CompTIA CompTIA Certifications N10-008 Questions & Answers

• Question 941:

  Which of the following is used to purposely attack a system to exploit vulnerabilities?

  A. Honeypot

  B. Vulnerability scan

  C. Device hardening

  D. Penetration te

  Correct Answer: D

  Honeypot is used to capture information from unauthorized intruders. Basically, they do not allow users into their networks. They allow them into a fake network that looks like it is a part of their actual network. Penetration testing is where you are purposely attacking to see any valnurabilites

• Question 942:

  A technician is troubleshooting a wireless connectivity issue in a small office located in a high-rise building. Several APs are mounted in this office. The users report that the network connections frequently disconnect and reconnect throughout the day. Which of the following is the MOST likely cause of this issue?

  A. The AP association time is set too low

  B. EIRP needs to be boosted

  C. Channel overlap is occurring

  D. The RSSI is misreported

  Correct Answer: C

  Channel overlap can lead to interference and disrupt wireless connectivity. In a high-rise building with multiple access points (APs), it's common for neighboring APs to use overlapping channels. When this happens, it can result in co-channel interference, where the APs and client devices may interfere with each other's signals, causing disconnects and reconnects.

• Question 943:

  A network administrator is configuring a load balancer for two systems. Which of the following must the administrator configure to ensure connectivity during a failover?

  A. VIP

  B. NAT

  C. APIPA

  D. IPv6 tunneling

  E. Broadcast IP

  Correct Answer: A

  - Virtual IP (VIP): A virtual IP address should be configured on the load balancer, which is the IP address that clients use to access the load-balanced systems.

• Question 944:

  An engineer notices some late collisions on a half-duplex link. The engineer verifies that the devices on both ends of the connection are configured for half duplex. Which of the following is the MOST likely cause of this issue?

  A. The link is improperly terminated

  B. One of the devices is misconfigured

  C. The cable length is excessive

  D. One of the devices has a hardware issue

  Correct Answer: C

  In half-duplex mode, when two devices send data at the same time, a collision occurs, and both devices must wait for a random period before retransmitting the data. If the cable length is excessive, it may take longer for the collision signal to reach the far end of the cable, causing late collisions. To resolve the issue, the engineer should reduce the cable length or switch to full-duplex mode.

• Question 945:

  Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

  A. Layer 3 switch

  B. VPN headend

  C. Next-generation firewall

  D. Proxy server

  E. Intrusion prevention

  Correct Answer: C

• Question 946:

  A technician is setting up a new router, configuring ports, and allowing access to the Internet. However, none of the users connected to this new router are able to connect to the Internet. Which of the following does the technician need to configure?

  A. Tunneling

  B. Multicast routing

  C. Network address translation

  D. Router advertisement

  Correct Answer: C

  Network address translation (NAT): This is required to translate the private IP addresses of the devices connected to the router to a public IP address that can be used to communicate with the internet. Without NAT, devices on the private network would not be able to communicate with the internet.

• Question 947:

  A network administrator is testing performance improvements by configuring channel bonding on an 802.11ac AP. Although a site survey detected the majority of the 5GHz frequency spectrum was idle, being used only by the company's WLAN and a nearby government radio system, the AP is not allowing the administrator to manually configure a large portion of the 5GHz frequency range.

  Which of the following would be BEST to configure for the WLAN being tested?

  A. Upgrade the equipment to an AP that supports manual configuration of the EIRP power settings

  B. Switch to 802.11n, disable channel auto-selection, and enforce channel bonding on configuration

  C. Set up the AP to perform a dynamic selection of the frequency according to regulatory requirements

  D. Deactivate the band 5GHz to avoid interference with the government radio

  Correct Answer: C

  Set up the AP to perform a dynamic selection of the frequency according to regulatory requirements: If the AP is not allowing manual configuration, it is likely that the frequency range is being restricted by regulatory requirements or other limitations of the AP. By setting the AP to perform dynamic selection, it will automatically choose the best frequency and channel available based on the regulatory domain and available channels.

• Question 948:

  Which of the following would be used to enforce and schedule critical updates with supervisory approval and include backup plans in case of failure?

  A. Business continuity plan

  B. Onboarding and offboarding policies

  C. Acceptable use policy

  D. System life cycle

  E. Change management

  Correct Answer: E

  Change management: A structured approach for making changes to an organization's IT infrastructure, designed to minimize the risk of disruptions and ensure changes are implemented in a controlled and effective manner.

• Question 949:

  A newly installed VoIP phone is not getting the DHCP IP address it needs to connect to the phone system. Which of the following tasks need to be completed to allow the phone to operate correctly?

  A. Assign the phone's switchport to the correct VLAN

  B. Statistically assign the phone's gateway address

  C. Configure a route on the VoIP network router

  D. Implement a VoIP gateway

  Correct Answer: A

  Assign the phone's switchport to the correct VLAN: This is the most likely solution as the phone is not getting the DHCP IP address it needs, which typically indicates an issue with the VLAN configuration on the switch. By assigning the phone's switchport to the correct VLAN, the phone will be able to receive an IP address via DHCP from the phone system.

• Question 950:

  Users are reporting intermittent WiFi connectivity in a specific parts of a building. Which of the following should the network administrator check FIRST when troubleshooting this issue? (Choose two.)

  A. Site survey

  B. EIRP

  C. AP placement

  D. Captive portal

  E. SSID assignment

  F. AP association time

  Correct Answer: AC

  This is a coverage issue. WAP placement and power need to be checked. Site survey should be done NEXT because it takes a while.