CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 791:

  A malicious user is using special software to perform an on-path attack. Which of the following best practices should be configured to mitigate this threat?

  A. Dynamic ARP inspection

  B. Role-based access

  C. Control plane policing

  D. MAC filtering

  Correct Answer: A

  The best practice to mitigate an on-path attack is dynamic ARP inspection. It helps prevent ARP spoofing attacks, which are a type of on-path attack. Dynamic ARP inspection uses information in the DHCP snooping table to validate ARP packets and ensure that the source IP address and MAC address in each packet match the sender's DHCP bindings. If the information does not match, the packet is dropped. Therefore, dynamic ARP inspection helps to prevent malicious users from intercepting network traffic by poisoning ARP caches on other devices.

• Question 792:

  An administrator would like to create a fault-tolerant ring between three switches within a Layer 2 network. Which of the following Ethernet features should the administrator employ?

  A. Spanning Tree Protocol

  B. Open Shortest Path First

  C. Port mirroring

  D. An interior gateway protocol

  Correct Answer: A

  Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology in Ethernet networks by actively blocking certain links and enabling others. STP prevents loops by putting some of the links in a blocking state, effectively creating a loop- free topology. This ensures that there is only one active path between two devices, which helps prevent network loops and the associated problems (such as broadcast storms) that can result from them. STP is used to create a fault-tolerant ring between three switches within a Layer 2 network.

• Question 793:

  Which of the following network devices can perform routing between VLANs?

  A. Layer 2 switch

  B. Layer 3 switch

  C. Load balancer

  D. Bridge

  Correct Answer: B

  Layer 3 switches, also known as multilayer switches, are network switches that have the capability to operate at both Layer 2 (data link layer) and Layer 3 (network layer) of the OSI model. They can perform advanced functions such as packet filtering, VLAN routing, and IP address routing, which make them ideal for enterprise networks that require fast and efficient routing between VLANs.

• Question 794:

  A network administrator is setting up several loT devices on a new VLAN and wants to accomplish the following

  1.

  Reduce manual configuration on each system

  2.

  Assign a specific IP address to each system

  3.

  Allow devices to move to different switchports on the same VLAN

  Which of the following should the network administrator do to accomplish these requirements?

  A. Set up a reservation for each device

  B. Configure a static IP on each device

  C. Implement private VLANs for each device

  D. Use DHCP exclusions to address each device

  Correct Answer: A

  A reservation is a feature of DHCP that assigns a specific IP address to a device based on its MAC address. This way, the device will always receive the same IP address from the DHCP server, regardless of its location or connection time. A network administrator can set up a reservation for each loT device to accomplish the requirements of reducing manual configuration, assigning a specific IP address, and allowing devices to move to different switchports on the same VLAN. References: https://www.comptia.org/blog/what-is-dhcp

• Question 795:

  Switch 3 was recently added lo an existing stack to extend connectivity to various parts of the network. After the update, new employees were not able to print to the main networked copiers from then workstations. Following are the port configurations for the switch stack in question:

  

  Which of the following should be configured to resolve the issue? (Select TWO).

  A. Enable the printer ports on Switch 3.

  B. Reconfigure the duplex settings on the printer ports on Switch 3.

  C. Reconfigure the VLAN on an printer ports to VLAN 20.

  D. Enable all ports that are shut down on me stack.

  E. Reconfigure me VLAN on the printer ports on Switch 3.

  F. Enable wireless APs on Switch 3.

  Correct Answer: AE

• Question 796:

  A medical building offers patients Wi-Fi in the waiting room. Which of the following security features would be the BEST solution to provide secure connections and keep the medical data protected?

  A. Isolating the guest network

  B. Securing SNMP

  C. MAC filtering

  D. Disabling unneeded switchports

  Correct Answer: A

  The best solution for providing secure connections and protecting medical data in a medical building's waiting room would be to isolate the guest network. This means that the guest Wi-Fi network would be separate from the internal network, and there would be no communication between the two networks. This would help to prevent unauthorized access to the internal network and protect medical data. Other options, such as securing SNMP, MAC filtering, and disabling unneeded switchports, may also help to improve security, but they would not provide the same level of protection as isolating the guest network.

