the rules and guidelines for using a network or service. A guest captive portal is a web page that requires users to agree to the AUP before accessing the Internet or other

  network resources. This is a common way to enforce security and legal compliance for guest users.

  References:

  https://www.arubanetworks.com/techdocs/Instant_87_WebHelp/Content/instant-ug/captive-portal/captive-portal.htm

• Question 779:

  A SaaS provider has decided to leave an unpatched VM available via a public DMZ port. With which of the following concepts is this technique MOST closely associated?

  A. Insider threat

  B. War driving

  C. Evil twin

  D. Honeypot

  Correct Answer: D

  A honeypot is a decoy system that is intentionally left vulnerable or exposed to attract attackers and divert them from the real targets. A honeypot can also be used to collect information about the attackers' techniques and motives. In the scenario, the SaaS provider has left an unpatched VM available via a public DMZ port, which could be a honeypot technique to lure attackers and monitor their activities.

  References: https://www.comptia.org/blog/what-is-a-honeypot

• Question 780:

  A user recently made changes to a PC that caused it to be unable to access websites by both FQDN and IP Local resources, such as the file server remain accessible. Which of the following settings did the user MOST likely misconfigure?

  A. Static IP

  B. Default gateway

  C. DNS entries

  D. Local host file

  Correct Answer: B

  The default gateway is the setting that the user most likely misconfigured on the PC that caused it to be unable to access websites by both FQDN and IP. The default gateway is a device, usually a router or a firewall, that connects a local network to other networks such as the Internet. It acts as an intermediary between devices on different networks and forwards packets based on their destination IP addresses. If the default gateway is not configured correctly on a PC, it will not be able to communicate with devices outside its local network, such as web servers or DNS servers. References: https://www.cisco.com/c/en/us/support/docs/ip/routing-information-protocol-rip/16448-default-gateway.html