CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 781:

  A network engineer is upgrading an existing edge gateway. The company currently uses a router and needs to be able to filter on all OSI layers. Which of the following should the engineer use to upgrade the gateway?

  A. NGFW
  B. Proxy
  C. Layer 3 switch
  D. Load balancer
  A. NGFW

  ---

  Explanation/Reference:

  NGFW (Next-Generation Firewall): NGFWs are advanced security devices that go beyond traditional firewalls. They provide filtering and inspection capabilities at multiple OSI layers, including application-layer filtering, intrusion prevention, and advanced threat protection. NGFWs are designed to offer more sophisticated and comprehensive security features compared to traditional routers.

• Question 782:

  Several WIFI users are reporting the inability to connect to the network. WLAN users on the guest network are able to access all network resources without any performance issues. The following table summarizes the findings after a site survey of the area in question:

  

  Which of the following should a wireless technician do NEXT to troubleshoot this issue?

  A. Reconfigure the channels to reduce overlap
  B. Replace the omni antennas with directional antennas
  C. Update the SSIDs on all the APs
  D. Decrease power in AP 3 and AP 4
  A. Reconfigure the channels to reduce overlap

  ---

  Explanation/Reference:

  Received Signal Strength Indication (RSSI) is a measurement of the strength of a received radio signal. It is measured as a negative number on a logarithmic scale, which means that the closer to 0 the RSSI is, the better the signal. Clearly, AP 1 and AP 2 has channel/frequency overlap that causes the RF signals to interfere with each other.

• Question 783:

  A customer has an attached USB printer that needs to be shared with other users. The desktop team set up printer sharing. Now, the network technician needs to obtain the necessary information about the PC and share it with other users so they can connect to the printer. Which of the following commands should the technician use to get the required information? (Choose two.)

  A. arp
  B. route
  C. netstat
  D. tcpdump
  E. hostname
  F. ipconfig
  E. hostname
  F. ipconfig

• Question 784:

  A network administrator will be running Ethernet cables through raised ceilings. Which of the following types of Ethernet cables is the safest solution?

  A. Shielded
  B. Plenum
  C. Unshielded
  D. Riser
  B. Plenum

• Question 785:

  Which of the following most likely occurs when an attacker is between the target and a legitimate server?

  A. IP spoofing
  B. VLAN hopping
  C. Rogue DHCP
  D. On-path attack
  D. On-path attack

  ---

  Explanation/Reference:

  2: Understanding Targeted Attacks: What is a Targeted Attack?

  3: Types of attacks - Security on the web | MDN

  1: What is an on-path attacker? | Cloudflare

  4: [What is a Rogue DHCP Server? - Definition from Techopedia]

• Question 786:

  A systems administrator is running a VoIP network and is experiencing jitter and high latency. Which of the following would BEST help the administrator determine the cause of these issues?

  A. Enabling RADIUS on the network.
  B. Configuring SNMP traps on the network.
  C. Implementing LDAP on the network.
  D. Establishing NTP on the network.
  B. Configuring SNMP traps on the network.

  ---

  Explanation/Reference:

  -

  Configuring SNMP (Simple Network Management Protocol) traps on the network would BEST help the administrator determine the cause of the jitter and high latency in the VoIP network.

  -

  SNMP traps can provide real-time notifications of network events, such as high utilisation on a network interface or low memory on a device, that can indicate potential problems. By analysing the SNMP traps, the administrator can identify any underlying issues causing the jitter and high latency, such as network congestion, bandwidth constraints, or device failures.

  -

  While NTP (Option D) can help to ensure accurate timing in the network, which is important for VoIP, it would not necessarily help to directly determine the cause of the jitter and high latency issues. The other options, RADIUS (Option A) and LDAP (Option C), are primarily used for authentication and authorisation. They are not directly related to diagnosing jitter and high latency in a VoIP network.

• Question 787:

  The lack of a formal process to grant network permissions to different profiles of employees and contractors is leading to an increasing number of security incidents Non-uniform and overly permissive network accesses are being granted. Which of the following would be the MOST appropriate method to improve the security of the environment?

  A. Change the default permissions to implicit deny
  B. Configure uniform ACLs to employees and NAC for contractors.
  C. Deploy an RDP server to centralize the access to the network
  D. Implement role-based access control
  D. Implement role-based access control

  ---

  Explanation/Reference:

  The most appropriate method to improve the security of the environment would be to implement role-based access control (RBAC). With RBAC, users are granted access to the network based on their role within the organization. This allows for more granular access control, as different roles may require different levels of access. Additionally, this ensures that users only have access to the resources they need and no more. This helps to reduce the risk of unauthorized access or misuse of the network. References and further information can be found in the CompTIA Network+ Study Manual, Chapter 8, Access Control.

  RBAC is a method of restricting network access based on the roles of individual users within the organization. With RBAC, users are granted access only to the resources they need to perform their specific job functions. This approach reduces the risk of unauthorized access, provides greater visibility into user activity, and simplifies network management. Changing the default permissions to implicit deny may improve security, but it could also cause issues for legitimate users who require access to specific resources. Configuring uniform ACLs and NAC for contractors is a step in the right direction, but it may not be enough to address the overall lack of a formal process for granting network permissions. Deploying an RDP server to centralize access to the network is not a viable solution, as it would not address the root cause of the security incidents. Therefore, the most appropriate option is to implement role-based access control. Reference: CompTIA Network+ Study Guide, Fourth Edition, Chapter 7, section 7.4.

• Question 788:

  Which of the following records is the main type in a reverse DNS lookup zone?

  A. PTR
  B. AAAA
  C. CNAME
  D. TXT
  A. PTR

• Question 789:

  An organization has experienced an increase in malicious spear-phishing campaigns and wants to mitigate the risk of hyperlinks from inbound emails.

  Which of the following appliances would best enable this capability?

  A. Email protection gateway
  B. DNS server
  C. Proxy server
  D. Endpoint email client
  E. Sandbox
  A. Email protection gateway

  ---

  Explanation/Reference:

  An email protection gateway is an appliance that can filter and block malicious emails and attachments before they reach the recipients. An email protection gateway can mitigate the risk of hyperlinks from inbound emails by scanning the links for malicious content, rewriting the links to point to a safe domain, or blocking the links altogether. An email protection gateway can also perform other functions such as spam filtering, antivirus scanning, encryption, and data loss prevention. A DNS server, a proxy server, an endpoint email client, and a sandbox are not appliances that can enable this capability, as they have different purposes and functions.

• Question 790:

  An employee reports to a network administrator that internet access is not working. Which of the following should the administrator do FIRST?

  A. Establish a theory of probable cause.
  B. Identify symptoms.
  C. Determine if anything has changed.
  D. Ask the user to restart the computer.
  B. Identify symptoms.