• Question 797:

  SIMULATION

  A network technician needs to resolve some issues with a customer's SOHO network. The customer reports that some of the devices are not connecting to the network, while others appear to work as intended.

  INSTRUCTIONS

  Troubleshoot all the network components and review the cable test results by Clicking on each device and cable.

  Diagnose the appropriate component(s) by identifying any components with a problem and recommend a solution to correct each problem.

  

  

  Cable Test Results: Cable 1:

  

  Cable 2:

  

  Cable 3:

  

  Cable 4:

  

  

  A. See the for detailed information on this simulation. (Note: Ips will be change on each simulation task, so we have given example answer for the understanding)

  B. PlaceHolder

  C. PlaceHolder

  D. PlaceHolder

  Correct Answer: A

  To troubleshoot all the network components and review the cable test results, you can use the following steps:

  Click on each device and cable to open its information window. Review the information and identify any problems or errors that may affect the network connectivity or performance. Diagnose the appropriate component(s) by identifying any

  components with a problem and recommend a solution to correct each problem. Fill in the remediation form using the drop-down menus provided. Here is an example of how to fill in the remediation form for PC1:

  The component with a problem is PC1.

  The problem is Incorrect IP address.

  The solution is Change the IP address to 192.168.1.10. You can use the same steps to fill in the remediation form for other components.

  To enter commands in each device, you can use the following steps:

  Click on the device to open its terminal window.

  Enter the command ipconfig /all to display the IP configuration of the device, including its IP address, subnet mask, default gateway, and DNS servers. Enter the command ping to test the connectivity and reachability to another

  device on the network by sending and receiving echo packets. Replace with the IP address of the destination device, such as 192.168.1.1 for Core Switch 1. Enter the command tracert to trace the route and

  measure the latency of packets from the device to another device on the network by sending and receiving packets with increasing TTL values. Replace with the IP address of the destination device, such as 192.168.1.1 for Core

  Switch 1. Here is an example of how to enter commands in PC1:

  Click on PC1 to open its terminal window.

  Enter the command ipconfig /all to display the IP configuration of PC1. You should see that PC1 has an incorrect IP address of 192.168.2.10, which belongs to VLAN 2 instead of VLAN 1. Enter the command ping 192.168.1.1 to test the

  connectivity to Core Switch 1. You should see that PC1 is unable to ping Core Switch 1 because they are on different subnets. Enter the command tracert 192.168.1.1 to trace the route to Core Switch 1. You should see that PC1 is unable to

  reach Core Switch 1 because there is no route between them.

  You can use the same steps to enter commands in other devices, such as PC3, PC4, PC5, and Server 1.

• Question 798:

  A Wi-Fi network was recently deployed in a new, multilevel budding. Several issues are now being reported related to latency and drops in coverage. Which of the following is the FIRST step to troubleshoot the issues?

  A. Perform a site survey.

  B. Review the AP placement

  C. Monitor channel utilization.

  D. Test cable attenuation.

  Correct Answer: B

• Question 799:

  During a risk assessment which of the following should be considered when planning to mitigate high CPU utilization of a firewall?

  A. Recovery time objective

  B. Uninterruptible power supply

  C. NIC teaming

  D. Load balancing

  Correct Answer: D

  The recovery time objective (RTO) is the maximum tolerable length of time that a computer, system, network or application can be down after a failure or disaster occurs.

• Question 800:

  Which of the following is a benefit of the spine-and-leaf network topology?

  A. Increased network security

  B. Stable network latency

  C. Simplified network management

  D. Eliminated need for inter-VLAN routing

  Correct Answer: B

  The spine and leaf topology has a number of advantages:

  1.

  Each server is only ever a single hop from the backbone, making network latency more predictable.

  2.

  There are multiple redundant paths between a leaf switch and the backbone, allowing for load balancing and failover.

  3.

  As there are no direct connections between spine switches in the backbone or between leaf switches, the network is loop free and does not need to run spanning tree. Instead, each leaf switch runs a protocol called Equal Cost Multipathing (ECMP) to distribute traffic between the links to the spine switches.