CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 921:

  A user tries to ping 192.168.1.100 from the command prompt on the 192.168.2.101 network but gets the following response: U.U.U.U. Which of the following needs to be configured for these networks to reach each other?

  A. Network address translation

  B. Default gateway

  C. Loopback

  D. Routing protocol

  Correct Answer: B

• Question 922:

  A branch of a company recently switched to a new ISP. The network engineer was given a new IP range to assign. The ISP assigned 196.26.4.0/26, and the branch gateway router now has the following configurations on the interface that peers to the ISP:

  

  The network engineer observes that all users have lost Internet connectivity. Which of the following describes the issue?

  A. The incorrect subnet mask was configured

  B. The incorrect gateway was configured

  C. The incorrect IP address was configured

  D. The incorrect interface was configured

  Correct Answer: B

  Both an incorrect subnet mask and an incorrect default gateway can cause loss of Internet connectivity. However, given the information provided:

  -

  The subnet mask is set to 255.255.255.224, but it should be 255.255.255.192 for a /26 network. This incorrect subnet mask could cause issues with routing and connectivity within the local network.

  -

  The gateway IP address is set to 196.24.4.1, which is not in the same subnet as the IP address of the interface (196.26.4.30). This could prevent the router from correctly routing traffic to and from the Internet.

  It's hard to definitively say which is the "main" cause without more information, as both could potentially lead to a loss of Internet connectivity. However, typically, an incorrect default gateway would more directly lead to a loss of Internet connectivity, as the default gateway is responsible for routing traffic between the local network and the Internet. So if forced to choose one, I would lean towards **B. The incorrect gateway was configured** as being the main cause.

• Question 923:

  Within the realm of network security, Zero Trust:

  A. prevents attackers from moving laterally through a system.

  B. allows a server to communicate with outside networks without a firewall.

  C. block malicious software that is too new to be found in virus definitions.

  D. stops infected files from being downloaded via websites.

  Correct Answer: A

  The definition of Zero trust mentions nothing about firewalls, viruses or stopping infected files from being downloaded.

  Lesson 13: Topic 13A: Privileged Access Management - Zero trust is based on the idea that perimeter security is unlikely to be completely robust. On a modern network, there are just too many opportunities for traffic to escape monitoring/ filtering by perimeter devices. Zero trust uses systems such as continuous authentication and conditional access to mitigate privilege escalation and account compromise by threat actors. Another zero-trust technique is to apply microsegmentation. Microsegmentation is a security process that is capable of applying policies to a single node, as though it was in a zone of its own.

• Question 924:

  Which of the following service models would MOST likely be used to replace on-premises servers with a cloud solution?

  A. PaaS

  B. IaaS

  C. SaaS

  D. Disaster recovery as a Service (DRaaS)

  Correct Answer: B

  The most likely service model to replace on-premises servers with a cloud solution is Infrastructure as a Service (IaaS). IaaS provides computing resources, such as virtual servers, storage, and networking, over the internet. This allows organizations to move their server infrastructure to the cloud, eliminating the need for on-premises servers and hardware.

• Question 925:

  Which of the following is used to prioritize Internet usage per application and per user on the network?

  A. Bandwidth management

  B. Load balance routing

  C. Border Gateway Protocol

  D. Administrative distance

  Correct Answer: A

  Bandwidth management is the process of measuring and controlling the communications (traffic, packets) on a network link, to avoid filling the link to capacity or overfilling the link, which would result in network congestion and poor performance of the network.

• Question 926:

  Which of the following factors should be considered when evaluating a firewall to protect a datacenter's east-west traffic?

  A. Replication traffic between an on-premises server and a remote backup facility

  B. Traffic between VMs running on different hosts

  C. Concurrent connections generated by Internet DDoS attacks

  D. VPN traffic from remote offices to the datacenter's VMs

  Correct Answer: B

  East-west traffic refers to the traffic that moves within the datacenter between servers and applications, including traffic between virtual machines (VMs) running on different hosts. A firewall is an essential component of any datacenter security strategy, and it helps to protect against unauthorized access to and from the network.

• Question 927:

  A network administrator needs to query the NSs for a remote application. Which of the following commands would BEST help the administrator accomplish this task?

  A. dig

  B. arp

  C. show interface

  D. hostname

  Correct Answer: A

  dig (Domain information groper) is the command line tool to query DNS nameserver in linux

• Question 928:

  A technician is deploying a new switch model and would like to add it to the existing network monitoring software. The technician wants to know what metrics can be gathered from a given switch. Which of the following should the technician utilize for the switch?

  A. MIB

  B. Trap

  C. Syslog

  D. Audit log

  Correct Answer: A

• Question 929:

  Which of the following would MOST likely be used to review previous upgrades to a system?

  A. Business continuity plan

  B. Change management

  C. System life cycle

  D. Standard operating procedures

  Correct Answer: B

  Per CertMaster's own N10-008 book, it explains that the change-management process includes Request for Change (RFC) documentation--resources that record why and when a change, such as an upgrade, was made.

  None of the other options would provide documentation for PREVIOUS changes to a system. Standard operating procedures might document work instructions for handling previously encountered incidents, but not for systemic changes like upgrades.

• Question 930:

  A network device is configured to send critical events to a syslog server; however, the following alerts are not being received:

  1.

  Severity 5 LINK-UPDOWN: Interface 1/1, changed state to down

  2.

  Severity 5 LINK-UPDOWN: Interface 1/3, changed state to down

  Which of the following describes the reason why the events are not being received?

  A. The network device is not configured to log that level to the syslog server

  B. The network device was down and could not send the event

  C. The syslog server is not compatible with the network device

  D. The syslog server did not have the correct MIB loaded to receive the message

  Correct Answer: A

  The syslog severity levels are 0 (Emergency), 1 (Alert), 2 (Critical), 3 (Error), 4 (Warning), 5 (Notice/Notification), 6 (Information), and 7 (Debugging). An easy mnemonic to memorize this is "Emus Are Cute Even When In Disguise." Because the device is set to send CRITICAL events, it will send only events that have a severity level of 2 and below. Thus, you have to configure the device to send events at severity level 5 or higher.